last executing test programs: 22.399938188s ago: executing program 0 (id=1282): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xf, &(0x7f0000000140)={[0x7e, 0xe, 0x0, 0xf, 0xc, 0x8, 0x1, 0xc86, 0x8, 0x9, 0x2, 0xbf, 0x8, 0x59c, 0x609, 0x4]}, &(0x7f0000000280)={[0x8912, 0x7, 0xc000000000000000, 0xff, 0xa5, 0x8, 0x584, 0xaee, 0x4, 0x6, 0x7a, 0xa, 0x3, 0x7, 0x2a0, 0x75cd65ac]}, &(0x7f0000000440)={[0x1ff, 0x4, 0xfffffffffffffffd, 0x8, 0x775, 0x3, 0xffffffffffff2e3d, 0x3, 0x5, 0x80, 0x5, 0x3, 0x4, 0x3, 0xf47, 0xbba2]}, &(0x7f00000004c0)={0x4e3, 0x5239}) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r1, 0x400c4d00, r1) 21.700262844s ago: executing program 0 (id=1284): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0x1, 0x40, 0x4202, 0x3}, 0x2, 0xfffffffffffffffe, "72e00d838b24ff6fd5411f43301c8fa23cf2b9541b346600"}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xf, 0x0) landlock_create_ruleset$auto(0x0, 0x6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000000)) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x7ff, 0x0) openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim2/ports/0/ipsec\x00', 0x4000, 0x0) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000800)={@sival_ptr=&(0x7f0000000600)="3969a9a0ed7f369b98c7ad1331c80dfd3a64c80ea787eae15fb4dacf5de6610f76adc49a0208d30b5abcaca8801b0d164ccfb4bcefaaf2e2fea44f074d8ce0c1868f8dbd542034292c5349eae178268347d343c5aeb3684dabc4594f28e7af68bd9b77f7da7b5280a24de8b663cfe00e222d2af1593fd43f68669b6329b549845b5ef05f4e6f3ea9aa46d9fcc78f6f711428b9e3d948a879c55b5aec6f160ecd5ed79d3977bb94b79b4c31412be770fca05e10d843c3f3fa916b8917b3e58d4defc2982661c0fd63e1ded6a830c8e5d6ecc16924c0d1b0", @raw=0x3, 0x7, @_sigev_thread={&(0x7f0000000740)=&(0x7f0000000700)=0x80, &(0x7f0000000780)="fc5a5ca41429f482bd76aafc7941913f6edcbbd71098ba58721111dc66b28e90883773a2517099be55b666a31d2e7706c357dc7dd327d2e139535584eb1181542dacc51055542da21b3b6cfbe65a8eb9f9d0544b8faf1b8d0f92e381cdfe69cef334793cf578c6de08b9cabd84"}}, &(0x7f0000000840)=0x965) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)=@enable_stats={0x7f}, 0xa6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) pipe2$auto(0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r4, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x48000) memfd_create$auto(&(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x4) pselect6$auto(0x9, &(0x7f0000000400)={[0x8, 0x5411, 0x2, 0x3, 0x2, 0x3, 0x2, 0x3, 0x6, 0x0, 0x1, 0x0, 0x38, 0x4, 0x8000000000000001, 0x7]}, &(0x7f0000000480)={[0xfffffffffffff3d4, 0xda12, 0x1, 0x80000000, 0x7fffffffffffffff, 0x5, 0x8, 0x2, 0x1ff, 0x9, 0x4, 0x8000000000000000, 0xffffffffffffffff, 0x7, 0x9, 0x81]}, &(0x7f0000000500)={[0x9, 0x4, 0xb4, 0x7, 0xe, 0x80000000, 0xf506, 0x10000, 0x638d, 0x8000000000000000, 0x3b47, 0x9, 0xfb, 0x9, 0x21b, 0x1000000000000000]}, &(0x7f0000000580)={0x100000001, 0xe3}, &(0x7f00000005c0)) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 19.46581223s ago: executing program 0 (id=1290): unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, 0x0, 0x4145) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20461, 0x0) write$auto(r0, &(0x7f0000000700)='/ECv/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lDT\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x90\xc8Oj\xd2\xd7\x0f\x1f\xf0\xb57\xfb\x87,P\xfb{\x99\x10\xdc\x80JGs\r\x93\x7f\x11\x0e\xbc\x99\x93M\xfe\xfd\x11\x14\xac]\xc4\xf2\xf4\xef\xde\xac\x1aQ\xdd\xd7[\xd7@\xe7R{\xaar\xfb~\x94\xd2n]\xd2\x15h\x18|2g\xfb\\%\xe6-\xca\xe3\xd9!7r\xf7\xfc\xe4z58\xf0W\xde\xd3\x90\xc5\rT\xbe\x90\xc0\xbc\xd5\xdb\x0e\t\x84X*\xcf\xd3}\x0eR\xae6\xa58\xc8\xac\x1d>t\xbe\xd7\xb3\xfc\xee\xa7jG\xb0\x1cN\xfb\x8c\x80+\xc2\x8f\x7f\xaf&\xbfx\xa4>\x8a\xab\t,i\xf42\xc2\nY\xcd\\\x1fLPP\x19\xe0\x1b-w\x85\xf9\xc3\x11/\\zh\xf7l\xaa?m\xd5.\xc1H\xdc\nq=.\x9f\xb3\x8aLf\x81\x82\x9e\xeb\xa6\x92Vg(pp3\x8c\xc5\xe6U\x1dK]\a\xf7\xd3!u\xb8akQ1\x92\xae\xe0C\xac\x9f\xd28Kg\xa6\xfbO\x84^\xfe\xed\x96\xfa\xa0\xd9\x8e\xa6\x17\xb9\x1c\xd6Z\x9ae\x85\xd1(\xde\xf1du\x12\xa7\xd3\xf2\xd1\xed\xa2\xe6;?\xfe\t|-\\bI\x9e\x02\x9d\xd3\x9a\'Oq\x8a\xcd\xd9\n\xa5\xedQg\xe1b\x93\xa1\xba\xc4\x91\xc8sg\xb5`z\xe8\r\xbeYg\x04E\xeb\x15\x05\x99\xcf7\x92\xcc\xd3^k]\xf6\xf1\x94n\x0f:mN\xa3W%*\xc2+F\x98\xc2[\x82\xed\x11q[\x10\x80\x98\x17C\xa1\x13=\xba\xcb\xa8', 0x100000a3d9) mmap$auto(0x1, 0x400004, 0x800df, 0x9b72, 0x2, 0x0) clock_adjtime$auto(0x17, 0x0) socket(0x2, 0x2, 0x0) mprotect$auto(0x0, 0x806121, 0x6) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xb, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x10780, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x82, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) sysfs$auto(0x2, 0xc, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x0, &(0x7f0000000180)='no_\xe8\xdb\b\x9c\xe7J\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) 8.630756914s ago: executing program 3 (id=1307): openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) read$auto(0x3, 0x0, 0x8080) (async) ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) (async) syz_clone3(&(0x7f0000000300)={0x20080000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x20000037}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2}, 0x58) (async) write$auto(0xffffffffffffffff, 0x0, 0x92bf) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3, 0x6b, 0xfffffffd, 0x10002, 0xfd}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) (async) unshare$auto(0x40000080) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0x4, 0x3, 0x3b) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth0\x00'}) (async) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) (async) r4 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080)) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) unshare$auto(0x40000083) (async) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400006242181d32ef301df7b2d86c0e43cf00", @ANYRES16=r5, @ANYBLOB="000325bd7000fddbdf250300000007000200292800000600010009000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004010) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'0x0, 0x1, 0x80, 0x3, 0x8}, 0xfffffff8, 0x1ff, 0x800, 0x4, @raw=0x3, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0db", 0x0}) r1 = setfsgid$auto(r0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x40000, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x5380, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') setns(r4, 0x8000000) sendmsg$auto_OVS_VPORT_CMD_GET(r3, &(0x7f0000003d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003d40)=ANY=[], 0x2758}, 0x1, 0x0, 0x0, 0x8080}, 0x4008000) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 6.108239776s ago: executing program 1 (id=1313): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x60e83, 0x0) ioctl$auto(r1, 0x3b8e, r0) 5.971682677s ago: executing program 2 (id=1314): mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) bpf$auto(0xd, &(0x7f0000000000)=@test={r0, 0x71c, 0xfaab, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x2, 0x1fc, 0xfd, 0xb5, 0x4, 0x40004, 0xd96e}, 0xe3) io_uring_setup$auto(0x6, 0x0) sysfs$auto(0x2, 0x100000000000038, 0x0) r1 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) timer_create$auto(0x3, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000a40)=""/4096, 0x1000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000000)={0x4, r2, 0x3, "750791e656f6cca009cc2d969e3075aa"}) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.932433935s ago: executing program 1 (id=1315): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001040)='/dev/dsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037") r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x103342, 0x0) read$auto(0x3, 0x0, 0x8080) readv$auto(r1, &(0x7f0000000240)={0x0, 0x84d}, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000040), 0x3) socket(0xa, 0x801, 0x84) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x801, 0x106) keyctl$auto_KEYCTL_INVALIDATE(0x15, 0xa2, 0xf, 0x9, 0xe) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x2020009, 0x3, 0x19, 0xfffffffffffffffa, 0x800008004) madvise$auto(0x0, 0x2000040080000004, 0xe) 5.666777653s ago: executing program 3 (id=1316): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x2, 0x0) unshare$auto(0x8) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x2, 0x5, 0xa, 0xf9e9, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0) r1 = setfsuid$auto(0xffffffffffffffff) getpriority$auto_PRIO_USER(0x2, r1) r2 = setfsuid$auto(0xee00) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000002900)={{0x3, r2, 0xee00, 0x9, 0x17, 0x6, 0x1}, 0x6, 0x4, 0x7, 0x2, @raw=0xfffffff8, @raw=0x5, 0x80, 0x0, 0x0, &(0x7f0000002800)="98184e760a0f452eb11ea06b99ff21207e3b8c3b220044babfe4265728b83289334ad0fe741aa5ca55a08562caac2a4250362d60e4fa7c638f6df5ce567f74be13b83c270559872f67c6a2b22bf7734c63c04d9ee81bc615e00b15ccc53a5b6ed9157d27379564431ff2b3f0b4fda06486a9c5a82249d257871870a1070a15c7beaadf0dc4213674015e96a424cd97bb46607a111c53e42e0b"}) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$auto_I2C_FUNCS(r3, 0x705, &(0x7f0000000440)="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") setfsuid$auto(r2) ioctl$auto(0xffffffffffffffff, 0x4b48, 0xffffffffffffffff) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f0000000280)="8feb71f320812fae5f7785ec93a548ebf19bbd4f933d8591baa295a70beb7fbbbd46db13dca3f1f62e468ce19350fe31ca01f42cc83563") utime$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={0xffffffff, 0x1}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @raw=0x4}) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000003c0)='/proc/self/net/Oev_snmp0x0, 0x1, 0x80, 0x3, 0x8}, 0xfffffff8, 0x1ff, 0x800, 0x4, @raw=0x3, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0db", 0x0}) r1 = setfsgid$auto(r0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=&(0x7f00000003c0), 0x80000000}) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x40000, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x5380, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') setns(r4, 0x8000000) sendmsg$auto_OVS_VPORT_CMD_GET(r3, &(0x7f0000003d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003d40)=ANY=[], 0x2758}, 0x1, 0x0, 0x0, 0x8080}, 0x4008000) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.723499357s ago: executing program 0 (id=1290): unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, 0x0, 0x4145) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20461, 0x0) write$auto(r0, &(0x7f0000000700)='/ECv/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lDT\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x90\xc8Oj\xd2\xd7\x0f\x1f\xf0\xb57\xfb\x87,P\xfb{\x99\x10\xdc\x80JGs\r\x93\x7f\x11\x0e\xbc\x99\x93M\xfe\xfd\x11\x14\xac]\xc4\xf2\xf4\xef\xde\xac\x1aQ\xdd\xd7[\xd7@\xe7R{\xaar\xfb~\x94\xd2n]\xd2\x15h\x18|2g\xfb\\%\xe6-\xca\xe3\xd9!7r\xf7\xfc\xe4z58\xf0W\xde\xd3\x90\xc5\rT\xbe\x90\xc0\xbc\xd5\xdb\x0e\t\x84X*\xcf\xd3}\x0eR\xae6\xa58\xc8\xac\x1d>t\xbe\xd7\xb3\xfc\xee\xa7jG\xb0\x1cN\xfb\x8c\x80+\xc2\x8f\x7f\xaf&\xbfx\xa4>\x8a\xab\t,i\xf42\xc2\nY\xcd\\\x1fLPP\x19\xe0\x1b-w\x85\xf9\xc3\x11/\\zh\xf7l\xaa?m\xd5.\xc1H\xdc\nq=.\x9f\xb3\x8aLf\x81\x82\x9e\xeb\xa6\x92Vg(pp3\x8c\xc5\xe6U\x1dK]\a\xf7\xd3!u\xb8akQ1\x92\xae\xe0C\xac\x9f\xd28Kg\xa6\xfbO\x84^\xfe\xed\x96\xfa\xa0\xd9\x8e\xa6\x17\xb9\x1c\xd6Z\x9ae\x85\xd1(\xde\xf1du\x12\xa7\xd3\xf2\xd1\xed\xa2\xe6;?\xfe\t|-\\bI\x9e\x02\x9d\xd3\x9a\'Oq\x8a\xcd\xd9\n\xa5\xedQg\xe1b\x93\xa1\xba\xc4\x91\xc8sg\xb5`z\xe8\r\xbeYg\x04E\xeb\x15\x05\x99\xcf7\x92\xcc\xd3^k]\xf6\xf1\x94n\x0f:mN\xa3W%*\xc2+F\x98\xc2[\x82\xed\x11q[\x10\x80\x98\x17C\xa1\x13=\xba\xcb\xa8', 0x100000a3d9) mmap$auto(0x1, 0x400004, 0x800df, 0x9b72, 0x2, 0x0) clock_adjtime$auto(0x17, 0x0) socket(0x2, 0x2, 0x0) mprotect$auto(0x0, 0x806121, 0x6) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xb, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x10780, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, 0x0, 0x82, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) sysfs$auto(0x2, 0xc, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r1, 0x0, &(0x7f0000000180)='no_\xe8\xdb\b\x9c\xe7J\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) 3.540061684s ago: executing program 1 (id=1320): syz_clone3(&(0x7f0000000280)={0x1000000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x14}, &(0x7f00000000c0)=""/87, 0x57, &(0x7f0000000140)=""/214, &(0x7f0000000240)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) write$auto(0xffffffffffffffff, 0x0, 0x92bf) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r3 = prctl$auto_PR_SET_MM_START_STACK(0x8, 0x5, 0x0, 0x401, 0x100) ioctl$auto_RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3, 0x6b, 0xfffffffd, 0x10002, 0xfd}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000800)='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc', 0x100000a3dd) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) r5 = getpid() shmctl$auto_SHM_STAT(0x8000, 0xd, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) fchdir$auto(0xffffffffffffffff) get_mempolicy$auto(0x0, 0x0, 0x7, 0x5, 0x20000002) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x8, 0x4, 0x3, 0x3ff, @raw=0x7fff, @inferred=r5}) select$auto(0x4, 0x0, &(0x7f0000000680)={[0xffffffffffff1aa2, 0x8000, 0x401, 0x9, 0xffffffffffffffff, 0x1, 0xff, 0x6, 0x5, 0x0, 0xa, 0x1e, 0x2, 0x80000000, 0x6, 0xc0]}, 0x0, &(0x7f0000000780)={0x4, 0x2}) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) keyctl$auto(0x1f, 0x1, r6, 0x3, 0x3ff) waitid$auto_P_PID(0x1, r1, &(0x7f0000000300)={@_si_pad}, 0x0, &(0x7f0000000380)={{0xb72, 0x6}, {0x7, 0x1}, 0x2e49, 0xedb, 0x20000000000, 0xb, 0x80000000, 0x7a, 0xfffd, 0x4, 0x2, 0x100, 0x8, 0x9d04, 0x91}) process_madvise$auto_MADV_KEEPONFORK(r0, &(0x7f0000000540)={&(0x7f0000000440)="69bbae3a4a81c98a6992d40a70d16e7b58cc8ad4f49218d0de74497f866f60402982cab89336bddf2c3bea78ebb39e3d49025de6453a836c48b85a94aaedfccf1e5683a9f05d617cea1509816eef7573df0ad2107b2c711214184c73d529b4a0adc2b9ea985390d79de842504e473b80a82d64d97064f26299fd04d3f297f61054c5b9d45359007654d7225c7eaaf70b56946f1ec7915d2def99733318b20b8098c7ffc03dbe8b3cefb1e934a99a89e061ac33775a99b3148bb7baf602f2f4be271f302d59c21791070a1a8002c4ff07e03677a5c0f190d209913478df6288", 0xfffffffffffffffa}, 0x3ff, 0x13, 0xf7c) 3.465846129s ago: executing program 2 (id=1321): ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/xfs/stats_clear\x00', 0x202, 0x0) syz_clone3(&(0x7f0000000300)={0x20080000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x20000037}, &(0x7f00000000c0)=""/87, 0x57, &(0x7f0000000400)=""/214, &(0x7f0000000140)=[0x0, 0x0], 0x2}, 0x58) write$auto(0xffffffffffffffff, 0x0, 0x92bf) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3, 0x6b, 0xfffffffd, 0x10002, 0xfd}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000800)='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc', 0x100000a3dd) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) r3 = getpid() shmctl$auto_SHM_STAT(0x8000, 0xd, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) fchdir$auto(0xffffffffffffffff) get_mempolicy$auto(0x0, 0x0, 0x7, 0x5, 0x20000002) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2001, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x8, 0x4, 0x3, 0x3ff, @raw=0x7fff, @inferred=r3}) select$auto(0x4, 0x0, &(0x7f0000000680)={[0xffffffffffff1aa2, 0x8000, 0x401, 0x9, 0xffffffffffffffff, 0x1, 0xff, 0x6, 0x5, 0x0, 0x1, 0x1e, 0x2, 0x80000000, 0x6, 0xc0]}, &(0x7f0000000700)={[0x3ff, 0xf3, 0xb, 0x7f, 0xd, 0x6446, 0x5, 0x9, 0x3, 0x401, 0x8, 0x7347, 0x0, 0x34, 0x7ff, 0x9]}, 0x0) ptrace$auto_PTRACE_PEEKDATA(0x2, r4, 0x400, 0x4) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r2, &(0x7f0000001640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000ac0)={0xa4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_RXSC_CONFIG={0x39c, 0x2, 0x0, 0x1, [@nested={0x8, 0x110, 0x0, 0x1, [@nested={0x4, 0x49}]}, @nested={0xc, 0xc7, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x80}]}, @nested={0x1a3, 0xe5, 0x0, 0x1, [@nested={0x4, 0x85}, @generic="f0c5c167e7fd2d88da554578aacee8d930c47ca64bc707333c7f386f1ad7f68e4c867c293047938d22fdf84e81e528f4a53946c5fb0e4521745aed620e29ada71a7c6604cf7f756d33b255", @typed={0x4, 0x43}, @nested={0x4, 0x131}, @typed={0x148, 0x108, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc'}]}, @nested={0x1df, 0xf3, 0x0, 0x1, [@generic="e97023cb1c7206b6f6cb4dade727bdaf3c0eca57bbdb860d3aa394bbb126031a508661c0d17b4e63d4f89f738c8a1aab0455454c082cc52f9033bfd624fd4e9e58c37e0d05f424c2feee883fe39671d2f22d49c7de12b647771ff382cd72d17e100c6020aba1b0a976d88562ad75583cc1dac5a189adc2202f959560c9750415cbfe614a6a9b723e077b16d3e69466cfbe4594da54946ab899e3e1cd7aad98c5e991e960b80e3e8f6b9c4a16bc5c1dfe4e1da160cfb34a34e19f8a4cd5d35c75a7d9e9a19b535edf250f38ace55fadf81f13adae7a3b6904553327d7", @generic="a997e85971e667fae98e9d23000971df54f189264d29a4229082a0cc514321d932d25b5c5d0a17394c3c440cc00663b7127b3f7fc133de513da8280e3ee56750f60449a74757311201bbee3abc629ff7f051bbc258c56a446efe7571fa2141eacb85cdd74df42ec8a03ae84ae7b0758427b8d258827e8ce92db2fc7add1384893bedd450e00b202fc35aa5983c5dd42f9839cd9652fc4a2e5271b76c87e8ace9fc92910ede410696d87e8d952221635236ea0cdb31835ec344d44b31530042089bfe9676ff7fb1be33a4a311976671a39a316c532f39bcbd6df99c43442eb65679d0219f79aa7a573c99f4eaeb4d74608fe27672e4a1e7", @typed={0x8, 0x15f, 0x0, 0x0, @u32=0x80000000}]}]}, @MACSEC_ATTR_SA_CONFIG={0x165, 0x3, 0x0, 0x1, [@generic="6875b38066b8cd6a949693dc4c3f0a0b761d495bd6489bda9765963320356a850ab231b5b240148b3674976968bbe737", @typed={0x16, 0x79, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @nested={0x18, 0x4, 0x0, 0x1, [@typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@mcast1}]}, @typed={0x11, 0xcc, 0x0, 0x0, @str='\xf3#-+{]][)\'-}\x00'}, @generic="8816eee4526fe52105e9c1de3e100bc877feb7abfd54157a8a5785bcc8b5212dca3105617a103a33ccad179dd15346c3eb07063e8fc955c8390ff1ff833dce93e957a1abc3e95952413be1f253d212b9ac78bc0c4c3afbcfddbb2926d245d4a770105525142ea497ba7d52ec996d0ed4d3bfad3a9e9974ac02cf1927687641f953dbebd483b339d029813de48848fe3dd8ebb205e89da38485a96274042ebd45191467517718b48875396976443c4357f997d00b6020d3db3c8fbfd2f2c3ce35b0a823f92f6a3f11c4405bfba178fb15feba61f5fd411e2b650399674a5417fdec1fe64ce2e50f83bcb47fee77"]}, @MACSEC_ATTR_OFFLOAD={0x164, 0x9, 0x0, 0x1, [@nested={0xec, 0x87, 0x0, 0x1, [@nested={0x4, 0x92}, @generic="4ef641991b54fa5441e35978e902c16e45f4cd545b59679ebf9a924362ea489abfc10bc77ae6d6e00b459198eea7a49b87944eb7cfdf8673c025d12ce8795f7ff8ce2b7e8837465ecca09fb090fdbaedd1504ddb8cc670a50632ef4894f2f7f83d79c70db4d4c0a1118302a83480122f971cc7e11eb0eeccd369103f70cd39f6bafc25e3faa4ab60433c3436e5a3b9eec40fa5b2d3f60188e916ab17ebf692d65d887a800b64e45057782171e71a5f82de534a9cec5c068a5622e4f6d235cea484ec15e427bc048848cf0203675bf3b857cd59cb8cde2f5b7db952ae85343680fbc6c18e"]}, @generic="9bad35703b1201765d6e8b12692beb4399eb08a51e307ec24ba203c1e2c1e6a5e96201183863b0b6b2804020721804106e202a7ee5bc5ce5ce8d15ad8462ff540b41373c2855a496c7e42f0c3d9bcaf83f7d7c5c5e21b2f1f6c139d2bff84b6bde4b10eac152902875cdf876c05c4cb0f30e95b2"]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_RXSC_CONFIG={0x40, 0x2, 0x0, 0x1, [@typed={0x14, 0x75, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x25, 0x34, 0x0, 0x1, [@generic="7fd5ddd5caedb8abc02fc53890c17d6a7f379ebdab", @typed={0x8, 0x55, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0x11}]}]}, @MACSEC_ATTR_OFFLOAD={0x1a2, 0x9, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x4f, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x43, 0x0, 0x0, @fd=r1}, @generic="a41299a3484c37f150bbf9ddd5920db402bc402057ebc0a7a36408ad5b44f3ab9fe955", @nested={0x59, 0xbd, 0x0, 0x1, [@typed={0x4, 0x119}, @generic="987c04eab64ef3fd0aeff5912da6a83c108ac1bb6305c2aa38380bedba8804d45496ecbefaae555c1ca53ee053f3b8fe171339089bf8eb5aa3a19f901b4a24b6461d92ef3e3632a9ab", @typed={0x8, 0xfe, 0x0, 0x0, @u32=0x7f}]}, @nested={0x4c, 0xba, 0x0, 0x1, [@generic="cf314ba475f29be38f4f30d182531ca8533859f62648839cef2998cb529f30b89a8ce6e5df17685df0d655304d622b57ddd3cdc141c4c9c713a7f5b96d6223e0ec77ef8d89669a05"]}, @generic="5ae6e33daf94cb35461876e408abb19be6cca893e575d6dfaf1752e71442e1b417e3fa6d628ccdfa53320199c66be82b64f1d7c94dc294866fa6e6f76d81ab3b41d374f77ce9cf7ec5fa5202b1940ccf11afc6545af6137d2f670a19973ab0f35116302dcd55fc4dd2d76ef1c8a0a08da377b5884918a9b6c64a572590baa6a1c7faf04fca144548278de1327f5b54380b96b035431fefd366d57b79437ba58f5bda779c055558320a0944c0f23307fb5a77bb09291ce8f6a1e8b8"]}, @MACSEC_ATTR_OFFLOAD={0x1d4, 0x9, 0x0, 0x1, [@nested={0x1a8, 0x11b, 0x0, 0x1, [@generic="bed484421bc5e36f3eecf6ffe614b4b63b459795939ead47b933de9bc31d45892a26f4dfb8a7f352a39f178eb67fbe68257fa5f3e45e56f6272c4612f0915bfddd5635d8ad9c20753408c1719cba41aebfc5be1e87bcfb9c9f55ba507a079ee41ef5172103975c2c470149720ecbb47cd26ce42208ab95ae2f7085d724b65730df0c8f1b172816095a628e291d25cf58d0c186c9205f05ab3edf68425f8bae2b31def93f890881e8c732d1dfe08c71ad09c0f879641f59ed51c604fab9f5f60fe55690b3bd5da0bb99248e1be91d0325495c95de3573c28c646988506b", @generic="3779af7f516ba442ae9169bccbc4a7c5b5dd4033666475922df13c8d8da6b3824260ab055307765722500571e623e239c9187826e1ace12e94f5321492d552eae9e4f0cbd38b76b7facafba62dd3b15bdd129f9d047a771c010f99b43ac2e858f629aeeec316a9fa6c19c72aa140c12d803072dd2ce5f5179b7d8c5e61c5530d015ef677b814a3e07bb7bd1741505dce3180206fffd6641d6d0bca1186b6c16de93590c40f7f9b2337960b8a0d0082cdf29b6776fe54d7abd490a8a6a0012e7a0a6ca85272b344"]}, @typed={0xd, 0x111, 0x0, 0x0, @str=':&{{*{@$\x00'}, @nested={0x10, 0xe1, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x25}]}, @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@local}]}]}, 0xa4c}, 0x1, 0x0, 0x0, 0x8080}, 0x800) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.003904709s ago: executing program 0 (id=1322): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x4080005, @stream_id=0x7, 0x2004c, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x0, 0x9, 0x5}, {0x0, 0x400058dc, 0x101}]}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, &(0x7f0000000240)) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x5e, 0x1}, &(0x7f0000000580)={0x1, 0xdb36}) setpgid$auto(0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) rseq$auto(0x0, 0x7, 0x8, 0x10) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=&(0x7f00000003c0), 0x80000000}) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002) mmap$auto(0x0, 0x20000040009, 0xdf, 0x9b72, r0, 0x1000000000028000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyr1\x00', 0xc81, 0x0) newfstatat$auto(r2, 0x0, 0x0, 0xfffff29f) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r1, 0xffffffffffffffff, 0x8, 0x1, 0xffffffffffffffff, @relative_id=0x8, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x37f) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000104000000ffdbdf252e000000640001801400020064766d7270310000000000000000000008000300070000001400020076657468315f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200677265300000000000000000000000001400020070696d726567310000000000000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3100000000000000000008000300090000005800018014000200708f1004aa3a39a782f7f1e7fa82240f696d7265673100000000000000000014000200766c616e300000", @ANYBLOB='R', @ANYBLOB="140002007369743000000000000000000000000008", @ANYRES32=0x0, @ANYBLOB="0800030083aa00001c000180", @ANYRESHEX, @ANYBLOB="0800030001000080080003000700000004000180"], 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000018) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3fd) 1.641869257s ago: executing program 3 (id=1323): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x1a, 0x3, 0x1) getsockopt$auto_SO_TIMESTAMPING_OLD(r0, 0x104, 0x25, 0x0, 0x0) 1.596629835s ago: executing program 2 (id=1324): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001040)='/dev/dsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000001080)="7a47301037") r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x103342, 0x0) read$auto(0x3, 0x0, 0x8080) readv$auto(r1, &(0x7f0000000240)={0x0, 0x84d}, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x84) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x801, 0x106) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x2020009, 0x3, 0x19, 0xfffffffffffffffa, 0x800008004) madvise$auto(0x0, 0x2000040080000004, 0xe) 1.541593042s ago: executing program 0 (id=1325): socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x0, 0x0, 0xeb3, 0x401, 0xffffffffffffff82) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "00000000000100e387ff0fffff00"}, 0x40001c) ioctl$auto(0x3, 0x89e0, 0x38) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10) bpf$auto(0x18, 0x0, 0x92) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x8000000000000003, 0x9, 0xa, 0x12, 0xdd, 0xfffffffffffffffb) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006) tkill$auto(0x80000000000001, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0) fsconfig$auto_SHMEM_HUGE_ALWAYS(r3, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x8, 0x336a, 0x0, 0x80, 0xfff7fffffff7fffc) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x10000083d4) shmdt$auto(0x0) 1.494473816s ago: executing program 3 (id=1326): syz_clone3(&(0x7f0000000280)={0x1000000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x14}, &(0x7f00000000c0)=""/87, 0x57, &(0x7f0000000140)=""/214, &(0x7f0000000240)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) write$auto(0xffffffffffffffff, 0x0, 0x92bf) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r2 = prctl$auto_PR_SET_MM_START_STACK(0x8, 0x5, 0x0, 0x401, 0x100) ioctl$auto_RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3, 0x6b, 0xfffffffd, 0x10002, 0xfd}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000800)='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc', 0x100000a3dd) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) r4 = getpid() shmctl$auto_SHM_STAT(0x8000, 0xd, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) fchdir$auto(0xffffffffffffffff) get_mempolicy$auto(0x0, 0x0, 0x7, 0x5, 0x20000002) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram1\x00', 0x20001, 0x0) ioctl$auto_BLKRRPART(r5, 0x801070cf, 0x700000000000000) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000100, 0xee01, 0xee01, 0xfff, 0x87, 0x40, 0x3}, 0x0, 0x0, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x8, 0x4, 0x3, 0x3ff, @raw=0x7fff, @inferred=r4}) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) keyctl$auto(0x1f, 0x1, r6, 0x3, 0x3ff) process_madvise$auto_MADV_KEEPONFORK(r0, &(0x7f0000000540)={&(0x7f0000000440)="69bbae3a4a81c98a6992d40a70d16e7b58cc8ad4f49218d0de74497f866f60402982cab89336bddf2c3bea78ebb39e3d49025de6453a836c48b85a94aaedfccf1e5683a9f05d617cea1509816eef7573df0ad2107b2c711214184c73d529b4a0adc2b9ea985390d79de842504e473b80a82d64d97064f26299fd04d3f297f61054c5b9d45359007654d7225c7eaaf70b56946f1ec7915d2def99733318b20b8098c7ffc03dbe8b3cefb1e934a99a89e061ac33775a99b3148bb7baf602f2f4be271f302d59c21791070a1a8002c4ff07e03677a5c0f190d209913478df6288", 0xfffffffffffffffa}, 0x3ff, 0x13, 0xf7c) 1.438313798s ago: executing program 1 (id=1327): setns(0xc9, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0p/sub2/sw_params\x00', 0x88400, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) mmap$auto(0xfffffffffffffffc, 0x40009, 0x201, 0x9b72, 0x7, 0x28000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)='-', 0x1) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000040)=0x3) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) write$auto(r3, 0x0, 0x6) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x4020009, 0xdb, 0xebf, r2, 0x8000) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x80001, 0x0) 608.827535ms ago: executing program 2 (id=1328): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002f, 0x0) ioctl$auto(0x4000000000000c8, 0x400454e2, 0x3) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto_SO_MARK(r0, 0x9f, 0x24, &(0x7f0000000000)='\x00', 0xc743) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff) r2 = getpgid(0xffffffffffffffff) sysfs$auto(0x9, 0x7fffffff, 0xcb1) r3 = prctl$auto_PR_SET_MM_START_BRK(0x4, 0x6, r2, 0xd, 0x0) setsockopt$auto_SO_LOCK_FILTER(r3, 0x6, 0x2c, &(0x7f00000000c0)='--(#-+^\x00', 0x6) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040), 0xc, &(0x7f00000009c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="18080000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="04002e8095408c52eb178b45ee0bf282f7805cc6ca5f58860ed70dfb2b6e2abeadb67a9e7a4a0ed2a1cc2d90983057c8f1ddd524e918c67fec83df40e10c005c0003000000000000000800ec00", @ANYRES32=r0, @ANYBLOB="0c00e4002d2d28232d2b5e000800970083f218bd5ffdb8abe4de1b1e01a3440e8d30cc1627ff8149a215245b913b1e08ff56174a9a5a0d77cbc1c9392a97e9a5c185139f25e2853e50b5d43736914ef82ae06d66b8d029e8e371607ad7ab8cb86ab47868a4e0124569b8f3fe8c258e85334c13bca9c27e5a429683a75ae6714b1a030d14d222b661845978ae9429fabebd52d4e878d19098a51022a25d4c65ea2d42d7d1751a945b8fafbf2a6a07527eb24aceb574d5a0df6bf22af2ff20395128630afe9d945f2e93fa2775a466a2bd4c86a828707a50d9d3cbcb05c490fb4662d72d9d87187475c8219ecc4f5ce284c131839a", @ANYRES32=r2, @ANYBLOB="000000040002805a02098008004c00e00000010c00cf0000000000010000000800f100", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0c005500030000000000000008004600", @ANYRES32=0x0, @ANYBLOB="0c00168008006100", @ANYRES32, @ANYBLOB], 0x818}, 0x1, 0x0, 0x0, 0x8040}, 0x20040005) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x60e83, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x80004, 0x400000000e2, 0xeb1, 0x405, 0x8000) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x10000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES64], 0x38}}, 0x40008c0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x53) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0xb, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x38}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x6, 0x1f00) ioctl$auto(r4, 0x3b8e, r0) 0s ago: executing program 2 (id=1329): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x6c0840, 0x0) socket(0x27, 0x4, 0xa4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x1f, 0x80002, 0x73) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000002c0)={0xea, 0x63, 0xfffffeff, 0x6bf, &(0x7f0000000080)="c12a4ead89997936d412e7fc1d853bd21acb64802cab67d0c24eabe0d0d9beadd7", 0x3, 0x400000, 0x7, @stream_id=0x9, 0x76, 0x102, &(0x7f0000000180)="b89972aabaa332aacbd6b2bdf204fd3303b2cb2d61d8b790181ba1c4e3047fdc239a853766ee4528d5c8529827465e0a089873b02b96bb437b5348587c43293acd58916304ab247b218455fe23711ee49f418ee1cd5457843cfc2be4e9701f283385554ecf", [{0xb86, 0xf0b, 0x7}, {0x1, 0x4, 0x2}, {0xfffff801, 0x966d, 0x8ea}]}) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = setfsgid$auto(0xee01) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mseal$auto(0x0, 0x7dda, 0x0) r2 = socket(0x1, 0x1, 0x1) setsockopt$auto(r2, 0x29, 0x20, 0x0, 0x8002) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x100000000000, 0x200006, 0xc) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) close_range$auto(r0, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): [ T30] audit: type=1800 audit(183.269:3): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.205" name="dbroot" dev="configfs" ino=28660 res=0 errno=0 [ 182.861628][ T7504] process 'syz.1.207' launched '/dev/fd/3' with NULL argv: empty string added [ 182.940436][ T7507] mmap: syz.1.207 (7507) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.467069][ T30] audit: type=1800 audit(184.839:4): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.207" name="version" dev="configfs" ino=29847 res=0 errno=0 [ 183.926513][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.937444][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.945995][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.957208][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.964866][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.376619][ T117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.664516][ T117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.831555][ T117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.964659][ T117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.359079][ T117] bridge_slave_1: left allmulticast mode [ 185.359126][ T117] bridge_slave_1: left promiscuous mode [ 185.361336][ T117] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.382504][ T117] bridge_slave_0: left allmulticast mode [ 185.382535][ T117] bridge_slave_0: left promiscuous mode [ 185.383712][ T117] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.523356][ T7558] FAULT_INJECTION: forcing a failure. [ 185.523356][ T7558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.523427][ T7558] CPU: 0 UID: 0 PID: 7558 Comm: syz.2.213 Not tainted syzkaller #0 PREEMPT(full) [ 185.523459][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.523472][ T7558] Call Trace: [ 185.523481][ T7558] [ 185.523491][ T7558] dump_stack_lvl+0x100/0x190 [ 185.523532][ T7558] should_fail_ex.cold+0x5/0xa [ 185.523566][ T7558] _copy_to_user+0x32/0xd0 [ 185.523598][ T7558] simple_read_from_buffer+0xcb/0x170 [ 185.523629][ T7558] proc_fail_nth_read+0x1af/0x230 [ 185.523673][ T7558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.523716][ T7558] ? rw_verify_area+0xce/0x6d0 [ 185.523751][ T7558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.523791][ T7558] vfs_read+0x1e4/0xb40 [ 185.523817][ T7558] ? lock_acquire+0x1d1/0x380 [ 185.523849][ T7558] ? __fget_files+0x34/0x3d0 [ 185.523875][ T7558] ? __pfx_vfs_read+0x10/0x10 [ 185.523897][ T7558] ? find_held_lock+0x2b/0x80 [ 185.523924][ T7558] ? __fget_files+0x215/0x3d0 [ 185.523958][ T7558] ? __fget_files+0x21f/0x3d0 [ 185.523995][ T7558] ksys_read+0x12a/0x250 [ 185.524020][ T7558] ? __pfx_ksys_read+0x10/0x10 [ 185.524054][ T7558] do_syscall_64+0x121/0x770 [ 185.524086][ T7558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.524113][ T7558] RIP: 0033:0x7f6fd0b5e98e [ 185.524136][ T7558] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.524160][ T7558] RSP: 002b:00007f6fd1a84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.524185][ T7558] RAX: ffffffffffffffda RBX: 00007f6fd1a856c0 RCX: 00007f6fd0b5e98e [ 185.524200][ T7558] RDX: 000000000000000f RSI: 00007f6fd1a850a0 RDI: 0000000000000007 [ 185.524216][ T7558] RBP: 00007f6fd1a85090 R08: 0000000000000000 R09: 0000000000000000 [ 185.524231][ T7558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.524246][ T7558] R13: 00007f6fd0e264e8 R14: 00007f6fd0e26450 R15: 00007ffcb71cbcd8 [ 185.524279][ T7558] [ 185.610929][ T117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.634996][ T117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.640902][ T117] bond0 (unregistering): Released all slaves [ 186.042932][ T5618] Bluetooth: hci3: command tx timeout [ 186.659347][ T117] hsr_slave_0: left promiscuous mode [ 186.672874][ T117] hsr_slave_1: left promiscuous mode [ 186.681870][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.691178][ T117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.699652][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.707780][ T117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.739861][ T117] veth1_macvtap: left promiscuous mode [ 186.739930][ T117] veth0_macvtap: left promiscuous mode [ 186.740058][ T117] veth1_vlan: left promiscuous mode [ 186.740133][ T117] veth0_vlan: left promiscuous mode [ 187.090649][ T117] team0 (unregistering): Port device team_slave_1 removed [ 187.104164][ T117] team0 (unregistering): Port device team_slave_0 removed [ 187.140063][ T30] audit: type=1804 audit(188.509:5): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.215" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 187.318657][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 187.426333][ T7528] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.426628][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.426795][ T7528] bridge_slave_0: entered allmulticast mode [ 187.429084][ T7528] bridge_slave_0: entered promiscuous mode [ 187.474306][ T7528] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.481756][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.489867][ T7528] bridge_slave_1: entered allmulticast mode [ 187.496112][ T7528] bridge_slave_1: entered promiscuous mode [ 187.622479][ T30] audit: type=1800 audit(188.989:6): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.216" name="dbroot" dev="configfs" ino=30890 res=0 errno=0 [ 187.721186][ T7528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.725410][ T7528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.135335][ T5618] Bluetooth: hci3: command tx timeout [ 188.237768][ T7528] team0: Port device team_slave_0 added [ 188.391791][ T7528] team0: Port device team_slave_1 added [ 188.524680][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.533901][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.533963][ T7528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.555528][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.555547][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.555576][ T7528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.931593][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 189.222910][ T7528] hsr_slave_0: entered promiscuous mode [ 189.224948][ T7528] hsr_slave_1: entered promiscuous mode [ 189.359514][ T7631] random: crng reseeded on system resumption [ 190.202796][ T5618] Bluetooth: hci3: command tx timeout [ 190.405534][ T7651] FAULT_INJECTION: forcing a failure. [ 190.405534][ T7651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.405597][ T7651] CPU: 0 UID: 0 PID: 7651 Comm: syz.2.221 Not tainted syzkaller #0 PREEMPT(full) [ 190.405627][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.405641][ T7651] Call Trace: [ 190.405650][ T7651] [ 190.405660][ T7651] dump_stack_lvl+0x100/0x190 [ 190.405698][ T7651] should_fail_ex.cold+0x5/0xa [ 190.405730][ T7651] _copy_to_user+0x32/0xd0 [ 190.405761][ T7651] simple_read_from_buffer+0xcb/0x170 [ 190.405801][ T7651] proc_fail_nth_read+0x1af/0x230 [ 190.405845][ T7651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.405890][ T7651] ? rw_verify_area+0xce/0x6d0 [ 190.405927][ T7651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.405969][ T7651] vfs_read+0x1e4/0xb40 [ 190.405995][ T7651] ? lock_acquire+0x1d1/0x380 [ 190.406029][ T7651] ? __fget_files+0x34/0x3d0 [ 190.406055][ T7651] ? __pfx_vfs_read+0x10/0x10 [ 190.406078][ T7651] ? find_held_lock+0x2b/0x80 [ 190.406106][ T7651] ? __fget_files+0x215/0x3d0 [ 190.406139][ T7651] ? __fget_files+0x21f/0x3d0 [ 190.406177][ T7651] ksys_read+0x12a/0x250 [ 190.406202][ T7651] ? __pfx_ksys_read+0x10/0x10 [ 190.406237][ T7651] do_syscall_64+0x121/0x770 [ 190.406275][ T7651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.406302][ T7651] RIP: 0033:0x7f6fd0b5e98e [ 190.406324][ T7651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 190.406347][ T7651] RSP: 002b:00007f6fd1a84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.406373][ T7651] RAX: ffffffffffffffda RBX: 00007f6fd1a856c0 RCX: 00007f6fd0b5e98e [ 190.406391][ T7651] RDX: 000000000000000f RSI: 00007f6fd1a850a0 RDI: 0000000000000005 [ 190.406407][ T7651] RBP: 00007f6fd1a85090 R08: 0000000000000000 R09: 0000000000000000 [ 190.406423][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.406438][ T7651] R13: 00007f6fd0e264e8 R14: 00007f6fd0e26450 R15: 00007ffcb71cbcd8 [ 190.406475][ T7651] [ 190.931340][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 192.284068][ T5618] Bluetooth: hci3: command tx timeout [ 193.201027][ T7528] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.223887][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.228786][ T7528] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.246153][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.392189][ T7528] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.406880][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.532376][ T7528] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.551087][ T7528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.538850][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.538943][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.439025][ T7528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.488360][ T7528] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.503076][ T7782] random: crng reseeded on system resumption [ 195.529278][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.529500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.541573][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.541636][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.529704][ T7528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.388681][ T7843] FAULT_INJECTION: forcing a failure. [ 198.388681][ T7843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.388737][ T7843] CPU: 1 UID: 0 PID: 7843 Comm: syz.0.237 Not tainted syzkaller #0 PREEMPT(full) [ 198.388767][ T7843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.388778][ T7843] Call Trace: [ 198.388785][ T7843] [ 198.388793][ T7843] dump_stack_lvl+0x100/0x190 [ 198.388829][ T7843] should_fail_ex.cold+0x5/0xa [ 198.388864][ T7843] _copy_to_user+0x32/0xd0 [ 198.388897][ T7843] simple_read_from_buffer+0xcb/0x170 [ 198.388927][ T7843] proc_fail_nth_read+0x1af/0x230 [ 198.388963][ T7843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.389002][ T7843] ? rw_verify_area+0xce/0x6d0 [ 198.389039][ T7843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.389087][ T7843] vfs_read+0x1e4/0xb40 [ 198.389111][ T7843] ? lock_acquire+0x1d1/0x380 [ 198.389145][ T7843] ? __fget_files+0x34/0x3d0 [ 198.389171][ T7843] ? __pfx_vfs_read+0x10/0x10 [ 198.389194][ T7843] ? find_held_lock+0x2b/0x80 [ 198.389222][ T7843] ? __fget_files+0x215/0x3d0 [ 198.389254][ T7843] ? __fget_files+0x21f/0x3d0 [ 198.389290][ T7843] ksys_read+0x12a/0x250 [ 198.389314][ T7843] ? __pfx_ksys_read+0x10/0x10 [ 198.389349][ T7843] do_syscall_64+0x121/0x770 [ 198.389384][ T7843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.389410][ T7843] RIP: 0033:0x7f00bad5e98e [ 198.389431][ T7843] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 198.389454][ T7843] RSP: 002b:00007f00b8f71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.389479][ T7843] RAX: ffffffffffffffda RBX: 00007f00b8f726c0 RCX: 00007f00bad5e98e [ 198.389496][ T7843] RDX: 000000000000000f RSI: 00007f00b8f720a0 RDI: 0000000000000005 [ 198.389511][ T7843] RBP: 00007f00b8f72090 R08: 0000000000000000 R09: 0000000000000000 [ 198.389527][ T7843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.389542][ T7843] R13: 00007f00bb0264e8 R14: 00007f00bb026450 R15: 00007ffe8ec361d8 [ 198.389577][ T7843] [ 198.990908][ T7528] veth0_vlan: entered promiscuous mode [ 199.230715][ T7528] veth1_vlan: entered promiscuous mode [ 199.611177][ T7528] veth0_macvtap: entered promiscuous mode [ 199.853987][ T7528] veth1_macvtap: entered promiscuous mode [ 200.166510][ T7873] random: crng reseeded on system resumption [ 200.830314][ T7528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.092041][ T7528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.183415][ T1280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.185879][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.185931][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.185975][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.726168][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 201.732624][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 202.159676][ T982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.159722][ T982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.948899][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.960801][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.903880][ T7933] can: request_module (can-proto-5) failed. [ 205.226650][ T7949] ubi0: attaching mtd0 [ 205.300141][ T7949] ubi0: scanning is finished [ 205.307380][ T7949] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 205.743002][ T7949] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 213.716839][ T8099] random: crng reseeded on system resumption [ 217.831029][ T8178] FAULT_INJECTION: forcing a failure. [ 217.831029][ T8178] name failslab, interval 1, probability 0, space 0, times 0 [ 217.843788][ T8178] CPU: 0 UID: 0 PID: 8178 Comm: syz.0.279 Not tainted syzkaller #0 PREEMPT(full) [ 217.843823][ T8178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.843839][ T8178] Call Trace: [ 217.843848][ T8178] [ 217.843859][ T8178] dump_stack_lvl+0x100/0x190 [ 217.843899][ T8178] should_fail_ex.cold+0x5/0xa [ 217.843934][ T8178] should_failslab+0xc2/0x120 [ 217.843969][ T8178] __kmalloc_noprof+0xfc/0x840 [ 217.843998][ T8178] ? tomoyo_encode2+0xfb/0x3c0 [ 217.844045][ T8178] tomoyo_encode2+0xfb/0x3c0 [ 217.844089][ T8178] tomoyo_encode+0x29/0x50 [ 217.844127][ T8178] tomoyo_realpath_from_path+0x18c/0x690 [ 217.844175][ T8178] tomoyo_path_number_perm+0x23c/0x580 [ 217.844208][ T8178] ? tomoyo_path_number_perm+0x22e/0x580 [ 217.844246][ T8178] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 217.844295][ T8178] ? __lock_acquire+0x4c5/0x1ec0 [ 217.844348][ T8178] ? __fget_files+0x34/0x3d0 [ 217.844377][ T8178] ? find_held_lock+0x2b/0x80 [ 217.844404][ T8178] ? hook_file_ioctl_common+0x140/0x440 [ 217.844449][ T8178] ? __fget_files+0x21f/0x3d0 [ 217.844482][ T8178] security_file_ioctl+0xd3/0x230 [ 217.844520][ T8178] __x64_sys_ioctl+0xb7/0x210 [ 217.844562][ T8178] do_syscall_64+0x121/0x770 [ 217.844600][ T8178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.844628][ T8178] RIP: 0033:0x7f00bad9e159 [ 217.844653][ T8178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.844677][ T8178] RSP: 002b:00007f00b8f93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.844710][ T8178] RAX: ffffffffffffffda RBX: 00007f00bb026360 RCX: 00007f00bad9e159 [ 217.844728][ T8178] RDX: 00002000000000c0 RSI: 0000000040485404 RDI: 0000000000000004 [ 217.844744][ T8178] RBP: 00007f00b8f93090 R08: 0000000000000000 R09: 0000000000000000 [ 217.844760][ T8178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.844776][ T8178] R13: 00007f00bb0263f8 R14: 00007f00bb026360 R15: 00007ffe8ec361d8 [ 217.844813][ T8178] [ 218.010292][ T8178] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.347087][ T8219] ubi0: attaching mtd0 [ 220.356928][ T8219] ubi0: scanning is finished [ 220.361695][ T8219] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 220.534031][ T8219] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 233.362330][ T8446] random: crng reseeded on system resumption [ 238.211149][ T8550] random: crng reseeded on system resumption [ 242.347801][ T8594] Process accounting resumed [ 243.291304][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.301136][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.308872][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.318392][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.326861][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.464977][ T1280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.600589][ T1280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.793763][ T1280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.978217][ T1280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.918029][ T1280] bridge_slave_1: left allmulticast mode [ 244.918067][ T1280] bridge_slave_1: left promiscuous mode [ 244.919036][ T1280] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.945176][ T1280] bridge_slave_0: left allmulticast mode [ 244.945228][ T1280] bridge_slave_0: left promiscuous mode [ 244.948184][ T1280] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.089829][ T1280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.101407][ T1280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.112018][ T1280] bond0 (unregistering): Released all slaves [ 245.404537][ T52] Bluetooth: hci2: command tx timeout [ 245.736821][ T1280] hsr_slave_0: left promiscuous mode [ 245.746217][ T1280] hsr_slave_1: left promiscuous mode [ 245.747242][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.747265][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.769049][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.769096][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.819513][ T1280] veth1_macvtap: left promiscuous mode [ 245.819587][ T1280] veth0_macvtap: left promiscuous mode [ 245.819717][ T1280] veth1_vlan: left promiscuous mode [ 245.819787][ T1280] veth0_vlan: left promiscuous mode [ 246.467909][ T1280] team0 (unregistering): Port device team_slave_1 removed [ 246.482524][ T1280] team0 (unregistering): Port device team_slave_0 removed [ 246.757445][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 247.171769][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.171966][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.172093][ T8626] bridge_slave_0: entered allmulticast mode [ 247.175764][ T8626] bridge_slave_0: entered promiscuous mode [ 247.178671][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.178851][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.178980][ T8626] bridge_slave_1: entered allmulticast mode [ 247.238986][ T8626] bridge_slave_1: entered promiscuous mode [ 247.366192][ T8626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.388090][ T8626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.482800][ T52] Bluetooth: hci2: command tx timeout [ 248.029055][ T8626] team0: Port device team_slave_0 added [ 248.032396][ T8626] team0: Port device team_slave_1 added [ 248.118666][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 248.188450][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.188487][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.188515][ T8626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.190603][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.190619][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.190647][ T8626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.529371][ T8626] hsr_slave_0: entered promiscuous mode [ 248.530355][ T8626] hsr_slave_1: entered promiscuous mode [ 248.550316][ T8626] debugfs: 'hsr0' already exists in 'hsr' [ 248.551552][ T8626] Cannot create hsr debugfs directory [ 249.525898][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 249.573243][ T52] Bluetooth: hci2: command tx timeout [ 251.451194][ T8626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.468663][ T8626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.477512][ T8626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.497088][ T8626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.531938][ T8626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 251.549744][ T8626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.557897][ T8626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 251.568846][ T8626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.643758][ T52] Bluetooth: hci2: command tx timeout [ 252.471627][ T8856] random: crng reseeded on system resumption [ 253.421404][ T8626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.834476][ T8626] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.430339][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.430467][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.897499][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.897625][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.914889][ T8937] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [242] [ 255.965038][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.965118][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.880245][ T8626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.043451][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 259.072865][ T8626] veth0_vlan: entered promiscuous mode [ 259.100849][ T8626] veth1_vlan: entered promiscuous mode [ 259.430272][ T8626] veth0_macvtap: entered promiscuous mode [ 259.634570][ T8626] veth1_macvtap: entered promiscuous mode [ 259.825402][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.830981][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.994459][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.994538][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.994577][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.995586][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.055736][ T9019] random: crng reseeded on system resumption [ 261.068008][ T117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.068049][ T117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.325139][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.325178][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.384091][ T9106] FAULT_INJECTION: forcing a failure. [ 265.384091][ T9106] name failslab, interval 1, probability 0, space 0, times 0 [ 265.384148][ T9106] CPU: 0 UID: 0 PID: 9106 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT(full) [ 265.384178][ T9106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.384193][ T9106] Call Trace: [ 265.384201][ T9106] [ 265.384212][ T9106] dump_stack_lvl+0x100/0x190 [ 265.384252][ T9106] should_fail_ex.cold+0x5/0xa [ 265.384286][ T9106] should_failslab+0xc2/0x120 [ 265.384321][ T9106] kmem_cache_alloc_noprof+0x92/0x6a0 [ 265.384351][ T9106] ? vm_area_dup+0x27/0x9d0 [ 265.384392][ T9106] vm_area_dup+0x27/0x9d0 [ 265.384428][ T9106] __split_vma+0x19c/0x1de0 [ 265.384473][ T9106] ? __pfx___split_vma+0x10/0x10 [ 265.384509][ T9106] ? mas_next_slot+0xc05/0x13a0 [ 265.384562][ T9106] vms_gather_munmap_vmas+0x3a5/0x1720 [ 265.384608][ T9106] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 265.384649][ T9106] ? do_raw_spin_lock+0x128/0x260 [ 265.384701][ T9106] ? lock_acquire+0x1d1/0x380 [ 265.384736][ T9106] ? do_raw_spin_lock+0x128/0x260 [ 265.384775][ T9106] ? find_held_lock+0x2b/0x80 [ 265.384805][ T9106] do_vmi_align_munmap+0x287/0x5f0 [ 265.384847][ T9106] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 265.384936][ T9106] ? mas_walk+0x260/0x310 [ 265.384972][ T9106] do_vmi_munmap+0x1f8/0x3e0 [ 265.385017][ T9106] unmap_source_vma+0x35c/0x8f0 [ 265.385063][ T9106] ? __pfx_unmap_source_vma+0x10/0x10 [ 265.385111][ T9106] ? __vma_start_write+0x17f/0x280 [ 265.385144][ T9106] ? __pfx___vma_start_write+0x10/0x10 [ 265.385177][ T9106] ? vm_stat_account+0x162/0x190 [ 265.385212][ T9106] move_vma+0x778/0xc30 [ 265.385253][ T9106] ? __pfx_move_vma+0x10/0x10 [ 265.385292][ T9106] ? cap_mmap_addr+0x4b/0x120 [ 265.385319][ T9106] ? security_mmap_addr+0x71/0x1e0 [ 265.385355][ T9106] ? __get_unmapped_area+0x255/0x3e0 [ 265.385388][ T9106] ? vrm_set_new_addr+0x1f5/0x2a0 [ 265.385431][ T9106] mremap_to+0x234/0x4c0 [ 265.385470][ T9106] ? __pfx_mremap_to+0x10/0x10 [ 265.385505][ T9106] ? mas_walk+0x260/0x310 [ 265.385535][ T9106] __do_sys_mremap+0x99f/0x1780 [ 265.385580][ T9106] ? __pfx___do_sys_mremap+0x10/0x10 [ 265.385624][ T9106] ? rcu_read_lock_any_held+0x6a/0x90 [ 265.385653][ T9106] ? ksys_write+0x190/0x250 [ 265.385702][ T9106] ? fput+0x7c/0x100 [ 265.385728][ T9106] ? ksys_write+0x1ac/0x250 [ 265.385765][ T9106] do_syscall_64+0x121/0x770 [ 265.385800][ T9106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.385828][ T9106] RIP: 0033:0x7f970759e159 [ 265.385850][ T9106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.385875][ T9106] RSP: 002b:00007f97083a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 265.385908][ T9106] RAX: ffffffffffffffda RBX: 00007f9707826270 RCX: 00007f970759e159 [ 265.385925][ T9106] RDX: 0000000000000037 RSI: 0000000000000008 RDI: 0000200000001000 [ 265.385941][ T9106] RBP: 00007f97083a8090 R08: 000000110c230000 R09: 0000000000000000 [ 265.385958][ T9106] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 265.385973][ T9106] R13: 00007f9707826308 R14: 00007f9707826270 R15: 00007ffc5d1aa138 [ 265.386009][ T9106] [ 267.325053][ T9135] FAULT_INJECTION: forcing a failure. [ 267.325053][ T9135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.325110][ T9135] CPU: 0 UID: 0 PID: 9135 Comm: syz.1.381 Not tainted syzkaller #0 PREEMPT(full) [ 267.325146][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.325162][ T9135] Call Trace: [ 267.325171][ T9135] [ 267.325181][ T9135] dump_stack_lvl+0x100/0x190 [ 267.325273][ T9135] should_fail_ex.cold+0x5/0xa [ 267.325308][ T9135] _copy_from_user+0x2e/0xd0 [ 267.325335][ T9135] copy_msghdr_from_user+0x9f/0x4c0 [ 267.325372][ T9135] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 267.325416][ T9135] ? lock_acquire+0x1d1/0x380 [ 267.325449][ T9135] ? get_pid_task+0x2a/0x250 [ 267.325479][ T9135] ___sys_sendmsg+0x106/0x1e0 [ 267.325521][ T9135] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.325571][ T9135] ? get_pid_task+0x106/0x250 [ 267.325612][ T9135] ? find_held_lock+0x2b/0x80 [ 267.325664][ T9135] __sys_sendmsg+0x160/0x210 [ 267.325697][ T9135] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.325746][ T9135] do_syscall_64+0x121/0x770 [ 267.325785][ T9135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.325810][ T9135] RIP: 0033:0x7f970759e159 [ 267.325831][ T9135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.325854][ T9135] RSP: 002b:00007f970840b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.325875][ T9135] RAX: ffffffffffffffda RBX: 00007f9707825fa0 RCX: 00007f970759e159 [ 267.325890][ T9135] RDX: 00000000200008d0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 267.325904][ T9135] RBP: 00007f970840b090 R08: 0000000000000000 R09: 0000000000000000 [ 267.325920][ T9135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.325935][ T9135] R13: 00007f9707826038 R14: 00007f9707825fa0 R15: 00007ffc5d1aa138 [ 267.325970][ T9135] [ 270.485265][ T9200] FAULT_INJECTION: forcing a failure. [ 270.485265][ T9200] name failslab, interval 1, probability 0, space 0, times 0 [ 270.528263][ T9200] CPU: 1 UID: 0 PID: 9200 Comm: syz.0.389 Not tainted syzkaller #0 PREEMPT(full) [ 270.528301][ T9200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.528317][ T9200] Call Trace: [ 270.528327][ T9200] [ 270.528337][ T9200] dump_stack_lvl+0x100/0x190 [ 270.528379][ T9200] should_fail_ex.cold+0x5/0xa [ 270.528421][ T9200] should_failslab+0xc2/0x120 [ 270.528456][ T9200] __kmalloc_noprof+0xfc/0x840 [ 270.528485][ T9200] ? usb_alloc_urb+0x66/0xa0 [ 270.528518][ T9200] usb_alloc_urb+0x66/0xa0 [ 270.528544][ T9200] usb_control_msg+0x1d3/0x4b0 [ 270.528577][ T9200] ? __pfx_usb_control_msg+0x10/0x10 [ 270.528609][ T9200] ? __pfx_schedule_timeout+0x10/0x10 [ 270.528656][ T9200] hub_ext_port_status+0x14e/0x690 [ 270.528698][ T9200] hub_activate+0x6e5/0x1c40 [ 270.528742][ T9200] ? __pfx_hub_activate+0x10/0x10 [ 270.528772][ T9200] ? find_held_lock+0x2b/0x80 [ 270.528798][ T9200] ? print_kernel_ident+0x10/0x40 [ 270.528826][ T9200] ? proc_do_submiturb+0x25c0/0x3820 [ 270.528854][ T9200] ? usb_generic_driver_resume+0x70/0xa0 [ 270.528885][ T9200] ? hcd_bus_resume+0x37b/0x810 [ 270.528919][ T9200] hub_resume+0xb0/0x400 [ 270.528954][ T9200] ? __pfx_hub_resume+0x10/0x10 [ 270.528986][ T9200] ? __pfx_hcd_bus_resume+0x10/0x10 [ 270.529021][ T9200] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 270.529065][ T9200] usb_resume_both+0x53a/0x7f0 [ 270.529105][ T9200] ? do_dentry_open+0x6ab/0x14d0 [ 270.529132][ T9200] ? __pfx_usb_resume_both+0x10/0x10 [ 270.529168][ T9200] ? __rpm_callback+0x272/0x620 [ 270.529201][ T9200] ? __pfx_usb_runtime_resume+0x10/0x10 [ 270.529240][ T9200] ? rcu_is_watching+0x13/0xc0 [ 270.529270][ T9200] ? __pfx_usb_runtime_resume+0x10/0x10 [ 270.529313][ T9200] __rpm_callback+0xc8/0x620 [ 270.529342][ T9200] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 270.529381][ T9200] ? __pfx_usb_runtime_resume+0x10/0x10 [ 270.529430][ T9200] rpm_callback+0x11f/0x150 [ 270.529460][ T9200] ? __pfx_usb_runtime_resume+0x10/0x10 [ 270.529503][ T9200] rpm_resume+0xd13/0x1320 [ 270.529532][ T9200] ? usbdev_open+0x161/0x870 [ 270.529555][ T9200] ? klist_put+0xcb/0x1d0 [ 270.529596][ T9200] ? __pfx_rpm_resume+0x10/0x10 [ 270.529625][ T9200] ? do_raw_spin_lock+0x128/0x260 [ 270.529667][ T9200] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 270.529710][ T9200] ? _raw_spin_lock_irqsave+0x52/0x60 [ 270.529747][ T9200] __pm_runtime_resume+0xb6/0x170 [ 270.529782][ T9200] usb_autoresume_device+0x23/0xe0 [ 270.529827][ T9200] usbdev_open+0x228/0x870 [ 270.529854][ T9200] ? kobject_get_unless_zero+0x156/0x200 [ 270.529894][ T9200] ? __pfx_usbdev_open+0x10/0x10 [ 270.529917][ T9200] ? chrdev_open+0x10b/0x6a0 [ 270.529946][ T9200] ? chrdev_open+0x10b/0x6a0 [ 270.529980][ T9200] ? __pfx_usbdev_open+0x10/0x10 [ 270.530006][ T9200] chrdev_open+0x234/0x6a0 [ 270.530035][ T9200] ? __pfx_apparmor_file_open+0x10/0x10 [ 270.530074][ T9200] ? __pfx_chrdev_open+0x10/0x10 [ 270.530107][ T9200] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 270.530149][ T9200] do_dentry_open+0x6ab/0x14d0 [ 270.530176][ T9200] ? __pfx_chrdev_open+0x10/0x10 [ 270.530212][ T9200] vfs_open+0x82/0x3f0 [ 270.530251][ T9200] path_openat+0x19fa/0x2440 [ 270.530288][ T9200] ? __pfx_path_openat+0x10/0x10 [ 270.530330][ T9200] do_file_open+0x20e/0x430 [ 270.530364][ T9200] ? __pfx_do_file_open+0x10/0x10 [ 270.530428][ T9200] ? _raw_spin_unlock+0x28/0x50 [ 270.530455][ T9200] ? alloc_fd+0x471/0x7a0 [ 270.530490][ T9200] do_sys_openat2+0x10f/0x1e0 [ 270.530524][ T9200] ? __pfx_do_sys_openat2+0x10/0x10 [ 270.530561][ T9200] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 270.530597][ T9200] ? __fget_files+0x21f/0x3d0 [ 270.530631][ T9200] __x64_sys_openat+0x12d/0x210 [ 270.530667][ T9200] ? __pfx___x64_sys_openat+0x10/0x10 [ 270.530717][ T9200] do_syscall_64+0x121/0x770 [ 270.530754][ T9200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.530782][ T9200] RIP: 0033:0x7f00bad9e159 [ 270.530805][ T9200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.530826][ T9200] RSP: 002b:00007f00b8fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 270.530850][ T9200] RAX: ffffffffffffffda RBX: 00007f00bb026180 RCX: 00007f00bad9e159 [ 270.530868][ T9200] RDX: 000000000000a901 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 270.530883][ T9200] RBP: 00007f00b8fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 270.530896][ T9200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.530908][ T9200] R13: 00007f00bb026218 R14: 00007f00bb026180 R15: 00007ffe8ec361d8 [ 270.530938][ T9200] [ 280.742495][ T52] Bluetooth: hci1: unexpected event 0x20 length: 120 > 7 [ 281.329602][ T30] audit: type=1800 audit(282.699:7): pid=9393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.413" name="dbroot" dev="configfs" ino=50162 res=0 errno=0 [ 286.439347][ T30] audit: type=1800 audit(287.809:8): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.426" name="dbroot" dev="configfs" ino=51753 res=0 errno=0 [ 291.551900][ T30] audit: type=1800 audit(292.919:9): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.437" name="dbroot" dev="configfs" ino=53204 res=0 errno=0 [ 291.942494][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.164605][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.173174][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.182036][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.184590][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.202438][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.210210][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.531397][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.890560][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.460832][ T50] bridge_slave_1: left allmulticast mode [ 293.460886][ T50] bridge_slave_1: left promiscuous mode [ 293.461155][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.503330][ T50] bridge_slave_0: left allmulticast mode [ 293.503375][ T50] bridge_slave_0: left promiscuous mode [ 293.504312][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.827541][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.851111][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.866935][ T50] bond0 (unregistering): Released all slaves [ 294.282774][ T5618] Bluetooth: hci1: command tx timeout [ 294.796298][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 294.877341][ T50] hsr_slave_0: left promiscuous mode [ 294.884832][ T50] hsr_slave_1: left promiscuous mode [ 294.891430][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.892758][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.901128][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.901154][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.916350][ T50] veth1_macvtap: left promiscuous mode [ 294.916398][ T50] veth0_macvtap: left promiscuous mode [ 294.916501][ T50] veth1_vlan: left promiscuous mode [ 294.916571][ T50] veth0_vlan: left promiscuous mode [ 295.111458][ T50] team0 (unregistering): Port device team_slave_1 removed [ 295.136395][ T50] team0 (unregistering): Port device team_slave_0 removed [ 296.363149][ T5618] Bluetooth: hci1: command tx timeout [ 296.840656][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 297.242001][ T9586] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.249436][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.256686][ T9586] bridge_slave_0: entered allmulticast mode [ 297.259212][ T9586] bridge_slave_0: entered promiscuous mode [ 297.382909][ T9586] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.383011][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.383140][ T9586] bridge_slave_1: entered allmulticast mode [ 297.384988][ T9586] bridge_slave_1: entered promiscuous mode [ 297.474857][ T9586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.487589][ T9586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.539127][ T9586] team0: Port device team_slave_0 added [ 297.555518][ T9586] team0: Port device team_slave_1 added [ 297.632255][ T9586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.632300][ T9586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.633755][ T9586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.638074][ T9586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.638095][ T9586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.638429][ T9586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.730415][ T9586] hsr_slave_0: entered promiscuous mode [ 297.732338][ T9586] hsr_slave_1: entered promiscuous mode [ 297.733458][ T9586] debugfs: 'hsr0' already exists in 'hsr' [ 297.733479][ T9586] Cannot create hsr debugfs directory [ 298.443958][ T5618] Bluetooth: hci1: command tx timeout [ 298.697517][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 300.089933][ T9586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 300.107497][ T9586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.119406][ T9586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 300.145285][ T9586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.153814][ T9586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 300.168208][ T9586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.178856][ T9586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 300.197257][ T9586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.533690][ T5618] Bluetooth: hci1: command tx timeout [ 302.538373][ T9586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.703588][ T9586] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.746904][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.747030][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.832565][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.832716][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.954496][ T9833] FAULT_INJECTION: forcing a failure. [ 302.954496][ T9833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.967926][ T9833] CPU: 1 UID: 0 PID: 9833 Comm: syz.0.454 Not tainted syzkaller #0 PREEMPT(full) [ 302.967961][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.967985][ T9833] Call Trace: [ 302.967994][ T9833] [ 302.968004][ T9833] dump_stack_lvl+0x100/0x190 [ 302.968046][ T9833] should_fail_ex.cold+0x5/0xa [ 302.968079][ T9833] _copy_to_user+0x32/0xd0 [ 302.968110][ T9833] keyctl_capabilities+0x5a/0x160 [ 302.968143][ T9833] __do_sys_keyctl+0x427/0x5a0 [ 302.968176][ T9833] do_syscall_64+0x121/0x770 [ 302.968209][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.968234][ T9833] RIP: 0033:0x7f00bad9e159 [ 302.968256][ T9833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.968278][ T9833] RSP: 002b:00007f00b8f72028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 302.968308][ T9833] RAX: ffffffffffffffda RBX: 00007f00bb026450 RCX: 00007f00bad9e159 [ 302.968324][ T9833] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 302.968339][ T9833] RBP: 00007f00b8f72090 R08: 000000000000037f R09: 0000000000000000 [ 302.968355][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.968370][ T9833] R13: 00007f00bb0264e8 R14: 00007f00bb026450 R15: 00007ffe8ec361d8 [ 302.968403][ T9833] [ 305.597890][ T9586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.189010][ T9586] veth0_vlan: entered promiscuous mode [ 306.208801][ T9586] veth1_vlan: entered promiscuous mode [ 306.264626][ T9586] veth0_macvtap: entered promiscuous mode [ 306.275875][ T9586] veth1_macvtap: entered promiscuous mode [ 306.341138][ T9586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.177228][ T9586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.103858][ T117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.104818][ T117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.104883][ T117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.104928][ T117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.181211][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.181260][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.249337][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.249395][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.410383][ T30] audit: type=1800 audit(309.769:10): pid=9936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.465" name="dbroot" dev="configfs" ino=56967 res=0 errno=0 [ 309.246192][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 312.571921][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 317.407616][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.407698][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.290596][ T117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.626752][ T117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.786654][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.795770][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.807505][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.818578][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.826402][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.034826][ T117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.376128][ T117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.318522][ T117] bridge_slave_1: left allmulticast mode [ 322.318571][ T117] bridge_slave_1: left promiscuous mode [ 322.318770][ T117] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.332416][ T117] bridge_slave_0: left allmulticast mode [ 322.332445][ T117] bridge_slave_0: left promiscuous mode [ 322.333186][ T117] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.417570][T10199] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 322.589566][ T117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.611483][ T117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.622060][ T117] bond0 (unregistering): Released all slaves [ 322.923215][ T52] Bluetooth: hci0: command tx timeout [ 323.395318][ T117] hsr_slave_0: left promiscuous mode [ 323.401166][ T117] hsr_slave_1: left promiscuous mode [ 323.402455][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.402478][ T117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.410079][ T117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.410103][ T117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.436144][ T117] veth1_macvtap: left promiscuous mode [ 323.436193][ T117] veth0_macvtap: left promiscuous mode [ 323.436305][ T117] veth1_vlan: left promiscuous mode [ 323.436375][ T117] veth0_vlan: left promiscuous mode [ 323.694660][ T117] team0 (unregistering): Port device team_slave_1 removed [ 323.715008][ T117] team0 (unregistering): Port device team_slave_0 removed [ 323.958126][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 325.002720][ T52] Bluetooth: hci0: command tx timeout [ 325.432042][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 325.575150][T10169] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.576209][T10169] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.576337][T10169] bridge_slave_0: entered allmulticast mode [ 325.578169][T10169] bridge_slave_0: entered promiscuous mode [ 325.685737][T10169] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.685847][T10169] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.685999][T10169] bridge_slave_1: entered allmulticast mode [ 325.689166][T10169] bridge_slave_1: entered promiscuous mode [ 325.917181][T10169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.934189][T10169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.056049][T10169] team0: Port device team_slave_0 added [ 326.067261][T10169] team0: Port device team_slave_1 added [ 326.261841][T10169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.261882][T10169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.261910][T10169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.434693][T10169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.434734][T10169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.434763][T10169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.023398][T10169] hsr_slave_0: entered promiscuous mode [ 327.030677][T10169] hsr_slave_1: entered promiscuous mode [ 327.037427][T10169] debugfs: 'hsr0' already exists in 'hsr' [ 327.044469][T10169] Cannot create hsr debugfs directory [ 327.083016][ T52] Bluetooth: hci0: command tx timeout [ 327.122532][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 329.163002][ T52] Bluetooth: hci0: command tx timeout [ 330.140293][ T30] audit: type=1800 audit(331.509:11): pid=10362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.507" name="dbroot" dev="configfs" ino=61707 res=0 errno=0 [ 330.463493][T10169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.484284][T10169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 330.496212][T10169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.534038][T10169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.542079][T10169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.565495][T10169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.575733][T10169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.591985][T10169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.794903][T10169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.923456][T10169] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.967739][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.969058][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.001071][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.001200][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.277087][T10169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.577837][T10169] veth0_vlan: entered promiscuous mode [ 336.611047][T10169] veth1_vlan: entered promiscuous mode [ 336.931993][T10169] veth0_macvtap: entered promiscuous mode [ 337.135442][T10169] veth1_macvtap: entered promiscuous mode [ 338.181952][T10169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.246319][T10169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.413824][ T982] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.413892][ T982] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.413946][ T982] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.413985][ T982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.724261][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.724308][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.834705][ T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.834756][ T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.178031][T10553] FAULT_INJECTION: forcing a failure. [ 339.178031][T10553] name failslab, interval 1, probability 0, space 0, times 0 [ 339.178086][T10553] CPU: 1 UID: 0 PID: 10553 Comm: syz.0.493 Not tainted syzkaller #0 PREEMPT(full) [ 339.178115][T10553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.178126][T10553] Call Trace: [ 339.178133][T10553] [ 339.178141][T10553] dump_stack_lvl+0x100/0x190 [ 339.178178][T10553] should_fail_ex.cold+0x5/0xa [ 339.178212][T10553] should_failslab+0xc2/0x120 [ 339.178245][T10553] kmem_cache_alloc_noprof+0x92/0x6a0 [ 339.178273][T10553] ? do_getname+0x35/0x390 [ 339.178313][T10553] do_getname+0x35/0x390 [ 339.178351][T10553] user_path_at+0x26/0x60 [ 339.178377][T10553] __x64_sys_mount+0x1fb/0x310 [ 339.178413][T10553] ? __pfx___x64_sys_mount+0x10/0x10 [ 339.178457][T10553] do_syscall_64+0x121/0x770 [ 339.178492][T10553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.178519][T10553] RIP: 0033:0x7f5f6759e159 [ 339.178541][T10553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.178564][T10553] RSP: 002b:00007f5f657f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 339.178589][T10553] RAX: ffffffffffffffda RBX: 00007f5f67825fa0 RCX: 00007f5f6759e159 [ 339.178606][T10553] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000000 [ 339.178622][T10553] RBP: 00007f5f657f6090 R08: 0000000000000000 R09: 0000000000000000 [ 339.178638][T10553] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 339.178653][T10553] R13: 00007f5f67826038 R14: 00007f5f67825fa0 R15: 00007ffc62fc8368 [ 339.178695][T10553] [ 342.414020][ T30] audit: type=1800 audit(343.789:12): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.528" name="dbroot" dev="configfs" ino=64161 res=0 errno=0 [ 343.438893][T10627] FAULT_INJECTION: forcing a failure. [ 343.438893][T10627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.438949][T10627] CPU: 1 UID: 0 PID: 10627 Comm: syz.3.532 Not tainted syzkaller #0 PREEMPT(full) [ 343.438985][T10627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.439000][T10627] Call Trace: [ 343.439009][T10627] [ 343.439019][T10627] dump_stack_lvl+0x100/0x190 [ 343.439060][T10627] should_fail_ex.cold+0x5/0xa [ 343.439095][T10627] _copy_from_user+0x2e/0xd0 [ 343.439126][T10627] input_event_from_user+0xb9/0x290 [ 343.439169][T10627] ? __pfx_input_event_from_user+0x10/0x10 [ 343.439207][T10627] ? lock_acquire+0x1d1/0x380 [ 343.439246][T10627] ? get_pid_task+0x2a/0x250 [ 343.439285][T10627] evdev_write+0x27a/0x430 [ 343.439329][T10627] ? __pfx_evdev_write+0x10/0x10 [ 343.439370][T10627] ? bpf_lsm_file_permission+0x9/0x10 [ 343.439402][T10627] ? security_file_permission+0x76/0x210 [ 343.439441][T10627] ? rw_verify_area+0xce/0x6d0 [ 343.439482][T10627] vfs_write+0x2aa/0x1050 [ 343.439508][T10627] ? __pfx_evdev_write+0x10/0x10 [ 343.439543][T10627] ? lock_acquire+0x1d1/0x380 [ 343.439578][T10627] ? __fget_files+0x34/0x3d0 [ 343.439603][T10627] ? __pfx_vfs_write+0x10/0x10 [ 343.439620][T10627] ? find_held_lock+0x2b/0x80 [ 343.439643][T10627] ? __fget_files+0x215/0x3d0 [ 343.439668][T10627] ? __fget_files+0x215/0x3d0 [ 343.439701][T10627] ? __fget_files+0x21f/0x3d0 [ 343.439738][T10627] ksys_write+0x1f8/0x250 [ 343.439761][T10627] ? __pfx_ksys_write+0x10/0x10 [ 343.439794][T10627] do_syscall_64+0x121/0x770 [ 343.439831][T10627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.439858][T10627] RIP: 0033:0x7f57b639e159 [ 343.439880][T10627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.439903][T10627] RSP: 002b:00007f57b732e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.439928][T10627] RAX: ffffffffffffffda RBX: 00007f57b6626090 RCX: 00007f57b639e159 [ 343.439946][T10627] RDX: 000000047ffffdf2 RSI: 0000000000000000 RDI: 0000000000000003 [ 343.439961][T10627] RBP: 00007f57b732e090 R08: 0000000000000000 R09: 0000000000000000 [ 343.439977][T10627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.439993][T10627] R13: 00007f57b6626128 R14: 00007f57b6626090 R15: 00007ffdad9820e8 [ 343.440028][T10627] [ 350.773864][T10756] bond0: no command found in slaves file - use +ifname or -ifname [ 353.043669][T10795] FAULT_INJECTION: forcing a failure. [ 353.043669][T10795] name fail_futex, interval 1, probability 0, space 0, times 1 [ 353.043824][T10795] CPU: 1 UID: 0 PID: 10795 Comm: syz.3.552 Not tainted syzkaller #0 PREEMPT(full) [ 353.043855][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.043880][T10795] Call Trace: [ 353.043890][T10795] [ 353.043900][T10795] dump_stack_lvl+0x100/0x190 [ 353.044003][T10795] should_fail_ex.cold+0x5/0xa [ 353.044055][T10795] get_futex_key+0x1d0/0x14f0 [ 353.044119][T10795] ? __pfx_get_futex_key+0x10/0x10 [ 353.044155][T10795] ? __mutex_unlock_slowpath+0x35d/0x930 [ 353.044270][T10795] ? lock_acquire+0x1d1/0x380 [ 353.044326][T10795] futex_wake+0xf4/0x5e0 [ 353.044359][T10795] ? __pfx_futex_wake+0x10/0x10 [ 353.044394][T10795] ? lock_acquire+0x1d1/0x380 [ 353.044426][T10795] ? detach_task_ctx_data+0x83/0x490 [ 353.044536][T10795] do_futex+0x2b2/0x440 [ 353.044563][T10795] ? __pfx_do_futex+0x10/0x10 [ 353.044589][T10795] ? __might_fault+0xc5/0x140 [ 353.044671][T10795] mm_exit_exec_release+0x256/0x2f0 [ 353.044726][T10795] do_exit+0x707/0x2ae0 [ 353.044759][T10795] ? __pfx_do_exit+0x10/0x10 [ 353.044787][T10795] ? do_raw_spin_lock+0x128/0x260 [ 353.044826][T10795] ? find_held_lock+0x2b/0x80 [ 353.044852][T10795] ? get_signal+0x7e0/0x21e0 [ 353.044903][T10795] do_group_exit+0xd5/0x2a0 [ 353.044935][T10795] get_signal+0x1ec7/0x21e0 [ 353.044985][T10795] ? __pfx_get_signal+0x10/0x10 [ 353.045026][T10795] ? do_futex+0x190/0x440 [ 353.045054][T10795] arch_do_signal_or_restart+0x91/0x7a0 [ 353.045110][T10795] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 353.045153][T10795] ? __fget_files+0x21f/0x3d0 [ 353.045228][T10795] exit_to_user_mode_loop+0x139/0x700 [ 353.045276][T10795] ? rcu_is_watching+0x13/0xc0 [ 353.045306][T10795] do_syscall_64+0x603/0x770 [ 353.045371][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.045413][T10795] RIP: 0033:0x7f57b639e159 [ 353.045437][T10795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.045461][T10795] RSP: 002b:00007f57b72890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 353.045520][T10795] RAX: fffffffffffffe00 RBX: 00007f57b6626548 RCX: 00007f57b639e159 [ 353.045545][T10795] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f57b6626548 [ 353.045561][T10795] RBP: 00007f57b6626540 R08: 0000000000000000 R09: 0000000000000000 [ 353.045577][T10795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.045592][T10795] R13: 00007f57b66265d8 R14: 00007ffdad982000 R15: 00007ffdad9820e8 [ 353.045627][T10795] [ 363.485612][ T30] audit: type=1800 audit(364.859:13): pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.574" name="dbroot" dev="configfs" ino=69862 res=0 errno=0 [ 364.492213][ T30] audit: type=1800 audit(365.859:14): pid=11002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.578" name="dbroot" dev="configfs" ino=69970 res=0 errno=0 [ 365.572708][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 367.257904][ T30] audit: type=1800 audit(368.629:15): pid=11046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.587" name="dbroot" dev="configfs" ino=70290 res=0 errno=0 [ 373.400448][ T30] audit: type=1800 audit(374.769:16): pid=11169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.601" name="dbroot" dev="configfs" ino=72232 res=0 errno=0 [ 374.618381][T11200] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 378.846875][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.846951][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.030266][ T30] audit: type=1800 audit(380.399:17): pid=11288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.615" name="dbroot" dev="configfs" ino=73989 res=0 errno=0 [ 384.379580][ T30] audit: type=1800 audit(385.749:18): pid=11375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.626" name="dbroot" dev="configfs" ino=74477 res=0 errno=0 [ 393.381506][ T3020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.512288][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 393.521882][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 393.532810][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 393.534256][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 393.534932][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.637071][ T3020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.969266][ T3020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.161289][ T3020] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.675615][ T3020] bridge_slave_1: left allmulticast mode [ 394.675675][ T3020] bridge_slave_1: left promiscuous mode [ 394.675894][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.690315][ T3020] bridge_slave_0: left allmulticast mode [ 394.690343][ T3020] bridge_slave_0: left promiscuous mode [ 394.690571][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.910458][ T3020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.921449][ T3020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.933111][ T3020] bond0 (unregistering): Released all slaves [ 395.563309][ T5618] Bluetooth: hci0: command tx timeout [ 396.017085][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 396.098373][ T3020] hsr_slave_0: left promiscuous mode [ 396.107050][ T3020] hsr_slave_1: left promiscuous mode [ 396.113543][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.121093][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.136880][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.136913][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.154165][ T3020] veth1_macvtap: left promiscuous mode [ 396.154223][ T3020] veth0_macvtap: left promiscuous mode [ 396.154327][ T3020] veth1_vlan: left promiscuous mode [ 396.154445][ T3020] veth0_vlan: left promiscuous mode [ 396.347525][ T3020] team0 (unregistering): Port device team_slave_1 removed [ 396.364413][ T3020] team0 (unregistering): Port device team_slave_0 removed [ 397.190697][T11551] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.190885][T11551] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.191040][T11551] bridge_slave_0: entered allmulticast mode [ 397.195946][T11551] bridge_slave_0: entered promiscuous mode [ 397.202024][T11551] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.202130][T11551] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.204177][T11551] bridge_slave_1: entered allmulticast mode [ 397.207922][T11551] bridge_slave_1: entered promiscuous mode [ 397.288314][T11629] FAULT_INJECTION: forcing a failure. [ 397.288314][T11629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.288372][T11629] CPU: 1 UID: 0 PID: 11629 Comm: syz.3.653 Not tainted syzkaller #0 PREEMPT(full) [ 397.288401][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.288413][T11629] Call Trace: [ 397.288420][T11629] [ 397.288428][T11629] dump_stack_lvl+0x100/0x190 [ 397.288472][T11629] should_fail_ex.cold+0x5/0xa [ 397.288508][T11629] _copy_to_user+0x32/0xd0 [ 397.288654][T11629] keyctl_capabilities+0x5a/0x160 [ 397.288739][T11629] __do_sys_keyctl+0x427/0x5a0 [ 397.288771][T11629] do_syscall_64+0x121/0x770 [ 397.288811][T11629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.288839][T11629] RIP: 0033:0x7f57b639e159 [ 397.288861][T11629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.288885][T11629] RSP: 002b:00007f57b72aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 397.288910][T11629] RAX: ffffffffffffffda RBX: 00007f57b6626450 RCX: 00007f57b639e159 [ 397.288927][T11629] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 397.288942][T11629] RBP: 00007f57b72aa090 R08: 00000000000003ff R09: 0000000000000000 [ 397.288958][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.288977][T11629] R13: 00007f57b66264e8 R14: 00007f57b6626450 R15: 00007ffdad9820e8 [ 397.289018][T11629] [ 397.643335][ T5618] Bluetooth: hci0: command tx timeout [ 397.734792][T11551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.881549][T11551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.025281][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 398.058695][T11551] team0: Port device team_slave_0 added [ 398.070741][T11551] team0: Port device team_slave_1 added [ 398.358154][T11551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.366039][T11551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.377773][T11551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.452294][T11551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.452326][T11551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.452365][T11551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.600582][T11551] hsr_slave_0: entered promiscuous mode [ 398.609944][T11551] hsr_slave_1: entered promiscuous mode [ 398.610875][T11551] debugfs: 'hsr0' already exists in 'hsr' [ 398.610899][T11551] Cannot create hsr debugfs directory [ 399.723185][ T5618] Bluetooth: hci0: command tx timeout [ 400.758236][T11551] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 400.776443][T11551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.785866][T11551] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 400.798009][T11551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.806798][T11551] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 400.819909][T11551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.876392][T11551] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 400.898382][T11551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.805987][ T5618] Bluetooth: hci0: command tx timeout [ 402.425887][T11551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.483363][T11551] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.545989][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.546127][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.580171][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.580291][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.596348][ T30] audit: type=1800 audit(403.949:19): pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.664" name="dbroot" dev="configfs" ino=78854 res=0 errno=0 [ 404.938121][T11551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.344404][T11815] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 405.401388][T11815] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 405.419504][T11815] vhci_hcd vhci_hcd.2: default hub control req: 4000 v0000 i0000 l0 [ 405.578425][T11551] veth0_vlan: entered promiscuous mode [ 406.399022][T11551] veth1_vlan: entered promiscuous mode [ 406.759241][T11551] veth0_macvtap: entered promiscuous mode [ 406.771030][T11551] veth1_macvtap: entered promiscuous mode [ 407.102032][T11551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.355502][T11551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.515667][ T1280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.522180][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.524471][ T3020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.665620][ T982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.726675][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.726721][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.417809][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.417850][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.727545][ T30] audit: type=1800 audit(412.099:20): pid=11901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.681" name="dbroot" dev="configfs" ino=80475 res=0 errno=0 [ 415.750488][ T30] audit: type=1800 audit(417.119:21): pid=11992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.694" name="dbroot" dev="configfs" ino=82102 res=0 errno=0 [ 416.763177][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 419.986682][T12072] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 423.584839][ T30] audit: type=1800 audit(424.959:22): pid=12132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.712" name="dbroot" dev="configfs" ino=83138 res=0 errno=0 [ 431.621119][T12281] openvswitch: netlink: IPv4 tunnel dst address is zero [ 435.462242][T12350] : Can't lookup blockdev [ 436.950636][T12372] FAULT_INJECTION: forcing a failure. [ 436.950636][T12372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.969298][T12372] CPU: 1 UID: 0 PID: 12372 Comm: syz.3.742 Not tainted syzkaller #0 PREEMPT(full) [ 436.969333][T12372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.969347][T12372] Call Trace: [ 436.969356][T12372] [ 436.969366][T12372] dump_stack_lvl+0x100/0x190 [ 436.969405][T12372] should_fail_ex.cold+0x5/0xa [ 436.969439][T12372] _copy_to_user+0x32/0xd0 [ 436.969469][T12372] keyctl_capabilities+0x5a/0x160 [ 436.969503][T12372] __do_sys_keyctl+0x427/0x5a0 [ 436.969533][T12372] do_syscall_64+0x121/0x770 [ 436.969571][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.969597][T12372] RIP: 0033:0x7f57b639e159 [ 436.969620][T12372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.969643][T12372] RSP: 002b:00007f57b72aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 436.969669][T12372] RAX: ffffffffffffffda RBX: 00007f57b6626450 RCX: 00007f57b639e159 [ 436.969686][T12372] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 436.969701][T12372] RBP: 00007f57b72aa090 R08: 000000000000037f R09: 0000000000000000 [ 436.969717][T12372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.969742][T12372] R13: 00007f57b66264e8 R14: 00007f57b6626450 R15: 00007ffdad9820e8 [ 436.969776][T12372] [ 437.628515][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.705214][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 437.718408][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 437.724940][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 437.738078][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 437.749869][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 437.964083][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.191420][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.411882][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.425487][ T50] bridge_slave_1: left allmulticast mode [ 439.425560][ T50] bridge_slave_1: left promiscuous mode [ 439.425778][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.439529][ T50] bridge_slave_0: left allmulticast mode [ 439.439558][ T50] bridge_slave_0: left promiscuous mode [ 439.439778][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.669288][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.685833][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.698383][ T50] bond0 (unregistering): Released all slaves [ 439.811007][ T5618] Bluetooth: hci0: command tx timeout [ 440.287267][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.288122][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.478504][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 440.591482][ T50] hsr_slave_0: left promiscuous mode [ 440.598217][ T50] hsr_slave_1: left promiscuous mode [ 440.599126][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.599149][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.604734][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.604763][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.628475][ T50] veth1_macvtap: left promiscuous mode [ 440.628519][ T50] veth0_macvtap: left promiscuous mode [ 440.628634][ T50] veth1_vlan: left promiscuous mode [ 440.628712][ T50] veth0_vlan: left promiscuous mode [ 440.985427][ T50] team0 (unregistering): Port device team_slave_1 removed [ 441.015125][ T50] team0 (unregistering): Port device team_slave_0 removed [ 441.883110][ T5618] Bluetooth: hci0: command tx timeout [ 442.754012][T12384] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.754211][T12384] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.754340][T12384] bridge_slave_0: entered allmulticast mode [ 442.756087][T12384] bridge_slave_0: entered promiscuous mode [ 442.760150][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 442.846174][T12384] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.853510][T12384] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.853659][T12384] bridge_slave_1: entered allmulticast mode [ 442.855656][T12384] bridge_slave_1: entered promiscuous mode [ 442.921795][T12489] FAULT_INJECTION: forcing a failure. [ 442.921795][T12489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.937990][T12489] CPU: 1 UID: 0 PID: 12489 Comm: syz.2.753 Not tainted syzkaller #0 PREEMPT(full) [ 442.938025][T12489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.938041][T12489] Call Trace: [ 442.938050][T12489] [ 442.938059][T12489] dump_stack_lvl+0x100/0x190 [ 442.938098][T12489] should_fail_ex.cold+0x5/0xa [ 442.938130][T12489] _copy_to_user+0x32/0xd0 [ 442.938160][T12489] keyctl_capabilities+0x5a/0x160 [ 442.938194][T12489] __do_sys_keyctl+0x427/0x5a0 [ 442.938226][T12489] do_syscall_64+0x121/0x770 [ 442.938262][T12489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.938289][T12489] RIP: 0033:0x7f684ab9e159 [ 442.938310][T12489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.938336][T12489] RSP: 002b:00007f684b9b8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 442.938361][T12489] RAX: ffffffffffffffda RBX: 00007f684ae26450 RCX: 00007f684ab9e159 [ 442.938378][T12489] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 442.938393][T12489] RBP: 00007f684b9b8090 R08: 000000000000037f R09: 0000000000000000 [ 442.938409][T12489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.938425][T12489] R13: 00007f684ae264e8 R14: 00007f684ae26450 R15: 00007fff47a41878 [ 442.938460][T12489] [ 443.086011][T12384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.089390][T12384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.188821][T12384] team0: Port device team_slave_0 added [ 443.199095][T12384] team0: Port device team_slave_1 added [ 443.349454][T12384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.349493][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.349889][T12384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.441775][T12384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.441823][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.441852][T12384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.963428][ T5618] Bluetooth: hci0: command tx timeout [ 444.182296][T12384] hsr_slave_0: entered promiscuous mode [ 444.185657][T12384] hsr_slave_1: entered promiscuous mode [ 444.186366][T12384] debugfs: 'hsr0' already exists in 'hsr' [ 444.186388][T12384] Cannot create hsr debugfs directory [ 444.244161][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 446.042820][ T5618] Bluetooth: hci0: command tx timeout [ 448.827367][T12384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 448.848740][T12384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.849811][T12384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 448.871344][T12384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.043373][T12384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.079672][T12384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.338567][T12384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.366899][T12384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.681802][ T30] audit: type=1800 audit(452.049:23): pid=12672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.764" name="members" dev="configfs" ino=89167 res=0 errno=0 [ 451.849981][T12384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.377188][T12384] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.722355][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.722481][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.798179][ T1280] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.798311][ T1280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.578934][ T30] audit: type=1800 audit(454.949:24): pid=12728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.770" name="dbroot" dev="configfs" ino=89555 res=0 errno=0 [ 455.747773][T12384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.021806][T12384] veth0_vlan: entered promiscuous mode [ 456.036041][T12384] veth1_vlan: entered promiscuous mode [ 456.072476][T12384] veth0_macvtap: entered promiscuous mode [ 456.078527][T12384] veth1_macvtap: entered promiscuous mode [ 456.126980][T12384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.163636][T12384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.227716][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.232696][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.232749][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.232790][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.629540][ T982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.629585][ T982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.238327][ T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.238374][ T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.334608][ T30] audit: type=1800 audit(461.699:25): pid=12842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.782" name="dbroot" dev="configfs" ino=90905 res=0 errno=0 [ 460.997455][T12865] FAULT_INJECTION: forcing a failure. [ 460.997455][T12865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.997516][T12865] CPU: 0 UID: 0 PID: 12865 Comm: syz.0.786 Not tainted syzkaller #0 PREEMPT(full) [ 460.997545][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.997557][T12865] Call Trace: [ 460.997563][T12865] [ 460.997573][T12865] dump_stack_lvl+0x100/0x190 [ 460.997610][T12865] should_fail_ex.cold+0x5/0xa [ 460.997644][T12865] _copy_to_user+0x32/0xd0 [ 460.997674][T12865] keyctl_capabilities+0x5a/0x160 [ 460.997707][T12865] __do_sys_keyctl+0x427/0x5a0 [ 460.997739][T12865] do_syscall_64+0x121/0x770 [ 460.997774][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.997801][T12865] RIP: 0033:0x7fbfd119e159 [ 460.997823][T12865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.997848][T12865] RSP: 002b:00007fbfcf3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 460.997872][T12865] RAX: ffffffffffffffda RBX: 00007fbfd1426450 RCX: 00007fbfd119e159 [ 460.997890][T12865] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 460.997906][T12865] RBP: 00007fbfcf3f6090 R08: 00000000000003ff R09: 0000000000000000 [ 460.997922][T12865] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 460.997937][T12865] R13: 00007fbfd14264e8 R14: 00007fbfd1426450 R15: 00007ffed18fb668 [ 460.997972][T12865] [ 465.358363][ T30] audit: type=1800 audit(466.729:26): pid=12949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.797" name="dbroot" dev="configfs" ino=92550 res=0 errno=0 [ 474.226374][ T30] audit: type=1800 audit(475.599:27): pid=13080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.815" name="dbroot" dev="configfs" ino=93859 res=0 errno=0 [ 479.943710][ T30] audit: type=1800 audit(481.309:28): pid=13180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.826" name="dbroot" dev="configfs" ino=95212 res=0 errno=0 [ 482.220376][ T30] audit: type=1800 audit(483.589:29): pid=13225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.833" name="dbroot" dev="configfs" ino=96506 res=0 errno=0 [ 484.743240][ T30] audit: type=1800 audit(486.109:30): pid=13267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.839" name="dbroot" dev="configfs" ino=96839 res=0 errno=0 [ 485.126407][ T30] audit: type=1800 audit(486.499:31): pid=13279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.843" name="dbroot" dev="configfs" ino=96849 res=0 errno=0 [ 488.449835][ T30] audit: type=1800 audit(489.819:32): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.852" name="dbroot" dev="configfs" ino=98352 res=0 errno=0 [ 489.006056][ T30] audit: type=1800 audit(490.379:33): pid=13354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.854" name="dbroot" dev="configfs" ino=98432 res=0 errno=0 [ 494.866843][ T30] audit: type=1800 audit(496.239:34): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.869" name="dbroot" dev="configfs" ino=99520 res=0 errno=0 [ 495.159982][ T30] audit: type=1800 audit(496.529:35): pid=13464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.870" name="dbroot" dev="configfs" ino=98955 res=0 errno=0 [ 499.304266][ T30] audit: type=1800 audit(500.679:36): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.884" name="dbroot" dev="configfs" ino=100384 res=0 errno=0 [ 501.725132][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.725211][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.838702][ T30] audit: type=1800 audit(509.209:37): pid=13699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.905" name="dbroot" dev="configfs" ino=101192 res=0 errno=0 [ 508.761801][ T30] audit: type=1800 audit(510.129:38): pid=13730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.909" name="dbroot" dev="configfs" ino=102321 res=0 errno=0 [ 509.796876][ T30] audit: type=1800 audit(511.169:39): pid=13744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.910" name="dbroot" dev="configfs" ino=103425 res=0 errno=0 [ 511.256674][ T30] audit: type=1800 audit(512.629:40): pid=13780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.915" name="dbroot" dev="configfs" ino=103638 res=0 errno=0 [ 512.908512][ T30] audit: type=1800 audit(514.279:41): pid=13797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.917" name="dbroot" dev="configfs" ino=102742 res=0 errno=0 [ 513.237508][ T30] audit: type=1800 audit(514.609:42): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.919" name="dbroot" dev="configfs" ino=102775 res=0 errno=0 [ 518.071754][ T30] audit: type=1800 audit(519.439:43): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.930" name="dbroot" dev="configfs" ino=104262 res=0 errno=0 [ 522.001536][ T30] audit: type=1800 audit(523.369:44): pid=13973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.941" name="dbroot" dev="configfs" ino=105722 res=0 errno=0 [ 527.824875][ T30] audit: type=1800 audit(529.199:45): pid=14088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.955" name="dbroot" dev="configfs" ino=106296 res=0 errno=0 [ 528.425253][T14080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 528.425377][T14080] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 528.562899][T14080] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 528.563079][T14080] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 528.619923][T14080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 528.620049][T14080] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 528.660479][T14080] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 528.669343][T14080] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 528.690514][T14080] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 529.252839][ T30] audit: type=1800 audit(530.619:46): pid=14105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.957" name="dbroot" dev="configfs" ino=106374 res=0 errno=0 [ 529.557881][ T30] audit: type=1800 audit(530.929:47): pid=14110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.958" name="dbroot" dev="configfs" ino=106400 res=0 errno=0 [ 529.964606][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 530.602674][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 530.684630][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 530.684707][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 532.052833][T14141] Bluetooth: hci3: command 0x0406 tx timeout [ 532.682655][T14141] Bluetooth: hci2: command 0x0406 tx timeout [ 532.764284][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 532.764517][T14141] Bluetooth: hci1: command 0x0406 tx timeout [ 534.842707][T14141] Bluetooth: hci0: command 0x0c1a tx timeout [ 536.000204][ T30] audit: type=1800 audit(537.369:48): pid=14226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.976" name="dbroot" dev="configfs" ino=108569 res=0 errno=0 [ 537.426680][ T30] audit: type=1800 audit(538.799:49): pid=14251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.978" name="dbroot" dev="configfs" ino=108677 res=0 errno=0 [ 540.307727][ T30] audit: type=1800 audit(541.679:50): pid=14302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.985" name="dbroot" dev="configfs" ino=109686 res=0 errno=0 [ 541.119555][ T30] audit: type=1800 audit(542.489:51): pid=14318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.987" name="dbroot" dev="configfs" ino=109712 res=0 errno=0 [ 543.932117][ T30] audit: type=1800 audit(545.299:52): pid=14368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.996" name="dbroot" dev="configfs" ino=110043 res=0 errno=0 [ 545.335155][ T30] audit: type=1800 audit(546.709:53): pid=14393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.999" name="dbroot" dev="configfs" ino=110168 res=0 errno=0 [ 549.489304][ T30] audit: type=1800 audit(550.859:54): pid=14460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1009" name="dbroot" dev="configfs" ino=110538 res=0 errno=0 [ 557.278048][ T30] audit: type=1800 audit(558.649:55): pid=14605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1028" name="dbroot" dev="configfs" ino=112828 res=0 errno=0 [ 559.791186][ T30] audit: type=1800 audit(561.159:56): pid=14647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1034" name="dbroot" dev="configfs" ino=113019 res=0 errno=0 [ 560.800084][ T30] audit: type=1800 audit(562.169:57): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1038" name="dbroot" dev="configfs" ino=113047 res=0 errno=0 [ 561.778652][ T30] audit: type=1800 audit(563.149:58): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1040" name="dbroot" dev="configfs" ino=113077 res=0 errno=0 [ 563.169654][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.169732][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.859364][ T30] audit: type=1800 audit(566.229:59): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1048" name="dbroot" dev="configfs" ino=113398 res=0 errno=0 [ 566.530464][ T30] audit: type=1800 audit(567.899:60): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1052" name="dbroot" dev="configfs" ino=113604 res=0 errno=0 [ 568.225383][T14802] hub 1-0:1.0: USB hub found [ 568.233406][T14802] hub 1-0:1.0: 1 port detected [ 569.471664][ T30] audit: type=1800 audit(570.839:61): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1059" name="dbroot" dev="configfs" ino=114893 res=0 errno=0 [ 570.195171][ T30] audit: type=1800 audit(571.569:62): pid=14835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1062" name="dbroot" dev="configfs" ino=115990 res=0 errno=0 [ 571.293177][ T30] audit: type=1800 audit(572.669:63): pid=14861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1066" name="dbroot" dev="configfs" ino=116103 res=0 errno=0 [ 574.561375][ T30] audit: type=1800 audit(575.929:64): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1074" name="dbroot" dev="configfs" ino=115372 res=0 errno=0 [ 574.892698][T14919] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 576.385345][T14946] vivid-007: ================= START STATUS ================= [ 576.385542][T14946] vivid-007: Generate PTS: true [ 576.385578][T14946] vivid-007: Generate SCR: true [ 576.385636][T14946] tpg source WxH: 320x240 (Y'CbCr) [ 576.385653][T14946] tpg field: 1 [ 576.385662][T14946] tpg crop: (0,0)/320x240 [ 576.385678][T14946] tpg compose: (0,0)/320x240 [ 576.385695][T14946] tpg colorspace: 8 [ 576.385705][T14946] tpg transfer function: 0/0 [ 576.385716][T14946] tpg Y'CbCr encoding: 0/0 [ 576.385728][T14946] tpg quantization: 0/0 [ 576.385740][T14946] tpg RGB range: 0/2 [ 576.385752][T14946] vivid-007: ================== END STATUS ================== [ 577.631214][T14971] bridge0: port 3(veth1) entered blocking state [ 577.631337][T14971] bridge0: port 3(veth1) entered disabled state [ 577.631538][T14971] veth1: entered allmulticast mode [ 577.654107][T14971] veth1: entered promiscuous mode [ 577.662054][T14971] bridge0: port 3(veth1) entered blocking state [ 577.662213][T14971] bridge0: port 3(veth1) entered forwarding state [ 578.381310][ T30] audit: type=1800 audit(4294967296.480:65): pid=14983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1085" name="dbroot" dev="configfs" ino=116820 res=0 errno=0 [ 581.225548][T15049] zero sized request [ 584.695532][T15106] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1102'. [ 586.699011][T15140] zero sized request [ 590.177105][ T30] audit: type=1800 audit(4294967308.280:66): pid=15198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1114" name="dbroot" dev="configfs" ino=120172 res=0 errno=0 [ 590.560748][ T30] audit: type=1800 audit(4294967308.660:67): pid=15204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1115" name="dbroot" dev="configfs" ino=119282 res=0 errno=0 [ 591.810988][T15228] zero sized request [ 601.101759][T15386] FAULT_INJECTION: forcing a failure. [ 601.101759][T15386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.101829][T15386] CPU: 0 UID: 0 PID: 15386 Comm: syz.0.1144 Not tainted syzkaller #0 PREEMPT(full) [ 601.101862][T15386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 601.101879][T15386] Call Trace: [ 601.101888][T15386] [ 601.101898][T15386] dump_stack_lvl+0x100/0x190 [ 601.101943][T15386] should_fail_ex.cold+0x5/0xa [ 601.101987][T15386] _copy_from_user+0x2e/0xd0 [ 601.102020][T15386] copy_msghdr_from_user+0x9f/0x4c0 [ 601.102203][T15386] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 601.102250][T15386] ? rcu_is_watching+0x13/0xc0 [ 601.102279][T15386] ? ___sys_recvmsg+0x177/0x1a0 [ 601.102314][T15386] ? kfree+0x1e5/0x6d0 [ 601.102417][T15386] ___sys_recvmsg+0xdd/0x1a0 [ 601.102458][T15386] ? __pfx____sys_recvmsg+0x10/0x10 [ 601.102496][T15386] ? lock_acquire+0x1d1/0x380 [ 601.102543][T15386] ? __pfx___might_resched+0x10/0x10 [ 601.102580][T15386] do_recvmmsg+0x2f3/0x740 [ 601.102622][T15386] ? __pfx_do_recvmmsg+0x10/0x10 [ 601.102661][T15386] ? lock_acquire+0x1d1/0x380 [ 601.102700][T15386] ? __mutex_unlock_slowpath+0x35d/0x930 [ 601.102747][T15386] ? __fget_files+0x21f/0x3d0 [ 601.102786][T15386] __x64_sys_recvmmsg+0x22a/0x280 [ 601.102821][T15386] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 601.102865][T15386] do_syscall_64+0x121/0x770 [ 601.102903][T15386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.102933][T15386] RIP: 0033:0x7fbfd119e159 [ 601.102958][T15386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.102996][T15386] RSP: 002b:00007fbfd2017028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 601.103023][T15386] RAX: ffffffffffffffda RBX: 00007fbfd1425fa0 RCX: 00007fbfd119e159 [ 601.103042][T15386] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 601.103058][T15386] RBP: 00007fbfd2017090 R08: 0000000000000000 R09: 0000000000000000 [ 601.103075][T15386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 601.103092][T15386] R13: 00007fbfd1426038 R14: 00007fbfd1425fa0 R15: 00007ffed18fb668 [ 601.103129][T15386] [ 601.677994][T15389] netlink: 6948 bytes leftover after parsing attributes in process `syz.2.1145'. [ 601.832282][ T30] audit: type=1800 audit(4294967319.930:68): pid=15394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1147" name="dbroot" dev="configfs" ino=121572 res=0 errno=0 [ 606.161404][ T30] audit: type=1800 audit(4294967324.260:69): pid=15485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1160" name="dbroot" dev="configfs" ino=123202 res=0 errno=0 [ 607.742367][ T30] audit: type=1800 audit(4294967325.840:70): pid=15508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1164" name="dbroot" dev="configfs" ino=123302 res=0 errno=0 [ 609.087521][ T30] audit: type=1800 audit(4294967327.190:71): pid=15530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1167" name="dbroot" dev="configfs" ino=123402 res=0 errno=0 [ 609.693409][ T30] audit: type=1800 audit(4294967327.790:72): pid=15540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1169" name="dbroot" dev="configfs" ino=124464 res=0 errno=0 [ 612.737949][T15604] FAULT_INJECTION: forcing a failure. [ 612.737949][T15604] name failslab, interval 1, probability 0, space 0, times 0 [ 612.738007][T15604] CPU: 1 UID: 0 PID: 15604 Comm: syz.2.1178 Not tainted syzkaller #0 PREEMPT(full) [ 612.738040][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.738059][T15604] Call Trace: [ 612.738068][T15604] [ 612.738077][T15604] dump_stack_lvl+0x100/0x190 [ 612.738112][T15604] should_fail_ex.cold+0x5/0xa [ 612.738142][T15604] should_failslab+0xc2/0x120 [ 612.738302][T15604] __kmalloc_noprof+0xfc/0x840 [ 612.738330][T15604] ? tomoyo_encode2+0xfb/0x3c0 [ 612.738449][T15604] tomoyo_encode2+0xfb/0x3c0 [ 612.738493][T15604] tomoyo_encode+0x29/0x50 [ 612.738529][T15604] tomoyo_realpath_from_path+0x18c/0x690 [ 612.738577][T15604] tomoyo_path_number_perm+0x23c/0x580 [ 612.738610][T15604] ? tomoyo_path_number_perm+0x22e/0x580 [ 612.738646][T15604] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 612.738694][T15604] ? __lock_acquire+0x4c5/0x1ec0 [ 612.738746][T15604] ? __fget_files+0x34/0x3d0 [ 612.738775][T15604] ? find_held_lock+0x2b/0x80 [ 612.738800][T15604] ? hook_file_ioctl_common+0x140/0x440 [ 612.738883][T15604] ? __fget_files+0x21f/0x3d0 [ 612.738915][T15604] security_file_ioctl+0xd3/0x230 [ 612.738980][T15604] __x64_sys_ioctl+0xb7/0x210 [ 612.739053][T15604] do_syscall_64+0x121/0x770 [ 612.739106][T15604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.739134][T15604] RIP: 0033:0x7f684ab9e159 [ 612.739158][T15604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.739184][T15604] RSP: 002b:00007f684ba5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.739209][T15604] RAX: ffffffffffffffda RBX: 00007f684ae25fa0 RCX: 00007f684ab9e159 [ 612.739226][T15604] RDX: 0000200000000200 RSI: 0000000000005411 RDI: 0000000000000003 [ 612.739243][T15604] RBP: 00007f684ba5d090 R08: 0000000000000000 R09: 0000000000000000 [ 612.739259][T15604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.739276][T15604] R13: 00007f684ae26038 R14: 00007f684ae25fa0 R15: 00007fff47a41878 [ 612.739312][T15604] [ 612.739826][T15604] ERROR: Out of memory at tomoyo_realpath_from_path. [ 614.557133][ T30] audit: type=1800 audit(4294967332.660:73): pid=15630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1183" name="dbroot" dev="configfs" ino=125038 res=0 errno=0 [ 616.171599][ T30] audit: type=1800 audit(4294967334.270:74): pid=15663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1185" name="dbroot" dev="configfs" ino=125276 res=0 errno=0 [ 616.962295][T15675] binder: 15673:15675 unknown command 0 [ 616.962347][T15675] binder: 15673:15675 ioctl c0306201 200000000000 returned -22 [ 617.138180][ T30] audit: type=1800 audit(4294967335.240:75): pid=15679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1188" name="dbroot" dev="configfs" ino=126254 res=0 errno=0 [ 617.982279][ T30] audit: type=1800 audit(4294967336.080:76): pid=15694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1191" name="dbroot" dev="configfs" ino=126339 res=0 errno=0 [ 621.316826][ T30] audit: type=1800 audit(4294967339.420:77): pid=15744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1199" name="dbroot" dev="configfs" ino=126682 res=0 errno=0 [ 622.266521][T15754] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345287439 (2345287439 ns) > initial count (2345226494 ns). Using initial count to start timer. [ 624.606968][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.616403][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.811057][ T30] audit: type=1800 audit(4294967342.910:78): pid=15811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1210" name="dbroot" dev="configfs" ino=125881 res=0 errno=0 [ 628.627916][ T30] audit: type=1800 audit(4294967346.730:79): pid=15883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1217" name="dbroot" dev="configfs" ino=128388 res=0 errno=0 [ 630.131817][ T30] audit: type=1800 audit(4294967348.230:80): pid=15910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1223" name="dbroot" dev="configfs" ino=128544 res=0 errno=0 [ 632.587879][ T30] audit: type=1800 audit(4294967350.690:81): pid=15956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1232" name="dbroot" dev="configfs" ino=127792 res=0 errno=0 [ 634.657406][ T30] audit: type=1800 audit(4294967352.760:82): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1237" name="dbroot" dev="configfs" ino=127973 res=0 errno=0 [ 643.214338][ T30] audit: type=1800 audit(4294967361.320:83): pid=16142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1260" name="dbroot" dev="configfs" ino=130997 res=0 errno=0 [ 643.808104][ T982] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.022203][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 644.030296][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 644.041158][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 644.049799][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 644.058520][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 644.319583][ T982] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.518929][ T982] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.744514][ T982] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.862822][ T982] bridge_slave_1: left allmulticast mode [ 645.862869][ T982] bridge_slave_1: left promiscuous mode [ 645.867042][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.876876][ T982] bridge_slave_0: left allmulticast mode [ 645.876905][ T982] bridge_slave_0: left promiscuous mode [ 645.877142][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.012009][ T982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.035858][ T982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.045809][ T982] bond0 (unregistering): Released all slaves [ 646.124267][ T52] Bluetooth: hci1: command tx timeout [ 647.022449][ T982] hsr_slave_0: left promiscuous mode [ 647.036259][ T982] hsr_slave_1: left promiscuous mode [ 647.037206][ T982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.037252][ T982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.061370][ T982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.068901][ T982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.092185][ T982] veth1_macvtap: left promiscuous mode [ 647.102777][ T982] veth0_macvtap: left promiscuous mode [ 647.102908][ T982] veth1_vlan: left promiscuous mode [ 647.102996][ T982] veth0_vlan: left promiscuous mode [ 647.511049][ T982] team0 (unregistering): Port device team_slave_1 removed [ 647.540404][ T982] team0 (unregistering): Port device team_slave_0 removed [ 647.736055][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 647.962346][ T30] audit: type=1800 audit(4294967366.060:84): pid=16223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1266" name="dbroot" dev="configfs" ino=131428 res=0 errno=0 [ 648.204678][ T52] Bluetooth: hci1: command tx timeout [ 648.221681][T16154] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.221775][T16154] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.241908][T16154] bridge_slave_0: entered allmulticast mode [ 648.259588][T16154] bridge_slave_0: entered promiscuous mode [ 648.272088][T16154] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.279651][T16154] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.279812][T16154] bridge_slave_1: entered allmulticast mode [ 648.305430][T16154] bridge_slave_1: entered promiscuous mode [ 648.413149][T16154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.427791][T16154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.978435][T16154] team0: Port device team_slave_0 added [ 648.981949][T16154] team0: Port device team_slave_1 added [ 649.204242][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 649.494873][T16154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.494920][T16154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.494949][T16154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.496911][T16154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.496926][T16154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.496956][T16154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.908963][T16154] hsr_slave_0: entered promiscuous mode [ 649.909922][T16154] hsr_slave_1: entered promiscuous mode [ 649.910596][T16154] debugfs: 'hsr0' already exists in 'hsr' [ 649.910627][T16154] Cannot create hsr debugfs directory [ 650.283483][ T52] Bluetooth: hci1: command tx timeout [ 651.148810][T16296] FAULT_INJECTION: forcing a failure. [ 651.148810][T16296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.148878][T16296] CPU: 0 UID: 0 PID: 16296 Comm: syz.3.1273 Not tainted syzkaller #0 PREEMPT(full) [ 651.148907][T16296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 651.148919][T16296] Call Trace: [ 651.148926][T16296] [ 651.148934][T16296] dump_stack_lvl+0x100/0x190 [ 651.148983][T16296] should_fail_ex.cold+0x5/0xa [ 651.149018][T16296] _copy_to_user+0x32/0xd0 [ 651.149051][T16296] simple_read_from_buffer+0xcb/0x170 [ 651.149174][T16296] proc_fail_nth_read+0x1af/0x230 [ 651.149272][T16296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 651.149319][T16296] ? rw_verify_area+0xce/0x6d0 [ 651.149357][T16296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 651.149399][T16296] vfs_read+0x1e4/0xb40 [ 651.149482][T16296] ? lock_acquire+0x1d1/0x380 [ 651.149518][T16296] ? __fget_files+0x34/0x3d0 [ 651.149545][T16296] ? __pfx_vfs_read+0x10/0x10 [ 651.149567][T16296] ? find_held_lock+0x2b/0x80 [ 651.149600][T16296] ? __fget_files+0x215/0x3d0 [ 651.149641][T16296] ? __fget_files+0x21f/0x3d0 [ 651.149679][T16296] ksys_read+0x12a/0x250 [ 651.149703][T16296] ? __pfx_ksys_read+0x10/0x10 [ 651.149737][T16296] do_syscall_64+0x121/0x770 [ 651.149777][T16296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.149806][T16296] RIP: 0033:0x7f57b635e98e [ 651.149829][T16296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 651.149855][T16296] RSP: 002b:00007f57b72a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 651.149881][T16296] RAX: ffffffffffffffda RBX: 00007f57b72aa6c0 RCX: 00007f57b635e98e [ 651.149899][T16296] RDX: 000000000000000f RSI: 00007f57b72aa0a0 RDI: 0000000000000007 [ 651.149915][T16296] RBP: 00007f57b72aa090 R08: 0000000000000000 R09: 0000000000000000 [ 651.149931][T16296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.149947][T16296] R13: 00007f57b66264e8 R14: 00007f57b6626450 R15: 00007ffdad9820e8 [ 651.149984][T16296] [ 652.310807][T16291] Process accounting resumed [ 652.336296][T16154] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 652.362689][ T52] Bluetooth: hci1: command tx timeout [ 652.363752][T16154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 652.364652][T16154] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 652.379113][T16154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 652.387018][T16154] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 652.409574][T16154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 652.420617][T16154] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 652.457514][T16154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 654.396456][T16154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.440292][T16154] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.467125][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.467258][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.495890][T15998] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.496012][T15998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.727390][T16154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.848516][T16154] veth0_vlan: entered promiscuous mode [ 656.866653][T16154] veth1_vlan: entered promiscuous mode [ 657.170197][T16154] veth0_macvtap: entered promiscuous mode [ 657.317357][T16154] veth1_macvtap: entered promiscuous mode [ 657.611352][T16154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.997621][T16154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.102715][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.632696][ T3020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.833749][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.232686][ T982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.270611][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.270658][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.323670][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.323715][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.460933][ T30] audit: type=1800 audit(4294967377.560:85): pid=16468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1287" name="dbroot" dev="configfs" ino=134579 res=0 errno=0 [ 659.864087][ T982] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.236436][ T982] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.509992][T14141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 660.517823][T14141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 660.527585][T14141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 660.535696][T14141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 660.543297][T14141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 660.732735][ T982] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.025946][ T982] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.717509][ T982] bridge_slave_1: left allmulticast mode [ 661.717555][ T982] bridge_slave_1: left promiscuous mode [ 661.717793][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.743804][ T982] bridge_slave_0: left allmulticast mode [ 661.749605][ T982] bridge_slave_0: left promiscuous mode [ 661.756572][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.969166][ T982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.982433][ T982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.998818][ T982] bond0 (unregistering): Released all slaves [ 662.308408][ T30] audit: type=1800 audit(4294967380.410:86): pid=16522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1294" name="dbroot" dev="configfs" ino=134923 res=0 errno=0 [ 662.603568][ T52] Bluetooth: hci0: command tx timeout [ 663.025009][ T982] hsr_slave_0: left promiscuous mode [ 663.030578][ T982] hsr_slave_1: left promiscuous mode [ 663.032056][ T982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.032079][ T982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.044555][ T982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.044577][ T982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.069735][ T982] veth1_macvtap: left promiscuous mode [ 663.069797][ T982] veth0_macvtap: left promiscuous mode [ 663.070474][ T982] veth1_vlan: left promiscuous mode [ 663.070548][ T982] veth0_vlan: left promiscuous mode [ 663.339144][ T30] audit: type=1800 audit(4294967381.440:87): pid=16537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1295" name="dbroot" dev="configfs" ino=135181 res=0 errno=0 [ 663.597365][ T982] team0 (unregistering): Port device team_slave_1 removed [ 663.612482][ T982] team0 (unregistering): Port device team_slave_0 removed [ 663.830545][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 664.682703][ T52] Bluetooth: hci0: command tx timeout [ 664.919185][T16492] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.919624][T16492] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.919763][T16492] bridge_slave_0: entered allmulticast mode [ 664.932117][T16492] bridge_slave_0: entered promiscuous mode [ 665.104938][T16492] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.105108][T16492] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.105569][T16492] bridge_slave_1: entered allmulticast mode [ 665.109085][T16492] bridge_slave_1: entered promiscuous mode [ 665.168678][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 665.274245][T16492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.278016][T16492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.548307][T16492] team0: Port device team_slave_0 added [ 665.556928][T16492] team0: Port device team_slave_1 added [ 665.656874][T16492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.666865][T16492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.693064][T16492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.696994][T16492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.697012][T16492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.697043][T16492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.811674][T16492] hsr_slave_0: entered promiscuous mode [ 665.820893][T16492] hsr_slave_1: entered promiscuous mode [ 665.827549][T16492] debugfs: 'hsr0' already exists in 'hsr' [ 665.833520][T16492] Cannot create hsr debugfs directory [ 666.212723][ T30] audit: type=1800 audit(4294967384.310:88): pid=16598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1301" name="dbroot" dev="configfs" ino=136203 res=0 errno=0 [ 666.764440][ T52] Bluetooth: hci0: command tx timeout [ 667.369925][T16621] futex_wake_op: syz.2.1302 tries to shift op by -2048; fix this program [ 667.370090][T16621] futex_wake_op: syz.2.1302 tries to shift op by -2048; fix this program [ 667.379693][T16621] 0x000000000001-0x000000020000 : "" [ 667.395272][T16621] FAULT_INJECTION: forcing a failure. [ 667.395272][T16621] name failslab, interval 1, probability 0, space 0, times 0 [ 667.395313][T16621] CPU: 1 UID: 0 PID: 16621 Comm: syz.2.1302 Not tainted syzkaller #0 PREEMPT(full) [ 667.395345][T16621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.395361][T16621] Call Trace: [ 667.395370][T16621] [ 667.395380][T16621] dump_stack_lvl+0x100/0x190 [ 667.395422][T16621] should_fail_ex.cold+0x5/0xa [ 667.395456][T16621] should_failslab+0xc2/0x120 [ 667.395492][T16621] kmem_cache_alloc_noprof+0x92/0x6a0 [ 667.395523][T16621] ? __kernfs_new_node+0xd2/0xa10 [ 667.395673][T16621] __kernfs_new_node+0xd2/0xa10 [ 667.395706][T16621] ? check_prev_add+0xfe/0xe60 [ 667.395740][T16621] ? kernfs_add_one+0x214/0xaa0 [ 667.395772][T16621] ? __pfx___kernfs_new_node+0x10/0x10 [ 667.395810][T16621] ? lock_acquire+0x1d1/0x380 [ 667.395843][T16621] ? kernfs_root+0x23/0x2a0 [ 667.395871][T16621] ? find_held_lock+0x2b/0x80 [ 667.395898][T16621] ? kernfs_root+0xee/0x2a0 [ 667.395925][T16621] ? kernfs_root+0xee/0x2a0 [ 667.395962][T16621] kernfs_new_node+0x117/0x150 [ 667.396001][T16621] kernfs_create_link+0xcc/0x240 [ 667.396073][T16621] sysfs_do_create_link_sd+0x90/0x140 [ 667.396106][T16621] sysfs_create_link+0x61/0xc0 [ 667.396135][T16621] device_add+0x553/0x1970 [ 667.396234][T16621] ? lockdep_init_map_type+0x5c/0x250 [ 667.396270][T16621] ? __pfx_device_add+0x10/0x10 [ 667.396302][T16621] ? lockdep_init_map_type+0x5c/0x250 [ 667.396340][T16621] ? __init_waitqueue_head+0xca/0x150 [ 667.396389][T16621] add_mtd_device+0x92b/0x1820 [ 667.396486][T16621] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 667.396523][T16621] ? __pfx_add_mtd_device+0x10/0x10 [ 667.396572][T16621] mtd_add_partition+0x376/0x6a0 [ 667.396611][T16621] ? __pfx_mtd_add_partition+0x10/0x10 [ 667.396646][T16621] ? __might_fault+0xc5/0x140 [ 667.396683][T16621] ? __might_fault+0xc5/0x140 [ 667.396731][T16621] mtdchar_blkpg_ioctl+0x207/0x250 [ 667.396798][T16621] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 667.396866][T16621] mtdchar_ioctl+0x1670/0x1fd0 [ 667.396910][T16621] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 667.396951][T16621] ? lock_acquire+0x1d1/0x380 [ 667.396985][T16621] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 667.397030][T16621] ? rcu_is_watching+0x13/0xc0 [ 667.397056][T16621] ? trace_contention_end+0x126/0x160 [ 667.397097][T16621] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 667.397136][T16621] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 667.397179][T16621] ? __pfx___mutex_lock+0x10/0x10 [ 667.397213][T16621] ? __fget_files+0x34/0x3d0 [ 667.397242][T16621] ? hook_file_ioctl_common+0x140/0x440 [ 667.397289][T16621] ? __fget_files+0x21f/0x3d0 [ 667.397320][T16621] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 667.397358][T16621] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 667.397397][T16621] __x64_sys_ioctl+0x18e/0x210 [ 667.397432][T16621] do_syscall_64+0x121/0x770 [ 667.397464][T16621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.397488][T16621] RIP: 0033:0x7f684ab9e159 [ 667.397510][T16621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.397543][T16621] RSP: 002b:00007f684ba3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.397565][T16621] RAX: ffffffffffffffda RBX: 00007f684ae26090 RCX: 00007f684ab9e159 [ 667.397575][T16621] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000008 [ 667.397583][T16621] RBP: 00007f684ba3c090 R08: 0000000000000000 R09: 0000000000000000 [ 667.397592][T16621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 667.397601][T16621] R13: 00007f684ae26128 R14: 00007f684ae26090 R15: 00007fff47a41878 [ 667.397620][T16621] [ 668.107475][T16620] tipc: can't start tipc receive workqueue [ 668.358730][T16492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 668.369092][ T30] audit: type=1800 audit(4294967386.470:89): pid=16631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1303" name="dbroot" dev="configfs" ino=136463 res=0 errno=0 [ 668.377529][T16492] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 668.380671][T16492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 668.402139][T16492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 668.412689][T16492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 668.450857][T16492] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.451763][T16492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 668.480247][T16492] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 668.642763][T16492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.842739][ T52] Bluetooth: hci0: command tx timeout [ 669.151394][T16492] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.544599][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.544747][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.957702][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.957821][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.902178][T16492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.259891][T16492] veth0_vlan: entered promiscuous mode [ 673.275145][T16492] veth1_vlan: entered promiscuous mode [ 673.319557][T16492] veth0_macvtap: entered promiscuous mode [ 673.327789][T16492] veth1_macvtap: entered promiscuous mode [ 673.356009][T16492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.374820][T16492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.653534][ T1280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.654554][ T1280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.654609][ T1280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.654650][ T1280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.062975][T15998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.063015][T15998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.276581][ T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.276628][ T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.606316][ T30] audit: type=1800 audit(4294967395.710:90): pid=16829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1324" name="dbroot" dev="configfs" ino=137565 res=0 errno=0 [ 678.403176][T16846] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 679.411735][T ** replaying previous printk message ** [ 679.411735][T16831] ------------[ cut here ]------------ [ 679.411766][T16831] ODEBUG: free active (active state 0) object: ffff88805181d438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 679.411911][T16831] WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0, CPU#1: syz.0.1325/16831 [ 679.446399][T16831] Modules linked in: [ 679.451396][T16831] CPU: 1 UID: 0 PID: 16831 Comm: syz.0.1325 Not tainted syzkaller #0 PREEMPT(full) [ 679.460926][T16831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.472197][T16831] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 679.478421][T16831] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 78 52 1e 0c 41 56 48 8b 14 ed 40 34 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 a2 86 13 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 679.498238][T16831] RSP: 0018:ffffc90002fdf6f8 EFLAGS: 00010246 [ 679.504423][T16831] RAX: dffffc0000000000 RBX: ffffc90002fdf7e0 RCX: 0000000000000000 [ 679.512411][T16831] RDX: ffffffff8c623380 RSI: ffffffff8c622f20 RDI: ffffffff915022b0 [ 679.520440][T16831] RBP: 0000000000000003 R08: ffff88805181d438 R09: ffffffff8bf30f60 [ 679.528475][T16831] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c622f20 [ 679.536539][T16831] R13: ffffffff8bf30fa0 R14: ffffffff8ad50040 R15: ffffc90002fdf7f8 [ 679.544600][T16831] FS: 0000000000000000(0000) GS:ffff888123c68000(0000) knlGS:0000000000000000 [ 679.553675][T16831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.560282][T16831] CR2: 00002000006ed000 CR3: 0000000022748000 CR4: 00000000003526f0 [ 679.569003][T16831] Call Trace: [ 679.572305][T16831] [ 679.575951][T16831] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 679.581408][T16831] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 679.587637][T16831] debug_check_no_obj_freed+0x4da/0x630 [ 679.593221][T16831] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 679.599282][T16831] ? __page_table_check_zero+0x27f/0x410 [ 679.604996][T16831] ? __page_table_check_zero+0x284/0x410 [ 679.610621][T16831] __free_frozen_pages+0x409/0x10f0 [ 679.615942][T16831] hci_release_dev+0x4ef/0x630 [ 679.620777][T16831] ? __pfx_hci_release_dev+0x10/0x10 [ 679.626124][T16831] ? device_release+0x97/0x270 [ 679.631091][T16831] ? rcu_is_watching+0x13/0xc0 [ 679.635939][T16831] ? device_release+0x97/0x270 [ 679.640720][T16831] bt_host_release+0x6b/0xb0 [ 679.646072][T16831] ? __pfx_bt_host_release+0x10/0x10 [ 679.651389][T16831] device_release+0xd2/0x270 [ 679.656264][T16831] kobject_put+0x1f7/0x640 [ 679.660790][T16831] put_device+0x1f/0x30 [ 679.665258][T16831] vhci_release+0x185/0x230 [ 679.670244][T16831] ? __pfx_vhci_release+0x10/0x10 [ 679.675768][T16831] __fput+0x3ff/0xb50 [ 679.679750][T16831] task_work_run+0x150/0x240 [ 679.684666][T16831] ? __pfx_task_work_run+0x10/0x10 [ 679.689772][T16831] do_exit+0x951/0x2ae0 [ 679.694005][T16831] ? __pfx_do_exit+0x10/0x10 [ 679.698618][T16831] ? do_raw_spin_lock+0x128/0x260 [ 679.703707][T16831] ? find_held_lock+0x2b/0x80 [ 679.708383][T16831] ? get_signal+0x7e0/0x21e0 [ 679.713033][T16831] do_group_exit+0xd5/0x2a0 [ 679.717548][T16831] get_signal+0x1ec7/0x21e0 [ 679.722051][T16831] ? __pfx_get_signal+0x10/0x10 [ 679.727031][T16831] ? kmem_cache_free+0x127/0x6c0 [ 679.731983][T16831] arch_do_signal_or_restart+0x91/0x7a0 [ 679.737637][T16831] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 679.744079][T16831] ? __pfx_ksys_unshare+0x10/0x10 [ 679.749729][T16831] exit_to_user_mode_loop+0x139/0x700 [ 679.755185][T16831] ? rcu_is_watching+0x13/0xc0 [ 679.759956][T16831] do_syscall_64+0x603/0x770 [ 679.764742][T16831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.770899][T16831] RIP: 0033:0x7f474719e159 [ 679.775849][T16831] Code: Unable to access opcode bytes at 0x7f474719e12f. [ 679.783210][T16831] RSP: 002b:00007f474812d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 679.791615][T16831] RAX: fffffffffffffffc RBX: 00007f4747425fa0 RCX: 00007f474719e159 [ 679.799614][T16831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 679.808148][T16831] RBP: 00007f4747235024 R08: 0000000000000000 R09: 0000000000000000 [ 679.816434][T16831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.824507][T16831] R13: 00007f4747426038 R14: 00007f4747425fa0 R15: 00007ffe71c4c7c8 [ 679.832580][T16831] [ 679.835594][T16831] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 679.843075][T16831] CPU: 1 UID: 0 PID: 16831 Comm: syz.0.1325 Not tainted syzkaller #0 PREEMPT(full) [ 679.852736][T16831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.863274][T16831] Call Trace: [ 679.866554][T16831] [ 679.869471][T16831] dump_stack_lvl+0x100/0x190 [ 679.874139][T16831] vpanic+0x553/0x970 [ 679.878108][T16831] ? __pfx_vpanic+0x10/0x10 [ 679.882616][T16831] panic+0xd1/0xe0 [ 679.886339][T16831] ? __pfx_panic+0x10/0x10 [ 679.890747][T16831] check_panic_on_warn.cold+0x19/0x34 [ 679.896103][T16831] ? debug_print_object+0x198/0x2b0 [ 679.901285][T16831] __warn.cold+0x191/0x318 [ 679.905691][T16831] __report_bug+0x30f/0x440 [ 679.910255][T16831] ? debug_print_object+0x198/0x2b0 [ 679.915436][T16831] ? __pfx___report_bug+0x10/0x10 [ 679.920464][T16831] ? unwind_next_frame+0x3c8/0x2090 [ 679.925673][T16831] report_bug_entry+0xe2/0x290 [ 679.930461][T16831] ? debug_print_object+0x1a5/0x2b0 [ 679.935774][T16831] handle_bug+0x1cd/0x2a0 [ 679.940117][T16831] exc_invalid_op+0x17/0x50 [ 679.944701][T16831] asm_exc_invalid_op+0x1a/0x20 [ 679.949548][T16831] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 679.955355][T16831] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 78 52 1e 0c 41 56 48 8b 14 ed 40 34 62 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 a2 86 13 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 679.975051][T16831] RSP: 0018:ffffc90002fdf6f8 EFLAGS: 00010246 [ 679.981112][T16831] RAX: dffffc0000000000 RBX: ffffc90002fdf7e0 RCX: 0000000000000000 [ 679.989071][T16831] RDX: ffffffff8c623380 RSI: ffffffff8c622f20 RDI: ffffffff915022b0 [ 679.997029][T16831] RBP: 0000000000000003 R08: ffff88805181d438 R09: ffffffff8bf30f60 [ 680.005002][T16831] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c622f20 [ 680.012956][T16831] R13: ffffffff8bf30fa0 R14: ffffffff8ad50040 R15: ffffc90002fdf7f8 [ 680.020913][T16831] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 680.026383][T16831] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 680.031868][T16831] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 680.037712][T16831] debug_check_no_obj_freed+0x4da/0x630 [ 680.043281][T16831] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 680.049365][T16831] ? __page_table_check_zero+0x27f/0x410 [ 680.055011][T16831] ? __page_table_check_zero+0x284/0x410 [ 680.060639][T16831] __free_frozen_pages+0x409/0x10f0 [ 680.065841][T16831] hci_release_dev+0x4ef/0x630 [ 680.070652][T16831] ? __pfx_hci_release_dev+0x10/0x10 [ 680.075938][T16831] ? device_release+0x97/0x270 [ 680.080791][T16831] ? rcu_is_watching+0x13/0xc0 [ 680.085545][T16831] ? device_release+0x97/0x270 [ 680.090305][T16831] bt_host_release+0x6b/0xb0 [ 680.094893][T16831] ? __pfx_bt_host_release+0x10/0x10 [ 680.100191][T16831] device_release+0xd2/0x270 [ 680.104782][T16831] kobject_put+0x1f7/0x640 [ 680.109213][T16831] put_device+0x1f/0x30 [ 680.113382][T16831] vhci_release+0x185/0x230 [ 680.117876][T16831] ? __pfx_vhci_release+0x10/0x10 [ 680.123327][T16831] __fput+0x3ff/0xb50 [ 680.127314][T16831] task_work_run+0x150/0x240 [ 680.131893][T16831] ? __pfx_task_work_run+0x10/0x10 [ 680.137182][T16831] do_exit+0x951/0x2ae0 [ 680.141341][T16831] ? __pfx_do_exit+0x10/0x10 [ 680.145918][T16831] ? do_raw_spin_lock+0x128/0x260 [ 680.150930][T16831] ? find_held_lock+0x2b/0x80 [ 680.155588][T16831] ? get_signal+0x7e0/0x21e0 [ 680.160172][T16831] do_group_exit+0xd5/0x2a0 [ 680.164664][T16831] get_signal+0x1ec7/0x21e0 [ 680.169163][T16831] ? __pfx_get_signal+0x10/0x10 [ 680.174003][T16831] ? kmem_cache_free+0x127/0x6c0 [ 680.178939][T16831] arch_do_signal_or_restart+0x91/0x7a0 [ 680.184485][T16831] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 680.190754][T16831] ? __pfx_ksys_unshare+0x10/0x10 [ 680.195786][T16831] exit_to_user_mode_loop+0x139/0x700 [ 680.201163][T16831] ? rcu_is_watching+0x13/0xc0 [ 680.205912][T16831] do_syscall_64+0x603/0x770 [ 680.210497][T16831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.216382][T16831] RIP: 0033:0x7f474719e159 [ 680.220787][T16831] Code: Unable to access opcode bytes at 0x7f474719e12f. [ 680.227814][T16831] RSP: 002b:00007f474812d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 680.236274][T16831] RAX: fffffffffffffffc RBX: 00007f4747425fa0 RCX: 00007f474719e159 [ 680.244242][T16831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 680.252200][T16831] RBP: 00007f4747235024 R08: 0000000000000000 R09: 0000000000000000 [ 680.260157][T16831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.268199][T16831] R13: 00007f4747426038 R14: 00007f4747425fa0 R15: 00007ffe71c4c7c8 [ 680.276165][T16831] [ 680.279444][T16831] Kernel Offset: disabled [ 680.283769][T16831] Rebooting in 86400 seconds..