last executing test programs: 11m18.804051551s ago: executing program 1 (id=131): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x5, 0x4020009, 0x80000000df, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x208181, 0x0) ioctl$auto(r1, 0x2282, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) io_uring_setup$auto(0x7fffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x34d802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0xfffe) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000c, 0x400000000, 0x17, r2, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(r3, 0x0, 0x1, 0x7ff) fcntl$auto(0xffffffffffffffff, 0x4, 0xa553) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) mmap$auto(0x9, 0x3, 0x4000000000000081, 0xeb2, r0, 0x20000008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) 11m17.830991946s ago: executing program 1 (id=139): mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x9, 0x0, 0x800000000005, 0x7ffffffd}, 0x8}, 0x3, 0x1, 0x0) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat2$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x982, 0x6, 0x4}, 0x7f) sendmsg$auto_IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x9}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd4}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0xac6a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x525a05df5b8ef67a) r2 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), r1) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0x10001}, 0x400040000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x200000000) sendmsg$auto_NCSI_CMD_SEND_CMD(r1, &(0x7f0000001600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f00000009c0)={0xbe0, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NCSI_ATTR_PACKAGE_LIST={0x439, 0x2, 0x0, 0x1, [@nested={0x1f2, 0x2, 0x0, 0x1, [@typed={0x4, 0xf4}, @nested={0x4, 0x5f}, @generic="9152ed0bc658e5e2dc26b63bd1c464ff9250f5d81f470df322e0638e0d900cdc45c55f08c76f1eb84115c5cf1ac97a0a4420bbbbc43e98cc933265c65808ab2ee89b1f9831061314973d7f40cd913fd588920afda75cf9b615a351fb2df47768cdafd0891823a59d02e7314c5cc2fe201a07f0e62ed03193bfec853bddbd94c7ecd3d37d70d2846494f7b4c6328e9eb9175f0e6aa56f139c7c72a77d01db8b56a04758f971d3d7c7fe3687bacf8c5cb87149c96a110f1717563493fbc676f87f6e06a0f7c78965e733ae2ba11c", @nested={0x4, 0x157}, @typed={0x8, 0xe8, 0x0, 0x0, @u32=0xff}, @nested={0x4, 0x154}, @generic="9bc7cc18633ebb7405a69a75335625522f5edd9c57d062214bd7047126f0a4c0c2d6af67d765e6d2f7538336d5b57068cba50785655be8f9d4d391381db251378be9869a4b5fa8ed345bfd967245e4c6380904d6270524293252ee3d7f4674d8394a14a0a2fe3ae7f4f30131b457c20910f952fcdb", @typed={0x4, 0x6d}, @generic="b03e7e90dece3f94572d88354e9e657e5dc68391f9bfbe7efbc7e501634b5f8fc8b6e49f553a63257c3222ad72304cad6ba0403f58f5e30eb57240302c504e8995aef06b10249f25d680c666c3e35f578b98fe5b63414c53aa8ca88cd05ea04d72520e0450ca36192adb8b2b855760826708b0634b71d433663fec6cb086a06fc7d821ec8bc532e08d048cee51d22c4a"]}, @typed={0xb4, 0x116, 0x0, 0x0, @binary="026c47db5c9783a00552bf620e858dfb1bc04eb805514cd1f724865552bf3315404f8c406145bded10f139819dc0cebfda3b7c970e8e55a09652b0f4d8d1aae4a2f2ba8540f904d72b57b5600050716762397945e8d951fc65b52cf05de1096c1ee9f8ab1717842dd3a179513fbf27ee4dd0bab06bf942ce769bd2c6bcf3e03ef9cc4d197c5eb5970cd455bb7a08b392a321e821d3b38bfc4ff078c9ce2e4fa2e9991a5c3b2a5862fe93e6f6e6be9df2"}, @typed={0x8, 0xf4, 0x0, 0x0, @pid=r3}, @generic="8d839b04032c1f677776804c34d4a502a008a3e53fd471ef51900be2f2eb8e6d71d7d83903661a9b80a28e3b7eba2854ee8f3840d04a33b629e94276f04c91c1cf6488a10ff11e9a5e1a779ed86d42078f3f7e26042eed36130d8c3612c4005c0abd37e24902a45040bba6e7ed4fdbe8f502879b89e5336df086e6ebb2ad37c5c6d78e932729489d39824f369211de6a968a9c28b5ab2ae0e49e726b4591903b55fc01013dbf8757407eaa2d4054e61f9fa41a8fa36eb01a54848198882b7abbf63bc962f6b7aeae4c7807f0cdd7831c87", @typed={0xb3, 0xfb, 0x0, 0x0, @binary="c27af9e84690d71aed7c17150f9cab7adeae205966073a5caecbf58597c38c93b68c79891016547576c78b89e515a2d085cdb77ed0448a07af361c949ac83a39cc13667632426024331858d06ac7a5e5f5fea965c340a9cbbe31453a2121e70077e7b6ec1793e26573515f08246bf508840b71242918d494e9bdb75215e065b3221c81752ca92c4a95a142c777e30fb881dbe6e87e4bd1716f54f0b0d5b2369001757e66cf6982a1017f69514cea13"}]}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x3ba67bd8}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xb49}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_DATA={0x77a, 0x5, "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"}]}, 0xbe0}, 0x1, 0x0, 0x0, 0x4010}, 0x811) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) socket(0x9, 0x2, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) inotify_rm_watch$auto(0xffffffffffffffff, 0x1f) write$auto_dev_fops_plock(0xffffffffffffffff, &(0x7f0000000200)="ea579eafbef6a78ace20c66c3ed28a307811ba5a77e0d6f20eee070874ce267321ef2da8ccef77a2a57912658cfac38b23199ba898ef2c29ea039494e108e23fc3d3de801c6cdb8c585be1ec026d327ad05a0c7812805bb6d050f902f2e77e549ec276c282a2bb8c2847f2e7105018d493a4a1", 0x73) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xf8f) semop$auto(0x60, &(0x7f0000000340)={0x8, 0x9e31, 0x6}, 0x9) prctl$auto(0x16, 0x21, 0x6, 0xfffffffffffffffe, 0x5) sendfile$auto(0xffffffffffffffff, r4, 0x0, 0x1fff5) close_range$auto(0x2, 0x8, 0x0) semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4) io_uring_setup$auto(0x4bf15e08, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) unshare$auto(0x40000080) 11m16.854889061s ago: executing program 1 (id=143): sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c22ffff, 0x7, 0x1) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D0\x00', 0x101, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0xd6, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) mmap$auto(0x0, 0x6, 0x1, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/amidi2\x00', 0x802, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000001c0)={0x1, 0x82, 0xc81b, 0x1, 0x4, "67598913366a24c7eed0e8d6"}) mincore$auto(0x200000000000, 0xffff, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101c00, 0x0) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 11m15.791370914s ago: executing program 1 (id=150): getcwd$auto(&(0x7f0000000000)='\x00', 0x8) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x9, 0x3, 0x7, 0x80000001, [0x1, 0x718, 0xb0, 0x9, 0x9, 0x8]}) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x2, 0x0) r2 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x82000, 0x0) read$auto_tracing_total_entries_fops_trace(r2, 0x0, 0x0) bpf$auto(0x3ff, &(0x7f00000000c0)=@link_update={r0, @new_map_fd=r0, 0x4007, @old_prog_fd=r1}, 0xa3) 11m15.605193402s ago: executing program 1 (id=152): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) syz_clone(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) clone$auto(0x3, 0x6, 0x0, 0x0, 0x0) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) mprotect$auto(0x0, 0x8000000000000001, 0x8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0xc) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/9p/caches\x00', 0x103280, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) r4 = getpid() process_vm_readv$auto(r4, 0x0, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) 11m11.745603024s ago: executing program 1 (id=162): mmap$auto(0x0, 0x20009, 0x4000000000e3, 0xeb2, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x4dd8, 0x5) close_range$auto(0x2, 0x8, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xffd}, 0x1, &(0x7f0000000580)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) syz_clone3(&(0x7f0000000500)={0x82a1800, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x25}, &(0x7f00000003c0)=""/115, 0x73, &(0x7f0000000440)=""/82, &(0x7f00000004c0)=[0x0, r5], 0x2, {r3}}, 0x58) getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040), 0x40000000001243}, 0x4, 0x0) ioctl$auto(r4, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xffd8) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = socket(0xa, 0x3, 0x3a) bind$auto(r7, &(0x7f0000000080)=@hci={0x1f, 0x2, 0x4}, 0x6) r8 = getpid() process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r9 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0xa82, 0x0) pread64$auto(r9, 0x0, 0x48f4, 0x401) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) 10m56.674834729s ago: executing program 32 (id=162): mmap$auto(0x0, 0x20009, 0x4000000000e3, 0xeb2, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x4dd8, 0x5) close_range$auto(0x2, 0x8, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xffd}, 0x1, &(0x7f0000000580)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) syz_clone3(&(0x7f0000000500)={0x82a1800, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x25}, &(0x7f00000003c0)=""/115, 0x73, &(0x7f0000000440)=""/82, &(0x7f00000004c0)=[0x0, r5], 0x2, {r3}}, 0x58) getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040), 0x40000000001243}, 0x4, 0x0) ioctl$auto(r4, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xffd8) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = socket(0xa, 0x3, 0x3a) bind$auto(r7, &(0x7f0000000080)=@hci={0x1f, 0x2, 0x4}, 0x6) r8 = getpid() process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r9 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0xa82, 0x0) pread64$auto(r9, 0x0, 0x48f4, 0x401) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) 2m40.253079232s ago: executing program 2 (id=2380): sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x405b) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) socket(0x10, 0x2, 0x0) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D0\x00', 0x101, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) r1 = syz_clone(0x9040000, &(0x7f0000000000)="f23ffcf118", 0x5, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) rt_sigqueueinfo$auto(r1, 0xf45c, &(0x7f0000000200)={@_si_pad}) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2m39.431163132s ago: executing program 2 (id=2383): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) mincore$auto(0x2, 0x30ed, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb1\x00', 0x140, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) io_uring_setup$auto(0x6, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x40000000000003) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x4) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xfffffffffffffff7, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008011, 0x4, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) 2m36.895059852s ago: executing program 2 (id=2392): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x1c, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x60, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) mmap$auto(0x0, 0x16, 0xff8, 0x13, 0x3, 0x8000) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, 0x0, 0x80400, 0x0) mmap$auto(0x4000000000000003, 0x20009, 0x41, 0xeb1, r0, 0x8004) fanotify_init$auto(0x100200, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000040)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) setrlimit$auto(0x8, 0x0) io_uring_setup$auto(0x59, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x272) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x6) madvise$auto(0xfffffffffffffffb, 0x10001, 0xc) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) clone$auto(0x8000000000000005, 0x7fff, 0x0, 0x0, 0x2) mbind$auto(0xf000, 0x8000000000000002, 0x100000000, 0x0, 0x100, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 2m35.881820122s ago: executing program 2 (id=2397): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rt_acct\x00', 0x840, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0xe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xb8, 0xfffffffffffffffa, 0x8000) inotify_init1$auto(0x41) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x2006, 0x7fa, 0x7fb, 0x0}) unshare$auto(0x40000080) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0x3, 0x3040, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x4, 0x3, 0x7c1f, 0x3, 0x7c, 0x104, 0x101, 0xffffffffffffffff}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x100076c5, 0x10000008, 0x100000000}}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) rmdir$auto(&(0x7f0000000280)='./file0\x00') r1 = socket(0x11, 0x3, 0x9) socket(0x11, 0x80003, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/mm/lru_gen/enabled\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000002c0)='Y\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xe2!\xdeD\x82\xed\xdbJ\xda^\xceY\xa4\xbe\x06\x7fKE\xa2\xa5\v\"e\xe4\xb9\xe2\t\a_\xe5\xd0\xfd\xbb\xfb\xba{-\xba\x85\x85\x18\xbbQ\x85\xfeG<\xdd\xb1XS\xc3\xaa\xce\xf9\x87\xc1\x18\xb48\x7f\xec\x94\\5\x98\x1fl\x9d\xe0m\xc2v9\xff\xffd3\xf4O\xe3\xf9\x1bY\x9c\xbei|\xd0\xa7Q\x03?\x97(b\xb9\x8bK$\x96%\x9aBU\xde\xd8\xbf\x1e\xc9\x80\x1e\x96\xf4@\xdb\xc7\x0e\xd7\xa0\n0\xbc\x82\xea\x00\xe08\x84G\xc4\f\xfd\xdbn\x96\xb1\xab%\x01\xcbg\a{Q\x1b\xff\xec\x80\x7f\x1e\xbe\xb1:\xcdd\xe5\x86e\xe4\xca\xa7\xcb\xbe]NI\x17\xac\x958`\xfa\x8c\x0e\r\xbe\x1c\x1d>\x8f\xb8\xdf3\xa5\xd7[7^\n5\xd7En]\x8b>0\x18\xa6m\xee\x8ab\x00\xf0;;>\xbd\xf4\x97\xd4nf \xad\xe7HPyxZ\"\xf6)d\xf6\x8dy\x90\xcc\xc1 \bt\xa8\xd28\xa5\x174\xac*\x96\xc6\xfd\xb2\xb84>B\xa7NA\xaa5Bqn\xca\xb2O\xf6\xa1{#\xd5\xf4&\x8c\xf6\x178\xd9P\xa7\xe6\xd4~\x8c|\x17\x80\xaelJ\xa51\xc6\xac(F\xf4\xd1\xb1', 0x7) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) fsopen$auto(0x0, 0x1) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) 2m35.413744175s ago: executing program 0 (id=2401): select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x6, &(0x7f0000000280)="38b0a5d93fb7880898e9f944f657e7082176707af4d60b8c72ba1f802b91a7e699f3505370694bbf3892cebb3bc388cefcfd6b549fb2c563a31e8cdf0c00b9cc11e8ca36b3211c3fc290b10d722c3cc669d3b3afd6db741e13e588100079b02ad87565684f41b2995080d6a75fbfbec94f9b3b17936ffc0fdfe5610fd0a3d59da08e2ef98212eea2f0237bab202c68f9be3643594eb57ad8c64e06386decc2f34624125594f30dc4d2ed9e4e3b7b791be122c23a97142194897e8000c976fd1aca7b", 0x7, 0x5}, 0x800}, 0x2, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x4, 0x6, 0x40eb1, r1, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x810) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/013/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x1b, 0x1, 0x800, 0x400007fb, &(0x7f0000000080)}) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000000c0), r3) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) mmap$auto(0x0, 0x4, 0x6, 0x40eb1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x3, 0x4000000000e0, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r5, 0x8000) madvise$auto(0x0, 0x800000000400053, 0x6) futex$auto(0x0, 0x8c, 0x3, 0x0, 0x0, 0x4001) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 2m34.889117423s ago: executing program 2 (id=2403): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SURVEY(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000000)={0x14, r0, 0xf01, 0x70bd2d, 0x25dfdbfd, {0x32, 0x0, 0xec0}}, 0x14}, 0x1, 0xf000, 0x0, 0x24008004}, 0x20048840) 2m34.78716897s ago: executing program 2 (id=2404): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D2\x00', 0x12200, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000011c0)={0x2, 0x4, 0x2000, 0x5, 0x6, "27f8f21e419a9f18b58d930b9633668ba6dd0d09e71f4e8278480db0d97e3940400e614d8995c630e31347980689109c296ac9481729aafe26a6d67f004ad72e", "606fdbce222b7a1d9cd3ccca8f2528e3dfc108f50e5c22f0cd1d73becd8d085d9a8cc2b998028741b4392f45b63203a5242143ae885c4eebc555525db4812cd0d100c9daf876689480eec5b28e36b6d4", "fcbc2ddcd8873fd605a97254cf20378a6f7f1ec0cdd08361a335bf00", 0x861, 0x8001, 0x6, "73ed0b5334829db81d64297944eff3e31725e8ef18944420209f4bf2b4ecc561d0d79c8525aa2e2ba49fc1f95ccc7cd02d4afe1f7e5e3b93f37f3962"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001340)='/dev/tty48\x00', 0x40000, 0x0) get_mempolicy$auto(0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1) mmap$auto(0x3, 0x80002020009, 0x7, 0xfa, 0xffffffffffffffff, 0x400) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) setitimer$auto(0x10002, &(0x7f00000010c0)={{0x81, 0x991b}, {0x7, 0x8}}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x112, 0x80006) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0xa802, 0x0) mmap$auto(0x10001, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) r2 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x10100, 0x0) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(r2, &(0x7f0000001040)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESDEC=r0, @ANYRESHEX=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x408c4) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001140)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendfile$auto(r1, r1, 0x0, 0x80000000003) mprotect$auto(0x200000000000, 0x806121, 0x8) landlock_create_ruleset$auto(&(0x7f0000000140)={0x100000daa0, 0x401, 0x9}, 0x7ffd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) 2m34.353358056s ago: executing program 0 (id=2405): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0xc0202, 0x0) write$auto(r0, &(0x7f0000000000)='P^\x00', 0x8) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0xe40, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) socket(0xa, 0x1, 0x84) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socketcall$auto(0x800, &(0x7f0000000180)=0x2356eb2f) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x4, 0x7fff, 0x1a000, 0x80000948b, 0x5f70, 0x8, 0x400000006, 0x7ff, 0xc, 0x9, 0x3, 0x280000000, 0x400005, 0x3]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac1004", 0xc4) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) get_mempolicy$auto(&(0x7f0000000040)=0x401, 0x0, 0x3, 0x2, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf2) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22040, 0x75) utimes$auto(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x114) 2m33.219055781s ago: executing program 0 (id=2410): socket(0x15, 0x3, 0x1) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00ffff", @ANYRES16=r0, @ANYBLOB="13002cbd708c02b14c1465768c0008"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 2m32.997013559s ago: executing program 0 (id=2413): r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x5, @rand_addr=0x64010101}, 0xf5) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xfffffffffffffffe, 0x8002000000000, 0x2f) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r1 = getpid() mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x2, 0x73) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x101000, 0x8) shmget$auto(0x0, 0x7b, 0x100) process_vm_readv$auto(r1, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) syz_clone3(&(0x7f0000000480)={0x22000000, 0x0, &(0x7f0000000180), 0x0, {0xa}, &(0x7f00000002c0)=""/150, 0x96, &(0x7f0000000380)=""/162, 0x0}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x4dd8, 0x5) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_BIND_RX(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250d00000008000300", @ANYRES32, @ANYBLOB="0400028008000100"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_MAX_PACING_RATE(r0, 0x6, 0x2f, &(0x7f0000000000)='[}+\'\x00', &(0x7f00000000c0)=0xb3a) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) 2m31.31567784s ago: executing program 0 (id=2418): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r0, 0x11b, 0x9, 0xffffffffffffffff, 0x18) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x86a7, 0x11, 0xfffffffe, 0x6, 0x30000000, 0x9, 0xffffffffffffffff, [0x0, 0x0, 0xffff], {0x6, 0x10001, 0x20000b, 0x2e1, 0x504, 0x1, 0x101, 0x6, 0x5}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x440, 0x76c5, 0x8, 0x8000000000040000}}) getpid() ioctl$auto(0xffffffffffffffff, 0x890c, 0x1) r1 = socket(0xa, 0x1, 0x8000) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x0, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x2c, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (fail_nth: 17) 2m30.697287501s ago: executing program 0 (id=2422): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywf\x00', 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100253d7000fddbdf2501000000140007801d0001800800018000000000040089800c0002000600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x800000, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x4, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044915) socket(0x10, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 2m15.609791176s ago: executing program 33 (id=2422): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywf\x00', 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100253d7000fddbdf2501000000140007801d0001800800018000000000040089800c0002000600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x800000, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x4, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044915) socket(0x10, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 1m20.46378147s ago: executing program 3 (id=2680): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="de0226bd7000fedbdf2501000000"], 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) getsockopt$auto_SO_RXQ_OVFL(r0, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="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", 0x4ba) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r3) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="90ece517", @ANYRES16=r4, @ANYBLOB="010329bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x800, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x7, 0x3, 0x78) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x1) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000380), 0x101002, 0x0) ioctl$auto_VFIO_IOMMU_GET_INFO(r5, 0x3b70, 0x0) 1m19.764763762s ago: executing program 3 (id=2683): prctl$auto(0x35, 0x0, 0x8, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x170b, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_STATS_SRC={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x4000840) r2 = prctl$auto(0x35, 0x0, 0x10, 0x0, 0x0) epoll_ctl$auto(r2, 0x633b, r0, &(0x7f0000000000)={0x4, 0xdb}) 1m19.706973661s ago: executing program 3 (id=2684): msgctl$auto_IPC_STAT(0x81, 0x2, &(0x7f00000002c0)={{0x19f, 0xee00, 0x0, 0x8, 0xe, 0xac9, 0x7}, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x2, 0x5, 0x8000000000000000, 0x1, 0x7fff, 0x1, 0x9, 0x8c, 0x1ff, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x402000a, 0x1006, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b4c, 0x1) 1m19.663296529s ago: executing program 3 (id=2685): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x5, 0x0, @inferred=0xffffffffffffffff}, 0x7ff) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/zswap/reject_compress_fail\x00', 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)=@bpf_attr_5={@target_fd=r2, r2, 0xfffffffd, 0x5, r0, @relative_id=0xe, 0x71cf}, 0x5) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), r1) read$auto(r3, 0x0, 0x10001) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0xa042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, &(0x7f00000002c0)="81", 0x1) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x7}, 0x2) sendmsg$auto_NL80211_CMD_SET_REG(r1, &(0x7f0000002c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002c00)={&(0x7f0000000680)=ANY=[@ANYBLOB='T%\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000500e400800000001d004300ff37bf930f3f6244bc44dd68042b6736806ba0295c0653e1d2531aa1530000002700f30078f60d78491b79801c952866e7873504a3215f15148f9e46859e2653d72f7449"], 0x2554}, 0x1, 0x0, 0x0, 0x100}, 0x2004a840) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) r6 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000100), 0x4440, 0x0) syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x429}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x58) socket(0xb, 0x80802, 0xfffffffe) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu0/trace\x00', 0x1a6b75d638828712, 0x0) socket(0x2b, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) write$auto(r6, 0x0, 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m19.545564673s ago: executing program 3 (id=2686): socket(0x15, 0x3, 0x1) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd708c02b14c1465768c0008"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 1m19.300725962s ago: executing program 3 (id=2688): bpf$auto(0x100000, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) 791.246078ms ago: executing program 4 (id=2869): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109206, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto(0x3, 0xc0bc5310, 0x38) 775.59337ms ago: executing program 4 (id=2870): epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000240)=ANY=[@ANYBLOB="e0000000", @ANYRESHEX=0x0, @ANYBLOB="000127bd7000fcdbdf251200000005000c00ff0000000800010000000000a00019007dba6907273140a43172cc0f5945474437143f69a5777674364501bd4661e84d7eeab5f94717d98d0624f33f803fbd6a756bebd8e1f84dc9170d"], 0xe0}, 0x1, 0x0, 0x0, 0x4040043}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0e/power/autosuspend_delay_ms\x00', 0x82940, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r1) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer1\x00', 0x500, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netlink\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x566, 0xffffffe000000000) ioctl$auto_SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f00000004c0)) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f0000000100)={"b1ec2b3d73eb3704600008fde7f9a86cba53ec92136c2cb4ea07c3ff554fd857", 0x5, 0xffffff65, 0x6, 0x2, 0x40, 0xffffffffffffffff}) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r1, 0x0, 0x88000) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_conntrack_log_invalid\x00', 0x101202, 0x0) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x1f40) socket(0xa, 0xa, 0x100) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f00000011c0)={0x3a932239, 0x0, 0x5, 0x6, 0x6, 0x3, 0x10001, 0x0, 0x9, 0x3, 0x7, {0xced, 0x7}, 0xe, 0xe105, 0x5, 0x8, 0x0, 0x6, 0x3, 0x10000000000, 0xffff, 0x1, 0x800}) 484.45159ms ago: executing program 4 (id=2871): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x3f) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r1, 0x40086602, &(0x7f0000000180)="f9b614d22aa4a460cfb56a95fe2004332cbcbb0ce134b2747fcbdf6ebd276a04e2fd612f6669e487ab52b2a827737588c833b38a8a8ab7a7147d9ebdf91b73fc35fdcc8548bd41b43e43f35716724de2624e51d44c499d4ff7c6e7535c376eaad9bbfef22d356a2115e4c9617145b4ffe47ce6") write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) ioctl$auto(0x3, 0x8208ae63, 0x38) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) socket(0x23, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x6) sysfs$auto(0x2, 0x44, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0xfe, 0xfffffffffffffffc) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0x400053, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)='5', 0x1) 139.469796ms ago: executing program 4 (id=2872): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x13, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x200408a0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) sendmsg$auto_NCSI_CMD_SEND_CMD(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f00000009c0)={0xbe0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NCSI_ATTR_PACKAGE_LIST={0x439, 0x2, 0x0, 0x1, [@nested={0x1f2, 0x2, 0x0, 0x1, [@typed={0x4, 0xf4}, @nested={0x4, 0x5f}, @generic="9152ed0bc658e5e2dc26b63bd1c464ff9250f5d81f470df322e0638e0d900cdc45c55f08c76f1eb84115c5cf1ac97a0a4420bbbbc43e98cc933265c65808ab2ee89b1f9831061314973d7f40cd913fd588920afda75cf9b615a351fb2df47768cdafd0891823a59d02e7314c5cc2fe201a07f0e62ed03193bfec853bddbd94c7ecd3d37d70d2846494f7b4c6328e9eb9175f0e6aa56f139c7c72a77d01db8b56a04758f971d3d7c7fe3687bacf8c5cb87149c96a110f1717563493fbc676f87f6e06a0f7c78965e733ae2ba11c", @nested={0x4, 0x157}, @typed={0x8, 0xe8, 0x0, 0x0, @u32=0xff}, @nested={0x4, 0x154}, @generic="9bc7cc18633ebb7405a69a75335625522f5edd9c57d062214bd7047126f0a4c0c2d6af67d765e6d2f7538336d5b57068cba50785655be8f9d4d391381db251378be9869a4b5fa8ed345bfd967245e4c6380904d6270524293252ee3d7f4674d8394a14a0a2fe3ae7f4f30131b457c20910f952fcdb", @typed={0x4, 0x6d}, @generic="b03e7e90dece3f94572d88354e9e657e5dc68391f9bfbe7efbc7e501634b5f8fc8b6e49f553a63257c3222ad72304cad6ba0403f58f5e30eb57240302c504e8995aef06b10249f25d680c666c3e35f578b98fe5b63414c53aa8ca88cd05ea04d72520e0450ca36192adb8b2b855760826708b0634b71d433663fec6cb086a06fc7d821ec8bc532e08d048cee51d22c4a"]}, @typed={0xb4, 0x116, 0x0, 0x0, @binary="026c47db5c9783a00552bf620e858dfb1bc04eb805514cd1f724865552bf3315404f8c406145bded10f139819dc0cebfda3b7c970e8e55a09652b0f4d8d1aae4a2f2ba8540f904d72b57b5600050716762397945e8d951fc65b52cf05de1096c1ee9f8ab1717842dd3a179513fbf27ee4dd0bab06bf942ce769bd2c6bcf3e03ef9cc4d197c5eb5970cd455bb7a08b392a321e821d3b38bfc4ff078c9ce2e4fa2e9991a5c3b2a5862fe93e6f6e6be9df2"}, @typed={0x8, 0xf4, 0x0, 0x0, @pid}, @generic="8d839b04032c1f677776804c34d4a502a008a3e53fd471ef51900be2f2eb8e6d71d7d83903661a9b80a28e3b7eba2854ee8f3840d04a33b629e94276f04c91c1cf6488a10ff11e9a5e1a779ed86d42078f3f7e26042eed36130d8c3612c4005c0abd37e24902a45040bba6e7ed4fdbe8f502879b89e5336df086e6ebb2ad37c5c6d78e932729489d39824f369211de6a968a9c28b5ab2ae0e49e726b4591903b55fc01013dbf8757407eaa2d4054e61f9fa41a8fa36eb01a54848198882b7abbf63bc962f6b7aeae4c7807f0cdd7831c87", @typed={0xb3, 0xfb, 0x0, 0x0, @binary="c27af9e84690d71aed7c17150f9cab7adeae205966073a5caecbf58597c38c93b68c79891016547576c78b89e515a2d085cdb77ed0448a07af361c949ac83a39cc13667632426024331858d06ac7a5e5f5fea965c340a9cbbe31453a2121e70077e7b6ec1793e26573515f08246bf508840b71242918d494e9bdb75215e065b3221c81752ca92c4a95a142c777e30fb881dbe6e87e4bd1716f54f0b0d5b2369001757e66cf6982a1017f69514cea13"}]}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x3ba67bd8}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xb49}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_DATA={0x77a, 0x5, "f928e09d7bd7fa2202977becacbfba05779299539e9087c29bdcfb7e759354020deebb22ec4bd883dbb7deea7425a87316ae9678267fecc436029b01e0ddc119fc3e4773eb5acadcfedf56a5cc5227743accf629c50812ae37af5cde21bcc23362ab755f2630ac53e3dfcc67731cb38a4be45a151fc54e296eab4b67d8e1816732a34c3255ee7541ff4e75615890783b19a98f05211738c03f34fa2113b6d768ccabd78c5e2780c2c0da118f0d282c44f4fb6133389f4ab50bb5c224255a6c7e9e3ae7314ea96ace9e25f2b3be2182b1eb0deff67feb536c5fe5f005b6a7a0b3b5582a69abc83c37a4d8038e829d60a991d7ffd9851edb138fdce06abb8867a2be56a5dbebd5e7ef3d7362ea7e6723b8ad49689b4363c54afdea8d7e7448499f38e48320398a4234fa61a3d20c09ba7d4baa283e7122deea61454d68879cdb549df69234ea91c57e5472579702e21a80a1537ec61e189b1fc21d7ffbbf5cf6962454217baa5d903e28f3a697a883b279e211f7ed6716fe84d6ff67f82602ff77a0e798d6692440fdebe9a433ae69b89b55aeba6241f29aef20ad6fcfc85fcbd4e9e59f159ce4a4cc77ccae8332290b4cde9437607273c950478e91905f51b234f42a18f6cd00da83811e1c385767bb91b1b792b79c154f4fc49dcf5876ffcb4e701d522917a0d253e3469bdc1c498a062706b8338e16bd44bcb04a28b79a71f4924e8f52ef66838f35ab5d569765b5b13860986c53cfe5a07018594b69ca399427013a1871f599564b7269f44edecaeaa1b84ed56c249d5968235b9e23c37bf71f0ab9a741176fb33b8c83afcbfb6efae66c56310915cddbd681b9dc72b8ec14a881f1fa9e193b9db73e0a2cba79616d28bda7bf0b31202c1a24711c2bfc85bf689d34e439409ad93bb4eadb1ecf761626375fbe5656e9760086eb85116f83b5d99d22a6bc0cce98cf77533b22f0d305a1e00f651dae93dc7bd3aacf3ff45d6df754f35d901ec6ac3014f505ac13dbfe184f3f37bb1c29482fcc86f419d8cfed35fee9e8a612574f9e3afe27e9ee3ae5f8ff22734150611188de68af93f3b156b2fe92165a0ed97e1ece3f5751e4df65eff481c7f2391c8f45f7d082b104e353ec2092e616bd9d83c663cb176deb7b25a216f8b903c461f93b3b771f9cee918043cc21fa9ea85c42326cb2dd3c846d0dcf1fe33fc61d2bff8f1cf63e38329e2d508b484106f1050a4f396b38449571995d111c345e6363388844bc7e7403199a52acdee14a4e661a8dbef77e25e57ad16a90dba607182afb1f891c7178f923130db86b4a501cd43de8571eed672cf02408586440be582c91b64f7212971886f75ac25cb9c3adedbccf226b5252f26d3f7fef415b748fa39cac970d1b07ac8b7ce6b026a95cfc1a1532d300345dd274259cf0602ada400278fd0d09c687b4c324cb9714be58e51cd8dd36619ad89e4090eae95e0589245f210cb05e9fa90318d39007ea4fc8ccbd9dae613027ea6c95940a7ed72efc660c622095bb42173939eb42f4400f5ad6184540d718946926f5b987fbffaf115bed18f27c946a77ae78ff5b5e72d2a64aac60aaed728ea3ede4d78de9f79b11ec917623a885d4027d2a999b98298e2af8b9aeabf1380b5c3feeba52a1814a05e7a8ce3ee85d1b42a1dd9adb23381dbd76cb6688a238e76ce6f4098063ea755f1ef7abbfa23490a6544099a6f9530259faf5e3d0c07b2c8bf986aeb5028268ebe4d908e0413e964fd8b2d5ddb3d47b9b0e68de5096732bea7dc3b1b3466f7dff45721a9b1d5811a4e1874ec2be961d37a9d9d2ef50492bb75ab96504dafd326decc198ac8805a18e350c38e4de47ef2350d18f3501b50bb285023023d03fa66cf215ec6a34564affb95aca93f3677d4154b6aa9c1fbda430511f31eb6468825fbbe8a124a886ab881b7da7b71a1159bdeada0ce632d3e54e561468f4dd26640cc2d9f1587b7023928741d0f71fd00e58ae6f58d9eec0f2c07da2ccb093512d538bf1f4ea2311d4faeec03187739b1ff36129da3bf1c5999fafaeacb9be63fe3ae8765b827fe1711a0b134494c8a5f067642946e42ada782618ed9daac32eb165bc327e278c3ff030a593d85b93e3ccb751fe67c6d8bf647bcaa91c66b859db93c60a88686d07eb250e91d16a1f90c099d4835b71ba0bc03d950690a626fe5575633b90216163e1443d5213286194c0df5aa891ba17db5893fc758c282639bc7ec6ed7d27421dbdb73d01e9e149799ca2860748c06a69b41c74def7bbf31e42be43ccb4b8a5e64459f476eac90023c0677c94c6d785435e4ac8ab6891161f9b7e1d0be6bd44d17de9672aa470df2dee31ca60875388a25a90271c4b4fcf4ecc75651090ee9530d72cf969e4c1f0a3ab036bd131cc02b87bfbefa7472d8623ac7be17a1c56cf5b3c4818af0a0a2b910948e7492048f50d855efee2a12d8c63b7ddf9da4cef69ffdcf551b18936d45158aa1e6ade7060979b2f1e60e679dcdee9b45f203d4f23f30205596485409ed517525f2c922ba15574d1191711355495f0de907f42fea54bb1157d2eac8afa28574f6b460b519d8eeedacaec0815abc980a4b96289d3f9ae2a3145d15240fca1d5cbe7a53e149a6e083b7befb52f51c679e115a0a366197c0e95a4c2a1b5511155ec9815bc0402d19d9f125a7bc5c63290ac29"}]}, 0xbe0}, 0x1, 0x0, 0x0, 0x4010}, 0x811) sendmsg$auto_NCSI_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000003c0)={0x594, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x3}, @NCSI_ATTR_DATA={0x56e, 0x5, "8e3f62aa394c84ce31ac1dad5d96e6dd04d54471a1d8efbb900888abeb5465bf77d36f08fac3ce5baeb3b19c99da602bee49847b7fbfc709654318b98e4ba4a2d83cfc66480861fc89bcf5b9d62af7feac35f225f0954eca55485a404c5b129fd0e4d34de648451a6aca0ef281eeb85601d42e1252ee8984f62ec97174c5d90d4818c0b0af99b04338fe3d63a3126e9691bb9ce65799cdf87189786cbbdd8a6409c36339fafa88ce221c9a1816a73b02767c9b3cbd48e9c22b20102b8d7a042e35d3dd7b3bb0c1c51d99c05e8fa5d555896c3a4f80234dceff8e01787f18eeb0618b991f37a6291350f6fb8d246e7568407d1c74ad75542029289d0b110ce2ae879c4d9c060f7a11368660b85da710a9fbea5a155776e0771f3329baed78fd06482773a1f6c2841b7f2c9b7d4a22483f0ad7dc3f42105279f8192ac48a2d6536e37b88cd082d7652972714794652a3d79e6c71a35438779369e817ab9b95870ff8ca36f1d369b6a95b9f702a57aef5571af308ca6e79c7aa5aea4b7c578d3e34557efceadb24de66748bdc76ee008300ccbda00047fc7bacc2374ba94b74ac74142a5fd18403d417df923a920536d1a482f840dd977ccceba603394c76bf8b6b702e4b75f9e8aef044b1e1014c0c8b71d1c50c9f8237c6a4ceaf8ceb8f5f06a9d3ec3dcae4b05f5de4d68a93703ab4be1885307432b0819d1b9a66e133c6668978327599b69f04591aeb5e7cd63c51ed2a95b7f1fe239c0059fdcfa15c043a60c840ea2a7783faa35c22cbc701b15fc9da5d44969880789e6259a226b82476d96285744b90d8c57aa4710a898699d884996061f0b07bba70b1fcdae17249a232170016abf0d907a9408795744182738be53d3cd7c9c32446b1e44a5c7fbc6e6c2a89fb038d3cd4765d0b87e456b8b82d7dd9fa7ca9a22d43a98c446ac193a25c3cc824e809a8f90469b8f021d3427259aa06505066d3cd29603ad287ed17d6a28955462626dc9636b5b5f5ba3a2f168d3f9e409e64836ca41e0d2356c72619d3899175bb38327bfea20b1230fdfef597656fd29563b2a9d1e75d424570fa9ebe817bbf2a6eba7fa4b9b5b27d886ec8dc06136f33e29f62307a2a16ebf6db6a87c10810f3a1bfe9ba991a5b5f46325ac3cc03906a4dc452fa325e9a4ae0ef62c055747c7c3cc294c8955ee6c6952e8db7577ef921c0e4f9eea2417c1c9568475f21e6fc68002a8df0f611b5388982f39e1c71166e21d15026dd694283ed3f89bbb359de339a4edea4734d61947fc8fc784406c93e13e0b6cd8f88cf1212bcee9ba806a702aa20f5c56bbe068abd656a40c8ae6c7820803c63ed81648cb75b526b24e0f723b91d7c29c9d0652935e26ff0959120b4a0ee86f02101324c4879636b0b3c881bc342e9e130fa8412564a26e6912992bdb7b4df3e35eeb55ea4aa7209c2c540579837c9896321ef487c429f20b7c25957a63aa526a7f201293d14da380a5289681b908fa6e25b2c62f8824c3c4ccda7932b6864b7692606ebbe4ddb2daf0acd741aad2236d0bcf10b8495ad7a4685e8ae2dbe5faf62fc401a8cfbb805e9cc18afc1c53e13d901bd5358e75672f4d8d7fb8b9c2be7eec6b2123cc3e2bcde069b8df11c75ad48a83143354c096319f7ef76b312ed40fd15731ab9f5a15efdb8525916d85a5a3e9a1156abea4188fc0af6577d6490a6c145a079d45f988241de595d5228297cea83f5a60f2ae738a860b7c1e6de632e0e132de4e6a34e9a7a9194adf17564e4fba8e5880501a6e14506b932bef085936d746546a5f8a663afb5119b65b0b848f7261089a016041c0f1215a72a666129c336a8dc6052e42876fde87f333d715bdc9cad3c5853a11ad74af0edeb8835adb306b1f3881255d6cec288e0c5a66707c37b5603e9b4e4419d829f3126c47e0a931301610623542ff606b05769ac62186515"}]}, 0x594}, 0x1, 0x0, 0x0, 0x2000}, 0x24000810) io_uring_register$auto(0x2, 0x21, &(0x7f0000000240), 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 44.879807ms ago: executing program 4 (id=2873): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/iosched/fifo_batch\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-7', 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty41\x00', 0x800, 0x0) mmap$auto(0x0, 0x402000a, 0x1006, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b4c, 0x1) 0s ago: executing program 4 (id=2874): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0xa9, 0x2a, 0xffffffffffffffff, 0x3) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open$auto(r0, 0xd) ptrace$auto(0x10, r0, 0x4, 0x100000000) mmap$auto(0x0, 0x20009, 0x386, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x11, 0x5, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) memfd_create$auto(0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r3) kernel console output (not intermixed with test programs): ][ T35] veth0_vlan: left promiscuous mode [ 619.739809][T13301] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 620.050580][ T35] team0 (unregistering): Port device team_slave_1 removed [ 620.088645][ T35] team0 (unregistering): Port device team_slave_0 removed [ 620.234897][T16078] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.235027][T16078] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.235191][T16078] bridge_slave_1: entered allmulticast mode [ 620.238279][T16078] bridge_slave_1: entered promiscuous mode [ 620.381737][T16078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.414915][T16078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.488621][T16078] team0: Port device team_slave_0 added [ 620.491092][T16078] team0: Port device team_slave_1 added [ 620.605572][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 620.645570][T16078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.645594][T16078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.645636][T16078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.646995][T16078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.647017][T16078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.647058][T16078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.674459][T16155] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 620.750989][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 620.835969][ T5629] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 620.906591][T16078] hsr_slave_0: entered promiscuous mode [ 620.922387][T16078] hsr_slave_1: entered promiscuous mode [ 620.930186][T16078] debugfs: 'hsr0' already exists in 'hsr' [ 620.936081][T16078] Cannot create hsr debugfs directory [ 621.256562][ T5629] Bluetooth: hci2: command tx timeout [ 621.627456][T16141] Process accounting resumed [ 621.730068][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 622.085330][ T5629] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 622.085372][ T5629] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 622.100181][ T5629] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 622.298305][T16078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 622.335207][T16078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 622.378749][T16078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 622.428932][T16078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.453534][T16078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 622.494671][T16078] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 622.665323][T16078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 622.697764][T16078] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 622.713155][ T5629] Bluetooth: hci0: unknown advertising packet type: 0xea [ 622.725525][T13301] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 622.884400][T16232] FAULT_INJECTION: forcing a failure. [ 622.884400][T16232] name fail_futex, interval 1, probability 0, space 0, times 0 [ 622.917025][T16078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.931211][T16232] CPU: 0 UID: 5 PID: 16232 Comm: syz.4.2355 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.931264][T16232] Tainted: [L]=SOFTLOCKUP [ 622.931274][T16232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 622.931292][T16232] Call Trace: [ 622.931300][T16232] [ 622.931310][T16232] dump_stack_lvl+0x100/0x190 [ 622.931353][T16232] should_fail_ex.cold+0x5/0xa [ 622.931387][T16232] get_futex_key+0x1d2/0x14f0 [ 622.931432][T16232] ? __pfx_get_futex_key+0x10/0x10 [ 622.931475][T16232] ? rcu_is_watching+0x12/0xc0 [ 622.931505][T16232] ? lock_acquire+0x301/0x370 [ 622.931546][T16232] futex_wake+0xf4/0x5e0 [ 622.931576][T16232] ? __mutex_lock+0x26d/0x1bd0 [ 622.931608][T16232] ? __pfx_futex_wake+0x10/0x10 [ 622.931641][T16232] ? exit_mm_release+0x19/0x30 [ 622.931668][T16232] ? lock_release+0x24d/0x310 [ 622.931710][T16232] do_futex+0x2b2/0x440 [ 622.931737][T16232] ? __pfx_do_futex+0x10/0x10 [ 622.931763][T16232] ? lock_release+0x24d/0x310 [ 622.931806][T16232] mm_release+0x24a/0x2f0 [ 622.931856][T16232] do_exit+0x707/0x2ae0 [ 622.931894][T16232] ? __pfx_do_exit+0x10/0x10 [ 622.931930][T16232] ? do_raw_spin_lock+0x128/0x260 [ 622.931957][T16232] ? get_signal+0x7e0/0x21e0 [ 622.931987][T16232] do_group_exit+0xd5/0x2a0 [ 622.932026][T16232] get_signal+0x1ec7/0x21e0 [ 622.932059][T16232] ? __pfx_get_signal+0x10/0x10 [ 622.932089][T16232] ? do_futex+0x190/0x440 [ 622.932117][T16232] arch_do_signal_or_restart+0x91/0x7a0 [ 622.932165][T16232] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 622.932219][T16232] ? rcu_is_watching+0x12/0xc0 [ 622.932254][T16232] exit_to_user_mode_loop+0x139/0x6f0 [ 622.932306][T16232] ? rcu_is_watching+0x12/0xc0 [ 622.932369][T16232] do_syscall_64+0x652/0x840 [ 622.932404][T16232] ? clear_bhb_loop+0x40/0x90 [ 622.932430][T16232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.932453][T16232] RIP: 0033:0x7eff7e79ce59 [ 622.932471][T16232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.932495][T16232] RSP: 002b:00007eff7f6a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 622.932525][T16232] RAX: fffffffffffffe00 RBX: 00007eff7ea16098 RCX: 00007eff7e79ce59 [ 622.932540][T16232] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007eff7ea16098 [ 622.932554][T16232] RBP: 00007eff7ea16090 R08: 0000000000000000 R09: 0000000000000000 [ 622.932568][T16232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.932582][T16232] R13: 00007eff7ea16128 R14: 00007fffc4f50580 R15: 00007fffc4f50668 [ 622.932604][T16232] [ 623.207900][T16078] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.232934][T16078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 623.243339][T16078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 623.274248][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.281482][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.337308][ T5629] Bluetooth: hci2: command tx timeout [ 623.382136][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.389311][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.574583][T16245] random: crng reseeded on system resumption [ 623.644321][T16245] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 623.715311][ T5629] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 623.718755][T16247] ima: policy update failed [ 623.724254][ T5629] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 623.736957][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 623.755865][ T5629] Bluetooth: hci0: Dropping invalid advertising data [ 623.765947][ T5629] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 623.795877][ T29] audit: type=1802 audit(4294969529.565:15): pid=16247 uid=8 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2357" res=0 errno=0 [ 624.181544][T16268] FAULT_INJECTION: forcing a failure. [ 624.181544][T16268] name failslab, interval 1, probability 0, space 0, times 0 [ 624.209820][T16268] CPU: 0 UID: 0 PID: 16268 Comm: syz.2.2359 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.209871][T16268] Tainted: [L]=SOFTLOCKUP [ 624.209883][T16268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.209903][T16268] Call Trace: [ 624.209913][T16268] [ 624.209923][T16268] dump_stack_lvl+0x100/0x190 [ 624.209964][T16268] should_fail_ex.cold+0x5/0xa [ 624.210000][T16268] ? __kmalloc_noprof+0xba/0x840 [ 624.210049][T16268] ? sk_prot_alloc+0x10b/0x2a0 [ 624.210079][T16268] should_failslab+0xc2/0x120 [ 624.210116][T16268] __kmalloc_noprof+0xe0/0x840 [ 624.210166][T16268] sk_prot_alloc+0x10b/0x2a0 [ 624.210197][T16268] sk_alloc+0x36/0xe80 [ 624.210239][T16268] xsk_create+0x117/0x760 [ 624.210398][T16268] __sock_create+0x339/0x860 [ 624.210436][T16268] __sys_socket+0x14d/0x260 [ 624.210472][T16268] ? __pfx___sys_socket+0x10/0x10 [ 624.210513][T16268] __x64_sys_socket+0x72/0xb0 [ 624.210549][T16268] do_syscall_64+0x115/0x840 [ 624.210583][T16268] ? clear_bhb_loop+0x40/0x90 [ 624.210618][T16268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.210651][T16268] RIP: 0033:0x7fd0d1d9ce59 [ 624.210676][T16268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.210710][T16268] RSP: 002b:00007fd0cfff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 624.210743][T16268] RAX: ffffffffffffffda RBX: 00007fd0d2015fa0 RCX: 00007fd0d1d9ce59 [ 624.210765][T16268] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 624.210791][T16268] RBP: 00007fd0d1e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 624.210812][T16268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.210832][T16268] R13: 00007fd0d2016038 R14: 00007fd0d2015fa0 R15: 00007ffc9e20ac78 [ 624.210864][T16268] [ 624.450728][T16273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2360'. [ 624.676259][T16078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.687638][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.694309][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.716414][T13301] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 625.006881][T16078] veth0_vlan: entered promiscuous mode [ 625.104724][T16078] veth1_vlan: entered promiscuous mode [ 625.202283][T16078] veth0_macvtap: entered promiscuous mode [ 625.218999][T16078] veth1_macvtap: entered promiscuous mode [ 625.249817][T16078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.397368][ T5629] Bluetooth: hci2: command tx timeout [ 625.432747][T16078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.547268][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.586500][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.649864][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.673095][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.711759][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 626.076503][ T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.098248][ T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.181486][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.209205][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.708374][T13301] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 627.702599][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 628.697955][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 629.372154][T16385] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 629.693360][T13301] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 630.688868][T13301] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 630.803024][T16394] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 630.846006][T16394] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 630.872150][T16394] pci 0000:00:01.3: PCI INT A: no GSI [ 631.614235][T16414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2382'. [ 631.663285][T16419] FAULT_INJECTION: forcing a failure. [ 631.663285][T16419] name failslab, interval 1, probability 0, space 0, times 0 [ 631.684152][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 631.783279][T16421] random: crng reseeded on system resumption [ 631.817812][T16419] CPU: 1 UID: 0 PID: 16419 Comm: syz.2.2383 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.817860][T16419] Tainted: [L]=SOFTLOCKUP [ 631.817872][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 631.817892][T16419] Call Trace: [ 631.817902][T16419] [ 631.817914][T16419] dump_stack_lvl+0x100/0x190 [ 631.817953][T16419] should_fail_ex.cold+0x5/0xa [ 631.817987][T16419] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 631.818023][T16419] should_failslab+0xc2/0x120 [ 631.818062][T16419] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 631.818094][T16419] ? __d_alloc+0x35/0xa50 [ 631.818148][T16419] __d_alloc+0x35/0xa50 [ 631.818195][T16419] ? step_into_slowpath+0x98b/0xf90 [ 631.818247][T16419] d_alloc_parallel+0x105/0x14b0 [ 631.818284][T16419] ? lockref_get_not_dead+0x6a/0x80 [ 631.818329][T16419] ? lock_release+0x24d/0x310 [ 631.818377][T16419] ? rcu_is_watching+0x12/0xc0 [ 631.818411][T16419] ? __pfx_d_alloc_parallel+0x10/0x10 [ 631.818447][T16419] ? rcu_is_watching+0x12/0xc0 [ 631.818480][T16419] ? __d_lookup+0x25c/0x4a0 [ 631.818514][T16419] ? lock_release+0x24d/0x310 [ 631.818560][T16419] ? __d_lookup+0x266/0x4a0 [ 631.818600][T16419] path_openat+0x271c/0x4280 [ 631.818652][T16419] ? __pfx_path_openat+0x10/0x10 [ 631.818702][T16419] do_file_open+0x20e/0x430 [ 631.818751][T16419] ? __pfx_do_file_open+0x10/0x10 [ 631.818810][T16419] ? alloc_fd+0x471/0x7a0 [ 631.818856][T16419] ? do_getname+0x191/0x390 [ 631.818888][T16419] do_sys_openat2+0x10f/0x1e0 [ 631.818921][T16419] ? __pfx_do_sys_openat2+0x10/0x10 [ 631.818955][T16419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 631.818998][T16419] __x64_sys_openat+0x12d/0x210 [ 631.819033][T16419] ? __pfx___x64_sys_openat+0x10/0x10 [ 631.819076][T16419] ? rcu_is_watching+0x12/0xc0 [ 631.819111][T16419] do_syscall_64+0x115/0x840 [ 631.819144][T16419] ? clear_bhb_loop+0x40/0x90 [ 631.819181][T16419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.819221][T16419] RIP: 0033:0x7fd0d1d9ce59 [ 631.819246][T16419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.819277][T16419] RSP: 002b:00007fd0cffb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 631.819307][T16419] RAX: ffffffffffffffda RBX: 00007fd0d2016180 RCX: 00007fd0d1d9ce59 [ 631.819328][T16419] RDX: 0000000000000140 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 631.819346][T16419] RBP: 00007fd0d1e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 631.819363][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.819380][T16419] R13: 00007fd0d2016218 R14: 00007fd0d2016180 R15: 00007ffc9e20ac78 [ 631.819406][T16419] [ 632.649946][T16434] netlink: zone id is out of range [ 632.657331][T16434] netlink: zone id is out of range [ 632.667367][T16434] netlink: zone id is out of range [ 632.679745][T13301] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 632.688738][T16434] netlink: zone id is out of range [ 632.697933][T16434] netlink: zone id is out of range [ 632.711413][T16434] netlink: zone id is out of range [ 632.720738][T16434] netlink: zone id is out of range [ 632.733492][T16434] netlink: zone id is out of range [ 632.754143][T16434] netlink: zone id is out of range [ 632.762765][T16434] netlink: zone id is out of range [ 632.992947][T16444] FAULT_INJECTION: forcing a failure. [ 632.992947][T16444] name failslab, interval 1, probability 0, space 0, times 0 [ 633.018195][T16444] CPU: 1 UID: 0 PID: 16444 Comm: syz.4.2389 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.018250][T16444] Tainted: [L]=SOFTLOCKUP [ 633.018262][T16444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 633.018282][T16444] Call Trace: [ 633.018293][T16444] [ 633.018304][T16444] dump_stack_lvl+0x100/0x190 [ 633.018345][T16444] should_fail_ex.cold+0x5/0xa [ 633.018388][T16444] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 633.018456][T16444] should_failslab+0xc2/0x120 [ 633.018508][T16444] __kmalloc_cache_noprof+0x7a/0x6e0 [ 633.018570][T16444] ? percpu_ref_init+0xec/0x3f0 [ 633.018615][T16444] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 633.018672][T16444] percpu_ref_init+0xec/0x3f0 [ 633.018714][T16444] io_uring_setup.cold+0x2be/0x1c2e [ 633.018762][T16444] ? rcu_is_watching+0x12/0xc0 [ 633.018795][T16444] ? __pfx_io_uring_setup+0x10/0x10 [ 633.018829][T16444] ? do_futex+0x190/0x440 [ 633.018857][T16444] ? __pfx_do_futex+0x10/0x10 [ 633.018892][T16444] ? xfd_validate_state+0x129/0x190 [ 633.018927][T16444] __x64_sys_io_uring_setup+0xc2/0x170 [ 633.018958][T16444] do_syscall_64+0x115/0x840 [ 633.018988][T16444] ? clear_bhb_loop+0x40/0x90 [ 633.019022][T16444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.019052][T16444] RIP: 0033:0x7eff7e79ce59 [ 633.019086][T16444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.019114][T16444] RSP: 002b:00007eff7f6a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 633.019141][T16444] RAX: ffffffffffffffda RBX: 00007eff7ea16090 RCX: 00007eff7e79ce59 [ 633.019160][T16444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 633.019177][T16444] RBP: 00007eff7e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 633.019193][T16444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.019209][T16444] R13: 00007eff7ea16128 R14: 00007eff7ea16090 R15: 00007fffc4f50668 [ 633.019235][T16444] [ 633.590769][T16451] FAULT_INJECTION: forcing a failure. [ 633.590769][T16451] name failslab, interval 1, probability 0, space 0, times 0 [ 633.654225][T16451] CPU: 1 UID: 0 PID: 16451 Comm: syz.0.2391 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.654281][T16451] Tainted: [L]=SOFTLOCKUP [ 633.654294][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 633.654315][T16451] Call Trace: [ 633.654326][T16451] [ 633.654338][T16451] dump_stack_lvl+0x100/0x190 [ 633.654378][T16451] should_fail_ex.cold+0x5/0xa [ 633.654413][T16451] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 633.654450][T16451] should_failslab+0xc2/0x120 [ 633.654489][T16451] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 633.654522][T16451] ? alloc_inode+0x68/0x250 [ 633.654556][T16451] ? simple_start_creating+0xb0/0x110 [ 633.654603][T16451] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 633.654637][T16451] alloc_inode+0x68/0x250 [ 633.654669][T16451] new_inode+0x22/0x1c0 [ 633.654704][T16451] __debugfs_create_file+0x105/0x4f0 [ 633.654740][T16451] debugfs_create_file_full+0x41/0x60 [ 633.654776][T16451] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 633.654809][T16451] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 633.654880][T16451] ? lockdep_init_map_type+0x5c/0x250 [ 633.654932][T16451] preinit_net.part.0+0x43b/0x920 [ 633.654981][T16451] copy_net_ns+0x339/0x7c0 [ 633.655011][T16451] create_new_namespaces+0x3ea/0xac0 [ 633.655113][T16451] unshare_nsproxy_namespaces+0xf2/0x220 [ 633.655171][T16451] ksys_unshare+0x438/0xab0 [ 633.655210][T16451] ? __pfx_ksys_unshare+0x10/0x10 [ 633.655254][T16451] __x64_sys_unshare+0x31/0x40 [ 633.655299][T16451] do_syscall_64+0x115/0x840 [ 633.655336][T16451] ? clear_bhb_loop+0x40/0x90 [ 633.655380][T16451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.655414][T16451] RIP: 0033:0x7f271839ce59 [ 633.655440][T16451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.655473][T16451] RSP: 002b:00007f27192d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 633.655507][T16451] RAX: ffffffffffffffda RBX: 00007f2718616090 RCX: 00007f271839ce59 [ 633.655529][T16451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 633.655550][T16451] RBP: 00007f2718432e6f R08: 0000000000000000 R09: 0000000000000000 [ 633.655570][T16451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.655591][T16451] R13: 00007f2718616128 R14: 00007f2718616090 R15: 00007ffd0ef97208 [ 633.655624][T16451] [ 633.667965][T16418] Process accounting resumed [ 633.901677][T16451] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888059495178' [ 634.185110][ T29] audit: type=1800 audit(4294969540.003:16): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2395" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 634.670565][T13301] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 635.371572][T16481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 635.388207][T16481] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 635.437491][T16481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 635.456536][T16481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 635.486216][T16481] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 635.521600][T16481] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 635.542509][T16481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 635.551844][T16481] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 635.586302][T16481] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 635.666012][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 636.174149][ T29] audit: type=1326 audit(4294969542.002:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16490 comm="syz.0.2401" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f271839ce59 code=0x0 [ 636.517499][T16512] ceph: Failed to parse sending metrics switch value 'P^' [ 636.661374][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 637.423428][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 637.477933][T14577] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6 [ 637.501637][T14577] Bluetooth: hci1: command 0x0c1a tx timeout [ 637.501644][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 637.582539][T14577] Bluetooth: hci2: command 0x0c1a tx timeout [ 637.656794][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 637.856483][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 637.865980][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 637.874942][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 637.883979][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 637.893289][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 638.027031][T16532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2411'. [ 638.653497][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 639.001459][T16537] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.014128][T16537] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.026821][T16537] bridge_slave_0: entered allmulticast mode [ 639.038414][T16537] bridge_slave_0: entered promiscuous mode [ 639.108888][T16537] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.124310][T16537] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.131669][T16537] bridge_slave_1: entered allmulticast mode [ 639.177297][T16537] bridge_slave_1: entered promiscuous mode [ 639.307896][T16537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.346111][T16537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.432517][T16537] team0: Port device team_slave_0 added [ 639.469476][T16537] team0: Port device team_slave_1 added [ 639.572977][T14577] Bluetooth: hci1: command 0x0c1a tx timeout [ 639.647653][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 639.651923][T14577] Bluetooth: hci2: command 0x0c1a tx timeout [ 639.684689][T16579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2418'. [ 639.685930][T16537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.700862][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.726950][T16537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.739127][T16537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.746196][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.772558][T16537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.849280][T16579] bond0: (slave bond_slave_0): Releasing backup interface [ 639.947811][T16537] hsr_slave_0: entered promiscuous mode [ 639.969004][T16537] hsr_slave_1: entered promiscuous mode [ 639.975843][T14577] Bluetooth: hci3: command tx timeout [ 639.984773][T16537] debugfs: 'hsr0' already exists in 'hsr' [ 640.000172][T16537] Cannot create hsr debugfs directory [ 640.379450][T16537] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.548534][T16537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.638294][T16597] bond0: invalid ARP target specified [ 640.643286][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 640.824907][T16537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.966374][T16537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.070481][T16537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.638495][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 641.652559][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 641.701825][T16616] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 641.722737][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 642.040763][ T5629] Bluetooth: hci3: command tx timeout [ 642.633890][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 643.629330][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 643.670523][T16621] kexec: Could not allocate control_code_buffer [ 644.111395][ T5629] Bluetooth: hci3: command tx timeout [ 644.446418][T16653] FAULT_INJECTION: forcing a failure. [ 644.446418][T16653] name failslab, interval 1, probability 0, space 0, times 0 [ 644.469847][T16653] CPU: 1 UID: 0 PID: 16653 Comm: syz.4.2432 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.469898][T16653] Tainted: [L]=SOFTLOCKUP [ 644.469910][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 644.469931][T16653] Call Trace: [ 644.469941][T16653] [ 644.469953][T16653] dump_stack_lvl+0x100/0x190 [ 644.469993][T16653] should_fail_ex.cold+0x5/0xa [ 644.470027][T16653] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 644.470061][T16653] should_failslab+0xc2/0x120 [ 644.470099][T16653] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 644.470130][T16653] ? alloc_empty_file+0x5b/0x1c0 [ 644.470161][T16653] ? lock_release+0x24d/0x310 [ 644.470208][T16653] alloc_empty_file+0x5b/0x1c0 [ 644.470241][T16653] alloc_file_pseudo+0x183/0x290 [ 644.470273][T16653] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 644.470309][T16653] ? do_raw_spin_unlock+0x145/0x1e0 [ 644.470343][T16653] __anon_inode_getfile+0xe8/0x280 [ 644.470378][T16653] anon_inode_getfile_fmode+0x37/0xa0 [ 644.470413][T16653] do_eventfd+0x159/0x2b0 [ 644.470453][T16653] __x64_sys_eventfd+0x32/0x50 [ 644.470495][T16653] do_syscall_64+0x115/0x840 [ 644.470530][T16653] ? clear_bhb_loop+0x40/0x90 [ 644.470567][T16653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.470600][T16653] RIP: 0033:0x7eff7e79ce59 [ 644.470626][T16653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.470657][T16653] RSP: 002b:00007eff7f6a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 644.470689][T16653] RAX: ffffffffffffffda RBX: 00007eff7ea16090 RCX: 00007eff7e79ce59 [ 644.470715][T16653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 644.470734][T16653] RBP: 00007eff7e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 644.470762][T16653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.470782][T16653] R13: 00007eff7ea16128 R14: 00007eff7ea16090 R15: 00007fffc4f50668 [ 644.470812][T16653] [ 645.620167][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 646.182655][ T5629] Bluetooth: hci3: command tx timeout [ 646.615549][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 646.927814][T16686] random: crng reseeded on system resumption [ 647.610918][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 648.249325][T16705] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 648.606447][T13301] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 649.601920][T13301] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 650.053426][T16733] netlink: 146 bytes leftover after parsing attributes in process `syz.4.2453'. [ 650.284013][T16743] block2mtd: error: cannot open device € [ 650.597255][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 651.592731][T13301] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 651.602528][T16737] kexec: Could not allocate control_code_buffer [ 652.089198][T16751] Process accounting paused [ 652.141573][T16764] Unable to find swap-space signature [ 652.371284][ T29] audit: type=1800 audit(4294969558.267:18): pid=16776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2462" name="dbroot" dev="configfs" ino=72624 res=0 errno=0 [ 652.588150][T13301] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 652.753933][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2466'. [ 653.565156][T16801] FAULT_INJECTION: forcing a failure. [ 653.565156][T16801] name failslab, interval 1, probability 0, space 0, times 0 [ 653.580491][T16801] CPU: 0 UID: 0 PID: 16801 Comm: syz.4.2467 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.580557][T16801] Tainted: [L]=SOFTLOCKUP [ 653.580569][T16801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 653.580589][T16801] Call Trace: [ 653.580599][T16801] [ 653.580610][T16801] dump_stack_lvl+0x100/0x190 [ 653.580649][T16801] should_fail_ex.cold+0x5/0xa [ 653.580685][T16801] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 653.580722][T16801] should_failslab+0xc2/0x120 [ 653.580759][T16801] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 653.580792][T16801] ? __d_alloc+0x35/0xa50 [ 653.580844][T16801] __d_alloc+0x35/0xa50 [ 653.580895][T16801] d_alloc+0x4a/0x1e0 [ 653.580942][T16801] lookup_one_qstr_excl+0x171/0x250 [ 653.580978][T16801] start_dirop+0x59/0xb0 [ 653.581020][T16801] simple_start_creating+0xf9/0x110 [ 653.581063][T16801] ? __pfx_simple_start_creating+0x10/0x10 [ 653.581109][T16801] ? mntput+0x70/0xa0 [ 653.581157][T16801] ? simple_pin_fs+0xa3/0x190 [ 653.581199][T16801] debugfs_start_creating.part.0+0x82/0x170 [ 653.581236][T16801] __debugfs_create_file+0xb3/0x4f0 [ 653.581272][T16801] debugfs_create_file_full+0x41/0x60 [ 653.581309][T16801] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 653.581341][T16801] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 653.581393][T16801] ? ida_alloc_range+0x70d/0x830 [ 653.581447][T16801] ? lockdep_init_map_type+0x5c/0x250 [ 653.581500][T16801] preinit_net.part.0+0x252/0x920 [ 653.581549][T16801] copy_net_ns+0x339/0x7c0 [ 653.581580][T16801] create_new_namespaces+0x3ea/0xac0 [ 653.581638][T16801] unshare_nsproxy_namespaces+0xf2/0x220 [ 653.581694][T16801] ksys_unshare+0x438/0xab0 [ 653.581748][T16801] ? __pfx_ksys_unshare+0x10/0x10 [ 653.581793][T16801] __x64_sys_unshare+0x31/0x40 [ 653.581831][T16801] do_syscall_64+0x115/0x840 [ 653.581878][T16801] ? clear_bhb_loop+0x40/0x90 [ 653.581916][T16801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.581969][T16801] RIP: 0033:0x7eff7e79ce59 [ 653.581999][T16801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.582036][T16801] RSP: 002b:00007eff7f6a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 653.582070][T16801] RAX: ffffffffffffffda RBX: 00007eff7ea16090 RCX: 00007eff7e79ce59 [ 653.582092][T16801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 653.582112][T16801] RBP: 00007eff7e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 653.582141][T16801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.582161][T16801] R13: 00007eff7ea16128 R14: 00007eff7ea16090 R15: 00007fffc4f50668 [ 653.582195][T16801] [ 653.583529][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 654.130112][T16807] [U] ^C [ 654.431314][T16810] FAULT_INJECTION: forcing a failure. [ 654.431314][T16810] name failslab, interval 1, probability 0, space 0, times 0 [ 654.444178][T16810] CPU: 0 UID: 0 PID: 16810 Comm: syz.4.2470 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.444227][T16810] Tainted: [L]=SOFTLOCKUP [ 654.444238][T16810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 654.444257][T16810] Call Trace: [ 654.444266][T16810] [ 654.444278][T16810] dump_stack_lvl+0x100/0x190 [ 654.444314][T16810] should_fail_ex.cold+0x5/0xa [ 654.444347][T16810] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 654.444380][T16810] should_failslab+0xc2/0x120 [ 654.444415][T16810] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 654.444444][T16810] ? do_getname+0x35/0x390 [ 654.444478][T16810] do_getname+0x35/0x390 [ 654.444510][T16810] do_sys_openat2+0xc7/0x1e0 [ 654.444542][T16810] ? __pfx_do_sys_openat2+0x10/0x10 [ 654.444575][T16810] ? ksys_semctl.constprop.0+0x14e/0x2e0 [ 654.444618][T16810] __x64_sys_openat+0x12d/0x210 [ 654.444652][T16810] ? __pfx___x64_sys_openat+0x10/0x10 [ 654.444691][T16810] ? rcu_is_watching+0x12/0xc0 [ 654.444727][T16810] do_syscall_64+0x115/0x840 [ 654.444759][T16810] ? clear_bhb_loop+0x40/0x90 [ 654.444793][T16810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.444825][T16810] RIP: 0033:0x7eff7e79ce59 [ 654.444849][T16810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.444881][T16810] RSP: 002b:00007eff7f6c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 654.444912][T16810] RAX: ffffffffffffffda RBX: 00007eff7ea15fa0 RCX: 00007eff7e79ce59 [ 654.444933][T16810] RDX: 000000000010b942 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 654.444953][T16810] RBP: 00007eff7e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 654.444972][T16810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.444990][T16810] R13: 00007eff7ea16038 R14: 00007eff7ea15fa0 R15: 00007fffc4f50668 [ 654.445019][T16810] [ 655.352217][T14577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 655.362082][T14577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 655.372318][T14577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 655.382755][T14577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 655.391519][T14577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 655.574989][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 656.324266][T16832] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.344810][T16832] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.361108][T16832] bridge_slave_0: entered allmulticast mode [ 656.377949][T16832] bridge_slave_0: entered promiscuous mode [ 656.403743][T16832] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.421146][T16832] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.437618][T16832] bridge_slave_1: entered allmulticast mode [ 656.455031][T16832] bridge_slave_1: entered promiscuous mode [ 656.492106][T16832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.516259][T16832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.569692][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 656.622390][T16832] team0: Port device team_slave_0 added [ 656.642007][T16832] team0: Port device team_slave_1 added [ 656.678325][T16832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.685508][T16832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.715353][T16832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.734690][T16832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.741780][T16832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.768681][T16832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.825093][T16832] hsr_slave_0: entered promiscuous mode [ 656.831467][T16832] hsr_slave_1: entered promiscuous mode [ 656.842724][T16832] debugfs: 'hsr0' already exists in 'hsr' [ 656.848503][T16832] Cannot create hsr debugfs directory [ 657.409953][ T5629] Bluetooth: hci0: command tx timeout [ 657.565234][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 658.560518][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 658.769161][T16895] FAULT_INJECTION: forcing a failure. [ 658.769161][T16895] name failslab, interval 1, probability 0, space 0, times 0 [ 658.783148][T16895] CPU: 1 UID: 0 PID: 16895 Comm: syz.3.2487 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.783202][T16895] Tainted: [L]=SOFTLOCKUP [ 658.783215][T16895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 658.783235][T16895] Call Trace: [ 658.783246][T16895] [ 658.783258][T16895] dump_stack_lvl+0x100/0x190 [ 658.783302][T16895] should_fail_ex.cold+0x5/0xa [ 658.783340][T16895] ? fs_reclaim_acquire+0x70/0x100 [ 658.783383][T16895] should_failslab+0xc2/0x120 [ 658.783421][T16895] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 658.783451][T16895] ? security_inode_alloc+0x3b/0x2c0 [ 658.783492][T16895] ? lockdep_init_map_type+0x5c/0x250 [ 658.783544][T16895] security_inode_alloc+0x3b/0x2c0 [ 658.783583][T16895] inode_init_always_gfp+0xc77/0xfb0 [ 658.783633][T16895] alloc_inode+0x8e/0x250 [ 658.783667][T16895] sock_alloc+0x44/0x280 [ 658.783725][T16895] ? security_socket_create+0x7f/0x250 [ 658.783776][T16895] sock_create_lite+0x82/0x120 [ 658.783825][T16895] __netlink_kernel_create+0xbd/0x750 [ 658.783861][T16895] ? __pfx___netlink_kernel_create+0x10/0x10 [ 658.783901][T16895] uevent_net_init+0xf8/0x330 [ 658.783950][T16895] ? __pfx_uevent_net_init+0x10/0x10 [ 658.783998][T16895] ? __pfx_uevent_net_rcv+0x10/0x10 [ 658.784048][T16895] ? __kmalloc_noprof+0x321/0x840 [ 658.784114][T16895] ? __pfx_uevent_net_init+0x10/0x10 [ 658.784161][T16895] ops_init+0x1e2/0x5f0 [ 658.784209][T16895] setup_net+0x118/0x3a0 [ 658.784255][T16895] ? __pfx_setup_net+0x10/0x10 [ 658.784302][T16895] ? mutex_init_lockdep+0xf1/0x120 [ 658.784356][T16895] copy_net_ns+0x46f/0x7c0 [ 658.784385][T16895] create_new_namespaces+0x3ea/0xac0 [ 658.784442][T16895] unshare_nsproxy_namespaces+0xf2/0x220 [ 658.784495][T16895] ksys_unshare+0x438/0xab0 [ 658.784530][T16895] ? __pfx_ksys_unshare+0x10/0x10 [ 658.784574][T16895] __x64_sys_unshare+0x31/0x40 [ 658.784609][T16895] do_syscall_64+0x115/0x840 [ 658.784655][T16895] ? clear_bhb_loop+0x40/0x90 [ 658.784690][T16895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.784731][T16895] RIP: 0033:0x7f6b3699ce59 [ 658.784755][T16895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.784789][T16895] RSP: 002b:00007f6b377e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 658.784822][T16895] RAX: ffffffffffffffda RBX: 00007f6b36c15fa0 RCX: 00007f6b3699ce59 [ 658.784844][T16895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 658.784865][T16895] RBP: 00007f6b36a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 658.784885][T16895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.784905][T16895] R13: 00007f6b36c16038 R14: 00007f6b36c15fa0 R15: 00007ffd1beb2bc8 [ 658.784936][T16895] [ 659.059217][T16895] kobject_uevent: unable to create netlink socket! [ 659.480390][ T5629] Bluetooth: hci0: command tx timeout [ 659.556090][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 659.591626][T16905] sctp: [Deprecated]: syz.4.2490 (pid 16905) Use of int in maxseg socket option. [ 659.591626][T16905] Use struct sctp_assoc_value instead [ 660.079222][T16909] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2491'. [ 660.551474][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 660.742857][T16921] vivid-011: ================= START STATUS ================= [ 660.767709][T16921] vivid-011: Radio HW Seek Mode: Bounded [ 660.774857][T16921] vivid-011: Radio Programmable HW Seek: false [ 660.789819][T16921] vivid-011: RDS Rx I/O Mode: Block I/O [ 660.806411][T16921] vivid-011: Generate RBDS Instead of RDS: false [ 660.823835][T16921] vivid-011: RDS Reception: true [ 660.840008][T16921] vivid-011: RDS Program Type: 0 inactive [ 660.877914][T16921] vivid-011: RDS PS Name: inactive [ 660.883258][T16921] vivid-011: RDS Radio Text: inactive [ 660.888860][T16921] vivid-011: RDS Traffic Announcement: false inactive [ 660.895731][T16921] vivid-011: RDS Traffic Program: false inactive [ 660.902150][T16921] vivid-011: RDS Music: false inactive [ 660.907749][T16921] vivid-011: ================== END STATUS ================== [ 660.975015][T16936] random: crng reseeded on system resumption [ 661.237424][T16939] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.2497: iget: checksum invalid [ 661.249173][T16939] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 661.261926][T16939] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.2497: iget: checksum invalid [ 661.273780][T16939] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 661.288622][T16939] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.2497: iget: checksum invalid [ 661.300250][T16939] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 661.311391][T16939] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.2497: iget: checksum invalid [ 661.333344][T16939] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 661.351039][T16939] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 661.361419][T16939] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 661.546971][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 661.556147][ T5629] Bluetooth: hci0: command tx timeout [ 662.545093][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 663.537807][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 663.621537][ T5629] Bluetooth: hci0: command tx timeout [ 664.299180][T16960] sctp: [Deprecated]: syz.3.2500 (pid 16960) Use of int in maxseg socket option. [ 664.299180][T16960] Use struct sctp_assoc_value instead [ 664.533075][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 665.550005][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 666.070977][T16980] block2mtd: error: cannot open device  [ 666.484911][T16987] block2mtd: error: cannot open device [ 666.523999][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 666.580517][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'. [ 667.469429][T17007] vivid-007: ================= START STATUS ================= [ 667.477192][T17007] vivid-007: Generate PTS: true [ 667.482152][T17007] vivid-007: Generate SCR: true [ 667.487574][T17007] tpg source WxH: 320x240 (Y'CbCr) [ 667.492844][T17007] tpg field: 1 [ 667.496382][T17007] tpg crop: (0,0)/320x240 [ 667.501617][T17007] tpg compose: (0,0)/320x240 [ 667.506474][T17007] tpg colorspace: 8 [ 667.510340][T17007] tpg transfer function: 0/0 [ 667.515082][T17007] tpg Y'CbCr encoding: 0/0 [ 667.519987][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 667.521205][T17007] tpg quantization: 0/0 [ 667.534433][T17007] tpg RGB range: 0/2 [ 667.538435][T17007] vivid-007: ================== END STATUS ================== [ 667.976477][T17017] FAULT_INJECTION: forcing a failure. [ 667.976477][T17017] name failslab, interval 1, probability 0, space 0, times 0 [ 668.000976][T17017] CPU: 0 UID: 0 PID: 17017 Comm: syz.4.2515 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.001039][T17017] Tainted: [L]=SOFTLOCKUP [ 668.001050][T17017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 668.001071][T17017] Call Trace: [ 668.001083][T17017] [ 668.001096][T17017] dump_stack_lvl+0x100/0x190 [ 668.001139][T17017] should_fail_ex.cold+0x5/0xa [ 668.001175][T17017] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 668.001214][T17017] should_failslab+0xc2/0x120 [ 668.001252][T17017] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 668.001286][T17017] ? __d_alloc+0x35/0xa50 [ 668.001341][T17017] __d_alloc+0x35/0xa50 [ 668.001391][T17017] d_alloc+0x4a/0x1e0 [ 668.001440][T17017] lookup_one_qstr_excl+0x171/0x250 [ 668.001477][T17017] start_dirop+0x59/0xb0 [ 668.001520][T17017] simple_start_creating+0xf9/0x110 [ 668.001567][T17017] ? __pfx_simple_start_creating+0x10/0x10 [ 668.001615][T17017] ? mntput+0x70/0xa0 [ 668.001664][T17017] ? simple_pin_fs+0xa3/0x190 [ 668.001708][T17017] debugfs_start_creating.part.0+0x82/0x170 [ 668.001746][T17017] __debugfs_create_file+0xb3/0x4f0 [ 668.001783][T17017] debugfs_create_file_full+0x41/0x60 [ 668.001819][T17017] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 668.001854][T17017] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 668.001909][T17017] ? ida_alloc_range+0x70d/0x830 [ 668.001967][T17017] ? lockdep_init_map_type+0x5c/0x250 [ 668.002021][T17017] preinit_net.part.0+0x252/0x920 [ 668.002073][T17017] copy_net_ns+0x339/0x7c0 [ 668.002104][T17017] create_new_namespaces+0x3ea/0xac0 [ 668.002165][T17017] unshare_nsproxy_namespaces+0xf2/0x220 [ 668.002220][T17017] ksys_unshare+0x438/0xab0 [ 668.002257][T17017] ? __pfx_ksys_unshare+0x10/0x10 [ 668.002302][T17017] __x64_sys_unshare+0x31/0x40 [ 668.002340][T17017] do_syscall_64+0x115/0x840 [ 668.002375][T17017] ? clear_bhb_loop+0x40/0x90 [ 668.002413][T17017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.002447][T17017] RIP: 0033:0x7eff7e79ce59 [ 668.002472][T17017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.002505][T17017] RSP: 002b:00007eff7f6a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 668.002536][T17017] RAX: ffffffffffffffda RBX: 00007eff7ea16090 RCX: 00007eff7e79ce59 [ 668.002557][T17017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 668.002578][T17017] RBP: 00007eff7e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 668.002598][T17017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.002618][T17017] R13: 00007eff7ea16128 R14: 00007eff7ea16090 R15: 00007fffc4f50668 [ 668.002660][T17017] [ 668.514725][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 669.422069][T17036] block2mtd: error: cannot open device  [ 669.510387][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 670.496884][ T29] audit: type=1326 audit(4294969576.480:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17040 comm="syz.3.2522" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b3699ce59 code=0x0 [ 670.521425][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 671.501122][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 672.397957][T17061] kexec: Could not allocate control_code_buffer [ 672.496564][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 672.542278][T17064] block2mtd: error: cannot open device [ 672.963017][T17077] FAULT_INJECTION: forcing a failure. [ 672.963017][T17077] name failslab, interval 1, probability 0, space 0, times 0 [ 672.975898][T17077] CPU: 1 UID: 0 PID: 17077 Comm: syz.3.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.975947][T17077] Tainted: [L]=SOFTLOCKUP [ 672.975958][T17077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 672.975977][T17077] Call Trace: [ 672.975987][T17077] [ 672.975998][T17077] dump_stack_lvl+0x100/0x190 [ 672.976035][T17077] should_fail_ex.cold+0x5/0xa [ 672.976069][T17077] ? __kmalloc_noprof+0xba/0x840 [ 672.976117][T17077] ? constrain_params_by_rules+0x175/0xd20 [ 672.976231][T17077] should_failslab+0xc2/0x120 [ 672.976271][T17077] __kmalloc_noprof+0xe0/0x840 [ 672.976318][T17077] ? trace_irq_enable.constprop.0+0x122/0x160 [ 672.976371][T17077] constrain_params_by_rules+0x175/0xd20 [ 672.976405][T17077] ? kfree+0x22b/0x6c0 [ 672.976450][T17077] ? constrain_params_by_rules+0xa88/0xd20 [ 672.976487][T17077] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 672.976526][T17077] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 672.976560][T17077] ? kfree+0x22b/0x6c0 [ 672.976609][T17077] ? snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 672.976663][T17077] ? snd_pcm_oss_ioctl+0x25aa/0x3790 [ 672.976735][T17077] ? snd_interval_refine+0x2d0/0x580 [ 672.976842][T17077] snd_pcm_hw_refine+0x82a/0xb40 [ 672.976880][T17077] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 672.976915][T17077] ? snd_pcm_hw_refine+0x35c/0xb40 [ 672.976978][T17077] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 672.977019][T17077] snd_pcm_hw_param_first+0x2b0/0x680 [ 672.977079][T17077] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 672.977128][T17077] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 672.977163][T17077] ? __pfx_rate_dst_frames+0x10/0x10 [ 672.977232][T17077] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 672.977275][T17077] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 672.977321][T17077] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 672.977358][T17077] ? __pfx___mutex_lock+0x10/0x10 [ 672.977396][T17077] ? rcu_is_watching+0x12/0xc0 [ 672.977438][T17077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 672.977478][T17077] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 672.977518][T17077] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 672.977554][T17077] ? hook_file_ioctl_common+0x140/0x440 [ 672.977600][T17077] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 672.977639][T17077] ? __fget_files+0x21f/0x3d0 [ 672.977688][T17077] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 672.977726][T17077] __x64_sys_ioctl+0x18e/0x210 [ 672.977777][T17077] do_syscall_64+0x115/0x840 [ 672.977812][T17077] ? clear_bhb_loop+0x40/0x90 [ 672.977868][T17077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.977900][T17077] RIP: 0033:0x7f6b3699ce59 [ 672.977927][T17077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.977960][T17077] RSP: 002b:00007f6b377e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 672.977992][T17077] RAX: ffffffffffffffda RBX: 00007f6b36c15fa0 RCX: 00007f6b3699ce59 [ 672.978014][T17077] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 672.978034][T17077] RBP: 00007f6b36a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 672.978053][T17077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.978073][T17077] R13: 00007f6b36c16038 R14: 00007f6b36c15fa0 R15: 00007ffd1beb2bc8 [ 672.978104][T17077] [ 673.491972][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 674.162242][T17087] binder: 17085:17087 ioctl 40046205 0 returned -22 [ 674.169857][T17087] binder: 17085:17087 ioctl c0306201 200000000000 returned -14 [ 674.488099][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 675.482720][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 676.478263][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 677.473613][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 677.682061][T17160] zswap: compressor not available [ 677.882858][T17167] block2mtd: error: cannot open device [ 678.469084][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 678.489150][T17177] block2mtd: error: cannot open device [ 679.464479][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 680.059164][T17203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2561'. [ 680.078685][T17203] bond0: (slave bond_slave_0): Releasing backup interface [ 680.461188][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 680.929185][T17221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2567'. [ 681.136463][T17227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2568'. [ 681.345146][T17234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2570'. [ 681.455312][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 681.590987][T17236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2571'. [ 682.450767][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 682.590556][T17236] Process accounting resumed [ 682.688982][T17248] FAULT_INJECTION: forcing a failure. [ 682.688982][T17248] name failslab, interval 1, probability 0, space 0, times 0 [ 682.702047][T17248] CPU: 0 UID: 0 PID: 17248 Comm: syz.4.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.702095][T17248] Tainted: [L]=SOFTLOCKUP [ 682.702106][T17248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 682.702130][T17248] Call Trace: [ 682.702144][T17248] [ 682.702155][T17248] dump_stack_lvl+0x100/0x190 [ 682.702233][T17248] should_fail_ex.cold+0x5/0xa [ 682.702283][T17248] ? fs_reclaim_acquire+0x70/0x100 [ 682.702339][T17248] ? tomoyo_encode2+0xfb/0x3c0 [ 682.702405][T17248] should_failslab+0xc2/0x120 [ 682.702461][T17248] __kmalloc_noprof+0xe0/0x840 [ 682.702508][T17248] ? d_absolute_path+0x136/0x1b0 [ 682.702576][T17248] tomoyo_encode2+0xfb/0x3c0 [ 682.702626][T17248] tomoyo_encode+0x29/0x50 [ 682.702671][T17248] tomoyo_realpath_from_path+0x18c/0x690 [ 682.702723][T17248] tomoyo_path_number_perm+0x23c/0x580 [ 682.702763][T17248] ? tomoyo_path_number_perm+0x22e/0x580 [ 682.702806][T17248] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 682.702854][T17248] ? preempt_count_add+0x76/0x150 [ 682.702924][T17248] ? rcu_is_watching+0x12/0xc0 [ 682.702966][T17248] ? __fget_files+0x215/0x3d0 [ 682.703008][T17248] ? hook_file_ioctl_common+0x140/0x440 [ 682.703063][T17248] ? lock_release+0x24d/0x310 [ 682.703109][T17248] ? __fget_files+0x21f/0x3d0 [ 682.703152][T17248] security_file_ioctl+0xd3/0x230 [ 682.703193][T17248] __x64_sys_ioctl+0xb7/0x210 [ 682.703236][T17248] do_syscall_64+0x115/0x840 [ 682.703303][T17248] ? clear_bhb_loop+0x40/0x90 [ 682.703347][T17248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.703378][T17248] RIP: 0033:0x7eff7e79ce59 [ 682.703403][T17248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.703441][T17248] RSP: 002b:00007eff7f6c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.703476][T17248] RAX: ffffffffffffffda RBX: 00007eff7ea15fa0 RCX: 00007eff7e79ce59 [ 682.703498][T17248] RDX: 00002000000001c0 RSI: fffffffffffffd02 RDI: 0000000000000003 [ 682.703519][T17248] RBP: 00007eff7f6c9090 R08: 0000000000000000 R09: 0000000000000000 [ 682.703538][T17248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.703557][T17248] R13: 00007eff7ea16038 R14: 00007eff7ea15fa0 R15: 00007fffc4f50668 [ 682.703589][T17248] [ 682.936150][T17248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 683.146920][T17253] FAULT_INJECTION: forcing a failure. [ 683.146920][T17253] name failslab, interval 1, probability 0, space 0, times 0 [ 683.159999][T17253] CPU: 0 UID: 0 PID: 17253 Comm: syz.3.2573 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.160053][T17253] Tainted: [L]=SOFTLOCKUP [ 683.160066][T17253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 683.160087][T17253] Call Trace: [ 683.160097][T17253] [ 683.160108][T17253] dump_stack_lvl+0x100/0x190 [ 683.160148][T17253] should_fail_ex.cold+0x5/0xa [ 683.160183][T17253] ? fs_reclaim_acquire+0x70/0x100 [ 683.160226][T17253] ? tomoyo_encode2+0xfb/0x3c0 [ 683.160276][T17253] should_failslab+0xc2/0x120 [ 683.160315][T17253] __kmalloc_noprof+0xe0/0x840 [ 683.160362][T17253] ? d_absolute_path+0x136/0x1b0 [ 683.160404][T17253] tomoyo_encode2+0xfb/0x3c0 [ 683.160456][T17253] tomoyo_encode+0x29/0x50 [ 683.160503][T17253] tomoyo_realpath_from_path+0x18c/0x690 [ 683.160581][T17253] tomoyo_check_open_permission+0x2af/0x3c0 [ 683.160625][T17253] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 683.160670][T17253] ? do_sys_openat2+0x10f/0x1e0 [ 683.160717][T17253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.160756][T17253] ? hook_file_open+0x24f/0x8f0 [ 683.160813][T17253] ? rcu_is_watching+0x12/0xc0 [ 683.160849][T17253] tomoyo_file_open+0x6b/0x90 [ 683.160881][T17253] security_file_open+0xb5/0x1e0 [ 683.160934][T17253] do_dentry_open+0x588/0x14d0 [ 683.160985][T17253] vfs_open+0x82/0x3f0 [ 683.161017][T17253] path_openat+0x2873/0x4280 [ 683.161066][T17253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.161103][T17253] ? __pfx_path_openat+0x10/0x10 [ 683.161155][T17253] do_file_open+0x20e/0x430 [ 683.161202][T17253] ? __pfx_do_file_open+0x10/0x10 [ 683.161261][T17253] ? alloc_fd+0x471/0x7a0 [ 683.161306][T17253] ? do_getname+0x191/0x390 [ 683.161338][T17253] do_sys_openat2+0x10f/0x1e0 [ 683.161372][T17253] ? __pfx_do_sys_openat2+0x10/0x10 [ 683.161406][T17253] ? __fget_files+0x21f/0x3d0 [ 683.161451][T17253] __x64_sys_openat+0x12d/0x210 [ 683.161485][T17253] ? __pfx___x64_sys_openat+0x10/0x10 [ 683.161525][T17253] ? rcu_is_watching+0x12/0xc0 [ 683.161569][T17253] do_syscall_64+0x115/0x840 [ 683.161605][T17253] ? clear_bhb_loop+0x40/0x90 [ 683.161642][T17253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.161675][T17253] RIP: 0033:0x7f6b3699ce59 [ 683.161700][T17253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.161733][T17253] RSP: 002b:00007f6b377e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 683.161766][T17253] RAX: ffffffffffffffda RBX: 00007f6b36c15fa0 RCX: 00007f6b3699ce59 [ 683.161787][T17253] RDX: 0000000000080e42 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 683.161808][T17253] RBP: 00007f6b36a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 683.161828][T17253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.161847][T17253] R13: 00007f6b36c16038 R14: 00007f6b36c15fa0 R15: 00007ffd1beb2bc8 [ 683.161877][T17253] [ 683.450232][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 683.461961][T17253] ERROR: Out of memory at tomoyo_realpath_from_path. [ 684.245620][T17262] sctp: [Deprecated]: syz.4.2577 (pid 17262) Use of int in maxseg socket option. [ 684.245620][T17262] Use struct sctp_assoc_value instead [ 684.441588][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 684.729304][T17266] netlink: 306 bytes leftover after parsing attributes in process `syz.4.2578'. [ 685.437045][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 685.573586][T17280] block2mtd: error: cannot open device [ 685.840708][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.847236][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.150293][T17288] sctp: [Deprecated]: syz.4.2585 (pid 17288) Use of int in maxseg socket option. [ 686.150293][T17288] Use struct sctp_assoc_value instead [ 686.432416][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 686.995602][T17305] FAULT_INJECTION: forcing a failure. [ 686.995602][T17305] name failslab, interval 1, probability 0, space 0, times 0 [ 687.009369][T17305] CPU: 1 UID: 0 PID: 17305 Comm: syz.4.2590 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.009424][T17305] Tainted: [L]=SOFTLOCKUP [ 687.009437][T17305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 687.009457][T17305] Call Trace: [ 687.009467][T17305] [ 687.009478][T17305] dump_stack_lvl+0x100/0x190 [ 687.009519][T17305] should_fail_ex.cold+0x5/0xa [ 687.009555][T17305] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 687.009602][T17305] should_failslab+0xc2/0x120 [ 687.009640][T17305] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 687.009672][T17305] ? alloc_inode+0x68/0x250 [ 687.009705][T17305] ? simple_start_creating+0xb0/0x110 [ 687.009754][T17305] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 687.009817][T17305] alloc_inode+0x68/0x250 [ 687.009849][T17305] new_inode+0x22/0x1c0 [ 687.009882][T17305] __debugfs_create_file+0x105/0x4f0 [ 687.009916][T17305] debugfs_create_file_full+0x41/0x60 [ 687.009950][T17305] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 687.009999][T17305] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 687.010056][T17305] ? ida_alloc_range+0x70d/0x830 [ 687.010114][T17305] ? lockdep_init_map_type+0x5c/0x250 [ 687.010165][T17305] preinit_net.part.0+0x252/0x920 [ 687.010245][T17305] copy_net_ns+0x339/0x7c0 [ 687.010275][T17305] create_new_namespaces+0x3ea/0xac0 [ 687.010339][T17305] unshare_nsproxy_namespaces+0xf2/0x220 [ 687.010392][T17305] ksys_unshare+0x438/0xab0 [ 687.010433][T17305] ? __pfx_ksys_unshare+0x10/0x10 [ 687.010475][T17305] __x64_sys_unshare+0x31/0x40 [ 687.010510][T17305] do_syscall_64+0x115/0x840 [ 687.010543][T17305] ? clear_bhb_loop+0x40/0x90 [ 687.010579][T17305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.010611][T17305] RIP: 0033:0x7eff7e79ce59 [ 687.010636][T17305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.010667][T17305] RSP: 002b:00007eff7f6a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 687.010700][T17305] RAX: ffffffffffffffda RBX: 00007eff7ea16090 RCX: 00007eff7e79ce59 [ 687.010722][T17305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 687.010742][T17305] RBP: 00007eff7e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 687.010762][T17305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.010782][T17305] R13: 00007eff7ea16128 R14: 00007eff7ea16090 R15: 00007fffc4f50668 [ 687.010813][T17305] [ 687.011150][T17305] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88802bcfa9c0' [ 687.427857][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 688.423279][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 688.477011][T17333] sctp: [Deprecated]: syz.4.2596 (pid 17333) Use of int in maxseg socket option. [ 688.477011][T17333] Use struct sctp_assoc_value instead [ 689.293586][T17351] FAULT_INJECTION: forcing a failure. [ 689.293586][T17351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.307120][T17351] CPU: 0 UID: 0 PID: 17351 Comm: syz.4.2601 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.307167][T17351] Tainted: [L]=SOFTLOCKUP [ 689.307178][T17351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 689.307196][T17351] Call Trace: [ 689.307205][T17351] [ 689.307216][T17351] dump_stack_lvl+0x100/0x190 [ 689.307254][T17351] should_fail_ex.cold+0x5/0xa [ 689.307290][T17351] _copy_from_user+0x2e/0xd0 [ 689.307364][T17351] ctl_ioctl+0xf3/0xcd0 [ 689.307509][T17351] ? __pfx_ctl_ioctl+0x10/0x10 [ 689.307555][T17351] ? __fget_files+0x21f/0x3d0 [ 689.307601][T17351] dm_ctl_ioctl+0x22/0x30 [ 689.307627][T17351] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 689.307656][T17351] __x64_sys_ioctl+0x18e/0x210 [ 689.307713][T17351] do_syscall_64+0x115/0x840 [ 689.307748][T17351] ? clear_bhb_loop+0x40/0x90 [ 689.307785][T17351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.307817][T17351] RIP: 0033:0x7eff7e79ce59 [ 689.307841][T17351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.307872][T17351] RSP: 002b:00007eff7f6c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.307903][T17351] RAX: ffffffffffffffda RBX: 00007eff7ea15fa0 RCX: 00007eff7e79ce59 [ 689.307924][T17351] RDX: 00002000000001c0 RSI: fffffffffffffd02 RDI: 0000000000000003 [ 689.307945][T17351] RBP: 00007eff7f6c9090 R08: 0000000000000000 R09: 0000000000000000 [ 689.307965][T17351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.307984][T17351] R13: 00007eff7ea16038 R14: 00007eff7ea15fa0 R15: 00007fffc4f50668 [ 689.308017][T17351] [ 690.414079][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 691.409550][ T5709] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 691.449067][T17382] FAULT_INJECTION: forcing a failure. [ 691.449067][T17382] name failslab, interval 1, probability 0, space 0, times 0 [ 691.483148][T17382] CPU: 1 UID: 0 PID: 17382 Comm: syz.3.2609 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.483204][T17382] Tainted: [L]=SOFTLOCKUP [ 691.483216][T17382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.483236][T17382] Call Trace: [ 691.483246][T17382] [ 691.483259][T17382] dump_stack_lvl+0x100/0x190 [ 691.483297][T17382] should_fail_ex.cold+0x5/0xa [ 691.483334][T17382] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 691.483384][T17382] should_failslab+0xc2/0x120 [ 691.483422][T17382] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 691.483456][T17382] ? __d_alloc+0x35/0xa50 [ 691.483509][T17382] __d_alloc+0x35/0xa50 [ 691.483562][T17382] d_alloc+0x4a/0x1e0 [ 691.483611][T17382] lookup_one_qstr_excl+0x171/0x250 [ 691.483647][T17382] start_dirop+0x59/0xb0 [ 691.483689][T17382] simple_start_creating+0xf9/0x110 [ 691.483745][T17382] ? __pfx_simple_start_creating+0x10/0x10 [ 691.483790][T17382] ? mntput+0x70/0xa0 [ 691.483829][T17382] ? simple_pin_fs+0xa3/0x190 [ 691.483869][T17382] debugfs_start_creating.part.0+0x82/0x170 [ 691.483904][T17382] __debugfs_create_file+0xb3/0x4f0 [ 691.483958][T17382] debugfs_create_file_full+0x41/0x60 [ 691.483994][T17382] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 691.484026][T17382] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 691.484081][T17382] ? ida_alloc_range+0x70d/0x830 [ 691.484139][T17382] ? lockdep_init_map_type+0x5c/0x250 [ 691.484205][T17382] preinit_net.part.0+0x252/0x920 [ 691.484256][T17382] copy_net_ns+0x339/0x7c0 [ 691.484286][T17382] create_new_namespaces+0x3ea/0xac0 [ 691.484343][T17382] unshare_nsproxy_namespaces+0xf2/0x220 [ 691.484410][T17382] ksys_unshare+0x438/0xab0 [ 691.484447][T17382] ? __pfx_ksys_unshare+0x10/0x10 [ 691.484490][T17382] __x64_sys_unshare+0x31/0x40 [ 691.484525][T17382] do_syscall_64+0x115/0x840 [ 691.484558][T17382] ? clear_bhb_loop+0x40/0x90 [ 691.484594][T17382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.484629][T17382] RIP: 0033:0x7f6b3699ce59 [ 691.484654][T17382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.484688][T17382] RSP: 002b:00007f6b377c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 691.484720][T17382] RAX: ffffffffffffffda RBX: 00007f6b36c16090 RCX: 00007f6b3699ce59 [ 691.484742][T17382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 691.484762][T17382] RBP: 00007f6b36a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 691.484781][T17382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.484801][T17382] R13: 00007f6b36c16128 R14: 00007f6b36c16090 R15: 00007ffd1beb2bc8 [ 691.484833][T17382] [ 691.849578][T17388] random: crng reseeded on system resumption [ 692.253188][T17395] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2612'. [ 692.404936][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 693.417672][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 694.395789][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 695.161029][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'. [ 695.391198][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 695.834138][T17423] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 695.841624][T17423] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 695.848309][T17423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 695.855511][T17423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 695.861573][T17423] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 695.869731][T17423] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 695.879084][T17423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 695.885540][T17423] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 695.893692][T17423] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 696.386657][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 697.103857][T17452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2627'. [ 697.226756][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 697.382030][ T5358] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 697.720943][T14577] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 697.730927][T14577] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 697.738321][T14577] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 697.748122][T14577] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 697.757309][T14577] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 697.776446][T17461] sctp: [Deprecated]: syz.3.2629 (pid 17461) Use of int in maxseg socket option. [ 697.776446][T17461] Use struct sctp_assoc_value instead [ 697.867202][T14577] Bluetooth: hci3: command 0x0c1a tx timeout [ 697.873309][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 697.873320][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 697.943402][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 698.725884][T17467] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.738461][T17467] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.764042][T17467] bridge_slave_0: entered allmulticast mode [ 698.783509][T17467] bridge_slave_0: entered promiscuous mode [ 698.818359][T17467] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.832530][T17467] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.844600][T17467] bridge_slave_1: entered allmulticast mode [ 698.866125][T17467] bridge_slave_1: entered promiscuous mode [ 698.933295][T17467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.948209][T17467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.018251][T17467] team0: Port device team_slave_0 added [ 699.028052][T17467] team0: Port device team_slave_1 added [ 699.072491][T17467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.093061][T17467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.129662][T17467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.152801][T17467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.166422][T17467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.194081][T17467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.292798][T17467] hsr_slave_0: entered promiscuous mode [ 699.304794][T17467] hsr_slave_1: entered promiscuous mode [ 699.316256][T17467] debugfs: 'hsr0' already exists in 'hsr' [ 699.325826][T17467] Cannot create hsr debugfs directory [ 699.786820][ T5629] Bluetooth: hci5: command tx timeout [ 699.884274][T17516] sctp: [Deprecated]: syz.4.2637 (pid 17516) Use of int in maxseg socket option. [ 699.884274][T17516] Use struct sctp_assoc_value instead [ 699.944213][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 700.013971][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 700.095066][T17521] nfs: Unknown parameter '£m?¥ŒÁLH>®ï½¢^Ñe„°àko}* »' [ 700.549755][T17531] FAULT_INJECTION: forcing a failure. [ 700.549755][T17531] name failslab, interval 1, probability 0, space 0, times 0 [ 700.591168][T17531] CPU: 1 UID: 0 PID: 17531 Comm: syz.4.2640 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.591260][T17531] Tainted: [L]=SOFTLOCKUP [ 700.591274][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 700.591294][T17531] Call Trace: [ 700.591305][T17531] [ 700.591317][T17531] dump_stack_lvl+0x100/0x190 [ 700.591360][T17531] should_fail_ex.cold+0x5/0xa [ 700.591395][T17531] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 700.591434][T17531] should_failslab+0xc2/0x120 [ 700.591474][T17531] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 700.591508][T17531] ? __d_alloc+0x35/0xa50 [ 700.591563][T17531] __d_alloc+0x35/0xa50 [ 700.591615][T17531] d_alloc+0x4a/0x1e0 [ 700.591666][T17531] lookup_one_qstr_excl+0x171/0x250 [ 700.591704][T17531] start_dirop+0x59/0xb0 [ 700.591747][T17531] simple_start_creating+0xf9/0x110 [ 700.591795][T17531] ? __pfx_simple_start_creating+0x10/0x10 [ 700.591844][T17531] ? mntput+0x70/0xa0 [ 700.591885][T17531] ? simple_pin_fs+0xa3/0x190 [ 700.591926][T17531] debugfs_start_creating.part.0+0x82/0x170 [ 700.591962][T17531] __debugfs_create_file+0xb3/0x4f0 [ 700.591999][T17531] debugfs_create_file_full+0x41/0x60 [ 700.592035][T17531] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 700.592069][T17531] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 700.592124][T17531] ? ida_alloc_range+0x70d/0x830 [ 700.592179][T17531] ? lockdep_init_map_type+0x5c/0x250 [ 700.592243][T17531] preinit_net.part.0+0x252/0x920 [ 700.592295][T17531] copy_net_ns+0x339/0x7c0 [ 700.592326][T17531] create_new_namespaces+0x3ea/0xac0 [ 700.592384][T17531] unshare_nsproxy_namespaces+0xf2/0x220 [ 700.592442][T17531] ksys_unshare+0x438/0xab0 [ 700.592482][T17531] ? __pfx_ksys_unshare+0x10/0x10 [ 700.592526][T17531] ? ksys_write+0x1ac/0x250 [ 700.592566][T17531] ? kcov_ioctl+0x16a/0x720 [ 700.592630][T17531] __x64_sys_unshare+0x31/0x40 [ 700.592662][T17531] do_syscall_64+0x115/0x840 [ 700.592692][T17531] ? clear_bhb_loop+0x40/0x90 [ 700.592726][T17531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.592756][T17531] RIP: 0033:0x7eff7e79ce59 [ 700.592778][T17531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.592809][T17531] RSP: 002b:00007eff7f6a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 700.592838][T17531] RAX: ffffffffffffffda RBX: 00007eff7ea16090 RCX: 00007eff7e79ce59 [ 700.592857][T17531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 700.592874][T17531] RBP: 00007eff7e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 700.592892][T17531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.592910][T17531] R13: 00007eff7ea16128 R14: 00007eff7ea16090 R15: 00007fffc4f50668 [ 700.592937][T17531] [ 700.638195][T17532] mtrr: base(0x10000000000) is not aligned on a size(0x0000) boundary [ 701.180914][T17533] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2638'. [ 701.845871][ T5629] Bluetooth: hci5: command tx timeout [ 702.005022][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 702.086222][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 703.397005][T17578] block2mtd: error: cannot open device [ 703.915913][ T5629] Bluetooth: hci5: command tx timeout [ 704.624002][T17614] random: crng reseeded on system resumption [ 705.986369][ T5629] Bluetooth: hci5: command tx timeout [ 707.145801][T17679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2667'. [ 707.216340][T17681] block2mtd: error: cannot open device [ 708.244604][T17701] ubi0: attaching mtd0 [ 708.249667][T17701] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 708.259383][T17701] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 708.267691][T17701] eraseblock attaching information dump: [ 708.273856][T17701] ec -1 [ 708.277775][T17701] pnum 0 [ 708.281158][T17701] lnum 0 [ 708.284607][T17701] scrub 1 [ 708.288376][T17701] sqnum 1 [ 708.291829][T17701] Volume identifier header dump: [ 708.297225][T17701] magic 55424921 [ 708.301598][T17701] version 1 [ 708.305141][T17701] vol_type 1 [ 708.309180][T17701] copy_flag 0 [ 708.312739][T17701] compat 5 [ 708.316535][T17701] vol_id 2147479551 [ 708.321015][T17701] lnum 0 [ 708.324543][T17701] data_size 0 [ 708.328429][T17701] used_ebs 0 [ 708.331987][T17701] data_pad 0 [ 708.338864][T17701] sqnum 1 [ 708.342465][T17701] hdr_crc 65b3bd2d [ 708.346931][T17701] Volume identifier header hexdump: [ 708.414845][T17701] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 711.532451][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.699717][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.758893][T14577] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 711.766980][T14577] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 711.782953][T14577] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 711.791794][T14577] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 711.800432][T14577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 711.811700][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.829238][T17764] FAULT_INJECTION: forcing a failure. [ 711.829238][T17764] name failslab, interval 1, probability 0, space 0, times 0 [ 711.870973][T17764] CPU: 0 UID: 0 PID: 17764 Comm: syz.4.2689 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.871032][T17764] Tainted: [L]=SOFTLOCKUP [ 711.871050][T17764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 711.871071][T17764] Call Trace: [ 711.871081][T17764] [ 711.871093][T17764] dump_stack_lvl+0x100/0x190 [ 711.871136][T17764] should_fail_ex.cold+0x5/0xa [ 711.871173][T17764] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 711.871221][T17764] should_failslab+0xc2/0x120 [ 711.871258][T17764] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 711.871290][T17764] ? alloc_inode+0x68/0x250 [ 711.871325][T17764] ? simple_start_creating+0xb0/0x110 [ 711.871371][T17764] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 711.871403][T17764] alloc_inode+0x68/0x250 [ 711.871435][T17764] new_inode+0x22/0x1c0 [ 711.871467][T17764] __debugfs_create_file+0x105/0x4f0 [ 711.871502][T17764] debugfs_create_file_full+0x41/0x60 [ 711.871537][T17764] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 711.871568][T17764] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 711.871621][T17764] ? ida_alloc_range+0x70d/0x830 [ 711.871675][T17764] ? lockdep_init_map_type+0x5c/0x250 [ 711.871727][T17764] preinit_net.part.0+0x252/0x920 [ 711.871777][T17764] copy_net_ns+0x339/0x7c0 [ 711.871814][T17764] create_new_namespaces+0x3ea/0xac0 [ 711.871871][T17764] unshare_nsproxy_namespaces+0xf2/0x220 [ 711.871924][T17764] ksys_unshare+0x438/0xab0 [ 711.871960][T17764] ? __pfx_ksys_unshare+0x10/0x10 [ 711.872004][T17764] __x64_sys_unshare+0x31/0x40 [ 711.872041][T17764] do_syscall_64+0x115/0x840 [ 711.872074][T17764] ? clear_bhb_loop+0x40/0x90 [ 711.872111][T17764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.872144][T17764] RIP: 0033:0x7eff7e79ce59 [ 711.872169][T17764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.872201][T17764] RSP: 002b:00007eff7f6a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 711.872234][T17764] RAX: ffffffffffffffda RBX: 00007eff7ea16090 RCX: 00007eff7e79ce59 [ 711.872256][T17764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 711.872275][T17764] RBP: 00007eff7e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 711.872297][T17764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.872316][T17764] R13: 00007eff7ea16128 R14: 00007eff7ea16090 R15: 00007fffc4f50668 [ 711.872349][T17764] [ 711.872383][T17764] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88807e1a5100' [ 712.105187][T17766] mtrr: base(0x10000000000) is not aligned on a size(0x0000) boundary [ 712.151310][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.327981][ T57] bridge_slave_1: left allmulticast mode [ 712.350816][ T57] bridge_slave_1: left promiscuous mode [ 712.356752][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.371311][ T57] bridge_slave_0: left allmulticast mode [ 712.387032][ T57] bridge_slave_0: left promiscuous mode [ 712.392864][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.501607][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.514127][ T57] bond0 (unregistering): Released all slaves [ 712.711955][T17766] Process accounting paused [ 712.862748][ T57] hsr_slave_0: left promiscuous mode [ 712.877755][ T57] hsr_slave_1: left promiscuous mode [ 712.887672][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.905214][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.925024][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.944763][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.961142][ T57] veth1_macvtap: left promiscuous mode [ 712.975506][ T57] veth0_macvtap: left promiscuous mode [ 712.981698][ T57] veth1_vlan: left promiscuous mode [ 712.994879][ T57] veth0_vlan: left promiscuous mode [ 713.227978][ T57] team0 (unregistering): Port device team_slave_1 removed [ 713.242017][ T57] team0 (unregistering): Port device team_slave_0 removed [ 713.309386][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 713.599972][T17762] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.617662][T17762] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.634007][T17762] bridge_slave_0: entered allmulticast mode [ 713.649235][T17762] bridge_slave_0: entered promiscuous mode [ 713.657818][T17762] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.667340][T17762] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.677391][T17762] bridge_slave_1: entered allmulticast mode [ 713.684887][T17762] bridge_slave_1: entered promiscuous mode [ 713.712911][T17762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.725173][T17762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.785106][T17762] team0: Port device team_slave_0 added [ 713.799186][T17762] team0: Port device team_slave_1 added [ 713.825073][T17762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.832219][T17762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.860377][T17762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.871328][T14577] Bluetooth: hci2: command tx timeout [ 713.883754][T17762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.891088][T17762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.917638][T17762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.972494][T17762] hsr_slave_0: entered promiscuous mode [ 713.979081][T17762] hsr_slave_1: entered promiscuous mode [ 713.987138][T17762] debugfs: 'hsr0' already exists in 'hsr' [ 713.995630][T17762] Cannot create hsr debugfs directory [ 714.018638][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 714.438183][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 714.747522][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 715.175292][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 715.182696][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 715.190473][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 715.198470][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 715.206779][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 715.729846][T17860] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.737719][T17860] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.745420][T17860] bridge_slave_0: entered allmulticast mode [ 715.752745][T17860] bridge_slave_0: entered promiscuous mode [ 715.761484][T17860] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.768717][T17860] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.776586][T17860] bridge_slave_1: entered allmulticast mode [ 715.784036][T17860] bridge_slave_1: entered promiscuous mode [ 715.811294][T17860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.823451][T17860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.853062][T17860] team0: Port device team_slave_0 added [ 715.861477][T17860] team0: Port device team_slave_1 added [ 715.884978][T17860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.892025][T17860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.918330][T17860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.934350][T17860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.941439][T17860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.959950][T14577] Bluetooth: hci2: command tx timeout [ 715.968561][T17860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.015735][T17860] hsr_slave_0: entered promiscuous mode [ 716.022973][T17860] hsr_slave_1: entered promiscuous mode [ 716.029277][T17860] debugfs: 'hsr0' already exists in 'hsr' [ 716.035441][T17860] Cannot create hsr debugfs directory [ 716.394846][T17857] kexec: Could not allocate control_code_buffer [ 716.441265][T17882] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2694'. [ 716.455330][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2694'. [ 717.215450][T14577] Bluetooth: hci6: command tx timeout [ 718.021108][T14577] Bluetooth: hci2: command tx timeout [ 718.842616][T17902] FAULT_INJECTION: forcing a failure. [ 718.842616][T17902] name failslab, interval 1, probability 0, space 0, times 0 [ 718.855632][T17902] CPU: 1 UID: 0 PID: 17902 Comm: syz.4.2700 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.855687][T17902] Tainted: [L]=SOFTLOCKUP [ 718.855701][T17902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 718.855722][T17902] Call Trace: [ 718.855733][T17902] [ 718.855745][T17902] dump_stack_lvl+0x100/0x190 [ 718.855787][T17902] should_fail_ex.cold+0x5/0xa [ 718.855827][T17902] should_failslab+0xc2/0x120 [ 718.855866][T17902] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 718.855898][T17902] ? sctp_chunkify+0x51/0x2f0 [ 718.856034][T17902] ? __pfx___alloc_skb+0x10/0x10 [ 718.856101][T17902] sctp_chunkify+0x51/0x2f0 [ 718.856138][T17902] _sctp_make_chunk+0x148/0x270 [ 718.856178][T17902] sctp_make_control+0x2f/0x2d0 [ 718.856216][T17902] sctp_make_shutdown+0xb6/0x1d0 [ 718.856268][T17902] ? __pfx_sctp_make_shutdown+0x10/0x10 [ 718.856312][T17902] ? rcu_is_watching+0x12/0xc0 [ 718.856349][T17902] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 718.856396][T17902] sctp_sf_do_9_2_start_shutdown+0x25/0x490 [ 718.856460][T17902] sctp_sf_do_9_2_prm_shutdown+0x11c/0x150 [ 718.856498][T17902] ? __pfx_sctp_pname+0x10/0x10 [ 718.856562][T17902] sctp_do_sm+0x17a/0x5be0 [ 718.856596][T17902] ? is_bpf_text_address+0x94/0x1a0 [ 718.856656][T17902] ? __kernel_text_address+0xd/0x30 [ 718.856704][T17902] ? unwind_get_return_address+0x59/0xa0 [ 718.856753][T17902] ? __pfx_sctp_do_sm+0x10/0x10 [ 718.856809][T17902] ? rcu_is_watching+0x12/0xc0 [ 718.856848][T17902] ? trace_irq_enable.constprop.0+0x122/0x160 [ 718.856902][T17902] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 718.856961][T17902] sctp_primitive_SHUTDOWN+0x9f/0xd0 [ 718.856998][T17902] sctp_close+0x3ff/0x980 [ 718.857075][T17902] ? __pfx_sctp_close+0x10/0x10 [ 718.857119][T17902] ? lock_acquire+0x301/0x370 [ 718.857166][T17902] ? __pfx___might_resched+0x10/0x10 [ 718.857218][T17902] ? ip_mc_drop_socket+0x228/0x290 [ 718.857316][T17902] inet_release+0xed/0x200 [ 718.857358][T17902] inet6_release+0x4f/0x70 [ 718.857433][T17902] __sock_release+0xb3/0x260 [ 718.857494][T17902] ? __pfx_sock_close+0x10/0x10 [ 718.857555][T17902] sock_close+0x1c/0x30 [ 718.857602][T17902] __fput+0x3ff/0xb50 [ 718.857636][T17902] task_work_run+0x150/0x240 [ 718.857680][T17902] ? __pfx_task_work_run+0x10/0x10 [ 718.857724][T17902] ? rcu_is_watching+0x12/0xc0 [ 718.857759][T17902] exit_to_user_mode_loop+0x1d8/0x6f0 [ 718.857816][T17902] ? rcu_is_watching+0x12/0xc0 [ 718.857851][T17902] do_syscall_64+0x652/0x840 [ 718.857886][T17902] ? clear_bhb_loop+0x40/0x90 [ 718.857926][T17902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.857960][T17902] RIP: 0033:0x7eff7e79ce59 [ 718.857987][T17902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.858021][T17902] RSP: 002b:00007eff7f6a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 718.858054][T17902] RAX: 0000000000000000 RBX: 00007eff7ea16090 RCX: 00007eff7e79ce59 [ 718.858077][T17902] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 718.858097][T17902] RBP: 00007eff7e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 718.858120][T17902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.858141][T17902] R13: 00007eff7ea16128 R14: 00007eff7ea16090 R15: 00007fffc4f50668 [ 718.858173][T17902] [ 719.295203][T14577] Bluetooth: hci6: command tx timeout [ 720.081546][T14577] Bluetooth: hci2: command tx timeout [ 720.391681][T17918] block2mtd: error: cannot open device [ 721.081955][T17932] sctp: [Deprecated]: syz.4.2708 (pid 17932) Use of int in maxseg socket option. [ 721.081955][T17932] Use struct sctp_assoc_value instead [ 721.365762][T14577] Bluetooth: hci6: command tx timeout [ 723.427277][T14577] Bluetooth: hci6: command tx timeout [ 723.694509][T17957] sctp: [Deprecated]: syz.4.2715 (pid 17957) Use of int in maxseg socket option. [ 723.694509][T17957] Use struct sctp_assoc_value instead [ 723.949734][T17961] block2mtd: error: cannot open device [ 726.175939][T17977] kexec: Could not allocate control_code_buffer [ 726.796375][T18033] block2mtd: error: cannot open device [ 728.261071][T18064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2727'. [ 728.353483][T18064] FAULT_INJECTION: forcing a failure. [ 728.353483][T18064] name failslab, interval 1, probability 0, space 0, times 0 [ 728.366265][T18064] CPU: 0 UID: 0 PID: 18064 Comm: syz.4.2727 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.366302][T18064] Tainted: [L]=SOFTLOCKUP [ 728.366311][T18064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.366327][T18064] Call Trace: [ 728.366335][T18064] [ 728.366345][T18064] dump_stack_lvl+0x100/0x190 [ 728.366374][T18064] should_fail_ex.cold+0x5/0xa [ 728.366401][T18064] ? __kmalloc_cache_noprof+0x53/0x6e0 [ 728.366438][T18064] should_failslab+0xc2/0x120 [ 728.366466][T18064] __kmalloc_cache_noprof+0x7a/0x6e0 [ 728.366501][T18064] ? alloc_mnt_ns+0xce/0x520 [ 728.366529][T18064] ? rcu_read_unlock+0x17/0x60 [ 728.366579][T18064] alloc_mnt_ns+0xce/0x520 [ 728.366607][T18064] copy_mnt_ns+0x308/0x1180 [ 728.366632][T18064] ? __pfx_copy_mnt_ns+0x10/0x10 [ 728.366654][T18064] ? kmem_cache_alloc_noprof+0x292/0x6d0 [ 728.366678][T18064] ? create_new_namespaces+0x30/0xac0 [ 728.366721][T18064] ? rcu_is_watching+0x12/0xc0 [ 728.366748][T18064] create_new_namespaces+0xd3/0xac0 [ 728.366784][T18064] ? bpf_lsm_capable+0x9/0x10 [ 728.366813][T18064] ? security_capable+0x80/0x260 [ 728.366840][T18064] unshare_nsproxy_namespaces+0xf2/0x220 [ 728.366879][T18064] ksys_unshare+0x438/0xab0 [ 728.366906][T18064] ? __pfx_ksys_unshare+0x10/0x10 [ 728.366932][T18064] ? ksys_write+0x1ac/0x250 [ 728.366969][T18064] __x64_sys_unshare+0x31/0x40 [ 728.366994][T18064] do_syscall_64+0x115/0x840 [ 728.367020][T18064] ? clear_bhb_loop+0x40/0x90 [ 728.367047][T18064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.367071][T18064] RIP: 0033:0x7eff7e79ce59 [ 728.367090][T18064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.367115][T18064] RSP: 002b:00007eff7f6c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 728.367138][T18064] RAX: ffffffffffffffda RBX: 00007eff7ea15fa0 RCX: 00007eff7e79ce59 [ 728.367154][T18064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008100000 [ 728.367169][T18064] RBP: 00007eff7e832e6f R08: 0000000000000000 R09: 0000000000000000 [ 728.367184][T18064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.367199][T18064] R13: 00007eff7ea16038 R14: 00007eff7ea15fa0 R15: 00007fffc4f50668 [ 728.367222][T18064] [ 728.733214][T18066] block2mtd: error: cannot open device [ 730.776983][T18079] kexec: Could not allocate control_code_buffer [ 731.531711][T18094] sctp: [Deprecated]: syz.4.2735 (pid 18094) Use of int in maxseg socket option. [ 731.531711][T18094] Use struct sctp_assoc_value instead [ 731.783371][T14577] Bluetooth: hci4: Malformed LE Event: 0x0b [ 733.467427][T18113] smpboot: CPU 1 is now offline [ 733.808465][T18113] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 733.824860][T18113] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 733.849628][T18113] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 733.875026][T18113] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 733.886520][T18113] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 733.902300][T18113] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 733.921606][T18113] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 733.941456][T18113] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 733.957883][T18113] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 733.970739][T18113] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 733.989408][T18113] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 733.998954][T18113] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 734.006338][T18113] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 734.086347][T18116] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 734.097792][T14577] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6 [ 735.610122][T14577] Bluetooth: hci4: command 0x0406 tx timeout [ 735.849141][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 735.855221][T14577] Bluetooth: hci3: command 0x0c1a tx timeout [ 735.928747][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 735.934844][T14577] Bluetooth: hci5: command 0x0c1a tx timeout [ 736.008272][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 736.014357][T14577] Bluetooth: hci6: command 0x0c1a tx timeout [ 738.001671][T14577] Bluetooth: hci5: command 0x0c1a tx timeout [ 738.078768][T14577] Bluetooth: hci6: command 0x0c1a tx timeout [ 738.084824][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 739.767962][T18157] random: crng reseeded on system resumption [ 740.071471][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout [ 740.149203][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 740.155315][T14577] Bluetooth: hci6: command 0x0c1a tx timeout [ 740.174132][T18167] sctp: [Deprecated]: syz.4.2752 (pid 18167) Use of int in maxseg socket option. [ 740.174132][T18167] Use struct sctp_assoc_value instead [ 741.667422][T18179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2756'. [ 741.770170][T18181] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1.185.15), cmd(2) [ 741.922633][T14577] block nbd1: Receive control failed (result -32) [ 742.838550][T18188] Process accounting resumed [ 744.508231][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'. [ 746.233285][T14577] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 746.999846][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.006567][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.262715][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 750.271384][T18244] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 750.277834][T18244] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 750.284309][T18244] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 750.290373][T18244] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 750.298761][T18244] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 750.305001][T18244] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 750.311096][T18244] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 752.333176][T14577] Bluetooth: hci2: command 0x0c1a tx timeout [ 752.339234][ T5636] Bluetooth: hci5: command 0x0c1a tx timeout [ 752.345347][ T5636] Bluetooth: hci0: command 0x0c1a tx timeout [ 752.351365][ T5629] Bluetooth: hci6: command 0x0c1a tx timeout [ 752.357442][T14577] Bluetooth: hci3: command 0x0c1a tx timeout [ 752.363504][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout [ 752.369637][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 754.308351][T18291] block2mtd: error: cannot open device [ 756.444885][T18314] sctp: [Deprecated]: syz.4.2791 (pid 18314) Use of int in maxseg socket option. [ 756.444885][T18314] Use struct sctp_assoc_value instead [ 756.782355][T18318] block2mtd: error: cannot open device [ 756.999944][T18324] FAULT_INJECTION: forcing a failure. [ 756.999944][T18324] name fail_futex, interval 1, probability 0, space 0, times 0 [ 757.026044][T18324] CPU: 0 UID: 0 PID: 18324 Comm: syz.4.2793 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.026085][T18324] Tainted: [L]=SOFTLOCKUP [ 757.026094][T18324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.026110][T18324] Call Trace: [ 757.026118][T18324] [ 757.026128][T18324] dump_stack_lvl+0x100/0x190 [ 757.026161][T18324] should_fail_ex.cold+0x5/0xa [ 757.026191][T18324] get_futex_key+0x1d2/0x14f0 [ 757.026230][T18324] ? __pfx_get_futex_key+0x10/0x10 [ 757.026269][T18324] ? __fput+0x68d/0xb50 [ 757.026292][T18324] futex_wait_setup+0x91/0x540 [ 757.026324][T18324] __futex_wait+0x19f/0x300 [ 757.026353][T18324] ? __pfx___futex_wait+0x10/0x10 [ 757.026380][T18324] ? futex_hash+0x311/0x400 [ 757.026414][T18324] ? rcu_is_watching+0x12/0xc0 [ 757.026441][T18324] ? __pfx_futex_wake_mark+0x10/0x10 [ 757.026471][T18324] ? __pfx_futex_hash+0x10/0x10 [ 757.026509][T18324] futex_wait+0xe6/0x370 [ 757.026536][T18324] ? __pfx_futex_wait+0x10/0x10 [ 757.026572][T18324] do_futex+0x265/0x440 [ 757.026594][T18324] ? __pfx_do_futex+0x10/0x10 [ 757.026616][T18324] ? __pfx___might_resched+0x10/0x10 [ 757.026650][T18324] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 757.026696][T18324] __x64_sys_futex+0x34f/0x4d0 [ 757.026720][T18324] ? __pfx___x64_sys_futex+0x10/0x10 [ 757.026744][T18324] ? rcu_is_watching+0x12/0xc0 [ 757.026770][T18324] ? rcu_is_watching+0x12/0xc0 [ 757.026797][T18324] do_syscall_64+0x115/0x840 [ 757.026825][T18324] ? clear_bhb_loop+0x40/0x90 [ 757.026853][T18324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.026878][T18324] RIP: 0033:0x7eff7e79ce59 [ 757.026897][T18324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.026922][T18324] RSP: 002b:00007eff7f6a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 757.026946][T18324] RAX: ffffffffffffffda RBX: 00007eff7ea16098 RCX: 00007eff7e79ce59 [ 757.026963][T18324] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007eff7ea16098 [ 757.026979][T18324] RBP: 00007eff7ea16090 R08: 0000000000000000 R09: 0000000000000000 [ 757.026995][T18324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.027017][T18324] R13: 00007eff7ea16128 R14: 00007fffc4f50580 R15: 00007fffc4f50668 [ 757.027041][T18324] [ 757.441909][ T5642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 757.449203][ T5642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 757.456515][ T5642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 757.466271][ T5642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 757.473657][ T5642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 758.146670][T18326] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.160943][T18326] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.176526][T18326] bridge_slave_0: entered allmulticast mode [ 758.189806][T18326] bridge_slave_0: entered promiscuous mode [ 758.207623][T18326] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.224920][T18326] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.238071][T18326] bridge_slave_1: entered allmulticast mode [ 758.253052][T18326] bridge_slave_1: entered promiscuous mode [ 758.293543][T18326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.316225][T18326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.366229][T18326] team0: Port device team_slave_0 added [ 758.383349][T18326] team0: Port device team_slave_1 added [ 758.420298][T18326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.436600][T18326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.494980][T18326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.516101][T18326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.533233][T18326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.585800][T18326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.652332][T18326] hsr_slave_0: entered promiscuous mode [ 758.664990][T18326] hsr_slave_1: entered promiscuous mode [ 758.678738][T18326] debugfs: 'hsr0' already exists in 'hsr' [ 758.692339][T18326] Cannot create hsr debugfs directory [ 759.500266][ T5642] Bluetooth: hci7: command tx timeout [ 760.225081][T18362] block2mtd: error: cannot open device [ 760.674597][T18370] FAULT_INJECTION: forcing a failure. [ 760.674597][T18370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.691942][T18370] CPU: 0 UID: 0 PID: 18370 Comm: syz.4.2799 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.691979][T18370] Tainted: [L]=SOFTLOCKUP [ 760.691987][T18370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 760.692001][T18370] Call Trace: [ 760.692008][T18370] [ 760.692025][T18370] dump_stack_lvl+0x100/0x190 [ 760.692053][T18370] should_fail_ex.cold+0x5/0xa [ 760.692098][T18370] _copy_to_user+0x32/0xd0 [ 760.692135][T18370] simple_read_from_buffer+0xcb/0x170 [ 760.692168][T18370] proc_fail_nth_read+0x1af/0x230 [ 760.692193][T18370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 760.692217][T18370] ? security_file_permission+0x76/0x210 [ 760.692253][T18370] ? rw_verify_area+0xce/0x6d0 [ 760.692281][T18370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 760.692304][T18370] vfs_read+0x1e4/0xb40 [ 760.692336][T18370] ? __pfx_vfs_read+0x10/0x10 [ 760.692366][T18370] ? rcu_is_watching+0x12/0xc0 [ 760.692393][T18370] ? __fget_files+0x21f/0x3d0 [ 760.692427][T18370] ksys_read+0x12a/0x250 [ 760.692457][T18370] ? __pfx_ksys_read+0x10/0x10 [ 760.692489][T18370] ? rcu_is_watching+0x12/0xc0 [ 760.692514][T18370] do_syscall_64+0x115/0x840 [ 760.692540][T18370] ? clear_bhb_loop+0x40/0x90 [ 760.692566][T18370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.692589][T18370] RIP: 0033:0x7eff7e75d68e [ 760.692608][T18370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 760.692631][T18370] RSP: 002b:00007eff7f6c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 760.692653][T18370] RAX: ffffffffffffffda RBX: 00007eff7f6c96c0 RCX: 00007eff7e75d68e [ 760.692669][T18370] RDX: 000000000000000f RSI: 00007eff7f6c90a0 RDI: 0000000000000006 [ 760.692690][T18370] RBP: 00007eff7f6c9090 R08: 0000000000000000 R09: 0000000000000000 [ 760.692704][T18370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.692719][T18370] R13: 00007eff7ea16038 R14: 00007eff7ea15fa0 R15: 00007fffc4f50668 [ 760.692741][T18370] [ 761.127365][T18374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2801'. [ 761.456997][T18378] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[6710] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[18378] [ 761.570917][ T5642] Bluetooth: hci7: command tx timeout [ 762.956721][T18393] FAULT_INJECTION: forcing a failure. [ 762.956721][T18393] name failslab, interval 1, probability 0, space 0, times 0 [ 762.972840][T18393] CPU: 0 UID: 0 PID: 18393 Comm: syz.4.2807 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.972877][T18393] Tainted: [L]=SOFTLOCKUP [ 762.972886][T18393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 762.972900][T18393] Call Trace: [ 762.972908][T18393] [ 762.972917][T18393] dump_stack_lvl+0x100/0x190 [ 762.972946][T18393] should_fail_ex.cold+0x5/0xa [ 762.972971][T18393] ? fs_reclaim_acquire+0x70/0x100 [ 762.973002][T18393] ? tomoyo_realpath_from_path+0xb6/0x690 [ 762.973039][T18393] should_failslab+0xc2/0x120 [ 762.973067][T18393] __kmalloc_noprof+0xe0/0x840 [ 762.973101][T18393] ? kfree+0x1e5/0x6c0 [ 762.973135][T18393] tomoyo_realpath_from_path+0xb6/0x690 [ 762.973175][T18393] tomoyo_path_number_perm+0x23c/0x580 [ 762.973205][T18393] ? tomoyo_path_number_perm+0x22e/0x580 [ 762.973236][T18393] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 762.973272][T18393] ? preempt_count_add+0x76/0x150 [ 762.973312][T18393] ? rcu_is_watching+0x12/0xc0 [ 762.973337][T18393] ? __fget_files+0x215/0x3d0 [ 762.973367][T18393] ? hook_file_ioctl_common+0x140/0x440 [ 762.973400][T18393] ? lock_release+0x24d/0x310 [ 762.973435][T18393] ? __fget_files+0x21f/0x3d0 [ 762.973468][T18393] security_file_ioctl+0xd3/0x230 [ 762.973498][T18393] __x64_sys_ioctl+0xb7/0x210 [ 762.973527][T18393] do_syscall_64+0x115/0x840 [ 762.973552][T18393] ? clear_bhb_loop+0x40/0x90 [ 762.973584][T18393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.973608][T18393] RIP: 0033:0x7eff7e79ce59 [ 762.973627][T18393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.973651][T18393] RSP: 002b:00007eff7f6c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.973673][T18393] RAX: ffffffffffffffda RBX: 00007eff7ea15fa0 RCX: 00007eff7e79ce59 [ 762.973689][T18393] RDX: 0000000000000038 RSI: 0000000080045300 RDI: 0000000000000003 [ 762.973704][T18393] RBP: 00007eff7f6c9090 R08: 0000000000000000 R09: 0000000000000000 [ 762.973719][T18393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.973734][T18393] R13: 00007eff7ea16038 R14: 00007eff7ea15fa0 R15: 00007fffc4f50668 [ 762.973757][T18393] [ 762.973766][T18393] ERROR: Out of memory at tomoyo_realpath_from_path. [ 763.451869][T18396] can: request_module (can-proto-4) failed. [ 763.643067][ T5642] Bluetooth: hci7: command tx timeout [ 764.008660][T18407] misc userio: Invalid payload size [ 765.711965][ T5642] Bluetooth: hci7: command tx timeout [ 766.177345][ T5642] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 767.449697][T18455] loop6: detected capacity change from 0 to 8 [ 768.180253][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 769.958717][T18470] block2mtd: error: cannot open device [ 770.251037][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 771.152676][T18490] sctp: [Deprecated]: syz.4.2832 (pid 18490) Use of int in maxseg socket option. [ 771.152676][T18490] Use struct sctp_assoc_value instead [ 771.632632][T18267] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 771.641367][T18267] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 771.649505][T18267] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 771.657036][T18267] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 771.666165][T18267] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 772.359558][T18497] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.377029][T18497] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.391149][T18497] bridge_slave_0: entered allmulticast mode [ 772.404956][T18497] bridge_slave_0: entered promiscuous mode [ 772.422547][T18497] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.439919][T18497] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.450738][T18497] bridge_slave_1: entered allmulticast mode [ 772.464528][T18497] bridge_slave_1: entered promiscuous mode [ 772.514078][T18497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.537578][T18497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.586521][T18497] team0: Port device team_slave_0 added [ 772.603418][T18497] team0: Port device team_slave_1 added [ 772.644615][T18497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.659802][T18497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.716594][T18497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.738777][T18497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.756749][T18497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.809202][T18497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.871631][T18497] hsr_slave_0: entered promiscuous mode [ 772.888161][T18497] hsr_slave_1: entered promiscuous mode [ 772.899094][T18497] debugfs: 'hsr0' already exists in 'hsr' [ 772.915002][T18497] Cannot create hsr debugfs directory [ 773.220188][T18502] Process accounting paused [ 773.675113][ T5642] Bluetooth: hci8: command tx timeout [ 773.694891][T18521] sctp: [Deprecated]: syz.4.2835 (pid 18521) Use of int in maxseg socket option. [ 773.694891][T18521] Use struct sctp_assoc_value instead [ 774.302961][T18528] serio: Serial port pty173 [ 775.262907][T18267] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 775.271852][T18267] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 775.287643][T18267] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 775.295181][T18267] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 775.302787][T18267] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 775.745878][T18267] Bluetooth: hci8: command tx timeout [ 776.066825][T18535] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.080985][T18535] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.097140][T18535] bridge_slave_0: entered allmulticast mode [ 776.113140][T18535] bridge_slave_0: entered promiscuous mode [ 776.132246][T18535] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.149938][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.166586][T18535] bridge_slave_1: entered allmulticast mode [ 776.184174][T18535] bridge_slave_1: entered promiscuous mode [ 776.235823][T18535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.250913][T18535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.283418][T18535] team0: Port device team_slave_0 added [ 776.316877][T18535] team0: Port device team_slave_1 added [ 776.360872][T18535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.370329][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.397056][T18535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.409943][T18535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.417231][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.443788][T18535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.494889][T18535] hsr_slave_0: entered promiscuous mode [ 776.501291][T18535] hsr_slave_1: entered promiscuous mode [ 776.512419][T18535] debugfs: 'hsr0' already exists in 'hsr' [ 776.525106][T18535] Cannot create hsr debugfs directory [ 776.759113][T18566] FAULT_INJECTION: forcing a failure. [ 776.759113][T18566] name fail_futex, interval 1, probability 0, space 0, times 0 [ 776.791424][T18566] CPU: 0 UID: 0 PID: 18566 Comm: syz.4.2842 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.791464][T18566] Tainted: [L]=SOFTLOCKUP [ 776.791474][T18566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 776.791490][T18566] Call Trace: [ 776.791497][T18566] [ 776.791507][T18566] dump_stack_lvl+0x100/0x190 [ 776.791536][T18566] should_fail_ex.cold+0x5/0xa [ 776.791565][T18566] get_futex_key+0x1d2/0x14f0 [ 776.791612][T18566] ? __pfx_get_futex_key+0x10/0x10 [ 776.791650][T18566] ? __fput+0x68d/0xb50 [ 776.791674][T18566] futex_wait_setup+0x91/0x540 [ 776.791707][T18566] __futex_wait+0x19f/0x300 [ 776.791736][T18566] ? __pfx___futex_wait+0x10/0x10 [ 776.791763][T18566] ? futex_hash+0x311/0x400 [ 776.791798][T18566] ? rcu_is_watching+0x12/0xc0 [ 776.791824][T18566] ? __pfx_futex_wake_mark+0x10/0x10 [ 776.791854][T18566] ? __pfx_futex_hash+0x10/0x10 [ 776.791893][T18566] futex_wait+0xe6/0x370 [ 776.791921][T18566] ? __pfx_futex_wait+0x10/0x10 [ 776.791956][T18566] do_futex+0x265/0x440 [ 776.791979][T18566] ? __pfx_do_futex+0x10/0x10 [ 776.792001][T18566] ? __pfx___might_resched+0x10/0x10 [ 776.792035][T18566] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 776.792066][T18566] __x64_sys_futex+0x34f/0x4d0 [ 776.792091][T18566] ? __pfx___x64_sys_futex+0x10/0x10 [ 776.792115][T18566] ? rcu_is_watching+0x12/0xc0 [ 776.792141][T18566] ? rcu_is_watching+0x12/0xc0 [ 776.792167][T18566] do_syscall_64+0x115/0x840 [ 776.792194][T18566] ? clear_bhb_loop+0x40/0x90 [ 776.792221][T18566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.792247][T18566] RIP: 0033:0x7eff7e79ce59 [ 776.792265][T18566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.792289][T18566] RSP: 002b:00007eff7f6a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 776.792313][T18566] RAX: ffffffffffffffda RBX: 00007eff7ea16098 RCX: 00007eff7e79ce59 [ 776.792329][T18566] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007eff7ea16098 [ 776.792345][T18566] RBP: 00007eff7ea16090 R08: 0000000000000000 R09: 0000000000000000 [ 776.792360][T18566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.792375][T18566] R13: 00007eff7ea16128 R14: 00007fffc4f50580 R15: 00007fffc4f50668 [ 776.792399][T18566] [ 777.338876][T18267] Bluetooth: hci9: command tx timeout [ 777.815926][T18267] Bluetooth: hci8: command tx timeout [ 777.884095][T18574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2844'. [ 777.900903][T18574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2844'. [ 779.408598][T18267] Bluetooth: hci9: command tx timeout [ 779.472248][T18587] netlink: 'syz.4.2848': attribute type 2 has an invalid length. [ 779.886391][T18267] Bluetooth: hci8: command tx timeout [ 781.479794][T18267] Bluetooth: hci9: command tx timeout [ 782.972516][T18617] random: crng reseeded on system resumption [ 783.549534][T18267] Bluetooth: hci9: command tx timeout [ 784.123018][T18267] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 784.134764][T18630] futex_wake_op: syz.4.2858 tries to shift op by -2048; fix this program [ 784.143882][T18630] futex_wake_op: syz.4.2858 tries to shift op by -2048; fix this program [ 784.208995][T18632] usb usb3: usbfs: process 18632 (syz.4.2858) did not claim interface 0 before use [ 785.646440][T18642] FAULT_INJECTION: forcing a failure. [ 785.646440][T18642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 785.660064][T18642] CPU: 0 UID: 0 PID: 18642 Comm: syz.4.2860 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.660101][T18642] Tainted: [L]=SOFTLOCKUP [ 785.660110][T18642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.660125][T18642] Call Trace: [ 785.660133][T18642] [ 785.660141][T18642] dump_stack_lvl+0x100/0x190 [ 785.660170][T18642] should_fail_ex.cold+0x5/0xa [ 785.660198][T18642] should_fail_alloc_page+0xeb/0x140 [ 785.660228][T18642] prepare_alloc_pages+0x1f0/0x5f0 [ 785.660259][T18642] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 785.660300][T18642] ? folio_batch_move_lru+0x37c/0xc00 [ 785.660365][T18642] ? lock_release+0x24d/0x310 [ 785.660399][T18642] ? trace_irq_enable.constprop.0+0x122/0x160 [ 785.660437][T18642] ? folio_batch_move_lru+0x3a9/0xc00 [ 785.660472][T18642] ? __pfx_lru_add+0x10/0x10 [ 785.660507][T18642] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 785.660542][T18642] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 785.660581][T18642] ? kasan_save_stack+0x30/0x50 [ 785.660610][T18642] ? __css_rstat_updated+0x1ce/0x5a0 [ 785.660647][T18642] ? rcu_is_watching+0x12/0xc0 [ 785.660672][T18642] ? rcu_is_watching+0x12/0xc0 [ 785.660695][T18642] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 785.660726][T18642] ? policy_nodemask+0xed/0x4f0 [ 785.660756][T18642] alloc_pages_mpol+0x1fb/0x540 [ 785.660785][T18642] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 785.660814][T18642] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 785.660850][T18642] folio_alloc_mpol_noprof+0x36/0x260 [ 785.660885][T18642] vma_alloc_folio_noprof+0xed/0x1d0 [ 785.660919][T18642] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 785.660955][T18642] ? rcu_is_watching+0x12/0xc0 [ 785.660980][T18642] do_anonymous_page+0xb2b/0x2080 [ 785.661016][T18642] ? rcu_read_unlock+0x2d/0xb0 [ 785.661054][T18642] __handle_mm_fault+0x1d2c/0x2a00 [ 785.661091][T18642] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 785.661115][T18642] ? __pfx___handle_mm_fault+0x10/0x10 [ 785.661151][T18642] ? pte_offset_map_lock+0x174/0x320 [ 785.661185][T18642] ? follow_page_pte+0x4d0/0x13f0 [ 785.661215][T18642] handle_mm_fault+0x37b/0xa30 [ 785.661252][T18642] __get_user_pages+0x1178/0x32a0 [ 785.661285][T18642] ? __pfx___get_user_pages+0x10/0x10 [ 785.661314][T18642] ? __pfx___might_resched+0x10/0x10 [ 785.661350][T18642] populate_vma_page_range+0x267/0x3f0 [ 785.661382][T18642] ? __pfx_populate_vma_page_range+0x10/0x10 [ 785.661413][T18642] ? __pfx_find_vma_intersection+0x10/0x10 [ 785.661441][T18642] ? do_mmap+0x93f/0x12f0 [ 785.661469][T18642] __mm_populate+0x107/0x3a0 [ 785.661499][T18642] ? __pfx___mm_populate+0x10/0x10 [ 785.661530][T18642] ? up_write+0x2e5/0x5c0 [ 785.661551][T18642] vm_mmap_pgoff+0x37f/0x470 [ 785.661579][T18642] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 785.661609][T18642] ? __pfx_do_futex+0x10/0x10 [ 785.661630][T18642] ? __pfx_do_sys_openat2+0x10/0x10 [ 785.661657][T18642] ksys_mmap_pgoff+0xe4/0x610 [ 785.661684][T18642] ? __x64_sys_futex+0x358/0x4d0 [ 785.661706][T18642] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 785.661733][T18642] ? xfd_validate_state+0x129/0x190 [ 785.661760][T18642] __x64_sys_mmap+0x125/0x190 [ 785.661787][T18642] do_syscall_64+0x115/0x840 [ 785.661812][T18642] ? clear_bhb_loop+0x40/0x90 [ 785.661844][T18642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.661869][T18642] RIP: 0033:0x7eff7e79ce59 [ 785.661888][T18642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.661912][T18642] RSP: 002b:00007eff7f6c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 785.661936][T18642] RAX: ffffffffffffffda RBX: 00007eff7ea15fa0 RCX: 00007eff7e79ce59 [ 785.661952][T18642] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 785.661967][T18642] RBP: 00007eff7e832e6f R08: 0000000000000002 R09: 0000000000008000 [ 785.661983][T18642] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 785.661998][T18642] R13: 00007eff7ea16038 R14: 00007eff7ea15fa0 R15: 00007fffc4f50668 [ 785.662021][T18642] [ 788.635999][T18665] mtrr: base(0x1000000) is not aligned on a size(0x0000) boundary [ 790.957332][ T30] INFO: task syz-executor:16537 blocked for more than 143 seconds. [ 790.974992][ T30] Tainted: G L syzkaller #0 [ 790.991795][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 791.013465][ T30] task:syz-executor state:D stack:24160 pid:16537 tgid:16537 ppid:1 task_flags:0x480140 flags:0x00080002 [ 791.056466][ T30] Call Trace: [ 791.069358][ T30] [ 791.081878][ T30] __schedule+0x125c/0x6730 [ 791.098320][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 791.117477][ T30] ? kasan_save_stack+0x3f/0x50 [ 791.135194][ T30] ? kasan_save_stack+0x30/0x50 [ 791.153500][ T30] ? kasan_record_aux_stack+0xa7/0xc0 [ 791.172283][ T30] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 791.196175][ T30] ? dentry_free+0x145/0x2b0 [ 791.213534][ T30] ? __pfx___schedule+0x10/0x10 [ 791.230677][ T30] ? rcu_is_watching+0x12/0xc0 [ 791.250274][ T30] ? schedule+0x2bf/0x390 [ 791.264562][ T30] ? lock_release+0x24d/0x310 [ 791.287546][ T30] schedule+0xdd/0x390 [ 791.302986][ T30] schedule_timeout+0x1b2/0x280 [ 791.325088][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 791.339811][ T30] ? rcu_is_watching+0x12/0xc0 [ 791.358014][ T30] ? rcu_is_watching+0x12/0xc0 [ 791.374262][ T30] __wait_for_common+0x2e7/0x4c0 [ 791.396773][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 791.413675][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 791.424927][ T30] remove_one+0x312/0x420 [ 791.439419][ T30] ? up_write+0x2e5/0x5c0 [ 791.453231][ T30] __simple_recursive_removal+0x148/0x5c0 [ 791.462331][ T30] ? __pfx_remove_one+0x10/0x10 [ 791.473223][ T30] debugfs_remove+0x5d/0x80 [ 791.482196][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 791.492985][ T30] nsim_dev_reload_destroy+0x144/0x4a0 [ 791.506717][ T30] nsim_drv_remove+0x52/0x1e0 [ 791.517675][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 791.529245][ T30] device_remove+0xcb/0x180 [ 791.538432][ T30] device_release_driver_internal+0x44e/0x620 [ 791.551336][ T30] bus_remove_device+0x2bc/0x560 [ 791.562408][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 791.580939][ T30] ? __pfx_device_remove_attrs+0x10/0x10 [ 791.619682][ T30] device_del+0x376/0x9b0 [ 791.646342][ T30] ? __pfx_device_del+0x10/0x10 [ 791.670393][ T30] ? __mutex_lock+0x26d/0x1bd0 [ 791.680913][ T30] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 791.692715][ T30] device_unregister+0x1d/0xe0 [ 791.703630][ T30] del_device_store+0x346/0x480 [ 791.714613][ T30] ? __pfx_del_device_store+0x10/0x10 [ 791.727625][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 791.737192][ T30] ? rcu_is_watching+0x12/0xc0 [ 791.746667][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 791.757944][ T30] ? __pfx_del_device_store+0x10/0x10 [ 791.769776][ T30] bus_attr_store+0x74/0xb0 [ 791.778933][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 791.790302][ T30] sysfs_kf_write+0xf2/0x150 [ 791.799521][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 791.810783][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 791.820933][ T30] vfs_write+0x6ac/0x1050 [ 791.829859][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 791.844908][ T30] ? __pfx_vfs_write+0x10/0x10 [ 791.854374][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 791.866049][ T30] ksys_write+0x12a/0x250 [ 791.875122][ T30] ? __pfx_ksys_write+0x10/0x10 [ 791.884587][ T30] ? rcu_is_watching+0x12/0xc0 [ 791.895712][ T30] do_syscall_64+0x115/0x840 [ 791.904856][ T30] ? clear_bhb_loop+0x40/0x90 [ 791.914827][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.927973][ T30] RIP: 0033:0x7f495e75d68e [ 791.936990][ T30] RSP: 002b:00007ffd94b78e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 791.955584][ T30] RAX: ffffffffffffffda RBX: 000055555e640500 RCX: 00007f495e75d68e [ 791.973522][ T30] RDX: 0000000000000001 RSI: 00007ffd94b78f10 RDI: 0000000000000005 [ 791.981927][ T30] RBP: 00007f495e8336f2 R08: 0000000000000000 R09: 0000000000000000 [ 791.989936][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.998256][ T30] R13: 00007ffd94b78f10 R14: 00007f495f544620 R15: 0000000000000003 [ 792.006428][ T30] [ 792.044660][ T30] INFO: task syz.0.2422:16598 blocked for more than 144 seconds. [ 792.074633][ T30] Tainted: G L syzkaller #0 [ 792.089530][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 792.106259][ T30] task:syz.0.2422 state:D stack:29072 pid:16598 tgid:16596 ppid:15818 task_flags:0x400040 flags:0x00080002 [ 792.125416][ T30] Call Trace: [ 792.128742][ T30] [ 792.132050][ T30] __schedule+0x125c/0x6730 [ 792.136612][ T30] ? do_raw_spin_lock+0x128/0x260 [ 792.142228][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 792.147682][ T30] ? debug_mutex_add_waiter+0x122/0x200 [ 792.153881][ T30] ? rcu_is_watching+0x12/0xc0 [ 792.158717][ T30] ? __pfx___schedule+0x10/0x10 [ 792.166064][ T30] ? rcu_is_watching+0x12/0xc0 [ 792.171102][ T30] ? schedule+0x2bf/0x390 [ 792.175478][ T30] ? lock_release+0x24d/0x310 [ 792.180574][ T30] schedule+0xdd/0x390 [ 792.184716][ T30] schedule_preempt_disabled+0x13/0x30 [ 792.190472][ T30] __mutex_lock+0xccc/0x1bd0 [ 792.195098][ T30] ? devlink_health_report+0x656/0xb00 [ 792.200949][ T30] ? __pfx_devlink_nl_notify_filter+0x10/0x10 [ 792.207109][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 792.212566][ T30] ? devlink_recover_notify.constprop.0+0x443/0x550 [ 792.219224][ T30] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 792.226073][ T30] ? devlink_health_report+0x656/0xb00 [ 792.232449][ T30] devlink_health_report+0x656/0xb00 [ 792.237819][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 792.243890][ T30] ? _copy_from_user+0x59/0xd0 [ 792.248716][ T30] nsim_dev_health_break_write+0x166/0x210 [ 792.255163][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 792.261706][ T30] ? rcu_is_watching+0x12/0xc0 [ 792.267040][ T30] full_proxy_write+0x135/0x1a0 [ 792.274074][ T30] vfs_write+0x2aa/0x1050 [ 792.278457][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 792.284106][ T30] ? __pfx_vfs_write+0x10/0x10 [ 792.288913][ T30] ? rcu_is_watching+0x12/0xc0 [ 792.294219][ T30] ? __fget_files+0x21f/0x3d0 [ 792.298950][ T30] ksys_write+0x12a/0x250 [ 792.303592][ T30] ? __pfx_ksys_write+0x10/0x10 [ 792.308489][ T30] ? rcu_is_watching+0x12/0xc0 [ 792.318003][ T30] do_syscall_64+0x115/0x840 [ 792.322811][ T30] ? clear_bhb_loop+0x40/0x90 [ 792.327555][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.333815][ T30] RIP: 0033:0x7f271839ce59 [ 792.338268][ T30] RSP: 002b:00007f27192d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 792.346961][ T30] RAX: ffffffffffffffda RBX: 00007f2718616090 RCX: 00007f271839ce59 [ 792.355149][ T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000005 [ 792.363639][ T30] RBP: 00007f2718432e6f R08: 0000000000000000 R09: 0000000000000000 [ 792.372360][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.382106][ T30] R13: 00007f2718616128 R14: 00007f2718616090 R15: 00007ffd0ef97208 [ 792.390964][ T30] [ 792.416819][ T30] INFO: lockdep is turned off. [ 792.432591][ T30] NMI backtrace for cpu 0 [ 792.432615][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 792.432654][ T30] Tainted: [L]=SOFTLOCKUP [ 792.432662][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 792.432676][ T30] Call Trace: [ 792.432684][ T30] [ 792.432692][ T30] dump_stack_lvl+0x100/0x190 [ 792.432722][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 792.432749][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 792.432776][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 792.432877][ T30] sys_info+0x141/0x190 [ 792.432907][ T30] watchdog+0xcb1/0x1030 [ 792.432941][ T30] ? trace_irq_enable.constprop.0+0x122/0x160 [ 792.432977][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.433007][ T30] ? __kthread_parkme+0x18c/0x230 [ 792.433033][ T30] ? kthread+0x13a/0x450 [ 792.433058][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.433086][ T30] kthread+0x370/0x450 [ 792.433112][ T30] ? __pfx_kthread+0x10/0x10 [ 792.433141][ T30] ret_from_fork+0x72b/0xd50 [ 792.433166][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 792.433192][ T30] ? __switch_to+0x800/0x10f0 [ 792.433231][ T30] ? __switch_to_asm+0x39/0x70 [ 792.433262][ T30] ? __pfx_kthread+0x10/0x10 [ 792.433289][ T30] ret_from_fork_asm+0x1a/0x30 [ 792.433326][ T30] [ 792.675766][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 792.682671][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 792.693367][ T30] Tainted: [L]=SOFTLOCKUP [ 792.697718][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 792.707786][ T30] Call Trace: [ 792.711071][ T30] [ 792.714009][ T30] dump_stack_lvl+0x100/0x190 [ 792.718699][ T30] vpanic+0x552/0x970 [ 792.722695][ T30] ? __pfx_vpanic+0x10/0x10 [ 792.727215][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 792.733395][ T30] panic+0xd1/0xe0 [ 792.737130][ T30] ? __pfx_panic+0x10/0x10 [ 792.741559][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 792.747740][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 792.753941][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 792.760120][ T30] ? watchdog.cold+0x1ec/0x234 [ 792.764911][ T30] ? watchdog+0xcc1/0x1030 [ 792.769345][ T30] watchdog.cold+0x1fd/0x234 [ 792.773945][ T30] ? trace_irq_enable.constprop.0+0x122/0x160 [ 792.780119][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.784833][ T30] ? __kthread_parkme+0x18c/0x230 [ 792.789873][ T30] ? kthread+0x13a/0x450 [ 792.794132][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.798829][ T30] kthread+0x370/0x450 [ 792.802917][ T30] ? __pfx_kthread+0x10/0x10 [ 792.807527][ T30] ret_from_fork+0x72b/0xd50 [ 792.812144][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 792.817268][ T30] ? __switch_to+0x800/0x10f0 [ 792.821963][ T30] ? __switch_to_asm+0x39/0x70 [ 792.826743][ T30] ? __pfx_kthread+0x10/0x10 [ 792.831372][ T30] ret_from_fork_asm+0x1a/0x30 [ 792.836179][ T30] [ 792.839278][ T30] Kernel Offset: disabled [ 792.843613][ T30] Rebooting in 86400 seconds..