last executing test programs: 10.996147473s ago: executing program 1 (id=1243): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip_vs_app\x00', 0x10000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x50b201, 0x0) fadvise64$auto_POSIX_FADV_NOREUSE(r0, 0xe, 0x7ff, 0x5) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0xfff, 0x6, 0x801, 0x405, 0x0}) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x17, 0x0) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) unshare$auto(0x4000007d) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x8, 0x1e, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) getsockopt$auto_SO_TIMESTAMP_OLD(r3, 0x6, 0x1d, 0x0, &(0x7f0000000040)=0x14) shmctl$auto_IPC_RMID(0x6, 0x0, 0x0) socket(0x1e, 0x5, 0x10a) connect$auto(0x3, &(0x7f00000001c0)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x51) shutdown$auto(0x200000003, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/smbd_keep_alive_interval\x00', 0x1cb842, 0x0) write$auto(r4, 0x0, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) futex$auto(0x0, 0x8, 0x4991, 0x0, &(0x7f0000000080)=0x2, 0xc826) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 9.031350215s ago: executing program 0 (id=1245): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) io_setup$auto(0xffffff18, 0xfffffffffffffffd) capset$auto(0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000027, 0xf5ff, 0x8}, 0x0, 0x5, 0xffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x80000000007, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_dai_list_fops_(0xffffffffffffff9c, 0x0, 0x140, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyz1\x00', 0x400, 0x0) settimeofday$auto(0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20000090) unshare$auto(0x2) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="13002c000000000006000000002000"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip_vti0\x00'}) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x5}]}, 0x1c}}, 0x20004000) bpf$auto(0x2, 0x0, 0x5) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.963301827s ago: executing program 2 (id=1246): fsconfig$auto_SHMEM_HUGE_ALWAYS(0xffffffffffffffff, 0x20001, 0x0, 0x0, 0x1) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) lstat$auto(0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) socket(0x9, 0xa, 0x10206) ioctl$auto(0xffffffffffffffff, 0x7, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xf0, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) fsetxattr$auto(r1, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', &(0x7f00000000c0), 0xa9, 0x2) read$auto(0x3, 0x0, 0xf3c) 8.925008215s ago: executing program 1 (id=1247): unshare$auto(0x40000080) r0 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(r0, &(0x7f00000001c0)=@can={0x1d, 0x0, 0x6000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x44, r2, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0xb0, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x44}}, 0x24048084) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x28, 0x1, 0x0) r4 = setfsgid$auto(0x0) quotactl_fd$auto(0xffffffffffffffff, 0x7, r4, &(0x7f00000033c0)="c6e7ceafec467c07a9371614b896f9d1797dd49271f66699e24deaac5fcfe05cd1977860304976aafe7b369144b0b80eb948e6ac09a2f4cc54b7b707c95d92d9d642330363cd2c63b172de9bd00ab739f094a3b8e686d9663d37307a95") shmctl$auto_SHM_STAT(0x200, 0xd, &(0x7f00000004c0)={{0x8, 0x0, r4, 0x2, 0x400002, 0x0, 0x800}, 0x9, 0x80, 0xffffffffffffff81, 0x8d, @raw=0xfffffffa, @inferred=0xffffffffffffffff, 0x3ff, 0x0, &(0x7f0000000200)="cd3a0a40a6dd04a5a0810178f04eff5ef749150af724a6cd32f416d5bbf1fe4d94e0bc8ce27a34f6ad74f4865df0ec261e537f11fd92204280573be09d592b1ce8af2db95cda6e558e76b94c3ee9c07d4e1a3cf2f00c23a251e9651d223703f73794b0c5e5f0e0fdf8eabc0783d5a7a33bc417d5c47e83878cdf7f8fdf3ef8231cea7597baefe1c13936decb5e73b0035235919bff8902fd928cfacfcac55af6beb77ff991754affcac9d400305e4f0c13002ae925518a170325a6063ee76924ee229127a788986a1784d3479520267833593785fb88d8c3300a1d3225b8dba8bc8bd9068935c84e782dcd", &(0x7f00000003c0)="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"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r3, 0x0, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0xfffffffc, 0xee01, 0xee01, 0xffc, 0x87, 0x40, 0x3}, &(0x7f0000000300)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x20003ff, 0x2000005, 0xa, 0x40, 0x4, 0x3, 0x3fb, @raw=0x7fff, @inferred=r5}) setfsuid$auto(0xee00) socket(0x2, 0x4, 0x2100) bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x10000009, 0xffffffffffff7ffd, 0x5, 0x1fe, 0x2, 0x8, 0x10000, 0x4007, "00000000ce7b070040005e6b00", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x86, 0xb92, 0xffff, 0x3ff, 0x1, @attach_prog_fd=0xffffffffffffffff, 0x440, 0xb, 0x5, 0x202, 0x200000, 0xffffffffffffffff, r6}, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r8, &(0x7f0000000340)=@can={0x1d, r9}, 0x6a) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0xc00, 0x70bd27, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0xf8e2b211c1709eaa}, 0x24044020) setuid$auto(0xe) unshare$auto(0xb) 7.260892589s ago: executing program 2 (id=1249): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000040)={0xc4}) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, 0xffffffffffffffff, 0xff, 0xffffffff80000001) r3 = socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(r3, 0x1, 0x7, &(0x7f0000000200)='\'\a\xeb\xb6\xc8\vF`\xf6\"8\x06hM\x06K\xa7x\x03\x00.y\xa8\xe5', 0xeb66) setns(0xc9, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = socket(0x1f, 0x2, 0x0) getpeername$auto(r4, 0x0, 0x0) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) prctl$auto_PR_GET_TSC(0x19, 0x1, 0x5, 0x3, 0x7) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xd0, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ALGO_NAME={0xac, 0x2, '/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x9}, @BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008070}, 0x20004801) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 7.170100134s ago: executing program 0 (id=1250): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) io_setup$auto(0xffffff18, 0xfffffffffffffffd) capset$auto(0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000027, 0xf5ff, 0x8}, 0x0, 0x5, 0xffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x80000000007, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_dai_list_fops_(0xffffffffffffff9c, 0x0, 0x140, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyz1\x00', 0x400, 0x0) settimeofday$auto(0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20000090) unshare$auto(0x2) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="13002c000000000006000000002000"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ip_vti0\x00'}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x8040) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x5}]}, 0x1c}}, 0x20004000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 7.150122103s ago: executing program 3 (id=1251): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.13/usb36/ep_00/bmAttributes\x00', 0x40, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1e, 0x4, 0x0) socket(0x27, 0x4, 0x0) io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe, 0xffffffffffffffff}) close_range$auto(r0, 0xffffffffffffffff, 0xdf9b) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f) socket(0x840000000002, 0x3, 0xff) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0xfffffffd) msgctl$auto_IPC_INFO(0xfbd1, 0x3, &(0x7f0000000180)={{0x80000000, 0x0, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x9, 0x3ff, 0x5, 0xd, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ram0\x00', 0x20800, 0x0) r5 = pidfd_open$auto(0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETFMTS(r5, 0x8004500b, 0x0) ioctl$auto_BLKGETSIZE(r4, 0x1260, 0x0) socket(0x2, 0x3, 0x100) ioctl$auto_NVRAM_INIT(r2, 0x7040, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, r3, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 7.109899929s ago: executing program 1 (id=1252): mmap$auto(0x1, 0x1, 0x1000000000027, 0x9b72, 0xffffffffffffffff, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x5dc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9b0e6aeca24a504c}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x1) socket(0x2c, 0x3, 0x0) socket(0x10, 0x2, 0x4) unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4141) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb39\xdc\xe0f\f\xfb\xbeg\xe1\x99h\xc9W&\x88\xac\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x80) syz_clone3(0x0, 0x0) r1 = socket(0xa, 0x1, 0x106) connect$auto(r1, 0x0, 0x58) mount$auto(0x0, 0x0, 0x0, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) setns(0xc9, 0x0) socket(0x1f, 0x2, 0x0) bind$auto(0x3, 0x0, 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 5.174267749s ago: executing program 3 (id=1253): landlock_create_ruleset$auto(&(0x7f0000000280)={0x9, 0x1, 0x9}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/writeback/max_active\x00', 0x1a2b02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x3, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm1p/sub3/sw_params\x00', 0x88400, 0x0) io_uring_setup$auto(0xc, 0x0) pipe2$auto(0x0, 0x80) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x40384708, 0xffffffffffffffff) 5.083245733s ago: executing program 1 (id=1254): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/transaction_log\x00', 0x101400, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x0, 0x8) lremovexattr$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00') select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) ioperm$auto(0x7, 0x71, 0x0) iopl$auto(0x3) ioperm$auto(0x5, 0x3432, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x176) fcntl$auto_F_GETOWN(r0, 0x9, 0x8001) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) open(0x0, 0x161342, 0x130) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x7ffffffe) (fail_nth: 2) 5.056317461s ago: executing program 0 (id=1255): mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = socket(0x6, 0x3, 0x7) setsockopt$auto(r0, 0x4, 0x7f, 0x0, 0x9) ioctl$auto_FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x41, 0x0) mmap$auto(0x5, 0x400008, 0xdf, 0x24890af7, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x10}}, 0x8000054) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) socket(0xa, 0x2, 0x0) connect$auto(r0, &(0x7f00000018c0)=@generic={0x21, "d2392a9e291249308da8d106d931"}, 0x8) setsockopt$auto(r0, 0xbe0, 0x28, 0xfffffffffffffffc, 0x70) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) select$auto(0x77, 0x0, 0x0, 0x0, 0x0) socket(0x1e, 0x80805, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) setsockopt$auto(r1, 0x0, 0x7, 0x0, 0x10000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x3fffffffffffffe, 0x20009, 0x4000000000df, 0x9a, 0x401, 0x8000) 5.036353768s ago: executing program 2 (id=1256): sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x44) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event2\x00', 0x101700, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) ioctl$auto_EVIOCGREP(r0, 0x80084503, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40383d03, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0x4138ae84, 0x0) r6 = socket(0x10, 0x2, 0x0) fcntl$auto_F_DUPFD(r6, 0x0, r5) r7 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000180), r6) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r7, 0x410, 0x70bd2d, 0x25dfdbfe, {}, [@NET_DM_ATTR_UNSPEC={0x33, 0x0, "5d8ee8a02420be7bce977b90bfd36dea7bb1f8252db38a563ef860cedebe899d55d52a25bfdca395a054d6f6a143cc"}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x15) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x4001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f0, 0x17) mmap$auto(0x1, 0x400008, 0x8000, 0xfffffffd, r2, 0x10008000) mmap$auto(0x10000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000) 4.937743145s ago: executing program 3 (id=1257): fsconfig$auto_SHMEM_HUGE_ALWAYS(0xffffffffffffffff, 0x20001, 0x0, 0x0, 0x1) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) lstat$auto(0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) socket(0x9, 0xa, 0x10206) ioctl$auto(0xffffffffffffffff, 0x7, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xf0, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) fsetxattr$auto(r1, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', &(0x7f00000000c0), 0xa9, 0x2) read$auto(0x3, 0x0, 0xf3c) 4.085993299s ago: executing program 2 (id=1258): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x81, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x101, 0x5, 0x2, 0x7, 0x8, 0x8, 0x100000002}}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2001, 0x0) write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)={0x6, 0x4, 0xff, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x800003d, 0x7, 0x3, 0x1f7, 0x9, 0x7a, 0xd68, 0x5, 0x6, 0x5}, 0xed) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) poll$auto(0x0, 0x25, 0x109) setfsuid$auto(r1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4000000) mmap$auto(0x1, 0x8, 0xe2, 0xeb3, 0x405, 0xb3e) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x1a3401, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty57\x00', 0x40741, 0x0) ioctl$auto(0x3, 0x402c542d, r2) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x541b, 0x74) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000040)={@raw=0x9, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @raw=0x1}) 3.979466973s ago: executing program 0 (id=1259): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) io_setup$auto(0xffffff18, 0xfffffffffffffffd) capset$auto(0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000027, 0xf5ff, 0x8}, 0x0, 0x5, 0xffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x80000000007, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_dai_list_fops_(0xffffffffffffff9c, 0x0, 0x140, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyz1\x00', 0x400, 0x0) settimeofday$auto(0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20000090) unshare$auto(0x2) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="13002c000000000006000000002000"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip_vti0\x00'}) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x5}]}, 0x1c}}, 0x20004000) bpf$auto(0x2, 0x0, 0x5) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.923321948s ago: executing program 1 (id=1260): fsconfig$auto_SHMEM_HUGE_ALWAYS(0xffffffffffffffff, 0x20001, 0x0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) lstat$auto(0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4) socket(0x9, 0xa, 0x10206) ioctl$auto(0xffffffffffffffff, 0x7, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xf0, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) unshare$auto(0x20600) fsetxattr$auto(r1, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', &(0x7f00000000c0), 0xa9, 0x2) read$auto(0x3, 0x0, 0xf3c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000002c0)={0x23, 0x80, 0xffff, 0x9610, &(0x7f0000000240)='#', 0x4b49, 0x2, 0x80005, @stream_id=0xb7f, 0x5422, 0x1004, 0x0}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0xfffffffffffffff7) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb4, 0x401, 0x8000) 2.856304225s ago: executing program 3 (id=1261): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x800, 0x0) unshare$auto(0x40000080) unshare$auto(0x7) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)='*)', 0x2) write$auto(r0, 0x0, 0xc65d) unshare$auto(0x40000480) unshare$auto(0x40000080) unshare$auto(0x9) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x0) madvise$auto(0x6, 0x2000000000cc, 0x7) r2 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000180)=0x8) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000040)=""/46, 0x23) fstat$auto(0x1, &(0x7f0000001a40)={0x2, 0x3, 0x1, 0x2, 0x3, 0x0, 0x0, 0x6, 0xe, 0x7, 0x3, 0x7, 0x7ff, 0xffffffff80000000, 0x7, 0x7ff, 0x81}) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', &(0x7f00000000c0)=0xc32) mmap$auto(0x200000000, 0x3, 0x0, 0x155becaf2, 0x4, 0x10000000) keyctl$auto(0x22, r3, r3, 0x0, 0x8000000000000000) ioctl$auto_TUNSETNOCSUM(r2, 0x400454c8, &(0x7f0000000240)=0xffff) chown$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0x9b7e, 0x2, 0xfffffffffffffffe) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video67\x00', 0x169000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82043, 0x0) r4 = socket(0x15, 0x5, 0x0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x5b7e, 0x0, 0x0, 0x0, 0x7f, 0x7}, 0x4}, 0x6011, 0x10001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 2.036428581s ago: executing program 0 (id=1262): unshare$auto(0x40000080) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) setsockopt$auto(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000080)='*\x00', 0xe6) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, 0xffffffffffffffff, 0xff, 0xffffffff80000001) r1 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r1, 0x1, 0x7, &(0x7f0000000200)='\'\a\xeb\xb6\xc8\vF`\xf6\"8\x06hM\x06K\xa7x\x03\x00.y\xa8\xe5', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1000, 0x0) r2 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40aa2, 0x0) write$auto_dfs_global_fops_debug(r2, &(0x7f0000000d80)='0', 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) 1.923023559s ago: executing program 2 (id=1263): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) io_setup$auto(0xffffff18, 0xfffffffffffffffd) capset$auto(0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000027, 0xf5ff, 0x8}, 0x0, 0x5, 0xffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x80000000007, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_dai_list_fops_(0xffffffffffffff9c, 0x0, 0x140, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyz1\x00', 0x400, 0x0) settimeofday$auto(0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20000090) unshare$auto(0x2) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="13002c000000000006000000002000"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ip_vti0\x00'}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x8040) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x5}]}, 0x1c}}, 0x20004000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 623.661515ms ago: executing program 1 (id=1264): mmap$auto(0x1, 0x1, 0x1000000000027, 0x9b72, 0xffffffffffffffff, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x5dc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9b0e6aeca24a504c}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x1) socket(0x2c, 0x3, 0x0) socket(0x10, 0x2, 0x4) unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4141) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb39\xdc\xe0f\f\xfb\xbeg\xe1\x99h\xc9W&\x88\xac\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x80) syz_clone3(0x0, 0x0) r1 = socket(0xa, 0x1, 0x106) connect$auto(r1, 0x0, 0x58) mount$auto(0x0, 0x0, 0x0, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) setns(0xc9, 0x0) socket(0x1f, 0x2, 0x0) bind$auto(0x3, 0x0, 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 528.190975ms ago: executing program 3 (id=1265): landlock_create_ruleset$auto(&(0x7f0000000280)={0x9, 0x1, 0x9}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/writeback/max_active\x00', 0x1a2b02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101000, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x3, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm1p/sub3/sw_params\x00', 0x88400, 0x0) io_uring_setup$auto(0xc, 0x0) pipe2$auto(0x0, 0x80) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x40384708, 0xffffffffffffffff) 349.208639ms ago: executing program 3 (id=1266): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) write$auto(r0, 0x0, 0xc65d) unshare$auto(0x40000480) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x6, 0x2000000000cc, 0x7) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000040)=""/46, 0x23) mmap$auto(0x200000000, 0x10000, 0x400e, 0x155becef3, r0, 0x0) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000240)=0xffff) mmap$auto(0x0, 0x2, 0xdf, 0x9b7e, 0x2, 0xfffffffffffffffe) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82043, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x15, 0x5, 0x0) recvmmsg$auto(r1, 0x0, 0x6011, 0x10001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 45.334142ms ago: executing program 0 (id=1267): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000040)={0xc4}) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, 0xffffffffffffffff, 0xff, 0xffffffff80000001) r3 = socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(r3, 0x1, 0x7, &(0x7f0000000200)='\'\a\xeb\xb6\xc8\vF`\xf6\"8\x06hM\x06K\xa7x\x03\x00.y\xa8\xe5', 0xeb66) setns(0xc9, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = socket(0x1f, 0x2, 0x0) getpeername$auto(r4, 0x0, 0x0) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r3) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xd0, r5, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ALGO_NAME={0xac, 0x2, '/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x9}, @BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008070}, 0x20004801) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 0s ago: executing program 2 (id=1268): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) io_setup$auto(0xffffff18, 0xfffffffffffffffd) capset$auto(0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000027, 0xf5ff, 0x8}, 0x0, 0x5, 0xffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x80000000007, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_dai_list_fops_(0xffffffffffffff9c, 0x0, 0x140, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyz1\x00', 0x400, 0x0) settimeofday$auto(0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20000090) unshare$auto(0x2) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="13002c000000000006000000002000"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ip_vti0\x00'}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x8040) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x5}]}, 0x1c}}, 0x20004000) bpf$auto(0x2, 0x0, 0x5) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) kernel console output (not intermixed with test programs): interface not active [ 101.307522][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.307731][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.308226][ T5626] bridge_slave_0: entered allmulticast mode [ 101.309859][ T5626] bridge_slave_0: entered promiscuous mode [ 101.338514][ T52] Bluetooth: hci1: command tx timeout [ 101.345422][ T52] Bluetooth: hci0: command tx timeout [ 101.369229][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.369314][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.369614][ T5625] bridge_slave_0: entered allmulticast mode [ 101.371351][ T5625] bridge_slave_0: entered promiscuous mode [ 101.379186][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.381110][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.386861][ T5626] bridge_slave_1: entered allmulticast mode [ 101.392191][ T5626] bridge_slave_1: entered promiscuous mode [ 101.423501][ T5632] Bluetooth: hci3: command tx timeout [ 101.424184][ T52] Bluetooth: hci2: command tx timeout [ 101.459698][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.459830][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.459946][ T5625] bridge_slave_1: entered allmulticast mode [ 101.462172][ T5625] bridge_slave_1: entered promiscuous mode [ 101.504703][ T5628] hsr_slave_0: entered promiscuous mode [ 101.505428][ T5628] hsr_slave_1: entered promiscuous mode [ 101.554076][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.575098][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.575230][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.575397][ T5627] bridge_slave_0: entered allmulticast mode [ 101.577462][ T5627] bridge_slave_0: entered promiscuous mode [ 101.601393][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.639093][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.639347][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.639464][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.639613][ T5627] bridge_slave_1: entered allmulticast mode [ 101.641393][ T5627] bridge_slave_1: entered promiscuous mode [ 101.698164][ T5626] team0: Port device team_slave_0 added [ 101.701072][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.706695][ T5626] team0: Port device team_slave_1 added [ 101.810066][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.826913][ T5625] team0: Port device team_slave_0 added [ 101.828187][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.828208][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.828243][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.831638][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.863971][ T5625] team0: Port device team_slave_1 added [ 101.867002][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.867054][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.867157][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.992928][ T5627] team0: Port device team_slave_0 added [ 102.018549][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.018570][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.018604][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.063840][ T5627] team0: Port device team_slave_1 added [ 102.081832][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.081851][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.081885][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.160824][ T5626] hsr_slave_0: entered promiscuous mode [ 102.161627][ T5626] hsr_slave_1: entered promiscuous mode [ 102.162239][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 102.162324][ T5626] Cannot create hsr debugfs directory [ 102.199010][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.199031][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.199064][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.201596][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.201616][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.201651][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.373387][ T5625] hsr_slave_0: entered promiscuous mode [ 102.374214][ T5625] hsr_slave_1: entered promiscuous mode [ 102.374859][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 102.374890][ T5625] Cannot create hsr debugfs directory [ 102.451905][ T5627] hsr_slave_0: entered promiscuous mode [ 102.453902][ T5627] hsr_slave_1: entered promiscuous mode [ 102.456751][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 102.456827][ T5627] Cannot create hsr debugfs directory [ 102.646528][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.663416][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.688732][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.702610][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.713801][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.717385][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.772447][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.785222][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.969321][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.980570][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.981536][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.990342][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.000168][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.016575][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.017397][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.020125][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.139154][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.152200][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.165554][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.170990][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.171951][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.190137][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.220931][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.231102][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.347188][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.347884][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.351327][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.378863][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.384685][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.391514][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.406994][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.415983][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.419971][ T52] Bluetooth: hci0: command tx timeout [ 103.420009][ T52] Bluetooth: hci1: command tx timeout [ 103.442290][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.493737][ T5632] Bluetooth: hci2: command tx timeout [ 103.493750][ T52] Bluetooth: hci3: command tx timeout [ 103.519838][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.540373][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.540501][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.572091][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.572185][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.613395][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.691038][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.720480][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.720568][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.740910][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.760429][ T5628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.790929][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.791016][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.840183][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.906048][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.906184][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.936989][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.955303][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.955425][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.035878][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.081990][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.082146][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.141122][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.141251][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.056274][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.127614][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.208804][ T5628] veth0_vlan: entered promiscuous mode [ 105.245459][ T5628] veth1_vlan: entered promiscuous mode [ 105.368025][ T5626] veth0_vlan: entered promiscuous mode [ 105.420380][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.426204][ T5628] veth0_macvtap: entered promiscuous mode [ 105.448917][ T5626] veth1_vlan: entered promiscuous mode [ 105.462616][ T5628] veth1_macvtap: entered promiscuous mode [ 105.479219][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.493389][ T52] Bluetooth: hci1: command tx timeout [ 105.493428][ T52] Bluetooth: hci0: command tx timeout [ 105.523783][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.545266][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.574736][ T52] Bluetooth: hci3: command tx timeout [ 105.574750][ T5632] Bluetooth: hci2: command tx timeout [ 105.631589][ T5626] veth0_macvtap: entered promiscuous mode [ 105.668302][ T5626] veth1_macvtap: entered promiscuous mode [ 105.684309][ T5625] veth0_vlan: entered promiscuous mode [ 105.700817][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.731315][ T5627] veth0_vlan: entered promiscuous mode [ 105.753528][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.753638][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.753693][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.759981][ T5625] veth1_vlan: entered promiscuous mode [ 105.828039][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.849737][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.849777][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.870007][ T5627] veth1_vlan: entered promiscuous mode [ 105.889707][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.949377][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.949405][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.949978][ T5625] veth0_macvtap: entered promiscuous mode [ 105.984593][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.986898][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.987249][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.988333][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.034637][ T5625] veth1_macvtap: entered promiscuous mode [ 106.086286][ T5627] veth0_macvtap: entered promiscuous mode [ 106.120362][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.138335][ T5627] veth1_macvtap: entered promiscuous mode [ 106.169911][ T5628] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.191945][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.245064][ T1283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.246100][ T1283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.246155][ T1283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.283372][ T1283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.340272][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.340301][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.385046][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.417080][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.498339][ T1283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.498425][ T1283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.525202][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.525229][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.668885][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.668915][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.323256][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.323284][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.323537][ T1283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.563848][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.563878][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.564130][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.574961][ T5632] Bluetooth: hci0: command tx timeout [ 107.579650][ T5632] Bluetooth: hci1: command tx timeout [ 107.653065][ T5632] Bluetooth: hci3: command tx timeout [ 107.653108][ T5632] Bluetooth: hci2: command tx timeout [ 108.257626][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.257655][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.055182][ T5823] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 112.809559][ T5863] FAULT_INJECTION: forcing a failure. [ 112.809559][ T5863] name failslab, interval 1, probability 0, space 0, times 1 [ 112.810325][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: syz.0.12 Not tainted syzkaller #0 PREEMPT(full) [ 112.810366][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 112.810391][ T5863] Call Trace: [ 112.810407][ T5863] [ 112.810420][ T5863] dump_stack_lvl+0x100/0x190 [ 112.810480][ T5863] should_fail_ex.cold+0x5/0xa [ 112.810525][ T5863] should_failslab+0xc2/0x120 [ 112.810573][ T5863] kmem_cache_alloc_noprof+0x92/0x6a0 [ 112.810617][ T5863] ? __pmd_alloc+0xbf/0x950 [ 112.810675][ T5863] __pmd_alloc+0xbf/0x950 [ 112.810727][ T5863] move_page_tables+0x31e0/0x4930 [ 112.810772][ T5863] ? __pfx_copy_vma+0x10/0x10 [ 112.810805][ T5863] ? __lock_acquire+0x5c0/0x1f40 [ 112.810873][ T5863] ? __pfx_move_page_tables+0x10/0x10 [ 112.810929][ T5863] ? lock_acquire+0x1d1/0x380 [ 112.810978][ T5863] ? __vma_start_write+0x11c/0x280 [ 112.811040][ T5863] copy_vma_and_data+0x2bf/0x780 [ 112.811077][ T5863] ? __vma_start_exclude_readers+0x238/0x810 [ 112.811132][ T5863] ? __pfx_copy_vma_and_data+0x10/0x10 [ 112.811187][ T5863] ? __vma_start_write+0x17f/0x280 [ 112.811237][ T5863] ? __pfx___vma_start_write+0x10/0x10 [ 112.811301][ T5863] move_vma+0x57c/0x12e0 [ 112.811342][ T5863] ? __pfx_move_vma+0x10/0x10 [ 112.811377][ T5863] ? cap_mmap_addr+0x4b/0x120 [ 112.811424][ T5863] ? security_mmap_addr+0x71/0x1e0 [ 112.811460][ T5863] ? __get_unmapped_area+0x255/0x3e0 [ 112.811513][ T5863] ? vrm_set_new_addr+0x1f5/0x2a0 [ 112.811551][ T5863] mremap_to+0x234/0x4c0 [ 112.811587][ T5863] ? __pfx_mremap_to+0x10/0x10 [ 112.811620][ T5863] ? mas_walk+0x260/0x310 [ 112.811662][ T5863] __do_sys_mremap+0x99f/0x1780 [ 112.811699][ T5863] ? futex_wait+0x110/0x370 [ 112.811751][ T5863] ? __pfx___do_sys_mremap+0x10/0x10 [ 112.811791][ T5863] ? rcu_read_lock_any_held+0x6a/0x90 [ 112.811842][ T5863] ? ksys_write+0x190/0x250 [ 112.811893][ T5863] ? __pfx_do_futex+0x10/0x10 [ 112.811944][ T5863] ? native_tss_update_io_bitmap+0x28a/0x740 [ 112.811984][ T5863] ? xfd_validate_state+0x129/0x190 [ 112.812055][ T5863] do_syscall_64+0x121/0x770 [ 112.812096][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.812132][ T5863] RIP: 0033:0x7fb66eb9e159 [ 112.812168][ T5863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.812201][ T5863] RSP: 002b:00007fb66f9db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 112.812239][ T5863] RAX: ffffffffffffffda RBX: 00007fb66ee26360 RCX: 00007fb66eb9e159 [ 112.812262][ T5863] RDX: 000000000000001b RSI: 0000000000000004 RDI: 0000200000000000 [ 112.812283][ T5863] RBP: 00007fb66ec3506b R08: 0000000100000000 R09: 0000000000000000 [ 112.812305][ T5863] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 112.812324][ T5863] R13: 00007fb66ee263f8 R14: 00007fb66ee26360 R15: 00007ffd98c2c6a8 [ 112.812367][ T5863] [ 122.072218][ T31] audit: type=1807 audit(1790269719.996:2): UNKNOWN= [ 122.072796][ T31] audit: type=1802 audit(1790269720.006:3): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.30" res=0 errno=0 [ 122.590500][ T6017] ima: policy update failed [ 122.592401][ T31] audit: type=1802 audit(1790269720.526:4): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.30" res=0 errno=0 [ 124.422587][ T6060] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.771571][ T6060] Zero length message leads to an empty skb [ 129.971753][ T6139] futex_wake_op: syz.2.44 tries to shift op by -2048; fix this program [ 129.972164][ T6139] futex_wake_op: syz.2.44 tries to shift op by -2048; fix this program [ 129.994633][ T6139] 0x000000000001-0x000000020000 : "" [ 130.018885][ T6139] ftl_cs: FTL header corrupt! [ 130.635865][ T6151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.47'. [ 132.287411][ T6174] random: crng reseeded on system resumption [ 132.940728][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940805][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.606548][ T6207] process 'syz.2.54' launched ':,' with NULL argv: empty string added [ 133.677940][ T6207] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 135.695555][ T6221] bond0: no command found in slaves file - use +ifname or -ifname [ 138.850200][ T6276] syz.0.64 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 151.395407][ T6471] IPVS: length: 8 != 14152 [ 153.324626][ T6503] FAULT_INJECTION: forcing a failure. [ 153.324626][ T6503] name failslab, interval 1, probability 0, space 0, times 0 [ 153.324687][ T6503] CPU: 1 UID: 0 PID: 6503 Comm: syz.0.90 Not tainted syzkaller #0 PREEMPT(full) [ 153.324726][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 153.324747][ T6503] Call Trace: [ 153.324759][ T6503] [ 153.324781][ T6503] dump_stack_lvl+0x100/0x190 [ 153.324842][ T6503] should_fail_ex.cold+0x5/0xa [ 153.324889][ T6503] should_failslab+0xc2/0x120 [ 153.324939][ T6503] kmem_cache_alloc_noprof+0x92/0x6a0 [ 153.324989][ T6503] ? alloc_empty_file+0x5b/0x1c0 [ 153.325047][ T6503] alloc_empty_file+0x5b/0x1c0 [ 153.325099][ T6503] path_openat+0xdb/0x2440 [ 153.325151][ T6503] ? __pfx_path_openat+0x10/0x10 [ 153.325209][ T6503] do_file_open+0x20e/0x430 [ 153.325257][ T6503] ? __pfx_do_file_open+0x10/0x10 [ 153.325330][ T6503] ? _raw_spin_unlock+0x28/0x50 [ 153.325385][ T6503] ? alloc_fd+0x471/0x7a0 [ 153.325440][ T6503] do_sys_openat2+0x10f/0x1e0 [ 153.325494][ T6503] ? __pfx_do_sys_openat2+0x10/0x10 [ 153.325548][ T6503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.325599][ T6503] __x64_sys_openat+0x12d/0x210 [ 153.325655][ T6503] ? __pfx___x64_sys_openat+0x10/0x10 [ 153.325724][ T6503] do_syscall_64+0x121/0x770 [ 153.325772][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.325810][ T6503] RIP: 0033:0x7fb66eb9e159 [ 153.325846][ T6503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.325879][ T6503] RSP: 002b:00007fb66f9ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 153.325913][ T6503] RAX: ffffffffffffffda RBX: 00007fb66ee26450 RCX: 00007fb66eb9e159 [ 153.325935][ T6503] RDX: 0000000000048000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 153.325958][ T6503] RBP: 00007fb66ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 153.325979][ T6503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.326001][ T6503] R13: 00007fb66ee264e8 R14: 00007fb66ee26450 R15: 00007ffd98c2c6a8 [ 153.326044][ T6503] [ 154.854365][ T6514] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 154.854502][ T6514] vhci_hcd vhci_hcd.2: invalid port number 0 [ 157.703055][ T6567] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 157.703092][ T6567] CIFS mount error: No usable UNC path provided in device string! [ 157.703092][ T6567] [ 157.703299][ T6567] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 160.028463][ T6605] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 161.888976][ T6622] : Can't lookup blockdev [ 163.063187][ T52] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 163.395579][ T6659] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 164.781712][ T6670] Format for deleting device is "id" (uint). [ 165.093496][ T5632] Bluetooth: hci0: command 0x2016 tx timeout [ 167.173634][ T52] Bluetooth: hci0: command 0x2016 tx timeout [ 169.381764][ T6729] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 16 out of range (51000000..2150000000) [ 172.010021][ T6775] IPVS: length: 8 != 21224 [ 183.840595][ T6947] blktrace: Concurrent blktraces are not allowed on nbd5 [ 186.155424][ T6993] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 187.434170][ T7002] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 192.438429][ T7097] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 194.374156][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.374217][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.772983][ T7280] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 209.978087][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 216.480205][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 220.230437][ T5638] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 222.053765][ T5638] Bluetooth: hci0: command 0x2016 tx timeout [ 222.053816][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 222.054100][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 222.054147][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 230.427280][ T7671] IPVS: length: 8 != 21224 [ 231.920123][ T7693] IPVS: length: 8 != 21224 [ 232.150971][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 236.013346][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 238.402764][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 238.900970][ T7789] blktrace: Concurrent blktraces are not allowed on nbd5 [ 239.019180][ T7789] blktrace: Concurrent blktraces are not allowed on nbd5 [ 240.898325][ T5632] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 244.605699][ T7863] IPVS: length: 8 != 21224 [ 255.524698][ T8016] IPVS: length: 8 != 21224 [ 255.816360][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.816458][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.918058][ T8053] IPVS: length: 8 != 21224 [ 258.614062][ T8082] IPVS: length: 8 != 21224 [ 261.472702][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 261.663566][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.669204][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.671639][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 261.673145][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 261.682510][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.198290][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.300536][ T8136] FAULT_INJECTION: forcing a failure. [ 262.300536][ T8136] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 262.300605][ T8136] CPU: 0 UID: 0 PID: 8136 Comm: syz.2.309 Not tainted syzkaller #0 PREEMPT(full) [ 262.300642][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.300661][ T8136] Call Trace: [ 262.300672][ T8136] [ 262.300685][ T8136] dump_stack_lvl+0x100/0x190 [ 262.300738][ T8136] should_fail_ex.cold+0x5/0xa [ 262.300782][ T8136] _copy_from_iter+0x1f4/0x1690 [ 262.300845][ T8136] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 262.300897][ T8136] ? __pfx__copy_from_iter+0x10/0x10 [ 262.300944][ T8136] ? __sk_mem_raise_allocated+0x789/0x1570 [ 262.301017][ T8136] mptcp_sendmsg+0xf52/0x2210 [ 262.301072][ T8136] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 262.301109][ T8136] ? aa_sock_msg_perm+0x11e/0x200 [ 262.301159][ T8136] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 262.301197][ T8136] inet_sendmsg+0x11c/0x140 [ 262.301238][ T8136] sock_write_iter+0x4ea/0x5b0 [ 262.301274][ T8136] ? __pfx_inet_sendmsg+0x10/0x10 [ 262.301312][ T8136] ? __pfx_sock_write_iter+0x10/0x10 [ 262.301362][ T8136] ? bpf_lsm_file_permission+0x9/0x10 [ 262.301410][ T8136] ? security_file_permission+0x76/0x210 [ 262.301447][ T8136] ? rw_verify_area+0xce/0x6d0 [ 262.301483][ T8136] vfs_write+0x6af/0x1050 [ 262.301522][ T8136] ? __pfx_sock_write_iter+0x10/0x10 [ 262.301564][ T8136] ? __pfx_vfs_write+0x10/0x10 [ 262.301598][ T8136] ? find_held_lock+0x2b/0x80 [ 262.301663][ T8136] ksys_write+0x1f8/0x250 [ 262.301712][ T8136] ? __pfx_ksys_write+0x10/0x10 [ 262.301759][ T8136] do_syscall_64+0x121/0x770 [ 262.301798][ T8136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.301854][ T8136] RIP: 0033:0x7f7429f9e159 [ 262.301878][ T8136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.301906][ T8136] RSP: 002b:00007f74281d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.301935][ T8136] RAX: ffffffffffffffda RBX: 00007f742a226180 RCX: 00007f7429f9e159 [ 262.301956][ T8136] RDX: 0000000100000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 262.301974][ T8136] RBP: 00007f74281d5090 R08: 0000000000000000 R09: 0000000000000000 [ 262.301993][ T8136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.302011][ T8136] R13: 00007f742a226218 R14: 00007f742a226180 R15: 00007ffe08f8a5f8 [ 262.302069][ T8136] [ 262.624325][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.743466][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.857136][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.297211][ T13] bridge_slave_1: left allmulticast mode [ 263.297264][ T13] bridge_slave_1: left promiscuous mode [ 263.298244][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.338443][ T13] bridge_slave_0: left allmulticast mode [ 263.338478][ T13] bridge_slave_0: left promiscuous mode [ 263.339247][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.732659][ T5632] Bluetooth: hci3: command tx timeout [ 263.856139][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.861852][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.887754][ T13] bond0 (unregistering): Released all slaves [ 264.969726][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 265.065120][ T13] hsr_slave_0: left promiscuous mode [ 265.065874][ T13] hsr_slave_1: left promiscuous mode [ 265.066787][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.066825][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.068155][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.068180][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.107482][ T13] veth1_macvtap: left promiscuous mode [ 265.111320][ T13] veth0_macvtap: left promiscuous mode [ 265.111721][ T13] veth1_vlan: left promiscuous mode [ 265.112015][ T13] veth0_vlan: left promiscuous mode [ 265.369400][ T13] team0 (unregistering): Port device team_slave_1 removed [ 265.400719][ T13] team0 (unregistering): Port device team_slave_0 removed [ 265.822962][ T5632] Bluetooth: hci3: command tx timeout [ 265.868211][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.868386][ T8126] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.868555][ T8126] bridge_slave_0: entered allmulticast mode [ 265.885122][ T8126] bridge_slave_0: entered promiscuous mode [ 265.918783][ T8126] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.918911][ T8126] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.919089][ T8126] bridge_slave_1: entered allmulticast mode [ 265.952164][ T8126] bridge_slave_1: entered promiscuous mode [ 266.131966][ T8126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.156523][ T8126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.404578][ T8126] team0: Port device team_slave_0 added [ 266.756279][ T8126] team0: Port device team_slave_1 added [ 266.985696][ T8126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.985720][ T8126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.985759][ T8126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.128656][ T8126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.128751][ T8126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.128831][ T8126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.194655][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 267.552046][ T8126] hsr_slave_0: entered promiscuous mode [ 267.556683][ T8126] hsr_slave_1: entered promiscuous mode [ 267.562892][ T8126] debugfs: 'hsr0' already exists in 'hsr' [ 267.562965][ T8126] Cannot create hsr debugfs directory [ 267.892778][ T5632] Bluetooth: hci3: command tx timeout [ 268.794546][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 269.973372][ T5632] Bluetooth: hci3: command tx timeout [ 272.193672][ T8126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.225198][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 272.227464][ T8126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.248790][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 272.586955][ T8126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.607529][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 272.738023][ T8126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.757461][ T8126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 273.953919][ T8126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.022160][ T8126] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.051613][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.051741][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.125570][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.125692][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.208759][ T8380] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 277.199985][ T8438] IPVS: length: 8 != 21224 [ 277.766648][ T8126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.577701][ T8126] veth0_vlan: entered promiscuous mode [ 279.106927][ T8126] veth1_vlan: entered promiscuous mode [ 280.168943][ T8126] veth0_macvtap: entered promiscuous mode [ 280.287398][ T8126] veth1_macvtap: entered promiscuous mode [ 280.591961][ T8126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.669446][ T8126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.068071][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.069197][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.069254][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.069305][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.277550][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.453840][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.457609][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.461052][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.462286][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.490679][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.510817][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.937447][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.247358][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.289075][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.289104][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.628290][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.628318][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.572850][ T5632] Bluetooth: hci0: command tx timeout [ 283.619075][ T45] bridge_slave_1: left allmulticast mode [ 283.619110][ T45] bridge_slave_1: left promiscuous mode [ 283.621978][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.660458][ T45] bridge_slave_0: left allmulticast mode [ 283.660493][ T45] bridge_slave_0: left promiscuous mode [ 283.660732][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.968727][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.971134][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.994459][ T45] bond0 (unregistering): Released all slaves [ 284.161656][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 285.059204][ T45] hsr_slave_0: left promiscuous mode [ 285.065042][ T45] hsr_slave_1: left promiscuous mode [ 285.071782][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.073512][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.090572][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.090603][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.131271][ T45] veth1_macvtap: left promiscuous mode [ 285.131321][ T45] veth0_macvtap: left promiscuous mode [ 285.612008][ T45] team0 (unregistering): Port device team_slave_1 removed [ 285.653826][ T5632] Bluetooth: hci0: command tx timeout [ 285.679148][ T45] team0 (unregistering): Port device team_slave_0 removed [ 286.807276][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 287.296928][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.297080][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.297219][ T8499] bridge_slave_0: entered allmulticast mode [ 287.298864][ T8499] bridge_slave_0: entered promiscuous mode [ 287.379213][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.379330][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.379477][ T8499] bridge_slave_1: entered allmulticast mode [ 287.396751][ T8499] bridge_slave_1: entered promiscuous mode [ 287.688041][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.732730][ T5632] Bluetooth: hci0: command tx timeout [ 287.845669][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.397194][ T5632] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 288.490435][ T8499] team0: Port device team_slave_0 added [ 288.669451][ T8499] team0: Port device team_slave_1 added [ 289.060499][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 289.072943][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.072965][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.073006][ T8499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.185714][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.185738][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.185774][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.567549][ T8631] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 289.644484][ T8499] hsr_slave_0: entered promiscuous mode [ 289.645764][ T8499] hsr_slave_1: entered promiscuous mode [ 289.646560][ T8499] debugfs: 'hsr0' already exists in 'hsr' [ 289.646584][ T8499] Cannot create hsr debugfs directory [ 289.812952][ T5632] Bluetooth: hci0: command tx timeout [ 292.292786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 293.103782][ T8499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 293.158922][ T8499] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.195884][ T8499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.247314][ T8499] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.252047][ T8499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 293.284610][ T8499] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 293.287332][ T8499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 293.321194][ T8499] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.019510][ T5632] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 298.466974][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.625378][ T8499] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.654586][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.654677][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.734616][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.735883][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.826219][ T8499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.826335][ T8499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.188397][ T5632] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 301.005566][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.387657][ T8836] Format for deleting device is "id" (uint). [ 302.510320][ T8499] veth0_vlan: entered promiscuous mode [ 303.104037][ T8499] veth1_vlan: entered promiscuous mode [ 303.922828][ T8872] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 304.409590][ T8872] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.411710][ T8872] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 304.489749][ T8872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.489872][ T8872] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 304.515970][ T8872] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.517705][ T8872] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 304.563229][ T8872] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 304.579137][ T8872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.579275][ T8872] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 304.609224][ T8872] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 304.838386][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 304.910677][ T8499] veth0_macvtap: entered promiscuous mode [ 304.967741][ T8499] veth1_macvtap: entered promiscuous mode [ 305.378104][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.440246][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.083905][ T45] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.083972][ T45] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.084042][ T45] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.292719][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 306.532847][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 306.535570][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 306.582770][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.612744][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 307.151151][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.151176][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.241204][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.241233][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.723107][ T8934] ecryptfs_miscdev_write: Invalid packet size [102] [ 307.784233][ T8937] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 307.785266][ T8937] ecryptfs_miscdev_write: Invalid packet size [101] [ 308.104038][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 308.372685][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 308.612708][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 308.612775][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 308.693051][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 310.083280][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 310.471979][ T5632] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 310.693855][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 310.773311][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 311.945307][ T8998] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 312.069243][ T9001] Format for deleting device is "id" (uint). [ 315.178875][ T9056] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 315.251861][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 316.375102][ T9074] blktrace: Concurrent blktraces are not allowed on nbd5 [ 317.255526][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.255600][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.445937][ T9097] Format for deleting device is "id" (uint). [ 321.431367][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 322.936214][ T9182] Format for deleting device is "id" (uint). [ 331.002688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 336.299480][ T9354] zero sized request [ 340.354681][ T9407] FAULT_INJECTION: forcing a failure. [ 340.354681][ T9407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.354736][ T9407] CPU: 0 UID: 0 PID: 9407 Comm: syz.2.444 Not tainted syzkaller #0 PREEMPT(full) [ 340.354773][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 340.354792][ T9407] Call Trace: [ 340.354803][ T9407] [ 340.354816][ T9407] dump_stack_lvl+0x100/0x190 [ 340.354867][ T9407] should_fail_ex.cold+0x5/0xa [ 340.354911][ T9407] _copy_to_user+0x32/0xd0 [ 340.354961][ T9407] keyctl_capabilities+0x5a/0x160 [ 340.355015][ T9407] __do_sys_keyctl+0x427/0x5a0 [ 340.355067][ T9407] do_syscall_64+0x121/0x770 [ 340.355107][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.355143][ T9407] RIP: 0033:0x7f7429f9e159 [ 340.355170][ T9407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.355212][ T9407] RSP: 002b:00007f7428172028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 340.355243][ T9407] RAX: ffffffffffffffda RBX: 00007f742a226450 RCX: 00007f7429f9e159 [ 340.355265][ T9407] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 340.355288][ T9407] RBP: 00007f7428172090 R08: 00000000000003ff R09: 0000000000000000 [ 340.355308][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.355328][ T9407] R13: 00007f742a2264e8 R14: 00007f742a226450 R15: 00007ffe08f8a5f8 [ 340.355370][ T9407] [ 343.192082][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 345.964629][ T9490] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 349.444307][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 350.705117][ T5632] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 352.475017][ T9605] netlink: 40 bytes leftover after parsing attributes in process `syz.2.468'. [ 359.724517][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 366.161171][ T9814] Format for deleting device is "id" (uint). [ 368.361797][ T9851] futex_wake_op: syz.2.502 tries to shift op by -2048; fix this program [ 368.362067][ T9851] futex_wake_op: syz.2.502 tries to shift op by -2048; fix this program [ 368.363527][ T9851] FAULT_INJECTION: forcing a failure. [ 368.363527][ T9851] name failslab, interval 1, probability 0, space 0, times 0 [ 368.363577][ T9851] CPU: 1 UID: 0 PID: 9851 Comm: syz.2.502 Not tainted syzkaller #0 PREEMPT(full) [ 368.363613][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 368.363632][ T9851] Call Trace: [ 368.363642][ T9851] [ 368.363654][ T9851] dump_stack_lvl+0x100/0x190 [ 368.363710][ T9851] should_fail_ex.cold+0x5/0xa [ 368.363753][ T9851] should_failslab+0xc2/0x120 [ 368.363799][ T9851] __kmalloc_noprof+0xfc/0x840 [ 368.363836][ T9851] ? rcu_is_watching+0x13/0xc0 [ 368.363889][ T9851] ? tomoyo_realpath_from_path+0xb6/0x690 [ 368.363938][ T9851] tomoyo_realpath_from_path+0xb6/0x690 [ 368.363999][ T9851] tomoyo_path_number_perm+0x23c/0x580 [ 368.364068][ T9851] ? tomoyo_path_number_perm+0x22e/0x580 [ 368.364145][ T9851] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 368.364222][ T9851] ? __lock_acquire+0x5c0/0x1f40 [ 368.364291][ T9851] ? __fget_files+0x34/0x3d0 [ 368.364331][ T9851] ? find_held_lock+0x2b/0x80 [ 368.364368][ T9851] ? hook_file_ioctl_common+0x140/0x440 [ 368.364411][ T9851] ? __fget_files+0x21f/0x3d0 [ 368.364503][ T9851] security_file_ioctl+0xd3/0x230 [ 368.364663][ T9851] __x64_sys_ioctl+0xb7/0x210 [ 368.364769][ T9851] do_syscall_64+0x121/0x770 [ 368.364873][ T9851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.364957][ T9851] RIP: 0033:0x7f7429f9e159 [ 368.365022][ T9851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.365111][ T9851] RSP: 002b:00007f742ad87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.365193][ T9851] RAX: ffffffffffffffda RBX: 00007f742a225fa0 RCX: 00007f7429f9e159 [ 368.365240][ T9851] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000003 [ 368.365292][ T9851] RBP: 00007f742ad87090 R08: 0000000000000000 R09: 0000000000000000 [ 368.365345][ T9851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.365396][ T9851] R13: 00007f742a226038 R14: 00007f742a225fa0 R15: 00007ffe08f8a5f8 [ 368.365511][ T9851] [ 368.365744][ T9851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 368.365917][ T9851] 0x000000000001-0x000000020000 : "" [ 368.652199][ T9851] ftl_cs: FTL header corrupt! [ 368.829714][ T9859] random: crng reseeded on system resumption [ 369.158416][ T9867] binder: 9858:9867 ioctl c0306201 200000000000 returned -14 [ 370.332354][ T9884] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 370.587374][ T9886] Format for deleting device is "id" (uint). [ 372.306802][ T9916] futex_wake_op: syz.2.512 tries to shift op by -2048; fix this program [ 372.306997][ T9916] futex_wake_op: syz.2.512 tries to shift op by -2048; fix this program [ 372.308881][ T9916] 0x000000000001-0x000000020000 : "" [ 372.357432][ T9916] ftl_cs: FTL header corrupt! [ 374.058306][ T31] audit: type=1807 audit(2147483674.410:5): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 374.058463][ T31] audit: type=1802 audit(2147483674.410:6): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.516" res=0 errno=0 [ 374.099657][ T9952] ima: policy update failed [ 374.099869][ T31] audit: type=1802 audit(2147483674.450:7): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.516" res=0 errno=0 [ 378.288689][T10030] ecryptfs_miscdev_write: Invalid packet size [102] [ 378.696451][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.696525][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.312142][T10047] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 380.329201][T10047] FAULT_INJECTION: forcing a failure. [ 380.329201][T10047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.329243][T10047] CPU: 0 UID: 0 PID: 10047 Comm: syz.3.530 Not tainted syzkaller #0 PREEMPT(full) [ 380.329280][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 380.329309][T10047] Call Trace: [ 380.329320][T10047] [ 380.329332][T10047] dump_stack_lvl+0x100/0x190 [ 380.329385][T10047] should_fail_ex.cold+0x5/0xa [ 380.329429][T10047] _copy_from_user+0x2e/0xd0 [ 380.329476][T10047] memdup_user_nul+0x6c/0x120 [ 380.329511][T10047] event_filter_write+0x47/0x290 [ 380.329551][T10047] vfs_write+0x2aa/0x1050 [ 380.329589][T10047] ? __pfx_event_filter_write+0x10/0x10 [ 380.329628][T10047] ? lock_acquire+0x1d1/0x380 [ 380.329673][T10047] ? __fget_files+0x34/0x3d0 [ 380.329711][T10047] ? __pfx_vfs_write+0x10/0x10 [ 380.329744][T10047] ? find_held_lock+0x2b/0x80 [ 380.329782][T10047] ? __fget_files+0x215/0x3d0 [ 380.329829][T10047] ? __fget_files+0x21f/0x3d0 [ 380.329880][T10047] ksys_write+0x12a/0x250 [ 380.329916][T10047] ? __pfx_ksys_write+0x10/0x10 [ 380.329967][T10047] do_syscall_64+0x121/0x770 [ 380.330007][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.330042][T10047] RIP: 0033:0x7fd32bf9e159 [ 380.330069][T10047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.330099][T10047] RSP: 002b:00007fd32ce24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 380.330131][T10047] RAX: ffffffffffffffda RBX: 00007fd32c225fa0 RCX: 00007fd32bf9e159 [ 380.330153][T10047] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000004 [ 380.330173][T10047] RBP: 00007fd32ce24090 R08: 0000000000000000 R09: 0000000000000000 [ 380.330194][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.330214][T10047] R13: 00007fd32c226038 R14: 00007fd32c225fa0 R15: 00007ffec6ffe968 [ 380.330257][T10047] [ 380.821921][T10061] [U] 0 [ 380.871972][T10056] [U] QUI [ 381.328843][T10078] syz.3.533(10078): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 383.548744][T10082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 383.549891][T10082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 383.550232][T10082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 383.592419][T10082] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 384.612862][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 385.359363][T10129] Unsupported ieee802154 address type: 0 [ 385.572920][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 385.572966][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 385.652627][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 387.232887][T10164] Format for deleting device is "id" (uint). [ 387.880557][ T5631] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 389.491008][ T5631] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 391.156953][T10229] Format for deleting device is "id" (uint). [ 393.879530][ T5631] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 395.698092][T10305] Format for deleting device is "id" (uint). [ 397.554058][T10331] blktrace: Concurrent blktraces are not allowed on nbd5 [ 404.148631][T10442] FAULT_INJECTION: forcing a failure. [ 404.148631][T10442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.167141][T10442] CPU: 1 UID: 0 PID: 10442 Comm: syz.2.581 Not tainted syzkaller #0 PREEMPT(full) [ 404.167183][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 404.167203][T10442] Call Trace: [ 404.167214][T10442] [ 404.167226][T10442] dump_stack_lvl+0x100/0x190 [ 404.167279][T10442] should_fail_ex.cold+0x5/0xa [ 404.167321][T10442] _copy_from_user+0x2e/0xd0 [ 404.167368][T10442] do_pages_stat+0x194/0x7f0 [ 404.167451][T10442] ? __pfx_do_pages_stat+0x10/0x10 [ 404.167505][T10442] ? find_held_lock+0x2b/0x80 [ 404.167565][T10442] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 404.167626][T10442] ? lockdep_hardirqs_on+0x7d/0x110 [ 404.167659][T10442] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 404.167737][T10442] kernel_move_pages+0xf2c/0x14d0 [ 404.167797][T10442] ? __mutex_unlock_slowpath+0x35d/0x930 [ 404.167840][T10442] ? __pfx_kernel_move_pages+0x10/0x10 [ 404.167895][T10442] ? __fget_files+0x21f/0x3d0 [ 404.167944][T10442] ? fput+0x7c/0x100 [ 404.167988][T10442] ? ksys_write+0x1ac/0x250 [ 404.168025][T10442] ? __pfx_ksys_write+0x10/0x10 [ 404.168068][T10442] __x64_sys_move_pages+0xe0/0x1c0 [ 404.168122][T10442] ? do_syscall_64+0xae/0x770 [ 404.168156][T10442] ? lockdep_hardirqs_on+0x7d/0x110 [ 404.168190][T10442] do_syscall_64+0x121/0x770 [ 404.168229][T10442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.168264][T10442] RIP: 0033:0x7f7429f9e159 [ 404.168295][T10442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.168327][T10442] RSP: 002b:00007f7428193028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 404.168359][T10442] RAX: ffffffffffffffda RBX: 00007f742a226360 RCX: 00007f7429f9e159 [ 404.168380][T10442] RDX: 0000000000000000 RSI: 0000000000001002 RDI: 0000000000000000 [ 404.168399][T10442] RBP: 00007f7428193090 R08: 0000000000000000 R09: 0000000000000002 [ 404.168419][T10442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.168439][T10442] R13: 00007f742a2263f8 R14: 00007f742a226360 R15: 00007ffe08f8a5f8 [ 404.168482][T10442] [ 406.806582][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.024611][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.027257][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.028896][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.029984][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.032032][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.225905][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.369685][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.500089][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.033754][ T61] bridge_slave_1: left allmulticast mode [ 408.033789][ T61] bridge_slave_1: left promiscuous mode [ 408.033954][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.037730][ T61] bridge_slave_0: left allmulticast mode [ 408.037755][ T61] bridge_slave_0: left promiscuous mode [ 408.037923][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.381193][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.395844][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.397942][ T61] bond0 (unregistering): Released all slaves [ 409.092742][ T5632] Bluetooth: hci3: command tx timeout [ 409.589309][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 409.628247][ T61] hsr_slave_0: left promiscuous mode [ 409.628872][ T61] hsr_slave_1: left promiscuous mode [ 409.629557][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.629577][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.630373][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.630391][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.678706][ T61] veth1_macvtap: left promiscuous mode [ 409.678792][ T61] veth0_macvtap: left promiscuous mode [ 409.678875][ T61] veth1_vlan: left promiscuous mode [ 409.678932][ T61] veth0_vlan: left promiscuous mode [ 409.929107][ T61] team0 (unregistering): Port device team_slave_1 removed [ 409.947401][ T61] team0 (unregistering): Port device team_slave_0 removed [ 411.172745][ T5632] Bluetooth: hci3: command tx timeout [ 411.192839][T10475] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.193044][T10475] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.193209][T10475] bridge_slave_0: entered allmulticast mode [ 411.198436][T10475] bridge_slave_0: entered promiscuous mode [ 411.242483][T10475] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.245658][T10475] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.245834][T10475] bridge_slave_1: entered allmulticast mode [ 411.273515][T10475] bridge_slave_1: entered promiscuous mode [ 411.816907][T10475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.891583][T10475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.959540][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 412.140806][T10475] team0: Port device team_slave_0 added [ 412.154899][T10475] team0: Port device team_slave_1 added [ 412.266655][T10475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.266672][T10475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.266708][T10475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.268826][T10475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.268846][T10475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.268885][T10475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.448847][T10475] hsr_slave_0: entered promiscuous mode [ 412.457415][T10475] hsr_slave_1: entered promiscuous mode [ 412.465916][T10475] debugfs: 'hsr0' already exists in 'hsr' [ 412.465987][T10475] Cannot create hsr debugfs directory [ 413.262921][ T5632] Bluetooth: hci3: command tx timeout [ 414.735968][T10475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.762182][T10475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.770921][T10475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.800480][T10475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.816212][T10475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.849319][T10475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.861856][T10475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.909898][T10475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.332666][ T5632] Bluetooth: hci3: command tx timeout [ 416.674324][T10475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.761656][T10475] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.808538][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.808673][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.862128][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.862256][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.440046][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 418.827411][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.602'. [ 418.897739][T10708] vlan1: entered allmulticast mode [ 418.897769][T10708] veth0_vlan: entered allmulticast mode [ 419.102406][T10475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.660937][T10738] syz.3.608 uses obsolete (PF_INET,SOCK_PACKET) [ 421.194403][T10475] veth0_vlan: entered promiscuous mode [ 421.671424][T10475] veth1_vlan: entered promiscuous mode [ 422.099668][T10475] veth0_macvtap: entered promiscuous mode [ 422.121003][T10475] veth1_macvtap: entered promiscuous mode [ 422.157157][T10475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.180545][T10475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.273870][ T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.273948][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.274001][ T45] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.165390][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.165417][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.701111][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.701141][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.113408][T10813] hub 1-0:1.0: USB hub found [ 426.167003][T10813] hub 1-0:1.0: 1 port detected [ 427.362021][T10836] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 431.520735][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 434.626105][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 435.519479][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 437.450737][T10992] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.450929][T10992] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 437.451105][T10992] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 437.451312][T10992] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.451384][T10992] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 437.500649][T10992] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 439.492731][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 439.493778][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 439.493831][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 439.493888][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 440.140990][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.141064][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.637599][ T31] audit: type=1804 audit(2147483740.990:8): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.651" name="/newroot/dev/binderfs/features/freeze_notification" dev="binder" ino=1048588 res=1 errno=0 [ 441.572929][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 441.697302][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 443.551759][T11094] Unsupported ieee802154 address type: 0 [ 443.652892][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 446.068393][T11135] Format for deleting device is "id" (uint). [ 446.489835][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 448.893464][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 450.250628][ T5632] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 452.317421][T11245] Format for deleting device is "id" (uint). [ 452.866218][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 458.008835][T11343] Format for deleting device is "id" (uint). [ 469.895294][T11505] blktrace: Concurrent blktraces are not allowed on nbd5 [ 471.570910][T11539] Line length is too long: Should be less than 4094 [ 472.526889][ T5632] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 488.239426][T11806] blktrace: Concurrent blktraces are not allowed on nbd5 [ 488.306188][T11807] blktrace: Concurrent blktraces are not allowed on nbd5 [ 494.516685][T11900] blktrace: Concurrent blktraces are not allowed on nbd5 [ 494.592602][T11900] blktrace: Concurrent blktraces are not allowed on nbd5 [ 499.854088][T11977] Unsupported ieee802154 address type: 0 [ 501.451615][T11996] Unsupported ieee802154 address type: 0 [ 501.574605][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.574678][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.279684][T12022] blktrace: Concurrent blktraces are not allowed on nbd5 [ 503.518338][T12022] blktrace: Concurrent blktraces are not allowed on nbd5 [ 506.406137][T12060] Unsupported ieee802154 address type: 0 [ 509.465200][T12099] Format for deleting device is "id" (uint). [ 509.978876][T12107] Format for deleting device is "id" (uint). [ 510.562376][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 511.222214][T12142] IPVS: length: 8 != 21224 [ 513.240046][T12165] netlink: 'syz.2.803': attribute type 11 has an invalid length. [ 514.610462][T12189] Format for deleting device is "id" (uint). [ 523.304877][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 524.108074][T12312] blktrace: Concurrent blktraces are not allowed on nbd5 [ 524.171611][T12312] blktrace: Concurrent blktraces are not allowed on nbd5 [ 524.403088][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 530.116527][T12406] blktrace: Concurrent blktraces are not allowed on nbd5 [ 530.181959][T12406] blktrace: Concurrent blktraces are not allowed on nbd5 [ 542.541500][ T5632] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 549.189131][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 553.975508][T12768] blktrace: Concurrent blktraces are not allowed on nbd5 [ 554.095881][T12768] blktrace: Concurrent blktraces are not allowed on nbd5 [ 558.177582][T12817] Format for deleting device is "id" (uint). [ 558.774189][T12829] Unsupported ieee802154 address type: 0 [ 559.274230][T12839] FAULT_INJECTION: forcing a failure. [ 559.274230][T12839] name failslab, interval 1, probability 0, space 0, times 0 [ 559.274365][T12839] CPU: 1 UID: 0 PID: 12839 Comm: syz.1.898 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.274414][T12839] Tainted: [L]=SOFTLOCKUP [ 559.274426][T12839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 559.274454][T12839] Call Trace: [ 559.274502][T12839] [ 559.274515][T12839] dump_stack_lvl+0x100/0x190 [ 559.274651][T12839] should_fail_ex.cold+0x5/0xa [ 559.274719][T12839] should_failslab+0xc2/0x120 [ 559.274838][T12839] kmem_cache_alloc_noprof+0x92/0x6a0 [ 559.274939][T12839] ? __kernfs_new_node+0xd2/0xa10 [ 559.275072][T12839] __kernfs_new_node+0xd2/0xa10 [ 559.275126][T12839] ? __pfx___kernfs_new_node+0x10/0x10 [ 559.275178][T12839] ? lock_acquire+0x1d1/0x380 [ 559.275244][T12839] ? kernfs_root+0x23/0x2a0 [ 559.275285][T12839] ? find_held_lock+0x2b/0x80 [ 559.275321][T12839] ? kernfs_root+0xee/0x2a0 [ 559.275362][T12839] ? kernfs_root+0xee/0x2a0 [ 559.275412][T12839] kernfs_new_node+0x117/0x150 [ 559.275473][T12839] __kernfs_create_file+0x53/0x350 [ 559.275514][T12839] sysfs_add_file_mode_ns+0x207/0x3c0 [ 559.275564][T12839] internal_create_group+0x593/0xfb0 [ 559.275619][T12839] ? __pfx_internal_create_group+0x10/0x10 [ 559.275669][T12839] ? kernfs_create_link+0x1bd/0x240 [ 559.275709][T12839] internal_create_groups+0x9d/0x150 [ 559.275757][T12839] device_add+0x77a/0x1970 [ 559.275866][T12839] ? __pfx_device_add+0x10/0x10 [ 559.275897][T12839] ? __pfx___might_resched+0x10/0x10 [ 559.275954][T12839] ? lockdep_hardirqs_on+0x7d/0x110 [ 559.276072][T12839] __add_disk+0x592/0xf10 [ 559.276167][T12839] add_disk_fwnode+0x118/0x480 [ 559.276208][T12839] loop_add+0x90b/0xb60 [ 559.276301][T12839] ? __pfx_loop_add+0x10/0x10 [ 559.276366][T12839] ? __fget_files+0x34/0x3d0 [ 559.276442][T12839] ? find_held_lock+0x2b/0x80 [ 559.276485][T12839] ? hook_file_ioctl_common+0x140/0x440 [ 559.276566][T12839] loop_control_ioctl+0xae/0x620 [ 559.276612][T12839] ? __pfx_loop_control_ioctl+0x10/0x10 [ 559.276664][T12839] ? __pfx_loop_control_ioctl+0x10/0x10 [ 559.276711][T12839] __x64_sys_ioctl+0x18e/0x210 [ 559.276774][T12839] do_syscall_64+0x121/0x770 [ 559.276840][T12839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.276886][T12839] RIP: 0033:0x7f6e45d9e159 [ 559.276915][T12839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.276947][T12839] RSP: 002b:00007f6e46beb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.277039][T12839] RAX: ffffffffffffffda RBX: 00007f6e46025fa0 RCX: 00007f6e45d9e159 [ 559.277061][T12839] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000009 [ 559.277082][T12839] RBP: 00007f6e45e3506b R08: 0000000000000000 R09: 0000000000000000 [ 559.277121][T12839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.277141][T12839] R13: 00007f6e46026038 R14: 00007f6e46025fa0 R15: 00007ffc5fc69f68 [ 559.277186][T12839] [ 560.257593][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 561.535518][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 563.018934][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.019009][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.529747][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 567.152831][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 574.846348][T13090] Unsupported ieee802154 address type: 0 [ 579.297017][T13160] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 583.471917][T13221] Unsupported ieee802154 address type: 0 [ 591.376366][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 593.308214][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 593.466759][T13381] mmap: syz.2.973 (13381) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 594.191002][T13379] FAULT_INJECTION: forcing a failure. [ 594.191002][T13379] name failslab, interval 1, probability 0, space 0, times 0 [ 594.191055][T13379] CPU: 0 UID: 0 PID: 13379 Comm: syz.2.973 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.191103][T13379] Tainted: [L]=SOFTLOCKUP [ 594.191116][T13379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 594.191135][T13379] Call Trace: [ 594.191147][T13379] [ 594.191160][T13379] dump_stack_lvl+0x100/0x190 [ 594.191216][T13379] should_fail_ex.cold+0x5/0xa [ 594.191262][T13379] should_failslab+0xc2/0x120 [ 594.191313][T13379] kmem_cache_alloc_noprof+0x92/0x6a0 [ 594.191358][T13379] ? ptlock_alloc+0x1f/0x70 [ 594.191525][T13379] ptlock_alloc+0x1f/0x70 [ 594.191579][T13379] pte_alloc_one+0x82/0x3d0 [ 594.191642][T13379] do_fault+0x960/0x1830 [ 594.191690][T13379] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 594.191798][T13379] ? __pfx_do_fault+0x10/0x10 [ 594.191855][T13379] ? _raw_spin_unlock+0x28/0x50 [ 594.191979][T13379] ? __pmd_alloc+0x3fb/0x950 [ 594.192031][T13379] __handle_mm_fault+0x150b/0x2f60 [ 594.192097][T13379] ? __pfx___handle_mm_fault+0x10/0x10 [ 594.192150][T13379] ? __pfx_mt_find+0x10/0x10 [ 594.192244][T13379] ? find_vma+0xbf/0x140 [ 594.192285][T13379] ? __pfx_find_vma+0x10/0x10 [ 594.192331][T13379] handle_mm_fault+0x363/0xa20 [ 594.192395][T13379] do_user_addr_fault+0x745/0x12f0 [ 594.192447][T13379] exc_page_fault+0x6f/0xd0 [ 594.192481][T13379] asm_exc_page_fault+0x26/0x30 [ 594.192514][T13379] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 594.192598][T13379] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 594.192631][T13379] RSP: 0018:ffffc9000e1d7e40 EFLAGS: 00050246 [ 594.192661][T13379] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 594.192681][T13379] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000e1d7e98 [ 594.192702][T13379] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52001c3afd3 [ 594.192721][T13379] R10: ffffc9000e1d7e9f R11: 0000000000000000 R12: 0000000000000000 [ 594.192741][T13379] R13: ffffc9000e1d7e98 R14: 0000000000000008 R15: 0000000000000000 [ 594.192782][T13379] _copy_from_user+0x98/0xd0 [ 594.192905][T13379] __x64_sys_signalfd4+0x125/0x1d0 [ 594.192973][T13379] ? ksys_write+0x1ac/0x250 [ 594.193040][T13379] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 594.193087][T13379] do_syscall_64+0x121/0x770 [ 594.193127][T13379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.193162][T13379] RIP: 0033:0x7f7429f9e159 [ 594.193190][T13379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.193221][T13379] RSP: 002b:00007f742ad87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 594.193251][T13379] RAX: ffffffffffffffda RBX: 00007f742a225fa0 RCX: 00007f7429f9e159 [ 594.193274][T13379] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff [ 594.193292][T13379] RBP: 00007f742a03506b R08: 0000000000000000 R09: 0000000000000000 [ 594.193311][T13379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.193331][T13379] R13: 00007f742a226038 R14: 00007f742a225fa0 R15: 00007ffe08f8a5f8 [ 594.193373][T13379] [ 597.003831][T13428] Format for deleting device is "id" (uint). [ 597.131917][T13422] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 597.132007][T13422] vhci_hcd vhci_hcd.2: invalid port number 0 [ 601.416290][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 605.380019][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 605.830914][T13582] FAULT_INJECTION: forcing a failure. [ 605.830914][T13582] name fail_futex, interval 1, probability 0, space 0, times 1 [ 605.830969][T13582] CPU: 0 UID: 0 PID: 13582 Comm: syz.2.1002 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.831018][T13582] Tainted: [L]=SOFTLOCKUP [ 605.831030][T13582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 605.831049][T13582] Call Trace: [ 605.831061][T13582] [ 605.831074][T13582] dump_stack_lvl+0x100/0x190 [ 605.831130][T13582] should_fail_ex.cold+0x5/0xa [ 605.831176][T13582] get_futex_key+0x1d0/0x14f0 [ 605.831299][T13582] ? __pfx_get_futex_key+0x10/0x10 [ 605.831371][T13582] futex_wait_setup+0x91/0x540 [ 605.831427][T13582] __futex_wait+0x19f/0x300 [ 605.831473][T13582] ? __pfx___futex_wait+0x10/0x10 [ 605.831515][T13582] ? __pfx_try_to_wake_up+0x10/0x10 [ 605.831567][T13582] ? futex_hash+0x311/0x400 [ 605.831626][T13582] ? __pfx_futex_wake_mark+0x10/0x10 [ 605.831676][T13582] ? find_held_lock+0x2b/0x80 [ 605.831715][T13582] ? futex_wake+0x4ea/0x5e0 [ 605.831767][T13582] futex_wait+0xe6/0x370 [ 605.831814][T13582] ? __pfx_futex_wait+0x10/0x10 [ 605.831879][T13582] do_futex+0x265/0x440 [ 605.831917][T13582] ? __pfx_do_futex+0x10/0x10 [ 605.831964][T13582] __x64_sys_futex+0x34f/0x4d0 [ 605.832007][T13582] ? __pfx___x64_sys_futex+0x10/0x10 [ 605.832060][T13582] do_syscall_64+0x121/0x770 [ 605.832101][T13582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.832169][T13582] RIP: 0033:0x7f7429f9e159 [ 605.832199][T13582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.832233][T13582] RSP: 002b:00007f742756c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 605.832273][T13582] RAX: ffffffffffffffda RBX: 00007f742a226458 RCX: 00007f7429f9e159 [ 605.832295][T13582] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f742a226458 [ 605.832315][T13582] RBP: 00007f742a226450 R08: 0000000000000000 R09: 0000000000000000 [ 605.832336][T13582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.832360][T13582] R13: 00007f742a2264e8 R14: 00007ffe08f8a510 R15: 00007ffe08f8a5f8 [ 605.832401][T13582] [ 606.915989][ T1226] hid-generic 0000:0000:51CE9DC9.0001: unknown main item tag 0x0 [ 606.916038][ T1226] hid-generic 0000:0000:51CE9DC9.0001: unknown main item tag 0x0 [ 606.916073][ T1226] hid-generic 0000:0000:51CE9DC9.0001: unknown main item tag 0x0 [ 606.916108][ T1226] hid-generic 0000:0000:51CE9DC9.0001: unknown main item tag 0x0 [ 606.916143][ T1226] hid-generic 0000:0000:51CE9DC9.0001: unknown main item tag 0x0 [ 606.916176][ T1226] hid-generic 0000:0000:51CE9DC9.0001: unknown main item tag 0x0 [ 606.916210][ T1226] hid-generic 0000:0000:51CE9DC9.0001: unknown main item tag 0x0 [ 606.916244][ T1226] hid-generic 0000:0000:51CE9DC9.0001: unknown main item tag 0x0 [ 606.916277][ T1226] hid-generic 0000:0000:51CE9DC9.0001: unknown main item tag 0x0 [ 606.916311][ T1226] hid-generic 0000:0000:51CE9DC9.0001: unknown main item tag 0x0 [ 606.919003][ T1226] hid-generic 0000:0000:51CE9DC9.0001: collection stack underflow [ 606.919039][ T1226] hid-generic 0000:0000:51CE9DC9.0001: item 0 0 0 12 parsing failed [ 606.920259][ T1226] hid-generic 0000:0000:51CE9DC9.0001: probe with driver hid-generic failed with error -22 [ 611.391507][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 613.322031][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 616.822801][T13750] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1027'. [ 617.058604][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 617.098664][T13750] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1027'. [ 619.532302][T13792] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[10475] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[13792] [ 624.455038][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.455132][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.160840][T13881] FAULT_INJECTION: forcing a failure. [ 626.160840][T13881] name failslab, interval 1, probability 0, space 0, times 0 [ 626.160889][T13881] CPU: 1 UID: 0 PID: 13881 Comm: syz.2.1045 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.160933][T13881] Tainted: [L]=SOFTLOCKUP [ 626.160945][T13881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 626.160964][T13881] Call Trace: [ 626.160975][T13881] [ 626.160987][T13881] dump_stack_lvl+0x100/0x190 [ 626.161040][T13881] should_fail_ex.cold+0x5/0xa [ 626.161084][T13881] should_failslab+0xc2/0x120 [ 626.161134][T13881] __kmalloc_noprof+0xfc/0x840 [ 626.161174][T13881] ? rcu_is_watching+0x13/0xc0 [ 626.161254][T13881] ? tomoyo_encode2+0xfb/0x3c0 [ 626.161431][T13881] tomoyo_encode2+0xfb/0x3c0 [ 626.161475][T13881] tomoyo_encode+0x29/0x50 [ 626.161511][T13881] tomoyo_realpath_from_path+0x18c/0x690 [ 626.161559][T13881] tomoyo_path_number_perm+0x23c/0x580 [ 626.161619][T13881] ? tomoyo_path_number_perm+0x22e/0x580 [ 626.161676][T13881] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 626.161746][T13881] ? __lock_acquire+0x5c0/0x1f40 [ 626.161813][T13881] ? __fget_files+0x34/0x3d0 [ 626.161857][T13881] ? find_held_lock+0x2b/0x80 [ 626.161893][T13881] ? hook_file_ioctl_common+0x140/0x440 [ 626.161937][T13881] ? __fget_files+0x21f/0x3d0 [ 626.161983][T13881] security_file_ioctl+0xd3/0x230 [ 626.162095][T13881] __x64_sys_ioctl+0xb7/0x210 [ 626.162132][T13881] do_syscall_64+0x121/0x770 [ 626.162169][T13881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.162203][T13881] RIP: 0033:0x7f7429f9e159 [ 626.162230][T13881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.162261][T13881] RSP: 002b:00007f742ad87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.162291][T13881] RAX: ffffffffffffffda RBX: 00007f742a225fa0 RCX: 00007f7429f9e159 [ 626.162313][T13881] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000003 [ 626.162333][T13881] RBP: 00007f742ad87090 R08: 0000000000000000 R09: 0000000000000000 [ 626.162353][T13881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.162372][T13881] R13: 00007f742a226038 R14: 00007f742a225fa0 R15: 00007ffe08f8a5f8 [ 626.162416][T13881] [ 626.170131][T13881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 627.092936][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 628.454779][ T5632] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 630.469940][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 632.534064][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 634.465532][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 638.642201][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 640.640087][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 644.657465][ T5632] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 644.718495][T14173] FAULT_INJECTION: forcing a failure. [ 644.718495][T14173] name failslab, interval 1, probability 0, space 0, times 0 [ 644.718534][T14173] CPU: 0 UID: 0 PID: 14173 Comm: syz.2.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.718567][T14173] Tainted: [L]=SOFTLOCKUP [ 644.718576][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 644.718590][T14173] Call Trace: [ 644.718598][T14173] [ 644.718607][T14173] dump_stack_lvl+0x100/0x190 [ 644.718646][T14173] should_fail_ex.cold+0x5/0xa [ 644.718678][T14173] should_failslab+0xc2/0x120 [ 644.718713][T14173] __kmalloc_cache_noprof+0x91/0x6d0 [ 644.718738][T14173] ? call_usermodehelper_setup+0xaf/0x360 [ 644.718780][T14173] ? __pfx_free_modprobe_argv+0x10/0x10 [ 644.718806][T14173] call_usermodehelper_setup+0xaf/0x360 [ 644.718850][T14173] __request_module+0x3c7/0x6a0 [ 644.718877][T14173] ? __pfx___request_module+0x10/0x10 [ 644.718900][T14173] ? rcu_is_watching+0x13/0xc0 [ 644.718935][T14173] ? inode_init_always_gfp+0xc90/0xfb0 [ 644.719029][T14173] __sock_create+0x5c4/0x860 [ 644.719121][T14173] __sys_socket+0x14d/0x260 [ 644.719152][T14173] ? __pfx___sys_socket+0x10/0x10 [ 644.719191][T14173] __x64_sys_socket+0x72/0xb0 [ 644.719220][T14173] ? lockdep_hardirqs_on+0x7d/0x110 [ 644.719246][T14173] do_syscall_64+0x121/0x770 [ 644.719274][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.719299][T14173] RIP: 0033:0x7f7429f9e159 [ 644.719319][T14173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.719342][T14173] RSP: 002b:00007f742798f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 644.719369][T14173] RAX: ffffffffffffffda RBX: 00007f742a226360 RCX: 00007f7429f9e159 [ 644.719385][T14173] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 644.719399][T14173] RBP: 00007f742a03506b R08: 0000000000000000 R09: 0000000000000000 [ 644.719414][T14173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.719428][T14173] R13: 00007f742a2263f8 R14: 00007f742a226360 R15: 00007ffe08f8a5f8 [ 644.719459][T14173] [ 646.549339][ T5632] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 647.180646][T14210] blktrace: Concurrent blktraces are not allowed on nbd5 [ 647.248508][T14210] blktrace: Concurrent blktraces are not allowed on nbd5 [ 650.751511][T14262] can: request_module (can-proto-4) failed. [ 651.096108][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 651.958893][T14290] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 651.958934][T14290] CPU: 1 UID: 0 PID: 14290 Comm: syz.2.1098 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.958980][T14290] Tainted: [L]=SOFTLOCKUP [ 651.958992][T14290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 651.959011][T14290] Call Trace: [ 651.959022][T14290] [ 651.959041][T14290] dump_stack_lvl+0x100/0x190 [ 651.959097][T14290] sysfs_warn_dup.cold+0x1c/0x28 [ 651.959166][T14290] sysfs_do_create_link_sd+0x113/0x140 [ 651.959216][T14290] sysfs_create_link+0x61/0xc0 [ 651.959260][T14290] device_add+0x675/0x1970 [ 651.959300][T14290] ? __pfx_device_add+0x10/0x10 [ 651.959334][T14290] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 651.959414][T14290] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 651.959543][T14290] wiphy_register+0x2151/0x3110 [ 651.959633][T14290] ? __pfx_wiphy_register+0x10/0x10 [ 651.959698][T14290] ? __asan_memset+0x23/0x50 [ 651.959738][T14290] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 651.959871][T14290] ieee80211_register_hw+0x3090/0x45c0 [ 651.959969][T14290] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 651.960009][T14290] ? __pfx___debug_object_init+0x10/0x10 [ 651.960109][T14290] ? find_held_lock+0x2b/0x80 [ 651.960150][T14290] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 651.960202][T14290] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 651.960300][T14290] ? __hrtimer_setup+0x208/0x330 [ 651.960342][T14290] mac80211_hwsim_new_radio+0x2b08/0x6510 [ 651.960430][T14290] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 651.960470][T14290] ? __asan_memcpy+0x3c/0x60 [ 651.960513][T14290] hwsim_new_radio_nl+0xc6b/0x13f0 [ 651.960547][T14290] ? trace_kmalloc+0xeb/0x110 [ 651.960597][T14290] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 651.960646][T14290] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 651.960770][T14290] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 651.960835][T14290] genl_family_rcv_msg_doit+0x214/0x300 [ 651.960893][T14290] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 651.960947][T14290] ? genl_get_cmd+0x3e7/0x760 [ 651.961007][T14290] ? bpf_lsm_capable+0x9/0x10 [ 651.961086][T14290] ? security_capable+0x80/0x260 [ 651.961135][T14290] ? ns_capable+0xd2/0xf0 [ 651.961198][T14290] genl_rcv_msg+0x560/0x800 [ 651.961262][T14290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.961316][T14290] ? __lock_acquire+0x5c0/0x1f40 [ 651.961365][T14290] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 651.961415][T14290] netlink_rcv_skb+0x159/0x420 [ 651.961462][T14290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.961518][T14290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.961582][T14290] ? netlink_deliver_tap+0x1ae/0xcc0 [ 651.961633][T14290] genl_rcv+0x28/0x40 [ 651.961680][T14290] netlink_unicast+0x585/0x850 [ 651.961743][T14290] ? __pfx_netlink_unicast+0x10/0x10 [ 651.961776][T14290] ? aa_sk_perm+0x389/0xab0 [ 651.961842][T14290] netlink_sendmsg+0x8b0/0xda0 [ 651.961882][T14290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.961945][T14290] ? apparmor_socket_sendmsg+0x165/0x280 [ 651.962060][T14290] ____sys_sendmsg+0xa4d/0xbe0 [ 651.962089][T14290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.962126][T14290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.962168][T14290] ___sys_sendmsg+0x190/0x1e0 [ 651.962203][T14290] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.962234][T14290] ? futex_wait+0x11e/0x370 [ 651.962276][T14290] ? find_held_lock+0x2b/0x80 [ 651.962323][T14290] __sys_sendmsg+0x160/0x210 [ 651.962386][T14290] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.962485][T14290] do_syscall_64+0x121/0x770 [ 651.962514][T14290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.962541][T14290] RIP: 0033:0x7f7429f9e159 [ 651.962566][T14290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.962589][T14290] RSP: 002b:00007f742ad87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.962613][T14290] RAX: ffffffffffffffda RBX: 00007f742a225fa0 RCX: 00007f7429f9e159 [ 651.962630][T14290] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 651.962645][T14290] RBP: 00007f742a03506b R08: 0000000000000000 R09: 0000000000000000 [ 651.962660][T14290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.962674][T14290] R13: 00007f742a226038 R14: 00007f742a225fa0 R15: 00007ffe08f8a5f8 [ 651.962851][T14290] [ 653.994029][T14317] blktrace: Concurrent blktraces are not allowed on nbd5 [ 654.025005][T14317] blktrace: Concurrent blktraces are not allowed on nbd5 [ 655.765242][ T5632] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 659.592926][T14403] kernel read not supported for file / (pid: 14403 comm: syz.0.1115) [ 659.593909][ T31] audit: type=1800 audit(2147483959.950:9): pid=14403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1115" name=FFFF07 dev="mqueue" ino=107396 res=0 errno=0 [ 663.079542][T14445] FAULT_INJECTION: forcing a failure. [ 663.079542][T14445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.079591][T14445] CPU: 0 UID: 0 PID: 14445 Comm: syz.0.1119 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.079638][T14445] Tainted: [L]=SOFTLOCKUP [ 663.079650][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 663.079670][T14445] Call Trace: [ 663.079681][T14445] [ 663.079694][T14445] dump_stack_lvl+0x100/0x190 [ 663.079746][T14445] should_fail_ex.cold+0x5/0xa [ 663.079800][T14445] _copy_to_user+0x32/0xd0 [ 663.079850][T14445] simple_read_from_buffer+0xcb/0x170 [ 663.079965][T14445] proc_fail_nth_read+0x1af/0x230 [ 663.080035][T14445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 663.080077][T14445] ? rw_verify_area+0xce/0x6d0 [ 663.080110][T14445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 663.080148][T14445] vfs_read+0x1e4/0xb40 [ 663.080186][T14445] ? lock_acquire+0x1d1/0x380 [ 663.080235][T14445] ? __fget_files+0x34/0x3d0 [ 663.080275][T14445] ? __pfx_vfs_read+0x10/0x10 [ 663.080309][T14445] ? find_held_lock+0x2b/0x80 [ 663.080348][T14445] ? __fget_files+0x215/0x3d0 [ 663.080399][T14445] ? __fget_files+0x21f/0x3d0 [ 663.080451][T14445] ksys_read+0x12a/0x250 [ 663.080487][T14445] ? __pfx_ksys_read+0x10/0x10 [ 663.080536][T14445] do_syscall_64+0x121/0x770 [ 663.080580][T14445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.080615][T14445] RIP: 0033:0x7fdc3055e98e [ 663.080648][T14445] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 663.080679][T14445] RSP: 002b:00007fdc3143ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 663.080711][T14445] RAX: ffffffffffffffda RBX: 00007fdc314406c0 RCX: 00007fdc3055e98e [ 663.080734][T14445] RDX: 000000000000000f RSI: 00007fdc314400a0 RDI: 0000000000000006 [ 663.080754][T14445] RBP: 00007fdc31440090 R08: 0000000000000000 R09: 0000000000000000 [ 663.080775][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.080801][T14445] R13: 00007fdc308264e8 R14: 00007fdc30826450 R15: 00007ffc51ce9488 [ 663.080846][T14445] [ 663.443028][ T5632] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 667.500572][T14503] FAULT_INJECTION: forcing a failure. [ 667.500572][T14503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.500610][T14503] CPU: 0 UID: 0 PID: 14503 Comm: syz.2.1129 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.500643][T14503] Tainted: [L]=SOFTLOCKUP [ 667.500655][T14503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 667.500670][T14503] Call Trace: [ 667.500677][T14503] [ 667.500686][T14503] dump_stack_lvl+0x100/0x190 [ 667.500727][T14503] should_fail_ex.cold+0x5/0xa [ 667.500759][T14503] _copy_to_user+0x32/0xd0 [ 667.500793][T14503] simple_read_from_buffer+0xcb/0x170 [ 667.500824][T14503] proc_fail_nth_read+0x1af/0x230 [ 667.500851][T14503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.500879][T14503] ? rw_verify_area+0xce/0x6d0 [ 667.500902][T14503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 667.500928][T14503] vfs_read+0x1e4/0xb40 [ 667.500953][T14503] ? lock_acquire+0x1d1/0x380 [ 667.500987][T14503] ? __fget_files+0x34/0x3d0 [ 667.501018][T14503] ? __pfx_vfs_read+0x10/0x10 [ 667.501042][T14503] ? find_held_lock+0x2b/0x80 [ 667.501069][T14503] ? __fget_files+0x215/0x3d0 [ 667.501101][T14503] ? __fget_files+0x21f/0x3d0 [ 667.501137][T14503] ksys_read+0x12a/0x250 [ 667.501162][T14503] ? __pfx_ksys_read+0x10/0x10 [ 667.501196][T14503] do_syscall_64+0x121/0x770 [ 667.501227][T14503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.501251][T14503] RIP: 0033:0x7f7429f5e98e [ 667.501270][T14503] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 667.501292][T14503] RSP: 002b:00007f74281f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 667.501314][T14503] RAX: ffffffffffffffda RBX: 00007f74281f66c0 RCX: 00007f7429f5e98e [ 667.501355][T14503] RDX: 000000000000000f RSI: 00007f74281f60a0 RDI: 0000000000000006 [ 667.501376][T14503] RBP: 00007f74281f6090 R08: 0000000000000000 R09: 0000000000000000 [ 667.501395][T14503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.501414][T14503] R13: 00007f742a226128 R14: 00007f742a226090 R15: 00007ffe08f8a5f8 [ 667.501452][T14503] [ 670.130742][T14538] FAULT_INJECTION: forcing a failure. [ 670.130742][T14538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.130785][T14538] CPU: 0 UID: 0 PID: 14538 Comm: syz.0.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.130831][T14538] Tainted: [L]=SOFTLOCKUP [ 670.130842][T14538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 670.130860][T14538] Call Trace: [ 670.130869][T14538] [ 670.130881][T14538] dump_stack_lvl+0x100/0x190 [ 670.130932][T14538] should_fail_ex.cold+0x5/0xa [ 670.130996][T14538] _copy_to_iter+0x1f3/0x1720 [ 670.131046][T14538] ? __mutex_unlock_slowpath+0x35d/0x930 [ 670.131087][T14538] ? __pfx__copy_to_iter+0x10/0x10 [ 670.131131][T14538] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 670.131176][T14538] ? kernfs_put_active+0x93/0xe0 [ 670.131229][T14538] seq_read_iter+0xdab/0x1270 [ 670.131367][T14538] kernfs_fop_read_iter+0x46c/0x610 [ 670.131401][T14538] ? rw_verify_area+0xce/0x6d0 [ 670.131433][T14538] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 670.131468][T14538] vfs_read+0x82e/0xb40 [ 670.131509][T14538] ? __pfx_vfs_read+0x10/0x10 [ 670.131542][T14538] ? find_held_lock+0x2b/0x80 [ 670.131607][T14538] ksys_read+0x12a/0x250 [ 670.131649][T14538] ? __pfx_ksys_read+0x10/0x10 [ 670.131695][T14538] do_syscall_64+0x121/0x770 [ 670.131732][T14538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.131766][T14538] RIP: 0033:0x7fdc3059e159 [ 670.131792][T14538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.131823][T14538] RSP: 002b:00007fdc31440028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 670.131854][T14538] RAX: ffffffffffffffda RBX: 00007fdc30826450 RCX: 00007fdc3059e159 [ 670.131876][T14538] RDX: 0000000000000f3c RSI: 0000000000000000 RDI: 0000000000000003 [ 670.131895][T14538] RBP: 00007fdc31440090 R08: 0000000000000000 R09: 0000000000000000 [ 670.131916][T14538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.131936][T14538] R13: 00007fdc308264e8 R14: 00007fdc30826450 R15: 00007ffc51ce9488 [ 670.131980][T14538] [ 670.380597][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 673.688435][ T5632] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 675.207875][ T5632] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 677.264343][T14657] FAULT_INJECTION: forcing a failure. [ 677.264343][T14657] name fail_futex, interval 1, probability 0, space 0, times 0 [ 677.264397][T14657] CPU: 0 UID: 0 PID: 14657 Comm: syz.2.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.264445][T14657] Tainted: [L]=SOFTLOCKUP [ 677.264459][T14657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 677.264490][T14657] Call Trace: [ 677.264501][T14657] [ 677.264515][T14657] dump_stack_lvl+0x100/0x190 [ 677.264572][T14657] should_fail_ex.cold+0x5/0xa [ 677.264619][T14657] get_futex_key+0x1d0/0x14f0 [ 677.264682][T14657] ? __pfx_get_futex_key+0x10/0x10 [ 677.264740][T14657] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 677.264810][T14657] futex_wait_setup+0x91/0x540 [ 677.264869][T14657] __futex_wait+0x19f/0x300 [ 677.264918][T14657] ? __pfx___futex_wait+0x10/0x10 [ 677.264960][T14657] ? __pfx_try_to_wake_up+0x10/0x10 [ 677.265014][T14657] ? futex_hash+0x311/0x400 [ 677.265073][T14657] ? __pfx_futex_wake_mark+0x10/0x10 [ 677.265124][T14657] ? find_held_lock+0x2b/0x80 [ 677.265164][T14657] ? futex_wake+0x4ea/0x5e0 [ 677.265217][T14657] futex_wait+0xe6/0x370 [ 677.265263][T14657] ? __pfx_futex_wait+0x10/0x10 [ 677.265322][T14657] ? lock_acquire+0x1d1/0x380 [ 677.265377][T14657] do_futex+0x265/0x440 [ 677.265415][T14657] ? __pfx_do_futex+0x10/0x10 [ 677.265455][T14657] ? __fget_files+0x21f/0x3d0 [ 677.265510][T14657] __x64_sys_futex+0x34f/0x4d0 [ 677.265553][T14657] ? __pfx___x64_sys_futex+0x10/0x10 [ 677.265597][T14657] ? __pfx_do_preadv+0x10/0x10 [ 677.265645][T14657] do_syscall_64+0x121/0x770 [ 677.265688][T14657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.265725][T14657] RIP: 0033:0x7f7429f9e159 [ 677.265754][T14657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.265787][T14657] RSP: 002b:00007f742ad870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 677.265821][T14657] RAX: ffffffffffffffda RBX: 00007f742a225fa8 RCX: 00007f7429f9e159 [ 677.265843][T14657] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f742a225fa8 [ 677.265865][T14657] RBP: 00007f742a225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 677.265886][T14657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.265906][T14657] R13: 00007f742a226038 R14: 00007ffe08f8a510 R15: 00007ffe08f8a5f8 [ 677.265948][T14657] [ 679.311101][T14697] FAULT_INJECTION: forcing a failure. [ 679.311101][T14697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.311152][T14697] CPU: 0 UID: 0 PID: 14697 Comm: syz.3.1152 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.311207][T14697] Tainted: [L]=SOFTLOCKUP [ 679.311219][T14697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 679.311239][T14697] Call Trace: [ 679.311250][T14697] [ 679.311262][T14697] dump_stack_lvl+0x100/0x190 [ 679.311316][T14697] should_fail_ex.cold+0x5/0xa [ 679.311360][T14697] _copy_to_user+0x32/0xd0 [ 679.311410][T14697] keyctl_capabilities+0x5a/0x160 [ 679.311545][T14697] __do_sys_keyctl+0x427/0x5a0 [ 679.311597][T14697] do_syscall_64+0x121/0x770 [ 679.311638][T14697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.311674][T14697] RIP: 0033:0x7fd32bf9e159 [ 679.311701][T14697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.311732][T14697] RSP: 002b:00007fd32cd7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 679.311767][T14697] RAX: ffffffffffffffda RBX: 00007fd32c226450 RCX: 00007fd32bf9e159 [ 679.311789][T14697] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 679.311809][T14697] RBP: 00007fd32cd7f090 R08: 00000000000003ff R09: 0000000000000000 [ 679.311830][T14697] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 679.311850][T14697] R13: 00007fd32c2264e8 R14: 00007fd32c226450 R15: 00007ffec6ffe968 [ 679.311893][T14697] [ 685.897743][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.897850][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.555663][ T5632] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 689.312323][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.926693][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.130865][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 690.134574][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 690.146194][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 690.153301][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 690.159625][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 690.294309][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.551654][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.059146][ T13] bridge_slave_1: left allmulticast mode [ 691.059181][ T13] bridge_slave_1: left promiscuous mode [ 691.059432][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.088075][ T13] bridge_slave_0: left allmulticast mode [ 691.088108][ T13] bridge_slave_0: left promiscuous mode [ 691.088383][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.532204][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.563233][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.566029][ T13] bond0 (unregistering): Released all slaves [ 691.787661][T14893] FAULT_INJECTION: forcing a failure. [ 691.787661][T14893] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 691.787713][T14893] CPU: 0 UID: 0 PID: 14893 Comm: syz.0.1177 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.787759][T14893] Tainted: [L]=SOFTLOCKUP [ 691.787771][T14893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 691.787791][T14893] Call Trace: [ 691.787802][T14893] [ 691.787814][T14893] dump_stack_lvl+0x100/0x190 [ 691.787868][T14893] should_fail_ex.cold+0x5/0xa [ 691.787906][T14893] ? prepare_alloc_pages+0x16d/0x5b0 [ 691.788042][T14893] should_fail_alloc_page+0xeb/0x140 [ 691.788094][T14893] prepare_alloc_pages+0x1f0/0x5b0 [ 691.788149][T14893] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 691.788224][T14893] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 691.788283][T14893] ? rcu_is_watching+0x13/0xc0 [ 691.788319][T14893] ? trace_hrtimer_start+0x77/0x220 [ 691.788359][T14893] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 691.788405][T14893] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 691.788445][T14893] ? find_held_lock+0x2b/0x80 [ 691.788483][T14893] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 691.788536][T14893] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 691.788605][T14893] ? __lock_acquire+0x5c0/0x1f40 [ 691.788671][T14893] ? do_raw_spin_lock+0x128/0x260 [ 691.788707][T14893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 691.788760][T14893] ? policy_nodemask+0xed/0x4f0 [ 691.788873][T14893] alloc_pages_mpol+0x201/0x550 [ 691.788924][T14893] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 691.788973][T14893] ? lock_acquire+0x1d1/0x380 [ 691.789035][T14893] ? read_kcore_iter+0x1f8/0x1800 [ 691.789098][T14893] ___kmalloc_large_node+0xe8/0x130 [ 691.789151][T14893] __kmalloc_large_node_noprof+0x1c/0x70 [ 691.789201][T14893] ? down_read+0x13b/0x4c0 [ 691.789241][T14893] __kmalloc_noprof+0x5a8/0x840 [ 691.789283][T14893] ? read_kcore_iter+0x3cb/0x1800 [ 691.789343][T14893] read_kcore_iter+0x3cb/0x1800 [ 691.789394][T14893] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 691.789454][T14893] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 691.789507][T14893] ? __pfx_read_kcore_iter+0x10/0x10 [ 691.789570][T14893] ? __lock_acquire+0x5c0/0x1f40 [ 691.789620][T14893] ? trace_sched_exit_tp+0x120/0x160 [ 691.789659][T14893] ? __lock_acquire+0x5c0/0x1f40 [ 691.789705][T14893] ? _parse_integer_limit+0x1ac/0x220 [ 691.789809][T14893] ? common_file_perm+0x266/0x500 [ 691.789877][T14893] ? proc_reg_read_iter+0x11b/0x310 [ 691.789971][T14893] proc_reg_read_iter+0x11b/0x310 [ 691.790017][T14893] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 691.790066][T14893] vfs_read+0x82e/0xb40 [ 691.790109][T14893] ? __pfx_vfs_read+0x10/0x10 [ 691.790142][T14893] ? find_held_lock+0x2b/0x80 [ 691.790206][T14893] __x64_sys_pread64+0x1eb/0x250 [ 691.790248][T14893] ? __pfx___x64_sys_pread64+0x10/0x10 [ 691.790302][T14893] do_syscall_64+0x121/0x770 [ 691.790342][T14893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.790378][T14893] RIP: 0033:0x7fdc3059e159 [ 691.790405][T14893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.790436][T14893] RSP: 002b:00007fdc31440028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 691.790469][T14893] RAX: ffffffffffffffda RBX: 00007fdc30826450 RCX: 00007fdc3059e159 [ 691.790491][T14893] RDX: 0000000000840003 RSI: 0000000000000000 RDI: 0000000000000004 [ 691.790511][T14893] RBP: 00007fdc31440090 R08: 0000000000000000 R09: 0000000000000000 [ 691.790531][T14893] R10: 0000000000002e6c R11: 0000000000000246 R12: 0000000000000001 [ 691.790559][T14893] R13: 00007fdc308264e8 R14: 00007fdc30826450 R15: 00007ffc51ce9488 [ 691.790603][T14893] [ 692.223052][ T5631] Bluetooth: hci1: command tx timeout [ 692.591765][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 692.861709][ T13] hsr_slave_0: left promiscuous mode [ 692.869940][ T13] hsr_slave_1: left promiscuous mode [ 692.870931][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.870959][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.871864][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.871900][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.917762][ T13] veth1_macvtap: left promiscuous mode [ 692.917810][ T13] veth0_macvtap: left promiscuous mode [ 692.917956][ T13] veth1_vlan: left promiscuous mode [ 692.918033][ T13] veth0_vlan: left promiscuous mode [ 693.237350][ T13] team0 (unregistering): Port device team_slave_1 removed [ 693.275838][ T13] team0 (unregistering): Port device team_slave_0 removed [ 693.924569][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 694.292578][ T5631] Bluetooth: hci1: command tx timeout [ 695.335132][T14853] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.335250][T14853] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.335421][T14853] bridge_slave_0: entered allmulticast mode [ 695.347107][T14853] bridge_slave_0: entered promiscuous mode [ 695.367115][T14853] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.367261][T14853] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.367426][T14853] bridge_slave_1: entered allmulticast mode [ 695.369669][T14853] bridge_slave_1: entered promiscuous mode [ 695.730468][T14853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.731983][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 695.783179][T14853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.919782][T14853] team0: Port device team_slave_0 added [ 695.934732][T14853] team0: Port device team_slave_1 added [ 696.009259][T14853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.009282][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.009323][T14853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.048997][T14853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.049020][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.049059][T14853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.313411][T14853] hsr_slave_0: entered promiscuous mode [ 696.320819][T14853] hsr_slave_1: entered promiscuous mode [ 696.329392][T14853] debugfs: 'hsr0' already exists in 'hsr' [ 696.329420][T14853] Cannot create hsr debugfs directory [ 696.372625][ T5631] Bluetooth: hci1: command tx timeout [ 696.942500][ T5631] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 697.165408][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 698.453573][ T5631] Bluetooth: hci1: command tx timeout [ 698.995881][ T5631] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 699.934951][T14853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 699.941327][T14853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.064122][T14853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 700.084582][T14853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.443272][T14853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 700.523493][T14853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 700.638389][T14853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 700.717695][T14853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 701.160681][T14853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.584035][T14853] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.402933][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.403063][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.983464][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.983561][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.938082][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1194'. [ 706.744798][T14853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.062777][ T5631] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 707.888787][T14853] veth0_vlan: entered promiscuous mode [ 707.925640][T14853] veth1_vlan: entered promiscuous mode [ 708.051083][T14853] veth0_macvtap: entered promiscuous mode [ 708.075418][T14853] veth1_macvtap: entered promiscuous mode [ 708.113766][T14853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.137371][T14853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.263144][ T45] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.267932][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.267994][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.268045][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.647792][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.647822][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.780996][T15224] FAULT_INJECTION: forcing a failure. [ 708.780996][T15224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.781030][T15224] CPU: 0 UID: 0 PID: 15224 Comm: syz.0.1200 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.781062][T15224] Tainted: [L]=SOFTLOCKUP [ 708.781070][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 708.781084][T15224] Call Trace: [ 708.781094][T15224] [ 708.781103][T15224] dump_stack_lvl+0x100/0x190 [ 708.781142][T15224] should_fail_ex.cold+0x5/0xa [ 708.781173][T15224] _copy_to_iter+0x1f3/0x1720 [ 708.781208][T15224] ? __mutex_unlock_slowpath+0x35d/0x930 [ 708.781237][T15224] ? __pfx__copy_to_iter+0x10/0x10 [ 708.781268][T15224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 708.781299][T15224] ? kernfs_put_active+0x93/0xe0 [ 708.781337][T15224] seq_read_iter+0xdab/0x1270 [ 708.781376][T15224] kernfs_fop_read_iter+0x46c/0x610 [ 708.781400][T15224] ? rw_verify_area+0xce/0x6d0 [ 708.781422][T15224] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 708.781447][T15224] vfs_read+0x82e/0xb40 [ 708.781476][T15224] ? __pfx_vfs_read+0x10/0x10 [ 708.781506][T15224] ? find_held_lock+0x2b/0x80 [ 708.781551][T15224] ksys_read+0x12a/0x250 [ 708.781576][T15224] ? __pfx_ksys_read+0x10/0x10 [ 708.781653][T15224] do_syscall_64+0x121/0x770 [ 708.781681][T15224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.781706][T15224] RIP: 0033:0x7fdc3059e159 [ 708.781725][T15224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.781747][T15224] RSP: 002b:00007fdc31440028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.781770][T15224] RAX: ffffffffffffffda RBX: 00007fdc30826450 RCX: 00007fdc3059e159 [ 708.781786][T15224] RDX: 0000000000000f3c RSI: 0000000000000000 RDI: 0000000000000003 [ 708.781800][T15224] RBP: 00007fdc31440090 R08: 0000000000000000 R09: 0000000000000000 [ 708.781814][T15224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.781828][T15224] R13: 00007fdc308264e8 R14: 00007fdc30826450 R15: 00007ffc51ce9488 [ 708.781859][T15224] [ 709.531084][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.531105][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.468754][T15303] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input14 [ 715.788057][T15307] FAULT_INJECTION: forcing a failure. [ 715.788057][T15307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.788095][T15307] CPU: 1 UID: 0 PID: 15307 Comm: syz.1.1211 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.788128][T15307] Tainted: [L]=SOFTLOCKUP [ 715.788136][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 715.788150][T15307] Call Trace: [ 715.788158][T15307] [ 715.788166][T15307] dump_stack_lvl+0x100/0x190 [ 715.788204][T15307] should_fail_ex.cold+0x5/0xa [ 715.788236][T15307] _copy_from_iter+0x1f4/0x1690 [ 715.788273][T15307] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 715.788310][T15307] ? __pfx__copy_from_iter+0x10/0x10 [ 715.788343][T15307] ? __sk_mem_raise_allocated+0x789/0x1570 [ 715.788405][T15307] mptcp_sendmsg+0xf52/0x2210 [ 715.788537][T15307] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 715.788573][T15307] ? aa_sock_msg_perm+0x11e/0x200 [ 715.788619][T15307] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 715.788645][T15307] inet_sendmsg+0x11c/0x140 [ 715.788733][T15307] sock_write_iter+0x4ea/0x5b0 [ 715.788760][T15307] ? __pfx_inet_sendmsg+0x10/0x10 [ 715.788787][T15307] ? __pfx_sock_write_iter+0x10/0x10 [ 715.788821][T15307] ? bpf_lsm_file_permission+0x9/0x10 [ 715.788854][T15307] ? security_file_permission+0x76/0x210 [ 715.788906][T15307] ? rw_verify_area+0xce/0x6d0 [ 715.788934][T15307] vfs_write+0x6af/0x1050 [ 715.788960][T15307] ? __pfx_sock_write_iter+0x10/0x10 [ 715.788990][T15307] ? __pfx_vfs_write+0x10/0x10 [ 715.789014][T15307] ? find_held_lock+0x2b/0x80 [ 715.789060][T15307] ksys_write+0x1f8/0x250 [ 715.789111][T15307] ? __pfx_ksys_write+0x10/0x10 [ 715.789159][T15307] do_syscall_64+0x121/0x770 [ 715.789192][T15307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.789217][T15307] RIP: 0033:0x7f14acf9e159 [ 715.789237][T15307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.789260][T15307] RSP: 002b:00007f14adef9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 715.789285][T15307] RAX: ffffffffffffffda RBX: 00007f14ad226090 RCX: 00007f14acf9e159 [ 715.789301][T15307] RDX: 0000000100000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 715.789315][T15307] RBP: 00007f14adef9090 R08: 0000000000000000 R09: 0000000000000000 [ 715.789329][T15307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 715.789343][T15307] R13: 00007f14ad226128 R14: 00007f14ad226090 R15: 00007ffc7b705ee8 [ 715.789373][T15307] [ 721.215595][T15395] FAULT_INJECTION: forcing a failure. [ 721.215595][T15395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.215657][T15395] CPU: 1 UID: 0 PID: 15395 Comm: syz.1.1223 Tainted: G L syzkaller #0 PREEMPT(full) [ 721.215702][T15395] Tainted: [L]=SOFTLOCKUP [ 721.215713][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 721.215733][T15395] Call Trace: [ 721.215744][T15395] [ 721.215759][T15395] dump_stack_lvl+0x100/0x190 [ 721.215798][T15395] should_fail_ex.cold+0x5/0xa [ 721.215830][T15395] _copy_to_user+0x32/0xd0 [ 721.215873][T15395] simple_read_from_buffer+0xcb/0x170 [ 721.215906][T15395] proc_fail_nth_read+0x1af/0x230 [ 721.215954][T15395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 721.215998][T15395] ? rw_verify_area+0xce/0x6d0 [ 721.216034][T15395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 721.216061][T15395] vfs_read+0x1e4/0xb40 [ 721.216110][T15395] ? lock_acquire+0x1d1/0x380 [ 721.216159][T15395] ? __fget_files+0x34/0x3d0 [ 721.216194][T15395] ? __pfx_vfs_read+0x10/0x10 [ 721.216216][T15395] ? find_held_lock+0x2b/0x80 [ 721.216242][T15395] ? __fget_files+0x215/0x3d0 [ 721.216281][T15395] ? __fget_files+0x21f/0x3d0 [ 721.216317][T15395] ksys_read+0x12a/0x250 [ 721.216343][T15395] ? __pfx_ksys_read+0x10/0x10 [ 721.216379][T15395] do_syscall_64+0x121/0x770 [ 721.216407][T15395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.216433][T15395] RIP: 0033:0x7f14acf5e98e [ 721.216452][T15395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 721.216476][T15395] RSP: 002b:00007f14ade74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 721.216500][T15395] RAX: ffffffffffffffda RBX: 00007f14ade756c0 RCX: 00007f14acf5e98e [ 721.216516][T15395] RDX: 000000000000000f RSI: 00007f14ade750a0 RDI: 0000000000000005 [ 721.216531][T15395] RBP: 00007f14ade75090 R08: 0000000000000000 R09: 0000000000000000 [ 721.216545][T15395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.216560][T15395] R13: 00007f14ad2264e8 R14: 00007f14ad226450 R15: 00007ffc7b705ee8 [ 721.216590][T15395] [ 722.997687][ T5631] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 726.635777][ T5631] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7 [ 729.738648][ T5631] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 736.837802][T15637] FAULT_INJECTION: forcing a failure. [ 736.837802][T15637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.837878][T15637] CPU: 0 UID: 0 PID: 15637 Comm: syz.1.1254 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.837928][T15637] Tainted: [L]=SOFTLOCKUP [ 736.837950][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 736.837971][T15637] Call Trace: [ 736.837983][T15637] [ 736.837997][T15637] dump_stack_lvl+0x100/0x190 [ 736.838053][T15637] should_fail_ex.cold+0x5/0xa [ 736.838101][T15637] _copy_to_user+0x32/0xd0 [ 736.838152][T15637] simple_read_from_buffer+0xcb/0x170 [ 736.838199][T15637] proc_fail_nth_read+0x1af/0x230 [ 736.838241][T15637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 736.838284][T15637] ? rw_verify_area+0xce/0x6d0 [ 736.838318][T15637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 736.838357][T15637] vfs_read+0x1e4/0xb40 [ 736.838398][T15637] ? lock_acquire+0x1d1/0x380 [ 736.838453][T15637] ? __fget_files+0x34/0x3d0 [ 736.838498][T15637] ? __pfx_vfs_read+0x10/0x10 [ 736.838535][T15637] ? find_held_lock+0x2b/0x80 [ 736.838578][T15637] ? __fget_files+0x215/0x3d0 [ 736.838633][T15637] ? __fget_files+0x21f/0x3d0 [ 736.838689][T15637] ksys_read+0x12a/0x250 [ 736.838726][T15637] ? __pfx_ksys_read+0x10/0x10 [ 736.838779][T15637] do_syscall_64+0x121/0x770 [ 736.838820][T15637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.838858][T15637] RIP: 0033:0x7f14acf5e98e [ 736.838887][T15637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 736.838922][T15637] RSP: 002b:00007f14ade74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 736.838963][T15637] RAX: ffffffffffffffda RBX: 00007f14ade756c0 RCX: 00007f14acf5e98e [ 736.838987][T15637] RDX: 000000000000000f RSI: 00007f14ade750a0 RDI: 0000000000000009 [ 736.839010][T15637] RBP: 00007f14ade75090 R08: 0000000000000000 R09: 0000000000000000 [ 736.839032][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.839054][T15637] R13: 00007f14ad2264e8 R14: 00007f14ad226450 R15: 00007ffc7b705ee8 [ 736.839105][T15637] [ 747.334309][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.334362][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.774331][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.774398][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.974943][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 870.223723][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.223801][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 891.972712][ T32] INFO: task jbd2/sda1-8:4951 blocked in I/O wait for more than 143 seconds. [ 891.972753][ T32] Tainted: G L syzkaller #0 [ 891.972773][ T32] "echo 0 > /proc/sys/kernel/hung_task_time ** replaying previous printk message ** [ 891.972773][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 891.972786][ T32] task:jbd2/sda1-8 state:D stack:25240 pid:4951 tgid:4951 ppid:2 task_flags:0x240040 flags:0x00080000 [ 891.972896][ T32] Call Trace: [ 891.972910][ T32] [ 891.972928][ T32] __schedule+0x1259/0x6920 [ 891.972987][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 891.973059][ T32] ? __pfx___schedule+0x10/0x10 [ 891.973107][ T32] ? find_held_lock+0x2b/0x80 [ 891.973147][ T32] ? schedule+0x225/0x2c0 [ 891.973204][ T32] schedule+0xdd/0x2c0 [ 891.973256][ T32] io_schedule+0x8a/0xf0 [ 891.973306][ T32] bit_wait_io+0xd/0xe0 [ 891.973338][ T32] __wait_on_bit+0x65/0x180 [ 891.973371][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 891.973407][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 891.973451][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 891.973487][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 891.973533][ T32] ? __pfx___might_resched+0x10/0x10 [ 891.973582][ T32] __wait_on_buffer+0x64/0x70 [ 891.973757][ T32] jbd2_journal_commit_transaction+0x37ef/0x6700 [ 891.973901][ T32] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 891.973950][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 891.974004][ T32] ? debug_object_deactivate+0x2e4/0x3b0 [ 891.974339][ T32] ? __pfx_debug_object_deactivate+0x10/0x10 [ 891.974401][ T32] ? _raw_spin_lock_irqsave+0x52/0x60 [ 891.974465][ T32] ? find_held_lock+0x2b/0x80 [ 891.974504][ T32] ? __try_to_del_timer_sync+0x107/0x160 [ 891.974563][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 891.974632][ T32] ? __timer_delete_sync+0x151/0x1c0 [ 891.974685][ T32] kjournald2+0x200/0x760 [ 891.974783][ T32] ? __pfx_kjournald2+0x10/0x10 [ 891.974821][ T32] ? find_held_lock+0x2b/0x80 [ 891.974848][ T32] ? __kthread_parkme+0xbb/0x230 [ 891.974888][ T32] ? rcu_is_watching+0x13/0xc0 [ 891.974916][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 891.974953][ T32] ? __kthread_parkme+0x18f/0x230 [ 891.974995][ T32] ? kthread+0x13a/0x450 [ 891.975022][ T32] ? __pfx_kjournald2+0x10/0x10 [ 891.975051][ T32] kthread+0x373/0x450 [ 891.975078][ T32] ? __pfx_kthread+0x10/0x10 [ 891.975108][ T32] ret_from_fork+0x730/0xd60 [ 891.975146][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 891.975171][ T32] ? __switch_to+0x800/0x10f0 [ 891.975206][ T32] ? __switch_to_asm+0x39/0x70 [ 891.975230][ T32] ? __pfx_kthread+0x10/0x10 [ 891.975259][ T32] ret_from_fork_asm+0x1a/0x30 [ 891.975296][ T32] [ 891.975315][ T32] INFO: task syz-executor:5608 blocked in I/O wait for more than 143 seconds. [ 891.975336][ T32] Tainted: G L syzkaller #0 [ 891.975350][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 891.975360][ T32] task:syz-executor state:D stack:23032 pid:5608 tgid:5608 ppid:5607 task_flags:0x440100 flags:0x00080000 [ 891.975439][ T32] Call Trace: [ 891.975472][ T32] [ 891.975495][ T32] __schedule+0x1259/0x6920 [ 891.975547][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 891.975598][ T32] ? __pfx___schedule+0x10/0x10 [ 891.975634][ T32] ? find_held_lock+0x2b/0x80 [ 891.975662][ T32] ? schedule+0x225/0x2c0 [ 891.975703][ T32] schedule+0xdd/0x2c0 [ 891.975740][ T32] io_schedule+0x8a/0xf0 [ 891.975804][ T32] bit_wait_io+0xd/0xe0 [ 891.975828][ T32] __wait_on_bit+0x65/0x180 [ 891.975852][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 891.975878][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 891.975903][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 891.975934][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 891.975974][ T32] do_get_write_access+0x836/0x11e0 [ 891.976011][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 891.976042][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 891.976107][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 891.976179][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 891.976214][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 891.976246][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 891.976279][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 891.976340][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 891.976368][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 891.976397][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 891.976433][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 891.976469][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 891.976503][ T32] ext4_dirty_inode+0xd9/0x130 [ 891.976534][ T32] ? rcu_is_watching+0x13/0xc0 [ 891.976560][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 891.976607][ T32] file_update_time_flags+0x49c/0x520 [ 891.976650][ T32] ext4_page_mkwrite+0x324/0x1860 [ 891.976689][ T32] ? tcp_recvmsg+0x14c/0x630 [ 891.976760][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 891.976795][ T32] ? __pfx_vm_normal_page+0x10/0x10 [ 891.976827][ T32] ? find_held_lock+0x2b/0x80 [ 891.976853][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 891.976879][ T32] do_page_mkwrite+0x17a/0x440 [ 891.976910][ T32] do_wp_page+0x9ed/0x45c0 [ 891.976953][ T32] ? lock_acquire+0x1d1/0x380 [ 891.976986][ T32] ? __pfx_do_wp_page+0x10/0x10 [ 891.977018][ T32] ? lock_acquire+0x1d1/0x380 [ 891.977052][ T32] ? do_raw_spin_lock+0x128/0x260 [ 891.977075][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 891.977106][ T32] __handle_mm_fault+0x1cd2/0x2f60 [ 891.977148][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 891.977186][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 891.977229][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 891.977282][ T32] handle_mm_fault+0x363/0xa20 [ 891.977326][ T32] do_user_addr_fault+0x59c/0x12f0 [ 891.977364][ T32] exc_page_fault+0x6f/0xd0 [ 891.977388][ T32] asm_exc_page_fault+0x26/0x30 [ 891.977414][ T32] RIP: 0033:0x7f3712a7c6e2 [ 891.977438][ T32] RSP: 002b:00007ffc4a10eb70 EFLAGS: 00010202 [ 891.977458][ T32] RAX: 00007f3710c90000 RBX: 000055557733c030 RCX: 0000000000000003 [ 891.977474][ T32] RDX: 00000000000018eb RSI: 0000555577346dd8 RDI: 0000000000000008 [ 891.977489][ T32] RBP: 00007ffc4a10f070 R08: 0000555577346de0 R09: 0000000000000100 [ 891.977504][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc4a10eeb0 [ 891.977520][ T32] R13: 00007ffc4a10eca0 R14: 585858582e7a7973 R15: 00007ffc4a10ebf0 [ 891.977551][ T32] [ 891.977583][ T32] INFO: task syz.1.1264:15688 blocked in I/O wait for more than 143 seconds. [ 891.977603][ T32] Tainted: G L syzkaller #0 [ 891.977617][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 891.977627][ T32] task:syz.1.1264 state:D stack:25960 pid:15688 tgid:15688 ppid:14853 task_flags:0x440040 flags:0x00080002 [ 891.977704][ T32] Call Trace: [ 891.977711][ T32] [ 891.977723][ T32] __schedule+0x1259/0x6920 [ 891.977761][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 891.977810][ T32] ? __pfx___schedule+0x10/0x10 [ 891.977846][ T32] ? find_held_lock+0x2b/0x80 [ 891.977874][ T32] ? schedule+0x225/0x2c0 [ 891.977916][ T32] schedule+0xdd/0x2c0 [ 891.977955][ T32] io_schedule+0x8a/0xf0 [ 891.977993][ T32] bit_wait_io+0xd/0xe0 [ 891.978015][ T32] __wait_on_bit+0x65/0x180 [ 891.978038][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 891.978065][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 891.978090][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 891.978118][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 891.978157][ T32] do_get_write_access+0x836/0x11e0 [ 891.978194][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 891.978224][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 891.978260][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 891.978296][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 891.978330][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 891.978360][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 891.978394][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 891.978443][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 891.978470][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 891.978499][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 891.978529][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 891.978564][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 891.978597][ T32] ext4_dirty_inode+0xd9/0x130 [ 891.978629][ T32] ? rcu_is_watching+0x13/0xc0 [ 891.978656][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 891.978684][ T32] file_update_time_flags+0x49c/0x520 [ 891.978726][ T32] ext4_page_mkwrite+0x324/0x1860 [ 891.978766][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 891.978809][ T32] do_page_mkwrite+0x17a/0x440 [ 891.978840][ T32] do_fault+0x659/0x1830 [ 891.978870][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 891.978955][ T32] ? __pfx_do_fault+0x10/0x10 [ 891.978986][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 891.979009][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 891.979030][ T32] ? __pte_offset_map+0x179/0x310 [ 891.979086][ T32] __handle_mm_fault+0x150b/0x2f60 [ 891.979132][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 891.979170][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 891.979213][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 891.979259][ T32] ? get_timespec64+0x136/0x1b0 [ 891.979299][ T32] handle_mm_fault+0x363/0xa20 [ 891.979345][ T32] do_user_addr_fault+0x59c/0x12f0 [ 891.979382][ T32] exc_page_fault+0x6f/0xd0 [ 891.979407][ T32] asm_exc_page_fault+0x26/0x30 [ 891.979446][ T32] RIP: 0033:0x7f14ace727a9 [ 891.979465][ T32] RSP: 002b:00007ffc7b705f30 EFLAGS: 00010202 [ 891.979484][ T32] RAX: 0000001b2d40d000 RBX: ffffffff81f6c983 RCX: 0000001b2d40cff8 [ 891.979500][ T32] RDX: 0000001b2d024220 RSI: 0000000000000008 RDI: 00007f14add55720 [ 891.979516][ T32] RBP: 00000000000001bf R08: 00007f14ad210000 R09: 00007f14ad212000 [ 891.979532][ T32] R10: 0000000081f6c987 R11: 0000000000000009 R12: 00007f14ad226128 [ 891.979548][ T32] R13: 00000000000001e3 R14: ffffffff81f6c0f5 R15: 00007f14add55720 [ 891.979566][ T32] ? hrtimer_active+0x55/0x240 [ 891.979592][ T32] ? hrtimer_bases_next_event_without+0x103/0x2e0 [ 891.979629][ T32] [ 891.979639][ T32] INFO: task syz.3.1266:15697 blocked in I/O wait for more than 143 seconds. [ 891.979659][ T32] Tainted: G L syzkaller #0 [ 891.979672][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 891.979681][ T32] task:syz.3.1266 state:D stack:25960 pid:15697 tgid:15697 ppid:8499 task_flags:0x440040 flags:0x00080002 [ 891.979759][ T32] Call Trace: [ 891.979766][ T32] [ 891.979778][ T32] __schedule+0x1259/0x6920 [ 891.979815][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 891.979865][ T32] ? __pfx___schedule+0x10/0x10 [ 891.979901][ T32] ? find_held_lock+0x2b/0x80 [ 891.979928][ T32] ? schedule+0x225/0x2c0 [ 891.979970][ T32] schedule+0xdd/0x2c0 [ 891.980009][ T32] io_schedule+0x8a/0xf0 [ 891.980048][ T32] bit_wait_io+0xd/0xe0 [ 891.980071][ T32] __wait_on_bit+0x65/0x180 [ 891.980094][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 891.980120][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 891.980146][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 891.980174][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 891.980213][ T32] do_get_write_access+0x836/0x11e0 [ 891.980250][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 891.980280][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 891.980317][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 891.980353][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 891.980387][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 891.980417][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 891.980456][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 891.980499][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 891.980526][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 891.980555][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 891.980584][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 891.980619][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 891.980651][ T32] ext4_dirty_inode+0xd9/0x130 [ 891.980682][ T32] ? rcu_is_watching+0x13/0xc0 [ 891.980708][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 891.980736][ T32] file_update_time_flags+0x49c/0x520 [ 891.980782][ T32] ext4_page_mkwrite+0x324/0x1860 [ 891.980823][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 891.980860][ T32] ? find_held_lock+0x2b/0x80 [ 891.980891][ T32] do_page_mkwrite+0x17a/0x440 [ 891.980922][ T32] do_fault+0x659/0x1830 [ 891.980955][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 891.980993][ T32] ? __pfx_do_fault+0x10/0x10 [ 891.981023][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 891.981045][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 891.981067][ T32] ? __pte_offset_map+0x179/0x310 [ 891.981101][ T32] __handle_mm_fault+0x150b/0x2f60 [ 891.981142][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 891.981180][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 891.981224][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 891.981278][ T32] handle_mm_fault+0x363/0xa20 [ 891.981322][ T32] do_user_addr_fault+0x59c/0x12f0 [ 891.981358][ T32] exc_page_fault+0x6f/0xd0 [ 891.981383][ T32] asm_exc_page_fault+0x26/0x30 [ 891.981406][ T32] RIP: 0033:0x7fd32be727a9 [ 891.981430][ T32] RSP: 002b:00007ffec6ffe9b0 EFLAGS: 00010202 [ 891.981449][ T32] RAX: 0000001b2fc23000 RBX: ffffffff8294b8a3 RCX: 0000001b2fc22ff8 [ 891.981465][ T32] RDX: 0000001b2f82421c RSI: 0000000000000008 RDI: 00007fd32cd55720 [ 891.981481][ T32] RBP: 00000000000000f5 R08: 00007fd32c210000 R09: 00007fd32c212000 [ 891.981497][ T32] R10: 000000008294b8a7 R11: 0000000000000006 R12: 00007fd32c2263f8 [ 891.981512][ T32] R13: 0000000000000169 R14: ffffffff8294b9fe R15: 00007fd32cd55720 [ 891.981529][ T32] ? path_noexec+0x1be/0x230 [ 891.981574][ T32] ? path_noexec+0x63/0x230 [ 891.981607][ T32] [ 891.981617][ T32] INFO: task syz.0.1267:15703 blocked in I/O wait for more than 143 seconds. [ 891.981637][ T32] Tainted: G L syzkaller #0 [ 891.981650][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 891.981660][ T32] task:syz.0.1267 state:D stack:27640 pid:15703 tgid:15703 ppid:10475 task_flags:0x440040 flags:0x00080002 [ 891.981740][ T32] Call Trace: [ 891.981748][ T32] [ 891.981760][ T32] __schedule+0x1259/0x6920 [ 891.981797][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 891.981846][ T32] ? __pfx___schedule+0x10/0x10 [ 891.981882][ T32] ? find_held_lock+0x2b/0x80 [ 891.981910][ T32] ? schedule+0x225/0x2c0 [ 891.981951][ T32] schedule+0xdd/0x2c0 [ 891.981988][ T32] io_schedule+0x8a/0xf0 [ 891.982026][ T32] bit_wait_io+0xd/0xe0 [ 891.982048][ T32] __wait_on_bit+0x65/0x180 [ 891.982072][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 891.982098][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 891.982123][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 891.982154][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 891.982193][ T32] do_get_write_access+0x836/0x11e0 [ 891.982230][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 891.982259][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 891.982390][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 891.982451][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 891.982499][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 891.982642][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 891.982767][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 891.982921][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 891.983026][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 891.983131][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 891.983235][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 891.983363][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 891.983495][ T32] ext4_dirty_inode+0xd9/0x130 [ 891.983611][ T32] ? rcu_is_watching+0x13/0xc0 [ 891.983699][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 891.983805][ T32] file_update_time_flags+0x49c/0x520 [ 891.983946][ T32] ext4_page_mkwrite+0x324/0x1860 [ 891.984101][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 891.984266][ T32] do_page_mkwrite+0x17a/0x440 [ 891.984388][ T32] do_fault+0x659/0x1830 [ 891.984514][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 891.984637][ T32] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 891.984787][ T32] ? __pfx_do_fault+0x10/0x10 [ 891.984903][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 891.984998][ T32] ? _raw_spin_unlock+0x28/0x50 [ 891.985127][ T32] ? __pmd_alloc+0x3fb/0x950 [ 891.985254][ T32] __handle_mm_fault+0x150b/0x2f60 [ 891.985412][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 891.985554][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 891.985727][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 891.985930][ T32] handle_mm_fault+0x363/0xa20 [ 891.986088][ T32] do_user_addr_fault+0x59c/0x12f0 [ 891.986235][ T32] exc_page_fault+0x6f/0xd0 [ 891.986340][ T32] asm_exc_page_fault+0x26/0x30 [ 891.986428][ T32] RIP: 0033:0x7fdc3046baa3 [ 891.986500][ T32] RSP: 002b:00007ffc51ce95f0 EFLAGS: 00010246 [ 891.986571][ T32] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b33664000 [ 891.986625][ T32] RDX: 0000001b33624000 RSI: 0000000000400000 RDI: 00007fdc307e0708 [ 891.986687][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 891.986739][ T32] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 891.986792][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc51ce9880 [ 891.986908][ T32] [ 891.986937][ T32] INFO: task syz.2.1268:15704 blocked in I/O wait for more than 143 seconds. [ 891.987022][ T32] Tainted: G L syzkaller #0 [ 891.987077][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 891.987121][ T32] task:syz.2.1268 state:D stack:27472 pid:15704 tgid:15704 ppid:5628 task_flags:0x440040 flags:0x00080002 [ 891.987401][ T32] Call Trace: [ 891.987433][ T32] [ 891.987484][ T32] __schedule+0x1259/0x6920 [ 891.987613][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 891.987794][ T32] ? __pfx___schedule+0x10/0x10 [ 891.987920][ T32] ? find_held_lock+0x2b/0x80 [ 891.988017][ T32] ? schedule+0x225/0x2c0 [ 891.988164][ T32] schedule+0xdd/0x2c0 [ 891.988298][ T32] io_schedule+0x8a/0xf0 [ 891.988465][ T32] bit_wait_io+0xd/0xe0 [ 891.988542][ T32] __wait_on_bit+0x65/0x180 [ 891.988627][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 891.988720][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 891.988813][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 891.988919][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 891.989043][ T32] do_get_write_access+0x836/0x11e0 [ 891.989179][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 891.989284][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 891.989414][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 891.989559][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 891.989682][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 891.989805][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 891.989922][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 891.990077][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 891.990182][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 891.990288][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 891.990393][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 891.990528][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 891.990644][ T32] ext4_dirty_inode+0xd9/0x130 [ 891.990766][ T32] ? rcu_is_watching+0x13/0xc0 [ 891.990845][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 891.991385][ T32] touch_atime+0x65f/0x770 [ 891.991495][ T32] ext4_file_mmap_prepare+0x56d/0x670 [ 891.991600][ T32] ? __pfx_ext4_file_mmap_prepare+0x10/0x10 [ 891.991759][ T32] __mmap_region+0xead/0x32e0 [ 891.991800][ T32] ? __pfx___mmap_region+0x10/0x10 [ 891.991836][ T32] ? get_page_from_freelist+0x110d/0x35d0 [ 891.991904][ T32] ? __pfx_get_page_from_freelist+0x10/0x10 [ 891.991944][ T32] ? prepare_alloc_pages+0x1f0/0x5b0 [ 891.992012][ T32] ? lock_acquire+0x1d1/0x380 [ 891.992061][ T32] ? unwind_next_frame+0xbd/0x2090 [ 891.992106][ T32] ? lock_acquire+0x1d1/0x380 [ 891.992148][ T32] ? is_bpf_text_address+0x25/0x1a0 [ 891.992284][ T32] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 891.992353][ T32] ? find_held_lock+0x2b/0x80 [ 891.992390][ T32] ? is_bpf_text_address+0x8a/0x1a0 [ 891.992446][ T32] ? is_bpf_text_address+0x8a/0x1a0 [ 891.992551][ T32] ? __pfx_mt_find+0x10/0x10 [ 891.992598][ T32] mmap_region+0x5a8/0x6d0 [ 891.992633][ T32] ? __pfx_mmap_region+0x10/0x10 [ 891.992670][ T32] ? shmem_mapping+0xd/0x50 [ 891.992737][ T32] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 891.992837][ T32] ? security_mmap_addr+0x71/0x1e0 [ 891.992875][ T32] ? __get_unmapped_area+0x255/0x3e0 [ 891.992924][ T32] do_mmap+0x12c7/0x1c30 [ 891.992977][ T32] ? lock_acquire+0x1d1/0x380 [ 891.993024][ T32] ? __pfx_do_mmap+0x10/0x10 [ 891.993070][ T32] ? __pfx___might_resched+0x10/0x10 [ 891.993115][ T32] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 891.993184][ T32] ? security_current_getlsmprop_subj+0x6e/0x130 [ 891.993240][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 891.993300][ T32] vm_mmap_pgoff+0x28d/0x470 [ 891.993490][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 891.993604][ T32] ? __fget_files+0x215/0x3d0 [ 891.993724][ T32] ? __fget_files+0x21f/0x3d0 [ 891.993848][ T32] ksys_mmap_pgoff+0x3cb/0x610 [ 891.993981][ T32] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 891.994104][ T32] ? __do_sys_prctl+0x14e/0x2270 [ 891.994219][ T32] ? __pfx___do_sys_prctl+0x10/0x10 [ 891.994340][ T32] __x64_sys_mmap+0x125/0x190 [ 891.994454][ T32] do_syscall_64+0x121/0x770 [ 891.994565][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.994658][ T32] RIP: 0033:0x7f7429f9dec2 [ 891.994724][ T32] RSP: 002b:00007ffe08f8a718 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 891.994801][ T32] RAX: ffffffffffffffda RBX: 0000001b34264000 RCX: 00007f7429f9dec2 [ 891.994871][ T32] RDX: 0000000000000003 RSI: 00000000005c0000 RDI: 0000001b34264000 [ 891.994936][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 891.994996][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 000000000000014a [ 891.995050][ T32] R13: 00000000000927c0 R14: 00000000000b4c13 R15: 00007ffe08f8a9f0 [ 891.995188][ T32] [ 891.995260][ T32] [ 891.995260][ T32] Showing all locks held in the system: [ 891.995329][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 891.995451][ T32] #0: ffffffff8edd85f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 891.995723][ T32] #1: ffffffff9bc5e3b8 (&port_lock_key){-...}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 891.996039][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 891.996100][ T32] #0: ffffffff8edec2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 891.996449][ T32] locks held by klogd/4978: 1, last CPU#0: [ 891.996511][ T32] #0: ffffffff8effc058 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 891.996784][ T32] locks held by getty/5376: 2, on CPU#0: [ 891.996873][ T32] #0: ffff8880384660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 891.997134][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 891.997346][ T32] locks held by syz-executor/5608: 3, on CPU#0: [ 891.997406][ T32] #0: ffff88807679f808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 891.997658][ T32] #1: ffff888037f04558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 891.997875][ T32] #2: ffff888037f00938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 891.998072][ T32] locks held by syz.1.1264/15688: 3, on CPU#1: [ 891.998126][ T32] #0: ffff8880792bb588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 891.998363][ T32] #1: ffff888037f04558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 891.998689][ T32] #2: ffff888037f00938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 891.998902][ T32] locks held by syz.3.1266/15697: 3, on CPU#0: [ 891.998967][ T32] #0: ffff888076cc21c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 891.999217][ T32] #1: ffff888037f04558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 891.999419][ T32] #2: ffff888037f00938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 891.999601][ T32] locks held by syz.0.1267/15703: 3, on CPU#0: [ 891.999661][ T32] #0: ffff8880376f6a88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 891.999860][ T32] #1: ffff888037f04558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 892.000068][ T32] #2: ffff888037f00938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 892.000270][ T32] locks held by syz.2.1268/15704: 3, on CPU#0: [ 892.000344][ T32] #0: ffff8880367129f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 892.000560][ T32] #1: ffff888037f04460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x56d/0x670 [ 892.000816][ T32] #2: ffff888037f00938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 892.001027][ T32] [ 892.001048][ T32] ============================================= [ 892.001048][ T32] [ 892.001108][ T32] NMI backtrace for cpu 1 [ 892.001173][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 892.001289][ T32] Tainted: [L]=SOFTLOCKUP [ 892.001313][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 892.001372][ T32] Call Trace: [ 892.001404][ T32] [ 892.001437][ T32] dump_stack_lvl+0x100/0x190 [ 892.001567][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 892.001701][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 892.001847][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 892.002037][ T32] sys_info+0x141/0x190 [ 892.002149][ T32] watchdog+0xcb1/0x1030 [ 892.002279][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 892.002418][ T32] ? __pfx_watchdog+0x10/0x10 [ 892.002534][ T32] ? __kthread_parkme+0x18f/0x230 [ 892.002677][ T32] ? kthread+0x13a/0x450 [ 892.002770][ T32] ? __pfx_watchdog+0x10/0x10 [ 892.002900][ T32] kthread+0x373/0x450 [ 892.003000][ T32] ? __pfx_kthread+0x10/0x10 [ 892.003101][ T32] ret_from_fork+0x730/0xd60 [ 892.003177][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 892.003263][ T32] ? __switch_to+0x800/0x10f0 [ 892.003375][ T32] ? __switch_to_asm+0x39/0x70 [ 892.003445][ T32] ? __pfx_kthread+0x10/0x10 [ 892.003546][ T32] ret_from_fork_asm+0x1a/0x30 [ 892.003679][ T32] [ 892.003789][ T32] Sending NMI from CPU 1 to CPUs 0: [ 892.003869][ C0] NMI backtrace for cpu 0 [ 892.003888][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 892.003923][ C0] Tainted: [L]=SOFTLOCKUP [ 892.003933][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 892.003948][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 892.003986][ C0] Code: 07 5c fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 58 51 ce fc eb a2 e8 e1 51 [ 892.004012][ C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 892.004032][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 892.004049][ C0] RDX: 00000000000003fd RSI: ffffffff85af7700 RDI: ffffffff9bc5e3e0 [ 892.004066][ C0] RBP: ffffffff9bc5e3a0 R08: 0000000000000001 R09: 000000000000001f [ 892.004082][ C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 892.004098][ C0] R13: 0000000000000020 R14: fffffbfff378bcd1 R15: dffffc0000000000 [ 892.004115][ C0] FS: 0000000000000000(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 892.004139][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 892.004156][ C0] CR2: 0000561e02a33168 CR3: 0000000038ce8000 CR4: 00000000003526f0 [ 892.004173][ C0] Call Trace: [ 892.004180][ C0] [ 892.004191][ C0] wait_for_lsr+0x13a/0x210 [ 892.004235][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 892.004279][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 892.004320][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 892.004357][ C0] serial8250_console_write+0xf46/0x1330 [ 892.004454][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 892.004484][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 892.004523][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 892.004565][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 892.004604][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 892.004640][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 892.004674][ C0] ? do_raw_spin_lock+0x30/0x260 [ 892.004705][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 892.004732][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 892.004773][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 892.004807][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 892.004845][ C0] nbcon_kthread_func+0x613/0x7d0 [ 892.004883][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 892.004923][ C0] ? __kthread_parkme+0x18f/0x230 [ 892.004967][ C0] ? kthread+0x13a/0x450 [ 892.004995][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 892.005029][ C0] kthread+0x373/0x450 [ 892.005076][ C0] ? __pfx_kthread+0x10/0x10 [ 892.005107][ C0] ret_from_fork+0x730/0xd60 [ 892.005133][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 892.005159][ C0] ? __switch_to+0x800/0x10f0 [ 892.005193][ C0] ? __switch_to_asm+0x39/0x70 [ 892.005219][ C0] ? __pfx_kthread+0x10/0x10 [ 892.005249][ C0] ret_from_fork_asm+0x1a/0x30 [ 892.005283][ C0] [ 892.005897][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 894.805258][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 894.816068][ T32] Tainted: [L]=SOFTLOCKUP [ 894.820426][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 894.830527][ T32] Call Trace: [ 894.833865][ T32] [ 894.836861][ T32] dump_stack_lvl+0x100/0x190 [ 894.841588][ T32] vpanic+0x553/0x970 [ 894.845615][ T32] ? __pfx_vpanic+0x10/0x10 [ 894.850186][ T32] panic+0xd1/0xe0 [ 894.853971][ T32] ? __pfx_panic+0x10/0x10 [ 894.858439][ T32] ? wq_watchdog_touch+0xec/0x1a0 [ 894.863514][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 894.869727][ T32] ? watchdog.cold+0x1ec/0x234 [ 894.874537][ T32] watchdog.cold+0x1fd/0x234 [ 894.879219][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 894.885093][ T32] ? __pfx_watchdog+0x10/0x10 [ 894.889840][ T32] ? __kthread_parkme+0x18f/0x230 [ 894.894925][ T32] ? kthread+0x13a/0x450 [ 894.899225][ T32] ? __pfx_watchdog+0x10/0x10 [ 894.903964][ T32] kthread+0x373/0x450 [ 894.908076][ T32] ? __pfx_kthread+0x10/0x10 [ 894.912713][ T32] ret_from_fork+0x730/0xd60 [ 894.917362][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 894.922526][ T32] ? __switch_to+0x800/0x10f0 [ 894.927263][ T32] ? __switch_to_asm+0x39/0x70 [ 894.932092][ T32] ? __pfx_kthread+0x10/0x10 [ 894.936746][ T32] ret_from_fork_asm+0x1a/0x30 [ 894.941586][ T32] [ 894.945238][ T32] Kernel Offset: disabled [ 894.949597][ T32] Rebooting in 86400 seconds..