last executing test programs: 2m35.555685834s ago: executing program 2 (id=4857): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x1}}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183841, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy9/hwsim/ps\x00', 0x1, 0x0) writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000000), 0x5}, 0x3) socket(0xa, 0x3, 0x3a) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)=@task_fd_query={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x3373, 0xffffffffffffffff, 0x4}, 0x8) mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x2, &(0x7f00000000c0), 0x1) getsockopt$auto(r1, 0xf, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000180), 0xffffffffffffffff) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) msgctl$auto(0x9, 0xf8, &(0x7f00000001c0)={{0x8, 0xee00, 0x0, 0x4, 0xa771, 0x7, 0x9}, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x1, 0xc28a, 0x5f52, 0x3, 0x9, 0x8, 0x2cce, 0xfffc, 0x6, @inferred, @inferred=0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022abd7000fedbdf25030000000c00028008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x48010) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20002, 0x0) 2m35.172076253s ago: executing program 2 (id=4858): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_tid}, &(0x7f0000000040)=0x9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) futex$auto(&(0x7f0000000080)=0x2948, 0x9, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x14000, 0x0) prctl$auto(0x5, 0x1, 0x0, 0x1, 0xfffffffffffffffd) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x7, 0x2a, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x5, 0x8d, 0xffffffdffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r1 = openat$auto_fuse_dir_operations_dir(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x410840, 0x0) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)=@info={r1, 0x1, 0x5}, 0xf) close_range$auto(0x2, 0x8, 0x0) 2m34.834552399s ago: executing program 2 (id=4860): openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x4cc80, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x80000400000df, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x1, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x10041, 0x0) bind$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x6e) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x6, 0x80b}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x1, 0x20009, 0xdf, 0xeb3, r0, 0x4) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r2, 0x0, 0x20000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}, 0x7, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) read$auto_hwsim_fops_ps_(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x5, 0x7, 0x0) ioctl$auto(r4, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8) unshare$auto(0x40000083) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0xfffffffffffffffe, 0x810003, 0xffb, 0x16, 0x3, 0x7ffd) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e000800", @raw}, 0x4, 0x1000968, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b750, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) 2m34.071583402s ago: executing program 2 (id=4862): sigaltstack$auto(0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x400, 0xffffffffffffffff, [0x5, 0x101], {0x6, 0x6, 0xf, 0x29f, 0x1, 0x83, 0x3, 0x4, 0x2}, {0xff, 0x401, 0x4f, 0x9, 0x4cd, 0x20000041, 0x7fffffff, 0x7, 0x8}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x40, r1, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0xb0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee01}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x40}}, 0x24048084) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x2000, 0x400008, 0xdf, 0x11, 0x2, 0x8000) write$auto(0xca, 0x0, 0x7f) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$auto(0x0, &(0x7f0000000280)='}[,&*}/file0\x00', 0x0, 0x4, 0x0) 2m33.43887226s ago: executing program 2 (id=4863): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x51000000) r1 = socket(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r2}, 0x18) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$auto_SO_PROTOCOL(r3, 0x7, 0x26, &(0x7f0000000040)='^\\}\\\x00', 0x8da8) ioctl$auto(0x3, 0x8010aebc, r0) 2m32.716384707s ago: executing program 2 (id=4866): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/udp_slot_table_entries\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x2001) (fail_nth: 8) 2m27.667901055s ago: executing program 0 (id=4881): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/card1/pcm1c/sub5/sw_params\x00', 0x80000, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000003640), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r1, 0x40187013, &(0x7f0000003680)={0x7, @uvalue=0x2c, 0x4}) pread64$auto(r0, &(0x7f0000000040)='veth1\x00', 0x200000000004, 0x4) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socketpair$auto(0x6, 0x2, 0x3, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r4, 0x921064a0, r4) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = memfd_create$auto(0x0, 0xe) r6 = socket(0x22, 0x3, 0x0) r7 = prctl$auto_PR_SET_MM_START_CODE(0x0, 0x1, 0x0, 0x100000000, 0x9) openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/ieee80211/phy17/ht40allow_map\x00', 0x202280, 0x0) ioctl$auto_BTRFS_IOC_ADD_DEV(r7, 0x5000940a, &(0x7f0000000800)={@inferred=r7, "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"}) ioctl$sock_SIOCGIFINDEX(r6, 0x80044944, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) r8 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000000c0), r3) sendmsg$auto_NCSI_CMD_PKG_INFO(r5, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000001800)=ANY=[@ANYBLOB="c40500002e711391f2980314ae5606d334139fb7795a8ed597a9ba99ac843660ebbeb30a12c9987ac45371aedaed93a7", @ANYRES16=r8, @ANYBLOB="200025bd7000fddbdf25010000001904050056e04f80f4bd6100ee2b001aebc709550d76800a7ce93b3135dd62c626fe640bcd37d516fd32a262c6214afa6a2d3264ced952cffc3d10a4aa47592594f1153c35ee1c01dac04a6a8aaed8b7c1584accebc7ae2cf802fe87e37409f14388c0bee3c90b0f8e0d31fbbe895247242f2a9da585016e29e04c5d39fae5ea3502b7a415b6623b8a6d77f1aef81887a3687913d4d17ff1c24917d719f10bc6b10d2788406de8fecc64e8b2a3595fad7340714967d51fe30b6180693ecb6a15d3e7583f932f0fea8b487addfca7e192e2d6840f0945eec9ec29e5d969c7e34ea83db62581dea68bbdeb8998c75867e58ef3d6983b5cfa593c0422a3894769ac7f54852248b5d655f87a97e854e208c03c8a5339c9d19007dd00cefbf5a9d6c9e53b43bb340fe6d31de4341d043ae227266af9d60d0ee4a2c06fa5f15be14a1342e3a5a2dee6a319cbb8366c61304858af19ad6e905379780f419b5244fc1ceaeb71a2d9d5574b3a79a516ad55cb7b170818572123a191d25fc84a6e9149a082264c2f099e32b19a5b575af477549494dd1a7fc9b9f23b04b11db073e213863eee91acdc17c8b3d7cfd9d214e702d80e060add421dee53909e20fc7d5888a98919785aa5cac42df11b1ce24d1cf433eee1b8cc0f022545c55c6f5bf0f50095cab5c1884f21891e0c2a9fe156fdee0556d739be1577db3d9f853711eae9b62d39b884d72d59fff72177157887b4300552ae25567f45a1648098aeee085e5d35c6b5adc5ab8dc6b3fdde092c82916b2becb24da98b5a077e922ade6c771247defb8d845f123106d4c5799a555ac0bd8d84b08223ccfaa065214c8f1d5d38ee22748439e1044fdfd36d3571418a7e451707b1f5c6af4f5561c724b4d64b8bb791a2166d242459f8b78e05012a1190db430aaf59b1fee2f001aed76bfc043bd07a2885f257b4b7d6f416c5fc883b22bacb4896395d97a3c6f5abdace61b588f0f31c97c7c8c10c29fee19ecf1bba06aad0cdb84416002bcc3256d2687a1c4802df69f1995ce2c56460d032d36109e80e8738322fd55d20a07be1554277fa4709b4b763ffc2ff8260d909046de9b4444863a0792acd3f0379e30382f87fb7531e45d93a0665e9ae558cefc8138bebaf40f0179c3abccef07b90a027c3e3954a75bad42a69732a6a01923c7eb37633d07a2c6def641c9a6e2b5f10c99c3ddfa12a6a0dd935a46b81d1f55e9be377723f40ae5efed773aad5e0e7b16e046d3633540efc43f5b1fbbe36297fac59d2db856ddfb80d0f4432333e9a78fdaaf385f2daef86ee55fb8fe58509cd660dd75d34832929423261e708304e0457614fcc373ea5b7b9381233eeef006f50f07cb6800408fc35eee9eb629efc5da9e83dad04a62df61ae84db432dc668eae2c5cf270dc96bc84706316d4016912ede347441d6f4c76c9df0bed26d3784bbb27565efd2018bbc14141e0eed5f177290000007a01050019d4cf9803316bfe2065469bab870c27910616670ff41ae85f230381eb440aa5d92589dd580f87bb400819e18450cb920ee87eeb06a7a017738f9e5fe9fdb3e5f1c692769a664cd7254223f10fa77c18322fb4ea0de5518e0c8aebd6cf7407640cc382007189ddc5bb9a86fea25f41c14aec810b023dc9545d18d0e42364686d3c6c227538070314125305b4437f5e9f081121f52f4aa6565c836a104b56f7ad622336b1c7db9d847598ebcd114f4656ac80e8628950b62524273c076e12a71e69591342e41a2c015fd3f9cd8848b1dc4fcbe62fa5348a3ef9aa3098c2eb051bafdb241aecc9182e0f751e69ffe9b8e3af2777afb31b7f52191cdcdf4ff03daf828a024e09ecb78f4645bbf1ed0cbb89c12fd5fa6435873e679a818f9d8af0fdc1ede8dccc70c44dbbc02dec90737d3dd5ae83aa7ed3f1dcfdb70361ea38072e91d0e8014be0b1a5855d44e3a84d9d2d10bf0596f07d6acfd0a4f976105580b61f9818623f99d51aa198769b16bf8ca39ec991737b01000008000700050000000400060008000100", @ANYRES32=0x0, @ANYBLOB="04000600"], 0x5c4}, 0x1, 0x0, 0x0, 0x4080}, 0x4004080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rmdir$auto(&(0x7f00000001c0)='./cgroup.cpu/cpuset.cpus\x00') socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m27.428260025s ago: executing program 0 (id=4882): openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x7, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af0510040806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, 0x0, 0x92) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40383d0c, 0x0) mincore$auto(0x1000, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x1a, 0x0, 0x28) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/o2cb/interface_revision\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/123, 0x7b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = pipe$auto(&(0x7f0000000040)) r4 = setfsgid$auto(0xee01) setresgid$auto(r4, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000010c0)='\x00', &(0x7f0000001100), r4) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f0000000080)={{0x401, 0xee00, r4, 0x5, 0x2, 0xc730, 0x9}, &(0x7f0000000000)=0x69, &(0x7f0000000040)=0x8f, 0x8001, 0x7, 0x8, 0x4, 0x7, 0x7ffd, 0x5, 0x8, @raw=0x5, @raw=0x7}) 2m27.083159426s ago: executing program 0 (id=4884): preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x5) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x1a1d02, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8d4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) memfd_secret$auto(0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d00000010001a80080001008703000004000480bf8329c2fcc76c995453541c97171b17c0b53c50cdf96f6dcd8fbceaf845880d923172c5de38a1dbe6779bfa3030"], 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 2m24.9396019s ago: executing program 0 (id=4890): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2ab42, 0x0) sendfile$auto(r0, r0, 0x0, 0x4f64a1d2) r1 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/force\x00', 0x4280, 0x0) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000340)=@link_update={0xffffffffffffffff, @new_map_fd, 0x2, @old_prog_fd=r1}, 0x4) sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) r4 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000002b00)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x20900, 0x0) socketpair$auto(0x2, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop12\x00', 0x2000, 0x0) mmap$auto(0xfffffffffffffff8, 0xffffffffffffff19, 0x8, 0x7fff, r3, 0x4) open(0x0, 0x64842, 0x0) mq_timedreceive$auto(r4, &(0x7f0000000180)='\x00', 0x0, &(0x7f00000001c0)=0x4, &(0x7f0000000200)={0x5, 0x2}) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) process_madvise$auto_MADV_DONTDUMP(r2, &(0x7f0000000100)={&(0x7f0000000040)="c2fe4d65b89089f401e1358c72a16bcdc6a5a92240f01763ed122afac8aed0d333938d0e90e4e444f32f735d1095d983f20eb8ea0ca49c10cc71006e4ed9dcaf2cd8e4f9f475f0a179ed84d873986f9357da294b61b6acbbb98575fe13b05e3d0723f712f41940ffde47142159b614fbd7b2526113baa8eac79f16ef16d841af4945259d5c374442c34859e2c0fd6169407cf9cb50c040d0d16f9b9ea86e4825e0b02b352180ef9b04130119dba0", 0x7}, 0x7, 0x10, 0x7f) getsockopt$auto(0x4, 0x6, 0x4, 0x0, 0x0) 2m24.689830684s ago: executing program 0 (id=4893): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa802, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000340)="a1613e3b7121767e0f53a6f082a71629949ec37041defd7c9ee7242ccd90141e7df70000c4a2174ab17af617a5425700752d2928bdfa70f92e42399564cdd320116524dde6ba9e5201", 0x101}, 0x6, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) (fail_nth: 13) 2m23.983967111s ago: executing program 0 (id=4896): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x5, 0x0) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x42c00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000080), r0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x78, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, "038540f2de1aa1df762ab3d0ea17cf67ddf6bde4319891fb841f61172c8f7f1776943f2aa8ca187afaa402f40e4ca746538265a2681e05950622a6b52bb47ee7b30486ac30a9fb633c3e45b8309ae5765c7183c0319646fc1ffefffbb03fd8baf525"}, 0x78}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-256kB/stats/shmem_fallback_charge\x00', 0x101100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000640)=""/177, 0xb1) ioctl$auto(0x3, 0xc0205649, 0x38) write$auto(r2, 0x0, 0x1ff) sync_file_range$auto(r1, 0x8001, 0x6, 0x2) setsockopt$auto(r0, 0x10000008, 0xfffffffe, 0x0, 0x6) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000200)=0xee) 2m8.695085789s ago: executing program 32 (id=4896): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x5, 0x0) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x42c00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000080), r0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x78, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, "038540f2de1aa1df762ab3d0ea17cf67ddf6bde4319891fb841f61172c8f7f1776943f2aa8ca187afaa402f40e4ca746538265a2681e05950622a6b52bb47ee7b30486ac30a9fb633c3e45b8309ae5765c7183c0319646fc1ffefffbb03fd8baf525"}, 0x78}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-256kB/stats/shmem_fallback_charge\x00', 0x101100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000640)=""/177, 0xb1) ioctl$auto(0x3, 0xc0205649, 0x38) write$auto(r2, 0x0, 0x1ff) sync_file_range$auto(r1, 0x8001, 0x6, 0x2) setsockopt$auto(r0, 0x10000008, 0xfffffffe, 0x0, 0x6) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000200)=0xee) 4.19336953s ago: executing program 3 (id=5338): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.12/power/runtime_suspended_time\x00', 0x2, 0x0) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r0 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x4, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) madvise$auto(0x0, 0x200007, 0x19) write$auto(0xffffffffffffffff, 0x0, 0x6) r3 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) write$auto(r3, &(0x7f00000001c0)='-\x001c\xc2.b\x97\x1a\xf4\xd8\x1a\x1c\xb2\x9db\xb1\xec\xdeGDr=\xc2\xdc\xdf\x8cg\xa10Fzk\x86bd\xfc\x19\x96y\x9cYy\xc1\xc4\xf1\x0fH\x0f2\xa6\xbd\x9b\xe8\x97\xb0>,\xbf\xb8Kje\x05\xc4\xf8\x01\xd3]\x7f\xb8\x83S\xaf\xc5\xceZZlTO\xf5\x81`$\xec=|1\x05\xa9\x95Q\xf6\a\x81)\x94\xdaJ.\x04\xf2\xd7O\xa7=u1\xcd$\x17(t\xa4.\x1d\xfd\xf1\xc8e\x9c\xb4k\xfd\x94+B\x17o\\>4\xb7d5\a\xef\xb6\xe5F\xba\xf9Q\xdb\xd0\xb5\xa6\x1b\\\x0e\xb7\xab\xc3\x7fO`\x0e\x15\xca\x01z\xc23\xa1\x03\xdd@\xf3', 0xfdef) sysfs$auto(0x2, 0x10000000000002e, 0x0) r4 = fsopen$auto(0x0, 0x1) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0xff0f4000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8f80, 0x0) mremap$auto(0x7, 0x100008, 0x843, 0x3, 0xfffff000) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r6, &(0x7f0000000900)=""/4096, 0x1000) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r7 = setfsuid$auto(0xee00) setreuid$auto(r7, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="00012abd7000fddbdf250b00000008000100", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRESDEC=r5], 0x34}, 0x1, 0x0, 0x0, 0x4004804}, 0x5) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x32b303, 0x0) 3.388835341s ago: executing program 3 (id=5340): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) lseek$auto(0x3, 0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) clone$auto(0x801fd, 0x3, 0x0, 0x0, 0x15) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.46378772s ago: executing program 3 (id=5342): openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x5a1380, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket(0xa, 0x5, 0x0) ioctl$auto(r1, 0x8941, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0x2, 0x1, 0x106) sendmsg$auto_CGROUPSTATS_CMD_GET(r2, 0x0, 0x20000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) read$auto_hwsim_fops_ps_(0xffffffffffffffff, &(0x7f0000000180)=""/115, 0x73) r3 = socket(0x2b, 0x2, 0x81) ioctl$auto(r3, 0x89a0, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) 1.928589767s ago: executing program 1 (id=5345): r0 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x400001, 0x0) setsockopt$auto_SO_LINGER(r0, 0x5, 0xd, &(0x7f0000000040)='(\x00', 0x37) r1 = ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)=0xffffffff) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DISASSOCIATE(r1, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000140)={0x104c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x8, 0x2e, 0x0, 0x1, [@typed={0x4, 0xb2}]}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0xffffff24}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x1018, 0x19, 0x0, 0x1, [@typed={0x1004, 0x101, 0x0, 0x0, @binary="73eb06602a2b7f9c15dc845c164d04b93551763242176d92b7fff219c8610a3eb866efb3215fa11ce14e4f9263183cfe3134b3f2500ccdb07d21f6cf0a74b08b60bf3e9aab3fc031a939601f23484e38b05281c5854390195ae0cbb38cf6f426fcf9f2d53b0d1af84e834ddec8f5e702c101b1072ec01c2713c522d0162b541050b8262bb21ed0742fffaf66bbd9c61bde3e99bbb97e2c8a8a6fa47e2d2a979ca37e21efa85e6d33a768ee3c83a8e1ef46a5465a7eb465060dbfe996abc495abe3a006d075a39321cb70c535b4e933f97f60675609ac9e5ad3682d8072876eabafb52f504d358b30048a815ff6e648f16fcbc3ffa40f2fffb50b103d14195e675105cfe1697913078d01ad94e924a841a734e00cdc650d2e1473e3b5ba3707d398c784269cfea86cd046da438aa8282639f468b83694e1bab6ed49aa9a7cd84c41580c9688e833be8b00d370783bfc5730bc037f8cc09c66360bd58df0ace6627fb72ca89b578e0426e59c80722c1b2d9800e34b6c790bcbc1e03ab816036d6860109dea6610e8d1f73658fbaf82d243040f4ab7ec0bdecb9885e42694eb85d38861a1da46654d675630443ca0c0d9205b487fa846419c68158420109cee8ed15d9746c57e7e55001587c41165ff917e2e257769a472cbbd0665dcf479d6073ebd7845af25047dffb147b4e745d79e63edb4a12f0fd851f456ef6d550e79b8b78d1f110360f36a5e8d814eb5c3aa3b8bf44884b13f356d688f119b28555c94cd31a42324829fd4bed6a609ab74a9439ade52097b2758e217c6d7bc236b84ba8bed19c0c2ec41287289f8c7c064fb59ccf5f54c13c14837cdd80cd4af9a83237042361c2daa0b5cb142bb68ecdaf5651bb3f6e96fc009ea450418fe65e17d6ad39487b405aa0d96ed1a11739dd052019f9c1302edf634c066f2ed06626f600e330342a9f5f6ad3d8804f8a5076ee22436260a26271ed67ea84822e4d13394e7d61a4d1ebbb66139eaeb6362e90584f14fd20e9f74869aa669c63858da3dba0fe2375450298775e6fbbcb6cc97ce3ff1e57c5634ff2e528f086e56c5e212dc7441e20ea44a8d7d0bf95d442bf1fef068fe5cd47a90b7c5fa771d7718fa7a59561f2cfb19fa54d25739d854464f118855142d98fa2dd121f9a82704277b32e355f3500da256b1b288e7a24836b209b4752a57b01964d21b41de7e9936dcdac262aad1c5d6b68dd550c4cf85a0bdd442c5caa42343f893b839702526702223e2c9fee2381c866e6875bb8bde5c890d09a3a3c8fd40ea998cc84dda64bc0d1aa99e43f7a9aa8ad52af24c66c65e7e9e6cb73fef06c136b593137394da8596b35445a4ed52b3c17eacdba48ee4a256fd4ec27fd7fd998b35c12dfbcb261b79ed72ec51606ff905846f6b9da01e34075d10fd13f1810c3c3566407f80a1dc608353127a461e317a647bb9e539b39266a2ebfdcf8a62b7eb8b2ae5217d7e54c8df8cc1c696a39af90e0dc610ffe2897df90cd78444a364be6d208f5e9eb449bf2619c7138c734820314f20abefdcec6c52d14742a7f23db12f03a7dfd70f9e452bc26b034a68b479583c7ace60cc4ffa86154e57f3567716ecfa3ddfd66aaef519680ff66fc848c698687610172ed1e5cb677ca750ecb444de51803c934701c70dc89490bd88bf2c2cc2ff5146a22420087475943844bc6bd30df8ca583a75f802c1dcfa760b346c411245552ffcc6608b1970f89ad7c273ca69f1dfbd8c4983d4672256078b034399cbae470c3ec4eccbef118965625cf03945d55e8aa681a3686c4401569b7602e972ef457726a84a43a88a38846d454f51e22401071e84c5fb8ac2171da81e6d4cc414d184e0685a4dd1dc94d536182093b4768d4857bdc73809ee0ed994cdec33531b4c146a4c17ff17fe436ac0727672c0588e01b5befe49c6122a514b3cca2e3afd042402009d3593c0c7d7c4f96c3f52b3984578c7ca53dc347b520d51cce8433416341cbac07e6e7c3c8f6af519e791109e153eaa04c9205acdb4f24265f667382284c9f90b7b83f2eb41d6ed91486da17deb7c7efee36b1e47590ffa4a4024d2c850f8f74a3ac78c801eb904c7247b836a7ca01eea4255175331b75d31dc40247cbe1915578d770aeb5347769dd0611989acc94cde956a3209320fed321a2c913c24e925201020ab330718d12b95fde6831ffdbc5c9f884d788b372fc4fb2d87b2e6a9748114bd0a9915b633532e7abfe0f7a05955cc39233d03ce3b9d8fff5216ac7d5f1bd7361cdf8fe5d1025373d29cedf0cbd06b119245619b3bd7f22ba59142941b61ea46969c8c0836c7f5145b7b8279cbe02af75a576b72bd07790662b27acef6c0d62b61781fb7cbbeec78a1d3cb7ddbe0d9458209afd78a2768083dff7a01abfdd5106301bff1a471699e470f32230f25cde6863d54f55045cdc23b01493b77051332c2129dd126e6447e03a833ffee11b24abefc4966809c2f9b8b9b994d85ea51bffc683fe5fb3c825c7cb7c4bfe123202108c8731374a25fcfb35f2bd0e955520aff6b4def7bc14013f7ea779ae127e1ec1b213f3b85123eda52157fe55e47750f81e74f4eabf92ded0d443f302c49e93714112418facd1fddc1cc1fbc8c2544dec3889f60be75e3645eddbc2e21c7871c37737b06e7bb7542b94ac2963b0e79f54a17b2a7eb8dba162cadafc65a16ebac5db344aa75838b09e6e05bead318b2078b2f8d839251bcf094ab0938952ecac43a3a0deca4fe1107c5b53d1794daf8d889ecca224dfde7c0973fb438fff4c3e83bb44dfbbcd3ac66a26b1233c144b98eae5e014d619097815a81791105cae248ad151fee9d0e2a789437c4edbf6c802f864d663e7f682e403aa0d943524e0bac8db15b814bf2a4ba7f0181bdcb5ca6130d499e60a5bd0f004c9fdcaacfccc17152587a4839bbe512db48e26fe41bef6e6d39db4302aa8ec245cfb69ed0a09d8d63b29fad7f87395269cb5e5587b9c0f42368599bb5ca2f38666d956b9b229076e8f5988d93d9a274a183c6e24e31e7324f3e8b4c327db85bc6d9487ef2db96c66dd64ee16be7bb41c9135624476fd3f545726a78fea4fd4beade81b540a052d5448efec92021510e06402868536d64e7a4ca1fdfeff872e4a4b2a609e800ec8b1eeb8806fa3f288d52d9d3d099ea3a5a84c7bd84c3b1e808e225e5de13eb3c13e519d0be55db97fa34d54f6fd2dbf643c1cccdeaad8987cb4b5fb5a0ce99b202393624f166e8706b3fb4a18540285f6eae4ca3fff3b590ebcab12490e298432d50623fefa6737f4b0296db53afe3ff8383ef2aa02e7e3ae9bb0e47d0809765ad6ab6a05be03246195ddf1c3b88216099f5a2989aea02e4b6092e8b3f79a8dbc8bc967bce3d1599e398923e7fc1ed2d8fe136e5134fd3ec995f181ea70a301d02538e79115f70580b7145bfa6c668eb18aebd25f9db98d4c8860843836d30a6e8066a8b64461d82bf17099a0ddb847f155de4efbc3e0386afecc36e4930da899b5a1fd0069a643b2b2f6648e21761f537a2d0927393b456553b029f2de68596980ec97233074fbbcee83d10b9f6c6f2c742729c631011cb2ba63e0de59e9c9f307dceb971e9bf914c8189774a7bc7713bef035972ee4ea807abf4eda17a04109a23fb4860d39f1c3257dde5e5d59c26f18c51b0a0803ef4dacc7ba7e01e912bac99a3dec7af58f7ce217ffc063d01c7ecfbd1f51fc30e7380ba37226f8a94cded4b5024e38c8ebd63b78beb579c20bbe9115bf7208b4d16e582743c0e4c825f7fe85c7e1fcf35e6c8e2418803c3f99e8b3c2fd27cbbed329dda27e48f4763f64eca4d6aa58115ea3e94e45ecb3d2e25ca506006412e7556e82dad7435306bfb680bf5718396e1782833b2a5bd7a180cd9dae66b028452bf010478e43bbeae27630ef1b2fd5a4ff51f689127e79cba7adc0b784270d8059aa5ac6af35059499b3656403bbd846120d16ccfa76053038343fa9cada86a5ba435ff28925f4a67528f26770953b117dbfbe17ec4878bb45f9562e17f0b12bca8fe583cbbf8d111af0c0a5d10057c173829af1ceb79bb14d4ec79668e8b513724432ed720cb9fef04002320c25b08347ab2345cbc6398ea027b3aee5017981c7a8815db1cceefdf4d0b4b514a9d940b99187b5dc7ecf14b06e36e12fdad9d091ea1d72911099a29a70942dc8ab2af01078f7cf7636cb0a7fdecf062e755a765cbf46c2024d77318f6e160cb2e4356c758ee7b6c2c36235dfbdd9ef009c157837bd741515aafed981a606754f7cb72dc5d3047c31eaba4aac6d62033ea8e962f177c28ab14941843a2814796dd888e5ac4b2af4778ced4d95ef91b46fd7ac10b110c95db18d73adc9fdd63cba3470ca587d39c480aaac1409ff460b9eb9d08076c17fd80acab0c224d6d5fd514875ace8a913b68f5b2bfc4d9f27ea7c020174742df67bd018a155b4552bb32d8774ae384a5cca6219b92112af3047c92b1a9b03c25a722fd3668a8852677834f24b7b44fd165fac1f26a16d1da5cfcf2cadb89e56594223ee67d1df79f874ddaad0695d84021d3304f0a6216a2da38fc4ec12282c1c69f66ee007e95493d154674e365c882805877c1f72e02083c57ecba916daddb62b87a78b883dce3391c10d8f63d4b5d19c9551da98c24578f3ad1b3b8a57a37582b52660f9af890238bd96ba4816dac61867751c33d0df2e24dd80bfee443f15f247ca839cf4169ee8dc9935b3a3344be3b9893ef47b579c4cecd279acca68b4c8183c958e9a3ade513b746ecfe27d5a82468496587fe58e6a146ec8cf57437fb2eb84ffb5afb2f33ba6545813719afae0e1d548d989f40ee68db42d2ee1983ce5f066b03e4a1516a0dd043c885ab1da46ca989ebc73ee807f78e61e05fb2a80e20f393041a23dc376d016ee214b295827f9cfafb520a710615d82ce42ad80717419fd03e0e6239c29c9304833bd5b61e8303fed903facf378e2cdf915dedde5e9c2667a045394d5a87f481c52b8529392aa46bc3be664bf637c9aee115df23872bd2f047509566341aed80b5c035f62fbb98030d0c86e9f30be181d16f76dacc855dea6aba1e6ebe10912fd356d2be5d8b5aa00534acdf5af84e2016d612749618eb862c0aa81dcebb9a4004f8fdee4f6a2c28731ebfc4e1d0a14d75047a4f81bdb9808d080845efc32ad44650a7237e73fd8d285a531675303427509343af8ac7e558312c76020b92b0e7e75ac2b5cbd90ac7aba2d9010b56abd84b349ca99e5017b5ab38359dbd1c7ee92f6bf0ee1004d3b257dd0ca184f88d18b624f319538409b15541a4c5a4de8c230f69d0a5ad38dc31e2680266b6544d3db5bf617dd81cba6ba75e2a715286b2e493e12f52d9208e917e721f95494c51d00aab91194b77102289bb5eed98d0e5cf43ba5500f7b77add525df3709e3069aea33781fc9695aa9982a255c4fe3980c4e699f2f632444754186cc35bc6abca229c81313576d8041223e218e6fc6bd0445e62342b3deb369413516137589f6f52e67e305519a2d03bc26cafe350ba3c46cee3b1dbd5f80e7cbe9bfaea93c7cf28b98a420647fb1b365d6ac442a33fc4906183d702ea235bd5a0e7a63ad1d9ba4bb48ee50e374fa262b14f4fbe15c29c98d6720a45cd069a7d3caa901b3f03080adfa3a2eb1dc954cf0c520d3f5be93d0f50cfd4a12871d9964af581932e7f215f1128ec9e04b4a4df1683ba6c74879816c261dd06e982a5a533e5473168e1e8934346893e73ccb392aca14e57024b"}, @nested={0x10, 0x2d, 0x0, 0x1, [@nested={0x4, 0x107}, @nested={0x4, 0x10e}, @nested={0x4, 0x1b}]}]}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7}]}, 0x104c}}, 0x4000015) mmap$auto(0x7e2, 0xffffffffffffffff, 0x5f7, 0x10, r0, 0x8) pwritev2$auto(r1, &(0x7f0000001280)={&(0x7f0000001240)="b9fb24f6a27e8c48a0", 0x1800}, 0x6, 0xfffffffffffffffd, 0x7, 0x0) r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000001300), r1) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r1, &(0x7f0000002740)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002700)={&(0x7f0000001340)={0x13c0, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_NAME={0xd, 0xa, 'nl802154\x00'}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0x9, 0x6}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x8}, @THERMAL_GENL_ATTR_TZ_GOV={0x10f8, 0xc, 0x0, 0x1, [@nested={0x100d, 0x8b, 0x0, 0x1, [@generic='7', @nested={0x4, 0xbe}, @generic="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", @typed={0x4, 0x21}]}, @typed={0x8, 0xc8, 0x0, 0x0, @u32=0x8}, @nested={0x39, 0x131, 0x0, 0x1, [@typed={0x8, 0x49, 0x0, 0x0, @fd=r1}, @generic="b993ccc624d84bda5e9d90c98598d93931b66da0a0cb380e52e83738009efa291fa894cff9a97c20d493f550f6"]}, @typed={0x9e, 0x52, 0x0, 0x0, @binary="78148a374f1b68d034578e3841aa5954cd9ca8e79bc22a94d9c2d5278347a34cb3678a5b444bf8fad7e310dcc11f27a343fe529ebb37b33b44b989a16c44ff02bd22de7774bec292f9955cba23fc37cc2d23985ba3123df6325ea00afb39e44f25a8a6907ce81f2c0fbcd7a9561d429ea4371cccd77b2d54f2720b0db43ceffa5f8064c123b84ae71fcbb25409590f1c556f50758e0bfcf3f13b"}]}, @THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0xa6}, @THERMAL_GENL_ATTR_TZ_TRIP={0x250, 0x4, 0x0, 0x1, [@nested={0xf8, 0x9e, 0x0, 0x1, [@nested={0x4, 0x80}, @nested={0x4, 0x113}, @generic="d380ec3bb728009ca2e67b501c706d5e649c7c506e9cdc0906ed6bf0d95751c993d333dfebf9dff3db62b56bbedb1ee778000c925d3911fb2e270b439c7ab3b54b188c982e00c18c37c1f534d366d0c520a3dd162220d99759ae72232ea3a1cab3a917548df24df8f05e1a7e8ea55e005f5346ac0b72a6eb25f08d4e360ee9e65e031ffb05b0f9cd90b226df4184473d1c4b1140e2ce1f7bf610e21c14bda1598ba9ee", @typed={0x8, 0x134, 0x0, 0x0, @u32}, @generic="31f26b88297396a86746a3e5d0da1885b56638d2c522694ca26ce88c1bbb9c6bc19f0f853e0489db86824bf8c05ba3cdeb92dd81a03d0b8303cc7c6347d7dcbff5"]}, @nested={0x151, 0xf0, 0x0, 0x1, [@nested={0x4, 0xbf}, @generic="6124fc1550dd401d6afcc1c7950fb1548e5a6c4dfa30f52d388d99f9eb893e5ac9465fa77053fc805949f177010c062ec3adc436df4811c7140ab746458e958101335b9146462cfac6e565829c53d2632f555dfadc0fcc90c07a6291bdc40b66dca168aed337fc22c246", @typed={0x8, 0x51, 0x0, 0x0, @ipv4=@loopback}, @generic="157e958bf9f941b4845f738d564a2018c901e7415f20ecde9c0bb8f4f8dca5f8b454b8e609a05c61ee0cf2344a92f882a3de314f69f974e19d6048652aa378e52eaf41b21503ec66496108af528c4478f9316722dc8c49da3816b0b416407efe9541e4de0f84146bd170a066ec1fb60abeec3d77e661a1456a209a64a4b43b2321de49ade3ccb11159a7af00f27d3b2a44a3bb0e512dea7a7d7a6b66c66b4c1a5dedfdb0786e6bae4402f7fe1b945ed34e18af7807d3a31db159a73ce9977ea98fbb9bea5aaded9410888ea66593c29e405b4f2eff6037"]}]}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0x3a, 0xd, '/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00'}]}, 0x13c0}, 0x1, 0x0, 0x0, 0x20004084}, 0x20000010) ioctl$auto_USBDEVFS_DISCARDURB(r1, 0x550b, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sysvipc/shm\x00', 0x1a5000, 0x0) write$auto_dvb_dvr_fops_dmxdev(0xffffffffffffffff, &(0x7f00000027c0)="b63c5263c7dc15ad412615982346c23ddff17301f9afde0e57", 0x19) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r2, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x804) r4 = openat$auto_rts_threshold_ops_(0xffffffffffffff9c, &(0x7f0000002900)='/sys/kernel/debug/ieee80211/phy7/rts_threshold\x00', 0x400002, 0x0) fcntl$auto_F_SETSIG(r4, 0xa, 0xb) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xc, &(0x7f0000002940)="a6045e9bcc07263b55ee55bafb0ba02080f93184fcdf646a803192b35f7c0d35c4abb9e82945ef458e9c5973be6ac15c20ea04240d1bd929593061ef840d539a2ee2ed0a4079e43733c05357c0f1e6a48e17e6ef893f8a250815aa63de6c8edd2fa3347ccc6f0d349d4d82186ea976e05291e23139b61df112d2274bef78f6460ff91cf79ca6da309fe3208ce87b89e28ec36b5a43e4ff2593df80e8c16203ac9d683c670d5b745fe3a0aa36892ad8713139d9d74dd5") 1.802042533s ago: executing program 1 (id=5346): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) mincore$auto(0x1000, 0x4000000, 0x0) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001080)=""/4086, 0xff6) r1 = socket(0xa, 0x1, 0x84) socket(0x11, 0x80003, 0x300) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/dev_snmp6/bond_slave_0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_set_self_attr$auto(0x8acc, &(0x7f00000002c0)={0x60b, 0x6, 0x9, 0xa1, "5f058a326da825f436cfa3768cbc8c98f4528a89b58d5664b9bb234d5cb6778883b2f6005d09fdd9abbdcd1200c138bbd768c66c8abd1b8e5d1a15741992c9facb5cb1b13da32a909dcf295475ee70876a8bb28c5d098c2e168b7d1c65264146464f346c15b7dbd750cfc1a36ea2dbe4c62be0a98c2977ad4ec323ce3355099c6efb04b9cfbe18f0ae7b738a688d5e7b3f6b5b124686f503291671b491f74d30f8"}, 0x80000001, 0x1) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) close_range$auto(0x2, r1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mmap$auto(0x0, 0x2, 0x4, 0x50, 0xffffffffffffffff, 0x800048000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/net/bonding_masters\x00', 0x82081, 0x0) r2 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$auto(r2, 0x0, 0x9) ioctl$auto_BINDER_SET_CONTEXT_MGR(r0, 0x40046207, &(0x7f00000003c0)="d7a75bbb8891312d24440805b84474e898495c8e93eb2310cb4b7a84511693e2ceba666f888ef8236c35cd66ab4fe6010fccfd0480b3cec2904e1ccbc3c6b0867958ff272d14a7455fc768a70811bf585af8951aeddfb67913352c543b373916498d32a5053ce524c878ebc95026a75a0f01fd7d765679535505784305f4f418174a44457e104a6387227b29a3624645bfc8a66fad9326e737ef847fc6a2a23f86e0b9bc8fb7eee9a69856cd1abdbcb4ceb59ef2408ccec0ea7a30d2051bd2309dc6") sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40000) 1.55515952s ago: executing program 3 (id=5347): mmap$auto(0x20, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x200, 0xfffffffffffffffd, 0x0, 0x0, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xc, 0x9c0b, 0x44eb2, 0xffffffffffffffff, 0x300000000000) syz_clone(0x90010280, 0x0, 0xfffffffffffffe36, 0x0, 0x0, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a401, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8dGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9c2K\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/164, 0x100000a3d5) setsockopt$auto_SO_TYPE(r0, 0x1c, 0x3, &(0x7f0000000040)='\x00\x00\x00', 0x4) ioctl$auto(r1, 0x540a, r1) mmap$auto(0x0, 0x2020009, 0xfb, 0xeb5, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r4, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) ioctl$auto(r4, 0x4008550d, 0xffffffffffffffff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) r7 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pread64$auto(r7, &(0x7f00000001c0)='@\'&\x00', 0x5, 0x5) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000000c0)='-7', 0x2) madvise$auto(0x2, 0x5c61fa2c, 0xf) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) read$auto(r8, 0x0, 0xb4d3) 1.350358955s ago: executing program 1 (id=5348): socket(0x25, 0x1, 0x0) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r0, 0x1, 0x2, 0x6653) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000000300)="5c60af5a41e0c2e96c46d5125a584ba9d9b3cf382c2dfa4fb2091200"/38, 0x26) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 557.492463ms ago: executing program 3 (id=5349): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) lseek$auto(0x3, 0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) clone$auto(0x801fd, 0x3, 0x0, 0x0, 0x15) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) 368.446789ms ago: executing program 1 (id=5350): mmap$auto(0x0, 0x4000d, 0xdf, 0x109b72, 0x7, 0x38000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) sendfile$auto(r0, r0, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x8040, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x483, 0x0, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x200081, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1c/sub4/xrun_injection\x00', 0x40, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x2, 0x7ff, 0x4, 0x7, 0x5, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x7c, 0x8000000000000000, 0x1]}, 0x0) 318.142505ms ago: executing program 3 (id=5351): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x7) 179.411422ms ago: executing program 1 (id=5352): ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x6, 0xffffffffffffffff}) getsockopt$auto_SO_NO_CHECK(r0, 0x0, 0xb, &(0x7f0000000040)=']!:\'}-![]{}#!^!][\x00', &(0x7f0000000080)=0x5) (async) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$auto_VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x3, r0}) keyctl$auto(0x40000000, 0xee00, 0xee01, 0xffffffffffffffff, 0x53) (async) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r2, &(0x7f0000001640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000000180)={0x1448, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x19b, 0x3, 0x0, 0x1, [@typed={0x14, 0x1d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}}, @typed={0x8, 0xb3, 0x0, 0x0, @ipv4=@loopback}, @generic="caf5ced2e77fe34192bb8c42bd8a82be3f1da1f73becfc8c71beefb8afa942084afe29cbdc719b35b3c61f204d045fb20b3050e5028ecf3f815a63b9922a2581defbd40570114e2c3a55dd1b77a867029baa1b671698a2d31dc856acab4e170a5799bc5d3290e1a3abdfd381bde58a51abd8eb6aa93847e4db9a1037a23c7530af4d27435a99466d833b4fbbc16e180e38db188611485342f7dd1b5f94613f1db49837700060a095eedae7650107fb68776bcf361764e1a8b8f9497ffffb9ab875eb32623e1bf26512c778b43c3995245d1923", @nested={0x98, 0xbd, 0x0, 0x1, [@nested={0x4, 0xab}, @generic="ea602c7e9a6ceef5aa4172e28bebb3737e998787318f82a494cab7a5fc20f4857e1d6f09baaa1eb30e17a30ffe2e7b51f927df6f73291cdedf315bdd917e933e7b25e7379f1de5d22f49e8f6752b1759d531cc462fc0148c230063006735a88e854de9981285c1f94c6197482081aafc762a04423f3a70d7f09c45453d86f7e7293a0b590ee1db26fbe0d5d51f9fedec"]}, @nested={0xe, 0xb2, 0x0, 0x1, [@generic="cb1facb27b58", @typed={0x4, 0xed}]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x1296, 0x2, 0x0, 0x1, [@typed={0x16, 0xf7, 0x0, 0x0, @str=']!:\'}-![]{}#!^!][\x00'}, @generic="d288c6218f5aad156a8786c211ba6bdf4a9c0a32bae83f6852393fee8c63c0b5cef2fd463ad1faaefe0dea61170ad1845606ce9235550fd03b6780beb2a7bd001bcf7a0c9f5a336b1cf881222b83926c225160e47f85e7fd7be6f8dcc243564f5bfe0f00cc57f5b1d5f368d417e18a5edaf00e7515b99f4b61c526068edfc99a8908716cdbcbfa4494bba66b40e09b2da6ebdeb227ae295beab55d8defc09b25b48b", @typed={0x4, 0x95}, @generic="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", @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0x8c, 0x0, 0x0, @u64=0x849}, @typed={0x8, 0x13, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1a9, 0x14, 0x0, 0x1, [@generic="0d50c7151268420527f49321e2c2724f84c9ab136e094d2ae11a31d35c6e38365c0f5036bb1317827ef190b8c661c40975fd9cc8ffb1e6054ab6e8d4db7fb8a55fb64046cf1b3387e180925e1e60114c412b72cc4ad236b011fc255177d90e3e88efc05cb34eed58d1db175fb41ee364bbd8079150419c07ce81bd9ec3e0a739ed52cb809e4639d762c27833747167e953c6ff91ca5d39dfcf4d1462e5e980dd85721133ca718ce8678191cb5137be46bd674fe14017ac34f5eb42f214dbbefd2bb42b3ca80ecf", @nested={0x4, 0x116}, @typed={0x8, 0xfa, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="59dd19d2634499ba0458ef70707ee30d886f08aeb055c6b4efeee70b5fc5e669a4a446e1afecc86a7bddb191091ff39bf75250e57c4486bebe7117e14f31c2f72ede757cf850d364e7440b5b22052760e2189b7d0faba855615ea4f788754a1755422e1704da00d8afa6f873052e3bf0888ce4d4ead64e6559893883bfba5fbf8fd5e43649c1f8f53fa2de0d7b9e4873273ced54dcafb2249ce64d9b88ca6906bee36e64d2aa9164210e4c5940040712206ee6f759d8f323295050fc880bb716052801ae9219553322c74aab33c8", @nested={0x4, 0x8c}]}, @typed={0xc, 0x2d, 0x0, 0x0, @u64=0x8}]}]}, 0x1448}, 0x1, 0x0, 0x0, 0x24008040}, 0x4004) (async) shmctl$auto_SHM_LOCK(0x656c3e3d, 0xb, &(0x7f0000001780)={{0x40000, 0xee01, 0xffffffffffffffff, 0xff, 0x354, 0xe7c, 0x3}, 0x6, 0xe33, 0x8, 0x0, @raw=0x2, @inferred=0xffffffffffffffff, 0xfffa, 0x0, &(0x7f0000001680)="4ebfe3ca5cc6d5de122bc8eec20e3a782c22cf126b4e57236f9ff979c79385aea1d59092eb441d6da5d1482bfab6f68ff990d82cee9eb25e52ad4fed9b9733a0d38052da9a63260a3261d2aaf12980e021859a713ecef8449a0366ef742286ac9908dc677c0210ed1a09158fd615380304a390bdea6d89fb0dc3f4d62672b74d008849596f03b7be9af02ccd82df8baed1763e75f29b18c6f35623b946", &(0x7f0000001740)="d2f57bacdee56cc203efd15ae6c127d6608e126a040ec0543b8604"}) keyctl$auto_KEY_REQKEY_DEFL_REQUESTOR_KEYRING(0x3, 0x7, 0x0, r4, 0x1) (async) ioctl$auto_PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000001840)={0x800, &(0x7f0000001800)={0x3, 0x59, 0xf7, @inferred=r2}}) (async) setsockopt$auto_SO_DOMAIN(r0, 0x101, 0x27, &(0x7f0000001880)=']!:\'}-![]{}#!^!][\x00', 0xd5) (async) r7 = fcntl$auto_F_DUPFD(r2, 0x0, r0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, 0x0) (async) r8 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f00000018c0), 0x20200, 0x0) close_range$auto(r2, r8, 0xffffffff) (async) kexec_load$auto(0xe, 0x6, &(0x7f00000019c0)={@buf=&(0x7f0000001900)="5d06a80eae91931fa8eaebd69408b168010a0b1179a3652fae1c120d265512b9ce92005cef28f8e2410b5897b24cb34cd1e60f48b86ee390d74b77cacdaa3f4a39ad3260da23c1fa81b706462dc7d3d6624ffe123a19db2090b5e397ac5be9f4f0b91680730942a227890b80d5e094fedc5922f421306d5a9ed8ec48b9aaa5123f28cbdab858050f588c30d03e1474c6c1b104e136001955112cb2fa06f250e613e004216ea7938e14a546566be7", 0x1000, 0x9, 0x101}, 0x5) (async) ioctl$auto_FS_IOC_RESVSP(r6, 0x40305828, 0x9af5) (async) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a40), r0) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002000)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001a80)={0x51c, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_PREV_BSSID={0xb3, 0x4f, "ff7c468d8610306d68ceb5335bde907a2dd2f9d387dddd5cd1ec247975ac36296e8c792483ada683169ceb83f76a20f1a32e3b426e64728a6724a3b86b5d9e9ce6fd1ffc715762ce0209e1e191eede08c322a8036499bc41155055d57b532e8ff31f06f4968fef3c306673fdd8f08119e56fb1ca3769705f4169a9332734a01f031ca2002b0f5210e1d68a3f42cb3260b2ddd163158cc726886b28eca10b16da6904bd6788c365838f52243bd8a98f"}, @NL80211_ATTR_STA_WME={0x24, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_PREV_BSSID={0x82, 0x4f, "38a70b726f2099a2ca703516dd4cef9b63cc8842029b325ff050d659e389c8aa552bdbacc63dd87fb201fd80ebd59bd8d5396590e1cb17be54b425cd55c672d1a038f6d47899269f384924eb0d86cb4048e057ccf709cd6564171c1b0bf2eb34d761fb5bbb7298475f29e4da156b2419baa444f5abb18f90ff4db9d89ee9"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x45}, @NL80211_ATTR_BEACON_HEAD={0x399, 0xe, "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"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x51c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r10 = openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000002040)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x400a80, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000002380)={{r10, &(0x7f0000002080)="771c67b9d1645c8046bbc76fbd69f9367566b022435cb1f8041d436270d553cf075a919a19f2d94704f86eb99c9279bccb1e0c67b72e094933fe9b7b46eadd65ee45cc077ee415a6", 0x7, &(0x7f0000002100)="1311d290f29e479f8f7692411ddbf447717a653ba8145099f9098d003cd0861835e3fc19c735e5746a9c71e5daad3417bbfa3411d94bb370db35671afb241bbafe53f776141a6940caea3f26df0815ed6f425a5c00fedbe757cff88b410b9d12cef167c0eec14de0a45610f8564b9645a7fd2447bc8554a9845f88d28ba3b4c210586ce8bc7d61a5743f0c9b4568831c053fdbbe6f5ca7bb5752902cad6afac5c70022118ea43bf72ed22c3cc9b8fe3ef89d0992d1", 0x800, &(0x7f00000021c0)="9365729329275347b5766a72dcfc5c6393715dd507333c897a42472741b20969ab2c3eaf9f8c85ed2c0bc51dd893d0184e9398e8419d927f1801a9e911ae996495c2070f9c90e46ef7d4c4f4278279eac1abe3329dcff1862db753f8c057d0aecf344895ac887ca2f723", &(0x7f0000002240)=0x7}, {[0x5, 0xb4, 0x3ff, 0x7ff]}, 0x1, 0xfff, &(0x7f0000002280)="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"}) (async) r12 = prctl$auto_PR_SET_MM_END_CODE(0x0, 0x2, r5, 0x8, 0x6) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r12, &(0x7f0000003880)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003840)={&(0x7f0000002440)={0x13e8, r9, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_ADDRS={0x2ef, 0xa6, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @fd=r6}, @typed={0x8, 0xe9, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x1dc, 0x53, 0x0, 0x1, [@typed={0x14, 0x34, 0x0, 0x0, @ipv6=@remote}, @generic="caaa5de7d9bc5cb7b0350159acd962a2b5db4bb4d7efe15d902fd6383f2a074911bbfbce7437fa96185b83a9b08ce9b33c142de9dbc7e285329678f3d920eae8c982545683183e4cd34e9c599d8270634aca9c17c035eaf77c18fad25441cc287d1f498d907f4dfd23448c73d1404fdb2fab35ce7a415c01eb6a7c04d0016d3bcd2d780bf0a63370c5f9fbb20422d1d90dbd26e4b10f2befca23cd50", @typed={0x8, 0x48, 0x0, 0x0, @pid=r5}, @typed={0xc, 0x9b, 0x0, 0x0, @u64=0x200}, @nested={0x4, 0xe3}, @generic="817d190ae90fc6eb57fb04c6eff2e5abf89f9c811175316644a8e7451cec1c699d51ae2490b14256d605a4fcbccee36dae21a01b9be6fbc2b0d2f725d1873e988cba1b506aa0ef7a46312be89467cd9ee65e58ecc79de22b5cdafe4e60a722f6b56932e4224e86c8181921a6d0d66689c222a3db0e27b3ce22e20952a3d8c05db38c54b2f6e8aa78376563d3508f309efc17b9112ad465303b1e9ac29418c7a4d72a35976bfb15d22f515d626bd565dd90cfded23628c2df05a551af391de5621c8b0e11dceea18a310b", @generic="482f6e07f15ccc8fe7860906b247e1f9c78eaf907ca334431ba3e9eab527ccdb48a5b9cfaafd744b38069fb113f78d9b6ac2581f1c06d6753b55f47f09b543defa28e3a7ccb4"]}, @generic="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"]}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0xff}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1018, 0x75, 0x0, 0x1, [@typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0xa5}, @nested={0x1008, 0x50, 0x0, 0x1, [@generic="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", @generic="d367d312"]}]}, @NL80211_ATTR_MAC_MASK={0xb0, 0xd7, "769d2593432d1ea92daa82c31ac8419a720be4012d2b5fe4163d9f62f2a8a1a2831608e5617d8ceaafef231f02c7491154a7e4c4900e86a57cb10a0627588e585d969b9afbaedfcd876604263279b51a8daee59b1b71f080ca9ad76afab3ad812512c6f84e11cbe382560735dfcec87b1833ec0c56e06bc141ad9e2bd8487ad329ff88e9b71717b864be661dd962275f3c2a59e5fbeaf6a13d569e9a18663bb0660c9676638ee5c566c96226"}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x80}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x7}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x4040801}, 0x10) r13 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000003900), r11) (async) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r11, 0x4010e501, &(0x7f0000003940)={r1, 0x1}) sendmsg$auto_IPVS_CMD_ZERO(r7, &(0x7f0000004040)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004000)={&(0x7f0000003980)={0x65c, r13, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20c, 0x3, 0x0, 0x1, [@nested={0xe9, 0x9b, 0x0, 0x1, [@generic="3ea8c8f40781372b14f0ae942ecc4d8f9ac3cd25756e5c6e17df9a14664052b0674bcb51417280683bb1967a2091544aa597ddd131c8cf77", @generic="c1a149705fa45343d280d02d08c217985e049793443499ce08b0eda0193d8d9fc1dc87bc90c884891aee0a1a6bfb4cdea50307527f387240f0fd66805d239bc4c543ceead31cdf33db693fa131d423ceae2b39a566508850c8d1dbb9abe48d6419d91d3d52277dbf326664156a36f50969f954a9d83cc2e991c652b4ef454e5eb75eaf0b79f00b64ccf9e1dfde1c07a9d28c275192118f8e63e9f2488cd8a6cf4ca14c412ad2343ae53d52da88"]}, @generic="d4427a6ef75f68378f3942b235823955eeeaa0ba0a04bd64db53c6602d867bd8ca8d83eda37401afdce59a89abd358e9c0bc407316599fd544a973eb466e2724e92ad9d43db7c7ede81d8ecef4c399c9bffecd69b2a513cc3bdb5c2a10d9218660aefe0645ec7323544310a87816ebee478367549c95", @generic="48fd011dae4781046e9bceabe2a94668b10795488c84d08fb9845fa4b9a517f32f42beb635b5c39885aa87dae789ea64b3f7cc72df790ebcfc6d86671f904df4ec97", @nested={0x64, 0xba, 0x0, 0x1, [@nested={0x4, 0x84}, @nested={0x4, 0x149}, @generic="adffec62188a24ca08aa48eb74926a38b8528e1af538ba2a70fe88a7406a13235473b336c9973ac8fe14861dd7605bbe0c0ba9bb049fa9931c896ad496eea53f988078f736544aaf", @typed={0x8, 0x4a, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x10c}, @nested={0x4, 0xf5}]}]}, @IPVS_CMD_ATTR_DAEMON={0x1c6, 0x3, 0x0, 0x1, [@generic="34f7de3b349ca5de738cec0a5ec212fdb82aaa00b1532d537309a9be9e56c6fb4d6dab4e6934be3ca7e2397ee24635791104ae305928971683ee9a326bb96720ec5429afa3629d10681ed91b35506130d681758f1c12f080587f26233dd8ee", @generic="b6f227cb8f2b76770d52f0953c8f170d3166327a37b3bfcc412b276f7b6e4412c8a68962d1c5b029d432f2db7f4a99b13a83b17a0cf08e1698d309424b658d0aa9db1c0f434095715eb8dfa246008c0629aa6c34a484ed4191c5dab489caa12c147ebd13e0c95513b6e4e67ded3170e5d178b022f4a503eea3fa68039a2143912230cb2b927c016c7284d65476853ad65aa9805ea99eb0538c4177c859f943bb89323ea485eefe2a5ee1dbce4ef2c76b87177ee7d22818c9", @generic="19cd17bb1c06fec71280b4cf4cd436428bfa3bfcfd4a91e8f3e0919490a3f6be555d8e18e64858a4446f063ea8d8c40b3ff71ee7da3d473d715761a932ddd7e89e020744a3bd50eb4723c9a1dedfd421441edacd7e0cfa02cf43a51765bf90ba4431d2e1da4f79643497e5fb41d0afc7f61b5d178b7b79ae1fab5d4a81b88db7517f38f0b1a469c5703142a652af1d7e901c33ef776f5dd2e98123baa42e5a2665096690d9fb16425d17e9"]}, @IPVS_CMD_ATTR_DAEMON={0x253, 0x3, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x134}]}, @nested={0x1cf, 0x127, 0x0, 0x1, [@nested={0x4, 0x73}, @typed={0x8, 0x13b, 0x0, 0x0, @fd=r14}, @nested={0x4, 0x106}, @nested={0x4, 0xa6}, @generic="df4d19a5016b3b01e7ddab363715d25bc53dc10f9145a95d2290de08381c9f9f2c16c51671e4e250cbed963c3c9afb9cbb32eea36ea4199b97d34a9d7e2be73f6b4879cd752fc10bea8851e3a1d6efbe43d6900aa9a1fb4b1bd495733b692e1607b2403a1edc4c2f147b249ceedd198255ba6541c17cb6f08ac1cc75ecf66cea78eba56a96286215f79ac7f71ef062f52173c2402d917910d6b54bb4c9eb329b4ea43f82448d43a3702b1f3abefaa28bb4ea251a262bcdcbfb54ebd6e3485e59b56fd2c9f61ce89e2b3c920cda2fc10e9aa81fe3cb368e6f5f0f84e9", @generic="d9a34e0cd6febae9685457b1eeb997d3ade8c8e0c8867fa21290ff6394aa75a821a70e7c3e975579ee89324645e7ec96ea17b6a7c3266015d9b23a69edaeff6fcc9f80c7f34d35ca975b4ceec0e4076a9266979ddd9559b60b6894676de855671357d838ed6a8024cd6ae3a781e00a26233c68920ab6680f53a07b2c47a2f7337ed62a1fe9afed110289c3ac597e7b614dfee2", @typed={0x8, 0x3b, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x125}, @typed={0x39, 0x9d, 0x0, 0x0, @binary="d6fbc23ca461285e0c1786fb7cbf0690b2d91fb9316338a1eef1e4acf20f79db7b658f8fe0965c0f724d030954746591482dde309c"}]}, @generic="39279f74a33625294d7879e8b100a00e8125517f093748db7aecb35c23d012f9b20c987f3c918961ecdf6694da6aa79d9d0e4a95e889e3f5ec4422dd2dd3c0", @generic="e04f15a9ad11d2e2ccd6412cf8bd0291c4f7c26efdec350f92662008a65f7f4ca1b76ef98a02e6c8cb02d6d97be8b9e46c65a463d4db09ea"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74eb2ca9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x65c}, 0x1, 0x0, 0x0, 0x54}, 0x2400a090) sendmsg$auto_NL80211_CMD_SET_PMKSA(r0, &(0x7f0000004140)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004100)={&(0x7f00000040c0)={0x1c, r9, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}]}, 0x1c}}, 0x1) (async) r15 = semctl$auto_GETPID(0x4, 0x1, 0xb, 0x4) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000004980)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004940)={&(0x7f00000041c0)={0x75c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7a}, @NL802154_ATTR_SEC_DEVKEY={0x3dc, 0x2f, 0x0, 0x1, [@nested={0x230, 0x4c, 0x0, 0x1, [@generic="97a6dfd1cec028e7548a664455d99f790c68148280f5792c1577c82f96804f240960f3e8a33cb94dc9921de872dc2c372ffdbc181934f48bcb1c319a396063cc42f27a828c87e6f9efa6808127b0ede0b0812501a18eba2365499202dc6beafd9480758ba206677f140e1afa5ee729f3a1ace9213b7bd4de8112d3bdc5e4f36220f88f2b4fb559efa23608df", @nested={0x4, 0x1e}, @generic="6b93750e145f6a2b58c80d98d459ac16195072e05921140716d5748e04dbc50723f3017979ecffca0b57", @typed={0x14, 0x94, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}}, @generic="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", @typed={0x8, 0x63, 0x0, 0x0, @u32=0x8}, @generic="7f6bcf0894841425e273d65811800036def828598190f5142d17d2a6fbb6d87f0eb07680b27c994305c055fdf64451e3beb71e3d33dcf67a792936cda31b8eebda7e6ce01b58b87c6283", @typed={0xc, 0x122, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0x113}]}, @generic="500f80b1a104c6f960e8b3966bbdb50b3dd8b8fd1970c7a66ec7627a29471cd542d4b9897458a618b45fe1e92b7b5d04d6ea8855a8c4ac03889faceb66375b0eb52a1c2baa3d385c074c97e683ef9c39d55e1d50c377fe4ba3b6c585b251d8da795d39794d0c4cf75ac7b683f5a22a097c0ab06c5b72300cfe63553ebaa1793e7db88315b63cb45ff0566619f0093c06f501c214236b9d143d0ee2d1b4ecbce3f3d7cc4af4a8dbb0dec08d7f2f73c0dcdd337b473005279951a9be524a", @generic="ca89bb1bad6c03d9cb80872a62807d87f0a0a31987eef38a8d977fd057309739a163c35de7cad1886be858085f24ab598403aefdadeac624837827369263da54be0dbf527d5b2bb2a50145779afc5c7ac8d445d9bbceb9c013043813c8916f9d3126e1cf99bc44cf8df9dcc94d7bcdc0be93e8c3e0d964212356f81e0818aeb2fbb25c0f874d579973d35bdfbd8ea66b5c86ece37171abd04f7a13c804e94da323124fa7c3df80", @generic="4093951e7f2a130d58650aeef87c42c3a30ed799852bef96f9274ecbdde6460d9d556acb9b8b41756d3583f51166bd7577897337651797bede4022c88ed2b211d353f90d"]}, @NL802154_ATTR_PID={0x8, 0x1c, r15}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x10}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x34a, 0x2e, 0x0, 0x1, [@generic="53fa4e6a201466232271540da49467323d8a6089a30e2b141b07d6b8619de339d13cf7da070e2eeafd037ba181b82358ef81d5e0654d3334aac15677c52a1695a07f882943cf001f9c7fca237647a588e9165a5dae73b44a2faa0b66bce5a5334a234148b8236527a5ee9ab744611d575f23516f75624c0a6c3bce261a93944cf67adc388de7386a0cb802117e86b9f48b7cdc0f69188b85ee48bbbe6adab2f4c1fecd96cdbeb006acdc24adce8a359e5b1677eca1ebfbce6586f3f9048cc6d950b65da11772bb5119b2545bfb790f703b76b50ea1b820143289789785a5d1e8b975b557b8", @typed={0xc, 0x35, 0x0, 0x0, @str='nl80211\x00'}, @typed={0x8, 0xbb, 0x0, 0x0, @uid=r3}, @nested={0x1ef, 0x27, 0x0, 0x1, [@nested={0x4, 0xa2}, @nested={0x4, 0xad}, @nested={0x4, 0xb9}, @generic="b73f0a0d36", @nested={0x4, 0x142}, @generic="500d002b4880da45a79e864023a2b031c38aac33fe9b7ba6dedf294cdab74479443cb5180213c5e191ffb84dd13ff6a2e98aaa1d16d14aa73c72166de2a4ecd08dffb06d8046c017ef0e14cac0b6f45ca1f87d11f115d910f55626b15daba8255c5b12e824850be5a873b255e69077a623d22a03d543b5e638e79a0e738773ee43954238e1d2b793333135d7a24113881e8ca193c51d60e4c6b3944dc65cd18038a16d76c90b2da424fcfbc7ce1a62a6baf9dd8e0a504f5a596cb08d43c2fd4dbe7a80f5913b51c0a82f5df545a7fe1767", @nested={0x4, 0x5d}, @generic="1a832d7205a81fcfd169c604800cdb1fbc8a66e7a7c66ca04f9daa582c26a337f6c658e4e12df8c8f161b988e45640895aed8800a977c74b2bfa99d5ab43b61655e6fc0141a330e2d81c6989d67dc6708d60438cd0", @generic="1b633baf27d94e248de68d26be978a6d002bf4ec4d48f1200538c006e44670d7ad8f8e9cf40385f47c3d784834675d7f98df6d810f0c1f5c6f8b051e4ee16bb119f296f49d9fb4ddcec8c0c5ba1aa4d33e980bec7de8e9bff9afd0115efc654bdf29ac121030294bf32a44a3a544a319d9522f705d2f745c0627e9293533e6df99e6fac95d9bd912ad66d6013bd9da84f9b482287ae4adf91c240073ee96c8189af8e6ba975d19ba", @nested={0x4, 0x129}]}, @generic="0ca6098b4df1b78adf7b5c38ce58ba87f2a860679bac6247e74507ae073671ddba3ecad63a9ce372392b0306ac43e4d3e06a1a17b049c40550553838cf6892b51750270334812dfe32c13453ca", @nested={0x10, 0x82, 0x0, 0x1, [@typed={0x8, 0xef, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xe8}]}]}]}, 0x75c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) kexec_load$auto(0x9c45, 0xe, &(0x7f0000004a80)={@kbuf=&(0x7f00000049c0)="d140683393419d6878e5d69704c1e1455405ed906ab976bfaa1d51571f13555af3f46cc8058dca43703b35b97f54997000038d1c0555d0b7190f0eae41198f524c3ce059d542fce4d76aac44f1c0136c93c3f5b0edd3f18e5f5ce246a629fb49cfd089fcaae638460a14e28aaa4aab50aa27d7227856ee47d7c4d6b2372f72edb351ad96bede89529715fdf8afc2f41913d52a0704fcc6b1f1d24c7a1c97e2cb41687fd2021d13acfdc24ad6a7bd4fe3", 0x9, 0xbe5, 0x7}, 0x8) getsockopt$auto_SO_TIMESTAMP_NEW(0xffffffffffffffff, 0x5, 0x3f, &(0x7f0000004b00)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', &(0x7f0000004b40)=0x1) 0s ago: executing program 1 (id=5353): seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xc, &(0x7f0000002940)="a6045e9bcc07263b55ee55bafb0ba02080f93184fcdf646a803192b35f7c0d35c4abb9e82945ef458e9c5973be6ac15c20ea04240d1bd929593061ef840d539a2ee2ed0a4079e43733c05357c0f1e6a48e17e6ef893f8a250815aa63de6c8edd2fa3347ccc6f0d349d4d82186ea976e05291e23139b61df112d2274bef78f6460ff91cf79ca6da309fe3208ce87b89e28ec36b5a43e4ff2593df80e8c16203ac9d683c670d5b745fe3a0aa36892ad8713139d9d74dd5") kernel console output (not intermixed with test programs): batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.401385][T29688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1588.421573][T29688] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1588.431551][T29671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.507338][T29688] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1588.539715][T29671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.562439][T29671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.650693][T29671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1588.710859][T29703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4956'. [ 1588.813382][T29671] hsr_slave_0: entered promiscuous mode [ 1588.835406][T29671] hsr_slave_1: entered promiscuous mode [ 1588.889720][T29671] debugfs: 'hsr0' already exists in 'hsr' [ 1588.912485][T29671] Cannot create hsr debugfs directory [ 1589.306399][T29710] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1589.615746][T26999] Bluetooth: hci3: command 0x0406 tx timeout [ 1590.257419][T26999] Bluetooth: hci4: command 0x0406 tx timeout [ 1590.336935][T26999] Bluetooth: hci2: command 0x0c1a tx timeout [ 1590.342972][T25218] Bluetooth: hci0: command 0x041b tx timeout [ 1590.413384][T29743] netlink: 'syz.3.4962': attribute type 1 has an invalid length. [ 1590.421337][T26999] Bluetooth: hci1: command 0x041b tx timeout [ 1591.426984][T26999] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 1592.480070][T29782] netlink: 'syz.1.4969': attribute type 1 has an invalid length. [ 1592.506711][T26999] Bluetooth: hci1: command 0x041b tx timeout [ 1592.615286][T29785] random: crng reseeded on system resumption [ 1593.547871][T29800] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input90 [ 1593.729488][T29805] nbd: illegal input index 65536 [ 1594.207618][T29820] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 1594.577527][T26999] Bluetooth: hci1: command 0x041b tx timeout [ 1594.717491][T29828] random: crng reseeded on system resumption [ 1594.822901][T29830] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input91 [ 1595.930216][T29855] netlink: 'syz.3.4985': attribute type 1 has an invalid length. [ 1596.658795][T26999] Bluetooth: hci1: command 0x041b tx timeout [ 1596.761182][T29863] ubi31: attaching mtd0 [ 1596.766992][T29863] ubi31: scanning is finished [ 1596.801565][T29863] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 1596.879692][T29866] FAULT_INJECTION: forcing a failure. [ 1596.879692][T29866] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.898156][T29865] netlink: 'syz.1.4988': attribute type 1 has an invalid length. [ 1596.936674][T29866] CPU: 0 UID: 0 PID: 29866 Comm: syz.3.4987 Not tainted syzkaller #0 PREEMPT(full) [ 1596.936698][T29866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1596.936708][T29866] Call Trace: [ 1596.936714][T29866] [ 1596.936720][T29866] dump_stack_lvl+0x16c/0x1f0 [ 1596.936744][T29866] should_fail_ex+0x512/0x640 [ 1596.936767][T29866] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1596.936790][T29866] should_failslab+0xc2/0x120 [ 1596.936811][T29866] __kmalloc_cache_noprof+0x72/0x780 [ 1596.936826][T29866] ? cuse_channel_open+0x4f/0x7f0 [ 1596.936953][T29866] ? __pfx_cuse_channel_open+0x10/0x10 [ 1596.936970][T29866] ? cuse_channel_open+0x4f/0x7f0 [ 1596.936991][T29866] cuse_channel_open+0x4f/0x7f0 [ 1596.937008][T29866] ? __pfx_cuse_channel_open+0x10/0x10 [ 1596.937031][T29866] misc_open+0x26d/0x450 [ 1596.937095][T29866] ? __pfx_misc_open+0x10/0x10 [ 1596.937115][T29866] chrdev_open+0x234/0x6a0 [ 1596.937133][T29866] ? __pfx_apparmor_file_open+0x10/0x10 [ 1596.937155][T29866] ? __pfx_chrdev_open+0x10/0x10 [ 1596.937173][T29866] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1596.937193][T29866] do_dentry_open+0x982/0x1530 [ 1596.937211][T29866] ? __pfx_chrdev_open+0x10/0x10 [ 1596.937232][T29866] vfs_open+0x82/0x3f0 [ 1596.937255][T29866] path_openat+0x1de4/0x2cb0 [ 1596.937277][T29866] ? __pfx_path_openat+0x10/0x10 [ 1596.937293][T29866] ? __lock_acquire+0xb8a/0x1c90 [ 1596.937316][T29866] do_filp_open+0x20b/0x470 [ 1596.937331][T29866] ? __pfx_do_filp_open+0x10/0x10 [ 1596.937368][T29866] ? alloc_fd+0x471/0x7d0 [ 1596.937389][T29866] do_sys_openat2+0x11b/0x1d0 [ 1596.937409][T29866] ? __pfx_do_sys_openat2+0x10/0x10 [ 1596.937438][T29866] __x64_sys_openat+0x174/0x210 [ 1596.937459][T29866] ? __pfx___x64_sys_openat+0x10/0x10 [ 1596.937489][T29866] do_syscall_64+0xcd/0xfa0 [ 1596.937508][T29866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.937523][T29866] RIP: 0033:0x7efc8618f6c9 [ 1596.937538][T29866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1596.937551][T29866] RSP: 002b:00007efc87026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1596.937566][T29866] RAX: ffffffffffffffda RBX: 00007efc863e6090 RCX: 00007efc8618f6c9 [ 1596.937577][T29866] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1596.937586][T29866] RBP: 00007efc86211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1596.937596][T29866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1596.937604][T29866] R13: 00007efc863e6128 R14: 00007efc863e6090 R15: 00007fff31a9ce68 [ 1596.937625][T29866] [ 1597.202545][T29865] FAULT_INJECTION: forcing a failure. [ 1597.202545][T29865] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.215247][T29865] CPU: 0 UID: 0 PID: 29865 Comm: syz.1.4988 Not tainted syzkaller #0 PREEMPT(full) [ 1597.215270][T29865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1597.215280][T29865] Call Trace: [ 1597.215287][T29865] [ 1597.215294][T29865] dump_stack_lvl+0x16c/0x1f0 [ 1597.215319][T29865] should_fail_ex+0x512/0x640 [ 1597.215345][T29865] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1597.215362][T29865] should_failslab+0xc2/0x120 [ 1597.215382][T29865] __kmalloc_cache_noprof+0x72/0x780 [ 1597.215396][T29865] ? create_filter_start.constprop.0+0x103/0x300 [ 1597.215422][T29865] ? create_filter_start.constprop.0+0x103/0x300 [ 1597.215442][T29865] create_filter_start.constprop.0+0x103/0x300 [ 1597.215464][T29865] apply_subsystem_event_filter+0x188/0x17e0 [ 1597.215489][T29865] ? __might_fault+0xe3/0x190 [ 1597.215503][T29865] ? __might_fault+0x13b/0x190 [ 1597.215518][T29865] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1597.215542][T29865] ? _copy_from_user+0x59/0xd0 [ 1597.215567][T29865] subsystem_filter_write+0x95/0x120 [ 1597.215596][T29865] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1597.215617][T29865] vfs_write+0x2a0/0x11d0 [ 1597.215637][T29865] ? __pfx___mutex_lock+0x10/0x10 [ 1597.215655][T29865] ? __pfx_vfs_write+0x10/0x10 [ 1597.215676][T29865] ? __fget_files+0x20e/0x3c0 [ 1597.215696][T29865] ksys_write+0x12a/0x250 [ 1597.215711][T29865] ? __pfx_ksys_write+0x10/0x10 [ 1597.215732][T29865] do_syscall_64+0xcd/0xfa0 [ 1597.215750][T29865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.215765][T29865] RIP: 0033:0x7f868cb8f6c9 [ 1597.215778][T29865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1597.215793][T29865] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1597.215807][T29865] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1597.215817][T29865] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000d [ 1597.215825][T29865] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1597.215834][T29865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1597.215842][T29865] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1597.215862][T29865] [ 1598.031587][T29863] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1598.133207][T29873] random: crng reseeded on system resumption [ 1598.739322][T26999] Bluetooth: hci1: command 0x041b tx timeout [ 1599.449354][T29893] FAULT_INJECTION: forcing a failure. [ 1599.449354][T29893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1599.486315][T29893] CPU: 0 UID: 0 PID: 29893 Comm: syz.1.4993 Not tainted syzkaller #0 PREEMPT(full) [ 1599.486339][T29893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1599.486349][T29893] Call Trace: [ 1599.486355][T29893] [ 1599.486361][T29893] dump_stack_lvl+0x16c/0x1f0 [ 1599.486385][T29893] should_fail_ex+0x512/0x640 [ 1599.486412][T29893] should_fail_alloc_page+0xe7/0x130 [ 1599.486434][T29893] prepare_alloc_pages+0x3c2/0x610 [ 1599.486453][T29893] ? rcu_is_watching+0x12/0xc0 [ 1599.486471][T29893] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1599.486488][T29893] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1599.486506][T29893] ? is_bpf_text_address+0x94/0x1a0 [ 1599.486527][T29893] ? kernel_text_address+0x8d/0x100 [ 1599.486541][T29893] ? __kernel_text_address+0xd/0x40 [ 1599.486553][T29893] ? unwind_get_return_address+0x59/0xa0 [ 1599.486570][T29893] ? arch_stack_walk+0xa6/0x100 [ 1599.486586][T29893] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1599.486608][T29893] ? stack_depot_save_flags+0x29/0x9c0 [ 1599.486629][T29893] ? __pfx_stack_trace_save+0x10/0x10 [ 1599.486647][T29893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1599.486672][T29893] ? policy_nodemask+0xea/0x4e0 [ 1599.486692][T29893] alloc_pages_mpol+0x1fb/0x550 [ 1599.486712][T29893] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1599.486735][T29893] alloc_pages_noprof+0x131/0x390 [ 1599.486755][T29893] kimage_alloc_pages+0x74/0x350 [ 1599.486772][T29893] kimage_alloc_control_pages+0x153/0xa00 [ 1599.486792][T29893] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1599.486812][T29893] do_kexec_load+0x478/0x8a0 [ 1599.486829][T29893] ? __pfx_do_kexec_load+0x10/0x10 [ 1599.486847][T29893] ? _copy_from_user+0x59/0xd0 [ 1599.486871][T29893] __x64_sys_kexec_load+0x1bf/0x230 [ 1599.486888][T29893] do_syscall_64+0xcd/0xfa0 [ 1599.486907][T29893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.486921][T29893] RIP: 0033:0x7f868cb8f6c9 [ 1599.486934][T29893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1599.486948][T29893] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1599.486963][T29893] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1599.486972][T29893] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1599.486981][T29893] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1599.486989][T29893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1599.486998][T29893] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1599.487017][T29893] [ 1599.487044][T29893] kexec: Could not allocate control_code_buffer [ 1599.798614][T29897] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input92 [ 1599.901189][T29899] random: crng reseeded on system resumption [ 1600.055721][T29905] random: crng reseeded on system resumption [ 1600.077726][T29904] netlink: 'syz.3.4998': attribute type 1 has an invalid length. [ 1600.820646][T26999] Bluetooth: hci1: command 0x041b tx timeout [ 1601.266246][T29928] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input93 [ 1601.482422][T29935] ERROR: Out of memory at tomoyo_memory_ok. [ 1601.659867][T29940] random: crng reseeded on system resumption syzkaller syzkaller login: [ 1603.257574][T29961] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input94 [ 1604.280057][T29966] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1604.286541][T29966] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1604.293071][T29966] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1604.299224][T29966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1604.308814][T29966] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1604.393111][T29975] random: crng reseeded on system resumption [ 1605.623050][T26999] Bluetooth: hci3: command 0x0406 tx timeout [ 1606.029377][T30000] netlink: 'syz.3.5022': attribute type 1 has an invalid length. [ 1606.343389][T25218] Bluetooth: hci2: command 0x0c1a tx timeout [ 1606.349506][T25240] Bluetooth: hci0: command 0x041b tx timeout [ 1606.355846][T25328] Bluetooth: hci4: command 0x0406 tx timeout [ 1606.361968][T26999] Bluetooth: hci1: command 0x041b tx timeout [ 1607.064998][T30005] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1607.102486][T30005] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1607.114003][T30005] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1607.140396][T30005] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1607.171083][T30005] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1607.499693][T30002] kexec: Could not allocate control_code_buffer [ 1607.582901][T30008] serio: Serial port pty6 [ 1607.697745][T30013] random: crng reseeded on system resumption [ 1608.424196][T26999] Bluetooth: hci3: command 0x0406 tx timeout [ 1608.634170][T30025] netlink: 'syz.1.5030': attribute type 1 has an invalid length. [ 1609.146453][T25240] Bluetooth: hci0: command 0x041b tx timeout [ 1609.152533][T25218] Bluetooth: hci4: command 0x0406 tx timeout [ 1609.158702][T26999] Bluetooth: hci2: command 0x0c1a tx timeout [ 1609.225091][T26999] Bluetooth: hci1: command 0x041b tx timeout [ 1609.477505][T30038] FAULT_INJECTION: forcing a failure. [ 1609.477505][T30038] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.490376][T30038] CPU: 0 UID: 0 PID: 30038 Comm: syz.1.5034 Not tainted syzkaller #0 PREEMPT(full) [ 1609.490398][T30038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1609.490408][T30038] Call Trace: [ 1609.490414][T30038] [ 1609.490420][T30038] dump_stack_lvl+0x116/0x1f0 [ 1609.490444][T30038] should_fail_ex+0x512/0x640 [ 1609.490469][T30038] should_failslab+0xc2/0x120 [ 1609.490490][T30038] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1609.490505][T30038] ? __send_signal_locked+0x159/0x12c0 [ 1609.490532][T30038] ? __send_signal_locked+0x159/0x12c0 [ 1609.490553][T30038] __send_signal_locked+0x159/0x12c0 [ 1609.490576][T30038] ? __lock_task_sighand+0x146/0x340 [ 1609.490591][T30038] do_send_specific+0x1e8/0x370 [ 1609.490610][T30038] ? __pfx_do_send_specific+0x10/0x10 [ 1609.490626][T30038] ? __task_pid_nr_ns+0x1f5/0x500 [ 1609.490650][T30038] do_rt_tgsigqueueinfo+0xa9/0x100 [ 1609.490669][T30038] __x64_sys_rt_tgsigqueueinfo+0x17a/0x210 [ 1609.490691][T30038] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 1609.490720][T30038] do_syscall_64+0xcd/0xfa0 [ 1609.490739][T30038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.490753][T30038] RIP: 0033:0x7f868cb8f6c9 [ 1609.490766][T30038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1609.490780][T30038] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 1609.490794][T30038] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1609.490805][T30038] RDX: 0000000000000021 RSI: 0000000000000ad3 RDI: 0000000000000ad2 [ 1609.490814][T30038] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1609.490823][T30038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.490832][T30038] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1609.490851][T30038] [ 1609.674886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.623286][T30036] kexec: Could not allocate control_code_buffer [ 1610.912092][T30046] random: crng reseeded on system resumption [ 1612.464318][T30065] futex_wake_op: syz.1.5040 tries to shift op by -2048; fix this program [ 1612.530081][T30067] 0x000000000001-0x000000020000 : "" [ 1612.599179][T30067] ftl_cs: FTL header corrupt! [ 1612.688014][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.694330][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.027081][T30074] netlink: 'syz.1.5041': attribute type 1 has an invalid length. [ 1613.079667][T30074] FAULT_INJECTION: forcing a failure. [ 1613.079667][T30074] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.129797][T30074] CPU: 0 UID: 0 PID: 30074 Comm: syz.1.5041 Not tainted syzkaller #0 PREEMPT(full) [ 1613.129819][T30074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1613.129828][T30074] Call Trace: [ 1613.129834][T30074] [ 1613.129841][T30074] dump_stack_lvl+0x16c/0x1f0 [ 1613.129866][T30074] should_fail_ex+0x512/0x640 [ 1613.129888][T30074] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1613.129905][T30074] should_failslab+0xc2/0x120 [ 1613.129926][T30074] __kmalloc_cache_noprof+0x72/0x780 [ 1613.129940][T30074] ? create_filter_start.constprop.0+0x103/0x300 [ 1613.129966][T30074] ? create_filter_start.constprop.0+0x103/0x300 [ 1613.129986][T30074] create_filter_start.constprop.0+0x103/0x300 [ 1613.130009][T30074] apply_subsystem_event_filter+0x188/0x17e0 [ 1613.130033][T30074] ? __might_fault+0xe3/0x190 [ 1613.130055][T30074] ? __might_fault+0x13b/0x190 [ 1613.130070][T30074] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1613.130096][T30074] ? _copy_from_user+0x59/0xd0 [ 1613.130121][T30074] subsystem_filter_write+0x95/0x120 [ 1613.130143][T30074] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1613.130163][T30074] vfs_write+0x2a0/0x11d0 [ 1613.130182][T30074] ? __pfx___mutex_lock+0x10/0x10 [ 1613.130200][T30074] ? __pfx_vfs_write+0x10/0x10 [ 1613.130221][T30074] ? __fget_files+0x20e/0x3c0 [ 1613.130241][T30074] ksys_write+0x12a/0x250 [ 1613.130256][T30074] ? __pfx_ksys_write+0x10/0x10 [ 1613.130277][T30074] do_syscall_64+0xcd/0xfa0 [ 1613.130295][T30074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.130310][T30074] RIP: 0033:0x7f868cb8f6c9 [ 1613.130322][T30074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1613.130336][T30074] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1613.130351][T30074] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1613.130361][T30074] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000d [ 1613.130369][T30074] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1613.130378][T30074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.130386][T30074] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1613.130406][T30074] [ 1613.356163][ C0] vkms_vblank_simulate: vblank timer overrun [ 1614.486974][T30075] kexec: Could not allocate control_code_buffer [ 1616.255179][T30122] netlink: 'syz.1.5050': attribute type 1 has an invalid length. [ 1616.285453][T30121] netlink: 'syz.3.5049': attribute type 1 has an invalid length. [ 1616.308757][T30122] FAULT_INJECTION: forcing a failure. [ 1616.308757][T30122] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.360951][T30122] CPU: 0 UID: 0 PID: 30122 Comm: syz.1.5050 Not tainted syzkaller #0 PREEMPT(full) [ 1616.360974][T30122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1616.360984][T30122] Call Trace: [ 1616.360989][T30122] [ 1616.360996][T30122] dump_stack_lvl+0x16c/0x1f0 [ 1616.361020][T30122] should_fail_ex+0x512/0x640 [ 1616.361043][T30122] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1616.361061][T30122] should_failslab+0xc2/0x120 [ 1616.361082][T30122] __kmalloc_cache_noprof+0x72/0x780 [ 1616.361094][T30122] ? kasan_save_track+0x14/0x30 [ 1616.361111][T30122] ? __kasan_kmalloc+0xaa/0xb0 [ 1616.361126][T30122] ? apply_subsystem_event_filter+0x32d/0x17e0 [ 1616.361151][T30122] ? apply_subsystem_event_filter+0x32d/0x17e0 [ 1616.361172][T30122] apply_subsystem_event_filter+0x32d/0x17e0 [ 1616.361202][T30122] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1616.361227][T30122] ? _copy_from_user+0x59/0xd0 [ 1616.361251][T30122] subsystem_filter_write+0x95/0x120 [ 1616.361273][T30122] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1616.361292][T30122] vfs_write+0x2a0/0x11d0 [ 1616.361318][T30122] ? __pfx___mutex_lock+0x10/0x10 [ 1616.361337][T30122] ? __pfx_vfs_write+0x10/0x10 [ 1616.361359][T30122] ? __fget_files+0x20e/0x3c0 [ 1616.361381][T30122] ksys_write+0x12a/0x250 [ 1616.361396][T30122] ? __pfx_ksys_write+0x10/0x10 [ 1616.361417][T30122] do_syscall_64+0xcd/0xfa0 [ 1616.361436][T30122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.361453][T30122] RIP: 0033:0x7f868cb8f6c9 [ 1616.361466][T30122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1616.361480][T30122] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1616.361494][T30122] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1616.361503][T30122] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000d [ 1616.361511][T30122] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1616.361520][T30122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.361529][T30122] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1616.361550][T30122] [ 1616.575306][ C0] vkms_vblank_simulate: vblank timer overrun [ 1617.322751][T30130] random: crng reseeded on system resumption [ 1618.210786][T30137] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input95 [ 1619.058169][T30140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1619.065042][T30140] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1619.087680][T30140] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1619.100913][T30140] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1619.117263][T30140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1620.351429][T26999] Bluetooth: hci3: command 0x0406 tx timeout [ 1620.521614][T30169] random: crng reseeded on system resumption [ 1621.074147][T26999] Bluetooth: hci4: command 0x0406 tx timeout [ 1621.150905][T26999] Bluetooth: hci1: command 0x041b tx timeout [ 1621.156948][T25240] Bluetooth: hci2: command 0x0c1a tx timeout [ 1621.162982][T25218] Bluetooth: hci0: command 0x041b tx timeout [ 1621.196479][T30177] FAULT_INJECTION: forcing a failure. [ 1621.196479][T30177] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.321291][T30177] CPU: 0 UID: 0 PID: 30177 Comm: syz.1.5062 Not tainted syzkaller #0 PREEMPT(full) [ 1621.321313][T30177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1621.321322][T30177] Call Trace: [ 1621.321328][T30177] [ 1621.321334][T30177] dump_stack_lvl+0x16c/0x1f0 [ 1621.321357][T30177] should_fail_ex+0x512/0x640 [ 1621.321380][T30177] ? fs_reclaim_acquire+0xae/0x150 [ 1621.321401][T30177] should_failslab+0xc2/0x120 [ 1621.321420][T30177] __kmalloc_noprof+0xdd/0x880 [ 1621.321443][T30177] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1621.321464][T30177] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1621.321480][T30177] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1621.321498][T30177] ? tomoyo_profile+0x47/0x60 [ 1621.321518][T30177] tomoyo_path_number_perm+0x245/0x580 [ 1621.321540][T30177] ? tomoyo_path_number_perm+0x237/0x580 [ 1621.321564][T30177] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1621.321591][T30177] ? find_held_lock+0x2b/0x80 [ 1621.321623][T30177] ? find_held_lock+0x2b/0x80 [ 1621.321636][T30177] ? hook_file_ioctl_common+0x145/0x410 [ 1621.321656][T30177] ? __fget_files+0x20e/0x3c0 [ 1621.321674][T30177] security_file_ioctl+0x9b/0x240 [ 1621.321689][T30177] __x64_sys_ioctl+0xb7/0x210 [ 1621.321712][T30177] do_syscall_64+0xcd/0xfa0 [ 1621.321731][T30177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.321746][T30177] RIP: 0033:0x7f868cb8f6c9 [ 1621.321758][T30177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1621.321773][T30177] RSP: 002b:00007f868adf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1621.321787][T30177] RAX: ffffffffffffffda RBX: 00007f868cde6090 RCX: 00007f868cb8f6c9 [ 1621.321797][T30177] RDX: 0000000000000000 RSI: 000000000000227c RDI: 000000000000000a [ 1621.321806][T30177] RBP: 00007f868adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.321814][T30177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.321823][T30177] R13: 00007f868cde6128 R14: 00007f868cde6090 R15: 00007ffd80d39988 [ 1621.321842][T30177] [ 1621.325039][T30177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1621.724756][T30182] netlink: 354 bytes leftover after parsing attributes in process `syz.3.5063'. [ 1621.986039][T30187] ======================================================= [ 1621.986039][T30187] WARNING: The mand mount option has been deprecated and [ 1621.986039][T30187] and is ignored by this kernel. Remove the mand [ 1621.986039][T30187] option from the mount to silence this warning. [ 1621.986039][T30187] ======================================================= [ 1622.020987][ C0] vkms_vblank_simulate: vblank timer overrun [ 1622.188846][T30188] FAULT_INJECTION: forcing a failure. [ 1622.188846][T30188] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1622.241345][T30188] CPU: 0 UID: 0 PID: 30188 Comm: syz.1.5065 Not tainted syzkaller #0 PREEMPT(full) [ 1622.241367][T30188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1622.241376][T30188] Call Trace: [ 1622.241381][T30188] [ 1622.241388][T30188] dump_stack_lvl+0x16c/0x1f0 [ 1622.241411][T30188] should_fail_ex+0x512/0x640 [ 1622.241436][T30188] should_fail_alloc_page+0xe7/0x130 [ 1622.241458][T30188] prepare_alloc_pages+0x3c2/0x610 [ 1622.241481][T30188] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1622.241498][T30188] ? stack_trace_save+0x8e/0xc0 [ 1622.241515][T30188] ? __pfx_stack_trace_save+0x10/0x10 [ 1622.241532][T30188] ? stack_depot_save_flags+0x29/0x9c0 [ 1622.241554][T30188] ? bpf_ksym_find+0x124/0x1c0 [ 1622.241573][T30188] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1622.241587][T30188] ? __kasan_kmalloc+0xaa/0xb0 [ 1622.241603][T30188] ? copy_splice_read+0x1a8/0xc20 [ 1622.241616][T30188] ? splice_direct_to_actor+0x2a1/0xa30 [ 1622.241629][T30188] ? do_splice_direct+0x174/0x240 [ 1622.241641][T30188] ? do_sendfile+0xb06/0xe50 [ 1622.241654][T30188] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1622.241672][T30188] ? do_syscall_64+0xcd/0xfa0 [ 1622.241688][T30188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.241716][T30188] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1622.241737][T30188] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1622.241765][T30188] ? copy_splice_read+0x1a8/0xc20 [ 1622.241782][T30188] copy_splice_read+0x1e1/0xc20 [ 1622.241802][T30188] ? __pfx_copy_splice_read+0x10/0x10 [ 1622.241818][T30188] ? look_up_lock_class+0x59/0x150 [ 1622.241837][T30188] ? lockdep_init_map_type+0x5c/0x280 [ 1622.241859][T30188] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1622.241876][T30188] ? __pfx_filemap_splice_read+0x10/0x10 [ 1622.241894][T30188] do_splice_read+0x2bd/0x370 [ 1622.241909][T30188] splice_direct_to_actor+0x2a1/0xa30 [ 1622.241925][T30188] ? __pfx_direct_splice_actor+0x10/0x10 [ 1622.241942][T30188] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1622.241955][T30188] ? get_pid_task+0xfc/0x250 [ 1622.241979][T30188] do_splice_direct+0x174/0x240 [ 1622.241994][T30188] ? __pfx_do_splice_direct+0x10/0x10 [ 1622.242009][T30188] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1622.242033][T30188] ? bpf_lsm_file_permission+0x9/0x10 [ 1622.242050][T30188] ? security_file_permission+0x71/0x210 [ 1622.242067][T30188] ? rw_verify_area+0xcf/0x6c0 [ 1622.242081][T30188] do_sendfile+0xb06/0xe50 [ 1622.242099][T30188] ? __pfx_do_sendfile+0x10/0x10 [ 1622.242114][T30188] ? __fget_files+0x20e/0x3c0 [ 1622.242134][T30188] __x64_sys_sendfile64+0x1d8/0x220 [ 1622.242151][T30188] ? ksys_write+0x1ac/0x250 [ 1622.242170][T30188] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1622.242194][T30188] do_syscall_64+0xcd/0xfa0 [ 1622.242212][T30188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.242227][T30188] RIP: 0033:0x7f868cb8f6c9 [ 1622.242239][T30188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.242254][T30188] RSP: 002b:00007f868adf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1622.242268][T30188] RAX: ffffffffffffffda RBX: 00007f868cde6090 RCX: 00007f868cb8f6c9 [ 1622.242278][T30188] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1622.242287][T30188] RBP: 00007f868adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.242295][T30188] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1622.242304][T30188] R13: 00007f868cde6128 R14: 00007f868cde6090 R15: 00007ffd80d39988 [ 1622.242323][T30188] [ 1622.590195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.544881][T30196] random: crng reseeded on system resumption [ 1623.640521][T30198] netlink: 'syz.1.5068': attribute type 1 has an invalid length. [ 1624.779555][T30214] netlink: 'syz.1.5072': attribute type 1 has an invalid length. [ 1625.476346][T25218] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1625.486372][T25218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1625.496906][T25218] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1625.506081][T25218] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1625.515439][T25218] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1625.852335][T30235] FAULT_INJECTION: forcing a failure. [ 1625.852335][T30235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1625.889394][T30235] CPU: 0 UID: 0 PID: 30235 Comm: syz.1.5076 Not tainted syzkaller #0 PREEMPT(full) [ 1625.889423][T30235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1625.889437][T30235] Call Trace: [ 1625.889443][T30235] [ 1625.889450][T30235] dump_stack_lvl+0x16c/0x1f0 [ 1625.889474][T30235] should_fail_ex+0x512/0x640 [ 1625.889503][T30235] should_fail_alloc_page+0xe7/0x130 [ 1625.889525][T30235] prepare_alloc_pages+0x3c2/0x610 [ 1625.889544][T30235] ? rcu_is_watching+0x12/0xc0 [ 1625.889562][T30235] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1625.889578][T30235] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1625.889596][T30235] ? is_bpf_text_address+0x94/0x1a0 [ 1625.889617][T30235] ? kernel_text_address+0x8d/0x100 [ 1625.889630][T30235] ? __kernel_text_address+0xd/0x40 [ 1625.889643][T30235] ? unwind_get_return_address+0x59/0xa0 [ 1625.889659][T30235] ? arch_stack_walk+0xa6/0x100 [ 1625.889675][T30235] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1625.889697][T30235] ? stack_depot_save_flags+0x29/0x9c0 [ 1625.889718][T30235] ? __pfx_stack_trace_save+0x10/0x10 [ 1625.889737][T30235] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1625.889762][T30235] ? policy_nodemask+0xea/0x4e0 [ 1625.889782][T30235] alloc_pages_mpol+0x1fb/0x550 [ 1625.889802][T30235] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1625.889826][T30235] alloc_pages_noprof+0x131/0x390 [ 1625.889846][T30235] kimage_alloc_pages+0x74/0x350 [ 1625.889862][T30235] kimage_alloc_control_pages+0x153/0xa00 [ 1625.889882][T30235] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1625.889904][T30235] do_kexec_load+0x478/0x8a0 [ 1625.889921][T30235] ? __pfx_do_kexec_load+0x10/0x10 [ 1625.889938][T30235] ? _copy_from_user+0x59/0xd0 [ 1625.889962][T30235] __x64_sys_kexec_load+0x1bf/0x230 [ 1625.889980][T30235] do_syscall_64+0xcd/0xfa0 [ 1625.889998][T30235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.890014][T30235] RIP: 0033:0x7f868cb8f6c9 [ 1625.890026][T30235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1625.890040][T30235] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1625.890055][T30235] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1625.890065][T30235] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1625.890073][T30235] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1625.890082][T30235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1625.890090][T30235] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1625.890110][T30235] [ 1625.890140][T30235] kexec: Could not allocate control_code_buffer [ 1626.571787][T30231] chnl_net:caif_netlink_parms(): no params data found [ 1626.839858][T30231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.858525][T30231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.885734][T30231] bridge_slave_0: entered allmulticast mode [ 1626.907548][T30231] bridge_slave_0: entered promiscuous mode [ 1626.956155][T30246] FAULT_INJECTION: forcing a failure. [ 1626.956155][T30246] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.993769][T30231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.016070][T30231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.037814][T30231] bridge_slave_1: entered allmulticast mode [ 1627.063635][T30231] bridge_slave_1: entered promiscuous mode [ 1627.080590][T30246] CPU: 0 UID: 0 PID: 30246 Comm: syz.1.5077 Not tainted syzkaller #0 PREEMPT(full) [ 1627.080613][T30246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1627.080623][T30246] Call Trace: [ 1627.080628][T30246] [ 1627.080635][T30246] dump_stack_lvl+0x16c/0x1f0 [ 1627.080658][T30246] should_fail_ex+0x512/0x640 [ 1627.080680][T30246] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1627.080698][T30246] should_failslab+0xc2/0x120 [ 1627.080718][T30246] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1627.080733][T30246] ? security_file_alloc+0x34/0x2b0 [ 1627.080756][T30246] ? security_file_alloc+0x34/0x2b0 [ 1627.080770][T30246] security_file_alloc+0x34/0x2b0 [ 1627.080786][T30246] init_file+0x93/0x4c0 [ 1627.080806][T30246] alloc_empty_file+0x73/0x1e0 [ 1627.080826][T30246] path_openat+0xda/0x2cb0 [ 1627.080849][T30246] ? __pfx_path_openat+0x10/0x10 [ 1627.080865][T30246] ? __lock_acquire+0xb8a/0x1c90 [ 1627.080888][T30246] do_filp_open+0x20b/0x470 [ 1627.080904][T30246] ? __pfx_do_filp_open+0x10/0x10 [ 1627.080932][T30246] ? alloc_fd+0x471/0x7d0 [ 1627.080951][T30246] do_sys_openat2+0x11b/0x1d0 [ 1627.080978][T30246] ? __pfx_do_sys_openat2+0x10/0x10 [ 1627.081001][T30246] ? __fget_files+0x20e/0x3c0 [ 1627.081018][T30246] __x64_sys_openat+0x174/0x210 [ 1627.081040][T30246] ? __pfx___x64_sys_openat+0x10/0x10 [ 1627.081060][T30246] ? ksys_write+0x1ac/0x250 [ 1627.081081][T30246] do_syscall_64+0xcd/0xfa0 [ 1627.081101][T30246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.081116][T30246] RIP: 0033:0x7f868cb8f6c9 [ 1627.081129][T30246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1627.081143][T30246] RSP: 002b:00007f868add5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1627.081157][T30246] RAX: ffffffffffffffda RBX: 00007f868cde6180 RCX: 00007f868cb8f6c9 [ 1627.081167][T30246] RDX: 0000000000040040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1627.081176][T30246] RBP: 00007f868add5090 R08: 0000000000000000 R09: 0000000000000000 [ 1627.081185][T30246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1627.081194][T30246] R13: 00007f868cde6218 R14: 00007f868cde6180 R15: 00007ffd80d39988 [ 1627.081213][T30246] [ 1627.300534][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.609896][T25240] Bluetooth: hci5: command tx timeout [ 1627.835774][T30231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.879238][T30231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.933294][T30231] team0: Port device team_slave_0 added [ 1627.953150][T30231] team0: Port device team_slave_1 added [ 1628.005381][T30231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1628.030761][T30231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.056697][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.127163][T30231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1628.155591][T30231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1628.172933][T30231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.230123][T30251] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 1628.255746][T30231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1628.382363][T30231] hsr_slave_0: entered promiscuous mode [ 1628.399071][T30231] hsr_slave_1: entered promiscuous mode [ 1628.425497][T30231] debugfs: 'hsr0' already exists in 'hsr' [ 1628.442987][T30231] Cannot create hsr debugfs directory [ 1629.087587][T30271] netlink: 354 bytes leftover after parsing attributes in process `syz.3.5084'. [ 1629.496923][T30266] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1629.505155][T30266] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1629.521061][T30266] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1629.536230][T30266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1629.550077][T30266] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1629.562056][T30266] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1629.574907][T30266] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1629.597819][T30266] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1630.995483][T25240] Bluetooth: hci3: command 0x0406 tx timeout [ 1631.555932][T25240] Bluetooth: hci1: command 0x041b tx timeout [ 1631.562190][T25218] Bluetooth: hci2: command 0x0c1a tx timeout [ 1631.568707][T25240] Bluetooth: hci0: command 0x041b tx timeout [ 1631.575046][T25218] Bluetooth: hci4: command 0x0406 tx timeout [ 1631.636920][T25218] Bluetooth: hci5: command 0x040f tx timeout [ 1633.198458][T30317] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1633.217103][T30317] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1633.235046][T30317] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1633.241587][T30317] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1633.259448][T30317] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1633.274273][T30317] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1634.198635][T30327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1634.215135][T30327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1634.223567][T30327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1634.237309][T30327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1634.254353][T30327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1634.268812][T30327] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1635.399697][T30345] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input96 [ 1635.478492][T25218] Bluetooth: hci3: command 0x0406 tx timeout [ 1635.619953][T30347] FAULT_INJECTION: forcing a failure. [ 1635.619953][T30347] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.660201][T30347] CPU: 0 UID: 0 PID: 30347 Comm: syz.3.5101 Not tainted syzkaller #0 PREEMPT(full) [ 1635.660225][T30347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1635.660234][T30347] Call Trace: [ 1635.660240][T30347] [ 1635.660247][T30347] dump_stack_lvl+0x16c/0x1f0 [ 1635.660271][T30347] should_fail_ex+0x512/0x640 [ 1635.660294][T30347] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1635.660311][T30347] should_failslab+0xc2/0x120 [ 1635.660332][T30347] __kmalloc_cache_noprof+0x72/0x780 [ 1635.660351][T30347] ? kasan_save_track+0x14/0x30 [ 1635.660369][T30347] ? __kasan_kmalloc+0xaa/0xb0 [ 1635.660385][T30347] ? apply_subsystem_event_filter+0x32d/0x17e0 [ 1635.660411][T30347] ? apply_subsystem_event_filter+0x32d/0x17e0 [ 1635.660431][T30347] apply_subsystem_event_filter+0x32d/0x17e0 [ 1635.660458][T30347] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1635.660483][T30347] ? _copy_from_user+0x59/0xd0 [ 1635.660507][T30347] subsystem_filter_write+0x95/0x120 [ 1635.660530][T30347] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1635.660549][T30347] vfs_write+0x2a0/0x11d0 [ 1635.660568][T30347] ? __pfx___mutex_lock+0x10/0x10 [ 1635.660590][T30347] ? __pfx_vfs_write+0x10/0x10 [ 1635.660611][T30347] ? __fget_files+0x20e/0x3c0 [ 1635.660631][T30347] ksys_write+0x12a/0x250 [ 1635.660646][T30347] ? __pfx_ksys_write+0x10/0x10 [ 1635.660667][T30347] do_syscall_64+0xcd/0xfa0 [ 1635.660686][T30347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.660701][T30347] RIP: 0033:0x7efc8618f6c9 [ 1635.660714][T30347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1635.660729][T30347] RSP: 002b:00007efc87047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1635.660742][T30347] RAX: ffffffffffffffda RBX: 00007efc863e5fa0 RCX: 00007efc8618f6c9 [ 1635.660752][T30347] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000d [ 1635.660761][T30347] RBP: 00007efc86211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1635.660771][T30347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1635.660780][T30347] R13: 00007efc863e6038 R14: 00007efc863e5fa0 R15: 00007fff31a9ce68 [ 1635.660800][T30347] [ 1636.304615][T25218] Bluetooth: hci5: command 0x040f tx timeout [ 1636.318228][T25218] Bluetooth: hci1: command 0x041b tx timeout [ 1636.324337][T25218] Bluetooth: hci2: command 0x0c1a tx timeout [ 1636.331213][T25218] Bluetooth: hci0: command 0x041b tx timeout [ 1636.337308][T25218] Bluetooth: hci4: command 0x0406 tx timeout [ 1636.344903][T30349] random: crng reseeded on system resumption [ 1638.362724][T25240] Bluetooth: hci5: command 0x040f tx timeout [ 1639.130180][T30402] FAULT_INJECTION: forcing a failure. [ 1639.130180][T30402] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.165691][T30402] CPU: 0 UID: 0 PID: 30402 Comm: syz.1.5111 Not tainted syzkaller #0 PREEMPT(full) [ 1639.165715][T30402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1639.165724][T30402] Call Trace: [ 1639.165730][T30402] [ 1639.165736][T30402] dump_stack_lvl+0x16c/0x1f0 [ 1639.165759][T30402] should_fail_ex+0x512/0x640 [ 1639.165782][T30402] ? fs_reclaim_acquire+0xae/0x150 [ 1639.165803][T30402] should_failslab+0xc2/0x120 [ 1639.165824][T30402] __kmalloc_noprof+0xdd/0x880 [ 1639.165847][T30402] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1639.165868][T30402] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1639.165884][T30402] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1639.165902][T30402] ? tomoyo_profile+0x47/0x60 [ 1639.165923][T30402] tomoyo_path_number_perm+0x245/0x580 [ 1639.165944][T30402] ? tomoyo_path_number_perm+0x237/0x580 [ 1639.165968][T30402] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1639.165992][T30402] ? find_held_lock+0x2b/0x80 [ 1639.166024][T30402] ? find_held_lock+0x2b/0x80 [ 1639.166038][T30402] ? hook_file_ioctl_common+0x145/0x410 [ 1639.166058][T30402] ? __fget_files+0x20e/0x3c0 [ 1639.166076][T30402] security_file_ioctl+0x9b/0x240 [ 1639.166091][T30402] __x64_sys_ioctl+0xb7/0x210 [ 1639.166114][T30402] do_syscall_64+0xcd/0xfa0 [ 1639.166133][T30402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.166148][T30402] RIP: 0033:0x7f868cb8f6c9 [ 1639.166161][T30402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1639.166176][T30402] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1639.166190][T30402] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1639.166200][T30402] RDX: 0000000000000004 RSI: 000000004008ae6a RDI: 0000000000000003 [ 1639.166209][T30402] RBP: 00007f868d93f090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.166217][T30402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1639.166226][T30402] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1639.166246][T30402] [ 1639.166258][T30402] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1639.800560][T30408] FAULT_INJECTION: forcing a failure. [ 1639.800560][T30408] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.840550][T30408] CPU: 0 UID: 0 PID: 30408 Comm: syz.1.5113 Not tainted syzkaller #0 PREEMPT(full) [ 1639.840574][T30408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1639.840584][T30408] Call Trace: [ 1639.840590][T30408] [ 1639.840597][T30408] dump_stack_lvl+0x16c/0x1f0 [ 1639.840620][T30408] should_fail_ex+0x512/0x640 [ 1639.840642][T30408] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1639.840660][T30408] should_failslab+0xc2/0x120 [ 1639.840681][T30408] __kmalloc_cache_noprof+0x72/0x780 [ 1639.840695][T30408] ? create_filter_start.constprop.0+0x103/0x300 [ 1639.840720][T30408] ? create_filter_start.constprop.0+0x103/0x300 [ 1639.840740][T30408] create_filter_start.constprop.0+0x103/0x300 [ 1639.840762][T30408] apply_subsystem_event_filter+0x188/0x17e0 [ 1639.840786][T30408] ? __might_fault+0xe3/0x190 [ 1639.840801][T30408] ? __might_fault+0x13b/0x190 [ 1639.840815][T30408] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1639.840848][T30408] ? _copy_from_user+0x59/0xd0 [ 1639.840873][T30408] subsystem_filter_write+0x95/0x120 [ 1639.840896][T30408] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1639.840916][T30408] vfs_write+0x2a0/0x11d0 [ 1639.840934][T30408] ? __pfx___mutex_lock+0x10/0x10 [ 1639.840952][T30408] ? __pfx_vfs_write+0x10/0x10 [ 1639.840974][T30408] ? __fget_files+0x20e/0x3c0 [ 1639.840994][T30408] ksys_write+0x12a/0x250 [ 1639.841009][T30408] ? __pfx_ksys_write+0x10/0x10 [ 1639.841030][T30408] do_syscall_64+0xcd/0xfa0 [ 1639.841048][T30408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.841064][T30408] RIP: 0033:0x7f868cb8f6c9 [ 1639.841077][T30408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1639.841091][T30408] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1639.841106][T30408] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1639.841115][T30408] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000d [ 1639.841124][T30408] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1639.841133][T30408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1639.841142][T30408] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1639.841163][T30408] [ 1640.474553][T25240] Bluetooth: hci5: command 0x040f tx timeout [ 1640.600363][T30410] netlink: 'syz.3.5114': attribute type 1 has an invalid length. [ 1640.778905][T30414] FAULT_INJECTION: forcing a failure. [ 1640.778905][T30414] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1640.810486][T30414] CPU: 0 UID: 0 PID: 30414 Comm: syz.1.5116 Not tainted syzkaller #0 PREEMPT(full) [ 1640.810509][T30414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1640.810519][T30414] Call Trace: [ 1640.810524][T30414] [ 1640.810531][T30414] dump_stack_lvl+0x16c/0x1f0 [ 1640.810555][T30414] should_fail_ex+0x512/0x640 [ 1640.810580][T30414] should_fail_alloc_page+0xe7/0x130 [ 1640.810602][T30414] prepare_alloc_pages+0x3c2/0x610 [ 1640.810621][T30414] ? rcu_is_watching+0x12/0xc0 [ 1640.810638][T30414] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1640.810655][T30414] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1640.810674][T30414] ? is_bpf_text_address+0x94/0x1a0 [ 1640.810694][T30414] ? kernel_text_address+0x8d/0x100 [ 1640.810707][T30414] ? __kernel_text_address+0xd/0x40 [ 1640.810720][T30414] ? unwind_get_return_address+0x59/0xa0 [ 1640.810736][T30414] ? arch_stack_walk+0xa6/0x100 [ 1640.810752][T30414] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1640.810774][T30414] ? stack_depot_save_flags+0x29/0x9c0 [ 1640.810795][T30414] ? __pfx_stack_trace_save+0x10/0x10 [ 1640.810821][T30414] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1640.810846][T30414] ? policy_nodemask+0xea/0x4e0 [ 1640.810868][T30414] alloc_pages_mpol+0x1fb/0x550 [ 1640.810888][T30414] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1640.810912][T30414] alloc_pages_noprof+0x131/0x390 [ 1640.810931][T30414] kimage_alloc_pages+0x74/0x350 [ 1640.810947][T30414] kimage_alloc_control_pages+0x153/0xa00 [ 1640.810967][T30414] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1640.810988][T30414] do_kexec_load+0x478/0x8a0 [ 1640.811004][T30414] ? __pfx_do_kexec_load+0x10/0x10 [ 1640.811022][T30414] ? _copy_from_user+0x59/0xd0 [ 1640.811046][T30414] __x64_sys_kexec_load+0x1bf/0x230 [ 1640.811063][T30414] do_syscall_64+0xcd/0xfa0 [ 1640.811082][T30414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.811097][T30414] RIP: 0033:0x7f868cb8f6c9 [ 1640.811110][T30414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1640.811124][T30414] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1640.811139][T30414] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1640.811148][T30414] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1640.811157][T30414] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1640.811166][T30414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1640.811175][T30414] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1640.811196][T30414] [ 1640.811228][T30414] kexec: Could not allocate control_code_buffer [ 1641.349831][T30418] netlink: 'syz.1.5118': attribute type 1 has an invalid length. [ 1641.380252][T30418] FAULT_INJECTION: forcing a failure. [ 1641.380252][T30418] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.408770][T30418] CPU: 0 UID: 0 PID: 30418 Comm: syz.1.5118 Not tainted syzkaller #0 PREEMPT(full) [ 1641.408792][T30418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1641.408802][T30418] Call Trace: [ 1641.408808][T30418] [ 1641.408814][T30418] dump_stack_lvl+0x16c/0x1f0 [ 1641.408839][T30418] should_fail_ex+0x512/0x640 [ 1641.408862][T30418] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1641.408879][T30418] should_failslab+0xc2/0x120 [ 1641.408899][T30418] __kmalloc_cache_noprof+0x72/0x780 [ 1641.408912][T30418] ? rcu_is_watching+0x12/0xc0 [ 1641.408928][T30418] ? append_filter_err+0xb8/0x610 [ 1641.408950][T30418] ? append_filter_err+0xb8/0x610 [ 1641.408968][T30418] append_filter_err+0xb8/0x610 [ 1641.408997][T30418] apply_subsystem_event_filter+0x75a/0x17e0 [ 1641.409025][T30418] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1641.409050][T30418] ? _copy_from_user+0x59/0xd0 [ 1641.409075][T30418] subsystem_filter_write+0x95/0x120 [ 1641.409097][T30418] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1641.409117][T30418] vfs_write+0x2a0/0x11d0 [ 1641.409135][T30418] ? __pfx___mutex_lock+0x10/0x10 [ 1641.409154][T30418] ? __pfx_vfs_write+0x10/0x10 [ 1641.409175][T30418] ? __fget_files+0x20e/0x3c0 [ 1641.409195][T30418] ksys_write+0x12a/0x250 [ 1641.409210][T30418] ? __pfx_ksys_write+0x10/0x10 [ 1641.409231][T30418] do_syscall_64+0xcd/0xfa0 [ 1641.409250][T30418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.409265][T30418] RIP: 0033:0x7f868cb8f6c9 [ 1641.409278][T30418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1641.409292][T30418] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1641.409306][T30418] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1641.409326][T30418] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000d [ 1641.409335][T30418] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1641.409344][T30418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1641.409352][T30418] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1641.409373][T30418] [ 1642.162564][T30428] random: crng reseeded on system resumption [ 1642.521306][T25240] Bluetooth: hci5: command 0x040f tx timeout [ 1642.750564][T30434] FAULT_INJECTION: forcing a failure. [ 1642.750564][T30434] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.764146][T30434] CPU: 0 UID: 0 PID: 30434 Comm: syz.3.5121 Not tainted syzkaller #0 PREEMPT(full) [ 1642.764167][T30434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1642.764177][T30434] Call Trace: [ 1642.764183][T30434] [ 1642.764189][T30434] dump_stack_lvl+0x16c/0x1f0 [ 1642.764212][T30434] should_fail_ex+0x512/0x640 [ 1642.764235][T30434] ? __kmalloc_noprof+0xca/0x880 [ 1642.764260][T30434] should_failslab+0xc2/0x120 [ 1642.764280][T30434] __kmalloc_noprof+0xdd/0x880 [ 1642.764301][T30434] ? __kernel_text_address+0xd/0x40 [ 1642.764315][T30434] ? unwind_get_return_address+0x59/0xa0 [ 1642.764331][T30434] ? copy_splice_read+0x1a8/0xc20 [ 1642.764347][T30434] ? copy_splice_read+0x1a8/0xc20 [ 1642.764360][T30434] copy_splice_read+0x1a8/0xc20 [ 1642.764377][T30434] ? __pfx_copy_splice_read+0x10/0x10 [ 1642.764393][T30434] ? __pfx__kstrtoull+0x10/0x10 [ 1642.764415][T30434] ? find_held_lock+0x2b/0x80 [ 1642.764432][T30434] ? __pfx_copy_splice_read+0x10/0x10 [ 1642.764445][T30434] do_splice_read+0x285/0x370 [ 1642.764460][T30434] splice_direct_to_actor+0x2a1/0xa30 [ 1642.764475][T30434] ? __pfx_direct_splice_actor+0x10/0x10 [ 1642.764493][T30434] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1642.764506][T30434] ? get_pid_task+0xfc/0x250 [ 1642.764571][T30434] do_splice_direct+0x174/0x240 [ 1642.764586][T30434] ? __pfx_do_splice_direct+0x10/0x10 [ 1642.764600][T30434] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1642.764626][T30434] ? rw_verify_area+0xcf/0x6c0 [ 1642.764642][T30434] do_sendfile+0xb06/0xe50 [ 1642.764660][T30434] ? __pfx_do_sendfile+0x10/0x10 [ 1642.764675][T30434] ? __fget_files+0x20e/0x3c0 [ 1642.764694][T30434] __x64_sys_sendfile64+0x1d8/0x220 [ 1642.764712][T30434] ? ksys_write+0x1ac/0x250 [ 1642.764727][T30434] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1642.764751][T30434] do_syscall_64+0xcd/0xfa0 [ 1642.764770][T30434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.764785][T30434] RIP: 0033:0x7efc8618f6c9 [ 1642.764797][T30434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1642.764812][T30434] RSP: 002b:00007efc87047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1642.764826][T30434] RAX: ffffffffffffffda RBX: 00007efc863e5fa0 RCX: 00007efc8618f6c9 [ 1642.764835][T30434] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1642.764844][T30434] RBP: 00007efc87047090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.764853][T30434] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1642.764862][T30434] R13: 00007efc863e6038 R14: 00007efc863e5fa0 R15: 00007fff31a9ce68 [ 1642.764881][T30434] [ 1643.128662][T30438] netlink: 'syz.1.5123': attribute type 1 has an invalid length. [ 1643.252249][T30445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5125'. [ 1643.264515][T30445] netlink: 25 bytes leftover after parsing attributes in process `syz.1.5125'. [ 1643.328704][T30447] netlink: 'syz.1.5126': attribute type 1 has an invalid length. [ 1643.347320][T30447] FAULT_INJECTION: forcing a failure. [ 1643.347320][T30447] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.360850][T30447] CPU: 0 UID: 0 PID: 30447 Comm: syz.1.5126 Not tainted syzkaller #0 PREEMPT(full) [ 1643.360871][T30447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1643.360881][T30447] Call Trace: [ 1643.360887][T30447] [ 1643.360894][T30447] dump_stack_lvl+0x16c/0x1f0 [ 1643.360917][T30447] should_fail_ex+0x512/0x640 [ 1643.360940][T30447] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1643.360962][T30447] should_failslab+0xc2/0x120 [ 1643.360982][T30447] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1643.361001][T30447] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1643.361027][T30447] ? kstrdup+0x53/0x100 [ 1643.361041][T30447] kstrdup+0x53/0x100 [ 1643.361057][T30447] apply_subsystem_event_filter+0x47f/0x17e0 [ 1643.361084][T30447] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1643.361108][T30447] ? _copy_from_user+0x59/0xd0 [ 1643.361133][T30447] subsystem_filter_write+0x95/0x120 [ 1643.361154][T30447] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1643.361174][T30447] vfs_write+0x2a0/0x11d0 [ 1643.361192][T30447] ? __pfx___mutex_lock+0x10/0x10 [ 1643.361210][T30447] ? __pfx_vfs_write+0x10/0x10 [ 1643.361231][T30447] ? __fget_files+0x20e/0x3c0 [ 1643.361251][T30447] ksys_write+0x12a/0x250 [ 1643.361266][T30447] ? __pfx_ksys_write+0x10/0x10 [ 1643.361287][T30447] do_syscall_64+0xcd/0xfa0 [ 1643.361305][T30447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.361320][T30447] RIP: 0033:0x7f868cb8f6c9 [ 1643.361332][T30447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1643.361346][T30447] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1643.361360][T30447] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1643.361370][T30447] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000d [ 1643.361379][T30447] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1643.361387][T30447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1643.361396][T30447] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1643.361416][T30447] [ 1643.619245][T30449] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input97 [ 1643.779768][T30451] __vm_enough_memory: pid: 30451, comm: syz.3.5128, bytes: 4398046511104 not enough memory for the allocation [ 1644.861641][T30458] netlink: 'syz.1.5130': attribute type 1 has an invalid length. [ 1644.953558][T30460] FAULT_INJECTION: forcing a failure. [ 1644.953558][T30460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.984319][T30460] CPU: 0 UID: 0 PID: 30460 Comm: syz.3.5131 Not tainted syzkaller #0 PREEMPT(full) [ 1644.984340][T30460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1644.984350][T30460] Call Trace: [ 1644.984355][T30460] [ 1644.984361][T30460] dump_stack_lvl+0x16c/0x1f0 [ 1644.984392][T30460] should_fail_ex+0x512/0x640 [ 1644.984418][T30460] _copy_from_user+0x2e/0xd0 [ 1644.984441][T30460] arp_ioctl+0x185/0xcd0 [ 1644.984540][T30460] ? __pfx_arp_ioctl+0x10/0x10 [ 1644.984574][T30460] inet_ioctl+0x362/0x3f0 [ 1644.984594][T30460] ? __pfx_inet_ioctl+0x10/0x10 [ 1644.984615][T30460] ? kasan_quarantine_put+0x10a/0x240 [ 1644.984633][T30460] ? lockdep_hardirqs_on+0x7c/0x110 [ 1644.984659][T30460] ? tomoyo_path_number_perm+0x18d/0x580 [ 1644.984685][T30460] packet_ioctl+0xb6/0x280 [ 1644.984743][T30460] sock_do_ioctl+0x118/0x280 [ 1644.984761][T30460] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1644.984782][T30460] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1644.984808][T30460] sock_ioctl+0x227/0x6b0 [ 1644.984827][T30460] ? __pfx_sock_ioctl+0x10/0x10 [ 1644.984844][T30460] ? hook_file_ioctl_common+0x145/0x410 [ 1644.984863][T30460] ? __fget_files+0x20e/0x3c0 [ 1644.984881][T30460] ? __pfx_sock_ioctl+0x10/0x10 [ 1644.984900][T30460] __x64_sys_ioctl+0x18e/0x210 [ 1644.984922][T30460] do_syscall_64+0xcd/0xfa0 [ 1644.984941][T30460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.984960][T30460] RIP: 0033:0x7efc8618f6c9 [ 1644.984972][T30460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1644.984987][T30460] RSP: 002b:00007efc87047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1644.985001][T30460] RAX: ffffffffffffffda RBX: 00007efc863e5fa0 RCX: 00007efc8618f6c9 [ 1644.985011][T30460] RDX: 0000000000000000 RSI: 0000000000008955 RDI: 0000000000000002 [ 1644.985020][T30460] RBP: 00007efc87047090 R08: 0000000000000000 R09: 0000000000000000 [ 1644.985028][T30460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.985037][T30460] R13: 00007efc863e6038 R14: 00007efc863e5fa0 R15: 00007fff31a9ce68 [ 1644.985056][T30460] [ 1645.714077][T30464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5133'. [ 1646.039370][T30472] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 1646.289823][T30476] netlink: 338 bytes leftover after parsing attributes in process `syz.3.5136'. [ 1646.913168][T30491] random: crng reseeded on system resumption [ 1647.208122][T25218] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1647.218463][T25218] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1647.232984][T25218] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1647.244377][T25218] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1647.253305][T25218] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1647.512572][T30500] FAULT_INJECTION: forcing a failure. [ 1647.512572][T30500] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.554015][T30500] CPU: 0 UID: 0 PID: 30500 Comm: syz.3.5140 Not tainted syzkaller #0 PREEMPT(full) [ 1647.554038][T30500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1647.554047][T30500] Call Trace: [ 1647.554053][T30500] [ 1647.554060][T30500] dump_stack_lvl+0x16c/0x1f0 [ 1647.554083][T30500] should_fail_ex+0x512/0x640 [ 1647.554106][T30500] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1647.554123][T30500] should_failslab+0xc2/0x120 [ 1647.554143][T30500] __kmalloc_cache_noprof+0x72/0x780 [ 1647.554157][T30500] ? snd_seq_pool_new+0x44/0x230 [ 1647.554339][T30500] ? snd_seq_pool_new+0x44/0x230 [ 1647.554374][T30500] ? __pfx_snd_seq_open+0x10/0x10 [ 1647.554389][T30500] snd_seq_pool_new+0x44/0x230 [ 1647.554410][T30500] seq_create_client1+0x66/0x630 [ 1647.554428][T30500] ? __pfx_snd_seq_open+0x10/0x10 [ 1647.554443][T30500] snd_seq_open+0x59/0x590 [ 1647.554459][T30500] ? __pfx_snd_seq_open+0x10/0x10 [ 1647.554473][T30500] snd_open+0x22d/0x4c0 [ 1647.554492][T30500] ? __pfx_snd_open+0x10/0x10 [ 1647.554509][T30500] chrdev_open+0x234/0x6a0 [ 1647.554526][T30500] ? __pfx_apparmor_file_open+0x10/0x10 [ 1647.554549][T30500] ? __pfx_chrdev_open+0x10/0x10 [ 1647.554567][T30500] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1647.554587][T30500] do_dentry_open+0x982/0x1530 [ 1647.554604][T30500] ? __pfx_chrdev_open+0x10/0x10 [ 1647.554625][T30500] vfs_open+0x82/0x3f0 [ 1647.554651][T30500] path_openat+0x1de4/0x2cb0 [ 1647.554674][T30500] ? __pfx_path_openat+0x10/0x10 [ 1647.554691][T30500] ? __lock_acquire+0xb8a/0x1c90 [ 1647.554714][T30500] do_filp_open+0x20b/0x470 [ 1647.554730][T30500] ? __pfx_do_filp_open+0x10/0x10 [ 1647.554761][T30500] ? alloc_fd+0x471/0x7d0 [ 1647.554780][T30500] do_sys_openat2+0x11b/0x1d0 [ 1647.554801][T30500] ? __pfx_do_sys_openat2+0x10/0x10 [ 1647.554823][T30500] ? __pfx_get_timespec64+0x10/0x10 [ 1647.554846][T30500] __x64_sys_openat+0x174/0x210 [ 1647.554867][T30500] ? __pfx___x64_sys_openat+0x10/0x10 [ 1647.554895][T30500] do_syscall_64+0xcd/0xfa0 [ 1647.554915][T30500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.554930][T30500] RIP: 0033:0x7efc8618f6c9 [ 1647.554944][T30500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1647.554963][T30500] RSP: 002b:00007efc87047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1647.554977][T30500] RAX: ffffffffffffffda RBX: 00007efc863e5fa0 RCX: 00007efc8618f6c9 [ 1647.554988][T30500] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 1647.554998][T30500] RBP: 00007efc86211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1647.555008][T30500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1647.555017][T30500] R13: 00007efc863e6038 R14: 00007efc863e5fa0 R15: 00007fff31a9ce68 [ 1647.555038][T30500] [ 1648.274875][T30507] FAULT_INJECTION: forcing a failure. [ 1648.274875][T30507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1648.326814][T30495] chnl_net:caif_netlink_parms(): no params data found [ 1648.334150][T30507] CPU: 0 UID: 0 PID: 30507 Comm: syz.1.5141 Not tainted syzkaller #0 PREEMPT(full) [ 1648.334171][T30507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1648.334181][T30507] Call Trace: [ 1648.334187][T30507] [ 1648.334193][T30507] dump_stack_lvl+0x16c/0x1f0 [ 1648.334215][T30507] should_fail_ex+0x512/0x640 [ 1648.334241][T30507] should_fail_alloc_page+0xe7/0x130 [ 1648.334263][T30507] prepare_alloc_pages+0x3c2/0x610 [ 1648.334282][T30507] ? rcu_is_watching+0x12/0xc0 [ 1648.334300][T30507] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1648.334316][T30507] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1648.334334][T30507] ? is_bpf_text_address+0x94/0x1a0 [ 1648.334356][T30507] ? kernel_text_address+0x8d/0x100 [ 1648.334370][T30507] ? __kernel_text_address+0xd/0x40 [ 1648.334382][T30507] ? unwind_get_return_address+0x59/0xa0 [ 1648.334398][T30507] ? arch_stack_walk+0xa6/0x100 [ 1648.334415][T30507] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1648.334437][T30507] ? stack_depot_save_flags+0x29/0x9c0 [ 1648.334458][T30507] ? __pfx_stack_trace_save+0x10/0x10 [ 1648.334476][T30507] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1648.334501][T30507] ? policy_nodemask+0xea/0x4e0 [ 1648.334521][T30507] alloc_pages_mpol+0x1fb/0x550 [ 1648.334541][T30507] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1648.334564][T30507] alloc_pages_noprof+0x131/0x390 [ 1648.334584][T30507] kimage_alloc_pages+0x74/0x350 [ 1648.334600][T30507] kimage_alloc_control_pages+0x153/0xa00 [ 1648.334621][T30507] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1648.334641][T30507] do_kexec_load+0x478/0x8a0 [ 1648.334658][T30507] ? __pfx_do_kexec_load+0x10/0x10 [ 1648.334676][T30507] ? _copy_from_user+0x59/0xd0 [ 1648.334700][T30507] __x64_sys_kexec_load+0x1bf/0x230 [ 1648.334717][T30507] do_syscall_64+0xcd/0xfa0 [ 1648.334736][T30507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.334751][T30507] RIP: 0033:0x7f868cb8f6c9 [ 1648.334764][T30507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1648.334778][T30507] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1648.334792][T30507] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1648.334802][T30507] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1648.334810][T30507] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1648.334819][T30507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1648.334828][T30507] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1648.334847][T30507] [ 1648.334868][T30507] kexec: Could not allocate control_code_buffer [ 1648.831445][T30495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.854744][T30495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.861969][T30495] bridge_slave_0: entered allmulticast mode [ 1648.896914][T30495] bridge_slave_0: entered promiscuous mode [ 1648.935593][T30495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.960030][T30495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.972352][T30495] bridge_slave_1: entered allmulticast mode [ 1648.995059][T30495] bridge_slave_1: entered promiscuous mode [ 1649.096282][T30495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1649.138467][T30495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.243630][T30495] team0: Port device team_slave_0 added [ 1649.291784][T30495] team0: Port device team_slave_1 added [ 1649.325054][T25240] Bluetooth: hci6: command tx timeout [ 1649.396097][T30495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1649.403059][T30495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.558645][T30495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1649.604902][T30495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1649.634909][T30495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.710603][T30495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1649.959738][T30495] hsr_slave_0: entered promiscuous mode [ 1649.985804][T30495] hsr_slave_1: entered promiscuous mode [ 1649.991887][T30495] debugfs: 'hsr0' already exists in 'hsr' [ 1650.019086][T30495] Cannot create hsr debugfs directory [ 1650.052550][T30519] mkiss: ax0: crc mode is auto. [ 1650.969983][T30523] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1650.976867][T30523] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1650.993285][T30523] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1651.003393][T30523] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1651.014137][T30523] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1651.032857][T30523] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1651.042460][T30523] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1651.057482][T30523] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1651.072120][T30523] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1651.167153][T30534] random: crng reseeded on system resumption [ 1651.791795][T30547] vhci_hcd: invalid port number 255 [ 1652.993895][T30555] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1653.007105][T25240] Bluetooth: hci2: command 0x0c1a tx timeout [ 1653.013159][T25240] Bluetooth: hci0: command 0x041b tx timeout [ 1653.019559][T25218] Bluetooth: hci4: command 0x0406 tx timeout [ 1653.053021][T30555] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1653.087805][T25328] Bluetooth: hci5: command 0x040f tx timeout [ 1653.093862][T25328] Bluetooth: hci1: command 0x041b tx timeout [ 1653.101683][T25240] Bluetooth: hci6: command 0x040f tx timeout [ 1653.133405][T30555] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1653.177709][T30555] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1653.218488][T30555] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1653.266895][T30555] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1653.320781][T30555] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1653.456429][T30563] netlink: 25 bytes leftover after parsing attributes in process `syz.3.5155'. [ 1653.822235][T30573] netlink: 'syz.1.5160': attribute type 1 has an invalid length. [ 1653.848610][T30573] FAULT_INJECTION: forcing a failure. [ 1653.848610][T30573] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.906536][T30573] CPU: 0 UID: 0 PID: 30573 Comm: syz.1.5160 Not tainted syzkaller #0 PREEMPT(full) [ 1653.906559][T30573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1653.906568][T30573] Call Trace: [ 1653.906574][T30573] [ 1653.906580][T30573] dump_stack_lvl+0x16c/0x1f0 [ 1653.906604][T30573] should_fail_ex+0x512/0x640 [ 1653.906626][T30573] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1653.906643][T30573] should_failslab+0xc2/0x120 [ 1653.906663][T30573] __kmalloc_cache_noprof+0x72/0x780 [ 1653.906677][T30573] ? ima_add_digest_entry+0x52/0x540 [ 1653.906772][T30573] ? ima_add_digest_entry+0x52/0x540 [ 1653.906792][T30573] ima_add_digest_entry+0x52/0x540 [ 1653.906818][T30573] ima_add_template_entry+0x478/0x870 [ 1653.906841][T30573] ? ima_alloc_init_template+0x19d/0x720 [ 1653.906864][T30573] ? __pfx_ima_add_template_entry+0x10/0x10 [ 1653.906886][T30573] ? ima_alloc_init_template+0x536/0x720 [ 1653.906914][T30573] ima_add_violation+0x17f/0x3d0 [ 1653.906939][T30573] ? __pfx_ima_add_violation+0x10/0x10 [ 1653.906960][T30573] ? ima_d_path+0x12b/0x2a0 [ 1653.906971][T30573] ? __pfx___might_resched+0x10/0x10 [ 1653.906988][T30573] ? __pfx_ima_d_path+0x10/0x10 [ 1653.907004][T30573] ? __pfx_down_write+0x10/0x10 [ 1653.907029][T30573] process_measurement+0x1674/0x23e0 [ 1653.907054][T30573] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1653.907075][T30573] ? __pfx_process_measurement+0x10/0x10 [ 1653.907095][T30573] ? __pfx___might_resched+0x10/0x10 [ 1653.907111][T30573] ? trace_contention_end+0xdd/0x130 [ 1653.907131][T30573] ? find_held_lock+0x2b/0x80 [ 1653.907146][T30573] ? trace_array_get+0xae/0x110 [ 1653.907178][T30573] ? tracing_open_generic+0x94/0xc0 [ 1653.907198][T30573] ? subsystem_open+0x18f/0x3e0 [ 1653.907211][T30573] ? inode_to_bdi+0x9e/0x160 [ 1653.907232][T30573] ima_file_check+0xc5/0x110 [ 1653.907251][T30573] ? __pfx_ima_file_check+0x10/0x10 [ 1653.907276][T30573] security_file_post_open+0x8e/0x210 [ 1653.907292][T30573] path_openat+0x1404/0x2cb0 [ 1653.907315][T30573] ? __pfx_path_openat+0x10/0x10 [ 1653.907332][T30573] ? __lock_acquire+0xb8a/0x1c90 [ 1653.907363][T30573] do_filp_open+0x20b/0x470 [ 1653.907379][T30573] ? __pfx_do_filp_open+0x10/0x10 [ 1653.907410][T30573] ? alloc_fd+0x471/0x7d0 [ 1653.907431][T30573] do_sys_openat2+0x11b/0x1d0 [ 1653.907452][T30573] ? __pfx_do_sys_openat2+0x10/0x10 [ 1653.907474][T30573] ? __pfx___might_resched+0x10/0x10 [ 1653.907493][T30573] __x64_sys_openat+0x174/0x210 [ 1653.907515][T30573] ? __pfx___x64_sys_openat+0x10/0x10 [ 1653.907543][T30573] do_syscall_64+0xcd/0xfa0 [ 1653.907562][T30573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.907578][T30573] RIP: 0033:0x7f868cb8f6c9 [ 1653.907591][T30573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1653.907606][T30573] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1653.907621][T30573] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1653.907631][T30573] RDX: 0000000000109041 RSI: 0000200000007380 RDI: ffffffffffffff9c [ 1653.907641][T30573] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1653.907650][T30573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1653.907659][T30573] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1653.907680][T30573] [ 1654.231172][ C0] vkms_vblank_simulate: vblank timer overrun [ 1654.367288][T25240] Bluetooth: hci3: command 0x0406 tx timeout [ 1654.924507][T30573] ima: OUT OF MEMORY ERROR creating queue entry [ 1654.946369][ T30] audit: type=1804 audit(1762818888.823:8): pid=30573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.5160" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 1654.971112][ C0] vkms_vblank_simulate: vblank timer overrun [ 1655.028524][ T30] audit: type=1804 audit(1762818888.873:9): pid=30573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5160" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=0 errno=0 [ 1655.052450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1655.095440][T25240] Bluetooth: hci4: command 0x0406 tx timeout [ 1655.169102][T25240] Bluetooth: hci0: command 0x041b tx timeout [ 1655.248964][T25240] Bluetooth: hci1: command 0x041b tx timeout [ 1655.255023][T25328] Bluetooth: hci2: command 0x0c1a tx timeout [ 1655.327777][T25328] Bluetooth: hci6: command 0x040f tx timeout [ 1655.336535][T25240] Bluetooth: hci5: command 0x040f tx timeout [ 1655.381148][T30588] FAULT_INJECTION: forcing a failure. [ 1655.381148][T30588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1655.418294][T30588] CPU: 0 UID: 0 PID: 30588 Comm: syz.3.5163 Not tainted syzkaller #0 PREEMPT(full) [ 1655.418316][T30588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1655.418326][T30588] Call Trace: [ 1655.418332][T30588] [ 1655.418338][T30588] dump_stack_lvl+0x16c/0x1f0 [ 1655.418360][T30588] should_fail_ex+0x512/0x640 [ 1655.418386][T30588] _copy_to_user+0x32/0xd0 [ 1655.418411][T30588] simple_read_from_buffer+0xcb/0x170 [ 1655.418436][T30588] proc_fail_nth_read+0x197/0x240 [ 1655.418453][T30588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1655.418471][T30588] ? rw_verify_area+0xcf/0x6c0 [ 1655.418484][T30588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1655.418500][T30588] vfs_read+0x1e4/0xcf0 [ 1655.418518][T30588] ? __pfx___mutex_lock+0x10/0x10 [ 1655.418537][T30588] ? __pfx_vfs_read+0x10/0x10 [ 1655.418556][T30588] ? __fget_files+0x20e/0x3c0 [ 1655.418576][T30588] ksys_read+0x12a/0x250 [ 1655.418591][T30588] ? __pfx_ksys_read+0x10/0x10 [ 1655.418615][T30588] do_syscall_64+0xcd/0xfa0 [ 1655.418634][T30588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.418649][T30588] RIP: 0033:0x7efc8618e0dc [ 1655.418662][T30588] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1655.418676][T30588] RSP: 002b:00007efc87047030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1655.418690][T30588] RAX: ffffffffffffffda RBX: 00007efc863e5fa0 RCX: 00007efc8618e0dc [ 1655.418700][T30588] RDX: 000000000000000f RSI: 00007efc870470a0 RDI: 0000000000000004 [ 1655.418709][T30588] RBP: 00007efc87047090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.418718][T30588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.418727][T30588] R13: 00007efc863e6038 R14: 00007efc863e5fa0 R15: 00007fff31a9ce68 [ 1655.418746][T30588] [ 1655.605842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1655.949324][T30584] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1655.956019][T30584] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1655.963043][T30584] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1655.971468][T30584] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1655.977580][T30584] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1655.984722][T30584] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1655.991128][T30584] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1656.767927][T30610] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input98 [ 1657.248652][T25328] Bluetooth: hci3: command 0x0406 tx timeout [ 1657.969071][T25328] Bluetooth: hci0: command 0x041b tx timeout [ 1657.975132][T25240] Bluetooth: hci4: command 0x0406 tx timeout [ 1658.049236][T25328] Bluetooth: hci6: command 0x040f tx timeout [ 1658.055347][T25240] Bluetooth: hci5: command 0x040f tx timeout [ 1658.062036][T25218] Bluetooth: hci1: command 0x041b tx timeout [ 1658.068052][T25218] Bluetooth: hci2: command 0x0c1a tx timeout [ 1658.123167][T30625] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1658.161143][T30625] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1658.184941][T30625] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1658.229509][T30625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1658.256013][T30625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1658.289697][T30625] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1658.328294][T30625] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1659.410032][T25218] Bluetooth: hci3: command 0x0406 tx timeout [ 1660.210159][T25218] Bluetooth: hci0: command 0x041b tx timeout [ 1660.216202][T25328] Bluetooth: hci4: command 0x0406 tx timeout [ 1660.290571][T25218] Bluetooth: hci5: command 0x040f tx timeout [ 1660.296626][T25328] Bluetooth: hci1: command 0x041b tx timeout [ 1660.302700][T25240] Bluetooth: hci2: command 0x0c1a tx timeout [ 1660.370238][T25218] Bluetooth: hci6: command 0x040f tx timeout [ 1661.395353][T30668] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1661.431227][T30668] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1661.453130][T30668] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1661.492031][T30668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1661.514622][T30668] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1661.540985][T30668] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1661.578428][T30668] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1661.761001][T30677] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input99 [ 1662.599923][T30674] kexec: Could not allocate control_code_buffer [ 1662.771405][T25218] Bluetooth: hci3: command 0x0406 tx timeout [ 1663.491947][T25218] Bluetooth: hci0: command 0x041b tx timeout [ 1663.498006][T25328] Bluetooth: hci4: command 0x0406 tx timeout [ 1663.571934][T25218] Bluetooth: hci6: command 0x040f tx timeout [ 1663.578011][T25328] Bluetooth: hci5: command 0x040f tx timeout [ 1663.584093][T25240] Bluetooth: hci1: command 0x041b tx timeout [ 1663.590113][T25240] Bluetooth: hci2: command 0x0c1a tx timeout [ 1664.789123][T30707] sock: sock_timestamping_bind_phc: sock not bind to device [ 1665.972537][T30710] kexec: Could not allocate control_code_buffer [ 1666.840885][T30731] FAULT_INJECTION: forcing a failure. [ 1666.840885][T30731] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.873619][T30731] CPU: 0 UID: 0 PID: 30731 Comm: syz.3.5204 Not tainted syzkaller #0 PREEMPT(full) [ 1666.873642][T30731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1666.873651][T30731] Call Trace: [ 1666.873656][T30731] [ 1666.873663][T30731] dump_stack_lvl+0x16c/0x1f0 [ 1666.873687][T30731] should_fail_ex+0x512/0x640 [ 1666.873710][T30731] ? __kmalloc_noprof+0xca/0x880 [ 1666.873735][T30731] should_failslab+0xc2/0x120 [ 1666.873754][T30731] __kmalloc_noprof+0xdd/0x880 [ 1666.873777][T30731] ? string_escape_mem+0x6c8/0xde0 [ 1666.873792][T30731] ? kstrdup_quotable+0xc2/0x190 [ 1666.873809][T30731] ? kstrdup_quotable+0xc2/0x190 [ 1666.873823][T30731] kstrdup_quotable+0xc2/0x190 [ 1666.873838][T30731] ? __pfx_kstrdup_quotable+0x10/0x10 [ 1666.873855][T30731] ? get_cmdline+0x86/0x380 [ 1666.873876][T30731] kstrdup_quotable_cmdline+0x127/0x210 [ 1666.873894][T30731] __report_access+0x77/0x370 [ 1666.873911][T30731] ? _raw_spin_unlock_irq+0x23/0x50 [ 1666.873928][T30731] task_work_run+0x150/0x240 [ 1666.873952][T30731] ? __pfx_task_work_run+0x10/0x10 [ 1666.873978][T30731] exit_to_user_mode_loop+0xec/0x130 [ 1666.874012][T30731] do_syscall_64+0x426/0xfa0 [ 1666.874030][T30731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.874045][T30731] RIP: 0033:0x7efc8618f6c9 [ 1666.874058][T30731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1666.874072][T30731] RSP: 002b:00007efc87047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1666.874087][T30731] RAX: ffffffffffffffff RBX: 00007efc863e5fa0 RCX: 00007efc8618f6c9 [ 1666.874096][T30731] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000004206 [ 1666.874105][T30731] RBP: 00007efc86211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1666.874114][T30731] R10: 0000000000200005 R11: 0000000000000246 R12: 0000000000000000 [ 1666.874123][T30731] R13: 00007efc863e6038 R14: 00007efc863e5fa0 R15: 00007fff31a9ce68 [ 1666.874142][T30731] [ 1666.874330][T30731] ptrace attach of "./syz-executor exec"[17532] was attempted by "(null)"[30731] [ 1667.021350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.436148][T30735] zswap: compressor not available [ 1667.523048][T30739] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input100 [ 1668.695649][T30734] kexec: Could not allocate control_code_buffer [ 1670.858785][T30777] futex_wake_op: syz.3.5216 tries to shift op by -2048; fix this program [ 1670.879992][T30777] 0x000000000001-0x000000020000 : "" [ 1670.905893][T30777] ftl_cs: FTL header corrupt! [ 1671.519809][T30785] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1671.547011][T30785] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1671.563290][T30785] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1671.579702][T30785] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1671.599933][T30785] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1671.630284][T30785] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1671.650522][T30785] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1672.466449][T30801] netlink: 'syz.3.5222': attribute type 11 has an invalid length. [ 1672.858057][T25240] Bluetooth: hci3: command 0x0406 tx timeout [ 1673.204911][T30806] FAULT_INJECTION: forcing a failure. [ 1673.204911][T30806] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.264363][T30806] CPU: 0 UID: 0 PID: 30806 Comm: syz.1.5223 Not tainted syzkaller #0 PREEMPT(full) [ 1673.264387][T30806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1673.264424][T30806] Call Trace: [ 1673.264430][T30806] [ 1673.264436][T30806] dump_stack_lvl+0x16c/0x1f0 [ 1673.264460][T30806] should_fail_ex+0x512/0x640 [ 1673.264483][T30806] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1673.264501][T30806] should_failslab+0xc2/0x120 [ 1673.264521][T30806] __kmalloc_cache_noprof+0x72/0x780 [ 1673.264535][T30806] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1673.264560][T30806] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1673.264581][T30806] apply_subsystem_event_filter+0x460/0x17e0 [ 1673.264608][T30806] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1673.264635][T30806] ? _copy_from_user+0x59/0xd0 [ 1673.264660][T30806] subsystem_filter_write+0x95/0x120 [ 1673.264683][T30806] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1673.264702][T30806] vfs_write+0x2a0/0x11d0 [ 1673.264721][T30806] ? __pfx___mutex_lock+0x10/0x10 [ 1673.264740][T30806] ? __pfx_vfs_write+0x10/0x10 [ 1673.264761][T30806] ? __fget_files+0x20e/0x3c0 [ 1673.264781][T30806] ksys_write+0x12a/0x250 [ 1673.264796][T30806] ? __pfx_ksys_write+0x10/0x10 [ 1673.264817][T30806] do_syscall_64+0xcd/0xfa0 [ 1673.264836][T30806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.264851][T30806] RIP: 0033:0x7f868cb8f6c9 [ 1673.264865][T30806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1673.264880][T30806] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1673.264895][T30806] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1673.264905][T30806] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000d [ 1673.264914][T30806] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1673.264923][T30806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1673.264932][T30806] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1673.264955][T30806] [ 1673.470805][ C0] vkms_vblank_simulate: vblank timer overrun [ 1673.796175][T25240] Bluetooth: hci0: command 0x041b tx timeout [ 1673.802334][T25240] Bluetooth: hci4: command 0x0406 tx timeout [ 1673.808524][T25240] Bluetooth: hci6: command 0x040f tx timeout [ 1673.814525][T25240] Bluetooth: hci5: command 0x040f tx timeout [ 1673.826899][T25240] Bluetooth: hci1: command 0x041b tx timeout [ 1673.832973][T25240] Bluetooth: hci2: command 0x0c1a tx timeout [ 1674.140203][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.146620][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.052512][T30809] zswap: compressor not available [ 1675.743354][T30820] random: crng reseeded on system resumption [ 1677.119591][T30846] FAULT_INJECTION: forcing a failure. [ 1677.119591][T30846] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.144864][T30846] CPU: 0 UID: 0 PID: 30846 Comm: syz.1.5240 Not tainted syzkaller #0 PREEMPT(full) [ 1677.144886][T30846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1677.144896][T30846] Call Trace: [ 1677.144902][T30846] [ 1677.144909][T30846] dump_stack_lvl+0x16c/0x1f0 [ 1677.144932][T30846] should_fail_ex+0x512/0x640 [ 1677.144958][T30846] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1677.144976][T30846] should_failslab+0xc2/0x120 [ 1677.144996][T30846] __kmalloc_cache_noprof+0x72/0x780 [ 1677.145008][T30846] ? kasan_save_track+0x14/0x30 [ 1677.145025][T30846] ? __kasan_kmalloc+0xaa/0xb0 [ 1677.145040][T30846] ? apply_subsystem_event_filter+0x32d/0x17e0 [ 1677.145066][T30846] ? apply_subsystem_event_filter+0x32d/0x17e0 [ 1677.145086][T30846] apply_subsystem_event_filter+0x32d/0x17e0 [ 1677.145113][T30846] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1677.145138][T30846] ? _copy_from_user+0x59/0xd0 [ 1677.145162][T30846] subsystem_filter_write+0x95/0x120 [ 1677.145185][T30846] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1677.145204][T30846] vfs_write+0x2a0/0x11d0 [ 1677.145223][T30846] ? __pfx___mutex_lock+0x10/0x10 [ 1677.145249][T30846] ? __pfx_vfs_write+0x10/0x10 [ 1677.145270][T30846] ? __fget_files+0x20e/0x3c0 [ 1677.145291][T30846] ksys_write+0x12a/0x250 [ 1677.145307][T30846] ? __pfx_ksys_write+0x10/0x10 [ 1677.145330][T30846] do_syscall_64+0xcd/0xfa0 [ 1677.145349][T30846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.145363][T30846] RIP: 0033:0x7f868cb8f6c9 [ 1677.145376][T30846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1677.145390][T30846] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1677.145405][T30846] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1677.145414][T30846] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000c [ 1677.145423][T30846] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1677.145432][T30846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1677.145440][T30846] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1677.145460][T30846] [ 1677.362053][ C0] vkms_vblank_simulate: vblank timer overrun [ 1677.901242][T30859] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input101 [ 1678.051319][T30862] FAULT_INJECTION: forcing a failure. [ 1678.051319][T30862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1678.089090][T30862] CPU: 0 UID: 0 PID: 30862 Comm: syz.3.5238 Not tainted syzkaller #0 PREEMPT(full) [ 1678.089112][T30862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1678.089122][T30862] Call Trace: [ 1678.089127][T30862] [ 1678.089134][T30862] dump_stack_lvl+0x16c/0x1f0 [ 1678.089156][T30862] should_fail_ex+0x512/0x640 [ 1678.089182][T30862] _copy_from_user+0x2e/0xd0 [ 1678.089206][T30862] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 1678.089236][T30862] snd_rawmidi_write+0x26e/0xc10 [ 1678.089261][T30862] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1678.089282][T30862] ? __pfx_default_wake_function+0x10/0x10 [ 1678.089300][T30862] ? bpf_lsm_file_permission+0x9/0x10 [ 1678.089318][T30862] ? security_file_permission+0x71/0x210 [ 1678.089335][T30862] ? rw_verify_area+0xcf/0x6c0 [ 1678.089350][T30862] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1678.089370][T30862] vfs_write+0x2a0/0x11d0 [ 1678.089390][T30862] ? __pfx_vfs_write+0x10/0x10 [ 1678.089406][T30862] ? do_sys_openat2+0x157/0x1d0 [ 1678.089426][T30862] ? __pfx_do_sys_openat2+0x10/0x10 [ 1678.089456][T30862] ksys_write+0x1f8/0x250 [ 1678.089471][T30862] ? __pfx_ksys_write+0x10/0x10 [ 1678.089492][T30862] do_syscall_64+0xcd/0xfa0 [ 1678.089511][T30862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.089526][T30862] RIP: 0033:0x7efc8618f6c9 [ 1678.089538][T30862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1678.089552][T30862] RSP: 002b:00007efc87047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1678.089566][T30862] RAX: ffffffffffffffda RBX: 00007efc863e5fa0 RCX: 00007efc8618f6c9 [ 1678.089576][T30862] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1678.089585][T30862] RBP: 00007efc87047090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.089595][T30862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1678.089603][T30862] R13: 00007efc863e6038 R14: 00007efc863e5fa0 R15: 00007fff31a9ce68 [ 1678.089622][T30862] [ 1678.295330][ C0] vkms_vblank_simulate: vblank timer overrun [ 1679.469151][T30873] FAULT_INJECTION: forcing a failure. [ 1679.469151][T30873] name failslab, interval 1, probability 0, space 0, times 0 [ 1679.511128][T30873] CPU: 0 UID: 0 PID: 30873 Comm: syz.1.5243 Not tainted syzkaller #0 PREEMPT(full) [ 1679.511152][T30873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1679.511161][T30873] Call Trace: [ 1679.511167][T30873] [ 1679.511174][T30873] dump_stack_lvl+0x16c/0x1f0 [ 1679.511198][T30873] should_fail_ex+0x512/0x640 [ 1679.511221][T30873] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1679.511239][T30873] should_failslab+0xc2/0x120 [ 1679.511259][T30873] __kmalloc_cache_noprof+0x72/0x780 [ 1679.511317][T30873] ? create_filter_start.constprop.0+0x103/0x300 [ 1679.511344][T30873] ? create_filter_start.constprop.0+0x103/0x300 [ 1679.511365][T30873] create_filter_start.constprop.0+0x103/0x300 [ 1679.511389][T30873] apply_subsystem_event_filter+0x188/0x17e0 [ 1679.511413][T30873] ? __might_fault+0xe3/0x190 [ 1679.511428][T30873] ? __might_fault+0x13b/0x190 [ 1679.511442][T30873] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1679.511467][T30873] ? _copy_from_user+0x59/0xd0 [ 1679.511491][T30873] subsystem_filter_write+0x95/0x120 [ 1679.511513][T30873] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1679.511533][T30873] vfs_write+0x2a0/0x11d0 [ 1679.511552][T30873] ? __pfx___mutex_lock+0x10/0x10 [ 1679.511571][T30873] ? __pfx_vfs_write+0x10/0x10 [ 1679.511592][T30873] ? __fget_files+0x20e/0x3c0 [ 1679.511612][T30873] ksys_write+0x12a/0x250 [ 1679.511627][T30873] ? __pfx_ksys_write+0x10/0x10 [ 1679.511648][T30873] do_syscall_64+0xcd/0xfa0 [ 1679.511667][T30873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.511688][T30873] RIP: 0033:0x7f868cb8f6c9 [ 1679.511702][T30873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1679.511716][T30873] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1679.511734][T30873] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1679.511744][T30873] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000c [ 1679.511753][T30873] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1679.511763][T30873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1679.511772][T30873] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1679.511792][T30873] [ 1679.739589][ C0] vkms_vblank_simulate: vblank timer overrun [ 1680.312415][T30877] program syz.3.5245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1680.686316][T30882] nvme_fcloop: unknown parameter or missing value '7' [ 1680.813314][ T30] audit: type=1326 audit(1762819941.680:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30880 comm="syz.1.5246" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f868cb8f6c9 code=0x0 [ 1681.973948][T30927] FAULT_INJECTION: forcing a failure. [ 1681.973948][T30927] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.003582][T30927] CPU: 0 UID: 0 PID: 30927 Comm: syz.3.5253 Not tainted syzkaller #0 PREEMPT(full) [ 1682.003604][T30927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1682.003614][T30927] Call Trace: [ 1682.003620][T30927] [ 1682.003627][T30927] dump_stack_lvl+0x16c/0x1f0 [ 1682.003653][T30927] should_fail_ex+0x512/0x640 [ 1682.003676][T30927] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1682.003698][T30927] should_failslab+0xc2/0x120 [ 1682.003718][T30927] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1682.003736][T30927] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1682.003761][T30927] ? kstrdup+0x53/0x100 [ 1682.003776][T30927] kstrdup+0x53/0x100 [ 1682.003792][T30927] apply_subsystem_event_filter+0x47f/0x17e0 [ 1682.003819][T30927] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1682.003843][T30927] ? _copy_from_user+0x59/0xd0 [ 1682.003867][T30927] subsystem_filter_write+0x95/0x120 [ 1682.003889][T30927] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1682.003909][T30927] vfs_write+0x2a0/0x11d0 [ 1682.003927][T30927] ? __pfx___mutex_lock+0x10/0x10 [ 1682.003945][T30927] ? __pfx_vfs_write+0x10/0x10 [ 1682.003966][T30927] ? __fget_files+0x20e/0x3c0 [ 1682.003986][T30927] ksys_write+0x12a/0x250 [ 1682.004001][T30927] ? __pfx_ksys_write+0x10/0x10 [ 1682.004022][T30927] do_syscall_64+0xcd/0xfa0 [ 1682.004040][T30927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.004055][T30927] RIP: 0033:0x7efc8618f6c9 [ 1682.004068][T30927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1682.004082][T30927] RSP: 002b:00007efc87047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1682.004096][T30927] RAX: ffffffffffffffda RBX: 00007efc863e5fa0 RCX: 00007efc8618f6c9 [ 1682.004106][T30927] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000c [ 1682.004114][T30927] RBP: 00007efc86211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1682.004123][T30927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.004131][T30927] R13: 00007efc863e6038 R14: 00007efc863e5fa0 R15: 00007fff31a9ce68 [ 1682.004162][T30927] [ 1682.553638][T30936] random: crng reseeded on system resumption [ 1682.627475][T30939] nvme_fcloop: unknown parameter or missing value '7' [ 1682.661499][ T30] audit: type=1326 audit(1762819943.539:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30938 comm="syz.3.5257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc8618f6c9 code=0x0 [ 1683.515782][T30949] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 1683.565003][T30951] dump_stack_lvl+0x16c/0x1f0 [ 1683.565027][T30951] should_fail_ex+0x512/0x640 [ 1683.565052][T30951] _copy_from_user+0x2e/0xd0 [ 1683.565076][T30951] mem_rw+0x1d6/0x640 [ 1683.565093][T30951] ? __pfx_mem_write+0x10/0x10 [ 1683.565105][T30951] vfs_write+0x2a0/0x11d0 [ 1683.565124][T30951] ? __pfx___mutex_lock+0x10/0x10 [ 1683.565143][T30951] ? __pfx_vfs_write+0x10/0x10 [ 1683.565164][T30951] ? __fget_files+0x20e/0x3c0 [ 1683.565184][T30951] ksys_write+0x12a/0x250 [ 1683.565199][T30951] ? __pfx_ksys_write+0x10/0x10 [ 1683.565220][T30951] do_syscall_64+0xcd/0xfa0 [ 1683.565239][T30951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.565255][T30951] RIP: 0033:0x7f868cb8f6c9 [ 1683.565267][T30951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1683.565281][T30951] RSP: 002b:00007f868add5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1683.565295][T30951] RAX: ffffffffffffffda RBX: 00007f868cde6180 RCX: 00007f868cb8f6c9 [ 1683.565305][T30951] RDX: 0000000000080000 RSI: 0000200000001680 RDI: 0000000000000002 [ 1683.565314][T30951] RBP: 00007f868add5090 R08: 0000000000000000 R09: 0000000000000000 [ 1683.565323][T30951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1683.565331][T30951] R13: 00007f868cde6218 R14: 00007f868cde6180 R15: 00007ffd80d39988 [ 1683.565351][T30951] [ 1685.097427][T30965] netlink: 'syz.1.5262': attribute type 1 has an invalid length. [ 1685.153065][T30965] FAULT_INJECTION: forcing a failure. [ 1685.153065][T30965] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.213957][T30965] CPU: 0 UID: 0 PID: 30965 Comm: syz.1.5262 Not tainted syzkaller #0 PREEMPT(full) [ 1685.213980][T30965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1685.213989][T30965] Call Trace: [ 1685.213996][T30965] [ 1685.214003][T30965] dump_stack_lvl+0x16c/0x1f0 [ 1685.214024][T30965] should_fail_ex+0x512/0x640 [ 1685.214048][T30965] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1685.214066][T30965] should_failslab+0xc2/0x120 [ 1685.214086][T30965] __kmalloc_cache_noprof+0x72/0x780 [ 1685.214100][T30965] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1685.214126][T30965] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1685.214152][T30965] apply_subsystem_event_filter+0x460/0x17e0 [ 1685.214179][T30965] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1685.214205][T30965] ? _copy_from_user+0x59/0xd0 [ 1685.214230][T30965] subsystem_filter_write+0x95/0x120 [ 1685.214252][T30965] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1685.214271][T30965] vfs_write+0x2a0/0x11d0 [ 1685.214290][T30965] ? __pfx___mutex_lock+0x10/0x10 [ 1685.214308][T30965] ? __pfx_vfs_write+0x10/0x10 [ 1685.214329][T30965] ? __fget_files+0x20e/0x3c0 [ 1685.214348][T30965] ksys_write+0x12a/0x250 [ 1685.214364][T30965] ? __pfx_ksys_write+0x10/0x10 [ 1685.214386][T30965] do_syscall_64+0xcd/0xfa0 [ 1685.214404][T30965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.214419][T30965] RIP: 0033:0x7f868cb8f6c9 [ 1685.214431][T30965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1685.214445][T30965] RSP: 002b:00007f868d93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1685.214459][T30965] RAX: ffffffffffffffda RBX: 00007f868cde5fa0 RCX: 00007f868cb8f6c9 [ 1685.214469][T30965] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000c [ 1685.214478][T30965] RBP: 00007f868cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1685.214486][T30965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1685.214494][T30965] R13: 00007f868cde6038 R14: 00007f868cde5fa0 R15: 00007ffd80d39988 [ 1685.214514][T30965] [ 1685.749560][T25240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1685.768454][T25240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1685.778861][T25240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1685.803535][T25240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1685.823902][T25240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1686.227324][T30966] chnl_net:caif_netlink_parms(): no params data found [ 1686.547154][T30966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.577771][T30966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.631399][T30966] bridge_slave_0: entered allmulticast mode [ 1686.654513][T30966] bridge_slave_0: entered promiscuous mode [ 1686.707373][T30966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.742756][T30966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.763462][T30985] random: crng reseeded on system resumption [ 1686.772159][T30966] bridge_slave_1: entered allmulticast mode [ 1686.819513][T30966] bridge_slave_1: entered promiscuous mode [ 1686.825721][T30986] netlink: zone id is out of range [ 1686.938362][T30966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.998683][T30966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.158064][T30966] team0: Port device team_slave_0 added [ 1687.204110][T30966] team0: Port device team_slave_1 added [ 1687.322521][T30966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1687.357770][T30966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1687.499507][T30966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1687.555691][T30966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1687.593860][T30966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1687.699640][T30966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1687.811640][T30966] hsr_slave_0: entered promiscuous mode [ 1687.855199][T30966] hsr_slave_1: entered promiscuous mode [ 1687.861354][T30966] debugfs: 'hsr0' already exists in 'hsr' [ 1687.880728][T30996] random: crng reseeded on system resumption [ 1687.888957][T30966] Cannot create hsr debugfs directory [ 1687.904953][T25240] Bluetooth: hci7: command tx timeout [ 1687.956036][T30995] FAULT_INJECTION: forcing a failure. [ 1687.956036][T30995] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.983703][T30995] CPU: 0 UID: 0 PID: 30995 Comm: syz.3.5267 Not tainted syzkaller #0 PREEMPT(full) [ 1687.983725][T30995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1687.983735][T30995] Call Trace: [ 1687.983741][T30995] [ 1687.983747][T30995] dump_stack_lvl+0x16c/0x1f0 [ 1687.983772][T30995] should_fail_ex+0x512/0x640 [ 1687.983797][T30995] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1687.983831][T30995] should_failslab+0xc2/0x120 [ 1687.983853][T30995] __kmalloc_cache_noprof+0x72/0x780 [ 1687.983868][T30995] ? create_filter_start.constprop.0+0x103/0x300 [ 1687.983894][T30995] ? create_filter_start.constprop.0+0x103/0x300 [ 1687.983914][T30995] create_filter_start.constprop.0+0x103/0x300 [ 1687.983937][T30995] apply_subsystem_event_filter+0x188/0x17e0 [ 1687.983961][T30995] ? __might_fault+0xe3/0x190 [ 1687.983975][T30995] ? __might_fault+0x13b/0x190 [ 1687.983990][T30995] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1687.984015][T30995] ? _copy_from_user+0x59/0xd0 [ 1687.984044][T30995] subsystem_filter_write+0x95/0x120 [ 1687.984066][T30995] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1687.984085][T30995] vfs_write+0x2a0/0x11d0 [ 1687.984105][T30995] ? __pfx___mutex_lock+0x10/0x10 [ 1687.984125][T30995] ? __pfx_vfs_write+0x10/0x10 [ 1687.984148][T30995] ? __fget_files+0x20e/0x3c0 [ 1687.984169][T30995] ksys_write+0x12a/0x250 [ 1687.984184][T30995] ? __pfx_ksys_write+0x10/0x10 [ 1687.984206][T30995] do_syscall_64+0xcd/0xfa0 [ 1687.984224][T30995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.984240][T30995] RIP: 0033:0x7efc8618f6c9 [ 1687.984252][T30995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1687.984266][T30995] RSP: 002b:00007efc87047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1687.984280][T30995] RAX: ffffffffffffffda RBX: 00007efc863e5fa0 RCX: 00007efc8618f6c9 [ 1687.984290][T30995] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000c [ 1687.984299][T30995] RBP: 00007efc86211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1687.984307][T30995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1687.984316][T30995] R13: 00007efc863e6038 R14: 00007efc863e5fa0 R15: 00007fff31a9ce68 [ 1687.984337][T30995] [ 1689.900772][T31003] kexec: Could not allocate control_code_buffer [ 1689.985036][T25240] Bluetooth: hci7: command tx timeout [ 1690.342163][T31021] program syz.1.5275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1690.843519][T31027] netlink: zone id is out of range [ 1692.067210][T25218] Bluetooth: hci7: command tx timeout [ 1693.138941][T31066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1693.150879][T31066] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1693.165830][T31066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1693.180423][T31066] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1693.193888][T31066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1693.208505][T31066] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1693.220155][T31066] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1693.233505][T31066] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1693.246648][T31066] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1693.261519][T31066] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1694.121657][T31072] kexec: Could not allocate control_code_buffer [ 1694.467381][T25240] Bluetooth: hci3: command 0x0406 tx timeout [ 1694.719326][T31094] random: crng reseeded on system resumption [ 1695.187642][T25240] Bluetooth: hci2: command 0x0c1a tx timeout [ 1695.193746][T25218] Bluetooth: hci0: command 0x041b tx timeout [ 1695.199884][T25328] Bluetooth: hci4: command 0x0406 tx timeout [ 1695.268075][T25240] Bluetooth: hci7: command 0x0c1a tx timeout [ 1695.274228][T25328] Bluetooth: hci6: command 0x040f tx timeout [ 1695.280403][T25218] Bluetooth: hci5: command 0x040f tx timeout [ 1695.286769][T26999] Bluetooth: hci1: command 0x041b tx timeout [ 1696.645963][T31104] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 1696.819185][T31129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1696.849256][T31129] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1696.865515][T31129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1696.878577][T31129] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1696.894843][T31129] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1696.905100][T31129] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1696.915399][T31129] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1696.928612][T31129] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1698.423461][T31150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1698.432632][T31150] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1698.445721][T31150] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1698.459798][T31150] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1698.476334][T31150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1698.488613][T31150] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1698.503547][T31150] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1698.516643][T31150] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1699.744378][T31168] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1699.761193][T31168] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1699.789468][T31168] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1699.795813][T31168] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1699.814775][T31168] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1699.830179][T31168] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1699.840152][T31168] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1699.860096][T31168] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1699.981884][T31179] netlink: 'syz.3.5308': attribute type 1 has an invalid length. [ 1700.013234][T31179] FAULT_INJECTION: forcing a failure. [ 1700.013234][T31179] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.047535][T31179] CPU: 0 UID: 0 PID: 31179 Comm: syz.3.5308 Not tainted syzkaller #0 PREEMPT(full) [ 1700.047558][T31179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1700.047568][T31179] Call Trace: [ 1700.047575][T31179] [ 1700.047581][T31179] dump_stack_lvl+0x16c/0x1f0 [ 1700.047605][T31179] should_fail_ex+0x512/0x640 [ 1700.047628][T31179] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1700.047650][T31179] should_failslab+0xc2/0x120 [ 1700.047670][T31179] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1700.047689][T31179] ? apply_subsystem_event_filter+0x47f/0x17e0 [ 1700.047714][T31179] ? kstrdup+0x53/0x100 [ 1700.047729][T31179] kstrdup+0x53/0x100 [ 1700.047745][T31179] apply_subsystem_event_filter+0x47f/0x17e0 [ 1700.047773][T31179] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1700.047797][T31179] ? _copy_from_user+0x59/0xd0 [ 1700.047830][T31179] subsystem_filter_write+0x95/0x120 [ 1700.047853][T31179] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1700.047873][T31179] vfs_write+0x2a0/0x11d0 [ 1700.047893][T31179] ? __pfx___mutex_lock+0x10/0x10 [ 1700.047911][T31179] ? __pfx_vfs_write+0x10/0x10 [ 1700.047931][T31179] ? __fget_files+0x20e/0x3c0 [ 1700.047951][T31179] ksys_write+0x12a/0x250 [ 1700.047966][T31179] ? __pfx_ksys_write+0x10/0x10 [ 1700.047987][T31179] do_syscall_64+0xcd/0xfa0 [ 1700.048006][T31179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.048021][T31179] RIP: 0033:0x7efc8618f6c9 [ 1700.048034][T31179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1700.048047][T31179] RSP: 002b:00007efc87047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1700.048062][T31179] RAX: ffffffffffffffda RBX: 00007efc863e5fa0 RCX: 00007efc8618f6c9 [ 1700.048072][T31179] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000d [ 1700.048081][T31179] RBP: 00007efc86211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1700.048089][T31179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1700.048098][T31179] R13: 00007efc863e6038 R14: 00007efc863e5fa0 R15: 00007fff31a9ce68 [ 1700.048117][T31179] [ 1701.032746][T31104] Bluetooth: hci3: command 0x0406 tx timeout [ 1701.831971][T31104] Bluetooth: hci2: command 0x0c1a tx timeout [ 1701.838823][T25240] Bluetooth: hci0: command 0x041b tx timeout [ 1701.845069][T25218] Bluetooth: hci4: command 0x0406 tx timeout [ 1701.851257][T25226] Bluetooth: hci1: command 0x041b tx timeout [ 1701.911072][T25226] Bluetooth: hci7: command 0x0c1a tx timeout [ 1701.917095][T25226] Bluetooth: hci6: command 0x040f tx timeout [ 1701.923411][T25218] Bluetooth: hci5: command 0x040f tx timeout [ 1702.090134][T31189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1702.096735][T31189] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1702.107677][T31189] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1702.121533][T31189] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1702.134014][T31189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1702.147736][T31189] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1702.162589][T31189] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1702.176658][T31189] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1703.394654][T31204] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1703.412239][T31204] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1703.422102][T31204] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1703.432413][T31204] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1703.448870][T31204] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1703.457973][T31204] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1703.474089][T31204] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1703.490989][T31204] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1705.160238][T31228] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1705.172919][T31228] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1705.189298][T31228] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1705.202904][T31228] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1705.213268][T31228] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1705.230111][T31228] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1705.240216][T31228] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1705.260418][T31228] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1705.493772][T31235] serio: Serial port pty6 [ 1706.032258][T31248] netlink: 'syz.3.5325': attribute type 1 has an invalid length. [ 1706.075078][T31248] FAULT_INJECTION: forcing a failure. [ 1706.075078][T31248] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.133066][T31248] CPU: 0 UID: 0 PID: 31248 Comm: syz.3.5325 Not tainted syzkaller #0 PREEMPT(full) [ 1706.133090][T31248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1706.133100][T31248] Call Trace: [ 1706.133105][T31248] [ 1706.133112][T31248] dump_stack_lvl+0x16c/0x1f0 [ 1706.133136][T31248] should_fail_ex+0x512/0x640 [ 1706.133160][T31248] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1706.133177][T31248] should_failslab+0xc2/0x120 [ 1706.133198][T31248] __kmalloc_cache_noprof+0x72/0x780 [ 1706.133212][T31248] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1706.133237][T31248] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1706.133257][T31248] apply_subsystem_event_filter+0x460/0x17e0 [ 1706.133284][T31248] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1706.133310][T31248] ? _copy_from_user+0x59/0xd0 [ 1706.133335][T31248] subsystem_filter_write+0x95/0x120 [ 1706.133357][T31248] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1706.133377][T31248] vfs_write+0x2a0/0x11d0 [ 1706.133395][T31248] ? __pfx___mutex_lock+0x10/0x10 [ 1706.133413][T31248] ? __pfx_vfs_write+0x10/0x10 [ 1706.133434][T31248] ? __fget_files+0x20e/0x3c0 [ 1706.133455][T31248] ksys_write+0x12a/0x250 [ 1706.133470][T31248] ? __pfx_ksys_write+0x10/0x10 [ 1706.133491][T31248] do_syscall_64+0xcd/0xfa0 [ 1706.133509][T31248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.133525][T31248] RIP: 0033:0x7efc8618f6c9 [ 1706.133538][T31248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1706.133552][T31248] RSP: 002b:00007efc87047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1706.133566][T31248] RAX: ffffffffffffffda RBX: 00007efc863e5fa0 RCX: 00007efc8618f6c9 [ 1706.133576][T31248] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000d [ 1706.133584][T31248] RBP: 00007efc86211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1706.133593][T31248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1706.133601][T31248] R13: 00007efc863e6038 R14: 00007efc863e5fa0 R15: 00007fff31a9ce68 [ 1706.133621][T31248] [ 1706.346993][ C0] vkms_vblank_simulate: vblank timer overrun [ 1706.684854][T25226] Bluetooth: hci3: command 0x0406 tx timeout [ 1707.193629][T25226] Bluetooth: hci0: command 0x041b tx timeout [ 1707.199689][T31104] Bluetooth: hci4: command 0x0406 tx timeout [ 1707.273700][T25226] Bluetooth: hci7: command 0x0c1a tx timeout [ 1707.279835][T31104] Bluetooth: hci6: command 0x040f tx timeout [ 1707.285916][T25218] Bluetooth: hci5: command 0x040f tx timeout [ 1707.293440][T25240] Bluetooth: hci1: command 0x041b tx timeout [ 1707.299553][T31104] Bluetooth: hci2: command 0x0c1a tx timeout [ 1708.184918][T31255] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1708.192077][T31255] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1708.200471][T31255] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1708.207449][T31255] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1708.215960][T31255] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1708.222018][T31255] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1708.228506][T31255] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1708.234902][T31255] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1708.267191][T25240] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1708.277613][T25240] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1708.286007][T25240] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1708.306162][T25240] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1708.313757][T25240] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1708.738379][T31257] chnl_net:caif_netlink_parms(): no params data found [ 1709.005769][T31257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.029987][T31257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.064735][T31257] bridge_slave_0: entered allmulticast mode [ 1709.082091][T31257] bridge_slave_0: entered promiscuous mode [ 1709.105854][T31257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.137018][T31257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.144267][T31257] bridge_slave_1: entered allmulticast mode [ 1709.184628][T31257] bridge_slave_1: entered promiscuous mode [ 1709.276923][T31257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.318603][T31257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.423829][T31257] team0: Port device team_slave_0 added [ 1709.455448][T31257] team0: Port device team_slave_1 added [ 1709.539236][T31257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1709.565842][T31257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1709.666319][T31257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1709.714402][T31257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1709.742904][T31257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1709.768988][ C0] vkms_vblank_simulate: vblank timer overrun [ 1709.830900][T31257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1709.904583][T31288] netlink: 'syz.3.5334': attribute type 1 has an invalid length. [ 1709.920638][T31257] hsr_slave_0: entered promiscuous mode [ 1709.930658][T31257] hsr_slave_1: entered promiscuous mode [ 1709.945369][T31257] debugfs: 'hsr0' already exists in 'hsr' [ 1709.958941][T31257] Cannot create hsr debugfs directory [ 1709.990169][T31289] FAULT_INJECTION: forcing a failure. [ 1709.990169][T31289] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.049827][T31289] CPU: 0 UID: 0 PID: 31289 Comm: syz.3.5334 Not tainted syzkaller #0 PREEMPT(full) [ 1710.049850][T31289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1710.049860][T31289] Call Trace: [ 1710.049865][T31289] [ 1710.049872][T31289] dump_stack_lvl+0x16c/0x1f0 [ 1710.049895][T31289] should_fail_ex+0x512/0x640 [ 1710.049918][T31289] ? __kmalloc_noprof+0xca/0x880 [ 1710.049946][T31289] should_failslab+0xc2/0x120 [ 1710.049966][T31289] __kmalloc_noprof+0xdd/0x880 [ 1710.049988][T31289] ? __pfx_trace_seq_printf+0x10/0x10 [ 1710.050006][T31289] ? tracing_log_err+0xb9/0x6d0 [ 1710.050029][T31289] ? tracing_log_err+0xb9/0x6d0 [ 1710.050049][T31289] tracing_log_err+0xb9/0x6d0 [ 1710.050075][T31289] append_filter_err+0x399/0x610 [ 1710.050097][T31289] apply_subsystem_event_filter+0x75a/0x17e0 [ 1710.050124][T31289] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1710.050149][T31289] ? _copy_from_user+0x59/0xd0 [ 1710.050173][T31289] subsystem_filter_write+0x95/0x120 [ 1710.050195][T31289] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1710.050214][T31289] vfs_write+0x2a0/0x11d0 [ 1710.050233][T31289] ? __pfx___mutex_lock+0x10/0x10 [ 1710.050252][T31289] ? __pfx_vfs_write+0x10/0x10 [ 1710.050272][T31289] ? __fget_files+0x20e/0x3c0 [ 1710.050293][T31289] ksys_write+0x12a/0x250 [ 1710.050308][T31289] ? __pfx_ksys_write+0x10/0x10 [ 1710.050345][T31289] do_syscall_64+0xcd/0xfa0 [ 1710.050366][T31289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.050382][T31289] RIP: 0033:0x7efc8618f6c9 [ 1710.050395][T31289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1710.050409][T31289] RSP: 002b:00007efc87005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1710.050422][T31289] RAX: ffffffffffffffda RBX: 00007efc863e6180 RCX: 00007efc8618f6c9 [ 1710.050432][T31289] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000c [ 1710.050441][T31289] RBP: 00007efc86211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1710.050449][T31289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1710.050458][T31289] R13: 00007efc863e6218 R14: 00007efc863e6180 R15: 00007fff31a9ce68 [ 1710.050478][T31289] [ 1710.270115][ C0] vkms_vblank_simulate: vblank timer overrun [ 1710.327282][T31284] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1710.333824][T31284] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1710.340705][T31284] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1710.347171][T31284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1710.353185][T31284] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1710.359315][T31284] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1710.366540][T31284] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1710.372572][T31284] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1710.378633][T31284] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1710.384609][T31284] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1710.391897][T31284] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1711.596007][T31104] Bluetooth: hci3: command 0x0406 tx timeout [ 1712.476918][T31104] Bluetooth: hci8: command 0x041b tx timeout [ 1712.484292][T25240] Bluetooth: hci7: command 0x0c1a tx timeout [ 1712.490387][T25240] Bluetooth: hci6: command 0x040f tx timeout [ 1712.496982][T25218] Bluetooth: hci5: command 0x040f tx timeout [ 1712.503397][T25226] Bluetooth: hci1: command 0x041b tx timeout [ 1712.509437][T25328] Bluetooth: hci2: command 0x0c1a tx timeout [ 1712.515427][T25328] Bluetooth: hci0: command 0x041b tx timeout [ 1712.523681][T25240] Bluetooth: hci4: command 0x0406 tx timeout [ 1714.082066][T31341] random: crng reseeded on system resumption [ 1714.557207][T31317] Bluetooth: hci8: command 0x041b tx timeout [ 1716.638457][T31317] Bluetooth: hci8: command 0x041b tx timeout [ 1718.719406][T31317] Bluetooth: hci8: command 0x041b tx timeout [ 1720.802213][T31317] Bluetooth: hci8: command 0x041b tx timeout [ 1720.880830][ T31] INFO: task syz-executor:29331 blocked for more than 143 seconds. [ 1720.888749][ T31] Not tainted syzkaller #0 [ 1720.896415][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1720.905525][ T31] task:syz-executor state:D stack:24552 pid:29331 tgid:29331 ppid:1 task_flags:0x480140 flags:0x00080003 [ 1720.920874][ T31] Call Trace: [ 1720.924162][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1720.927088][ T31] __schedule+0x1190/0x5de0 [ 1720.932041][ T31] ? __lock_acquire+0x622/0x1c90 [ 1720.937108][ T31] ? __pfx___schedule+0x10/0x10 [ 1720.960682][ T31] ? find_held_lock+0x2b/0x80 [ 1720.965391][ T31] ? schedule+0x2d7/0x3a0 [ 1720.969716][ T31] schedule+0xe7/0x3a0 [ 1720.980516][ T31] schedule_timeout+0x257/0x290 [ 1720.985435][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1721.010650][ T31] ? mark_held_locks+0x49/0x80 [ 1721.015452][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1721.030491][ T31] __wait_for_common+0x2fc/0x4e0 [ 1721.035460][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1721.050757][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1721.056245][ T31] remove_one+0x312/0x420 [ 1721.133672][ T31] ? find_next_child+0x18f/0x280 [ 1721.138658][ T31] __simple_recursive_removal+0x15b/0x610 [ 1721.176669][ T31] ? __pfx_remove_one+0x10/0x10 [ 1721.195373][ T31] debugfs_remove+0x5d/0x80 [ 1721.199917][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 1721.226611][ T31] nsim_dev_reload_destroy+0x144/0x4d0 [ 1721.250589][ T31] nsim_drv_remove+0x52/0x1d0 [ 1721.255301][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1721.270565][ T31] device_remove+0xcb/0x170 [ 1721.275166][ T31] device_release_driver_internal+0x44b/0x620 [ 1721.290836][ T31] bus_remove_device+0x22f/0x420 [ 1721.295796][ T31] device_del+0x396/0x9f0 [ 1721.300136][ T31] ? __pfx_device_del+0x10/0x10 [ 1721.320633][ T31] device_unregister+0x1d/0xc0 [ 1721.325446][ T31] del_device_store+0x355/0x4a0 [ 1721.361464][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1721.366876][ T31] ? find_held_lock+0x2b/0x80 [ 1721.384055][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1721.389458][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1721.408937][ T31] bus_attr_store+0x74/0xb0 [ 1721.413769][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 1721.418964][ T31] sysfs_kf_write+0xf2/0x150 [ 1721.423918][ T31] kernfs_fop_write_iter+0x3af/0x570 [ 1721.429210][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1721.436147][ T31] vfs_write+0x7d3/0x11d0 [ 1721.440486][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1721.452664][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1721.457445][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1721.464891][ T31] ksys_write+0x12a/0x250 [ 1721.469232][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1721.474436][ T31] do_syscall_64+0xcd/0xfa0 [ 1721.478941][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.485340][ T31] RIP: 0033:0x7f8d3c58e17f [ 1721.489760][ T31] RSP: 002b:00007fffa03dff20 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1721.498540][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8d3c58e17f [ 1721.506807][ T31] RDX: 0000000000000001 RSI: 00007fffa03dff70 RDI: 0000000000000005 [ 1721.521358][ T31] RBP: 00007f8d3c6132cb R08: 0000000000000000 R09: 00007fffa03dfd77 [ 1721.529347][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1721.541178][ T31] R13: 00007fffa03dff70 R14: 00007f8d3d314620 R15: 0000000000000003 [ 1721.549237][ T31] [ 1721.617295][ T31] INFO: task syz.0.4896:29476 blocked for more than 144 seconds. [ 1721.636105][ T31] Not tainted syzkaller #0 [ 1721.650960][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1721.659656][ T31] task:syz.0.4896 state:D stack:27256 pid:29476 tgid:29474 ppid:29037 task_flags:0x400140 flags:0x00080002 [ 1721.690748][ T31] Call Trace: [ 1721.694051][ T31] [ 1721.696971][ T31] __schedule+0x1190/0x5de0 [ 1721.713580][ T31] ? check_path.constprop.0+0x24/0x50 [ 1721.718989][ T31] ? __lock_acquire+0x622/0x1c90 [ 1721.738542][ T31] ? __pfx___schedule+0x10/0x10 [ 1721.743758][ T31] ? find_held_lock+0x2b/0x80 [ 1721.748441][ T31] ? schedule+0x2d7/0x3a0 [ 1721.779521][ T31] ? devlink_health_report+0x6b4/0xb00 [ 1721.785471][ T31] schedule+0xe7/0x3a0 [ 1721.789544][ T31] schedule_preempt_disabled+0x13/0x30 [ 1721.812879][ T31] __mutex_lock+0x818/0x1060 [ 1721.818167][ T31] ? devlink_health_report+0x6b4/0xb00 [ 1721.834153][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1721.850845][ T31] ? do_user_addr_fault+0x843/0x1370 [ 1721.856173][ T31] ? irqentry_exit+0x3b/0x90 [ 1721.875613][ T31] ? devlink_health_report+0x6b4/0xb00 [ 1721.881466][ T31] devlink_health_report+0x6b4/0xb00 [ 1721.886779][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 1721.893003][ T31] ? rep_movs_alternative+0x4a/0x90 [ 1721.898218][ T31] ? _copy_from_user+0x59/0xd0 [ 1721.903370][ T31] nsim_dev_health_break_write+0x166/0x210 [ 1721.909182][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1721.915792][ T31] full_proxy_write+0x131/0x1a0 [ 1721.924912][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 1721.930309][ T31] vfs_write+0x2a0/0x11d0 [ 1721.934929][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1721.939953][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1721.947028][ T31] ? __fget_files+0x20e/0x3c0 [ 1721.951919][ T31] ksys_write+0x12a/0x250 [ 1721.956241][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1721.961461][ T31] do_syscall_64+0xcd/0xfa0 [ 1721.965961][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.972152][ T31] RIP: 0033:0x7f85e1d8f6c9 [ 1721.976559][ T31] RSP: 002b:00007f85e2c96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1721.985320][ T31] RAX: ffffffffffffffda RBX: 00007f85e1fe5fa0 RCX: 00007f85e1d8f6c9 [ 1721.993512][ T31] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000005 [ 1722.002818][ T31] RBP: 00007f85e1e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1722.010800][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1722.019232][ T31] R13: 00007f85e1fe6038 R14: 00007f85e1fe5fa0 R15: 00007ffcfde46df8 [ 1722.028088][ T31] [ 1722.058878][ T31] [ 1722.058878][ T31] Showing all locks held in the system: [ 1722.074097][ T31] 1 lock held by khungtaskd/31: [ 1722.078971][ T31] #0: ffffffff8e3c45a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1722.093653][ T31] 3 locks held by kworker/0:0/11249: [ 1722.100611][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1722.111720][ T31] #1: ffffc9000acf7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1722.124899][ T31] #2: ffff888025146240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b6/0x6da0 [ 1722.135543][ T31] 7 locks held by syz-executor/29331: [ 1722.143076][ T31] #0: ffff888034914420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1722.153934][ T31] #1: ffff888060184488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1722.165391][ T31] #2: ffff8880281f4f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1722.175858][ T31] #3: ffffffff8f66cbc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1722.186698][ T31] #4: ffff8880121cc0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 1722.198143][ T31] #5: ffff88803449a250 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 1722.208412][ T31] #6: ffff888026541568 (&sb->s_type->i_mutex_key#3/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x354/0x610 [ 1722.220488][ T31] 4 locks held by kworker/u10:18/29397: [ 1722.226885][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1722.237563][ T31] #1: ffffc90003fcfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1722.247769][ T31] #2: ffffffff900d4610 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 1722.261394][ T31] #3: ffff8880121cc0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 [ 1722.271852][ T31] 3 locks held by syz.0.4896/29476: [ 1722.277037][ T31] #0: ffff88806047c2b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1722.286363][ T31] #1: ffff888141e98420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1722.295605][ T31] #2: ffff88803449a250 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_health_report+0x6b4/0xb00 [ 1722.306417][ T31] 4 locks held by syz-executor/29671: [ 1722.312122][ T31] #0: ffff888034914420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1722.322113][ T31] #1: ffff888071d86c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1722.332699][ T31] #2: ffff8880281f4f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1722.343330][ T31] #3: ffffffff8f66cbc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1722.355370][ T31] 2 locks held by getty/29946: [ 1722.360131][ T31] #0: ffff8880344ad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1722.372621][ T31] #1: ffffc90003abd2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1722.382968][ T31] 4 locks held by syz-executor/30231: [ 1722.388327][ T31] #0: ffff888034914420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1722.397682][ T31] #1: ffff88805dc1d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1722.411530][ T31] #2: ffff8880281f4f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1722.421772][ T31] #3: ffffffff8f66cbc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1722.432948][ T31] 4 locks held by syz-executor/30495: [ 1722.438311][ T31] #0: ffff888034914420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1722.447631][ T31] #1: ffff88807a522488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1722.459111][ T31] #2: ffff8880281f4f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1722.469498][ T31] #3: ffffffff8f66cbc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1722.480738][ T31] 2 locks held by syz.1.5169/30607: [ 1722.492037][ T31] #0: ffffffff900eaa48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1722.503586][ T31] #1: ffffffff8e3cfb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1722.513901][ T31] 4 locks held by syz-executor/30966: [ 1722.519255][ T31] #0: ffff888034914420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1722.528509][ T31] #1: ffff88805a6c1c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1722.539091][ T31] #2: ffff8880281f4f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1722.549327][ T31] #3: ffffffff8f66cbc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1722.561483][ T31] 4 locks held by syz-executor/31257: [ 1722.566850][ T31] #0: ffff888034914420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1722.576165][ T31] #1: ffff8880310bd488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1722.586734][ T31] #2: ffff8880281f4f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1722.598143][ T31] #3: ffffffff8f66cbc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 1722.608931][ T31] 4 locks held by syz.3.5351/31358: [ 1722.614393][ T31] #0: ffff888034914420 (sb_writers#7){.+.+}-{0:0}, at: do_writev+0x132/0x340 [ 1722.623481][ T31] #1: ffff88805aab6088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1722.633534][ T31] #2: ffff8880281f4e18 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1722.645212][ T31] #3: ffffffff8f66cbc8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x185/0x730 [ 1722.656083][ T31] [ 1722.658400][ T31] ============================================= [ 1722.658400][ T31] [ 1722.669777][ T31] NMI backtrace for cpu 0 [ 1722.669790][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1722.669807][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1722.669816][ T31] Call Trace: [ 1722.669822][ T31] [ 1722.669827][ T31] dump_stack_lvl+0x116/0x1f0 [ 1722.669850][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1722.669871][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1722.669889][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1722.669911][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1722.669935][ T31] watchdog+0xf3f/0x1170 [ 1722.669953][ T31] ? rcu_is_watching+0x12/0xc0 [ 1722.669970][ T31] ? __pfx_watchdog+0x10/0x10 [ 1722.669982][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1722.670000][ T31] ? __kthread_parkme+0x19e/0x250 [ 1722.670019][ T31] ? __pfx_watchdog+0x10/0x10 [ 1722.670032][ T31] kthread+0x3c5/0x780 [ 1722.670054][ T31] ? __pfx_kthread+0x10/0x10 [ 1722.670075][ T31] ? rcu_is_watching+0x12/0xc0 [ 1722.670090][ T31] ? __pfx_kthread+0x10/0x10 [ 1722.670111][ T31] ret_from_fork+0x675/0x7d0 [ 1722.670132][ T31] ? __pfx_kthread+0x10/0x10 [ 1722.670152][ T31] ret_from_fork_asm+0x1a/0x30 [ 1722.670208][ T31] [ 1722.881596][T31317] Bluetooth: hci8: command 0x041b tx timeout