last executing test programs: 11.017873603s ago: executing program 3 (id=4810): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value=[0x0, 0x1, 0x2, 0x8000, 0x5, 0x4, 0x2, 0xffff, 0x7, 0xffffffff, 0x5, 0xff, 0xe94, 0xb, 0x8, 0xfff, 0x2, 0x7, 0x2, 0x3be, 0x4, 0xd8a, 0x1, 0xa3, 0x6af, 0xb, 0x7ffffffc, 0x7fffffffffffffff, 0x6, 0x6, 0x9, 0x8, 0x4, 0x9, 0xcf, 0x40000000403, 0x6, 0x1, 0x3, 0x1, 0x6, 0x0, 0x5, 0x3, 0xffff, 0x548, 0xc, 0xe4, 0x7, 0x4, 0x1, 0x951, 0xe0000000000000, 0x6, 0x9, 0x0, 0x6, 0x4000000000000003, 0xb, 0x82c1, 0x4436, 0x0, 0xc1, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"}) r1 = getsockopt$auto_SO_TXREHASH(r0, 0x1, 0x4a, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) sendmsg$auto_NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x38b0f809}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) socket(0x10, 0x2, 0x4) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x1d, 0x2, 0x6) socket(0x3, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) r5 = socket(0x15, 0x5, 0x0) setsockopt$auto(r5, 0x114, 0x8, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x8, 0x7b5a, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) 10.006220553s ago: executing program 3 (id=4813): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="5e0027617c36720add70ab0343990f7d0bbc96dc0b"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0xf34) ioprio_set$auto(0x1, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x3, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0xe982, 0x2000000000df, 0xeb1, 0x401, 0x8000) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) pidfd_open$auto(0x1, 0x0) flock$auto(0xffffffffffffffff, 0x1) setsockopt$auto(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x56b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES8, @ANYRESOCT, @ANYRES64=r2, @ANYBLOB="0050aa8007f4412dfa567174a21ef6158770a0e81c62884124e4f460be78089baab06cd3b5", @ANYBLOB="81419f2567859790f8105b9102e87492f2f8b3189160420c2a2cb627dc5545861729d19006ca5a72eaa142649476ccd8f1ad01e3a107cad056274bcdb7e0c61c5ad67b6b1f0f065152e8801f16fcb43147573f59a883aa5e6a94fd1fd71263639aa8b9ffa2b14dd7268c2fd5da33fe19e520c3436768c54ece391b9911cc8e6874ce7b1f731a9e048a5966177f7c6292a733a6a19b8bca2fd0b4172e4b0b9bffacf06bce457ee8df4524eb8b5bd097e5670f6c590966ede2d7502d6a3715d714899bbc71c9c805e2f945087af2529361", @ANYRES64=r2, @ANYRES32=0x0, @ANYRES8], 0x30}, 0x1, 0x100000001000000, 0x0, 0x48decab040e114db}, 0x5) 8.913602083s ago: executing program 3 (id=4817): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="5e0027617c36720add70ab0343990f7d0bbc96dc0b"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioprio_set$auto(0x1, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x3, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0xe982, 0x2000000000df, 0xeb1, 0x401, 0x8000) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) pidfd_open$auto(0x1, 0x0) flock$auto(0xffffffffffffffff, 0x1) setsockopt$auto(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x56b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES8, @ANYRESOCT, @ANYRES64=r2, @ANYBLOB="0050aa8007f4412dfa567174a21ef6158770a0e81c62884124e4f460be78089baab06cd3b5", @ANYBLOB="81419f2567859790f8105b9102e87492f2f8b3189160420c2a2cb627dc5545861729d19006ca5a72eaa142649476ccd8f1ad01e3a107cad056274bcdb7e0c61c5ad67b6b1f0f065152e8801f16fcb43147573f59a883aa5e6a94fd1fd71263639aa8b9ffa2b14dd7268c2fd5da33fe19e520c3436768c54ece391b9911cc8e6874ce7b1f731a9e048a5966177f7c6292a733a6a19b8bca2fd0b4172e4b0b9bffacf06bce457ee8df4524eb8b5bd097e5670f6c590966ede2d7502d6a3715d714899bbc71c9c805e2f945087af2529361", @ANYRES64=r2, @ANYRES32=0x0, @ANYRES8], 0x30}, 0x1, 0x100000001000000, 0x0, 0x48decab040e114db}, 0x5) 8.521960697s ago: executing program 3 (id=4820): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value=[0x0, 0x1, 0x2, 0x8000, 0x5, 0x4, 0x2, 0xffff, 0x7, 0xffffffff, 0x5, 0xff, 0xe94, 0xb, 0x8, 0xfff, 0x2, 0x7, 0x2, 0x3be, 0x4, 0xd8a, 0x1, 0xa3, 0x6af, 0xb, 0x7ffffffc, 0x7fffffffffffffff, 0x6, 0x6, 0x9, 0x8, 0x4, 0x9, 0xcf, 0x40000000403, 0x6, 0x1, 0x3, 0x1, 0x6, 0x0, 0x5, 0x3, 0xffff, 0x548, 0xc, 0xe4, 0x7, 0x4, 0x1, 0x951, 0xe0000000000000, 0x6, 0x9, 0x0, 0x6, 0x4000000000000003, 0xb, 0x82c1, 0x4436, 0x0, 0xc1, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"}) r1 = getsockopt$auto_SO_TXREHASH(r0, 0x1, 0x4a, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) sendmsg$auto_NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x38b0f809}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x1d, 0x2, 0x6) socket(0x3, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) r5 = socket(0x15, 0x5, 0x0) setsockopt$auto(r5, 0x114, 0x8, 0x0, 0x4) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x8, 0x7b5a, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) 7.551531595s ago: executing program 3 (id=4827): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x0, 0x7, 0x8000000000000000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xc008ae09, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, 0x0, 0x200080, 0x0) mmap$auto(0x0, 0xffffffffffffff07, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x0, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4604, 0x0) read$auto(0x3, 0x0, 0x7d) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/misc\x00', 0xa182, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, 0x0, 0xfffffe13) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto(r2, 0x0, 0x8ed) 7.146706699s ago: executing program 3 (id=4829): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x3a) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, 0x0, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) add_key$auto(&(0x7f0000000200)=':\x86V_\x1d\xf1\xf3\x02\xa3\xcd\x1a-* \xa0\xfb\x19\xf9m \x1c\xae&\xfa_\xa7a\x14\xcb\xec\x11\x05f\x19\xe6\'\x9ep\xb4\xc5\xaah{`t\xadn7\xb9S\xf1\x8c\xb2B\xc6\xe7\xd3u\x16\xb3\xbe\xc8o\xa4Gh[\n4|yV\xfdE\b\x05a;r\xa4\xb5\x06\xd1F`\xf7\aM\xb4A%CT\x19\xefq,\xf5\xda\xf5\x94YG\xa8\x12\x89\x05\r\x10\xa38\x1e\xbfR\x14\xac\x10\xeb\xa5\xc4\xbcg(\x0f\xb5M\x7f\xe6\x1a\x92\xa7x)vt\xec\x8bH\xf5\xdda\x15\xc4Z\xda\x83\x8c\xd5\xd2r\xd8\xbcK\xa36\x00\x00', 0x0, 0x0, 0x1, 0x8010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xf400000000000000, 0xffffffffffff0001, 0x15) r0 = socket(0x10, 0xa, 0x9) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) fsopen$auto(0x0, 0x3) close_range$auto(0x2, 0x8, 0xffffffff) r1 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x69) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x4e22, @multicast1}, 0x54) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) 5.460609793s ago: executing program 2 (id=4837): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x0, 0x7, 0x8000000000000000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xc008ae09, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, 0x0, 0x200080, 0x0) mmap$auto(0x0, 0xffffffffffffff07, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x0, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4604, 0x0) read$auto(0x3, 0x0, 0x7d) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/misc\x00', 0xa182, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, 0x0, 0xfffffe13) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto(r2, 0x0, 0x8ed) 4.750136718s ago: executing program 0 (id=4839): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="5e0027617c36720add70ab0343990f7d0bbc96dc0b"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0xf34) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x3, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0xe982, 0x2000000000df, 0xeb1, 0x401, 0x8000) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x105242, 0xe1d2b27bdc14aafd) flock$auto(r3, 0x1) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x14, 0x0, 0x56b) setsockopt$auto(r4, 0x29, 0x14, 0x0, 0x10052b) 4.692581822s ago: executing program 2 (id=4841): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone3(&(0x7f0000000440)={0x848400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x4}, &(0x7f0000000240)=""/205, 0xcd, &(0x7f0000000340)=""/217, &(0x7f0000000140)=[0x0], 0x1}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x951, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) 4.063482137s ago: executing program 2 (id=4843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r2, @ANYBLOB="0800050006000000110001006f76735fffc31300000000000000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) syz_clone3(&(0x7f0000000440)={0x848400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x4}, &(0x7f0000000240)=""/205, 0xcd, &(0x7f0000000340)=""/217, &(0x7f0000000140)=[0x0], 0x1}, 0x58) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x530}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) mmap$auto(0x3, 0x401, 0x7, 0x16, 0x2, 0x5) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) 3.755520918s ago: executing program 0 (id=4844): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="5e0027617c36720add70ab0343990f7d0bbc96dc0b"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioprio_set$auto(0x1, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x3, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0xe982, 0x2000000000df, 0xeb1, 0x401, 0x8000) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) pidfd_open$auto(0x1, 0x0) flock$auto(0xffffffffffffffff, 0x1) setsockopt$auto(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x56b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES8, @ANYRESOCT, @ANYRES64=r2, @ANYBLOB="0050aa8007f4412dfa567174a21ef6158770a0e81c62884124e4f460be78089baab06cd3b5", @ANYBLOB="81419f2567859790f8105b9102e87492f2f8b3189160420c2a2cb627dc5545861729d19006ca5a72eaa142649476ccd8f1ad01e3a107cad056274bcdb7e0c61c5ad67b6b1f0f065152e8801f16fcb43147573f59a883aa5e6a94fd1fd71263639aa8b9ffa2b14dd7268c2fd5da33fe19e520c3436768c54ece391b9911cc8e6874ce7b1f731a9e048a5966177f7c6292a733a6a19b8bca2fd0b4172e4b0b9bffacf06bce457ee8df4524eb8b5bd097e5670f6c590966ede2d7502d6a3715d714899bbc71c9c805e2f945087af2529361", @ANYRES64=r2, @ANYRES32=0x0, @ANYRES8], 0x30}, 0x1, 0x100000001000000, 0x0, 0x48decab040e114db}, 0x5) 3.342930609s ago: executing program 2 (id=4845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r2, @ANYBLOB="0800050006000000110001006f76735fffc31300000000000000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) syz_clone3(&(0x7f0000000440)={0x848400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x4}, &(0x7f0000000240)=""/205, 0xcd, &(0x7f0000000340)=""/217, &(0x7f0000000140)=[0x0], 0x1}, 0x58) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x530}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) mmap$auto(0x3, 0x401, 0x7, 0x16, 0x2, 0x5) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r4, 0x0, 0x81) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) 2.686958881s ago: executing program 1 (id=4847): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) syz_clone3(&(0x7f0000000440)={0x848400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x4}, &(0x7f0000000240)=""/205, 0xcd, &(0x7f0000000340)=""/217, &(0x7f0000000140)=[0x0], 0x1}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x951, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) 2.686333871s ago: executing program 0 (id=4854): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="5e0027617c36720add70ab0343990f7d0bbc96dc0b"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0xf34) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x1, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x3, 0xfffffffffffffffd, 0x0) mmap$auto(0x0, 0xe982, 0x2000000000df, 0xeb1, 0x401, 0x8000) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x105242, 0xe1d2b27bdc14aafd) flock$auto(r3, 0x1) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x14, 0x0, 0x56b) setsockopt$auto(r4, 0x29, 0x14, 0x0, 0x10052b) 2.081370252s ago: executing program 2 (id=4848): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x3a) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, 0x0, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) add_key$auto(&(0x7f0000000200)=':\x86V_\x1d\xf1\xf3\x02\xa3\xcd\x1a-* \xa0\xfb\x19\xf9m \x1c\xae&\xfa_\xa7a\x14\xcb\xec\x11\x05f\x19\xe6\'\x9ep\xb4\xc5\xaah{`t\xadn7\xb9S\xf1\x8c\xb2B\xc6\xe7\xd3u\x16\xb3\xbe\xc8o\xa4Gh[\n4|yV\xfdE\b\x05a;r\xa4\xb5\x06\xd1F`\xf7\aM\xb4A%CT\x19\xefq,\xf5\xda\xf5\x94YG\xa8\x12\x89\x05\r\x10\xa38\x1e\xbfR\x14\xac\x10\xeb\xa5\xc4\xbcg(\x0f\xb5M\x7f\xe6\x1a\x92\xa7x)vt\xec\x8bH\xf5\xdda\x15\xc4Z\xda\x83\x8c\xd5\xd2r\xd8\xbcK\xa36\x00\x00', 0x0, 0x0, 0x1, 0x8010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xf400000000000000, 0xffffffffffff0001, 0x15) r0 = socket(0x10, 0xa, 0x9) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) fsopen$auto(0x0, 0x3) close_range$auto(0x2, 0x8, 0xffffffff) r1 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x69) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x4e22, @multicast1}, 0x54) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x2) 2.018930858s ago: executing program 1 (id=4849): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x0, 0x7, 0x8000000000000000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xc008ae09, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, 0x0, 0x200080, 0x0) mmap$auto(0x0, 0xffffffffffffff07, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x0, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4604, 0x0) read$auto(0x3, 0x0, 0x7d) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, 0x0) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/misc\x00', 0xa182, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, 0x0, 0xfffffe13) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto(r2, 0x0, 0x8ed) 1.762797007s ago: executing program 1 (id=4850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r2, @ANYBLOB="0800050006000000110001006f76735fffc31300000000000000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) syz_clone3(&(0x7f0000000440)={0x848400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x4}, &(0x7f0000000240)=""/205, 0xcd, &(0x7f0000000340)=""/217, &(0x7f0000000140)=[0x0], 0x1}, 0x58) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x530}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) mmap$auto(0x3, 0x401, 0x7, 0x16, 0x2, 0x5) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) 1.673672872s ago: executing program 0 (id=4851): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x0, 0x7, 0x8000000000000000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xc008ae09, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, 0x0, 0x200080, 0x0) mmap$auto(0x0, 0xffffffffffffff07, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x0, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4604, 0x0) read$auto(0x3, 0x0, 0x7d) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/misc\x00', 0xa182, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, 0x0, 0xfffffe13) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto(r2, 0x0, 0x8ed) 1.41385281s ago: executing program 2 (id=4852): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = open(0x0, 0x7ffd, 0x12) write$auto(0x3, 0x0, 0x100082) clone$auto(0x200800000007, 0x5, 0xfffffffffffffffc, 0x0, 0x1ff) r1 = io_uring_setup$auto(0x7, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) madvise$auto(0x8000000, 0x200007, 0x19) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x9842, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x401, 0x0) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000000c0), r1) sendmsg$auto_VDPA_CMD_MGMTDEV_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1012}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="f28b05f2566564a0a8d8ccc7f3fb9742a8b23c15c17a08111ab604c65ca11a12950d2b09c01b277100010000caecb86824b7a875747e877da4fbdc57e2d38a5ba3b4e4af044837e38a798abb7eceda083f581e9d991ee21e460934feeddb3d0583e3fbc40d472b9dfbb03567e3e365b25264ecbf7b967d24554a44a0d0002a10ac8b2a0c4bac441c6ed50f71e2524413438bc6d2a788b241c1c258659766231a845d76fe5bb64dac1cf4f43775af2ee76a84151346ef6543a44a3f88cfa4cb07101c906e5e45207e003761c52d130084d3dae6844d", @ANYRES16=r0, @ANYRESDEC=r1], 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x4004080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x509a81, 0x0) fchdir$auto(r0) read$auto(0x3, 0x0, 0x80) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x4c0001, 0x0) socket(0x18, 0x800, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x0, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) read$auto(r2, 0x0, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 1.349879063s ago: executing program 0 (id=4853): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value=[0x0, 0x1, 0x2, 0x8000, 0x5, 0x4, 0x2, 0xffff, 0x7, 0xffffffff, 0x5, 0xff, 0xe94, 0xb, 0x8, 0xfff, 0x2, 0x7, 0x2, 0x3be, 0x4, 0xd8a, 0x1, 0xa3, 0x6af, 0xb, 0x7ffffffc, 0x7fffffffffffffff, 0x6, 0x6, 0x9, 0x8, 0x4, 0x9, 0xcf, 0x40000000403, 0x6, 0x1, 0x3, 0x1, 0x6, 0x0, 0x5, 0x3, 0xffff, 0x548, 0xc, 0xe4, 0x7, 0x4, 0x1, 0x951, 0xe0000000000000, 0x6, 0x9, 0x0, 0x6, 0x4000000000000003, 0xb, 0x82c1, 0x4436, 0x0, 0xc1, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"}) getsockopt$auto_SO_TXREHASH(r0, 0x1, 0x4a, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x1d, 0x2, 0x6) socket(0x3, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) r3 = socket(0x15, 0x5, 0x0) setsockopt$auto(r3, 0x114, 0x8, 0x0, 0x4) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x8, 0x7b5a, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) 810.339348ms ago: executing program 1 (id=4855): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x3a) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, 0x0, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) add_key$auto(&(0x7f0000000200)=':\x86V_\x1d\xf1\xf3\x02\xa3\xcd\x1a-* \xa0\xfb\x19\xf9m \x1c\xae&\xfa_\xa7a\x14\xcb\xec\x11\x05f\x19\xe6\'\x9ep\xb4\xc5\xaah{`t\xadn7\xb9S\xf1\x8c\xb2B\xc6\xe7\xd3u\x16\xb3\xbe\xc8o\xa4Gh[\n4|yV\xfdE\b\x05a;r\xa4\xb5\x06\xd1F`\xf7\aM\xb4A%CT\x19\xefq,\xf5\xda\xf5\x94YG\xa8\x12\x89\x05\r\x10\xa38\x1e\xbfR\x14\xac\x10\xeb\xa5\xc4\xbcg(\x0f\xb5M\x7f\xe6\x1a\x92\xa7x)vt\xec\x8bH\xf5\xdda\x15\xc4Z\xda\x83\x8c\xd5\xd2r\xd8\xbcK\xa36\x00\x00', 0x0, 0x0, 0x1, 0x8010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xf400000000000000, 0xffffffffffff0001, 0x15) r0 = socket(0x10, 0xa, 0x9) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) fsopen$auto(0x0, 0x3) close_range$auto(0x2, 0x8, 0xffffffff) r1 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x69) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x4e22, @multicast1}, 0x54) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) 520.445681ms ago: executing program 1 (id=4856): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x3a) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/netfilter/nf_log/6\x00', 0xa0202, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180342, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, 0x0, 0x1000, 0x4) msgctl$auto(0x0, 0x0, 0x0) add_key$auto(&(0x7f0000000200)=':\x86V_\x1d\xf1\xf3\x02\xa3\xcd\x1a-* \xa0\xfb\x19\xf9m \x1c\xae&\xfa_\xa7a\x14\xcb\xec\x11\x05f\x19\xe6\'\x9ep\xb4\xc5\xaah{`t\xadn7\xb9S\xf1\x8c\xb2B\xc6\xe7\xd3u\x16\xb3\xbe\xc8o\xa4Gh[\n4|yV\xfdE\b\x05a;r\xa4\xb5\x06\xd1F`\xf7\aM\xb4A%CT\x19\xefq,\xf5\xda\xf5\x94YG\xa8\x12\x89\x05\r\x10\xa38\x1e\xbfR\x14\xac\x10\xeb\xa5\xc4\xbcg(\x0f\xb5M\x7f\xe6\x1a\x92\xa7x)vt\xec\x8bH\xf5\xdda\x15\xc4Z\xda\x83\x8c\xd5\xd2r\xd8\xbcK\xa36\x00\x00', 0x0, 0x0, 0x1, 0x8010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xf400000000000000, 0xffffffffffff0001, 0x15) r0 = socket(0x10, 0xa, 0x9) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x8000) fsopen$auto(0x0, 0x3) close_range$auto(0x2, 0x8, 0xffffffff) r1 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x69) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x4e22, @multicast1}, 0x54) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) 11.396712ms ago: executing program 1 (id=4857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100000008000900", @ANYRES32=r2, @ANYBLOB="0800050006000000110001006f76735fffc31300000000000000000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) syz_clone3(&(0x7f0000000440)={0x848400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x4}, &(0x7f0000000240)=""/205, 0xcd, &(0x7f0000000340)=""/217, &(0x7f0000000140)=[0x0], 0x1}, 0x58) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x530}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) mmap$auto(0x3, 0x401, 0x7, 0x16, 0x2, 0x5) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r4, 0x0, 0x81) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) 0s ago: executing program 0 (id=4864): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x7f, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value=[0x0, 0x1, 0x2, 0x8000, 0x5, 0x4, 0x2, 0xffff, 0x7, 0xffffffff, 0x5, 0xff, 0xe94, 0xb, 0x8, 0xfff, 0x2, 0x7, 0x2, 0x3be, 0x4, 0xd8a, 0x1, 0xa3, 0x6af, 0xb, 0x7ffffffc, 0x7fffffffffffffff, 0x6, 0x6, 0x9, 0x8, 0x4, 0x9, 0xcf, 0x40000000403, 0x6, 0x1, 0x3, 0x1, 0x6, 0x0, 0x5, 0x3, 0xffff, 0x548, 0xc, 0xe4, 0x7, 0x4, 0x1, 0x951, 0xe0000000000000, 0x6, 0x9, 0x0, 0x6, 0x4000000000000003, 0xb, 0x82c1, 0x4436, 0x0, 0xc1, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421debdad4d39a52fc70b9012aff448a8b4a75e7c5126dc116dd8f5751e93614151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c186120b5bed4ab64ffeb4b7c5a69166021a8814332515a657e93"}) getsockopt$auto_SO_TXREHASH(r0, 0x1, 0x4a, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x1d, 0x2, 0x6) socket(0x3, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x4) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x8, 0x7b5a, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) kernel console output (not intermixed with test programs): 56.213899][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 958.000708][T19159] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 958.031925][T19159] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 958.090810][T19159] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 958.151697][T19159] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 959.333731][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 960.059363][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 960.138551][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 960.221838][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 961.144374][T19191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 961.235930][T19191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 961.271968][T19191] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 961.311521][T19191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 962.055251][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 963.253874][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 963.342385][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 963.349463][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 963.648965][T19235] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 963.734166][T19235] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 963.790666][T19235] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 963.846970][T19235] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 964.383315][T19255] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 965.013711][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 965.813841][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 965.819923][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 965.897513][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 969.028836][T19276] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 969.084054][T19276] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 969.090196][T19276] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 969.175242][T19276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 969.960443][T19286] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 970.026090][T19286] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 970.119002][T19286] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 970.230705][T19286] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 971.973776][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 972.061506][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 972.133832][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 972.295703][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 973.370163][T19316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 973.464168][T19316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 973.470327][T19316] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 973.560982][T19316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 974.693741][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 975.414612][T19370] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 975.420715][T19370] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 975.484232][T19370] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 975.531421][T19370] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 976.033387][T19372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 976.062348][T19372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 976.080545][T19372] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 976.086915][T19372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 977.985881][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 978.154721][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 978.160847][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 978.166996][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 978.424462][T19427] mkiss: ax0: crc mode is auto. [ 978.658174][ T5829] Bluetooth: hci4: ISO packet too small [ 980.069015][T19429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 980.094011][T19429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 980.126077][T19429] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 980.132310][T19429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 980.792887][T19448] mkiss: ax0: crc mode is auto. [ 981.893792][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 982.133882][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 982.139955][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 982.146507][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 982.210920][T19444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 982.230117][T19444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 982.263821][T19444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 982.278928][T19444] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 983.222751][T19441] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 983.365569][T19441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 983.713717][T19441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 983.719880][T19441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 984.853962][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 985.189887][T19499] FAULT_INJECTION: forcing a failure. [ 985.189887][T19499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.327717][T19499] CPU: 0 UID: 0 PID: 19499 Comm: syz.1.3215 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 985.327758][T19499] Tainted: [U]=USER [ 985.327766][T19499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 985.327779][T19499] Call Trace: [ 985.327787][T19499] [ 985.327797][T19499] dump_stack_lvl+0x16c/0x1f0 [ 985.327833][T19499] should_fail_ex+0x50a/0x650 [ 985.327872][T19499] _copy_to_iter+0x465/0x1560 [ 985.327904][T19499] ? __pfx__copy_to_iter+0x10/0x10 [ 985.327927][T19499] ? hlock_class+0x4e/0x130 [ 985.327952][T19499] ? mark_lock+0xb5/0xc60 [ 985.327979][T19499] ? const_folio_flags+0x5b/0x100 [ 985.328008][T19499] ? folio_mark_accessed+0xc2/0xc00 [ 985.328056][T19499] ? __pfx_folio_mark_accessed+0x10/0x10 [ 985.328093][T19499] copy_page_to_iter+0xf1/0x180 [ 985.328122][T19499] filemap_read+0x698/0xe70 [ 985.328165][T19499] ? __pfx_filemap_read+0x10/0x10 [ 985.328220][T19499] ? __pfx_mark_lock+0x10/0x10 [ 985.328250][T19499] ? __pfx_aa_file_perm+0x10/0x10 [ 985.328284][T19499] blkdev_read_iter+0x187/0x4b0 [ 985.328318][T19499] do_iter_readv_writev+0x737/0x950 [ 985.328352][T19499] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 985.328386][T19499] ? bpf_lsm_file_permission+0x9/0x10 [ 985.328419][T19499] ? security_file_permission+0x71/0x210 [ 985.328450][T19499] ? rw_verify_area+0xcf/0x680 [ 985.328480][T19499] vfs_readv+0x4d2/0x8a0 [ 985.328506][T19499] ? __pfx___lock_acquire+0x10/0x10 [ 985.328541][T19499] ? find_held_lock+0x2d/0x110 [ 985.328576][T19499] ? __pfx_vfs_readv+0x10/0x10 [ 985.328610][T19499] ? __fget_files+0x1fc/0x3a0 [ 985.328641][T19499] ? __pfx_lock_release+0x10/0x10 [ 985.328684][T19499] ? __fget_files+0x206/0x3a0 [ 985.328721][T19499] ? do_preadv+0x1b1/0x270 [ 985.328748][T19499] do_preadv+0x1b1/0x270 [ 985.328794][T19499] ? __pfx_do_preadv+0x10/0x10 [ 985.328831][T19499] do_syscall_64+0xcd/0x250 [ 985.328862][T19499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.328894][T19499] RIP: 0033:0x7f9e5538d169 [ 985.328913][T19499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.328933][T19499] RSP: 002b:00007f9e5628e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 985.328953][T19499] RAX: ffffffffffffffda RBX: 00007f9e555a6080 RCX: 00007f9e5538d169 [ 985.328968][T19499] RDX: 0000000000000006 RSI: 0000400000000080 RDI: 0040000000000003 [ 985.328982][T19499] RBP: 00007f9e5628e090 R08: 0000000000000005 R09: 0000000000000000 [ 985.328993][T19499] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 985.329006][T19499] R13: 0000000000000001 R14: 00007f9e555a6080 R15: 00007ffc1ff825a8 [ 985.329033][T19499] [ 985.634560][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 985.640738][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 985.733844][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 985.943909][T19485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 985.950028][T19485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 986.100743][T19485] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 986.147839][T19485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 986.934747][T19502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 986.940969][T19502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 986.971351][T19502] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 986.998267][T19502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 988.338251][T19538] mkiss: ax0: crc mode is auto. [ 988.698381][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 989.014218][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 989.020298][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 989.026446][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 991.076670][T19550] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 991.104049][T19550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 991.140542][T19550] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 991.183906][T19550] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 992.377206][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 992.859764][T19569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 992.866416][T19569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 992.880618][T19569] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 992.907218][T19569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 993.335948][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.342424][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.453695][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 994.933883][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 994.940003][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 994.946164][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 996.531523][T19611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 996.593938][T19611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 996.600061][T19611] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 996.673812][T19611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 998.373774][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 998.623748][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 998.623806][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 998.774877][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 999.283922][T19658] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 999.290165][T19658] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 999.296979][T19658] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 999.323837][T19658] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1001.072199][T19665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1001.203060][T19665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1001.258917][T19665] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1001.333931][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1001.354094][T19665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1002.138723][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1003.231095][T19693] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1003.237960][T19693] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1003.332266][T19693] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1003.423715][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1003.443861][T19693] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1003.633449][T19717] mkiss: ax0: crc mode is auto. [ 1004.460435][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1005.343442][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1005.343460][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1005.493938][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1006.802416][T19793] mkiss: ax0: crc mode is auto. [ 1009.299580][T19786] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1009.379134][T19786] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1009.425749][T19786] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1009.479161][T19786] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1009.971420][T19831] mkiss: ax0: crc mode is auto. [ 1010.301799][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1011.413715][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1011.493790][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1011.499944][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1016.277559][T19887] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1016.308284][T19887] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1016.336724][T19887] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1016.358366][T19887] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1017.653855][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1018.383883][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1018.389971][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1018.393847][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1019.381548][T19919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1019.444115][T19919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1019.450275][T19919] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1019.523817][T19919] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1020.853756][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1021.468377][T19931] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1021.484076][T19931] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1021.494552][T19931] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1021.500648][T19931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1023.093897][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1023.493696][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1023.573741][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1023.573940][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1026.488570][T19944] mkiss: ax0: crc mode is auto. [ 1026.617554][T19951] mkiss: ax0: crc mode is auto. [ 1028.724576][T20033] netlink: 'syz.2.3332': attribute type 5 has an invalid length. [ 1028.754577][T20017] mkiss: ax0: crc mode is auto. [ 1029.032550][T20026] mkiss: ax0: crc mode is auto. [ 1029.961586][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 1030.129566][ T5829] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1030.129604][ T5829] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 syzkaller syzkaller login: [ 1030.146684][ T5829] Bluetooth: hci3: adv larger than maximum supported [ 1031.504719][T20081] mkiss: ax0: crc mode is auto. [ 1032.587126][T20094] mkiss: ax0: crc mode is auto. [ 1035.423903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1035.433769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1037.957422][T20166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1037.989117][T20166] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1038.082640][T20166] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1038.152346][T20166] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1038.636700][T20195] netlink: 'syz.1.3367': attribute type 5 has an invalid length. [ 1039.234595][T20182] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1039.241262][T20182] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1039.285445][T20182] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1039.291560][T20182] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1040.045025][T20205] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1040.051167][T20205] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1040.083947][T20205] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1040.090056][T20205] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1041.893847][T20226] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1041.928606][T20226] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1041.943900][T20226] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1041.950231][T20226] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1043.574390][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1043.981828][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1043.981856][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1043.987944][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1044.596960][T20257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1044.603126][T20257] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1044.708813][T20257] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1044.872516][T20257] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1045.324034][T20246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1045.330200][T20246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1045.480343][T20246] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1045.558831][T20246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1047.350329][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1047.353715][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1047.493655][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1047.583919][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1048.432704][T20286] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1048.445323][T20286] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1048.532006][T20286] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1048.693150][T20286] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1050.053727][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1050.533774][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1050.533990][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1050.698318][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1053.794628][T20346] dyndbg: bad flag-op @, at start of @ [ 1053.801052][T20346] dyndbg: flags parse failed [ 1054.777116][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.783520][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.022756][T20344] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1056.058762][T20344] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1056.149890][T20344] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1056.170136][T20344] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1056.676299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1056.685487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1056.843990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1057.146075][T20393] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1057.203694][T20393] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1057.263682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 1057.658567][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1058.133723][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1058.213835][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1058.219910][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1058.994348][T20403] delete_channel: no stack [ 1060.103650][T20422] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1060.109824][T20422] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1060.116053][T20422] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1060.122182][T20422] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1060.152550][T20434] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1061.413765][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1062.133855][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1062.133932][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 1062.139993][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1064.333406][T20477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1064.343904][T20477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1064.350010][T20477] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1064.451600][T20477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1065.928849][T20503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1065.935879][T20503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1065.952375][T20503] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1065.974199][T20503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1066.325562][T20524] : Can't lookup blockdev [ 1067.653787][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1067.973737][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1067.979831][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1068.063751][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1073.809796][T20628] : Can't lookup blockdev [ 1076.698799][T20664] : Can't lookup blockdev [ 1080.229263][T20712] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1080.297692][T20713] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1082.515341][T20735] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 1083.510888][T20748] netlink: 186 bytes leftover after parsing attributes in process `syz.0.3497'. [ 1083.855791][T20753] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3498'. [ 1088.149317][T20795] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1088.181410][T20795] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1088.211304][T20795] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1088.233938][T20795] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1089.628544][T20826] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 1089.900845][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1090.218755][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1090.227786][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 1090.293760][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1092.384705][T20848] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1092.393794][T20848] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1092.413426][T20848] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1092.462199][T20848] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1094.293683][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1094.454182][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1094.455134][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 1094.542626][ T5833] Bluetooth: hci0: command 0x040f tx timeout [ 1097.933419][T20910] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1097.940777][T20910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1097.948076][T20910] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1097.959197][T20910] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1099.653681][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1099.974003][ T5833] Bluetooth: hci0: command 0x040f tx timeout [ 1099.974306][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1099.980457][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 1101.204891][T18948] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 1105.074588][ T29] audit: type=1326 audit(8277292967.490:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21011 comm="syz.0.3562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12a398d169 code=0x0 [ 1107.493938][T21073] netlink: 186 bytes leftover after parsing attributes in process `syz.0.3578'. [ 1109.001697][ T29] audit: type=1326 audit(8277292971.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21084 comm="syz.1.3581" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e5538d169 code=0x0 [ 1109.007491][T21107] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3585'. [ 1109.867492][T21114] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3596'. [ 1110.278906][T21123] FAULT_INJECTION: forcing a failure. [ 1110.278906][T21123] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.292963][T21123] CPU: 1 UID: 0 PID: 21123 Comm: syz.2.3590 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1110.293004][T21123] Tainted: [U]=USER [ 1110.293013][T21123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1110.293029][T21123] Call Trace: [ 1110.293037][T21123] [ 1110.293048][T21123] dump_stack_lvl+0x16c/0x1f0 [ 1110.293087][T21123] should_fail_ex+0x50a/0x650 [ 1110.293125][T21123] ? fs_reclaim_acquire+0xae/0x150 [ 1110.293160][T21123] should_failslab+0xc2/0x120 [ 1110.293185][T21123] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1110.293220][T21123] ? down_write+0x14e/0x200 [ 1110.293253][T21123] ? vm_area_dup+0x53/0x2f0 [ 1110.293295][T21123] vm_area_dup+0x53/0x2f0 [ 1110.293329][T21123] copy_process+0x776f/0x8c50 [ 1110.293380][T21123] ? __pfx_copy_process+0x10/0x10 [ 1110.293403][T21123] ? __pfx___futex_wait+0x10/0x10 [ 1110.293469][T21123] kernel_clone+0xfd/0x960 [ 1110.293497][T21123] ? __pfx_kernel_clone+0x10/0x10 [ 1110.293543][T21123] __do_sys_clone+0xcf/0x120 [ 1110.293566][T21123] ? __pfx___do_sys_clone+0x10/0x10 [ 1110.293604][T21123] ? rcu_is_watching+0x12/0xc0 [ 1110.293642][T21123] do_syscall_64+0xcd/0x250 [ 1110.293676][T21123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.293706][T21123] RIP: 0033:0x7f4115d8d169 [ 1110.293727][T21123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1110.293750][T21123] RSP: 002b:00007f4116b38fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1110.293774][T21123] RAX: ffffffffffffffda RBX: 00007f4115fa6080 RCX: 00007f4115d8d169 [ 1110.293791][T21123] RDX: 0000000000000000 RSI: ffffffffffffff10 RDI: 0000000000000000 [ 1110.293807][T21123] RBP: 00007f4115e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.293823][T21123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1110.293839][T21123] R13: 0000000000000000 R14: 00007f4115fa6080 R15: 00007fff63475768 [ 1110.293880][T21123] [ 1112.617708][ T29] audit: type=1326 audit(8277292975.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21148 comm="syz.2.3598" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4115d8d169 code=0x0 [ 1114.394366][T21173] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1114.401164][T21173] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1114.408128][T21173] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1114.431649][T21173] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1114.543828][T21185] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3613'. [ 1115.043238][T21201] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3609'. [ 1116.071181][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1116.224333][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.230783][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.454315][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1116.460541][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1116.460557][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 1116.563820][T21202] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1116.604482][T21202] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1116.622871][T21202] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1116.629329][T21202] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1118.213728][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1118.613796][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 1118.693744][ T5833] Bluetooth: hci0: command 0x040f tx timeout [ 1118.694520][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1120.755910][T21277] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3627'. [ 1122.214530][T21274] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1122.220688][T21274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1122.320250][T21274] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1122.387569][T21274] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1123.737747][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1123.850165][T21310] netlink: 186 bytes leftover after parsing attributes in process `syz.0.3635'. [ 1124.294244][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1124.393632][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1124.461937][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1126.492397][T21334] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1126.503982][T21334] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1126.523861][T21334] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1126.550676][T21334] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1127.876886][T21327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1127.986240][T21327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1127.992406][T21327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1128.038600][T21327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1129.013952][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1130.054002][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1130.055205][ T5833] Bluetooth: hci4: command 0x040f tx timeout [ 1130.060129][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1132.435223][T21406] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1132.441834][T21406] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1132.472456][T21406] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1132.545885][T21406] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1133.653761][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1134.495704][T21450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1134.502717][T21450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1134.533656][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1134.543861][T21450] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1134.590384][T21450] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1135.555613][T21498] FAULT_INJECTION: forcing a failure. [ 1135.555613][T21498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.626535][T21498] CPU: 1 UID: 0 PID: 21498 Comm: syz.1.3683 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1135.626576][T21498] Tainted: [U]=USER [ 1135.626583][T21498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1135.626597][T21498] Call Trace: [ 1135.626604][T21498] [ 1135.626615][T21498] dump_stack_lvl+0x16c/0x1f0 [ 1135.626649][T21498] should_fail_ex+0x50a/0x650 [ 1135.626688][T21498] _copy_to_user+0x32/0xd0 [ 1135.626715][T21498] video_usercopy+0x697/0x1620 [ 1135.626745][T21498] ? __pfx___video_do_ioctl+0x10/0x10 [ 1135.626772][T21498] ? __pfx_video_usercopy+0x10/0x10 [ 1135.626819][T21498] v4l2_ioctl+0x1ba/0x250 [ 1135.626842][T21498] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1135.626867][T21498] __x64_sys_ioctl+0x190/0x200 [ 1135.626898][T21498] do_syscall_64+0xcd/0x250 [ 1135.626929][T21498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.626960][T21498] RIP: 0033:0x7f9e5538d169 [ 1135.626979][T21498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.627002][T21498] RSP: 002b:00007f9e562af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1135.627032][T21498] RAX: ffffffffffffffda RBX: 00007f9e555a5fa0 RCX: 00007f9e5538d169 [ 1135.627049][T21498] RDX: 0000000000000038 RSI: 00000000c0205647 RDI: 0000000000000003 [ 1135.627075][T21498] RBP: 00007f9e562af090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.627090][T21498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.627104][T21498] R13: 0000000000000000 R14: 00007f9e555a5fa0 R15: 00007ffc1ff825a8 [ 1135.627129][T21498] [ 1136.053626][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1136.540508][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1136.613700][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1136.619788][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1141.371182][T21602] netlink: 29 bytes leftover after parsing attributes in process `syz.1.3714'. [ 1142.199259][T21625] FAULT_INJECTION: forcing a failure. [ 1142.199259][T21625] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.239741][T21625] CPU: 1 UID: 0 PID: 21625 Comm: syz.3.3720 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1142.239785][T21625] Tainted: [U]=USER [ 1142.239795][T21625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1142.239809][T21625] Call Trace: [ 1142.239817][T21625] [ 1142.239827][T21625] dump_stack_lvl+0x16c/0x1f0 [ 1142.239866][T21625] should_fail_ex+0x50a/0x650 [ 1142.239903][T21625] ? fs_reclaim_acquire+0xae/0x150 [ 1142.239951][T21625] should_failslab+0xc2/0x120 [ 1142.239978][T21625] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1142.240014][T21625] ? down_write+0x14e/0x200 [ 1142.240046][T21625] ? vm_area_dup+0x21/0x2f0 [ 1142.240088][T21625] vm_area_dup+0x21/0x2f0 [ 1142.240123][T21625] copy_process+0x776f/0x8c50 [ 1142.240175][T21625] ? __pfx_copy_process+0x10/0x10 [ 1142.240198][T21625] ? __pfx___futex_wait+0x10/0x10 [ 1142.240265][T21625] kernel_clone+0xfd/0x960 [ 1142.240293][T21625] ? __pfx_kernel_clone+0x10/0x10 [ 1142.240330][T21625] ? 0xffffffffff600000 [ 1142.240349][T21625] __do_sys_clone+0xcf/0x120 [ 1142.240370][T21625] ? __pfx___do_sys_clone+0x10/0x10 [ 1142.240396][T21625] ? 0xffffffffff600000 [ 1142.240425][T21625] ? rcu_is_watching+0x12/0xc0 [ 1142.240505][T21625] do_syscall_64+0xcd/0x250 [ 1142.240541][T21625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.240573][T21625] RIP: 0033:0x7f3efa58d169 [ 1142.240594][T21625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.240618][T21625] RSP: 002b:00007f3efb422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1142.240642][T21625] RAX: ffffffffffffffda RBX: 00007f3efa7a5fa0 RCX: 00007f3efa58d169 [ 1142.240660][T21625] RDX: ffffffffffffffff RSI: 0000000000002100 RDI: 0000000000008004 [ 1142.240677][T21625] RBP: 00007f3efa60e2a0 R08: 0000000000000006 R09: 0000000000000000 [ 1142.240691][T21625] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.240707][T21625] R13: 0000000000000000 R14: 00007f3efa7a5fa0 R15: 00007ffd5955bdd8 [ 1142.240730][T21625] ? 0xffffffffff600000 [ 1142.240757][T21625] [ 1144.092323][T21665] netlink: 29 bytes leftover after parsing attributes in process `syz.3.3731'. [ 1144.145060][ T29] audit: type=1800 audit(8277293006.540:8): pid=21659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3729" name="discovery_nqn" dev="configfs" ino=64664 res=0 errno=0 [ 1144.713224][T21673] FAULT_INJECTION: forcing a failure. [ 1144.713224][T21673] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1144.737792][T21673] CPU: 0 UID: 0 PID: 21673 Comm: syz.2.3732 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1144.737836][T21673] Tainted: [U]=USER [ 1144.737845][T21673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1144.737860][T21673] Call Trace: [ 1144.737868][T21673] [ 1144.737878][T21673] dump_stack_lvl+0x16c/0x1f0 [ 1144.737914][T21673] should_fail_ex+0x50a/0x650 [ 1144.737949][T21673] ? __pfx___might_resched+0x10/0x10 [ 1144.737990][T21673] should_fail_alloc_page+0xe7/0x130 [ 1144.738017][T21673] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1144.738049][T21673] ? hlock_class+0x4e/0x130 [ 1144.738079][T21673] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1144.738133][T21673] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1144.738183][T21673] ? find_held_lock+0x2d/0x110 [ 1144.738213][T21673] ? page_ext_put+0x3e/0xd0 [ 1144.738245][T21673] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1144.738283][T21673] ? policy_nodemask+0xea/0x4e0 [ 1144.738323][T21673] alloc_pages_mpol+0x1fc/0x540 [ 1144.738349][T21673] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1144.738373][T21673] ? page_table_check_set.part.0+0x3b8/0x550 [ 1144.738418][T21673] ? find_held_lock+0x2d/0x110 [ 1144.738449][T21673] alloc_pages_noprof+0x131/0x390 [ 1144.738477][T21673] pte_alloc_one+0x20/0x390 [ 1144.738512][T21673] __pte_alloc+0x6e/0x3d0 [ 1144.738540][T21673] ? __pfx___pte_alloc+0x10/0x10 [ 1144.738567][T21673] ? __pfx___might_resched+0x10/0x10 [ 1144.738610][T21673] copy_page_range+0x3737/0x5690 [ 1144.738671][T21673] ? __pfx_copy_page_range+0x10/0x10 [ 1144.738697][T21673] ? find_held_lock+0x2d/0x110 [ 1144.738733][T21673] ? __pfx_lock_release+0x10/0x10 [ 1144.738764][T21673] ? lock_acquire+0x2f/0xb0 [ 1144.738792][T21673] ? copy_process+0x7c12/0x8c50 [ 1144.738820][T21673] ? down_write+0x14e/0x200 [ 1144.738854][T21673] ? up_write+0x1b2/0x520 [ 1144.738891][T21673] copy_process+0x7ccb/0x8c50 [ 1144.738937][T21673] ? __pfx_copy_process+0x10/0x10 [ 1144.738958][T21673] ? __pfx___futex_wait+0x10/0x10 [ 1144.739019][T21673] kernel_clone+0xfd/0x960 [ 1144.739044][T21673] ? __pfx_kernel_clone+0x10/0x10 [ 1144.739085][T21673] ? 0xffffffffff600000 [ 1144.739104][T21673] __do_sys_clone+0xcf/0x120 [ 1144.739126][T21673] ? __pfx___do_sys_clone+0x10/0x10 [ 1144.739152][T21673] ? 0xffffffffff600000 [ 1144.739180][T21673] ? rcu_is_watching+0x12/0xc0 [ 1144.739216][T21673] do_syscall_64+0xcd/0x250 [ 1144.739247][T21673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.739278][T21673] RIP: 0033:0x7f4115d8d169 [ 1144.739297][T21673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1144.739321][T21673] RSP: 002b:00007f4116b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1144.739345][T21673] RAX: ffffffffffffffda RBX: 00007f4115fa5fa0 RCX: 00007f4115d8d169 [ 1144.739362][T21673] RDX: ffffffffffffffff RSI: 0000000000002100 RDI: 0000000000008004 [ 1144.739378][T21673] RBP: 00007f4115e0e2a0 R08: 0000000000000006 R09: 0000000000000000 [ 1144.739394][T21673] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 1144.739416][T21673] R13: 0000000000000000 R14: 00007f4115fa5fa0 R15: 00007fff63475768 [ 1144.739438][T21673] ? 0xffffffffff600000 [ 1144.739467][T21673] [ 1150.228124][T21775] netlink: 29 bytes leftover after parsing attributes in process `syz.0.3757'. [ 1153.108398][T21832] syz.0.3774 (21832): drop_caches: 0 [ 1157.458826][T21924] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3796'. [ 1159.622284][T21969] ptrace attach of "./syz-executor exec"[13435] was attempted by "./syz-executor exec"[21969] [ 1164.538397][T22021] FAULT_INJECTION: forcing a failure. [ 1164.538397][T22021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1164.603741][T22021] CPU: 1 UID: 0 PID: 22021 Comm: syz.0.3819 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1164.603785][T22021] Tainted: [U]=USER [ 1164.603794][T22021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1164.603810][T22021] Call Trace: [ 1164.603819][T22021] [ 1164.603830][T22021] dump_stack_lvl+0x16c/0x1f0 [ 1164.603868][T22021] should_fail_ex+0x50a/0x650 [ 1164.603904][T22021] ? __pfx___might_resched+0x10/0x10 [ 1164.603948][T22021] should_fail_alloc_page+0xe7/0x130 [ 1164.603976][T22021] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1164.604016][T22021] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1164.604071][T22021] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1164.604112][T22021] ? mark_lock+0xb5/0xc60 [ 1164.604151][T22021] ? mark_lock+0xb5/0xc60 [ 1164.604179][T22021] ? find_held_lock+0x2d/0x110 [ 1164.604207][T22021] ? hlock_class+0x4e/0x130 [ 1164.604231][T22021] ? __pfx_mark_lock+0x10/0x10 [ 1164.604261][T22021] ? page_ext_put+0x3e/0xd0 [ 1164.604295][T22021] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1164.604334][T22021] ? policy_nodemask+0xea/0x4e0 [ 1164.604375][T22021] alloc_pages_mpol+0x1fc/0x540 [ 1164.604401][T22021] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1164.604428][T22021] ? find_held_lock+0x2d/0x110 [ 1164.604467][T22021] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1164.604500][T22021] vma_alloc_folio_noprof+0xee/0x1b0 [ 1164.604530][T22021] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1164.604561][T22021] ? __pfx___lock_acquire+0x10/0x10 [ 1164.604602][T22021] do_wp_page+0x105a/0x4670 [ 1164.604642][T22021] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1164.604677][T22021] ? __pfx_do_wp_page+0x10/0x10 [ 1164.604706][T22021] ? rcu_is_watching+0x12/0xc0 [ 1164.604740][T22021] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1164.604765][T22021] ? lock_acquire+0x2f/0xb0 [ 1164.604795][T22021] ? __handle_mm_fault+0xf22/0x2c60 [ 1164.604837][T22021] __handle_mm_fault+0x1c7c/0x2c60 [ 1164.604883][T22021] ? __pfx___handle_mm_fault+0x10/0x10 [ 1164.604917][T22021] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1164.604972][T22021] ? find_vma+0xc0/0x140 [ 1164.605000][T22021] ? __pfx_find_vma+0x10/0x10 [ 1164.605034][T22021] handle_mm_fault+0x3fa/0xaa0 [ 1164.605076][T22021] do_user_addr_fault+0x7a3/0x13f0 [ 1164.605118][T22021] exc_page_fault+0x5c/0xc0 [ 1164.605149][T22021] asm_exc_page_fault+0x26/0x30 [ 1164.605181][T22021] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1164.605220][T22021] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1164.605245][T22021] RSP: 0018:ffffc90003417d68 EFLAGS: 00050206 [ 1164.605266][T22021] RAX: 0000000000000001 RBX: 0000000000003fdf RCX: 000000000000111f [ 1164.605282][T22021] RDX: ffffed100c861ffb RSI: ffff88806430eec0 RDI: 0000400000003000 [ 1164.605300][T22021] RBP: 0000400000000140 R08: 0000000000000000 R09: ffffed100c861ffb [ 1164.605317][T22021] R10: 0000000000000006 R11: 0000000000000000 R12: ffff88806430c000 [ 1164.605333][T22021] R13: 000040000000411f R14: 00007ffffffff000 R15: 0000000000000000 [ 1164.605367][T22021] _copy_to_user+0xbb/0xd0 [ 1164.605397][T22021] dma_heap_ioctl+0x3da/0x6a0 [ 1164.605437][T22021] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1164.605496][T22021] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1164.605532][T22021] __x64_sys_ioctl+0x190/0x200 [ 1164.605568][T22021] do_syscall_64+0xcd/0x250 [ 1164.605602][T22021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.605636][T22021] RIP: 0033:0x7f12a398d169 [ 1164.605656][T22021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.605680][T22021] RSP: 002b:00007f12a17d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.605703][T22021] RAX: ffffffffffffffda RBX: 00007f12a3ba6080 RCX: 00007f12a398d169 [ 1164.605720][T22021] RDX: 0000400000000140 RSI: ffffffffffdffe00 RDI: 000000000000000d [ 1164.605737][T22021] RBP: 00007f12a3a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.605752][T22021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.605768][T22021] R13: 0000000000000000 R14: 00007f12a3ba6080 R15: 00007ffcd32e4bb8 [ 1164.605801][T22021] [ 1171.683239][T22125] FAULT_INJECTION: forcing a failure. [ 1171.683239][T22125] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1171.749732][T22125] CPU: 1 UID: 0 PID: 22125 Comm: syz.1.3848 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1171.749781][T22125] Tainted: [U]=USER [ 1171.749790][T22125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1171.749805][T22125] Call Trace: [ 1171.749812][T22125] [ 1171.749820][T22125] dump_stack_lvl+0x16c/0x1f0 [ 1171.749855][T22125] should_fail_ex+0x50a/0x650 [ 1171.749889][T22125] ? __pfx___might_resched+0x10/0x10 [ 1171.749927][T22125] should_fail_alloc_page+0xe7/0x130 [ 1171.749955][T22125] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1171.749993][T22125] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1171.750045][T22125] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1171.750085][T22125] ? mark_lock+0xb5/0xc60 [ 1171.750121][T22125] ? mark_lock+0xb5/0xc60 [ 1171.750150][T22125] ? find_held_lock+0x2d/0x110 [ 1171.750176][T22125] ? hlock_class+0x4e/0x130 [ 1171.750202][T22125] ? __pfx_mark_lock+0x10/0x10 [ 1171.750231][T22125] ? page_ext_put+0x3e/0xd0 [ 1171.750263][T22125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1171.750300][T22125] ? policy_nodemask+0xea/0x4e0 [ 1171.750340][T22125] alloc_pages_mpol+0x1fc/0x540 [ 1171.750365][T22125] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1171.750392][T22125] ? find_held_lock+0x2d/0x110 [ 1171.750421][T22125] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1171.750452][T22125] vma_alloc_folio_noprof+0xee/0x1b0 [ 1171.750504][T22125] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1171.750533][T22125] ? __pfx___lock_acquire+0x10/0x10 [ 1171.750570][T22125] do_wp_page+0x105a/0x4670 [ 1171.750608][T22125] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1171.750641][T22125] ? __pfx_do_wp_page+0x10/0x10 [ 1171.750668][T22125] ? rcu_is_watching+0x12/0xc0 [ 1171.750698][T22125] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1171.750722][T22125] ? lock_acquire+0x2f/0xb0 [ 1171.750759][T22125] ? __handle_mm_fault+0xf22/0x2c60 [ 1171.750816][T22125] __handle_mm_fault+0x1c7c/0x2c60 [ 1171.750864][T22125] ? __pfx___handle_mm_fault+0x10/0x10 [ 1171.750898][T22125] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1171.750950][T22125] ? find_vma+0xc0/0x140 [ 1171.750977][T22125] ? __pfx_find_vma+0x10/0x10 [ 1171.751010][T22125] handle_mm_fault+0x3fa/0xaa0 [ 1171.751047][T22125] do_user_addr_fault+0x7a3/0x13f0 [ 1171.751083][T22125] exc_page_fault+0x5c/0xc0 [ 1171.751113][T22125] asm_exc_page_fault+0x26/0x30 [ 1171.751146][T22125] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1171.751185][T22125] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1171.751210][T22125] RSP: 0018:ffffc90012c0fd68 EFLAGS: 00050206 [ 1171.751231][T22125] RAX: 0000000000000001 RBX: 0000000000003fdf RCX: 000000000000111f [ 1171.751247][T22125] RDX: ffffed100d9737fb RSI: ffff88806cb9aec0 RDI: 0000400000003000 [ 1171.751264][T22125] RBP: 0000400000000140 R08: 0000000000000000 R09: ffffed100d9737fb [ 1171.751280][T22125] R10: 0000000000000006 R11: 0000000000000000 R12: ffff88806cb98000 [ 1171.751296][T22125] R13: 000040000000411f R14: 00007ffffffff000 R15: 0000000000000000 [ 1171.751329][T22125] _copy_to_user+0xbb/0xd0 [ 1171.751358][T22125] dma_heap_ioctl+0x3da/0x6a0 [ 1171.751398][T22125] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1171.751450][T22125] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1171.751485][T22125] __x64_sys_ioctl+0x190/0x200 [ 1171.751517][T22125] do_syscall_64+0xcd/0x250 [ 1171.751549][T22125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.751581][T22125] RIP: 0033:0x7f9e5538d169 [ 1171.751600][T22125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.751624][T22125] RSP: 002b:00007f9e5628e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1171.751646][T22125] RAX: ffffffffffffffda RBX: 00007f9e555a6080 RCX: 00007f9e5538d169 [ 1171.751664][T22125] RDX: 0000400000000140 RSI: ffffffffffdffe00 RDI: 000000000000000d [ 1171.751680][T22125] RBP: 00007f9e5540e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1171.751696][T22125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1171.751711][T22125] R13: 0000000000000000 R14: 00007f9e555a6080 R15: 00007ffc1ff825a8 [ 1171.751743][T22125] [ 1172.614749][T22138] FAULT_INJECTION: forcing a failure. [ 1172.614749][T22138] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.667677][T22138] CPU: 1 UID: 0 PID: 22138 Comm: syz.1.3853 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1172.667717][T22138] Tainted: [U]=USER [ 1172.667725][T22138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1172.667738][T22138] Call Trace: [ 1172.667745][T22138] [ 1172.667756][T22138] dump_stack_lvl+0x16c/0x1f0 [ 1172.667791][T22138] should_fail_ex+0x50a/0x650 [ 1172.667824][T22138] ? fs_reclaim_acquire+0xae/0x150 [ 1172.667855][T22138] ? trace_parse_run_command+0x58/0x3c0 [ 1172.667886][T22138] should_failslab+0xc2/0x120 [ 1172.667909][T22138] __kmalloc_cache_noprof+0x68/0x410 [ 1172.667939][T22138] ? rcu_is_watching+0x12/0xc0 [ 1172.667971][T22138] trace_parse_run_command+0x58/0x3c0 [ 1172.668000][T22138] ? __pfx_create_dyn_event+0x10/0x10 [ 1172.668028][T22138] ? __pfx_dyn_event_write+0x10/0x10 [ 1172.668050][T22138] vfs_write+0x24c/0x1150 [ 1172.668082][T22138] ? __fget_files+0x1fc/0x3a0 [ 1172.668113][T22138] ? __pfx___mutex_lock+0x10/0x10 [ 1172.668142][T22138] ? __pfx_vfs_write+0x10/0x10 [ 1172.668181][T22138] ? __fget_files+0x206/0x3a0 [ 1172.668222][T22138] ksys_write+0x12b/0x250 [ 1172.668250][T22138] ? __pfx_ksys_write+0x10/0x10 [ 1172.668290][T22138] do_syscall_64+0xcd/0x250 [ 1172.668321][T22138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.668352][T22138] RIP: 0033:0x7f9e5538d169 [ 1172.668372][T22138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.668393][T22138] RSP: 002b:00007f9e562af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1172.668416][T22138] RAX: ffffffffffffffda RBX: 00007f9e555a5fa0 RCX: 00007f9e5538d169 [ 1172.668432][T22138] RDX: 0000000000000012 RSI: 0000400000000140 RDI: 0000000000000003 [ 1172.668446][T22138] RBP: 00007f9e562af090 R08: 0000000000000000 R09: 0000000000000000 [ 1172.668461][T22138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.668481][T22138] R13: 0000000000000000 R14: 00007f9e555a5fa0 R15: 00007ffc1ff825a8 [ 1172.668513][T22138] [ 1173.725045][T22143] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1173.743864][T22143] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1173.766990][T22143] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1173.784402][T22143] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1174.878580][T22172] FAULT_INJECTION: forcing a failure. [ 1174.878580][T22172] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1174.943877][T22172] CPU: 0 UID: 0 PID: 22172 Comm: syz.3.3862 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1174.943925][T22172] Tainted: [U]=USER [ 1174.943935][T22172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1174.943949][T22172] Call Trace: [ 1174.943958][T22172] [ 1174.943969][T22172] dump_stack_lvl+0x16c/0x1f0 [ 1174.944006][T22172] should_fail_ex+0x50a/0x650 [ 1174.944043][T22172] ? __pfx___might_resched+0x10/0x10 [ 1174.944087][T22172] should_fail_alloc_page+0xe7/0x130 [ 1174.944114][T22172] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1174.944153][T22172] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1174.944209][T22172] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1174.944248][T22172] ? mark_lock+0xb5/0xc60 [ 1174.944287][T22172] ? mark_lock+0xb5/0xc60 [ 1174.944316][T22172] ? find_held_lock+0x2d/0x110 [ 1174.944344][T22172] ? hlock_class+0x4e/0x130 [ 1174.944370][T22172] ? __pfx_mark_lock+0x10/0x10 [ 1174.944400][T22172] ? page_ext_put+0x3e/0xd0 [ 1174.944433][T22172] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1174.944472][T22172] ? policy_nodemask+0xea/0x4e0 [ 1174.944522][T22172] alloc_pages_mpol+0x1fc/0x540 [ 1174.944549][T22172] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1174.944578][T22172] ? find_held_lock+0x2d/0x110 [ 1174.944610][T22172] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1174.944643][T22172] vma_alloc_folio_noprof+0xee/0x1b0 [ 1174.944685][T22172] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1174.944718][T22172] ? __pfx___lock_acquire+0x10/0x10 [ 1174.944759][T22172] do_wp_page+0x105a/0x4670 [ 1174.944802][T22172] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1174.944838][T22172] ? __pfx_do_wp_page+0x10/0x10 [ 1174.944866][T22172] ? rcu_is_watching+0x12/0xc0 [ 1174.944898][T22172] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1174.944922][T22172] ? lock_acquire+0x2f/0xb0 [ 1174.944957][T22172] ? __handle_mm_fault+0xf22/0x2c60 [ 1174.944999][T22172] __handle_mm_fault+0x1c7c/0x2c60 [ 1174.945045][T22172] ? __pfx___handle_mm_fault+0x10/0x10 [ 1174.945079][T22172] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1174.945133][T22172] ? find_vma+0xc0/0x140 [ 1174.945161][T22172] ? __pfx_find_vma+0x10/0x10 [ 1174.945195][T22172] handle_mm_fault+0x3fa/0xaa0 [ 1174.945237][T22172] do_user_addr_fault+0x7a3/0x13f0 [ 1174.945278][T22172] exc_page_fault+0x5c/0xc0 [ 1174.945308][T22172] asm_exc_page_fault+0x26/0x30 [ 1174.945341][T22172] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1174.945380][T22172] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1174.945405][T22172] RSP: 0018:ffffc90012b77d68 EFLAGS: 00050206 [ 1174.945426][T22172] RAX: 0000000000000001 RBX: 0000000000003fdf RCX: 000000000000111f [ 1174.945442][T22172] RDX: ffffed1006a797fb RSI: ffff8880353caec0 RDI: 0000400000003000 [ 1174.945459][T22172] RBP: 0000400000000140 R08: 0000000000000000 R09: ffffed1006a797fb [ 1174.945476][T22172] R10: 0000000000000006 R11: 0000000000000000 R12: ffff8880353c8000 [ 1174.945497][T22172] R13: 000040000000411f R14: 00007ffffffff000 R15: 0000000000000000 [ 1174.945531][T22172] _copy_to_user+0xbb/0xd0 [ 1174.945563][T22172] dma_heap_ioctl+0x3da/0x6a0 [ 1174.945603][T22172] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1174.945656][T22172] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1174.945692][T22172] __x64_sys_ioctl+0x190/0x200 [ 1174.945725][T22172] do_syscall_64+0xcd/0x250 [ 1174.945757][T22172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.945790][T22172] RIP: 0033:0x7f3efa58d169 [ 1174.945811][T22172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.945835][T22172] RSP: 002b:00007f3efb401038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.945858][T22172] RAX: ffffffffffffffda RBX: 00007f3efa7a6080 RCX: 00007f3efa58d169 [ 1174.945875][T22172] RDX: 0000400000000140 RSI: ffffffffffdffe00 RDI: 000000000000000d [ 1174.945891][T22172] RBP: 00007f3efa60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.945907][T22172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.945922][T22172] R13: 0000000000000000 R14: 00007f3efa7a6080 R15: 00007ffd5955bdd8 [ 1174.945956][T22172] [ 1175.573670][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1175.813843][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1175.819998][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1175.820017][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 1177.655871][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.662268][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.876200][T22228] busy [ 1179.652433][T22222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1179.659614][T22222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1179.665894][T22222] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1179.672380][T22222] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1181.333846][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1181.733926][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1181.733949][ T5833] Bluetooth: hci0: command 0x040f tx timeout [ 1181.739964][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1182.025794][T22273] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1182.046123][T22273] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1182.071382][T22273] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1182.098243][T22273] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1183.128920][T22312] ovs_: entered promiscuous mode [ 1183.404868][T22314] Invalid ELF header magic: != ELF [ 1183.559067][ T29] audit: type=1800 audit(8277293045.970:9): pid=22317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3903" name="discovery_nqn" dev="configfs" ino=66878 res=0 errno=0 [ 1183.653648][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1184.053652][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1184.059814][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1184.133756][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1185.437032][T22332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1185.443298][T22332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1185.483274][T22332] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1185.506332][T22332] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1186.204683][T12329] Process accounting resumed [ 1186.773731][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1187.368503][T22368] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1187.403816][T22368] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1187.423429][T22368] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1187.441715][T22368] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1189.413793][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1189.500290][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1189.500315][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1189.684899][T22400] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1189.691255][T22400] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1189.708104][T22400] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1189.723445][T22400] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1189.832233][T22414] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(3) [ 1190.211101][T22425] FAULT_INJECTION: forcing a failure. [ 1190.211101][T22425] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.269052][T22425] CPU: 0 UID: 0 PID: 22425 Comm: syz.2.3932 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1190.269091][T22425] Tainted: [U]=USER [ 1190.269099][T22425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1190.269113][T22425] Call Trace: [ 1190.269121][T22425] [ 1190.269130][T22425] dump_stack_lvl+0x16c/0x1f0 [ 1190.269164][T22425] should_fail_ex+0x50a/0x650 [ 1190.269198][T22425] ? fs_reclaim_acquire+0xae/0x150 [ 1190.269229][T22425] ? tomoyo_realpath_from_path+0xb9/0x720 [ 1190.269259][T22425] should_failslab+0xc2/0x120 [ 1190.269286][T22425] __kmalloc_noprof+0xcb/0x510 [ 1190.269319][T22425] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1190.269357][T22425] tomoyo_realpath_from_path+0xb9/0x720 [ 1190.269386][T22425] ? tomoyo_path_number_perm+0x235/0x590 [ 1190.269415][T22425] ? tomoyo_path_number_perm+0x235/0x590 [ 1190.269446][T22425] tomoyo_path_number_perm+0x248/0x590 [ 1190.269471][T22425] ? tomoyo_path_number_perm+0x235/0x590 [ 1190.269501][T22425] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1190.269559][T22425] ? __pfx_lock_release+0x10/0x10 [ 1190.269588][T22425] ? trace_lock_acquire+0x14e/0x1f0 [ 1190.269618][T22425] ? lock_acquire+0x2f/0xb0 [ 1190.269646][T22425] ? __fget_files+0x40/0x3a0 [ 1190.269680][T22425] ? __fget_files+0x206/0x3a0 [ 1190.269715][T22425] security_file_ioctl+0x9b/0x240 [ 1190.269746][T22425] __x64_sys_ioctl+0xb7/0x200 [ 1190.269777][T22425] do_syscall_64+0xcd/0x250 [ 1190.269809][T22425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.269840][T22425] RIP: 0033:0x7f4115d8d169 [ 1190.269859][T22425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1190.269882][T22425] RSP: 002b:00007f4116b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1190.269904][T22425] RAX: ffffffffffffffda RBX: 00007f4115fa5fa0 RCX: 00007f4115d8d169 [ 1190.269921][T22425] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000003 [ 1190.269941][T22425] RBP: 00007f4116b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.269955][T22425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.269970][T22425] R13: 0000000000000000 R14: 00007f4115fa5fa0 R15: 00007fff63475768 [ 1190.270001][T22425] [ 1190.536257][T22425] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1191.013721][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1191.733646][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1191.739857][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1191.746110][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1192.593138][T22441] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1192.634189][T22441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1192.693837][T22441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1192.710325][T22441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1194.143554][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1194.530475][T22472] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1194.593905][T22472] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1194.703740][T22472] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1194.728612][T22472] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1196.213827][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1196.226019][T22494] busy [ 1196.693744][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1196.773672][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1196.779505][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1198.189859][T22525] ovs_: entered promiscuous mode [ 1198.452229][T22527] Invalid ELF header magic: != ELF [ 1198.674134][T22522] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1198.674319][T22522] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1198.674445][T22522] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1198.674560][T22522] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1199.445158][T22542] busy [ 1199.702160][T12329] Process accounting resumed [ 1200.293739][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1200.695775][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1200.695809][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1200.702071][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1202.144357][T22583] busy [ 1202.607847][T22588] ovs_: entered promiscuous mode [ 1202.760722][T22590] busy [ 1202.786671][T22595] Invalid ELF header magic: != ELF [ 1203.707618][T22608] FAULT_INJECTION: forcing a failure. [ 1203.707618][T22608] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.748826][T22608] CPU: 1 UID: 0 PID: 22608 Comm: syz.0.3977 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1203.748867][T22608] Tainted: [U]=USER [ 1203.748876][T22608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1203.748891][T22608] Call Trace: [ 1203.748899][T22608] [ 1203.748910][T22608] dump_stack_lvl+0x16c/0x1f0 [ 1203.748947][T22608] should_fail_ex+0x50a/0x650 [ 1203.748990][T22608] should_failslab+0xc2/0x120 [ 1203.749015][T22608] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1203.749051][T22608] ? skb_clone+0x190/0x3f0 [ 1203.749092][T22608] skb_clone+0x190/0x3f0 [ 1203.749127][T22608] netlink_deliver_tap+0xabd/0xd30 [ 1203.749167][T22608] netlink_unicast+0x6b4/0x7f0 [ 1203.749203][T22608] ? __pfx_netlink_unicast+0x10/0x10 [ 1203.749248][T22608] ctrl_getfamily+0x40b/0x540 [ 1203.749286][T22608] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1203.749324][T22608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1203.749361][T22608] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1203.749407][T22608] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1203.749455][T22608] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1203.749492][T22608] ? __pfx___mutex_lock+0x10/0x10 [ 1203.749523][T22608] ? genl_get_cmd+0x195/0x580 [ 1203.749570][T22608] ? __radix_tree_lookup+0x21f/0x2c0 [ 1203.749605][T22608] genl_rcv_msg+0x565/0x800 [ 1203.749645][T22608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1203.749681][T22608] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1203.749731][T22608] netlink_rcv_skb+0x16b/0x440 [ 1203.749763][T22608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1203.749800][T22608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1203.749854][T22608] ? down_read+0xc9/0x330 [ 1203.749885][T22608] ? __pfx_down_read+0x10/0x10 [ 1203.749918][T22608] ? netlink_deliver_tap+0x1ae/0xd30 [ 1203.749954][T22608] genl_rcv+0x28/0x40 [ 1203.749984][T22608] netlink_unicast+0x53c/0x7f0 [ 1203.750021][T22608] ? __pfx_netlink_unicast+0x10/0x10 [ 1203.750054][T22608] ? __phys_addr_symbol+0x30/0x80 [ 1203.750080][T22608] ? __check_object_size+0x488/0x710 [ 1203.750110][T22608] netlink_sendmsg+0x8b8/0xd70 [ 1203.750149][T22608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1203.750195][T22608] __sys_sendto+0x488/0x4f0 [ 1203.750228][T22608] ? __pfx___sys_sendto+0x10/0x10 [ 1203.750256][T22608] ? reacquire_held_locks+0x20b/0x4c0 [ 1203.750290][T22608] ? do_user_addr_fault+0xdc7/0x13f0 [ 1203.750364][T22608] __x64_sys_sendto+0xe0/0x1c0 [ 1203.750394][T22608] ? do_syscall_64+0x91/0x250 [ 1203.750424][T22608] ? lockdep_hardirqs_on+0x7c/0x110 [ 1203.750461][T22608] do_syscall_64+0xcd/0x250 [ 1203.750496][T22608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.750530][T22608] RIP: 0033:0x7f12a398effc [ 1203.750552][T22608] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1203.750576][T22608] RSP: 002b:00007f12a17f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1203.750601][T22608] RAX: ffffffffffffffda RBX: 00007f12a17f4fc0 RCX: 00007f12a398effc [ 1203.750618][T22608] RDX: 0000000000000024 RSI: 00007f12a17f5010 RDI: 0000000000000006 [ 1203.750635][T22608] RBP: 0000000000000000 R08: 00007f12a17f4f14 R09: 000000000000000c [ 1203.750650][T22608] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 1203.750665][T22608] R13: 00007f12a17f4f68 R14: 00007f12a17f5010 R15: 0000000000000000 [ 1203.750698][T22608] [ 1204.078766][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.906474][T22655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1207.974030][T22655] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1207.980930][T22655] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1207.988156][T22655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1208.326097][T22674] busy [ 1209.231732][T22693] busy [ 1209.413705][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1209.726542][T22705] ovs_: entered promiscuous mode [ 1209.829582][T22707] openvswitch: ovs_: Dropping previously announced user features [ 1209.911359][T22708] Invalid ELF header magic: != ELF [ 1210.026089][T22710] Invalid ELF header magic: != ELF [ 1210.053695][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1210.060715][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 1210.067498][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1210.535646][T22714] busy [ 1211.240298][T22731] GUP no longer grows the stack in syz.0.4010 (22731): 14000-401000 (4000) [ 1211.266356][T22731] CPU: 0 UID: 0 PID: 22731 Comm: syz.0.4010 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1211.266399][T22731] Tainted: [U]=USER [ 1211.266407][T22731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1211.266422][T22731] Call Trace: [ 1211.266431][T22731] [ 1211.266441][T22731] dump_stack_lvl+0x16c/0x1f0 [ 1211.266480][T22731] gup_vma_lookup+0x1d2/0x220 [ 1211.266517][T22731] __get_user_pages+0x236/0x36f0 [ 1211.266562][T22731] ? hlock_class+0x4e/0x130 [ 1211.266585][T22731] ? __lock_acquire+0x15a9/0x3c40 [ 1211.266643][T22731] ? __pfx___get_user_pages+0x10/0x10 [ 1211.266692][T22731] __gup_longterm_locked+0x212/0x1870 [ 1211.266728][T22731] ? __pfx___lock_acquire+0x10/0x10 [ 1211.266769][T22731] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1211.266805][T22731] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1211.266840][T22731] ? rwsem_read_trylock+0x12d/0x250 [ 1211.266877][T22731] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 1211.266912][T22731] ? process_vm_rw_core.constprop.0+0x3ff/0x9c0 [ 1211.266944][T22731] pin_user_pages_remote+0xee/0x150 [ 1211.266998][T22731] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1211.267034][T22731] ? down_read+0xc9/0x330 [ 1211.267079][T22731] process_vm_rw_core.constprop.0+0x42b/0x9c0 [ 1211.267113][T22731] ? futex_wait_queue+0x103/0x1f0 [ 1211.267155][T22731] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 1211.267210][T22731] process_vm_rw+0x301/0x360 [ 1211.267238][T22731] ? __pfx_process_vm_rw+0x10/0x10 [ 1211.267305][T22731] ? xfd_validate_state+0x5d/0x180 [ 1211.267339][T22731] ? rcu_is_watching+0x12/0xc0 [ 1211.267369][T22731] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 1211.267396][T22731] ? do_syscall_64+0x91/0x250 [ 1211.267427][T22731] ? lockdep_hardirqs_on+0x7c/0x110 [ 1211.267456][T22731] do_syscall_64+0xcd/0x250 [ 1211.267489][T22731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.267522][T22731] RIP: 0033:0x7f12a398d169 [ 1211.267543][T22731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.267567][T22731] RSP: 002b:00007f12a17f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1211.267592][T22731] RAX: ffffffffffffffda RBX: 00007f12a3ba5fa0 RCX: 00007f12a398d169 [ 1211.267609][T22731] RDX: 0000000000000004 RSI: 0000400000000040 RDI: 00000000000005da [ 1211.267625][T22731] RBP: 00007f12a3a0e2a0 R08: 0000000000000003 R09: 0000000000000000 [ 1211.267642][T22731] R10: 00004000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1211.267658][T22731] R13: 0000000000000000 R14: 00007f12a3ba5fa0 R15: 00007ffcd32e4bb8 [ 1211.267692][T22731] [ 1211.528612][ C0] vkms_vblank_simulate: vblank timer overrun [ 1212.009694][T22740] busy [ 1212.324417][T22760] openvswitch: ovs_: Dropping previously announced user features [ 1212.501775][T22764] Invalid ELF header magic: != ELF [ 1213.929679][T22786] busy [ 1214.688989][T22822] openvswitch: ovs_: Dropping previously announced user features [ 1214.876660][T22829] Invalid ELF header magic: != ELF [ 1216.347621][T22857] busy [ 1218.002684][T22882] openvswitch: ovs_: Dropping previously announced user features [ 1218.183598][T22890] Invalid ELF header magic: != ELF [ 1219.351148][T22904] busy [ 1221.801255][T22939] openvswitch: ovs_: Dropping previously announced user features [ 1222.043187][T22943] Invalid ELF header magic: != ELF [ 1223.698548][T22965] openvswitch: ovs_: Dropping previously announced user features [ 1223.988048][T22967] Invalid ELF header magic: != ELF [ 1225.275304][T22995] openvswitch: ovs_: Dropping previously announced user features [ 1225.455805][T23001] Invalid ELF header magic: != ELF [ 1225.992497][T22982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1226.026389][T22982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1226.114487][T22982] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1226.286945][T22982] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1227.573778][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1227.928313][T23029] openvswitch: ovs_: Dropping previously announced user features [ 1228.053670][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1228.113195][T23032] Invalid ELF header magic: != ELF [ 1228.133643][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1228.303851][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1229.282337][T23048] openvswitch: ovs_: Dropping previously announced user features [ 1229.520820][T23051] Invalid ELF header magic: != ELF [ 1233.093255][T23105] openvswitch: ovs_: Dropping previously announced user features [ 1233.631596][T23107] Invalid ELF header magic: != ELF [ 1234.204655][T23116] openvswitch: ovs_: Dropping previously announced user features [ 1234.369448][T23123] Invalid ELF header magic: != ELF [ 1235.122045][T23136] FAULT_INJECTION: forcing a failure. [ 1235.122045][T23136] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.272931][T23136] CPU: 0 UID: 0 PID: 23136 Comm: syz.2.4113 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1235.272974][T23136] Tainted: [U]=USER [ 1235.272981][T23136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1235.272996][T23136] Call Trace: [ 1235.273003][T23136] [ 1235.273013][T23136] dump_stack_lvl+0x16c/0x1f0 [ 1235.273047][T23136] should_fail_ex+0x50a/0x650 [ 1235.273081][T23136] ? fs_reclaim_acquire+0xae/0x150 [ 1235.273112][T23136] ? tomoyo_encode2+0x100/0x3e0 [ 1235.273140][T23136] should_failslab+0xc2/0x120 [ 1235.273163][T23136] __kmalloc_noprof+0xcb/0x510 [ 1235.273194][T23136] ? d_absolute_path+0x137/0x1b0 [ 1235.273226][T23136] tomoyo_encode2+0x100/0x3e0 [ 1235.273259][T23136] tomoyo_encode+0x29/0x50 [ 1235.273287][T23136] tomoyo_realpath_from_path+0x19d/0x720 [ 1235.273327][T23136] tomoyo_get_exe+0x63/0xa0 [ 1235.273349][T23136] tomoyo_write_control+0x67c/0x13e0 [ 1235.273394][T23136] ? rcu_is_watching+0x12/0xc0 [ 1235.273420][T23136] ? __pfx_tomoyo_write_control+0x10/0x10 [ 1235.273456][T23136] ? ksys_write+0x12b/0x250 [ 1235.273490][T23136] ? __pfx_tomoyo_write+0x10/0x10 [ 1235.273517][T23136] vfs_write+0x24c/0x1150 [ 1235.273548][T23136] ? __fget_files+0x1fc/0x3a0 [ 1235.273580][T23136] ? __pfx___mutex_lock+0x10/0x10 [ 1235.273616][T23136] ? __pfx_vfs_write+0x10/0x10 [ 1235.273657][T23136] ? __fget_files+0x206/0x3a0 [ 1235.273699][T23136] ksys_write+0x12b/0x250 [ 1235.273728][T23136] ? __pfx_ksys_write+0x10/0x10 [ 1235.273770][T23136] do_syscall_64+0xcd/0x250 [ 1235.273801][T23136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.273831][T23136] RIP: 0033:0x7f4115d8d169 [ 1235.273851][T23136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1235.273874][T23136] RSP: 002b:00007f4116b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1235.273897][T23136] RAX: ffffffffffffffda RBX: 00007f4115fa5fa0 RCX: 00007f4115d8d169 [ 1235.273913][T23136] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1235.273927][T23136] RBP: 00007f4116b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.273942][T23136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1235.273957][T23136] R13: 0000000000000000 R14: 00007f4115fa5fa0 R15: 00007fff63475768 [ 1235.273990][T23136] [ 1235.504312][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.723629][T23136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1236.252434][T23149] openvswitch: ovs_: Dropping previously announced user features [ 1236.390655][T23151] Invalid ELF header magic: != ELF [ 1239.103924][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.120509][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.324624][T23193] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1241.018417][T23205] openvswitch: ovs_: Dropping previously announced user features [ 1241.217802][T23205] Invalid ELF header magic: != ELF [ 1241.357688][T23192] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1241.392418][T23192] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1241.418692][T23192] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1241.458449][T23192] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1242.113161][T23222] busy [ 1243.333608][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1243.423545][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1243.493658][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1243.493668][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1243.910387][T23240] openvswitch: ovs_: Dropping previously announced user features [ 1244.219296][T23247] Invalid ELF header magic: != ELF [ 1244.949593][T23246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1245.000433][T23246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1245.033430][T23246] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1245.109773][T23246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1245.834309][T23268] busy [ 1246.437754][T23275] openvswitch: ovs_: Dropping previously announced user features [ 1246.693773][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1247.019344][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1247.093648][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1247.173707][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1247.265014][T23282] Invalid ELF header magic: != ELF [ 1248.577260][T23307] busy [ 1250.190707][T23338] openvswitch: ovs_: Dropping previously announced user features [ 1250.466410][T23344] Invalid ELF header magic: != ELF [ 1250.678778][T23329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1250.712549][T23329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1250.753565][T23329] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1250.790289][T23329] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1251.230552][T23357] busy [ 1252.215289][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1252.773704][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1252.779815][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1252.863762][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1253.383633][T23367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1253.419244][T23367] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1253.439679][T23399] openvswitch: ovs_: Dropping previously announced user features [ 1253.474680][T23367] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1253.512867][T23367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1253.618164][T23402] Invalid ELF header magic: != ELF [ 1253.674822][T23405] openvswitch: ovs_: Dropping previously announced user features [ 1253.803237][T23406] Invalid ELF header magic: != ELF [ 1253.887676][T23408] openvswitch: ovs_: Dropping previously announced user features [ 1253.930646][T23410] openvswitch: ovs_: Dropping previously announced user features [ 1254.242111][T23412] Invalid ELF header magic: != ELF [ 1254.278759][T23411] Invalid ELF header magic: != ELF [ 1254.778864][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1255.413653][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1255.494117][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1255.583663][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1256.171691][T23437] busy [ 1257.145985][T23456] openvswitch: ovs_: Dropping previously announced user features [ 1257.364185][T23458] Invalid ELF header magic: != ELF [ 1257.909230][T23450] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1257.959796][T23450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1258.019015][T23450] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1258.045167][T23450] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1258.694196][T23477] openvswitch: ovs_: Dropping previously announced user features [ 1258.995095][T23481] Invalid ELF header magic: != ELF [ 1259.147630][T23486] busy [ 1259.493643][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1259.743366][T23500] openvswitch: ovs_: Dropping previously announced user features [ 1259.910393][T23504] Invalid ELF header magic: != ELF [ 1259.918504][T23505] openvswitch: ovs_: Dropping previously announced user features [ 1259.983929][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1260.053639][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1260.053963][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1260.368835][T23509] Invalid ELF header magic: != ELF [ 1261.215889][T23508] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1261.233768][T23508] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1261.239908][T23508] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1261.320217][T23508] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1262.230706][T23535] busy [ 1263.013607][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1263.104307][T23552] openvswitch: ovs_: Dropping previously announced user features [ 1263.253680][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1263.254101][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1263.333770][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1263.416982][T23553] Invalid ELF header magic: != ELF [ 1263.864204][T23563] openvswitch: ovs_: Dropping previously announced user features [ 1263.987488][T23565] Invalid ELF header magic: != ELF [ 1264.811819][T23576] openvswitch: ovs_: Dropping previously announced user features [ 1265.125509][T23580] Invalid ELF header magic: != ELF [ 1265.459493][T23588] busy [ 1266.886856][T23606] openvswitch: ovs_: Dropping previously announced user features [ 1267.124274][T23610] Invalid ELF header magic: != ELF [ 1267.378656][T23614] openvswitch: ovs_: Dropping previously announced user features [ 1267.544670][T23617] Invalid ELF header magic: != ELF [ 1268.285731][T23629] busy [ 1268.361868][T23632] openvswitch: ovs_: Dropping previously announced user features [ 1268.510082][T23633] Invalid ELF header magic: != ELF [ 1272.279124][T23670] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1272.286022][T23670] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1272.301219][T23670] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1272.321268][T23670] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1273.973762][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1274.289096][T23701] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1274.294218][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1274.373611][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1274.373725][T23701] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1274.379764][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1274.459845][T23701] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1274.513804][T23701] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1276.053661][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1276.453624][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1276.533583][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1276.539672][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1278.163283][T23760] openvswitch: ovs_: Dropping previously announced user features [ 1278.371119][T23765] Invalid ELF header magic: != ELF [ 1278.748908][T23755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1278.769152][T23755] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1278.802755][T23755] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1278.832771][T23755] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1280.544540][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1280.784765][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1280.855594][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1280.855609][ T5833] Bluetooth: hci4: command 0x040f tx timeout [ 1281.573959][T23789] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1281.612828][T23789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1281.620136][T23789] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1281.628557][T23789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1281.638529][T23815] openvswitch: ovs_: Dropping previously announced user features [ 1281.773057][T23816] Invalid ELF header magic: != ELF [ 1283.183637][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1283.653680][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1283.656155][ T5833] Bluetooth: hci4: command 0x040f tx timeout [ 1283.656625][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1283.872766][T23854] openvswitch: ovs_: Dropping previously announced user features [ 1284.064043][T23857] Invalid ELF header magic: != ELF [ 1284.541599][T23843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1284.560983][T23843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1284.580627][T23843] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1284.595333][T23843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1284.921092][T23870] openvswitch: ovs_: Dropping previously announced user features [ 1285.062822][T23874] Invalid ELF header magic: != ELF [ 1285.461895][T23859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1285.501214][T23859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1285.541653][T23859] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1285.578433][T23859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1287.310408][T23901] busy [ 1287.442256][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1287.573561][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1287.580767][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1287.653540][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1287.801798][T23909] busy [ 1288.104764][T23914] openvswitch: ovs_: Dropping previously announced user features [ 1290.982687][T23954] openvswitch: ovs_: Dropping previously announced user features [ 1291.057241][T23926] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1291.081543][T23926] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1291.105052][T23926] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1291.154050][T23926] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1291.220773][T23958] Invalid ELF header magic: != ELF [ 1291.999239][T23970] busy [ 1292.533709][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1293.185375][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1293.191464][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1293.198248][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1294.477085][T24010] openvswitch: ovs_: Dropping previously announced user features [ 1294.683356][T24014] Invalid ELF header magic: != ELF [ 1295.477903][T24012] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1295.491202][T24030] openvswitch: ovs_: Dropping previously announced user features [ 1295.516519][T24012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1295.540557][T24012] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1295.565312][T24012] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1295.631677][T24032] Invalid ELF header magic: != ELF [ 1296.147327][T24039] busy [ 1297.035951][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1297.579602][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1297.583627][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1297.585779][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1297.742810][T24066] busy [ 1298.015160][T24075] openvswitch: ovs_: Dropping previously announced user features [ 1298.266541][T24076] Invalid ELF header magic: != ELF [ 1299.418345][T24090] busy [ 1300.011645][T24102] busy [ 1300.537073][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.543657][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.829369][T24111] busy [ 1302.375744][T24123] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1302.381863][T24123] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1302.425149][T24123] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1302.440237][T24123] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1302.976013][T24151] openvswitch: ovs_: Dropping previously announced user features [ 1303.517427][T24157] Invalid ELF header magic: != ELF [ 1303.823828][T23849] Bluetooth: hci1: command 0x0c1a tx timeout [ 1304.269040][T24167] busy [ 1304.463863][T23849] Bluetooth: hci0: command 0x040f tx timeout [ 1304.469993][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1304.470016][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1304.822853][T24179] busy [ 1306.158600][T24172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1306.179976][T24172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1306.200070][T24172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1306.287788][T24172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1306.792976][T24208] openvswitch: ovs_: Dropping previously announced user features [ 1307.062736][T24211] Invalid ELF header magic: != ELF [ 1307.093672][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1308.213806][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1308.220033][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1308.293611][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1308.700137][T24236] openvswitch: ovs_: Dropping previously announced user features [ 1308.856656][T24239] Invalid ELF header magic: != ELF [ 1310.553206][T24243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1310.603724][T24243] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1310.609831][T24243] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1310.639941][T24243] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1310.753003][T24259] busy [ 1311.857663][T24279] openvswitch: ovs_: Dropping previously announced user features [ 1311.998741][T24283] Invalid ELF header magic: != ELF [ 1312.133611][T23849] Bluetooth: hci1: command 0x0c1a tx timeout [ 1312.693628][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1312.704009][T23849] Bluetooth: hci0: command 0x040f tx timeout [ 1312.705155][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1312.802647][T24295] openvswitch: ovs_: Dropping previously announced user features [ 1312.956282][T24269] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1312.962424][T24269] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1312.998377][T24269] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1313.118087][T24269] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1313.167543][T24298] Invalid ELF header magic: != ELF [ 1314.533581][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1315.013664][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1315.013675][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1315.173552][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1315.403236][T24307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1315.432945][T24307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1315.457317][T24307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1315.473500][T24307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1316.386104][T24327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1316.394533][T24327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1316.407511][T24327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1316.423802][T24327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1316.587443][T24340] openvswitch: ovs_: Dropping previously announced user features [ 1316.749268][T24345] Invalid ELF header magic: != ELF [ 1318.059666][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 1318.454295][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1318.460518][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1318.463534][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1318.713368][T24366] openvswitch: ovs_: Dropping previously announced user features [ 1319.069358][T24370] Invalid ELF header magic: != ELF [ 1320.324227][T24362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1320.377064][T24362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1320.434708][T24362] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1320.471869][T24362] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1320.511049][T24386] openvswitch: ovs_: Dropping previously announced user features [ 1320.823113][T24386] Invalid ELF header magic: != ELF [ 1320.872567][T24393] openvswitch: ovs_: Dropping previously announced user features [ 1321.098661][T24399] Invalid ELF header magic: != ELF [ 1321.813548][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1322.384399][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1322.453673][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1322.459809][T23849] Bluetooth: hci4: command 0x040f tx timeout [ 1325.279239][T24437] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1325.358095][T24437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1325.401553][T24437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1325.477909][T24437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1325.762655][T24464] openvswitch: ovs_: Dropping previously announced user features [ 1326.205199][T24465] Invalid ELF header magic: != ELF [ 1326.854641][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1327.413664][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1327.419959][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1327.493666][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1328.317279][T24500] busy [ 1329.584792][T24501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1329.591463][T24501] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1329.609740][T24501] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1329.620406][T24501] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1330.255310][T24537] openvswitch: ovs_: Dropping previously announced user features [ 1330.574181][T24542] Invalid ELF header magic: != ELF [ 1331.093616][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1331.653711][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1331.654092][T23849] Bluetooth: hci4: command 0x040f tx timeout [ 1331.659757][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1332.473081][T24566] busy [ 1333.112045][T24584] busy [ 1334.658987][T24606] openvswitch: ovs_: Dropping previously announced user features [ 1334.715755][T24596] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1334.722330][T24596] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1334.730656][T24596] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1334.737039][T24596] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1334.908019][T24609] Invalid ELF header magic: != ELF [ 1335.963835][T24613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1335.970016][T24613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1336.017719][T24613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1336.029674][T24613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1336.114253][T24633] openvswitch: ovs_: Dropping previously announced user features [ 1336.458857][T24636] Invalid ELF header magic: != ELF [ 1337.653694][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1337.973627][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1338.063751][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1338.070031][T23849] Bluetooth: hci4: command 0x040f tx timeout [ 1339.115646][T24651] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1339.123674][T24651] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1339.140829][T24651] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1339.166821][T24651] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1339.896534][T24655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1339.921423][T24655] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1339.947357][T24655] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1339.972842][T24655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1340.188335][T24687] openvswitch: ovs_: Dropping previously announced user features [ 1340.234565][T24687] Invalid ELF header magic: != ELF [ 1340.346791][T24689] openvswitch: ovs_: Dropping previously announced user features [ 1340.428711][T24692] busy [ 1340.619814][T24689] Invalid ELF header magic: != ELF [ 1341.423494][T18948] Bluetooth: hci1: command 0x0c1a tx timeout [ 1341.973697][T23849] Bluetooth: hci4: command 0x040f tx timeout [ 1341.973705][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1341.986330][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1343.420401][T24734] openvswitch: ovs_: Dropping previously announced user features [ 1343.537290][T24736] Invalid ELF header magic: != ELF [ 1345.247877][T24729] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1345.263661][T24729] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1345.269832][T24729] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1345.313744][T24729] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1345.910741][T24773] openvswitch: ovs_: Dropping previously announced user features [ 1346.032683][T24773] Invalid ELF header magic: != ELF [ 1346.201869][T23849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1346.215360][T23849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1346.224643][T23849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1346.242116][T23849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1346.252030][T23849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1346.267416][T23849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1346.763592][ T70] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.114726][ T70] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.342522][T23849] Bluetooth: hci0: command 0x040f tx timeout [ 1347.348710][T23849] Bluetooth: hci4: command 0x040f tx timeout [ 1347.354895][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1347.395732][ T70] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.558385][ T70] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.584994][T24778] chnl_net:caif_netlink_parms(): no params data found [ 1347.939522][T24778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.957593][T24778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.970606][T24778] bridge_slave_0: entered allmulticast mode [ 1347.982103][T24778] bridge_slave_0: entered promiscuous mode [ 1348.053633][T24778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.070602][T24778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.081291][T24778] bridge_slave_1: entered allmulticast mode [ 1348.096713][T24778] bridge_slave_1: entered promiscuous mode [ 1348.186203][T24778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.196755][ T70] bridge_slave_1: left allmulticast mode [ 1348.202444][ T70] bridge_slave_1: left promiscuous mode [ 1348.210807][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.222763][ T70] bridge_slave_0: left allmulticast mode [ 1348.229072][ T70] bridge_slave_0: left promiscuous mode [ 1348.238039][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.380197][T23849] Bluetooth: hci1: command tx timeout [ 1349.487801][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.633086][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.675413][ T70] bond0 (unregistering): Released all slaves [ 1349.740414][T24778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.034665][T24809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1350.062781][T24809] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1350.081964][T24778] team0: Port device team_slave_0 added [ 1350.103959][ T70] ovs_: left promiscuous mode [ 1350.121626][T24809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1350.145107][T24809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1350.145932][T24778] team0: Port device team_slave_1 added [ 1350.156894][T24809] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1350.323852][T24809] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1350.324214][T24830] openvswitch: ovs_: Dropping previously announced user features [ 1350.562569][T24830] Invalid ELF header magic: != ELF [ 1350.581208][T24778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.603609][T24778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.662597][T24778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.695725][T24778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.702718][T24778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.815932][T24778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.043759][T24842] openvswitch: ovs_: Dropping previously announced user features [ 1351.322291][T24842] Invalid ELF header magic: != ELF [ 1351.422174][T24778] hsr_slave_0: entered promiscuous mode [ 1351.461955][T24778] hsr_slave_1: entered promiscuous mode [ 1351.509551][T24778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1351.545463][T24778] Cannot create hsr debugfs directory [ 1352.054002][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1352.133725][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1352.140024][T23849] Bluetooth: hci0: command 0x040f tx timeout [ 1352.202853][ T70] hsr_slave_0: left promiscuous mode [ 1352.214130][T23849] Bluetooth: hci1: command 0x040f tx timeout [ 1352.226013][ T70] hsr_slave_1: left promiscuous mode [ 1352.235960][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1352.253644][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1352.261764][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1352.275343][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.317544][ T70] veth1_macvtap: left promiscuous mode [ 1352.323137][ T70] veth0_macvtap: left promiscuous mode [ 1352.337008][ T70] veth1_vlan: left promiscuous mode [ 1352.342459][ T70] veth0_vlan: left promiscuous mode [ 1353.617088][T24862] busy [ 1354.293807][T23849] Bluetooth: hci1: command 0x040f tx timeout [ 1354.632345][ T70] team0 (unregistering): Port device team_slave_1 removed [ 1354.895305][ T70] team0 (unregistering): Port device team_slave_0 removed [ 1355.884848][T24895] busy [ 1356.088670][T24901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4547'. [ 1356.365036][T24900] Invalid ELF header magic: != ELF [ 1356.373551][T23849] Bluetooth: hci1: command 0x040f tx timeout [ 1358.157580][T24778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1358.192471][T24778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1358.204298][T24778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1358.238180][T24778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1358.399080][T24778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.446358][T24778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.453728][T23849] Bluetooth: hci1: command 0x040f tx timeout [ 1358.476630][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.483809][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1358.517528][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.524832][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1358.856684][T24778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1358.969726][T24778] veth0_vlan: entered promiscuous mode [ 1359.006532][T24778] veth1_vlan: entered promiscuous mode [ 1359.030761][T24962] busy [ 1359.056669][T24778] veth0_macvtap: entered promiscuous mode [ 1359.083069][T24778] veth1_macvtap: entered promiscuous mode [ 1359.121931][T24778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.139647][T24778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.150800][T24778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.193851][T24778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.213991][T24778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.246745][T24778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.271214][T24778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1359.383180][T24972] Invalid ELF header magic: != ELF [ 1359.762916][T24968] openvswitch: ovs_: Dropping previously announced user features [ 1359.779834][T24778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1359.792629][T24778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.803102][T24778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1359.814031][T24778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.824325][T24778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1359.834931][T24778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.851866][T24778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1359.863055][T24778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.872286][T24778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.881516][T24778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.893738][T24778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.030003][ T5034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.062377][ T5034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.128422][ T5034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.158871][ T5034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.360798][T25001] ovs_: entered promiscuous mode [ 1360.533660][T23849] Bluetooth: hci1: command 0x040f tx timeout [ 1360.764883][T25001] Invalid ELF header magic: != ELF [ 1361.976436][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.984163][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.484714][T25017] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1362.510599][T25017] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1362.569689][T25017] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1362.607726][T25017] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1362.979265][T25043] openvswitch: ovs_: Dropping previously announced user features [ 1363.586863][T25043] Invalid ELF header magic: != ELF [ 1363.776044][T25055] openvswitch: ovs_: Dropping previously announced user features [ 1363.829851][T25055] Invalid ELF header magic: != ELF [ 1363.902477][T25057] busy [ 1363.931448][T25061] openvswitch: ovs_: Dropping previously announced user features [ 1364.020511][T25061] Invalid ELF header magic: != ELF [ 1364.133556][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1364.535863][T23849] Bluetooth: hci4: command 0x040f tx timeout [ 1364.618983][ T5829] Bluetooth: hci1: command 0x040f tx timeout [ 1364.625255][T23849] Bluetooth: hci0: command 0x040f tx timeout [ 1364.735739][T25075] busy [ 1365.894671][T25099] openvswitch: ovs_: Dropping previously announced user features [ 1365.912632][T25101] openvswitch: ovs_: Dropping previously announced user features [ 1365.959019][T25101] Invalid ELF header magic: != ELF [ 1365.998385][T25099] Invalid ELF header magic: != ELF [ 1366.501042][T25106] openvswitch: ovs_: Dropping previously announced user features [ 1366.741137][T25106] Invalid ELF header magic: != ELF [ 1368.294091][T25137] openvswitch: ovs_: Dropping previously announced user features [ 1368.652940][T25137] Invalid ELF header magic: != ELF [ 1370.015260][T25145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1370.099084][T25145] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1370.169279][T25145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1370.198593][T25145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1370.624546][T25176] openvswitch: ovs_: Dropping previously announced user features [ 1370.814021][T25176] Invalid ELF header magic: != ELF [ 1371.177753][T25185] openvswitch: ovs_: Dropping previously announced user features [ 1371.212723][T25185] Invalid ELF header magic: != ELF [ 1371.413646][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1371.974177][T25197] busy [ 1372.038197][T25201] openvswitch: ovs_: Dropping previously announced user features [ 1372.078775][T25201] Invalid ELF header magic: != ELF [ 1372.133570][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1372.215731][ T5829] Bluetooth: hci1: command 0x040f tx timeout [ 1372.219403][T23849] Bluetooth: hci0: command 0x040f tx timeout [ 1373.147713][T25204] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1373.163715][T25204] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1373.178261][T25204] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1373.193707][T25204] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1374.308528][T25224] openvswitch: ovs_: Dropping previously announced user features [ 1374.420497][T25224] Invalid ELF header magic: != ELF [ 1374.784846][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1375.173577][T23849] Bluetooth: hci4: command 0x040f tx timeout [ 1375.253978][T23849] Bluetooth: hci1: command 0x040f tx timeout [ 1375.260055][T23849] Bluetooth: hci0: command 0x040f tx timeout [ 1376.570412][T25241] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1376.588653][T25241] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1376.674984][T25241] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1376.794379][T25241] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1377.841912][T25279] openvswitch: ovs_: Dropping previously announced user features [ 1378.175101][T25285] openvswitch: ovs_: Dropping previously announced user features [ 1378.213650][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1378.534263][T25279] Invalid ELF header magic: != ELF [ 1378.613536][T23849] Bluetooth: hci4: command 0x040f tx timeout [ 1378.672858][T25285] Invalid ELF header magic: != ELF [ 1378.693549][T23849] Bluetooth: hci0: command 0x040f tx timeout [ 1378.766874][T25290] busy [ 1378.863483][T23849] Bluetooth: hci1: command 0x040f tx timeout [ 1379.111424][T25296] openvswitch: ovs_: Dropping previously announced user features [ 1379.189252][T25296] Invalid ELF header magic: != ELF [ 1379.796515][T25303] openvswitch: ovs_: Dropping previously announced user features [ 1379.924549][T25303] Invalid ELF header magic: != ELF [ 1380.473354][T25299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1380.479695][T25299] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1380.529108][T25299] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1380.568679][T25299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1381.294947][T25305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1381.301129][T25305] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1381.343621][T25305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1381.349755][T25305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1382.886461][T25336] openvswitch: ovs_: Dropping previously announced user features [ 1383.016346][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1383.333566][T23849] Bluetooth: hci4: command 0x040f tx timeout [ 1383.413542][T23849] Bluetooth: hci1: command 0x040f tx timeout [ 1383.414028][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1383.511074][T25336] Invalid ELF header magic: != ELF [ 1384.477308][T25347] busy [ 1384.567633][T25352] openvswitch: ovs_: Dropping previously announced user features [ 1384.769982][T25352] Invalid ELF header magic: != ELF [ 1386.031415][T25367] openvswitch: ovs_: Dropping previously announced user features [ 1386.346478][T25367] Invalid ELF header magic: != ELF [ 1386.822961][T25376] busy [ 1387.076760][T25381] openvswitch: ovs_: Dropping previously announced user features [ 1387.768278][T25381] Invalid ELF header magic: != ELF [ 1389.724113][T25417] openvswitch: ovs_: Dropping previously announced user features [ 1390.248988][T25417] Invalid ELF header magic: != ELF [ 1390.284394][T25394] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1390.309886][T25394] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1390.320485][T25394] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1390.326836][T25394] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1390.453557][T25425] busy [ 1390.666696][T25429] openvswitch: ovs_: Dropping previously announced user features [ 1390.721508][T25429] Invalid ELF header magic: != ELF [ 1391.493541][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 1392.373551][ T5829] Bluetooth: hci1: command 0x040f tx timeout [ 1392.374042][T23849] Bluetooth: hci0: command 0x040f tx timeout [ 1392.379607][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1392.454796][T25448] openvswitch: ovs_: Dropping previously announced user features [ 1392.504677][T25450] openvswitch: ovs_: Dropping previously announced user features [ 1392.591440][T25450] Invalid ELF header magic: != ELF [ 1392.600102][T25448] Invalid ELF header magic: != ELF [ 1393.703739][T25444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1393.709888][T25444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1393.781364][T25444] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1393.806503][T25444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1393.980092][T25471] openvswitch: ovs_: Dropping previously announced user features [ 1394.003786][T25473] openvswitch: ovs_: Dropping previously announced user features [ 1394.229809][T25476] openvswitch: ovs_: Dropping previously announced user features [ 1394.503692][T25476] Invalid ELF header magic: != ELF [ 1394.532624][T25473] Invalid ELF header magic: != ELF [ 1394.687843][T25471] Invalid ELF header magic: != ELF [ 1395.573512][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1395.733534][T23849] Bluetooth: hci4: command 0x040f tx timeout [ 1395.813542][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1395.819650][T23849] Bluetooth: hci1: command 0x040f tx timeout [ 1396.238448][T25501] openvswitch: ovs_: Dropping previously announced user features [ 1396.606040][T25492] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1396.612207][T25492] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1396.703658][T25492] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1396.743808][T25492] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1396.885113][T25501] Invalid ELF header magic: != ELF [ 1397.134051][T25514] busy [ 1397.882034][T25520] openvswitch: ovs_: Dropping previously announced user features [ 1398.009846][T25524] openvswitch: ovs_: Dropping previously announced user features [ 1398.031219][T25520] Invalid ELF header magic: != ELF [ 1398.133668][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1398.282176][T25524] Invalid ELF header magic: != ELF [ 1398.613553][T23849] Bluetooth: hci4: command 0x040f tx timeout [ 1398.774768][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1398.781193][T23849] Bluetooth: hci1: command 0x040f tx timeout [ 1398.980919][T25517] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1398.994124][T25517] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1399.000217][T25517] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1399.053652][T25517] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1400.682245][T25543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1400.720632][T25543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1400.764172][T25543] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1400.796213][T25543] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1400.839186][T25554] busy [ 1401.044596][T25560] openvswitch: ovs_: Dropping previously announced user features [ 1401.115868][T25562] openvswitch: ovs_: Dropping previously announced user features [ 1401.148754][T25560] Invalid ELF header magic: != ELF [ 1401.202431][T25565] openvswitch: ovs_: Dropping previously announced user features [ 1401.241471][T25562] Invalid ELF header magic: != ELF [ 1401.383339][T25565] Invalid ELF header magic: != ELF [ 1402.213671][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1402.371594][T25577] openvswitch: ovs_: Dropping previously announced user features [ 1402.569939][T25577] Invalid ELF header magic: != ELF [ 1402.773689][T18948] Bluetooth: hci0: command 0x040f tx timeout [ 1402.780098][T23849] Bluetooth: hci4: command 0x040f tx timeout [ 1402.853619][T18948] Bluetooth: hci1: command 0x040f tx timeout [ 1403.189854][T25573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1403.254043][T25573] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1403.263517][T25573] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1403.288017][T25573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1403.632817][T25596] busy [ 1404.874995][T25615] openvswitch: ovs_: Dropping previously announced user features [ 1404.948490][T25593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1405.013861][T25593] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1405.020065][T25593] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1405.153602][T25593] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1405.213686][T25616] Invalid ELF header magic: != ELF [ 1406.692012][T25619] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1406.718305][T25619] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1406.753340][T25619] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1406.782802][T25619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1407.091028][T25643] busy [ 1407.229096][T25649] openvswitch: ovs_: Dropping previously announced user features [ 1407.393319][T25649] Invalid ELF header magic: != ELF [ 1408.222972][T23849] Bluetooth: hci3: command 0x0c1a tx timeout [ 1408.778962][T23849] Bluetooth: hci0: command 0x040f tx timeout [ 1408.779658][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1408.858060][T18948] Bluetooth: hci1: command 0x040f tx timeout [ 1409.141047][T25659] Invalid ELF header magic: != ELF [ 1411.584629][T25687] openvswitch: ovs_: Dropping previously announced user features [ 1411.871960][T25671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1411.883025][T25671] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1411.897278][T25671] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1411.907391][T25671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1412.112554][T25696] Invalid ELF header magic: != ELF [ 1412.173009][T25701] Invalid ELF header magic: != ELF [ 1413.589268][T25692] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1413.595829][T25692] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1413.601980][T25692] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1413.623184][T25692] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1414.007517][T25721] openvswitch: ovs_: Dropping previously announced user features [ 1414.188880][T25721] Invalid ELF header magic: != ELF [ 1414.694755][T25735] openvswitch: ovs_: Dropping previously announced user features [ 1414.853703][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1415.661941][T18948] Bluetooth: hci1: command 0x040f tx timeout [ 1415.661964][T23849] Bluetooth: hci0: command 0x040f tx timeout [ 1415.668134][T18948] Bluetooth: hci4: command 0x040f tx timeout [ 1416.828951][T25757] openvswitch: ovs_: Dropping previously announced user features [ 1416.911843][T25757] Invalid ELF header magic: != ELF [ 1417.134765][T25763] openvswitch: ovs_: Dropping previously announced user features [ 1417.222283][T25763] Invalid ELF header magic: != ELF [ 1418.021552][T25741] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1418.049562][T25741] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1418.059229][T25741] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1418.092473][T25741] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1418.139278][T25772] openvswitch: ovs_: Dropping previously announced user features [ 1418.163839][T25774] openvswitch: ovs_: Dropping previously announced user features [ 1418.211565][T25774] Invalid ELF header magic: != ELF [ 1418.217870][T25772] Invalid ELF header magic: != ELF [ 1418.564166][T25778] busy [ 1419.041773][T25770] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1419.058270][T25770] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1419.073634][T25770] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1419.083637][T25770] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1419.372427][T25795] busy [ 1419.457631][T25799] openvswitch: ovs_: Dropping previously announced user features [ 1419.648896][T25802] openvswitch: ovs_: Dropping previously announced user features [ 1419.885092][T25799] Invalid ELF header magic: != ELF [ 1420.791103][T25811] openvswitch: ovs_: Dropping previously announced user features [ 1420.856047][T18948] Bluetooth: hci3: command 0x0c1a tx timeout [ 1420.956125][T25814] openvswitch: ovs_: Dropping previously announced user features [ 1421.093622][T18948] Bluetooth: hci1: command 0x040f tx timeout [ 1421.093641][ T5829] Bluetooth: hci0: command 0x040f tx timeout [ 1421.093681][ T5829] Bluetooth: hci4: command 0x040f tx timeout [ 1421.217780][T25811] Invalid ELF header magic: != ELF [ 1421.445339][T25814] Invalid ELF header magic: != ELF [ 1421.664240][T25820] Invalid ELF header magic: != ELF [ 1423.413334][T25852] openvswitch: ovs_: Dropping previously announced user features [ 1423.427809][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.434390][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.481313][T25849] busy [ 1423.968232][T25860] Invalid ELF header magic: != ELF [ 1424.059342][T25867] openvswitch: ovs_: Dropping previously announced user features [ 1424.110787][T25862] Invalid ELF header magic: != ELF [ 1424.241710][T25867] Invalid ELF header magic: != ELF [ 1424.430602][T25873] Invalid ELF header magic: != ELF [ 1425.384098][T25891] openvswitch: ovs_: Dropping previously announced user features [ 1425.445998][T25891] Invalid ELF header magic: != ELF [ 1425.549324][T25893] openvswitch: ovs_: Dropping previously announced user features [ 1425.624123][T25895] openvswitch: ovs_: Dropping previously announced user features [ 1425.639409][T25893] Invalid ELF header magic: != ELF [ 1426.282968][T25903] Invalid ELF header magic: != ELF [ 1426.840234][T25915] openvswitch: ovs_: Dropping previously announced user features [ 1427.208544][T25915] Invalid ELF header magic: != ELF [ 1428.465636][T25936] openvswitch: ovs_: Dropping previously announced user features [ 1428.506398][T25936] Invalid ELF header magic: != ELF [ 1428.844632][T25940] openvswitch: ovs_: Dropping previously announced user features [ 1428.919869][T25940] Invalid ELF header magic: != ELF [ 1429.627505][T25954] Invalid ELF header magic: != ELF [ 1429.987613][T25960] Invalid ELF header magic: != ELF [ 1431.428098][T25984] Invalid ELF header magic: != ELF [ 1431.486659][T25986] Invalid ELF header magic: != ELF [ 1432.090642][T25998] busy [ 1432.501358][T18948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1432.543865][T18948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1432.566548][T18948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1432.584167][T18948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1432.594263][T18948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1432.609520][T18948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1433.158468][T26019] busy [ 1433.426059][T26005] chnl_net:caif_netlink_parms(): no params data found [ 1433.528086][T26025] Invalid ELF header magic: != ELF [ 1433.588416][ T280] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.755770][ T280] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.786400][T26005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.805822][T26005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.826316][T26005] bridge_slave_0: entered allmulticast mode [ 1433.839429][T26005] bridge_slave_0: entered promiscuous mode [ 1433.849169][T26005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.865042][T26005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.876847][T26005] bridge_slave_1: entered allmulticast mode [ 1433.894202][T26005] bridge_slave_1: entered promiscuous mode [ 1433.979711][ T280] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.053931][T26005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.138793][ T280] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.198206][T26005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.399042][T26035] openvswitch: ovs_: Dropping previously announced user features [ 1434.525940][T26005] team0: Port device team_slave_0 added [ 1434.649714][T26035] Invalid ELF header magic: != ELF [ 1434.704099][ T5829] Bluetooth: hci2: command tx timeout [ 1434.730654][T26005] team0: Port device team_slave_1 added [ 1434.856856][T26005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1434.881107][T26005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1434.953540][T26005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.011955][ T280] bridge_slave_1: left allmulticast mode [ 1435.012032][ T280] bridge_slave_1: left promiscuous mode [ 1435.012187][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.022007][ T280] bridge_slave_0: left allmulticast mode [ 1435.074112][ T280] bridge_slave_0: left promiscuous mode [ 1435.080712][T26043] Invalid ELF header magic: != ELF [ 1435.084109][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.579443][T26051] Invalid ELF header magic: != ELF [ 1435.913901][ T280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1435.934727][ T280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1435.954666][ T280] bond0 (unregistering): Released all slaves [ 1435.973969][T26042] openvswitch: ovs_: Dropping previously announced user features [ 1435.974423][T26005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.997481][T26005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1436.030975][T26005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1436.079774][ T280] ovs_: left promiscuous mode [ 1436.240611][T26005] hsr_slave_0: entered promiscuous mode [ 1436.254035][T26005] hsr_slave_1: entered promiscuous mode [ 1436.296570][T26063] busy [ 1436.678593][T26074] busy [ 1436.741358][T26069] openvswitch: ovs_: Dropping previously announced user features [ 1436.763258][T26072] Invalid ELF header magic: != ELF [ 1436.776228][ T5829] Bluetooth: hci2: command tx timeout [ 1436.881669][ T280] hsr_slave_0: left promiscuous mode [ 1436.913581][ T280] hsr_slave_1: left promiscuous mode [ 1436.928035][ T280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1436.963830][ T280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.058057][ T280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.134235][ T280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.304037][ T280] veth1_macvtap: left promiscuous mode [ 1437.345326][ T280] veth0_macvtap: left promiscuous mode [ 1437.351050][ T280] veth1_vlan: left promiscuous mode [ 1437.407046][ T280] veth0_vlan: left promiscuous mode [ 1438.647039][T26104] Invalid ELF header magic: != ELF [ 1438.863504][ T5829] Bluetooth: hci2: command tx timeout [ 1438.972181][ T280] team0 (unregistering): Port device team_slave_1 removed [ 1439.116089][ T280] team0 (unregistering): Port device team_slave_0 removed [ 1439.870745][T26103] openvswitch: ovs_: Dropping previously announced user features [ 1439.924460][T26084] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1439.937143][T26084] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1439.943235][T26084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1439.950786][T26084] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1439.957393][T26084] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1439.992642][T26084] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1440.519923][ T280] ref_tracker: net notrefcnt@ffff88806425a020 has 1/2 users at [ 1440.519923][ T280] sk_alloc+0xa93/0xb90 [ 1440.519923][ T280] inet6_create+0x380/0x1320 [ 1440.519923][ T280] __sock_create+0x335/0x8d0 [ 1440.519923][ T280] udp_sock_create6+0xc8/0x6a0 [ 1440.519923][ T280] sctp_udp_sock_start+0x280/0x4b0 [ 1440.519923][ T280] proc_sctp_do_udp_port+0x380/0x450 [ 1440.519923][ T280] proc_sys_call_handler+0x3c6/0x5a0 [ 1440.519923][ T280] iter_file_splice_write+0x90f/0x10b0 [ 1440.519923][ T280] direct_splice_actor+0x18f/0x6c0 [ 1440.519923][ T280] splice_direct_to_actor+0x346/0xa40 [ 1440.519923][ T280] do_splice_direct+0x178/0x250 [ 1440.519923][ T280] do_sendfile+0xafb/0xe40 [ 1440.519923][ T280] __x64_sys_sendfile64+0x1da/0x220 [ 1440.519923][ T280] do_syscall_64+0xcd/0x250 [ 1440.519923][ T280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.519923][ T280] [ 1440.607816][ T280] ref_tracker: net notrefcnt@ffff88806425a020 has 1/2 users at [ 1440.607816][ T280] sk_alloc+0xa93/0xb90 [ 1440.607816][ T280] inet_create+0x3a1/0x10a0 [ 1440.607816][ T280] __sock_create+0x335/0x8d0 [ 1440.607816][ T280] udp_sock_create4+0xa7/0x450 [ 1440.607816][ T280] sctp_udp_sock_start+0x10b/0x4b0 [ 1440.607816][ T280] proc_sctp_do_udp_port+0x380/0x450 [ 1440.607816][ T280] proc_sys_call_handler+0x3c6/0x5a0 [ 1440.607816][ T280] iter_file_splice_write+0x90f/0x10b0 [ 1440.607816][ T280] direct_splice_actor+0x18f/0x6c0 [ 1440.607816][ T280] splice_direct_to_actor+0x346/0xa40 [ 1440.607816][ T280] do_splice_direct+0x178/0x250 [ 1440.607816][ T280] do_sendfile+0xafb/0xe40 [ 1440.607816][ T280] __x64_sys_sendfile64+0x1da/0x220 [ 1440.607816][ T280] do_syscall_64+0xcd/0x250 [ 1440.607816][ T280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.607816][ T280] [ 1440.696450][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.741476][T26005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1440.750811][ T280] ------------[ cut here ]------------ [ 1440.757252][ T280] WARNING: CPU: 0 PID: 280 at lib/ref_tracker.c:179 ref_tracker_dir_exit+0x3e3/0x680 [ 1440.767103][ T280] Modules linked in: [ 1440.771060][ T280] CPU: 0 UID: 0 PID: 280 Comm: kworker/u8:5 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1440.783604][ T280] Tainted: [U]=USER SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1440.787443][ T280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1440.797604][ T280] Workqueue: netns cleanup_net [ 1440.802414][ T280] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 1440.808640][ T280] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 6b 13 c8 fc 48 8b 74 24 18 48 89 ef e8 6e d9 65 06 90 <0f> 0b 90 e8 55 13 c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 24 [ 1440.828567][ T280] RSP: 0018:ffffc90003137ab0 EFLAGS: 00010246 [ 1440.834733][ T280] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1440.835999][T26005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1440.842715][ T280] RDX: 0000000000000001 RSI: ffffffff8b6ced20 RDI: 0000000000000001 [ 1440.857559][ T280] RBP: ffff88806425a020 R08: 0000000000000001 R09: fffffbfff2dd7dbd [ 1440.865766][ T280] R10: ffffffff96ebedef R11: 0000000000002ba2 R12: ffff88806425a070 [ 1440.873958][ T280] R13: ffff88806425a070 R14: ffff88806425a070 R15: ffff88806425a070 [ 1440.881958][ T280] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1440.891171][ T280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1440.897902][ T280] CR2: 00007ffc56418188 CR3: 0000000030958000 CR4: 00000000003526f0 [ 1440.906008][ T280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1440.914078][ T280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1440.922087][ T280] Call Trace: [ 1440.925573][ T280] [ 1440.928538][ T280] ? __warn+0xea/0x3c0 [ 1440.932634][ T280] ? ref_tracker_dir_exit+0x3e3/0x680 [ 1440.938245][ T280] ? report_bug+0x3c0/0x580 [ 1440.942793][ T280] ? handle_bug+0x54/0xa0 [ 1440.947281][ T280] ? exc_invalid_op+0x17/0x50 [ 1440.952000][ T280] ? asm_exc_invalid_op+0x1a/0x20 [ 1440.957170][ T280] ? ref_tracker_dir_exit+0x3e3/0x680 [ 1440.962595][ T280] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 1440.968460][ T280] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1440.974522][ T280] ? net_passive_dec+0x7d/0xd0 [ 1440.979327][ T280] net_passive_dec+0x89/0xd0 [ 1440.984216][ T280] cleanup_net+0x8ac/0xb30 [ 1440.988707][ T280] ? __pfx_cleanup_net+0x10/0x10 [ 1440.993721][ T280] ? lock_acquire+0x2f/0xb0 [ 1440.998263][ T280] ? process_one_work+0x921/0x1ba0 [ 1441.003486][ T280] process_one_work+0x9c5/0x1ba0 [ 1441.008471][ T280] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1441.014240][ T280] ? __pfx_process_one_work+0x10/0x10 [ 1441.019668][ T280] ? assign_work+0x1a0/0x250 [ 1441.024412][ T280] worker_thread+0x6c8/0xf00 [ 1441.029048][ T280] ? __kthread_parkme+0x148/0x220 [ 1441.034205][ T280] ? __pfx_worker_thread+0x10/0x10 [ 1441.039358][ T280] kthread+0x3af/0x750 [ 1441.043588][ T280] ? __pfx_kthread+0x10/0x10 [ 1441.048213][ T280] ? lock_acquire+0x2f/0xb0 [ 1441.052761][ T280] ? __pfx_kthread+0x10/0x10 [ 1441.057484][ T280] ret_from_fork+0x45/0x80 [ 1441.061932][ T280] ? __pfx_kthread+0x10/0x10 [ 1441.066687][ T280] ret_from_fork_asm+0x1a/0x30 [ 1441.071502][ T280] [ 1441.074745][ T280] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1441.082047][ T280] CPU: 0 UID: 0 PID: 280 Comm: kworker/u8:5 Tainted: G U 6.14.0-rc3-syzkaller-00293-g5cf80612d3f7 #0 [ 1441.094321][ T280] Tainted: [U]=USER [ 1441.098142][ T280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1441.108227][ T280] Workqueue: netns cleanup_net [ 1441.113027][ T280] Call Trace: [ 1441.116324][ T280] [ 1441.119268][ T280] dump_stack_lvl+0x3d/0x1f0 [ 1441.123896][ T280] panic+0x71d/0x800 [ 1441.127821][ T280] ? __pfx_panic+0x10/0x10 [ 1441.132259][ T280] ? show_trace_log_lvl+0x29d/0x3d0 [ 1441.137489][ T280] ? check_panic_on_warn+0x1f/0xb0 [ 1441.142618][ T280] ? ref_tracker_dir_exit+0x3e3/0x680 [ 1441.148031][ T280] check_panic_on_warn+0xab/0xb0 [ 1441.152975][ T280] __warn+0xf6/0x3c0 [ 1441.156889][ T280] ? ref_tracker_dir_exit+0x3e3/0x680 [ 1441.162273][ T280] report_bug+0x3c0/0x580 [ 1441.166698][ T280] handle_bug+0x54/0xa0 [ 1441.170859][ T280] exc_invalid_op+0x17/0x50 [ 1441.175371][ T280] asm_exc_invalid_op+0x1a/0x20 [ 1441.180232][ T280] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 1441.186226][ T280] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 6b 13 c8 fc 48 8b 74 24 18 48 89 ef e8 6e d9 65 06 90 <0f> 0b 90 e8 55 13 c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 24 [ 1441.205838][ T280] RSP: 0018:ffffc90003137ab0 EFLAGS: 00010246 [ 1441.211912][ T280] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1441.219892][ T280] RDX: 0000000000000001 RSI: ffffffff8b6ced20 RDI: 0000000000000001 [ 1441.227884][ T280] RBP: ffff88806425a020 R08: 0000000000000001 R09: fffffbfff2dd7dbd [ 1441.235867][ T280] R10: ffffffff96ebedef R11: 0000000000002ba2 R12: ffff88806425a070 [ 1441.243837][ T280] R13: ffff88806425a070 R14: ffff88806425a070 R15: ffff88806425a070 [ 1441.251830][ T280] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 1441.257564][ T280] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1441.263375][ T280] ? net_passive_dec+0x7d/0xd0 [ 1441.268144][ T280] net_passive_dec+0x89/0xd0 [ 1441.272733][ T280] cleanup_net+0x8ac/0xb30 [ 1441.277152][ T280] ? __pfx_cleanup_net+0x10/0x10 [ 1441.282102][ T280] ? lock_acquire+0x2f/0xb0 [ 1441.286613][ T280] ? process_one_work+0x921/0x1ba0 [ 1441.291756][ T280] process_one_work+0x9c5/0x1ba0 [ 1441.296708][ T280] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1441.302350][ T280] ? __pfx_process_one_work+0x10/0x10 [ 1441.307736][ T280] ? assign_work+0x1a0/0x250 [ 1441.312332][ T280] worker_thread+0x6c8/0xf00 [ 1441.316940][ T280] ? __kthread_parkme+0x148/0x220 [ 1441.321968][ T280] ? __pfx_worker_thread+0x10/0x10 [ 1441.327091][ T280] kthread+0x3af/0x750 [ 1441.331165][ T280] ? __pfx_kthread+0x10/0x10 [ 1441.335848][ T280] ? lock_acquire+0x2f/0xb0 [ 1441.340361][ T280] ? __pfx_kthread+0x10/0x10 [ 1441.344955][ T280] ret_from_fork+0x45/0x80 [ 1441.349377][ T280] ? __pfx_kthread+0x10/0x10 [ 1441.353970][ T280] ret_from_fork_asm+0x1a/0x30 [ 1441.358749][ T280] [ 1441.361901][ T280] Kernel Offset: disabled [ 1441.366277][ T280] Rebooting in 86400 seconds..