last executing test programs: 2m40.020700023s ago: executing program 0 (id=282): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x0) bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) vmsplice$auto(0x2, 0x0, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pnp0/00:03/id\x00', 0x0, 0x0) readv$auto(r1, &(0x7f0000006080)={&(0x7f0000000040), 0xba41}, 0x8) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0xfffffff7, 0x0, 0x0, 0x80000001, 0x6, "9c0210df35fcefe400cf718ca5ef8772c6508f61073d7a8dd50c5c2fd1bd65ece3aae59511c56111e824016b80f10fa66b1ea2fc2642fb826e6ce0bb"}) read$auto(r0, &(0x7f0000000000)='+\x00', 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1f, 0x3, 0x2) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_submit$auto(0xe5, 0x7, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x29, &(0x7f0000000000)='^#*\x00', 0x6) getresuid$auto(&(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x380, 0x0) 2m39.465787511s ago: executing program 0 (id=285): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) write$auto(r0, 0x0, 0x800d) close_range$auto(0x2, 0xa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) fallocate$auto(0xffffffffffffffff, 0x5, 0x7, 0x4cbd5d) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x800000001, 0x0, 0x6, 0x8) set_tid_address$auto(&(0x7f0000000280)=0x8) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2e0}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r2 = socket(0x1e, 0x1, 0x0) socket(0x29, 0x801, 0x84) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/open_files\x00', 0x502, 0x0) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vbi0\x00', 0x8302, 0x0) ioctl$auto(r3, 0xc0045627, r2) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x33) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 2m39.19199039s ago: executing program 0 (id=286): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x103282, 0x0) lseek$auto(r0, 0x7fd, 0x1) 2m38.939803072s ago: executing program 0 (id=287): mmap$auto(0x40, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x20009) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) r0 = timerfd_create$auto(0x9, 0x0) timerfd_settime$auto(r0, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) epoll_create$auto(0x3e) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r4, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m38.515662451s ago: executing program 0 (id=289): mmap$auto(0x40, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffe) socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x20009) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) r0 = timerfd_create$auto(0x9, 0x0) timerfd_settime$auto(r0, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) epoll_create$auto(0x3e) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x800) 2m38.109203152s ago: executing program 0 (id=292): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyw3\x00', 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x8, 0x4, 0x9, 0xeb3, 0xffffffffffffffff, 0x7ffe) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) r1 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000040)=@token_create={0x5, r0}, 0x9) setsockopt$auto(r0, 0x9, 0x9, &(0x7f0000000380)='\x00\xe3\xc2\xf7h|\x0eX\xf0b\x9dZ\x0e.a?R\x85U\b\xbe\xcba\x00\x00n\xaa\x14W\a\x15\x95\xfa<\xe7]\x858\xc1*\x84\xa3\v\x9a7M4\xfc@\xfa*T\a\xf2&\xa3\x97\x1dw\x17;,8Z\xf2\x18\x1a\xe6J\xdaz2\x1e\x82K\xbd\xeah\xf6q\xe6\xaete\'\x1bQ\xaf\x0e\x8b\xb0\xcc\xf5\xc6p>cq\xd4\xf2\xa9a\xb5b\x8fF\'x1\x99\xeey\x93E!\xb3\x83KA*gy, \xb9\xf3\xadW4 \xbe\xd4\x97ZN0\xaa\xeeQ\xbd\xce\xa8\x81g\x16ZTa4\xf8\xf4\xad\x18#\xd4}`\x86\b\x1bQ\xaf\x0e\x8b\xb0\xcc\xf5\xc6p>cq\xd4\xf2\xa9a\xb5b\x8fF\'x1\x99\xeey\x93E!\xb3\x83KA*gy, \xb9\xf3\xadW4 \xbe\xd4\x97ZN0\xaa\xeeQ\xbd\xce\xa8\x81g\x16ZTa4\xf8\xf4\xad\x18#\xd4}`\x86\b0xee00, 0xee01, 0x5, 0xfb, 0x0, {0x79cf, 0x7}, {0x10, 0x2}, {0x7fffffffffffffff, 0x101}, 0xab, 0x100, 0xdb, 0x6, 0x72, 0x1ff, 0xa85, 0x5, 0x0, 0x6626, '\x00', 0x1ff, 0x6, 0x8, 0x2}}) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x2ac, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_THRESHOLD={0x27d, 0x18, 0x0, 0x1, [@generic="b46dd9af209ee1f4178ebc2425095fff7bb37d42139f39875dd6f3d9bc499af46ce02e6a772d8a01fb8cc037e289ad84991a0773ddb837c3", @nested={0x100, 0x127, 0x0, 0x1, [@generic="a40f85008b607388c98eebcd13279350806151b408a9a10ba5d7d4f70420735631177efdc52393f0bb19be13872517504ffa67376c3bc938e7385423c58ba59e353ee50f030f8437f5c579312a2989e318ac8c89e2928a0e4d576df8081c6e683228265d147bd894222a3467bbed68c64e72293d1011700597ff93f994", @generic="76b5cb4ef399614c72030fffa311c24b18e2cf3b6b537cf527c0812aa6242c0b7acc02a1c1cfd34cc40f6aa19cc3c98b594891c3cb29e793071ad171a35bfeabb02f5131f2baf1e0e22266f7d416eb944e11768e09580446a29ffc6b53d817eebe36ac9bd650a0", @nested={0x4, 0xb5}, @typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}]}, @typed={0x32, 0x11e, 0x0, 0x0, @binary="43c4de1f4d402fbd64228f5ff9631d9ddf3bbf478c767ef26711655eaaad92508285c26b24f8129ad647176e8e8e"}, @generic="ece18a2a1da834db61d55e5af49fc3f74b6061809c36b78c327b92c9739e894830efb13a21a4bd1b5760ec9b2e997105dddadba55917e01f920682507a", @nested={0x1c, 0x136, 0x0, 0x1, [@nested={0x4, 0xad}, @nested={0x4, 0xcb}, @nested={0x4, 0x139}, @typed={0x8, 0x118, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x67}]}, @generic="67cb0b8bd14616056106efeb9c96c7e5cda718f6932ab5e02f3501dfa574fec9968f2d50d66f5225653a0ca8a126ba6cd363f2a099f359b62b8ed21f442ce06e8c604e5834e395bf35b04d928a93511f0d906d44677b4c06cd3788b2eee0e4e08d649c91f660775a7971af16a2494af3a6407ba7ebcf712e430fbc497a8834a51ce94bf49ca00ce3ca466a7b3f5d6da0ba99d25dd8cf2fb5999151a61e72d374e0316b85754c378c", @nested={0xa, 0xb, 0x0, 0x1, [@generic, @generic="340002b1", @generic="c5a7"]}]}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0x9, 0xfffffffa}, @THERMAL_GENL_ATTR_TZ_MODE={0x8, 0x9, 0x7f}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x99}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x24000000) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xfffffffffffffdba, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_UNSPEC={0x97, 0x0, "23f02583dbe17b2d064f4fb3cb58a8ad0619d8d02dea8e53c6c1c8567fc516c2e58540b6d2355851da0a969fda00bade12d75dd36f5edc67f662b03eafcb77a14f639d7559777b4dd315c5a0819334f4a74d1b155ba2089106c4db08713b0671666991931ff7a7c8b9d8c85b38a71a5f1222a3c795fc18e9394eda409d7e1dd78c8d1bd65e3bff15cc78e03f721806e053efd5"}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4008001) 27.252284245s ago: executing program 2 (id=738): socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x20009) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) timerfd_create$auto(0x9, 0x0) epoll_create$auto(0x3e) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$auto(r0, 0x0, 0x6a) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r2, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 21.109529309s ago: executing program 3 (id=749): mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x20000) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) r1 = socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) syz_genetlink_get_family_id$auto_batadv(0x0, r1) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x6, 0x84) openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x28001, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x1, 0x7ff) ptrace$auto(0x66e, r2, 0x7, 0x101) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 19.760631694s ago: executing program 3 (id=750): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x0) r0 = bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x1, &(0x7f00000001c0)=@query={@target_fd=r0, 0x1, 0x86e6, 0x0, 0xf7d, @count=0x80, 0x0, 0x6, 0x2, 0xfffffffffffff001, 0xb716}, 0xc) vmsplice$auto(0x2, 0x0, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pnp0/00:03/id\x00', 0x0, 0x0) readv$auto(r2, &(0x7f0000006080)={&(0x7f0000000040), 0xba41}, 0x8) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) read$auto(r1, &(0x7f0000000000)='+\x00', 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1f, 0x3, 0x2) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_submit$auto(0xe5, 0x7, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$auto_SO_WIFI_STATUS(r3, 0x0, 0x29, &(0x7f0000000000)='^#*\x00', 0x6) getresuid$auto(&(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x380, 0x0) 18.703938574s ago: executing program 3 (id=754): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyw3\x00', 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x2, 0xc000, 0x5, 0xeb3, 0xffffffffffffffff, 0x7ffe) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000040)=@token_create={0x5, r0}, 0x9) setsockopt$auto(r0, 0x9, 0x9, &(0x7f0000000380)='\x00\xe3\xc2\xf7h|\x0eX\xf0b\x9dZ\x0e.a?R\x85U\b\xbe\xcba\x00\x00n\xaa\x14W\a\x15\x95\xfa<\xe7]\x858\xc1*\x84\xa3\v\x9a7M4\xfc@\xfa*T\a\xf2&\xa3\x97\x1dw\x17;,8Z\xf2\x18\x1a\xe6J\xdaz2\x1e\x82K\xbd\xeah\xf6q\xe6\xaete\'\x1bQ\xaf\x0e\x8b\xb0\xcc\xf5\xc6p>cq\xd4\xf2\xa9a\xb5b\x8fF\'x1\x99\xeey\x93E!\xb3\x83KA*gy, \xb9\xf3\xadW4 \xbe\xd4\x97ZN0\xaa\xeeQ\xbd\xce\xa8\x81g\x16ZTa4\xf8\xf4\xad\x18#\xd4}`\x86\b0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) sendto$auto(r2, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r4}, 0x36) mq_open$auto(0x0, 0x10007e, 0x9, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff) timerfd_gettime$auto(r0, &(0x7f0000000000)={{0x8, 0x5}, {0x9, 0x7}}) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r5 = socket(0x2a, 0x2, 0x1) connect$auto(r5, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100253d7000fddbd2359f95392452c4d8eaccea66c9dcdfb10c00020006000000000000000c52b2af000400000000000067d3e26b6192eab55687ff97e00cdd280800000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) mmap$auto(0x0, 0x1000, 0x4000000000e3, 0x40eb2, 0x4, 0x2fffff800001) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) clone$auto(0x8000000000000005, 0x7fff, 0x0, 0x0, 0x2) mbind$auto(0xf000, 0x8000000000000002, 0x100000000, 0x0, 0x6, 0x2) io_uring_setup$auto(0x2, 0x0) 1.870557789s ago: executing program 4 (id=784): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x7, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000180), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8402, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x8a', 0xf, 0x0) 1.355516057s ago: executing program 4 (id=777): unshare$auto(0x40000080) mkdir$auto(&(0x7f0000000040)='./cgroup.net/\f\x00\x00\x00\x00', 0xa3) r0 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x8004) r1 = socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x89a1, 0x4) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1401, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), r2) fcntl$auto_F_WRLCK(0xffffffffffffffff, 0x101, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r3) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0xa, 0x1) socket(0x2, 0x3, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x395e41, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 832.495157ms ago: executing program 2 (id=738): socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x20009) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) timerfd_create$auto(0x9, 0x0) epoll_create$auto(0x3e) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$auto(r0, 0x0, 0x6a) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r2, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 224.357818ms ago: executing program 2 (id=778): getsockname$auto(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) rename$auto(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') getpid() r0 = socket(0x1e, 0x1, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/open_files\x00', 0x502, 0x0) pread64$auto(r1, 0x0, 0x100000001, 0x100) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vbi0\x00', 0x8302, 0x0) ioctl$auto(r2, 0xc0045627, r0) 146.703039ms ago: executing program 1 (id=779): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130026bdd94a1ccb9bd45e7c000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x400408d4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'nr0\x00', 0x0}) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r6) sendmsg$auto_TIPC_NL_NET_SET(r6, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NL80211_CMD_JOIN_OCB(r1, &(0x7f0000003bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003b80)={&(0x7f0000001700)={0x2470, r2, 0x110, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x400}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_RATES={0x1430, 0x5a, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x10e, 0x0, 0x0, @u32=0x3bf5e8ff}, @nested={0x28, 0xf5, 0x0, 0x1, [@nested={0x4, 0x6}, @typed={0x1a, 0xfa, 0x0, 0x0, @binary="bf1632000047d02995aa355931dc5635883ccc4bfcf1"}, @typed={0x4, 0x91}]}, @nested={0xee, 0xb5, 0x0, 0x1, [@nested={0x4, 0x122}, @nested={0x4, 0x37}, @generic="092a1177a1731087004938d25245ddd1066460f1f5631025eb8d04d6e6626939a0d3f641cec0d4ffb53fcf319cb29c6ac9003359bcd944d5f4d1ed4681b49e78441fad9496a3e6d3e3fc584d35ff9e56d07073ca03606aeb91", @generic="25768334dc68dec18bb65f15aef695c7d1101466d7d39e4cd2350bee0f72e6fbbebc760fcf96acb5c8f92ca50fa7f05f6232e51b8bda8f3bf11103255212f456c8bfd3d9b8884eb1583586ce363faf1914a7db809b514edbfe495b7ef298308a21c5825f75f5ffb43202dec098d61e60260f96f239e0e68ef66343e0525aad91765a8847652d0851d8"]}, @nested={0x139, 0x9e, 0x0, 0x1, [@typed={0x12, 0x122, 0x0, 0x0, @str='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k'}, @generic="93f43a4dfce20b36868ac44bf7d210e5ea3520941b2acd811341b24f305674750ef150251d7f2aca8b66dbb357ff2c2150b8bc093f7c277280a6b8737c1af043894e7a46e9af5b367ce4f8", @nested={0x4, 0x10b}, @nested={0x4, 0xac}, @generic="537496549df7ff4f178c2af5debe91e1844dfc4a58381f138cb12484a0b24d7353367283503577d3fe3c865e73f4647b1e2dbc01bc8bc755ac263a3b0be6956a4aa5bc5f5fe662a4fecf683bae3147fee5568a918419190262bfe340a04a4990e1a599dcfa3b2e69f21ad3709c7aa056cc357fbed4838447f022b0b5a482535b82db54851cd70a877d6221f1646424511eef84daa24c8bc9e3549403cf0037c42a5c52d042528090f3ff9c5d1cbd8ae5825614e88cbc12011742cf01bed4cf6b7229e5abf8c9", @typed={0x8, 0x12a, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x1c5, 0xcc, 0x0, 0x1, [@generic="f74b2deea7d6a0446e3943e387ce2aea73d877423b17a600a568939768c4d4e6973566f19c4219a26cb326aeeb3f019a2b835a6889b7602136ad7f65e1398dcb7bf5ebbc7e55b257de5d8c924847075fcad2e9154b425c33f30a974b4f012a144ff18b66ac7c97ad050f46ff56dcb65ee8855de5d9db3746fd39e7a613944c1f58552a2e683a92828d737f547ef0177fd8b8f7a579c2b080266474ccfbdcdd701e37b669627bfd40f095945781d5ed48dbe596de6135eb70a2bc99ab20552e34f4b7f3664a", @nested={0x4, 0x86}, @generic="68f59b114ec069a61a2d3248b2cca8f45023b68fb438124bc583933d6f247cba0f311001d18feb26340a48f0587ecf317937645fd90c05e26ec74587710c2c89bd223438a9873fc69304b07438246f154bfc9136c6fdafc23546e7274984964811b82893bcd9432e16098d000636b167b5d8b0d9f3b6bfe209ac0e72346867d76e983ba658a37641a47d8444c3b4f7913a70235479ea5bd6fcc60d3563bcc71ceef75671a4d69a73ec305355e7d5757204d016048e1b6cf410dea5587869b6df8cbf3335dae6d38bf17468b54f8bf5e1ff2023748be093fab8dd99fce58d62909db609268500defc3d344d2f3d8995ad", @typed={0x8, 0x3b, 0x0, 0x0, @fd=r0}]}, @generic="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"]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1008, 0x75, 0x0, 0x1, [@typed={0x1004, 0xf7, 0x0, 0x0, @binary="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"}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x2470}}, 0x8880) io_setup$auto(0x7ffe, &(0x7f0000000000)) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0xaf1e, 0x34, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x0, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0x0, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x1, 0xfffffffffffffffe, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa502}, 0x800}, 0x7, 0x4008) 0s ago: executing program 4 (id=780): mmap$auto(0x0, 0xfffffffffffffffc, 0x4000000000df, 0xeb1, 0x401, 0x8000) gettid() r0 = socket(0xa, 0x5, 0x84) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x57) mmap$auto(0x2000000000000000, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x55) r1 = io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x1a35c1, 0x0) ioctl$auto_SNDCTL_MIDI_INFO(r2, 0xc074510c, &(0x7f00000020c0)="639ba264a968f05a3ba9b5ef2aac5d6aa8bca3f891774c61ddbb35524f057da2d24989e7") setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r2, 0x4, 0x8b33, 0x4af53208}) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r1) shmctl$auto_SHM_STAT(0xb, 0xd, &(0x7f0000001340)={{0x0, 0xffffffffffffffff, 0xee00, 0x95a, 0x3, 0x5, 0x3}, 0x46, 0x2, 0x16c, 0xe4, @raw=0x5, @raw=0x2, 0x6, 0x0, &(0x7f0000000180)="e65d0ca8433467e929c8c1411eaf31b717bb6eb6edad0fbb02c0f863eff5054bea4acf40e7e0d071372ee8912e117c41a1839ca0eb33df17d0aae06a125244bc6f17c15b", &(0x7f0000000340)="a5521d571b4619e717eb6226541a101462dff6bb674cde9b77901c79d1b28758bdfa51120a1145934ab1e5c86fcaea60d5a2d96957ed4eaec9b2d21ba738b1df3cdb26827d571c7627236d6185af8e32fe842a1361e694c3a0bf6130eaf960828ca68ed4dc9b0ebf0fa0cec8712a85fe1f7f283966dbcbf57f14f7f1891b3b2b6b4df98a345cadffdf25f3183d5b7256b4b3a8fe8d6b820d88758581125b6b52375abe60b0df47a3a396c67ecb1ac49b57579c036e91254454e1c3842f57ea6023e35ee2b39c2543f514087fed1e9c51b826c97e2635caf34d67042f089f234717505496a214613ce9b3b4f0c52c0f05151aa3660f9fa82fdecbeba24d0d3b3c3dcdb76f716bbdcef822e559b67b98a1236e06f84c518eeae9ec47e2b1735d69a1bf823646735a7f27cf41b3116976f3b0ee426e8a68918227bc2309fda6a31ac7e1866a03da341abda8fc34c094eb29b7e2cf5e17e638f534bb6411f7767a6d00c0b8b40086bff98e420acdd2456ba94815a32f675f393cdec42ec73464590306df50d9f0a2326561108897b883c8edf5417db704013cb2d5e79f65f8141bf1760c5ff575b1b9a4b742d8fe1fdee0f8e541c8a21bb66cb65dbc6721f66a68141185e7b9f3c6c76cfdccf58354dcfcc8ce6d094edbe32d82cf2901e58e8535e02f297744987632715e0f416c558d5521424ebf35b852674ede7304f33dcca27c88996eabf9f16d125ef2cf05a8a83fa0915c7eca3ceed69312de7ff201f9b0008a4d36c83a6a00c0a101a7b6989f206c24a3807b9a356860cb111910f3f8494665e81d2bffb9790ec4c83fbfa9e9da8231988b67d4152c78d62dbfbd8ff608907bd539eaa430cd4fe197e1b82b078bdc4df67c1f01df21368aabbcdb7f599d28a39928ae40acf383eec38c9e921ec42fa6e048a7c63e50fb18332c30d06a6305c81cc4fa0f217764d64348251587461976a01fc0dc0a7559631872c3f780606c9e7415a43e2a767c572c84d84b7c69889339be4d95bebc4680f4bd7e9f8f076815c7f73dab89e30ca7c2413f4000dce993d72805b01a83bae7e39054c8c1df8c7c00af6f1400f60be4a4f2d00d0268fad4259cdd3c1e35c1f42277fe5d92086283f03e31666231cba81b5d6d119e4b682753cb5dfd045d4e27a530b055bce738bd793a228ffc7252137f02de3d02fe5f60084e2dcaa8e957d9af6b8dcde5251750e907fdd392e3249abc86763928972cff82cd863c331bb73b2879932b89702c9cd02dc2925c5e4906cb5ece44f54d4d17e608b217d22f1a3f11cc8a4436398b102c4a4b81fa590ea41567ecc4bb931ae8977adbe04716ac1f3a543f9c8ff547da2e5420479b04039b6ee544086329a98242a37c047767544085f4b83ca57f6f67e312aef0c7241e57088c7602687dfda9927efc3ee73bb8f347283a535cf252f5f3cd9eb769bf3afdc0e2b032a9b9c5cd44a3cb2580b653c74bc5e93b75167a80bbdf90a4048a338ee9a6cbdb595ad6cf8c3e1a1593e500f4aa00ecf3467e7a929e9863d33076bc5d6912863daadd29877caef275f74a50c618733fabe07f87f8cfb4471e38bb474aa9b413350c86b773ceb344eba925f6031aae8770ea292279364a07f03df3bcb8e2de12334cf595d01c4bc8f7fbbc295a1fdc51c78e3cb2353511086c91e0f3e37ed176731fb86b239c941f61ae732f3b64d3f7e3cd4c0ff022821e0cae97f74301f28047276b423e574e56ff69d28eaf584a659ea68bcc43aaf1e429f7fb5518cd2486d700d4254fb08bd9ed40c33c5284395de0656d45196e8c8e1db64b11fc3c6d3dc29a7669f215b3a9a82cc223537083d9309315583ae3e8e1f59cfd0d7f4c241165a4fda9b43f09744e614b0a284c68455be2c26f9ec7cae9a3f9a08dc236e941eccf2f1251bba4487e57eb5d9feebddb471d365a2936ebc2f26b022ef4b8e9804114da53ad95adf16653faaf69c1a812a63d6f0aa7b20019a71c75ce116188c026bb5250764493480c4e8c1a62e99334ce1a84b30e0a3fdbc4694dd0a95cfe1954c5ed9cbb8462dcb055e8baa34f0b9f5c993609552b9967b144d30decc1da0c1f7af94b91bda8be522765d220bd941e09b85407136b19e1b25eb2d8590e268f5becf4a2b24b5d09b658123a66e45768bc118ce5529afc0dd3464f6751b970fd18748056dc934a6dd534626b4c517c09ccb7e250984735fb45ac305e9139b58c3d5a3c979bdd5fed595cf13d93730560b6e514658cc7eef93b727fa213b4c36baed8e06b021dc409d0dfb194d4ea713d9ddf2125051e595bb13d92e81d819ff08400e3049ecc011143a9bfca7ab9a224f6588e5b0e8c2552f5f18789990f8d836b01143f97e5cd16ad8c1d6978124d7b06a435e5ef0ea86778820be984756fd0deac430c2fbdfcb5d20fb913e91d9ca9f9d34de66c6fcb80146c9c3364576341ace250aad7086f8510d73bd6289a494bf7489c7281dcc499fc45e41eb5ffcfc76bff4d24245e3411dc6f880df83560ed1d979e2ad7c453c99a974cf6b9385bcb88757db081e6b95dbb46768acc25b053ca648370785eb2561c6c2ba56c3fd1c33138fa20a8e69d3565183adfb6dc9f5333c8267f428cc288e454b1090bb7fadd618b0a641518a0db3affafd1264c11a4d11b1df9d98fabe2bf1cf1aed0422833d81348133ab9c801877461e558a15bcf839a581de786aef6ad40b73e179ecb08c9f301439a180174b341fbafd50255e8662d70b20761cf710f4e19e0a062533a4b36b687a0945626be63e0aad74251b7ee15066c421b80ef20d53eaeccd29ddebed426fa7b1a6132d40e1b06f50c6a097e1bedf75dd82216a285a54d38b15b6f064a9913b71524d1e78860460748339ee1f0b25c2f6439f87b29403269f64fb4b30b345aae39a0041f8351ef46c5d7b764be7ed2db1b4e6aa28f54624ca731d0cec4b0142e201d047e813f4b62005edb7b863f0d8cc1c7509317f194eedd6bfa40276ad9cba09678e1f78e18ee6220b7efee705cfe122573228966018b974a2a185171fa8c23fc811621873dff4d4bf4eaba64e05b6fb50daeb8d2f31f0d2e982abf32f4fb477307529f7e4ab21cff82eddd598e0a88113ce732e30f64996d03c0469972cfcb6aa050c1e2eecb12a0f1196d5cbca6f9ef0864504cfe2c7732d5b7d119a439432cc399df9fb8686ff793364c303587a16c57235b97b516828fd50a935b84dd2aeed0a3bfef1d5f852d61143c2f89215f7c9d54f271e4bc7719124a24fce21a2c190b08343d294f069f498700f1a0ca7ab9b570bbb6b547a906839ab46956db4aa15f42dd657dfd96f229196b3631f1f3b91949639ff44a32c8c9dbc9ab646bc0d3a4c01c24e9ca4ecb8991df51429e1e6a300f2eed4851492da82c6c9ef243b76fe1ba991433263ceb158e9cc2e9583f7a18ed41c7f47cd1107d2ce4da0cc7f8a41a25e89789cfbe616160513f7580bdcf585b04a88902adfa600df7416fa7aa644b3b97030a5c763e3e1fde3f73017aae2abc426fb330f3457804628196766efb777cc536a49f8746b57010ef012be73ada04501eb6573377c087388fca4d88151f981e0b6db76b6af6037b4562e6ac9bfd1ebc9f9080b3bf7898cbc4cf1d78863a00349d49260d2e072751913ffd9a1b3ae146e309fcede45e1eaefb6dba2bac8ec48bc2abc2b1b3859f87acc62efd6143e5e72b9e2e5806f973b37eee4615c4a1a1aaaaa73d7ed0aaba8e26dac8a5b94ecd004e8edf19027e94c539007b3f2389b3611d340d28019267ab3f790e912212700ffb61da580cbada3eb1f00a7543f99a2d8d2af4dbad8c036cf266ce8e493831177d85663bb9a189cb2a0b151736b14fea1d96ec2264e94f7d544081cc1d87d5a2988ea2a7a0578f91d8cc97fefbc44c447f6f007ce730326943dc062b7baa2f4fb856b2cd207075a204ea489fee8d79829bd1d356b5649ee1c799535fc5fd517c2e6f07246f2b3c9dee152e514cecbe01aa6ba220a4d9e5f4876ac90d81ea8b4c32c9c059e3e6d841f6cb822a5db41980ff4b78f4811baa4ee4820e2682cfe95c41d82e5287be18fa0b8af11cce0403d5058a235bba1a35a23c9f4dc3b21894138f661e56901bceb6704006e1b0c1830b2a9e947f638a7e8565037a35f49345691665dd14ac9b46d0021ac4aff164efd68df9f7cc8226251070a2e3c38f8d5d3a22d85dbda48856aed05d27a2320954560047d431c44a80da0ec92a7f4745df3d326edf1acb9155ed7097f7f1add820ead5bfca8ebd2ff3527b310b1217e9061438fc4011f914150d760ad5ab45a193c7d98815132f81c1b51885a818f74a92220c9d7ecdb7c35cdf506e44b8ab019455868be545628e0a7c11f090dc7b092e2eb5db5ee898a93c668afdd8c585feb0c2f1d251070e53f6c84321b2bd0561053837567fefb409533a18320a24461aeef4c9f84398488b3a5e5cf1378d1aecc1a366853ee3d452e5fa725a18d3fdb34d315db5734c5eb86c60f56edb221c92076614278b79dd81397af3202e26c4b81f0715d816919a4c23f397301826f3d64c1a74bc52fec6f5d9a4feb7b7a864313707e15f562d675e177c899902e0f0000aa3e5e060d6b0580fb9da8a084d08faa7fd714097e1ac323c95677e291a031ee81c4bb018d748976ea54285a64e0cb216933e2dd8ee9efd80077444991ee377b8104d40c3ceb5b84decc02d9cdeca4734afb8f8c0e3b60740b01fd23b623f80a32ce32932859cf21fe248a9ef8ca0c74eae9db6574518ca1280439128546fb44d6918a4a0727884f6fbb38bc1a14a7fe4a0090bad355452ea1bd46c92cf2197971d64d11cb3c4842928738b428479d8ee6c0e08a5e2bdba466d643b6899be890080fb1e0e563236f9632b789838d7351207b28d1b0d9488cf1efc0247b1f6ad1460df432a9e4fb2462f7d894de72bf6ac51a598170c18fb9716434c7a6ac0f945c66dffb6e648361587bd8f7bb3a2730b34427a5fc4602fde75bd55bffce04d64bd624f54447cf3033eb02c2e1a7ff3f47616437d9afd6ea7de47264936dc69ec396b9bea7c76f4ac51659be7cc2738cdb9572171871835935bb6eaace424a985671d98128b740cf4b14817c3e93a606a79ecaeb7efb490459b1354bb0775a6dc86abddc751592ed8888b183c6df6027b26f12eb7cff33a390e815ba4b9ecdca1f03d88d865f8b1323a8a18243dd0b5ec1da849167f41ce003a190367be8da806a3476cf13d8bfa20d16a3d01ed976f4cf2524d261daa29ff3d85de359e9adc6e4a5d317dd016e8c3e85007268dcce4a2de5823dc732a8911a320b41667d3ec9912d6e37cec5efef509705c20781d0e2ba27ce04c149fb5970bf698b19745aada205ccef33d459aa9d196ec7c84b500547a9679e0ef90a0e69b6fc95221f1cb0e69326841438fd612a695ffceae671470ce98c2c952db8d7135ea677cd7cd32dcb399b8f722e028ef6de5be38b5dfcba7f6a7b579bfbdb1a25b307132c707237cb62a0486ff8623358720baa3c8b98c3a1bb483cb664fda354ccd243620e5af12c966b4fc6c884027f93b1e3a6e00208b5ae9fd6b8f6c3961520dc57a63be74e2d047dacfb37261b149e308900786db56a3599fb20a089e7a6462939270a1e4d86496f2bf9fa1a025b2c84680801d7f7c78550b66d12200039854e3d64824630206af75d6a1f753b2852e63398f40c259a81b7bc639a6a56b5a45d9f5df011e8e26c18b377e4b9819c2838fd188cd58b18cad77db87c615b8a5d4dd"}) bpf$auto(0x205b, &(0x7f00000013c0)=@bpf_attr_3={0x830, 0x3, 0x7a2f, 0x1000, 0x6, 0xe2, 0x7, 0x3a, 0x5, '\x00', 0x0, 0x0, r2, 0x7, 0x7fff, 0x1000, 0xd, 0x6, 0x1, 0x76, @attach_prog_fd=r0, 0x6, 0x4, 0x0, 0x0, 0x101, r1, r1}, 0x6) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f00000016c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001680)={&(0x7f0000001880)=ANY=[@ANYBLOB="09000071a9d1b30245f1780f88dc97fb00", @ANYRES16=r4, @ANYBLOB="000425bd7000fcdbdf2511000000080005000e0000000500100001000000d60118800800b500", @ANYRES32=r5, @ANYBLOB="7c00958008002800", @ANYRES32=r6, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x24040041}, 0x22000000) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x7fff) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6b) connect$auto(0x3, &(0x7f0000000080)=@llc={0x1a, 0x30b, 0x1, 0x9, 0x3, 0x40, @random="00349b98fcff"}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/tty10/power/runtime_active_time\x00', 0x80100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, 0x0) unshare$auto(0x9) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D3\x00', 0x44000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f0000001700)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbc\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\x96\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x91l\xe12\xd3O\xa2\x17\xb4\xa7vk\xb3*\x86}\xf0E\xf4\x94\xe6a&2s\n\f\xe4\x8f\x96\nZ\x9c\xb4&\x8b\x83\x80\xc0-\x02\xd3\xcc\f+B\xa1N\x04+\x1e$F\xaa%#8\xc1?v\x19\x02\xab\xacen\xd7(\xaf\xeb\xa3\xef\x9a\'\xbc\xfd4A\xd7\xb6\fm\xf9\x8d\xd9@\xf9\xb7\x7f\x849\xc8\x05e\x05\\\x88o\xd2\x82\xba\x18\x86\xd5\xb4M_}\xa1\b/\xe44\xe3\x15\x17\xde\x11A\xdaV\x17\xbb?P\xc2J\xca\x8e\x13\xe4KD\xee^\x87\xa5\x87\xdc/n\xa8\x91U\xc6@[\x11YZ\x9a\xc9\xf1\xc2ow~J\xfc\x92\xba@\xb41`.Gk\x10\xd8\x8bO\xc9P\xf7\xe3\xd5L\xe9\x18\xe2\xfa\x06d\xdf\xac\x1f\xfa%\xcd\x1a\x18>\xce\x14\xaa\xa2', 0x100000a3d9) listen$auto(r7, 0x7c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 86.655446][ T5616] cgroup: Unknown subsys name 'net' [ 86.804092][ T5616] cgroup: Unknown subsys name 'cpuset' [ 86.816347][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.654942][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.786116][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.795561][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.803791][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.814234][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.823891][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.868683][ T4946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.881395][ T4946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.894844][ T4946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.905979][ T4946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.913857][ T4946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.965888][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.975656][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.987247][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.997829][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.007381][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.037875][ T4946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.049259][ T4946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.068581][ T4946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.077131][ T4946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.086198][ T4946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.654463][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.662834][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.670170][ T5631] bridge_slave_0: entered allmulticast mode [ 92.677660][ T5631] bridge_slave_0: entered promiscuous mode [ 92.728010][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.735802][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.743111][ T5631] bridge_slave_1: entered allmulticast mode [ 92.750470][ T5631] bridge_slave_1: entered promiscuous mode [ 92.784235][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.791637][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.798936][ T5627] bridge_slave_0: entered allmulticast mode [ 92.806361][ T5627] bridge_slave_0: entered promiscuous mode [ 92.838875][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.846072][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.853382][ T5627] bridge_slave_1: entered allmulticast mode [ 92.860692][ T5627] bridge_slave_1: entered promiscuous mode [ 92.869348][ T50] Bluetooth: hci0: command tx timeout [ 92.886690][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.929617][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.948614][ T50] Bluetooth: hci1: command tx timeout [ 92.980808][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.001869][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.009254][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.016446][ T5638] bridge_slave_0: entered allmulticast mode [ 93.024242][ T5638] bridge_slave_0: entered promiscuous mode [ 93.029396][ T50] Bluetooth: hci2: command tx timeout [ 93.035673][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.036330][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.050866][ T5635] bridge_slave_0: entered allmulticast mode [ 93.058800][ T5635] bridge_slave_0: entered promiscuous mode [ 93.068758][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.090608][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.098928][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.106139][ T5638] bridge_slave_1: entered allmulticast mode [ 93.112162][ T50] Bluetooth: hci3: command tx timeout [ 93.117353][ T5638] bridge_slave_1: entered promiscuous mode [ 93.125455][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.132665][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.140076][ T5635] bridge_slave_1: entered allmulticast mode [ 93.147330][ T5635] bridge_slave_1: entered promiscuous mode [ 93.167556][ T5631] team0: Port device team_slave_0 added [ 93.176775][ T5631] team0: Port device team_slave_1 added [ 93.257606][ T5627] team0: Port device team_slave_0 added [ 93.278193][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.290719][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.301833][ T5627] team0: Port device team_slave_1 added [ 93.308758][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.315742][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.341777][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.356957][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.369129][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.403458][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.410749][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.436801][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.489903][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.496991][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.523081][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.549377][ T5635] team0: Port device team_slave_0 added [ 93.558057][ T5635] team0: Port device team_slave_1 added [ 93.565283][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.572547][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.599047][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.612815][ T5638] team0: Port device team_slave_0 added [ 93.651154][ T5638] team0: Port device team_slave_1 added [ 93.668815][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.675883][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.701920][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.714691][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.721737][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.747813][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.820344][ T5631] hsr_slave_0: entered promiscuous mode [ 93.827078][ T5631] hsr_slave_1: entered promiscuous mode [ 93.848300][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.855300][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.881628][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.894610][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.901693][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.928347][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.945390][ T5627] hsr_slave_0: entered promiscuous mode [ 93.951928][ T5627] hsr_slave_1: entered promiscuous mode [ 93.958727][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 93.965056][ T5627] Cannot create hsr debugfs directory [ 94.021195][ T5635] hsr_slave_0: entered promiscuous mode [ 94.027703][ T5635] hsr_slave_1: entered promiscuous mode [ 94.034092][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 94.040007][ T5635] Cannot create hsr debugfs directory [ 94.186790][ T5638] hsr_slave_0: entered promiscuous mode [ 94.193374][ T5638] hsr_slave_1: entered promiscuous mode [ 94.200005][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 94.205780][ T5638] Cannot create hsr debugfs directory [ 94.595435][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.618240][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.628986][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.641269][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.649886][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.661750][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.677686][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.689458][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.761820][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.773762][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.782674][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.793992][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.803422][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.814939][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.835354][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.845281][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.940734][ T5638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.948659][ T50] Bluetooth: hci0: command tx timeout [ 94.958561][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.966497][ T5638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.977365][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.995756][ T5638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.006635][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.014874][ T5638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.027527][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.034779][ T50] Bluetooth: hci1: command tx timeout [ 95.107945][ T50] Bluetooth: hci2: command tx timeout [ 95.135992][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.146204][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.154708][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.174561][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.188979][ T50] Bluetooth: hci3: command tx timeout [ 95.200126][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.210382][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.219232][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.229603][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.303896][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.385022][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.411018][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.439496][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.446976][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.482391][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.489709][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.545856][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.578391][ T516] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.585529][ T516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.596259][ T516] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.603588][ T516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.622985][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.682866][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.711472][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.718876][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.742397][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.769123][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.776606][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.857374][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.921379][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.928744][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.983292][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.990562][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.743980][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.910007][ T5631] veth0_vlan: entered promiscuous mode [ 96.936680][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.956674][ T5631] veth1_vlan: entered promiscuous mode [ 97.031308][ T50] Bluetooth: hci0: command tx timeout [ 97.050105][ T993] cfg80211: failed to load regulatory.db [ 97.108760][ T50] Bluetooth: hci1: command tx timeout [ 97.118173][ T5631] veth0_macvtap: entered promiscuous mode [ 97.136741][ T5627] veth0_vlan: entered promiscuous mode [ 97.150661][ T5631] veth1_macvtap: entered promiscuous mode [ 97.183877][ T5627] veth1_vlan: entered promiscuous mode [ 97.188451][ T50] Bluetooth: hci2: command tx timeout [ 97.222711][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.263851][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.275027][ T50] Bluetooth: hci3: command tx timeout [ 97.286953][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.316929][ T3405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.325995][ T3405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.351113][ T3405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.362741][ T3405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.376707][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.427646][ T5627] veth0_macvtap: entered promiscuous mode [ 97.475669][ T5627] veth1_macvtap: entered promiscuous mode [ 97.552504][ T5638] veth0_vlan: entered promiscuous mode [ 97.552838][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.567705][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.576505][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.631557][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.653458][ T5638] veth1_vlan: entered promiscuous mode [ 97.666334][ T516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.686613][ T516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.702308][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.712758][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.729586][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.738422][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.756215][ T5635] veth0_vlan: entered promiscuous mode [ 97.800946][ T5635] veth1_vlan: entered promiscuous mode [ 97.866209][ T5638] veth0_macvtap: entered promiscuous mode [ 97.868475][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.890700][ T5638] veth1_macvtap: entered promiscuous mode [ 97.983919][ T3364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.004601][ T3364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.054985][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.077138][ T5635] veth0_macvtap: entered promiscuous mode [ 98.112461][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.121026][ T5635] veth1_macvtap: entered promiscuous mode [ 98.147598][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.156579][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.166673][ T516] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.184486][ T516] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.218826][ T516] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.237349][ T516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.274715][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.318334][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.453146][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.489820][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.508776][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.518526][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.528917][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.557546][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.743736][ T516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.770861][ T516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.845924][ T3405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.877444][ T3405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.079709][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.102265][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.116903][ T50] Bluetooth: hci0: command tx timeout [ 99.188929][ T50] Bluetooth: hci1: command tx timeout [ 99.270022][ T50] Bluetooth: hci2: command tx timeout [ 99.337006][ T5791] syz.2.4 uses obsolete (PF_INET,SOCK_PACKET) [ 99.348596][ T50] Bluetooth: hci3: command tx timeout [ 99.853993][ T5803] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.281354][ T5804] netlink: 330 bytes leftover after parsing attributes in process `syz.1.8'. [ 100.388518][ T5804] Zero length message leads to an empty skb [ 101.798011][ T5819] smpboot: CPU 1 is now offline [ 102.615279][ T5826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.656299][ T5826] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.695755][ T5826] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.718122][ T5826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.718310][ T5826] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.737559][ T5826] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.765331][ T5826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.765423][ T5826] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.829082][ T5826] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.911730][ T5826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.911823][ T5826] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.951441][ T5826] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.465056][ T5850] __vm_enough_memory: pid: 5850, comm: syz.1.15, bytes: 4398046457856 not enough memory for the allocation [ 104.480920][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.789304][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.795866][ T4946] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.867161][ T5859] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.951191][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.423078][ T5861] netlink: 330 bytes leftover after parsing attributes in process `syz.3.18'. [ 106.520770][ T5880] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 106.548607][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.598217][ T5887] netlink: 330 bytes leftover after parsing attributes in process `syz.3.30'. [ 106.870759][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.876850][ T4946] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.028318][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.628226][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.948192][ T4946] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.954460][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.109758][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.509872][ T5932] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.739171][ T5932] netlink: 330 bytes leftover after parsing attributes in process `syz.2.37'. [ 113.412873][ T5971] netlink: 330 bytes leftover after parsing attributes in process `syz.1.47'. [ 114.023926][ T5986] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.382003][ T5992] netlink: 330 bytes leftover after parsing attributes in process `syz.3.53'. [ 114.463288][ T5986] netlink: 330 bytes leftover after parsing attributes in process `syz.0.52'. [ 114.617575][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 115.298936][ T6014] netlink: 330 bytes leftover after parsing attributes in process `syz.0.59'. [ 117.308473][ T6041] netlink: 330 bytes leftover after parsing attributes in process `syz.0.65'. [ 118.391330][ T6064] netlink: zone id is out of range [ 118.391371][ T6064] netlink: zone id is out of range [ 118.391381][ T6064] netlink: zone id is out of range [ 118.391389][ T6064] netlink: zone id is out of range [ 118.391398][ T6064] netlink: zone id is out of range [ 118.391407][ T6064] netlink: zone id is out of range [ 118.391415][ T6064] netlink: zone id is out of range [ 118.391424][ T6064] netlink: zone id is out of range [ 118.391433][ T6064] netlink: zone id is out of range [ 118.391442][ T6064] netlink: zone id is out of range [ 120.186068][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 120.548226][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.562273][ T993] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 122.972984][ T6125] netlink: 330 bytes leftover after parsing attributes in process `syz.0.88'. [ 123.944536][ T6140] FAULT_INJECTION: forcing a failure. [ 123.944536][ T6140] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.016980][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.0.93 Not tainted syzkaller #0 PREEMPT(full) [ 124.017011][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.017030][ T6140] Call Trace: [ 124.017037][ T6140] [ 124.017045][ T6140] dump_stack_lvl+0x100/0x190 [ 124.017084][ T6140] should_fail_ex.cold+0x5/0xa [ 124.017114][ T6140] _copy_to_user+0x32/0xd0 [ 124.017138][ T6140] simple_read_from_buffer+0xcb/0x170 [ 124.017168][ T6140] proc_fail_nth_read+0x1af/0x230 [ 124.017206][ T6140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.017250][ T6140] ? rw_verify_area+0xce/0x6d0 [ 124.017272][ T6140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.017308][ T6140] vfs_read+0x1e4/0xb30 [ 124.017336][ T6140] ? __pfx_vfs_read+0x10/0x10 [ 124.017360][ T6140] ? __fget_files+0x215/0x3d0 [ 124.017393][ T6140] ? __fget_files+0x21f/0x3d0 [ 124.017426][ T6140] ksys_read+0x12a/0x250 [ 124.017451][ T6140] ? __pfx_ksys_read+0x10/0x10 [ 124.017478][ T6140] ? rcu_is_watching+0x12/0xc0 [ 124.017510][ T6140] do_syscall_64+0x10b/0xf80 [ 124.017540][ T6140] ? clear_bhb_loop+0x40/0x90 [ 124.017587][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.017611][ T6140] RIP: 0033:0x7f94da15d60e [ 124.017635][ T6140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.017660][ T6140] RSP: 002b:00007f94db0e7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.017686][ T6140] RAX: ffffffffffffffda RBX: 00007f94db0e86c0 RCX: 00007f94da15d60e [ 124.017702][ T6140] RDX: 000000000000000f RSI: 00007f94db0e80a0 RDI: 0000000000000004 [ 124.017717][ T6140] RBP: 00007f94db0e8090 R08: 0000000000000000 R09: 0000000000000000 [ 124.017730][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.017743][ T6140] R13: 00007f94da416038 R14: 00007f94da415fa0 R15: 00007ffd1a1eba98 [ 124.017787][ T6140] [ 124.528076][ T30] audit: type=1326 audit(1778168699.485:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.1.95" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad0d99cdd9 code=0x0 [ 124.771391][ T6154] can: request_module (can-proto-3) failed. [ 126.284049][ T6181] zram0: detected capacity change from 0 to 16 [ 129.027468][ T6228] netlink: 330 bytes leftover after parsing attributes in process `syz.2.114'. [ 129.533352][ T6241] FAULT_INJECTION: forcing a failure. [ 129.533352][ T6241] name failslab, interval 1, probability 0, space 0, times 1 [ 129.602286][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.1.117 Not tainted syzkaller #0 PREEMPT(full) [ 129.602317][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.602330][ T6241] Call Trace: [ 129.602337][ T6241] [ 129.602345][ T6241] dump_stack_lvl+0x100/0x190 [ 129.602376][ T6241] should_fail_ex.cold+0x5/0xa [ 129.602407][ T6241] ? tomoyo_realpath_from_path+0xb6/0x690 [ 129.602439][ T6241] should_failslab+0xc2/0x120 [ 129.602467][ T6241] __kmalloc_noprof+0xe0/0x850 [ 129.602518][ T6241] ? kfree+0x1dd/0x6c0 [ 129.602554][ T6241] tomoyo_realpath_from_path+0xb6/0x690 [ 129.602589][ T6241] tomoyo_path_number_perm+0x23c/0x580 [ 129.602612][ T6241] ? tomoyo_path_number_perm+0x22e/0x580 [ 129.602637][ T6241] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.602671][ T6241] ? rcu_read_lock_any_held+0x6a/0xa0 [ 129.602724][ T6241] ? do_raw_spin_unlock+0x145/0x1e0 [ 129.602750][ T6241] ? hook_file_ioctl_common+0x149/0x410 [ 129.602787][ T6241] security_file_ioctl+0xd3/0x230 [ 129.602815][ T6241] __x64_sys_ioctl+0xb7/0x210 [ 129.602840][ T6241] do_syscall_64+0x10b/0xf80 [ 129.602870][ T6241] ? clear_bhb_loop+0x40/0x90 [ 129.602899][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.602922][ T6241] RIP: 0033:0x7fad0d99cdd9 [ 129.602939][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.602961][ T6241] RSP: 002b:00007fad0e8ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.602982][ T6241] RAX: ffffffffffffffda RBX: 00007fad0dc15fa0 RCX: 00007fad0d99cdd9 [ 129.602997][ T6241] RDX: 0000000000000000 RSI: 00000000c0045627 RDI: 0000000000000002 [ 129.603028][ T6241] RBP: 00007fad0e8ea090 R08: 0000000000000000 R09: 0000000000000000 [ 129.603042][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.603055][ T6241] R13: 00007fad0dc16038 R14: 00007fad0dc15fa0 R15: 00007ffd618de678 [ 129.603084][ T6241] [ 129.603102][ T6241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.038256][ T6262] netlink: 'syz.1.122': attribute type 3 has an invalid length. [ 131.997713][ T6281] netlink: 330 bytes leftover after parsing attributes in process `syz.1.128'. [ 132.875441][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887743][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.404945][ T6325] zram0: detected capacity change from 16 to 0 [ 136.730730][ T6347] random: crng reseeded on system resumption [ 139.003946][ T6391] FAULT_INJECTION: forcing a failure. [ 139.003946][ T6391] name failslab, interval 1, probability 0, space 0, times 0 [ 139.060547][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: syz.3.156 Not tainted syzkaller #0 PREEMPT(full) [ 139.060581][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.060595][ T6391] Call Trace: [ 139.060603][ T6391] [ 139.060612][ T6391] dump_stack_lvl+0x100/0x190 [ 139.060644][ T6391] should_fail_ex.cold+0x5/0xa [ 139.060675][ T6391] should_failslab+0xc2/0x120 [ 139.060705][ T6391] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 139.060752][ T6391] ? prepare_creds+0x2c/0x950 [ 139.060784][ T6391] prepare_creds+0x2c/0x950 [ 139.060813][ T6391] __sys_setuid+0x9c/0x440 [ 139.060845][ T6391] do_syscall_64+0x10b/0xf80 [ 139.060879][ T6391] ? clear_bhb_loop+0x40/0x90 [ 139.060909][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.060934][ T6391] RIP: 0033:0x7f3a26b9cdd9 [ 139.060953][ T6391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.060976][ T6391] RSP: 002b:00007f3a27aad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 139.060999][ T6391] RAX: ffffffffffffffda RBX: 00007f3a26e15fa0 RCX: 00007f3a26b9cdd9 [ 139.061015][ T6391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 139.061029][ T6391] RBP: 00007f3a26c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 139.061044][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.061058][ T6391] R13: 00007f3a26e16038 R14: 00007f3a26e15fa0 R15: 00007ffe90fed888 [ 139.061088][ T6391] [ 140.770751][ T6420] netlink: 'syz.3.162': attribute type 3 has an invalid length. [ 141.356878][ T30] audit: type=1326 audit(1778168716.325:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz.0.165" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94da19cdd9 code=0x0 [ 142.499201][ T6454] process 'syz.0.170' launched ':,' with NULL argv: empty string added [ 143.073550][ T6466] netlink: 'syz.1.174': attribute type 3 has an invalid length. [ 143.535462][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 145.698903][ T6504] netlink: 'syz.2.187': attribute type 3 has an invalid length. [ 145.871760][ T6506] netlink: 330 bytes leftover after parsing attributes in process `syz.1.188'. [ 145.919823][ T6506] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.928742][ T6506] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.194411][ T6515] net_ratelimit: 114 callbacks suppressed [ 146.194437][ T6515] netlink: zone id is out of range [ 146.325285][ T6515] netlink: zone id is out of range [ 146.372123][ T6515] netlink: zone id is out of range [ 146.407687][ T6515] netlink: zone id is out of range [ 146.441917][ T6515] netlink: zone id is out of range [ 146.480690][ T6515] netlink: zone id is out of range [ 146.510635][ T6515] netlink: zone id is out of range [ 146.547651][ T6515] netlink: zone id is out of range [ 146.585361][ T6515] netlink: zone id is out of range [ 146.616410][ T6515] netlink: zone id is out of range [ 146.846267][ T6517] netlink: 'syz.1.198': attribute type 3 has an invalid length. [ 149.132681][ T6543] FAULT_INJECTION: forcing a failure. [ 149.132681][ T6543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.231840][ T6543] CPU: 0 UID: 0 PID: 6543 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT(full) [ 149.231871][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.231884][ T6543] Call Trace: [ 149.231892][ T6543] [ 149.231900][ T6543] dump_stack_lvl+0x100/0x190 [ 149.231931][ T6543] should_fail_ex.cold+0x5/0xa [ 149.231961][ T6543] _copy_to_user+0x32/0xd0 [ 149.231986][ T6543] simple_read_from_buffer+0xcb/0x170 [ 149.232016][ T6543] proc_fail_nth_read+0x1af/0x230 [ 149.232055][ T6543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.232099][ T6543] ? rw_verify_area+0xce/0x6d0 [ 149.232122][ T6543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.232172][ T6543] vfs_read+0x1e4/0xb30 [ 149.232198][ T6543] ? __pfx___video_do_ioctl+0x10/0x10 [ 149.232236][ T6543] ? __pfx_vfs_read+0x10/0x10 [ 149.232261][ T6543] ? __pfx_video_usercopy+0x10/0x10 [ 149.232312][ T6543] ksys_read+0x12a/0x250 [ 149.232337][ T6543] ? __pfx_ksys_read+0x10/0x10 [ 149.232361][ T6543] ? v4l2_ioctl+0x1c5/0x250 [ 149.232384][ T6543] ? rcu_is_watching+0x12/0xc0 [ 149.232415][ T6543] do_syscall_64+0x10b/0xf80 [ 149.232446][ T6543] ? clear_bhb_loop+0x40/0x90 [ 149.232474][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.232497][ T6543] RIP: 0033:0x7fad0d95d60e [ 149.232515][ T6543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.232536][ T6543] RSP: 002b:00007fad0e8e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.232557][ T6543] RAX: ffffffffffffffda RBX: 00007fad0e8ea6c0 RCX: 00007fad0d95d60e [ 149.232572][ T6543] RDX: 000000000000000f RSI: 00007fad0e8ea0a0 RDI: 0000000000000003 [ 149.232585][ T6543] RBP: 00007fad0e8ea090 R08: 0000000000000000 R09: 0000000000000000 [ 149.232598][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.232610][ T6543] R13: 00007fad0dc16038 R14: 00007fad0dc15fa0 R15: 00007ffd618de678 [ 149.232638][ T6543] [ 149.821337][ T6554] zram0: detected capacity change from 0 to 16 [ 151.406585][ T6584] NFSD: Failed to start, no listeners configured. [ 154.515239][ T6653] __vm_enough_memory: pid: 6653, comm: syz.0.217, bytes: 4398046457856 not enough memory for the allocation [ 159.846378][ T6728] netlink: 330 bytes leftover after parsing attributes in process `syz.3.226'. [ 159.953449][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.961099][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.704675][ T6751] futex_wake_op: syz.1.230 tries to shift op by -2048; fix this program [ 160.790112][ T6757] netlink: 68 bytes leftover after parsing attributes in process `syz.0.231'. [ 164.265051][ T6822] net_ratelimit: 104 callbacks suppressed [ 164.265069][ T6822] netlink: zone id is out of range [ 164.314599][ T6822] netlink: zone id is out of range [ 164.341458][ T6822] netlink: zone id is out of range [ 164.363853][ T6820] netlink: 330 bytes leftover after parsing attributes in process `syz.3.246'. [ 164.375732][ T6822] netlink: zone id is out of range [ 164.395150][ T6822] netlink: zone id is out of range [ 164.414404][ T6822] netlink: zone id is out of range [ 164.438024][ T6822] netlink: zone id is out of range [ 164.461879][ T6822] netlink: zone id is out of range [ 164.499931][ T6822] netlink: zone id is out of range [ 164.524755][ T6822] netlink: zone id is out of range [ 165.490911][ T6846] netlink: 68 bytes leftover after parsing attributes in process `syz.2.252'. [ 166.223378][ T6866] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 168.916706][ T6902] mmap: syz.1.265 (6902) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.400299][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.515057][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.676740][ T6919] kvm: kvm [6918]: vcpu5, guest rIP: 0xfff0 Unhandled RDMSR(0x4000007f) [ 169.691852][ T6921] net_ratelimit: 47 callbacks suppressed [ 169.691871][ T6921] netlink: zone id is out of range [ 169.738399][ T6921] netlink: zone id is out of range [ 169.770262][ T6921] netlink: zone id is out of range [ 169.798815][ T6921] netlink: zone id is out of range [ 169.825835][ T6921] netlink: zone id is out of range [ 169.852025][ T6921] netlink: zone id is out of range [ 169.876650][ T6921] netlink: zone id is out of range [ 169.903087][ T6921] netlink: zone id is out of range [ 169.932737][ T6921] netlink: zone id is out of range [ 169.960189][ T6921] netlink: zone id is out of range [ 170.506670][ T6935] netlink: 68 bytes leftover after parsing attributes in process `syz.0.275'. [ 173.271572][ T6995] netlink: 68 bytes leftover after parsing attributes in process `syz.3.290'. [ 173.729340][ T7005] __vm_enough_memory: pid: 7005, comm: syz.0.292, bytes: 4398046457856 not enough memory for the allocation [ 175.704356][ T50] Bluetooth: hci0: unexpected event 0x3e length: 358 > 260 [ 175.704389][ T50] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 175.810154][ T7037] netlink: 68 bytes leftover after parsing attributes in process `syz.1.302'. [ 176.993735][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 177.186554][ T7053] netlink: 330 bytes leftover after parsing attributes in process `syz.3.308'. [ 178.096935][ T7068] netlink: 68 bytes leftover after parsing attributes in process `syz.2.313'. [ 178.615763][ T7082] FAULT_INJECTION: forcing a failure. [ 178.615763][ T7082] name failslab, interval 1, probability 0, space 0, times 0 [ 178.665247][ T7082] CPU: 0 UID: 0 PID: 7082 Comm: syz.2.316 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.665282][ T7082] Tainted: [L]=SOFTLOCKUP [ 178.665290][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.665304][ T7082] Call Trace: [ 178.665311][ T7082] [ 178.665319][ T7082] dump_stack_lvl+0x100/0x190 [ 178.665349][ T7082] should_fail_ex.cold+0x5/0xa [ 178.665378][ T7082] should_failslab+0xc2/0x120 [ 178.665405][ T7082] __kvmalloc_node_noprof+0xfa/0xa00 [ 178.665427][ T7082] ? traverse.part.0.constprop.0+0x397/0x650 [ 178.665456][ T7082] ? __pfx___mutex_lock+0x10/0x10 [ 178.665493][ T7082] traverse.part.0.constprop.0+0x397/0x650 [ 178.665520][ T7082] ? __fget_files+0x215/0x3d0 [ 178.665554][ T7082] seq_lseek+0x2fb/0x430 [ 178.665584][ T7082] ksys_lseek+0xf3/0x1b0 [ 178.665609][ T7082] do_syscall_64+0x10b/0xf80 [ 178.665639][ T7082] ? clear_bhb_loop+0x40/0x90 [ 178.665667][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.665690][ T7082] RIP: 0033:0x7fc9dc79cdd9 [ 178.665707][ T7082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.665728][ T7082] RSP: 002b:00007fc9dd576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 178.665749][ T7082] RAX: ffffffffffffffda RBX: 00007fc9dca15fa0 RCX: 00007fc9dc79cdd9 [ 178.665763][ T7082] RDX: 0000000000000001 RSI: 00000000000007fd RDI: 0000000000000003 [ 178.665783][ T7082] RBP: 00007fc9dd576090 R08: 0000000000000000 R09: 0000000000000000 [ 178.665796][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.665809][ T7082] R13: 00007fc9dca16038 R14: 00007fc9dca15fa0 R15: 00007fff2de7d2d8 [ 178.665837][ T7082] [ 179.120239][ T7085] net_ratelimit: 104 callbacks suppressed [ 179.120258][ T7085] netlink: zone id is out of range [ 179.145799][ T7085] netlink: zone id is out of range [ 179.159088][ T7085] netlink: zone id is out of range [ 179.169481][ T7085] netlink: zone id is out of range [ 179.179714][ T7085] netlink: zone id is out of range [ 179.196468][ T7085] netlink: zone id is out of range [ 179.213539][ T7085] netlink: zone id is out of range [ 179.227880][ T7085] netlink: zone id is out of range [ 179.237852][ T7085] netlink: zone id is out of range [ 179.246409][ T7085] netlink: zone id is out of range [ 179.463613][ T7092] netlink: 330 bytes leftover after parsing attributes in process `syz.2.318'. [ 179.912530][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.920181][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.257956][ T7132] FAULT_INJECTION: forcing a failure. [ 185.257956][ T7132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.302270][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.3.329 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.302307][ T7132] Tainted: [L]=SOFTLOCKUP [ 185.302316][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.302329][ T7132] Call Trace: [ 185.302337][ T7132] [ 185.302347][ T7132] dump_stack_lvl+0x100/0x190 [ 185.302376][ T7132] should_fail_ex.cold+0x5/0xa [ 185.302407][ T7132] _copy_to_user+0x32/0xd0 [ 185.302432][ T7132] simple_read_from_buffer+0xcb/0x170 [ 185.302463][ T7132] proc_fail_nth_read+0x1af/0x230 [ 185.302503][ T7132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.302544][ T7132] ? rw_verify_area+0xce/0x6d0 [ 185.302567][ T7132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.302605][ T7132] vfs_read+0x1e4/0xb30 [ 185.302635][ T7132] ? __pfx_vfs_read+0x10/0x10 [ 185.302661][ T7132] ? __fget_files+0x215/0x3d0 [ 185.302695][ T7132] ? __fget_files+0x21f/0x3d0 [ 185.302730][ T7132] ksys_read+0x12a/0x250 [ 185.302756][ T7132] ? __pfx_ksys_read+0x10/0x10 [ 185.302785][ T7132] ? rcu_is_watching+0x12/0xc0 [ 185.302818][ T7132] do_syscall_64+0x10b/0xf80 [ 185.302850][ T7132] ? clear_bhb_loop+0x40/0x90 [ 185.302879][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.302903][ T7132] RIP: 0033:0x7f3a26b5d60e [ 185.302922][ T7132] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.302944][ T7132] RSP: 002b:00007f3a27aacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.302966][ T7132] RAX: ffffffffffffffda RBX: 00007f3a27aad6c0 RCX: 00007f3a26b5d60e [ 185.302983][ T7132] RDX: 000000000000000f RSI: 00007f3a27aad0a0 RDI: 0000000000000004 [ 185.302997][ T7132] RBP: 00007f3a27aad090 R08: 0000000000000000 R09: 0000000000000000 [ 185.303011][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.303024][ T7132] R13: 00007f3a26e16038 R14: 00007f3a26e15fa0 R15: 00007ffe90fed888 [ 185.303053][ T7132] [ 185.957616][ T7136] netlink: 330 bytes leftover after parsing attributes in process `syz.3.330'. [ 187.635732][ T7171] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 188.122921][ T7181] netlink: 342 bytes leftover after parsing attributes in process `syz.3.341'. [ 188.182690][ T7182] netlink: 338 bytes leftover after parsing attributes in process `syz.2.342'. [ 188.232800][ T7182] netlink: 338 bytes leftover after parsing attributes in process `syz.2.342'. [ 188.245352][ T7184] netlink: 68 bytes leftover after parsing attributes in process `syz.1.343'. [ 188.511986][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 189.202170][ T4946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.216714][ T4946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.224769][ T4946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.241224][ T4946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.250346][ T4946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.526595][ T7198] syz.1.347 (7198) used greatest stack depth: 16904 bytes left [ 191.349856][ T4946] Bluetooth: hci4: command tx timeout [ 191.758025][ T7244] net_ratelimit: 47 callbacks suppressed [ 191.758045][ T7244] netlink: zone id is out of range [ 191.836956][ T7244] netlink: zone id is out of range [ 191.873879][ T7244] netlink: zone id is out of range [ 191.911374][ T7244] netlink: zone id is out of range [ 191.943536][ T7244] netlink: zone id is out of range [ 191.970006][ T7244] netlink: zone id is out of range [ 192.010507][ T7244] netlink: zone id is out of range [ 192.052936][ T7244] netlink: zone id is out of range [ 192.098249][ T7244] netlink: zone id is out of range [ 192.127429][ T7244] netlink: zone id is out of range [ 192.477918][ T7258] netlink: 330 bytes leftover after parsing attributes in process `syz.3.357'. [ 192.521065][ T7254] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 192.561615][ T7256] NFSD: Failed to start, no listeners configured. [ 192.646297][ T7254] vhci_hcd vhci_hcd.2: invalid port number 111 [ 192.754259][ T7254] vhci_hcd vhci_hcd.2: invalid port number 111 [ 193.428064][ T4946] Bluetooth: hci4: command tx timeout [ 194.312201][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329548][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.427556][ T7199] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.466353][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.503319][ T7199] bridge_slave_0: entered allmulticast mode [ 194.512837][ T7296] netlink: 330 bytes leftover after parsing attributes in process `syz.1.365'. [ 194.543775][ T7199] bridge_slave_0: entered promiscuous mode [ 194.603567][ T7199] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.643597][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.676927][ T7199] bridge_slave_1: entered allmulticast mode [ 194.713432][ T7199] bridge_slave_1: entered promiscuous mode [ 194.816362][ T7302] ======================================================= [ 194.816362][ T7302] WARNING: The mand mount option has been deprecated and [ 194.816362][ T7302] and is ignored by this kernel. Remove the mand [ 194.816362][ T7302] option from the mount to silence this warning. [ 194.816362][ T7302] ======================================================= [ 194.910556][ T7199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.975887][ T7199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.256285][ T7308] netlink: 'syz.1.367': attribute type 4 has an invalid length. [ 195.301152][ T7308] netlink: 86 bytes leftover after parsing attributes in process `syz.1.367'. [ 195.337358][ T7199] team0: Port device team_slave_0 added [ 195.380531][ T7199] team0: Port device team_slave_1 added [ 195.508226][ T4946] Bluetooth: hci4: command tx timeout [ 195.556169][ T7199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.613225][ T7199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.811459][ T7199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.879804][ T7199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.931188][ T7199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.095311][ T7199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.363431][ T7199] hsr_slave_0: entered promiscuous mode [ 196.404181][ T7199] hsr_slave_1: entered promiscuous mode [ 196.437541][ T7199] debugfs: 'hsr0' already exists in 'hsr' [ 196.473527][ T7199] Cannot create hsr debugfs directory [ 197.588955][ T4946] Bluetooth: hci4: command tx timeout [ 197.645610][ T7336] netlink: 68 bytes leftover after parsing attributes in process `syz.3.375'. [ 197.805241][ T7199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 197.894405][ T7199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.947145][ T7199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.022367][ T7199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.070569][ T7199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.163930][ T7199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.201869][ T7199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.255047][ T7199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.116841][ T7199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.217198][ T7199] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.276980][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.284203][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.362661][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.369896][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.867967][ T4946] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.876319][ T808] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 201.315580][ T7386] netlink: 330 bytes leftover after parsing attributes in process `syz.3.383'. [ 201.525801][ T7199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.172972][ T7199] veth0_vlan: entered promiscuous mode [ 203.506768][ T7199] veth1_vlan: entered promiscuous mode [ 203.754433][ T7199] veth0_macvtap: entered promiscuous mode [ 203.808583][ T7199] veth1_macvtap: entered promiscuous mode [ 203.936012][ T7199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.038118][ T7199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.134279][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.163543][ T7431] netlink: 330 bytes leftover after parsing attributes in process `syz.2.393'. [ 204.203138][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.254480][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.325506][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.685806][ T4946] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 204.875795][ T3405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.938681][ T3405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.325261][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.378888][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.132142][ T7464] netlink: 330 bytes leftover after parsing attributes in process `syz.2.403'. [ 206.710515][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.730525][ T7476] net_ratelimit: 47 callbacks suppressed [ 206.730544][ T7476] netlink: zone id is out of range [ 206.816437][ T7476] netlink: zone id is out of range [ 206.854404][ T7476] netlink: zone id is out of range [ 206.884356][ T7476] netlink: zone id is out of range [ 206.913322][ T7476] netlink: zone id is out of range [ 206.944807][ T7476] netlink: zone id is out of range [ 206.966232][ T7476] netlink: zone id is out of range [ 206.997901][ T7476] netlink: zone id is out of range [ 207.010751][ T50] block nbd0: Receive control failed (result -32) [ 207.050240][ T7476] netlink: zone id is out of range [ 207.074729][ T7476] netlink: zone id is out of range [ 207.856643][ T7508] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 208.001076][ T7508] netlink: 330 bytes leftover after parsing attributes in process `syz.4.416'. [ 208.039035][ T30] audit: type=1804 audit(1778168783.005:4): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.415" name="/newroot/sys/kernel/debug/tracing/timestamp_mode" dev="tracefs" ino=2821 res=1 errno=0 [ 208.509097][ T7521] netlink: 330 bytes leftover after parsing attributes in process `syz.1.420'. [ 208.608219][ T7526] netlink: 338 bytes leftover after parsing attributes in process `syz.4.419'. [ 208.792498][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.887152][ T7549] netlink: 330 bytes leftover after parsing attributes in process `syz.4.428'. [ 210.134888][ T7549] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.142475][ T7549] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.351179][ T7563] blktrace: Concurrent blktraces are not allowed on sda1 [ 212.604004][ T7593] FAULT_INJECTION: forcing a failure. [ 212.604004][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 212.694172][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.1.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.694208][ T7593] Tainted: [L]=SOFTLOCKUP [ 212.694216][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.694229][ T7593] Call Trace: [ 212.694236][ T7593] [ 212.694244][ T7593] dump_stack_lvl+0x100/0x190 [ 212.694273][ T7593] should_fail_ex.cold+0x5/0xa [ 212.694302][ T7593] ? tomoyo_realpath_from_path+0xb6/0x690 [ 212.694332][ T7593] should_failslab+0xc2/0x120 [ 212.694359][ T7593] __kmalloc_noprof+0xe0/0x850 [ 212.694395][ T7593] ? kfree+0x1dd/0x6c0 [ 212.694451][ T7593] tomoyo_realpath_from_path+0xb6/0x690 [ 212.694487][ T7593] tomoyo_path_number_perm+0x23c/0x580 [ 212.694510][ T7593] ? tomoyo_path_number_perm+0x22e/0x580 [ 212.694535][ T7593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.694569][ T7593] ? rcu_read_lock_any_held+0x6a/0xa0 [ 212.694616][ T7593] ? do_raw_spin_unlock+0x145/0x1e0 [ 212.694643][ T7593] ? hook_file_ioctl_common+0x149/0x410 [ 212.694680][ T7593] security_file_ioctl+0xd3/0x230 [ 212.694705][ T7593] __x64_sys_ioctl+0xb7/0x210 [ 212.694750][ T7593] do_syscall_64+0x10b/0xf80 [ 212.694781][ T7593] ? clear_bhb_loop+0x40/0x90 [ 212.694810][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.694833][ T7593] RIP: 0033:0x7fad0d99cdd9 [ 212.694851][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.694873][ T7593] RSP: 002b:00007fad0e8ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.694894][ T7593] RAX: ffffffffffffffda RBX: 00007fad0dc15fa0 RCX: 00007fad0d99cdd9 [ 212.694909][ T7593] RDX: 0000000000000000 RSI: 00000000c0045627 RDI: 0000000000000001 [ 212.694923][ T7593] RBP: 00007fad0e8ea090 R08: 0000000000000000 R09: 0000000000000000 [ 212.694936][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.694949][ T7593] R13: 00007fad0dc16038 R14: 00007fad0dc15fa0 R15: 00007ffd618de678 [ 212.694979][ T7593] [ 212.694987][ T7593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.681119][ T7604] FAULT_INJECTION: forcing a failure. [ 213.681119][ T7604] name fail_futex, interval 1, probability 0, space 0, times 1 [ 213.806158][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.4.445 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.806194][ T7604] Tainted: [L]=SOFTLOCKUP [ 213.806202][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.806214][ T7604] Call Trace: [ 213.806222][ T7604] [ 213.806230][ T7604] dump_stack_lvl+0x100/0x190 [ 213.806259][ T7604] should_fail_ex.cold+0x5/0xa [ 213.806289][ T7604] get_futex_key+0x1d2/0x1510 [ 213.806315][ T7604] ? __pfx_get_futex_key+0x10/0x10 [ 213.806337][ T7604] ? find_held_lock+0x2b/0x80 [ 213.806367][ T7604] ? futex_wake+0x456/0x530 [ 213.806409][ T7604] futex_wake+0xea/0x530 [ 213.806437][ T7604] ? __do_sys_mremap+0x97f/0x1850 [ 213.806488][ T7604] ? __pfx_futex_wake+0x10/0x10 [ 213.806520][ T7604] ? __pfx___do_sys_mremap+0x10/0x10 [ 213.806558][ T7604] do_futex+0x32b/0x350 [ 213.806581][ T7604] ? __pfx_do_futex+0x10/0x10 [ 213.806611][ T7604] __x64_sys_futex+0x34f/0x4d0 [ 213.806637][ T7604] ? __pfx___x64_sys_futex+0x10/0x10 [ 213.806666][ T7604] ? rcu_is_watching+0x12/0xc0 [ 213.806695][ T7604] do_syscall_64+0x10b/0xf80 [ 213.806724][ T7604] ? clear_bhb_loop+0x40/0x90 [ 213.806750][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.806771][ T7604] RIP: 0033:0x7f8b30f9cdd9 [ 213.806788][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.806808][ T7604] RSP: 002b:00007f8b31e9a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 213.806828][ T7604] RAX: ffffffffffffffda RBX: 00007f8b31216098 RCX: 00007f8b30f9cdd9 [ 213.806841][ T7604] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8b3121609c [ 213.806857][ T7604] RBP: 00007f8b31216090 R08: 0000000000000001 R09: 0000000000000000 [ 213.806869][ T7604] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 213.806882][ T7604] R13: 00007f8b31216128 R14: 00007ffe9c231600 R15: 00007ffe9c2316e8 [ 213.806907][ T7604] [ 216.210666][ T7638] FAULT_INJECTION: forcing a failure. [ 216.210666][ T7638] name failslab, interval 1, probability 0, space 0, times 0 [ 216.321181][ T7638] CPU: 0 UID: 0 PID: 7638 Comm: syz.4.456 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.321218][ T7638] Tainted: [L]=SOFTLOCKUP [ 216.321226][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.321240][ T7638] Call Trace: [ 216.321247][ T7638] [ 216.321255][ T7638] dump_stack_lvl+0x100/0x190 [ 216.321285][ T7638] should_fail_ex.cold+0x5/0xa [ 216.321314][ T7638] ? tomoyo_encode2+0xfb/0x3c0 [ 216.321342][ T7638] should_failslab+0xc2/0x120 [ 216.321370][ T7638] __kmalloc_noprof+0xe0/0x850 [ 216.321408][ T7638] ? d_absolute_path+0x136/0x1b0 [ 216.321435][ T7638] tomoyo_encode2+0xfb/0x3c0 [ 216.321469][ T7638] tomoyo_encode+0x29/0x50 [ 216.321497][ T7638] tomoyo_realpath_from_path+0x18c/0x690 [ 216.321535][ T7638] tomoyo_path_number_perm+0x23c/0x580 [ 216.321559][ T7638] ? tomoyo_path_number_perm+0x22e/0x580 [ 216.321586][ T7638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 216.321611][ T7638] ? trace_sched_exit_tp+0x11c/0x160 [ 216.321675][ T7638] ? preempt_schedule_irq+0x7b/0x90 [ 216.321719][ T7638] ? rcu_is_watching+0x12/0xc0 [ 216.321747][ T7638] ? hook_file_ioctl_common+0x149/0x410 [ 216.321771][ T7638] ? irqentry_exit+0x246/0x790 [ 216.321801][ T7638] ? lockdep_hardirqs_on+0x78/0x100 [ 216.321831][ T7638] ? irqentry_exit+0x246/0x790 [ 216.321870][ T7638] security_file_ioctl+0xd3/0x230 [ 216.321896][ T7638] __x64_sys_ioctl+0xb7/0x210 [ 216.321921][ T7638] do_syscall_64+0x10b/0xf80 [ 216.321962][ T7638] ? clear_bhb_loop+0x40/0x90 [ 216.321988][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.322009][ T7638] RIP: 0033:0x7f8b30f9cdd9 [ 216.322025][ T7638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.322051][ T7638] RSP: 002b:00007f8b31ebb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.322071][ T7638] RAX: ffffffffffffffda RBX: 00007f8b31215fa0 RCX: 00007f8b30f9cdd9 [ 216.322084][ T7638] RDX: 0000000000000000 RSI: 00000000c0045627 RDI: 0000000000000001 [ 216.322096][ T7638] RBP: 00007f8b31ebb090 R08: 0000000000000000 R09: 0000000000000000 [ 216.322109][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.322121][ T7638] R13: 00007f8b31216038 R14: 00007f8b31215fa0 R15: 00007ffe9c2316e8 [ 216.322148][ T7638] [ 216.322174][ T7638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 217.328823][ T7643] hub 1-0:1.0: USB hub found [ 217.373980][ T7643] hub 1-0:1.0: 1 port detected [ 220.378015][ T7694] program syz.2.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.264262][ T7703] FAULT_INJECTION: forcing a failure. [ 222.264262][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.345951][ T7703] CPU: 0 UID: 0 PID: 7703 Comm: syz.2.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.345987][ T7703] Tainted: [L]=SOFTLOCKUP [ 222.345995][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.346009][ T7703] Call Trace: [ 222.346017][ T7703] [ 222.346025][ T7703] dump_stack_lvl+0x100/0x190 [ 222.346055][ T7703] should_fail_ex.cold+0x5/0xa [ 222.346085][ T7703] _copy_from_user+0x2e/0xd0 [ 222.346109][ T7703] video_usercopy+0x9e0/0x1490 [ 222.346149][ T7703] ? __pfx___video_do_ioctl+0x10/0x10 [ 222.346190][ T7703] ? __pfx_video_usercopy+0x10/0x10 [ 222.346245][ T7703] v4l2_ioctl+0x1bd/0x250 [ 222.346267][ T7703] ? __pfx_v4l2_ioctl+0x10/0x10 [ 222.346290][ T7703] __x64_sys_ioctl+0x18e/0x210 [ 222.346317][ T7703] do_syscall_64+0x10b/0xf80 [ 222.346349][ T7703] ? clear_bhb_loop+0x40/0x90 [ 222.346378][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.346402][ T7703] RIP: 0033:0x7fc9dc79cdd9 [ 222.346420][ T7703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.346442][ T7703] RSP: 002b:00007fc9dd576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.346463][ T7703] RAX: ffffffffffffffda RBX: 00007fc9dca15fa0 RCX: 00007fc9dc79cdd9 [ 222.346482][ T7703] RDX: 0000000000000000 RSI: 00000000c0045627 RDI: 0000000000000001 [ 222.346503][ T7703] RBP: 00007fc9dd576090 R08: 0000000000000000 R09: 0000000000000000 [ 222.346517][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.346530][ T7703] R13: 00007fc9dca16038 R14: 00007fc9dca15fa0 R15: 00007fff2de7d2d8 [ 222.346559][ T7703] [ 223.722695][ T7725] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 223.884926][ T30] audit: type=1800 audit(1778168798.855:5): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.477" name="file0" dev="tmpfs" ino=693 res=0 errno=0 [ 225.453348][ T7744] FAULT_INJECTION: forcing a failure. [ 225.453348][ T7744] name failslab, interval 1, probability 0, space 0, times 0 [ 225.599403][ T7744] CPU: 0 UID: 0 PID: 7744 Comm: syz.1.482 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.599443][ T7744] Tainted: [L]=SOFTLOCKUP [ 225.599451][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.599466][ T7744] Call Trace: [ 225.599474][ T7744] [ 225.599483][ T7744] dump_stack_lvl+0x100/0x190 [ 225.599514][ T7744] should_fail_ex.cold+0x5/0xa [ 225.599546][ T7744] should_failslab+0xc2/0x120 [ 225.599575][ T7744] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 225.599617][ T7744] ? xas_split_alloc+0x11c/0x4a0 [ 225.599658][ T7744] xas_split_alloc+0x11c/0x4a0 [ 225.599699][ T7744] __folio_split+0x5e5/0x1690 [ 225.599743][ T7744] ? find_held_lock+0x2b/0x80 [ 225.599776][ T7744] ? __pfx___folio_split+0x10/0x10 [ 225.599812][ T7744] ? folio_alloc_swap+0xbd4/0x1eb0 [ 225.599849][ T7744] ? folio_alloc_swap+0x4c6/0x1eb0 [ 225.599881][ T7744] shmem_writeout+0x79f/0x1a90 [ 225.599928][ T7744] ? __pfx_shmem_writeout+0x10/0x10 [ 225.599968][ T7744] ? __pfx_try_to_unmap+0x10/0x10 [ 225.600005][ T7744] ? find_held_lock+0x2b/0x80 [ 225.600040][ T7744] ? inode_to_bdi+0x9e/0x160 [ 225.600067][ T7744] ? folio_clear_dirty_for_io+0x178/0x810 [ 225.600102][ T7744] shrink_folio_list+0x3bbd/0x60c0 [ 225.600160][ T7744] ? __pfx_shrink_folio_list+0x10/0x10 [ 225.600203][ T7744] ? __lock_acquire+0x4a5/0x2630 [ 225.600238][ T7744] ? lock_acquire+0x1b1/0x370 [ 225.600261][ T7744] ? find_held_lock+0x2b/0x80 [ 225.600317][ T7744] ? __lock_acquire+0x4a5/0x2630 [ 225.600339][ T7744] ? css_rstat_updated+0x1ce/0x5a0 [ 225.600381][ T7744] ? __pfx_css_rstat_updated+0x10/0x10 [ 225.600426][ T7744] reclaim_folio_list+0xdc/0x5e0 [ 225.600469][ T7744] ? __pfx_reclaim_folio_list+0x10/0x10 [ 225.600506][ T7744] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 225.600559][ T7744] ? lru_gen_update_size+0x431/0xe20 [ 225.600600][ T7744] ? lru_gen_del_folio+0x382/0x5f0 [ 225.600638][ T7744] reclaim_pages+0x428/0x5e0 [ 225.600680][ T7744] ? __pfx_reclaim_pages+0x10/0x10 [ 225.600717][ T7744] ? madvise_cold_or_pageout_pte_range+0x2177/0x2620 [ 225.600755][ T7744] ? folio_isolate_lru+0xd6/0xe90 [ 225.600798][ T7744] madvise_cold_or_pageout_pte_range+0x14c9/0x2620 [ 225.600846][ T7744] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 225.600884][ T7744] ? __lock_acquire+0x4a5/0x2630 [ 225.600906][ T7744] ? css_rstat_updated+0x1ce/0x5a0 [ 225.600947][ T7744] ? __pfx_css_rstat_updated+0x10/0x10 [ 225.600988][ T7744] ? register_lock_class+0x40/0x560 [ 225.601013][ T7744] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 225.601050][ T7744] walk_pgd_range+0xc1a/0x1dd0 [ 225.601082][ T7744] ? rcu_read_unlock+0x17/0x60 [ 225.601124][ T7744] ? __pfx_walk_pgd_range+0x10/0x10 [ 225.601156][ T7744] ? folios_put_refs+0x716/0xa90 [ 225.601183][ T7744] __walk_page_range+0x163/0x820 [ 225.601210][ T7744] ? find_held_lock+0x2b/0x80 [ 225.601252][ T7744] walk_page_range_vma_unsafe+0x209/0x8f0 [ 225.601283][ T7744] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 225.601316][ T7744] ? find_held_lock+0x2b/0x80 [ 225.601348][ T7744] ? mlock_drain_local+0x254/0x4e0 [ 225.601371][ T7744] ? mlock_drain_local+0x254/0x4e0 [ 225.601402][ T7744] walk_page_range_vma+0x63/0x90 [ 225.601430][ T7744] madvise_pageout+0x259/0x540 [ 225.601463][ T7744] ? __pfx_madvise_pageout+0x10/0x10 [ 225.601495][ T7744] ? rcu_is_watching+0x12/0xc0 [ 225.601556][ T7744] ? mtree_range_walk+0x72b/0xb70 [ 225.601592][ T7744] madvise_vma_behavior+0x4f7/0x2200 [ 225.601630][ T7744] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 225.601673][ T7744] ? find_vma_prev+0xd8/0x150 [ 225.601703][ T7744] ? futex_unqueue+0x133/0x2c0 [ 225.601728][ T7744] ? __pfx_find_vma_prev+0x10/0x10 [ 225.601767][ T7744] ? __futex_wait+0x256/0x300 [ 225.601806][ T7744] madvise_walk_vmas+0x2fe/0xa90 [ 225.601845][ T7744] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 225.601887][ T7744] madvise_do_behavior+0x1ea/0x510 [ 225.601924][ T7744] ? __pfx_madvise_do_behavior+0x10/0x10 [ 225.601959][ T7744] ? down_read+0x13b/0x450 [ 225.602023][ T7744] do_madvise+0x195/0x240 [ 225.602055][ T7744] ? __pfx_do_madvise+0x10/0x10 [ 225.602088][ T7744] ? do_futex+0x192/0x350 [ 225.602132][ T7744] ? ksys_write+0x1ac/0x250 [ 225.602167][ T7744] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 225.602212][ T7744] __x64_sys_madvise+0xa9/0x110 [ 225.602246][ T7744] ? lockdep_hardirqs_on+0x78/0x100 [ 225.602280][ T7744] do_syscall_64+0x10b/0xf80 [ 225.602312][ T7744] ? clear_bhb_loop+0x40/0x90 [ 225.602342][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.602368][ T7744] RIP: 0033:0x7fad0d99cdd9 [ 225.602388][ T7744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.602412][ T7744] RSP: 002b:00007fad0e8c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 225.602435][ T7744] RAX: ffffffffffffffda RBX: 00007fad0dc16090 RCX: 00007fad0d99cdd9 [ 225.602451][ T7744] RDX: 0000000000000015 RSI: 00000000002003f2 RDI: 0000000000000000 [ 225.602466][ T7744] RBP: 00007fad0da32d69 R08: 0000000000000000 R09: 0000000000000000 [ 225.602481][ T7744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.602495][ T7744] R13: 00007fad0dc16128 R14: 00007fad0dc16090 R15: 00007ffd618de678 [ 225.602526][ T7744] [ 226.658429][ T7747] [U] ^R [ 227.000686][ T7753] net_ratelimit: 162 callbacks suppressed [ 227.000705][ T7753] netlink: zone id is out of range [ 227.043056][ T7753] netlink: zone id is out of range [ 227.056111][ T7753] netlink: zone id is out of range [ 227.070455][ T7753] netlink: zone id is out of range [ 227.087828][ T7753] netlink: zone id is out of range [ 227.104839][ T7753] netlink: zone id is out of range [ 227.120856][ T7753] netlink: zone id is out of range [ 227.132437][ T7753] netlink: zone id is out of range [ 227.142567][ T7753] netlink: zone id is out of range [ 227.154182][ T7753] netlink: zone id is out of range [ 228.103952][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 228.307502][ T7771] netlink: 330 bytes leftover after parsing attributes in process `syz.1.491'. [ 232.533471][ T7830] sctp: [Deprecated]: syz.2.508 (pid 7830) Use of int in maxseg socket option. [ 232.533471][ T7830] Use struct sctp_assoc_value instead [ 233.214114][ T7839] block2mtd: illegal erase size [ 233.278455][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 237.838014][ T7896] net_ratelimit: 47 callbacks suppressed [ 237.838034][ T7896] netlink: zone id is out of range [ 237.926694][ T7896] netlink: zone id is out of range [ 237.972221][ T7896] netlink: zone id is out of range [ 238.019344][ T7896] netlink: zone id is out of range [ 238.048143][ T7896] netlink: zone id is out of range [ 238.087196][ T7896] netlink: zone id is out of range [ 238.115090][ T7896] netlink: zone id is out of range [ 238.145798][ T7896] netlink: zone id is out of range [ 238.184984][ T7896] netlink: zone id is out of range [ 238.214098][ T7896] netlink: zone id is out of range [ 239.414042][ T7912] netlink: 314 bytes leftover after parsing attributes in process `syz.2.529'. [ 239.585237][ T7912] netlink: 314 bytes leftover after parsing attributes in process `syz.2.529'. [ 239.713099][ T7912] netlink: 314 bytes leftover after parsing attributes in process `syz.2.529'. [ 239.791809][ T7912] netlink: 314 bytes leftover after parsing attributes in process `syz.2.529'. [ 239.864025][ T7912] netlink: 314 bytes leftover after parsing attributes in process `syz.2.529'. [ 241.372669][ T7924] futex_wake_op: syz.3.532 tries to shift op by -2048; fix this program [ 241.416133][ T7927] futex_wake_op: syz.1.533 tries to shift op by -2048; fix this program [ 241.440892][ T7924] futex_wake_op: syz.3.532 tries to shift op by -2048; fix this program [ 241.471050][ T7927] futex_wake_op: syz.1.533 tries to shift op by -2048; fix this program [ 241.496853][ T7924] 0x000000000001-0x000000020000 : "" [ 241.988996][ T7924] ftl_cs: FTL header corrupt! [ 242.495139][ T7946] kafs: addr_prefs: Too many elements in string [ 242.539694][ T7946] netlink: 342 bytes leftover after parsing attributes in process `syz.2.537'. [ 242.612588][ T7947] netlink: 294 bytes leftover after parsing attributes in process `syz.2.537'. [ 245.571363][ T7975] netlink: 330 bytes leftover after parsing attributes in process `syz.2.544'. [ 246.114068][ T7985] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 247.649859][ T8003] ubi0: attaching mtd0 [ 247.741716][ T8003] ubi0: scanning is finished [ 247.781706][ T8003] ubi0: empty MTD device detected [ 248.432721][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 248.483916][ T8014] netlink: 13 bytes leftover after parsing attributes in process `syz.3.555'. [ 249.135007][ T8003] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 249.247706][ T8020] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 249.319552][ T8003] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 249.490502][ T8003] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 249.632411][ T8003] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 249.801098][ T8003] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 249.911066][ T8003] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 250.039596][ T8003] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 28027622 [ 250.233245][ T8003] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 250.452294][ T8018] ubi0: background thread "ubi_bgt0d" started, PID 8018 [ 250.498749][ T8004] ubi0: detaching mtd0 [ 250.883828][ T8004] ubi0: mtd0 is detached [ 251.417969][ T8036] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 252.214073][ T8052] netlink: 'syz.3.567': attribute type 8 has an invalid length. [ 253.083891][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.571'. [ 253.326876][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 255.750928][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.759189][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.782199][ T8105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.036649][ T8130] net_ratelimit: 104 callbacks suppressed [ 256.036668][ T8130] netlink: zone id is out of range [ 256.105417][ T8130] netlink: zone id is out of range [ 256.133592][ T8130] netlink: zone id is out of range [ 256.168464][ T8130] netlink: zone id is out of range [ 256.199056][ T8130] netlink: zone id is out of range [ 256.225332][ T8130] netlink: zone id is out of range [ 256.264244][ T8130] netlink: zone id is out of range [ 256.301152][ T8130] netlink: zone id is out of range [ 256.335687][ T8130] netlink: zone id is out of range [ 256.374754][ T8130] netlink: zone id is out of range [ 256.894644][ T8141] zram0: detected capacity change from 16 to 0 [ 257.099642][ T8141] zram: Removed device: zram0 [ 257.645683][ T4946] Bluetooth: hci4: unexpected event 0x33 length: 124 > 10 [ 259.721228][ T8185] netlink: 330 bytes leftover after parsing attributes in process `syz.4.602'. [ 260.422242][ T8198] FAULT_INJECTION: forcing a failure. [ 260.422242][ T8198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.518849][ T8198] CPU: 0 UID: 0 PID: 8198 Comm: syz.4.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.518886][ T8198] Tainted: [L]=SOFTLOCKUP [ 260.518893][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.518911][ T8198] Call Trace: [ 260.518918][ T8198] [ 260.518926][ T8198] dump_stack_lvl+0x100/0x190 [ 260.518954][ T8198] should_fail_ex.cold+0x5/0xa [ 260.518983][ T8198] _copy_from_user+0x2e/0xd0 [ 260.519007][ T8198] kstrtobool_from_user+0x99/0x180 [ 260.519037][ T8198] ? __pfx_kstrtobool_from_user+0x10/0x10 [ 260.519065][ T8198] ? __lock_acquire+0x4a5/0x2630 [ 260.519088][ T8198] ? __pfx___might_resched+0x10/0x10 [ 260.519118][ T8198] force_suspend_write+0x9b/0x1c0 [ 260.519152][ T8198] ? __pfx_force_suspend_write+0x10/0x10 [ 260.519191][ T8198] full_proxy_write+0x135/0x1a0 [ 260.519224][ T8198] vfs_write+0x2aa/0x1070 [ 260.519251][ T8198] ? __pfx_full_proxy_write+0x10/0x10 [ 260.519281][ T8198] ? __pfx_vfs_write+0x10/0x10 [ 260.519307][ T8198] ? __fget_files+0x215/0x3d0 [ 260.519340][ T8198] ? __fget_files+0x21f/0x3d0 [ 260.519374][ T8198] ksys_write+0x12a/0x250 [ 260.519400][ T8198] ? __pfx_ksys_write+0x10/0x10 [ 260.519428][ T8198] ? rcu_is_watching+0x12/0xc0 [ 260.519460][ T8198] do_syscall_64+0x10b/0xf80 [ 260.519491][ T8198] ? clear_bhb_loop+0x40/0x90 [ 260.519519][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.519542][ T8198] RIP: 0033:0x7f8b30f9cdd9 [ 260.519570][ T8198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.519590][ T8198] RSP: 002b:00007f8b31ebb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.519609][ T8198] RAX: ffffffffffffffda RBX: 00007f8b31215fa0 RCX: 00007f8b30f9cdd9 [ 260.519622][ T8198] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 260.519634][ T8198] RBP: 00007f8b31ebb090 R08: 0000000000000000 R09: 0000000000000000 [ 260.519646][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.519657][ T8198] R13: 00007f8b31216038 R14: 00007f8b31215fa0 R15: 00007ffe9c2316e8 [ 260.519688][ T8198] [ 260.691078][ T8203] netlink: 334 bytes leftover after parsing attributes in process `syz.1.608'. [ 262.091846][ T8219] FAULT_INJECTION: forcing a failure. [ 262.091846][ T8219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.256472][ T8224] Line length is too long: Should be less than 4094 [ 262.283442][ T8219] CPU: 0 UID: 0 PID: 8219 Comm: syz.3.612 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.283477][ T8219] Tainted: [L]=SOFTLOCKUP [ 262.283484][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.283497][ T8219] Call Trace: [ 262.283504][ T8219] [ 262.283512][ T8219] dump_stack_lvl+0x100/0x190 [ 262.283542][ T8219] should_fail_ex.cold+0x5/0xa [ 262.283571][ T8219] _copy_to_user+0x32/0xd0 [ 262.283596][ T8219] simple_read_from_buffer+0xcb/0x170 [ 262.283625][ T8219] proc_fail_nth_read+0x1af/0x230 [ 262.283663][ T8219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.283701][ T8219] ? rw_verify_area+0xce/0x6d0 [ 262.283731][ T8219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.283767][ T8219] vfs_read+0x1e4/0xb30 [ 262.283795][ T8219] ? __pfx_vfs_read+0x10/0x10 [ 262.283822][ T8219] ? __fget_files+0x215/0x3d0 [ 262.283855][ T8219] ? __fget_files+0x21f/0x3d0 [ 262.283888][ T8219] ksys_read+0x12a/0x250 [ 262.283913][ T8219] ? __pfx_ksys_read+0x10/0x10 [ 262.283940][ T8219] ? rcu_is_watching+0x12/0xc0 [ 262.283972][ T8219] do_syscall_64+0x10b/0xf80 [ 262.284002][ T8219] ? clear_bhb_loop+0x40/0x90 [ 262.284049][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.284073][ T8219] RIP: 0033:0x7f3a26b5d60e [ 262.284091][ T8219] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 262.284112][ T8219] RSP: 002b:00007f3a27a8bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.284134][ T8219] RAX: ffffffffffffffda RBX: 00007f3a27a8c6c0 RCX: 00007f3a26b5d60e [ 262.284149][ T8219] RDX: 000000000000000f RSI: 00007f3a27a8c0a0 RDI: 0000000000000004 [ 262.284163][ T8219] RBP: 00007f3a27a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 262.284177][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.284190][ T8219] R13: 00007f3a26e16128 R14: 00007f3a26e16090 R15: 00007ffe90fed888 [ 262.284219][ T8219] [ 262.781007][ T8227] netlink: 268 bytes leftover after parsing attributes in process `syz.2.614'. [ 262.823834][ T8227] net_ratelimit: 80 callbacks suppressed [ 262.823858][ T8227] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 262.918376][ T8227] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 263.367420][ T8235] netlink: 330 bytes leftover after parsing attributes in process `syz.2.615'. [ 264.440824][ T8241] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 264.454611][ T8262] capability: warning: `syz.3.622' uses 32-bit capabilities (legacy support in use) [ 264.493476][ T8241] pci 0000:00:01.3: PCI INT A: no GSI [ 264.534253][ T8262] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 267.805160][ T8326] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.638'. [ 267.884392][ T8330] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.638'. [ 267.944972][ T8332] netlink: 330 bytes leftover after parsing attributes in process `syz.4.641'. [ 268.324621][ T8341] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ekl*[GCHFx^ĒPktkyve' [ 271.948458][ T8388] netlink: 'syz.3.656': attribute type 11 has an invalid length. [ 272.098774][ T8391] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 272.173508][ T8388] netlink: 1740 bytes leftover after parsing attributes in process `syz.3.656'. [ 273.849131][ T8406] netlink: 330 bytes leftover after parsing attributes in process `syz.1.660'. [ 274.201989][ T8391] tc_dump_action: action bad kind [ 274.387075][ T8388] netlink: 350 bytes leftover after parsing attributes in process `syz.3.656'. [ 274.927383][ T8420] netlink: zone id is out of range [ 274.970774][ T8420] netlink: zone id is out of range [ 275.011240][ T8420] netlink: zone id is out of range [ 275.052223][ T8420] netlink: zone id is out of range [ 275.080421][ T8420] netlink: zone id is out of range [ 275.113533][ T8420] netlink: zone id is out of range [ 275.139391][ T8420] netlink: zone id is out of range [ 275.171182][ T8420] netlink: zone id is out of range [ 275.205987][ T8420] netlink: zone id is out of range [ 275.235799][ T8420] netlink: zone id is out of range [ 277.224740][ T8455] FAULT_INJECTION: forcing a failure. [ 277.224740][ T8455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.314530][ T8455] CPU: 0 UID: 0 PID: 8455 Comm: syz.1.674 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.314567][ T8455] Tainted: [L]=SOFTLOCKUP [ 277.314575][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.314588][ T8455] Call Trace: [ 277.314595][ T8455] [ 277.314621][ T8455] dump_stack_lvl+0x100/0x190 [ 277.314653][ T8455] should_fail_ex.cold+0x5/0xa [ 277.314684][ T8455] _copy_from_user+0x2e/0xd0 [ 277.314708][ T8455] move_addr_to_kernel+0x65/0x170 [ 277.314746][ T8455] __sys_connect+0xb5/0x170 [ 277.314786][ T8455] ? __pfx___sys_connect+0x10/0x10 [ 277.314844][ T8455] __x64_sys_connect+0x72/0xb0 [ 277.314864][ T8455] ? lockdep_hardirqs_on+0x78/0x100 [ 277.314898][ T8455] do_syscall_64+0x10b/0xf80 [ 277.314929][ T8455] ? clear_bhb_loop+0x40/0x90 [ 277.314966][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.314991][ T8455] RIP: 0033:0x7fad0d99cdd9 [ 277.315010][ T8455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.315033][ T8455] RSP: 002b:00007fad0e8c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 277.315056][ T8455] RAX: ffffffffffffffda RBX: 00007fad0dc16090 RCX: 00007fad0d99cdd9 [ 277.315071][ T8455] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 277.315086][ T8455] RBP: 00007fad0da32d69 R08: 0000000000000000 R09: 0000000000000000 [ 277.315100][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.315114][ T8455] R13: 00007fad0dc16128 R14: 00007fad0dc16090 R15: 00007ffd618de678 [ 277.315143][ T8455] [ 277.687296][ T8462] netlink: 'syz.4.675': attribute type 11 has an invalid length. [ 277.712739][ T8462] netlink: 1740 bytes leftover after parsing attributes in process `syz.4.675'. [ 278.456887][ T8466] netlink: 350 bytes leftover after parsing attributes in process `syz.4.675'. [ 281.087003][ T8499] netlink: 330 bytes leftover after parsing attributes in process `syz.4.685'. [ 281.699025][ T8506] netlink: 'syz.1.688': attribute type 11 has an invalid length. [ 281.738132][ T8506] netlink: 1740 bytes leftover after parsing attributes in process `syz.1.688'. [ 281.801302][ T8508] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 282.828436][ T8506] tc_dump_action: action bad kind [ 282.943569][ T8506] netlink: 350 bytes leftover after parsing attributes in process `syz.1.688'. [ 284.570064][ T8542] netlink: 330 bytes leftover after parsing attributes in process `syz.2.697'. [ 286.832759][ T8558] FAULT_INJECTION: forcing a failure. [ 286.832759][ T8558] name fail_futex, interval 1, probability 0, space 0, times 0 [ 286.987989][ T8558] CPU: 0 UID: 0 PID: 8558 Comm: syz.2.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.988028][ T8558] Tainted: [L]=SOFTLOCKUP [ 286.988037][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.988053][ T8558] Call Trace: [ 286.988061][ T8558] [ 286.988070][ T8558] dump_stack_lvl+0x100/0x190 [ 286.988107][ T8558] should_fail_ex.cold+0x5/0xa [ 286.988139][ T8558] get_futex_key+0x1d2/0x1510 [ 286.988167][ T8558] ? __pfx_get_futex_key+0x10/0x10 [ 286.988194][ T8558] ? trace_pid_list_is_set+0x22c/0x390 [ 286.988235][ T8558] futex_wait_setup+0x83/0x510 [ 286.988276][ T8558] __futex_wait+0x19f/0x300 [ 286.988312][ T8558] ? __pfx___futex_wait+0x10/0x10 [ 286.988344][ T8558] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 286.988380][ T8558] ? __pfx_futex_wake_mark+0x10/0x10 [ 286.988418][ T8558] ? find_held_lock+0x2b/0x80 [ 286.988451][ T8558] ? futex_wake+0x456/0x530 [ 286.988491][ T8558] futex_wait+0xe6/0x370 [ 286.988524][ T8558] ? __pfx_futex_wait+0x10/0x10 [ 286.988564][ T8558] ? find_held_lock+0x2b/0x80 [ 286.988596][ T8558] ? smc_bind+0x30e/0x3b0 [ 286.988618][ T8558] ? rcu_is_watching+0x12/0xc0 [ 286.988651][ T8558] do_futex+0x1ef/0x350 [ 286.988679][ T8558] ? __pfx_do_futex+0x10/0x10 [ 286.988706][ T8558] ? __sys_bind+0x1c7/0x260 [ 286.988762][ T8558] __x64_sys_futex+0x34f/0x4d0 [ 286.988792][ T8558] ? __pfx___x64_sys_futex+0x10/0x10 [ 286.988824][ T8558] ? rcu_is_watching+0x12/0xc0 [ 286.988856][ T8558] do_syscall_64+0x10b/0xf80 [ 286.988888][ T8558] ? clear_bhb_loop+0x40/0x90 [ 286.988917][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.988943][ T8558] RIP: 0033:0x7fc9dc79cdd9 [ 286.988963][ T8558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.988986][ T8558] RSP: 002b:00007fc9da9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 286.989019][ T8558] RAX: ffffffffffffffda RBX: 00007fc9dca16098 RCX: 00007fc9dc79cdd9 [ 286.989035][ T8558] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc9dca16098 [ 286.989068][ T8558] RBP: 00007fc9dca16090 R08: 0000000000000000 R09: 0000000000000000 [ 286.989088][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.989102][ T8558] R13: 00007fc9dca16128 R14: 00007fff2de7d1f0 R15: 00007fff2de7d2d8 [ 286.989133][ T8558] [ 289.757143][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 296.271394][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.284837][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.293657][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.303271][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 296.318072][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.448446][ T97] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.030659][ T97] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.345532][ T97] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.581813][ T97] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.388955][ T50] Bluetooth: hci2: command tx timeout [ 298.547014][ T97] bridge_slave_1: left allmulticast mode [ 298.596756][ T97] bridge_slave_1: left promiscuous mode [ 298.623254][ T8666] netlink: 330 bytes leftover after parsing attributes in process `syz.4.725'. [ 298.644535][ T97] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.756254][ T97] bridge_slave_0: left allmulticast mode [ 298.800126][ T97] bridge_slave_0: left promiscuous mode [ 298.836919][ T97] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.896796][ T97] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.012395][ T97] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.064121][ T97] bond0 (unregistering): Released all slaves [ 300.469178][ T50] Bluetooth: hci2: command tx timeout [ 301.051526][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 301.869120][ T97] hsr_slave_0: left promiscuous mode [ 301.926651][ T97] hsr_slave_1: left promiscuous mode [ 301.979555][ T97] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.036589][ T97] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.109753][ T97] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.161212][ T97] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.307645][ T97] veth1_macvtap: left promiscuous mode [ 302.349845][ T97] veth0_macvtap: left promiscuous mode [ 302.391876][ T97] veth1_vlan: left promiscuous mode [ 302.423214][ T97] veth0_vlan: left promiscuous mode [ 302.548361][ T50] Bluetooth: hci2: command tx timeout [ 303.472087][ T97] team0 (unregistering): Port device team_slave_1 removed [ 303.566429][ T97] team0 (unregistering): Port device team_slave_0 removed [ 304.118271][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 304.628547][ T50] Bluetooth: hci2: command tx timeout [ 305.020981][ T8646] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.055945][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.095015][ T8646] bridge_slave_0: entered allmulticast mode [ 305.136619][ T8646] bridge_slave_0: entered promiscuous mode [ 305.174582][ T8646] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.220779][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.258518][ T8646] bridge_slave_1: entered allmulticast mode [ 305.313258][ T8646] bridge_slave_1: entered promiscuous mode [ 305.579894][ T8646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.671652][ T8646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.712268][ T8766] net_ratelimit: 47 callbacks suppressed [ 305.712299][ T8766] netlink: zone id is out of range [ 305.783835][ T8766] netlink: zone id is out of range [ 305.816013][ T8766] netlink: zone id is out of range [ 305.852606][ T8766] netlink: zone id is out of range [ 305.894844][ T8766] netlink: zone id is out of range [ 305.923640][ T8766] netlink: zone id is out of range [ 305.959714][ T8766] netlink: zone id is out of range [ 305.987282][ T4946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.001500][ T4946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.010925][ T4946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.028815][ T4946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.044762][ T4946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.054614][ T8766] netlink: zone id is out of range [ 306.061423][ T97] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.123128][ T8766] netlink: zone id is out of range [ 306.151109][ T8766] netlink: zone id is out of range [ 306.674868][ T97] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.785905][ T8646] team0: Port device team_slave_0 added [ 306.843124][ T8646] team0: Port device team_slave_1 added [ 306.946616][ T97] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.131851][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 307.244660][ T97] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.392634][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.421039][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.482488][ T8646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.578449][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.595714][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.683086][ T8646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.924946][ T8646] hsr_slave_0: entered promiscuous mode [ 307.952833][ T8646] hsr_slave_1: entered promiscuous mode [ 307.985626][ T8646] debugfs: 'hsr0' already exists in 'hsr' [ 308.030833][ T8646] Cannot create hsr debugfs directory [ 308.147943][ T50] Bluetooth: hci3: command tx timeout [ 308.163322][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 308.436221][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.752'. [ 308.503961][ T8798] tipc: Started in network mode [ 308.536028][ T8798] tipc: Node identity ee00, cluster identity 4711 [ 308.565593][ T8798] tipc: Node number set to 60928 [ 309.421877][ T97] bridge_slave_1: left allmulticast mode [ 309.459251][ T97] bridge_slave_1: left promiscuous mode [ 309.491861][ T97] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.545164][ T97] bridge_slave_0: left allmulticast mode [ 309.580093][ T97] bridge_slave_0: left promiscuous mode [ 309.614118][ T97] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.228051][ T50] Bluetooth: hci3: command tx timeout [ 310.397095][ T97] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.450710][ T97] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.491941][ T97] bond0 (unregistering): Released all slaves [ 310.982822][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 311.614472][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 312.307332][ T97] hsr_slave_0: left promiscuous mode [ 312.313857][ T4946] Bluetooth: hci3: command tx timeout [ 312.347053][ T97] hsr_slave_1: left promiscuous mode [ 312.366465][ T97] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.397573][ T97] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.424640][ T97] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.453168][ T97] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.502430][ T97] veth1_macvtap: left promiscuous mode [ 312.523780][ T97] veth0_macvtap: left promiscuous mode [ 312.542447][ T97] veth1_vlan: left promiscuous mode [ 312.570594][ T97] veth0_vlan: left promiscuous mode [ 313.567229][ T97] team0 (unregistering): Port device team_slave_1 removed [ 313.652531][ T97] team0 (unregistering): Port device team_slave_0 removed [ 314.149234][ T4946] Bluetooth: hci4: command 0x0406 tx timeout [ 314.390959][ T50] Bluetooth: hci3: command tx timeout [ 314.992018][ T8872] net_ratelimit: 47 callbacks suppressed [ 314.992038][ T8872] netlink: zone id is out of range [ 315.067330][ T8872] netlink: zone id is out of range [ 315.084992][ T8872] netlink: zone id is out of range [ 315.119787][ T8872] netlink: zone id is out of range [ 315.147851][ T8872] netlink: zone id is out of range [ 315.190902][ T8872] netlink: zone id is out of range [ 315.228962][ T8872] netlink: zone id is out of range [ 315.264025][ T8872] netlink: zone id is out of range [ 315.296689][ T8872] netlink: zone id is out of range [ 315.334649][ T8872] netlink: zone id is out of range [ 315.657532][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.710978][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.745163][ T8769] bridge_slave_0: entered allmulticast mode [ 315.783223][ T8769] bridge_slave_0: entered promiscuous mode [ 315.819976][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.876187][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.934786][ T8769] bridge_slave_1: entered allmulticast mode [ 315.990778][ T8769] bridge_slave_1: entered promiscuous mode [ 316.435383][ T8769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.581121][ T8769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.647258][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 316.811098][ T8769] team0: Port device team_slave_0 added [ 316.883231][ T8769] team0: Port device team_slave_1 added [ 316.992842][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.030191][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.121085][ T8769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.173283][ T8769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.196116][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.204996][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.220461][ T8769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.371472][ T8769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.430247][ T8646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 317.460912][ T8646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.493740][ T8646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 317.511437][ T8902] netlink: 18 bytes leftover after parsing attributes in process `syz.4.761'. [ 317.542089][ T8646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.679284][ T8646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 317.753840][ T8646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.805245][ T8646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 317.874477][ T8646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.140285][ T8769] hsr_slave_0: entered promiscuous mode [ 318.158285][ T8911] can: request_module (can-proto-0) failed. [ 318.186932][ T8769] hsr_slave_1: entered promiscuous mode [ 318.224054][ T8769] debugfs: 'hsr0' already exists in 'hsr' [ 318.261709][ T8769] Cannot create hsr debugfs directory [ 319.194324][ T4946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.207592][ T4946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.218914][ T4946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.231172][ T4946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.239772][ T4946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.382997][ T8646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.521455][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 319.937358][ T8646] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.255078][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.262287][ T3364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.473522][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.480821][ T7524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.212691][ T8769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.260037][ T8769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.303011][ T8769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 321.343846][ T8769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.351157][ T4946] Bluetooth: hci5: command tx timeout [ 321.433169][ T8769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.475965][ T8769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.538177][ T8769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 321.579625][ T8769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.665176][ T8962] net_ratelimit: 47 callbacks suppressed [ 321.665196][ T8962] netlink: zone id is out of range [ 321.718299][ T8962] netlink: zone id is out of range [ 321.745055][ T8962] netlink: zone id is out of range [ 321.782388][ T8962] netlink: zone id is out of range [ 321.813554][ T8962] netlink: zone id is out of range [ 321.849194][ T8962] netlink: zone id is out of range [ 321.881466][ T8962] netlink: zone id is out of range [ 321.916310][ T8962] netlink: zone id is out of range [ 321.951693][ T8962] netlink: zone id is out of range [ 321.986180][ T8962] netlink: zone id is out of range [ 322.457313][ T8769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.584834][ T8769] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.751761][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.758964][ T3364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.836421][ T4946] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 322.932808][ T7523] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.940064][ T7523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.333533][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.372666][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.406522][ T8931] bridge_slave_0: entered allmulticast mode [ 323.428216][ T50] Bluetooth: hci5: command tx timeout [ 323.443829][ T8931] bridge_slave_0: entered promiscuous mode [ 323.503609][ T8931] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.541464][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.581046][ T8931] bridge_slave_1: entered allmulticast mode [ 323.627455][ T8931] bridge_slave_1: entered promiscuous mode [ 323.804541][ T8931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.847558][ T8931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.135016][ T8931] team0: Port device team_slave_0 added [ 324.184871][ T8931] team0: Port device team_slave_1 added [ 324.301372][ T8646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.426447][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.470937][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.625407][ T8931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.692729][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.730228][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.846867][ T8931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.873249][ T4946] Bluetooth: hci4: command 0x0406 tx timeout [ 325.151812][ T8931] hsr_slave_0: entered promiscuous mode [ 325.186759][ T8931] hsr_slave_1: entered promiscuous mode [ 325.241744][ T8931] debugfs: 'hsr0' already exists in 'hsr' [ 325.271476][ T8931] Cannot create hsr debugfs directory [ 325.508406][ T50] Bluetooth: hci5: command tx timeout [ 325.838914][ T8646] veth0_vlan: entered promiscuous mode [ 326.045433][ T8646] veth1_vlan: entered promiscuous mode [ 326.353366][ T8931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.764186][ T8931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.911964][ T8646] veth0_macvtap: entered promiscuous mode [ 326.950980][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 327.021538][ T9050] net_ratelimit: 47 callbacks suppressed [ 327.021558][ T9050] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 327.035017][ T9050] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 327.061277][ T8931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.123182][ T8646] veth1_macvtap: entered promiscuous mode [ 327.168945][ T8769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.281819][ T8931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.489348][ T8646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.589929][ T4946] Bluetooth: hci5: command tx timeout [ 327.627014][ T8646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.717916][ T97] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.758775][ T97] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.913830][ T97] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.966976][ T97] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.096354][ T8769] veth0_vlan: entered promiscuous mode [ 328.271203][ T8769] veth1_vlan: entered promiscuous mode [ 328.328132][ T8931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 328.365274][ T8931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.424840][ T8931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 328.463032][ T8931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.494107][ T8931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 328.531941][ T8931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.576201][ T8931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 328.606704][ T8931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.731283][ T7524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.753034][ T8769] veth0_macvtap: entered promiscuous mode [ 328.774669][ T7524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.827198][ T8769] veth1_macvtap: entered promiscuous mode [ 328.955814][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.972163][ T8769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.989962][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.031640][ T8769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.118779][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.162516][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.217668][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.261410][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.576388][ T8931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.782622][ T7523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.844471][ T7523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.891659][ T8931] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.056556][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.063772][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.198536][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.205720][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.286341][ T7523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.327535][ T7523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.816493][ T9100] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 330.955378][ T9100] netlink: 330 bytes leftover after parsing attributes in process `syz.2.738'. [ 331.614363][ T9115] FAULT_INJECTION: forcing a failure. [ 331.614363][ T9115] name failslab, interval 1, probability 0, space 0, times 0 [ 331.717177][ T9115] CPU: 0 UID: 0 PID: 9115 Comm: syz.1.779 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.717215][ T9115] Tainted: [L]=SOFTLOCKUP [ 331.717223][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.717241][ T9115] Call Trace: [ 331.717248][ T9115] [ 331.717257][ T9115] dump_stack_lvl+0x100/0x190 [ 331.717287][ T9115] should_fail_ex.cold+0x5/0xa [ 331.717318][ T9115] should_failslab+0xc2/0x120 [ 331.717346][ T9115] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 331.717387][ T9115] ? __d_alloc+0x34/0xa40 [ 331.717419][ T9115] ? lockdep_init_map_type+0x5c/0x250 [ 331.717448][ T9115] __d_alloc+0x34/0xa40 [ 331.717484][ T9115] d_alloc_pseudo+0x1c/0xc0 [ 331.717507][ T9115] alloc_file_pseudo+0xcf/0x230 [ 331.717545][ T9115] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 331.717588][ T9115] ? alloc_fd+0x476/0x790 [ 331.717622][ T9115] sock_alloc_file+0x50/0x210 [ 331.717651][ T9115] __sys_socket+0x1c0/0x260 [ 331.717691][ T9115] ? __pfx___sys_socket+0x10/0x10 [ 331.717726][ T9115] ? ksys_write+0x1ac/0x250 [ 331.717760][ T9115] __x64_sys_socket+0x72/0xb0 [ 331.717796][ T9115] ? lockdep_hardirqs_on+0x78/0x100 [ 331.717829][ T9115] do_syscall_64+0x10b/0xf80 [ 331.717861][ T9115] ? clear_bhb_loop+0x40/0x90 [ 331.717909][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.717935][ T9115] RIP: 0033:0x7fcba919cdd9 [ 331.717959][ T9115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.717985][ T9115] RSP: 002b:00007fcbaa07f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 331.718015][ T9115] RAX: ffffffffffffffda RBX: 00007fcba9415fa0 RCX: 00007fcba919cdd9 [ 331.718037][ T9115] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 331.718061][ T9115] RBP: 00007fcba9232d69 R08: 0000000000000000 R09: 0000000000000000 [ 331.718076][ T9115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.718090][ T9115] R13: 00007fcba9416038 R14: 00007fcba9415fa0 R15: 00007fff4a344b78 [ 331.718120][ T9115] [ 332.183661][ T31] INFO: task syz.0.292:6997 blocked for more than 143 seconds. [ 332.235247][ T31] Tainted: G L syzkaller #0 [ 332.261748][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.312752][ T31] task:syz.0.292 state:D stack:27800 pid:6997 tgid:6996 ppid:5631 task_flags:0x400740 flags:0x00080002 [ 332.389889][ T31] Call Trace: [ 332.408372][ T31] [ 332.419103][ T31] __schedule+0x10e9/0x6820 [ 332.435109][ T31] ? __pfx___schedule+0x10/0x10 [ 332.470908][ T31] ? find_held_lock+0x2b/0x80 [ 332.491697][ T31] ? schedule+0x2bf/0x390 [ 332.517151][ T31] schedule+0xdd/0x390 [ 332.542903][ T31] schedule_timeout+0x1b2/0x280 [ 332.643238][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 332.692510][ T31] ? __wait_for_common+0x2da/0x4c0 [ 332.730429][ T31] ? rcu_is_watching+0x12/0xc0 [ 332.750804][ T31] __wait_for_common+0x2e7/0x4c0 [ 332.781330][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 332.840095][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 332.886943][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 332.940625][ T31] ? vfs_coredump+0x7e0/0x5770 [ 333.007158][ T31] ? rcu_is_watching+0x12/0xc0 [ 333.044967][ T31] wait_for_completion_state+0x1c/0x40 [ 333.085147][ T31] vfs_coredump+0x80d/0x5770 [ 333.125574][ T31] ? __pfx_vfs_coredump+0x10/0x10 [ 333.155289][ T31] ? __lock_acquire+0x4a5/0x2630 [ 333.185581][ T31] ? lock_acquire+0x1b1/0x370 [ 333.239526][ T31] ? lock_acquire+0x1b1/0x370 [ 333.258959][ T31] ? find_held_lock+0x2b/0x80 [ 333.286862][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 333.318883][ T31] ? is_bpf_text_address+0x8a/0x1a0 [ 333.355327][ T31] ? bpf_ksym_find+0x124/0x1c0 [ 333.390555][ T31] ? __kernel_text_address+0xd/0x30 [ 333.396457][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 333.434300][ T31] ? unwind_get_return_address+0x59/0xa0 [ 333.465397][ T31] ? arch_stack_walk+0xa6/0xf0 [ 333.505188][ T31] ? __sigqueue_free+0xbe/0x2a0 [ 333.553060][ T31] ? stack_trace_save+0x8e/0xc0 [ 333.590447][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 333.623458][ T31] ? stack_depot_save_flags+0x27/0x9d0 [ 333.659984][ T31] ? __lock_acquire+0x4a5/0x2630 [ 333.696026][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.730006][ T31] ? proc_coredump_connector+0x2d3/0x4f0 [ 333.760714][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 333.797787][ T31] ? rcu_is_watching+0x12/0xc0 [ 333.824621][ T31] get_signal+0x1f2a/0x21e0 [ 333.853477][ T31] ? __pfx_get_signal+0x10/0x10 [ 333.883102][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 333.914536][ T31] ? force_sig_info_to_task+0x4d2/0x660 [ 333.953698][ T31] arch_do_signal_or_restart+0x91/0x770 [ 333.981374][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 334.019550][ T31] ? rcu_is_watching+0x12/0xc0 [ 334.047290][ T31] exit_to_user_mode_loop+0x86/0x4a0 [ 334.079183][ T31] ? do_syscall_64+0x519/0xf80 [ 334.102307][ T31] do_syscall_64+0x6f2/0xf80 [ 334.130352][ T31] ? clear_bhb_loop+0x40/0x90 [ 334.144388][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.166583][ T31] RIP: 0033:0x7f94da19cdd9 [ 334.182041][ T31] RSP: 002b:00007f94db0e80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 334.212049][ T31] RAX: ffffffffffffffda RBX: 00007f94da415fa8 RCX: 00007f94da19cdd9 [ 334.239525][ T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f94da415fac [ 334.266853][ T31] RBP: 00007f94da415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 334.289884][ T31] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 334.322293][ T31] R13: 00007f94da416038 R14: 00007ffd1a1eb9b0 R15: 00007ffd1a1eba98 [ 334.343867][ T31] [ 334.364942][ T31] [ 334.364942][ T31] Showing all locks held in the system: [ 334.546492][ T9130] tipc: Started in network mode [ 334.565860][ T31] 3 locks held by kworker/0:1/10: [ 334.573233][ T9130] tipc: Node identity ee00, cluster identity 4711 [ 334.617421][ T31] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 334.646984][ T9130] tipc: Node number set to 60928 [ 334.697991][ T31] #1: ffffc900000f7d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 334.766249][ T31] #2: ffff888032d1d250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 334.824285][ T31] 1 lock held by khungtaskd/31: [ 334.849351][ T31] #0: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 334.891870][ T31] 3 locks held by kworker/u8:9/3364: [ 334.918549][ T31] #0: ffff88801c6ae140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 334.965326][ T31] #1: ffffc9000726fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 335.007025][ T31] #2: ffffffff905f5a28 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 335.053563][ T31] 2 locks held by getty/5385: [ 335.075165][ T31] #0: ffff8880390a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 335.119856][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 335.172036][ T31] 2 locks held by syz.0.292/7001: [ 335.193168][ T31] 3 locks held by syz-executor/8769: [ 335.215495][ T31] #0: ffff88804b1a4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 335.244141][ T31] #1: ffff88804b1a40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 335.281504][ T31] #2: ffffffff8e7f0e28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 335.305885][ T31] 1 lock held by dhcpcd-run-hook/9133: [ 335.326820][ T31] #0: ffff8880b843b3e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 335.367784][ T31] 1 lock held by cmp/9143: [ 335.444054][ T31] [ 335.475006][ T31] ============================================= [ 335.475006][ T31] [ 335.550579][ T31] NMI backtrace for cpu 0 [ 335.550602][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 335.550638][ T31] Tainted: [L]=SOFTLOCKUP [ 335.550647][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.550661][ T31] Call Trace: [ 335.550668][ T31] [ 335.550676][ T31] dump_stack_lvl+0x100/0x190 [ 335.550706][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 335.550735][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 335.550762][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 335.550790][ T31] sys_info+0x141/0x190 [ 335.550825][ T31] watchdog+0xcb1/0x1030 [ 335.550865][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 335.550896][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.550931][ T31] ? __kthread_parkme+0x18c/0x230 [ 335.550967][ T31] ? kthread+0x13a/0x450 [ 335.550986][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.551018][ T31] kthread+0x370/0x450 [ 335.551038][ T31] ? __pfx_kthread+0x10/0x10 [ 335.551060][ T31] ret_from_fork+0x72b/0xd50 [ 335.551087][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 335.551114][ T31] ? __switch_to+0x800/0x1100 [ 335.551147][ T31] ? __switch_to_asm+0x39/0x70 [ 335.551186][ T31] ? __pfx_kthread+0x10/0x10 [ 335.551208][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.551252][ T31] [ 336.431704][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 336.438607][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 336.449291][ T31] Tainted: [L]=SOFTLOCKUP [ 336.453623][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.463706][ T31] Call Trace: [ 336.466986][ T31] [ 336.469978][ T31] dump_stack_lvl+0x100/0x190 [ 336.474680][ T31] vpanic+0x552/0x970 [ 336.478687][ T31] ? __pfx_vpanic+0x10/0x10 [ 336.483209][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 336.489370][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 336.495531][ T31] panic+0xd1/0xe0 [ 336.499256][ T31] ? __pfx_panic+0x10/0x10 [ 336.503697][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 336.509867][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 336.516041][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 336.522296][ T31] ? watchdog.cold+0x1ec/0x234 [ 336.527083][ T31] ? watchdog+0xcc1/0x1030 [ 336.531523][ T31] watchdog.cold+0x1fd/0x234 [ 336.536131][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 336.541986][ T31] ? __pfx_watchdog+0x10/0x10 [ 336.546684][ T31] ? __kthread_parkme+0x18c/0x230 [ 336.551728][ T31] ? kthread+0x13a/0x450 [ 336.555971][ T31] ? __pfx_watchdog+0x10/0x10 [ 336.560670][ T31] kthread+0x370/0x450 [ 336.564752][ T31] ? __pfx_kthread+0x10/0x10 [ 336.569361][ T31] ret_from_fork+0x72b/0xd50 [ 336.573968][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 336.579104][ T31] ? __switch_to+0x800/0x1100 [ 336.583807][ T31] ? __switch_to_asm+0x39/0x70 [ 336.588585][ T31] ? __pfx_kthread+0x10/0x10 [ 336.593183][ T31] ret_from_fork_asm+0x1a/0x30 [ 336.597986][ T31] [ 336.601085][ T31] Kernel Offset: disabled [ 336.605418][ T31] Rebooting in 86400 seconds..