last executing test programs: 2m42.39605894s ago: executing program 1 (id=3149): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) prctl$auto_PR_SCHED_CORE_GET(0x1, 0x0, 0xffffffffffffffff, 0x7, 0x2172) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00982a", @ANYRES16, @ANYBLOB="000227bd7000ffdbdf2504000000080001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x24040080) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0xffff) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open$dir(&(0x7f00000002c0)='}[,&*}\x00', 0x2000, 0x71) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x80, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000000c0)=""/192, 0xc0) bind$auto(0x3, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x1) r3 = getpid() process_vm_readv$auto(r3, 0x0, 0x5, &(0x7f0000000380)={&(0x7f00000003c0)="5d4846965d0b30daa3e6601c064002004ef4e3449da9de6d8e81b8ef5ba7539963c8a299f8bf8f816d2fd597aff09165fb11db610530b5ff686981cc7cb546f1a6192dc51d47abb1d077af445519b9844596b7f246681246ac9d2c851ac3803d504a303643768bea050522be34f77c5e0127fe6b3aeb745f71b0d241ed3a8abec0e46b13b787c00958c3d840b59099cb02f74d9cce7e86f05e60a70ef0a00d046c010000000000000000"}, 0x6, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) dup$auto(r4) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40814}, 0x24008000) r6 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r6, &(0x7f0000000000)={&(0x7f0000000000), 0x101}, 0x2) pread64$auto(r5, 0x0, 0x6000000000, 0x100000004) 2m41.126568997s ago: executing program 1 (id=3153): mmap$auto(0x0, 0x1, 0x1003, 0xeb1, 0xfffffffffffffffa, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f00000001c0), 0x0) r1 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) write$auto(r1, 0x0, 0xfdef) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m39.45996667s ago: executing program 1 (id=3157): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) umount2$auto(0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x14) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x80000, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r4, 0x80085502, &(0x7f0000000300)={0xb, 0xf1e, "e1ff10de4db1b895e4906e6bad378c490071e8b7efdc67210354823953955f4d8e8c7e00e551a3e4d752c15d3990e56241b0eaaa30b68f0e319a47ef5bdc657de54ceda47389c04fb2a281582a29b56f130eaba8385b50dbf7a4dde28d7ab89aecdc680e4e554452603bd6bb4a6d05848064a7151be45f2ee90ec2a77aaa3012dab216e642"}) read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000100)="c80d1b5d399b3963", 0x8) setns(0xc9, 0x0) unshare$auto(0x9) r6 = fcntl$auto_F_UNLCK(r5, 0x9, 0x2) ioctl$auto(r1, 0x2, r6) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m37.328342853s ago: executing program 1 (id=3161): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0xc402, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4891c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) pwrite64$auto(0xc8, 0x0, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd8/hctx0/cpu0/poll_rq_list\x00', 0x848000, 0x0) pread64$auto(r2, 0x0, 0x6c, 0xfc) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x106) connect$auto(0x3, 0x0, 0x58) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sysfs$auto(0x2, 0x3b, 0x4) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r3, r0, 0x0, 0x1009) 2m34.614928902s ago: executing program 1 (id=3165): socket(0x2, 0x5, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x3, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video39\x00', 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r1 = syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x20, 0x0, 0x0}, 0x58) ptrace$auto(0x4, r1, 0x8000000000000000, 0xfff) r2 = socket(0x2, 0x80002, 0x73) bind$auto(r2, 0x0, 0x6b) setns(0xffffffffffffffff, 0x40000000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/netfs/volumes\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/250, 0xfa) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1800"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) settimeofday$auto(&(0x7f0000000380)={0xffffffffffffffff, 0xfb8}, &(0x7f00000003c0)={0x1, 0x8}) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x2, 0x40, 0x7, 0x5, 0x1, 0x400009c94, 0xe3e, 0xbfb, 0x8, 0x5, 0x100000001, 0x80000000, 0x0, 0x9, 0xe0b]}, &(0x7f0000000240)={[0x7, 0x0, 0x772e, 0x8000000000000000, 0xfffffffffffffffd, 0x9c1c, 0x9, 0x7ff, 0xffffffffffff7fff, 0x8, 0x0, 0x8000000000000000, 0x4, 0x7, 0xffffffffffffffff]}, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x4) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) 2m33.00380212s ago: executing program 1 (id=3169): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) umount2$auto(0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x14) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x80000, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r4, 0x80085502, &(0x7f0000000300)={0xb, 0xf1e, "e1ff10de4db1b895e4906e6bad378c490071e8b7efdc67210354823953955f4d8e8c7e00e551a3e4d752c15d3990e56241b0eaaa30b68f0e319a47ef5bdc657de54ceda47389c04fb2a281582a29b56f130eaba8385b50dbf7a4dde28d7ab89aecdc680e4e554452603bd6bb4a6d05848064a7151be45f2ee90ec2a77aaa3012dab216e642"}) read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000100)="c80d1b5d399b3963", 0x8) setns(0xc9, 0x0) unshare$auto(0x9) r6 = fcntl$auto_F_UNLCK(r5, 0x9, 0x2) ioctl$auto(r1, 0x2, r6) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m32.526756084s ago: executing program 2 (id=3170): socket(0x2, 0x5, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x3, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video39\x00', 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r1 = syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x20, 0x0, 0x0}, 0x58) ptrace$auto(0x4, r1, 0x8000000000000000, 0xfff) r2 = socket(0x2, 0x80002, 0x73) bind$auto(r2, 0x0, 0x6b) setns(0xffffffffffffffff, 0x40000000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/netfs/volumes\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/250, 0xfa) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1800"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) settimeofday$auto(&(0x7f0000000380)={0xffffffffffffffff, 0xfb8}, &(0x7f00000003c0)={0x1, 0x8}) select$auto(0x8, &(0x7f0000000180)={[0x8, 0x2, 0x40, 0x7, 0x5, 0x1, 0x400009c94, 0xe3e, 0xbfb, 0x8, 0x5, 0x100000001, 0x80000000, 0x0, 0x9, 0xe0b]}, &(0x7f0000000240)={[0x7, 0x0, 0x772e, 0x8000000000000000, 0xfffffffffffffffd, 0x9c1c, 0x9, 0x7ff, 0xffffffffffff7fff, 0x8, 0x0, 0x8000000000000000, 0x4, 0x7, 0xffffffffffffffff]}, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x4) (fail_nth: 1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) 2m30.874137098s ago: executing program 2 (id=3174): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) umount2$auto(0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES8=r2], 0xfffffffffffffd6c}}, 0x14) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x80000, 0x0) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r5, 0x80085502, &(0x7f0000000300)={0xb, 0xf1e, "e1ff10de4db1b895e4906e6bad378c490071e8b7efdc67210354823953955f4d8e8c7e00e551a3e4d752c15d3990e56241b0eaaa30b68f0e319a47ef5bdc657de54ceda47389c04fb2a281582a29b56f130eaba8385b50dbf7a4dde28d7ab89aecdc680e4e554452603bd6bb4a6d05848064a7151be45f2ee90ec2a77a"}) read$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r7, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\x00\x00\x00\x00[r4G\xc5\x8d\xcb\x10\xae\x88\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8@\x00|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf\xf5\x9a\xfd\xdeA\x9dZ\x1e\xdb\x1b\x1b\xb02\x03\x87c^\x85\xa9\x1dD$\xd4\xe4\x86\x95=\xf1\x19w$1yL>\xcd\x94W>xzP\x17\x93\x9alN\x9f\xfa\\\x84\xa8\x92\xbfG\x18s\x01\xc2\xe1\xed\xb3\"\xeb\x9d\x8b\x04\xc3\xda\xe4L\x9c\x8d\v\x96o\x14\xf7\x9c?\xf2\r>\xc3\xad\xaeQA\x05\xe6\n\x9el\x85]\xed\xf0\xa2T\xbc:\xefD\f[C\xb0:\x0f\xafqgl\x02R\x01\x16\x81S\xbdk\xd8\x9dZ%W\xbc~J\xd7\xf4?\xa2\xbd\x00\xa2\x7f\x11\x81\xce\xe55X38\xac\xd4\x15\x97\x83\"g\x15|\xf3t\x93ymYi\x1b\xdf\xd3>nS\xad\xa6/\xe7\x88\x8a\xc3\x00\xb7\xb8\xf24\x11\xe6\x15\xea\x16\xec\xaf?\xe0Y\xf30\x9a\xf5\x02\x9a0\x97\x1d\x11wL|\xde\xff\xbc\xa7\x03%i\xdc\x92\n\xb9U{m2\xba\\B\xb7U\f-r\xef\"\xbc\xa8\xcbc\x11z\x88\x9f\xa7\x06\xe2\xe8\x9c\x87ZL\xfeju\x15\xbeLf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x103140, 0x20) setsockopt$auto_SO_RCVLOWAT(r5, 0x9, 0x12, &(0x7f0000000380)='/dev/snd/midiC2D0\x00', 0x4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0104000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x4880) r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) setns(0xc9, 0x0) socket(0x3b, 0xc78e83697a7c91f3, 0x1) ioctl$auto(0x3, 0x8946, 0x7f) write$auto_nsim_dev_health_break_fops_health(r6, &(0x7f0000000280)="fca3a5c8f56e144a4a016cf65685cca8da50fb558aef4568f9de22668bd88f91b2f311060f7ec7c1c82556860d600bbe435bb0e89ddb0844c130ba4e67d94897ad3b73b6f4143208dccef35f47c67e1dac00a9e00161ce4fc3d4d43b1f531ece43581a6feec0f0bea20bbba3582dc2d8dfc5e05bbfa734325a3380de3992baccd572460bd70a6580cf", 0x89) 2m9.162857s ago: executing program 32 (id=3183): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x3892977e, 0x0) mmap$auto(0xfffffffffffffffe, 0x400008, 0xa1, 0x9b72, r0, 0x6) r1 = socket(0xa, 0x2, 0x0) sendto$auto(r1, 0x0, 0x402, 0xacf8, &(0x7f0000000000)=@generic={0xa, "e2e13d0ee94e00"}, 0x1b) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\xc5(\x13P\x8f\x97\r\xe6\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x103140, 0x20) setsockopt$auto_SO_RCVLOWAT(r5, 0x9, 0x12, &(0x7f0000000380)='/dev/snd/midiC2D0\x00', 0x4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0104000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x4880) r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) setns(0xc9, 0x0) socket(0x3b, 0xc78e83697a7c91f3, 0x1) ioctl$auto(0x3, 0x8946, 0x7f) write$auto_nsim_dev_health_break_fops_health(r6, &(0x7f0000000280)="fca3a5c8f56e144a4a016cf65685cca8da50fb558aef4568f9de22668bd88f91b2f311060f7ec7c1c82556860d600bbe435bb0e89ddb0844c130ba4e67d94897ad3b73b6f4143208dccef35f47c67e1dac00a9e00161ce4fc3d4d43b1f531ece43581a6feec0f0bea20bbba3582dc2d8dfc5e05bbfa734325a3380de3992baccd572460bd70a6580cf", 0x89) 9.006477584s ago: executing program 0 (id=3433): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000180), r1) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xfffffffffffffdcf}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) r3 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0xb4) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000016c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x4840) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000000400)="76fc6861e518b03d3af1cc2ebcdfd5e0cd5540aeac053e2c4b4a1b18beed24caea174409c4f0ed68fd3c5bb492bf76eb9357be8138e02a8426bd31000000000000000097a0df2645ca024eaa0597a3c440dee28c48a216121fc6981ab33eb825a809c75f73cf0f686dfea6ed4db572fe512b58f3cb3b65710e9ec7a632f7dd0b6c61818be53f34436b91f4a1f7", 0x6) futimesat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x8, 0x4000000000003}) setpriority$auto_PRIO_PGRP(0x1, r3, 0x200) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000001080)="20edbfb0888b5f2ddea7f1e798fa1babfa3a3753ca8aee370a14bbe9ba001d428f2c884da4a553eef8b14a0c5282ce5fc4ea1b20343af80a54ce100f8d20929c64c1f628001a4702032f49", 0xff73) pipe2$auto(0x0, 0x80) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r5, 0x0, 0x200c8) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x401) 7.188667917s ago: executing program 0 (id=3435): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0x7, 0xffffffffffffffff}) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/psaux\x00', 0x1, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000540)='/Eev/I\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\xaa\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xe2\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\x03\x00\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8I\x8f\xb4\xb3\xcau\xbd9\xb4\xd4\xb7\x87;S\x0e\x9a\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x05\xd5e\xe5\xa8\x0e\xe6\x9d\xf9\x90\xcb\x9fz\x96\x8b\x7fC\n\x04\xf1\x0f\xaa\xe3\xc8\xa4s\x8eR\xfc\xbb4\xc2\x85\x97\x89\x96\xac\x99$\xdd\vdL\xa8\xb9\xd6\xd0\xf4\x8b\xa6G\xc2Ds\xcarl\x02\x8cz\xfd\xc5\xbc\"Nl\xdf\xa7\x9eWx\x18\xa5\x14\x17\xb8\xe3\x02\xdd\x01\x98\\(\x11\x18\xf7sTmi!\x86r\x11K9~\x95^\x7f\xfc\xe6\x82]\xea4\xb1\x9a\x01\xbcV\xee\xb4)\xf2\xbdd\xe6\xe6r\x1c\x0eB\xcd\xa8o\x8b(\xa1\x10C\xaa\xaa\xc2\x99\xe9z\xee\xe0^_R%\x17g\xac5\xf7\xff\xff\xff\xdf\r\xec\x86k\x18\xe94(\xdeNxU\xfcH5\xa6\xc3\xbf\xa8\x8c\x9b\x10)\xabS\x8f\x00\xbb\xc0#n/\xf0\xb4\x83o\x86e\x81>M\t\v}\x9e4\x97f\\\xa8*\xa2W\xcfu\xb7UR\xb0L\x8e?Y\x10\b\xa6\x9a\xea(\x1c\xf7\xa1\xda\x81\x106\xeea-\x8e\x8b^\xed$p\xfc|\xac\xf6\xd6\x1d,\xf2\x1b\xfceJ\xd8Q\xd5\xb8\x1dj\xaa\x9e\xae\t\x825&b\xab!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x94\xfd:`-\xb5\x1dI\xb8.[\xc1\x04\x1d\x80\xb35#\xbb', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000280)="c97ce1a48c50ac2344cfd7c9") select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9242, 0x0) read$auto_sco_debugfs_fops_(r0, &(0x7f00000000c0)=""/51, 0x33) sendfile$auto(r5, r5, 0x0, 0x5) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) bpf$auto(0x5, &(0x7f00000001c0)=@bpf_attr_0={0x7, 0xfce8, 0x200, 0x3, 0x7, 0xffffffffffffffff, 0xffff, "2af051b26b658a20d8dc6b3662034b19", 0x0, 0xffffffffffffffff, 0x8000005, 0x7, 0x6, 0x8000000000000006, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) writev$auto(r6, &(0x7f0000001740)={&(0x7f0000000740)="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", 0x7}, 0x1) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto_BLKGETSIZE(r8, 0x1260, 0x0) setfsuid$auto(0xee00) socket(0x2, 0x6, 0x100) ioctl$auto_NVRAM_INIT(r4, 0x7040, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) pwrite64$auto(r2, &(0x7f00000002c0)=',!{\x00', 0xfffffffffffff5e2, 0x7) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) close_range$auto(r7, 0xfffffffffffff000, 0x80000001) ioctl$auto_BLKOPENZONE(r8, 0x40101286, &(0x7f00000003c0)={0x8, 0x9}) 5.55847834s ago: executing program 0 (id=3438): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) umount2$auto(0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES8=r2], 0xfffffffffffffd6c}}, 0x14) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x80000, 0x0) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r5, 0x80085502, &(0x7f0000000300)={0xb, 0xf1e, "e1ff10de4db1b895e4906e6bad378c490071e8b7efdc67210354823953955f4d8e8c7e00e551a3e4d752c15d3990e56241b0eaaa30b68f0e319a47ef5bdc657de54ceda47389c04fb2a281582a29b56f130eaba8385b50dbf7a4dde28d7ab89aecdc680e4e554452603bd6bb4a6d05848064a7151be45f2ee90ec2a77aaa3012dab216e642"}) read$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r7, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\x00\x00\x00\x00[r4G\xc5\x8d\xcb\x10\xae\x88\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8@\x00|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf\xf5\x9a\xfd\xdeA\x9dZ\x1e\xdb\x1b\x1b\xb02\x03\x87c^\x85\xa9\x1dD$\xd4\xe4\x86\x95=\xf1\x19w$1yL>\xcd\x94W>xzP\x17\x93\x9alN\x9f\xfa\\\x84\xa8\x92\xbfG\x18s\x01\xc2\xe1\xed\xb3\"\xeb\x9d\x8b\x04\xc3\xda\xe4L\x9c\x8d\v\x96o\x14\xf7\x9c?\xf2\r>\xc3\xad\xaeQA\x05\xe6\n\x9el\x85]\xed\xf0\xa2T\xbc:\xefD\f[C\xb0:\x0f\xafqgl\x02R\x01\x16\x81S\xbdk\xd8\x9dZ%W\xbc~J\xd7\xf4?\xa2\xbd\x00\xa2\x7f\x11\x81\xce\xe55X38\xac\xd4\x15\x97\x83\"g\x15|\xf3t\x93ymYi\x1b\xdf\xd3>nS\xad\xa6/\xe7\x88\x8a\xc3\x00\xb7\xb8\xf24\x11\xe6\x15\xea\x16\xec\xaf?\xe0Y\xf30\x9a\xf5\x02\x9a0\x97\x1d\x11wL|\xde\xff\xbc\xa7\x03%i\xdc\x92\n\xb9U{m2\xba\\B\xb7U\f-r\xef\"\xbc\xa8\xcbc\x11z\x88\x9f\xa7\x06\xe2\xe8\x9c\x87ZL\xfeju\x15\xbeLf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) umount2$auto(0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX], 0xfffffffffffffd6c}}, 0x14) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x80000, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) setns(0xc9, 0x0) unshare$auto(0x9) r5 = fcntl$auto_F_UNLCK(r4, 0x9, 0x2) ioctl$auto(r1, 0x2, r5) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.570053161s ago: executing program 3 (id=3442): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x40000, 0x0) ioctl$auto_EVIOCREVOKE(r0, 0x40044591, 0x0) 3.493976314s ago: executing program 3 (id=3443): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000180), r1) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xfffffffffffffdcf}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) r3 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0xb4) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000016c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x4840) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000000400)="76fc6861e518b03d3af1cc2ebcdfd5e0cd5540aeac053e2c4b4a1b18beed24caea174409c4f0ed68fd3c5bb492bf76eb9357be8138e02a8426bd31000000000000000097a0df2645ca024eaa0597a3c440dee28c48a216121fc6981ab33eb825a809c75f73cf0f686dfea6ed4db572fe512b58f3cb3b65710e9ec7a632f7dd0b6c61818be53f34436b91f4a1f7", 0x6) futimesat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x8, 0x4000000000003}) setpriority$auto_PRIO_PGRP(0x1, r3, 0x200) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000001080)="20edbfb0888b5f2ddea7f1e798fa1babfa3a3753ca8aee370a14bbe9ba001d428f2c884da4a553eef8b14a0c5282ce5fc4ea1b20343af80a54ce100f8d20929c64c1f628001a4702032f49", 0xff73) pipe2$auto(0x0, 0x80) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r4, 0x0, 0x200c8) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x401) 2.177309007s ago: executing program 3 (id=3444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000000), r0) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002900)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdc07, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}}, 0xc0) 2.157416038s ago: executing program 0 (id=3445): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0x7, 0xffffffffffffffff}) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/psaux\x00', 0x1, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000540)='/Eev/I\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\xaa\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xe2\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\x03\x00\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8I\x8f\xb4\xb3\xcau\xbd9\xb4\xd4\xb7\x87;S\x0e\x9a\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x05\xd5e\xe5\xa8\x0e\xe6\x9d\xf9\x90\xcb\x9fz\x96\x8b\x7fC\n\x04\xf1\x0f\xaa\xe3\xc8\xa4s\x8eR\xfc\xbb4\xc2\x85\x97\x89\x96\xac\x99$\xdd\vdL\xa8\xb9\xd6\xd0\xf4\x8b\xa6G\xc2Ds\xcarl\x02\x8cz\xfd\xc5\xbc\"Nl\xdf\xa7\x9eWx\x18\xa5\x14\x17\xb8\xe3\x02\xdd\x01\x98\\(\x11\x18\xf7sTmi!\x86r\x11K9~\x95^\x7f\xfc\xe6\x82]\xea4\xb1\x9a\x01\xbcV\xee\xb4)\xf2\xbdd\xe6\xe6r\x1c\x0eB\xcd\xa8o\x8b(\xa1\x10C\xaa\xaa\xc2\x99\xe9z\xee\xe0^_R%\x17g\xac5\xf7\xff\xff\xff\xdf\r\xec\x86k\x18\xe94(\xdeNxU\xfcH5\xa6\xc3\xbf\xa8\x8c\x9b\x10)\xabS\x8f\x00\xbb\xc0#n/\xf0\xb4\x83o\x86e\x81>M\t\v}\x9e4\x97f\\\xa8*\xa2W\xcfu\xb7UR\xb0L\x8e?Y\x10\b\xa6\x9a\xea(\x1c\xf7\xa1\xda\x81\x106\xeea-\x8e\x8b^\xed$p\xfc|\xac\xf6\xd6\x1d,\xf2\x1b\xfceJ\xd8Q\xd5\xb8\x1dj\xaa\x9e\xae\t\x825&b\xab!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x94\xfd:`-\xb5\x1dI\xb8.[\xc1\x04\x1d\x80\xb35#\xbb', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) read$auto_sco_debugfs_fops_(r0, &(0x7f00000000c0)=""/51, 0x33) sendfile$auto(r5, r5, 0x0, 0x5) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) writev$auto(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000740)="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", 0x7}, 0x1) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto_BLKGETSIZE(r6, 0x1260, 0x0) setfsuid$auto(0xee00) socket(0x2, 0x6, 0x100) ioctl$auto_NVRAM_INIT(r4, 0x7040, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) pwrite64$auto(r2, &(0x7f00000002c0)=',!{\x00', 0xfffffffffffff5e2, 0x7) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x80000001) ioctl$auto_BLKOPENZONE(r6, 0x40101286, &(0x7f00000003c0)={0x8, 0x9}) 2.000958279s ago: executing program 3 (id=3446): keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 1.868679544s ago: executing program 3 (id=3447): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) umount2$auto(0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES8=r2], 0xfffffffffffffd6c}}, 0x14) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r4, 0x80085502, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r6, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\x00\x00\x00\x00[r4G\xc5\x8d\xcb\x10\xae\x88\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8@\x00|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf\xf5\x9a\xfd\xdeA\x9dZ\x1e\xdb\x1b\x1b\xb02\x03\x87c^\x85\xa9\x1dD$\xd4\xe4\x86\x95=\xf1\x19w$1yL>\xcd\x94W>xzP\x17\x93\x9alN\x9f\xfa\\\x84\xa8\x92\xbfG\x18s\x01\xc2\xe1\xed\xb3\"\xeb\x9d\x8b\x04\xc3\xda\xe4L\x9c\x8d\v\x96o\x14\xf7\x9c?\xf2\r>\xc3\xad\xaeQA\x05\xe6\n\x9el\x85]\xed\xf0\xa2T\xbc:\xefD\f[C\xb0:\x0f\xafqgl\x02R\x01\x16\x81S\xbdk\xd8\x9dZ%W\xbc~J\xd7\xf4?\xa2\xbd\x00\xa2\x7f\x11\x81\xce\xe55X38\xac\xd4\x15\x97\x83\"g\x15|\xf3t\x93ymYi\x1b\xdf\xd3>nS\xad\xa6/\xe7\x88\x8a\xc3\x00\xb7\xb8\xf24\x11\xe6\x15\xea\x16\xec\xaf?\xe0Y\xf30\x9a\xf5\x02\x9a0\x97\x1d\x11wL|\xde\xff\xbc\xa7\x03%i\xdc\x92\n\xb9U{m2\xba\\B\xb7U\f-r\xef\"\xbc\xa8\xcbc\x11z\x88\x9f\xa7\x06\xe2\xe8\x9c\x87ZL\xfeju\x15\xbeLf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/nfsd.fh/flush\x00', 0xaa902, 0x0) write$auto(r1, &(0x7f0000000240)='.G\x1f*@sy\b\x00\xe7\xc9 \x8f\x10!\x11\xd4\x9by\xa8\xb2\x89c\xf8\xc41\xd4\x0f\x82\x8d\xd2\x04\x0f\xf6\xa0\xf7,O\x1d\t8\xb9H\xd5\xc4\xbb\x8f\x13\x94%\xcc\x0e\x9eT\xc1}+\x02J\xb9\x80\xe7\xb3<\x9a\xf1B\x13\xb7P\x9b\xce~\xff&zQ\xa8\x97\n\xb2\xf7\x15Z\x05\x8cl\x04\xca\x954\xdd3\xf9\xa3\x1e#,\xb7\xd2\xa6\x8d\x13\xd0\xf0\x14\x9a\xfa\xed\x9d\xa1\x98P.\'\xccA\x8b\xff\x82\xf8\xc3\xa9\xb6\xc3\x80E\xfc\xe3\xc6\x8d\xb8uh\x9f\xd1!\xa3\xe0dR\xda?\xdc:\xbd\x15X%\x84\xd2yL\x05\xaeV$\xda\xcd\xa1}_\xe0\x9c\x87\xaa\xa1\x1f\x93(\x96}\"sU.2\x1e\xb8\x01U\x8f\xe5\x7f]L\xca\xa2\x9b\x92ZYE\xd2\xe1<4\x9c\x85\x04\x86l2\x8e\xb2\x9e\x11\x82s\xd7\xe3\xdd\xdb\x041\xb2\x1c\xac@\x16\xb3sn\xec\r\x11J*\xbb\xd6\xde\x86v\x83T\xb1\xae\x91{_\xd7JK\xda\x01i#\xe89\x17\xaf\x03j5\r\xce\a\x1dl/#\x96If\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) umount2$auto(0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES8=r2], 0xfffffffffffffd6c}}, 0x14) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x80000, 0x0) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r5, 0x80085502, &(0x7f0000000300)={0xb, 0xf1e, "e1ff10de4db1b895e4906e6bad378c490071e8b7efdc67210354823953955f4d8e8c7e00e551a3e4d752c15d3990e56241b0eaaa30b68f0e319a47ef5bdc657de54ceda47389c04fb2a281582a29b56f130eaba8385b50dbf7a4dde28d7ab89aecdc680e4e554452603bd6bb4a6d05848064a7151be45f2ee90ec2a77a"}) read$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r7, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\x00\x00\x00\x00[r4G\xc5\x8d\xcb\x10\xae\x88\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8@\x00|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf\xf5\x9a\xfd\xdeA\x9dZ\x1e\xdb\x1b\x1b\xb02\x03\x87c^\x85\xa9\x1dD$\xd4\xe4\x86\x95=\xf1\x19w$1yL>\xcd\x94W>xzP\x17\x93\x9alN\x9f\xfa\\\x84\xa8\x92\xbfG\x18s\x01\xc2\xe1\xed\xb3\"\xeb\x9d\x8b\x04\xc3\xda\xe4L\x9c\x8d\v\x96o\x14\xf7\x9c?\xf2\r>\xc3\xad\xaeQA\x05\xe6\n\x9el\x85]\xed\xf0\xa2T\xbc:\xefD\f[C\xb0:\x0f\xafqgl\x02R\x01\x16\x81S\xbdk\xd8\x9dZ%W\xbc~J\xd7\xf4?\xa2\xbd\x00\xa2\x7f\x11\x81\xce\xe55X38\xac\xd4\x15\x97\x83\"g\x15|\xf3t\x93ymYi\x1b\xdf\xd3>nS\xad\xa6/\xe7\x88\x8a\xc3\x00\xb7\xb8\xf24\x11\xe6\x15\xea\x16\xec\xaf?\xe0Y\xf30\x9a\xf5\x02\x9a0\x97\x1d\x11wL|\xde\xff\xbc\xa7\x03%i\xdc\x92\n\xb9U{m2\xba\\B\xb7U\f-r\xef\"\xbc\xa8\xcbc\x11z\x88\x9f\xa7\x06\xe2\xe8\x9c\x87ZL\xfeju\x15\xbeL [ 1275.800707][T25264] dump_stack_lvl+0x100/0x190 [ 1275.800748][T25264] should_fail_ex.cold+0x5/0xa [ 1275.800777][T25264] ? prepare_alloc_pages+0x16d/0x5f0 [ 1275.800828][T25264] should_fail_alloc_page+0xeb/0x140 [ 1275.800880][T25264] prepare_alloc_pages+0x1f0/0x5f0 [ 1275.800923][T25264] ? is_bpf_text_address+0x8a/0x1a0 [ 1275.800985][T25264] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1275.801025][T25264] ? is_bpf_text_address+0x94/0x1a0 [ 1275.801069][T25264] ? kernel_text_address+0x8d/0x100 [ 1275.801112][T25264] ? find_held_lock+0x2b/0x80 [ 1275.801149][T25264] ? __kernel_text_address+0xd/0x30 [ 1275.801194][T25264] ? unwind_get_return_address+0x59/0xa0 [ 1275.801241][T25264] ? arch_stack_walk+0xa6/0xf0 [ 1275.801300][T25264] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1275.801342][T25264] ? __pfx_stack_trace_save+0x10/0x10 [ 1275.801387][T25264] ? stack_depot_save_flags+0x27/0x9d0 [ 1275.801437][T25264] ? ktime_get+0x9f/0x320 [ 1275.801462][T25264] ? ktime_get+0x1a4/0x320 [ 1275.801493][T25264] ? kasan_save_stack+0x3f/0x50 [ 1275.801531][T25264] ? kasan_save_stack+0x30/0x50 [ 1275.801574][T25264] ? handle_mm_fault+0x37b/0xa30 [ 1275.801603][T25264] ? do_user_addr_fault+0x74c/0x12f0 [ 1275.801644][T25264] ? exc_page_fault+0x6f/0xd0 [ 1275.801678][T25264] ? asm_exc_page_fault+0x26/0x30 [ 1275.801708][T25264] ? rep_movs_alternative+0x4a/0xa0 [ 1275.801758][T25264] ? _copy_from_iter+0x355/0x1690 [ 1275.801861][T25264] ? netlink_sendmsg+0x808/0xda0 [ 1275.801948][T25264] ? sock_write_iter+0x53a/0x5b0 [ 1275.801979][T25264] ? vfs_write+0x6ac/0x1050 [ 1275.802007][T25264] ? ksys_write+0x1f8/0x250 [ 1275.802034][T25264] ? do_syscall_64+0x115/0x840 [ 1275.802071][T25264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.802104][T25264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1275.802155][T25264] ? policy_nodemask+0xed/0x4f0 [ 1275.802201][T25264] alloc_pages_mpol+0x1fb/0x540 [ 1275.802244][T25264] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1275.802300][T25264] alloc_pages_noprof+0x1a/0x160 [ 1275.802331][T25264] pte_alloc_one+0x1c/0x3d0 [ 1275.802379][T25264] __pte_alloc+0x6d/0x3e0 [ 1275.802419][T25264] ? __pfx___pte_alloc+0x10/0x10 [ 1275.802456][T25264] ? do_raw_spin_lock+0x128/0x260 [ 1275.802491][T25264] ? find_held_lock+0x2b/0x80 [ 1275.802535][T25264] do_anonymous_page+0x13ae/0x2080 [ 1275.802575][T25264] ? __pmd_alloc+0x3fb/0x950 [ 1275.802626][T25264] __handle_mm_fault+0x1d2c/0x2a00 [ 1275.802667][T25264] ? mt_find+0x45e/0x8e0 [ 1275.802712][T25264] ? __pfx___handle_mm_fault+0x10/0x10 [ 1275.802741][T25264] ? __pfx_mt_find+0x10/0x10 [ 1275.802808][T25264] ? find_vma+0xbf/0x140 [ 1275.802847][T25264] ? __pfx_find_vma+0x10/0x10 [ 1275.802892][T25264] handle_mm_fault+0x37b/0xa30 [ 1275.802942][T25264] do_user_addr_fault+0x74c/0x12f0 [ 1275.802998][T25264] exc_page_fault+0x6f/0xd0 [ 1275.803037][T25264] asm_exc_page_fault+0x26/0x30 [ 1275.803069][T25264] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1275.803116][T25264] Code: a0 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f a0 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1275.803146][T25264] RSP: 0018:ffffc900051579e0 EFLAGS: 00050206 [ 1275.803171][T25264] RAX: 0000000000000001 RBX: ffff8880798b2d80 RCX: 0000000000000100 [ 1275.803191][T25264] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880798b2d80 [ 1275.803210][T25264] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100f3165cf [ 1275.803226][T25264] R10: ffff8880798b2e7f R11: 0000000000000000 R12: ffffc90005157c50 [ 1275.803244][T25264] R13: 0000000000000000 R14: 0000000000000100 R15: 0000000000000000 [ 1275.803282][T25264] _copy_from_iter+0x355/0x1690 [ 1275.803340][T25264] ? __asan_memset+0x23/0x50 [ 1275.803375][T25264] ? __pfx__copy_from_iter+0x10/0x10 [ 1275.803424][T25264] ? __pfx___alloc_skb+0x10/0x10 [ 1275.803530][T25264] netlink_sendmsg+0x808/0xda0 [ 1275.803575][T25264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.803619][T25264] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1275.803659][T25264] sock_write_iter+0x53a/0x5b0 [ 1275.803693][T25264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.803730][T25264] ? __pfx_sock_write_iter+0x10/0x10 [ 1275.803775][T25264] ? bpf_lsm_file_permission+0x9/0x10 [ 1275.803807][T25264] ? security_file_permission+0x76/0x210 [ 1275.803856][T25264] ? rw_verify_area+0xce/0x6d0 [ 1275.803907][T25264] vfs_write+0x6ac/0x1050 [ 1275.803949][T25264] ? __pfx_sock_write_iter+0x10/0x10 [ 1275.803989][T25264] ? __pfx_vfs_write+0x10/0x10 [ 1275.804016][T25264] ? find_held_lock+0x2b/0x80 [ 1275.804083][T25264] ksys_write+0x1f8/0x250 [ 1275.804114][T25264] ? __pfx_ksys_write+0x10/0x10 [ 1275.804159][T25264] do_syscall_64+0x115/0x840 [ 1275.804197][T25264] ? clear_bhb_loop+0x70/0xc0 [ 1275.804236][T25264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.804269][T25264] RIP: 0033:0x7f75ee59e0d9 [ 1275.804296][T25264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.804326][T25264] RSP: 002b:00007f75ef440028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1275.804355][T25264] RAX: ffffffffffffffda RBX: 00007f75ee826180 RCX: 00007f75ee59e0d9 [ 1275.804376][T25264] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 1275.804394][T25264] RBP: 00007f75ee635024 R08: 0000000000000000 R09: 0000000000000000 [ 1275.804412][T25264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1275.804429][T25264] R13: 00007f75ee826218 R14: 00007f75ee826180 R15: 00007ffc86071e88 [ 1275.804468][T25264] [ 1276.573335][T24175] Bluetooth: hci2: command 0x0406 tx timeout [ 1276.807290][T23908] Bluetooth: hci1: command tx timeout [ 1276.850789][T25286] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2623'. [ 1277.042187][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1278.128404][T25172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1278.160339][T25172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1278.326069][T25317] ptp ptp0: only physical clock in use now [ 1278.449268][T25172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1278.464973][T25172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1278.577888][T25172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1278.594056][T25172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1278.724768][T25172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1278.764949][T25172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1279.089952][T25336] ptp ptp0: only physical clock in use now [ 1280.182730][T25172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.256871][T25172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.302882][T23942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.310513][T23942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.370477][T23913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.377765][T23913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.490634][T25364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2627'. [ 1281.237202][T25379] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1281.245299][T25379] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1282.877855][T25411] ptp ptp0: only physical clock in use now [ 1282.970514][T25414] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2633'. [ 1283.639819][T25172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.949586][T25172] veth0_vlan: entered promiscuous mode [ 1283.969679][T25172] veth1_vlan: entered promiscuous mode [ 1284.066585][T25172] veth0_macvtap: entered promiscuous mode [ 1284.096064][T25172] veth1_macvtap: entered promiscuous mode [ 1284.131057][T25172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.164224][T25172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.487814][T25427] ptp ptp0: only physical clock in use now [ 1284.633216][T23907] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.642132][T23907] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.651103][T23907] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.660185][T23907] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.825370][T23909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.846098][T23909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.561596][T24219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.580634][T24219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.773952][T25443] ptp ptp0: only physical clock in use now [ 1286.035099][T23908] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1286.921176][T25452] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 1289.468586][T25457] ptp ptp0: only physical clock in use now [ 1290.780415][T25500] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1290.916316][T25500] blktrace: Concurrent blktraces are not allowed on ram10 [ 1291.709275][T25507] ptp ptp0: only physical clock in use now [ 1292.887703][T25524] ptp ptp0: only physical clock in use now [ 1294.677505][T25548] ptp ptp0: only physical clock in use now [ 1294.821772][T23942] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.177009][T24175] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1295.189902][T24175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1295.200104][T24175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1295.210943][T24175] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1295.221160][T24175] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1295.515801][T23942] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.913026][T23942] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.147618][T23942] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.650799][T25574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1297.306205][T24175] Bluetooth: hci3: command tx timeout [ 1297.348795][T23942] bridge_slave_1: left allmulticast mode [ 1297.357377][T25586] ptp ptp0: only physical clock in use now [ 1297.378747][T23942] bridge_slave_1: left promiscuous mode [ 1297.384646][T23942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.424928][T23942] bridge_slave_0: left allmulticast mode [ 1297.431275][T23942] bridge_slave_0: left promiscuous mode [ 1297.438194][T23942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.163991][T23942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1298.197858][T25611] ptp ptp0: only physical clock in use now [ 1298.218566][T23942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1298.247951][T23942] bond0 (unregistering): Released all slaves [ 1298.291822][ T29] audit: type=1800 audit(4294967958.404:9): pid=25614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2663" name="lu_gp_id" dev="configfs" ino=173135 res=0 errno=0 [ 1298.677763][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1299.004471][T23942] hsr_slave_0: left promiscuous mode [ 1299.010789][T23942] hsr_slave_1: left promiscuous mode [ 1299.016878][T23942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.024398][T23942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.038144][T23942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.045988][T23942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.060454][T23942] veth1_macvtap: left promiscuous mode [ 1299.066881][T23942] veth0_macvtap: left promiscuous mode [ 1299.072567][T23942] veth1_vlan: left promiscuous mode [ 1299.078131][T23942] veth0_vlan: left promiscuous mode [ 1299.300522][T23942] team0 (unregistering): Port device team_slave_1 removed [ 1299.328874][T23942] team0 (unregistering): Port device team_slave_0 removed [ 1299.385396][T24175] Bluetooth: hci3: command tx timeout [ 1299.910904][T25556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.946862][T25556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.984345][T25556] bridge_slave_0: entered allmulticast mode [ 1300.019947][T25556] bridge_slave_0: entered promiscuous mode [ 1300.035362][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.042265][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.070088][T25556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.087611][T25556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.102234][T25556] bridge_slave_1: entered allmulticast mode [ 1300.113397][T25556] bridge_slave_1: entered promiscuous mode [ 1300.221194][T25556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1300.498624][T25556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.017689][T25556] team0: Port device team_slave_0 added [ 1301.031304][T25657] ptp ptp0: only physical clock in use now [ 1301.042275][T25556] team0: Port device team_slave_1 added [ 1301.136951][T25661] ptp ptp0: only physical clock in use now [ 1301.220213][T25659] ptp ptp0: only physical clock in use now [ 1301.261388][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1301.464093][T24175] Bluetooth: hci3: command tx timeout [ 1301.513039][T25556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.522287][T25556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.562693][T25556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.585967][T25556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.600913][T25556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.631633][T25556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.099114][T25556] hsr_slave_0: entered promiscuous mode [ 1302.108564][T25556] hsr_slave_1: entered promiscuous mode [ 1302.117758][T25556] debugfs: 'hsr0' already exists in 'hsr' [ 1302.124847][T25556] Cannot create hsr debugfs directory [ 1302.916910][T25680] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1303.105125][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1303.468910][T25694] Line length is too long: Should be less than 4094 [ 1303.543338][T24175] Bluetooth: hci3: command tx timeout [ 1305.466358][T25727] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1305.492792][T25727] blktrace: Concurrent blktraces are not allowed on ram10 [ 1305.696676][T25556] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1305.733613][T25556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1305.825037][T25556] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1305.866768][T25556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1305.892350][T25737] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1305.896498][T25556] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1305.919682][T25737] blktrace: Concurrent blktraces are not allowed on ram10 [ 1305.954835][T25556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1306.001878][T25556] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1306.032326][T25556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1307.074809][T25775] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1307.098349][T25775] blktrace: Concurrent blktraces are not allowed on ram10 [ 1307.326751][T25779] ptp ptp0: only physical clock in use now [ 1308.239421][T25556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.314240][T25793] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1308.322530][T25556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.340888][T25793] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1308.347170][T23942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.354457][T23942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.390342][T23942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.397635][T23942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.883066][T25808] ptp ptp0: only physical clock in use now [ 1309.154509][T25815] ptp ptp0: only physical clock in use now [ 1311.535322][T25556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1312.335983][T25556] veth0_vlan: entered promiscuous mode [ 1312.368211][T25556] veth1_vlan: entered promiscuous mode [ 1312.433805][T25556] veth0_macvtap: entered promiscuous mode [ 1312.452525][T25556] veth1_macvtap: entered promiscuous mode [ 1312.483157][T25556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.510253][T25556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.549539][T24048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.578590][T24048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.628018][T25853] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1312.659391][T25853] blktrace: Concurrent blktraces are not allowed on ram10 [ 1312.723147][T23913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.799602][T24219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.661970][T23907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.715134][T23907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.501464][T25880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2685'. [ 1314.522682][T23942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.543704][T23942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.257031][T25896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2686'. [ 1316.323163][T25901] capability: warning: `syz.2.2687' uses deprecated v2 capabilities in a way that may be insecure [ 1316.599258][T23907] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1174 with max blocks 52 with error 117 [ 1316.612080][T25905] FAULT_INJECTION: forcing a failure. [ 1316.612080][T25905] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.655541][T23907] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1316.655541][T23907] [ 1316.657196][T25905] CPU: 1 UID: 0 PID: 25905 Comm: syz.3.2688 Tainted: G L syzkaller #0 PREEMPT(full) [ 1316.657234][T25905] Tainted: [L]=SOFTLOCKUP [ 1316.657243][T25905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1316.657258][T25905] Call Trace: [ 1316.657266][T25905] [ 1316.657276][T25905] dump_stack_lvl+0x100/0x190 [ 1316.657312][T25905] should_fail_ex.cold+0x5/0xa [ 1316.657341][T25905] should_failslab+0xc2/0x120 [ 1316.657378][T25905] __kvmalloc_node_noprof+0x116/0x970 [ 1316.657413][T25905] ? percpu_ref_init+0xec/0x3f0 [ 1316.657444][T25905] ? io_alloc_cache_init+0x38/0x170 [ 1316.657540][T25905] io_alloc_cache_init+0x38/0x170 [ 1316.657575][T25905] io_uring_setup.cold+0x4aa/0x1c2e [ 1316.657617][T25905] ? __pfx_io_uring_setup+0x10/0x10 [ 1316.657668][T25905] ? __pfx_vfs_write+0x10/0x10 [ 1316.657692][T25905] ? do_sys_openat2+0x159/0x1e0 [ 1316.657726][T25905] ? __pfx_do_sys_openat2+0x10/0x10 [ 1316.657777][T25905] ? ksys_write+0x1ac/0x250 [ 1316.657801][T25905] ? __pfx_ksys_write+0x10/0x10 [ 1316.657833][T25905] __x64_sys_io_uring_setup+0xc2/0x170 [ 1316.657863][T25905] do_syscall_64+0x115/0x840 [ 1316.657898][T25905] ? clear_bhb_loop+0x70/0xc0 [ 1316.657930][T25905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.657957][T25905] RIP: 0033:0x7f6dc019e0d9 [ 1316.657980][T25905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.658005][T25905] RSP: 002b:00007f6dbe3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1316.658030][T25905] RAX: ffffffffffffffda RBX: 00007f6dc0426180 RCX: 00007f6dc019e0d9 [ 1316.658048][T25905] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000059 [ 1316.658064][T25905] RBP: 00007f6dbe3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.658079][T25905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.658095][T25905] R13: 00007f6dc0426218 R14: 00007f6dc0426180 R15: 00007fff2b7cd0c8 [ 1316.658130][T25905] [ 1316.954052][T25907] __vm_enough_memory: pid: 25907, comm: syz.2.2687, bytes: 4398046511104 not enough memory for the allocation [ 1317.201881][T25904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1317.229537][T25904] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1317.342086][T25904] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1317.364923][T25904] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1317.390976][T25904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1317.411683][T25904] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1317.444191][T25904] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1317.470088][T25904] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1317.483197][T25904] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1317.500422][T25904] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1317.948962][T25919] FAULT_INJECTION: forcing a failure. [ 1317.948962][T25919] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.979489][T25919] CPU: 0 UID: 0 PID: 25919 Comm: syz.0.2691 Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.979537][T25919] Tainted: [L]=SOFTLOCKUP [ 1317.979547][T25919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1317.979564][T25919] Call Trace: [ 1317.979573][T25919] [ 1317.979585][T25919] dump_stack_lvl+0x100/0x190 [ 1317.979623][T25919] should_fail_ex.cold+0x5/0xa [ 1317.979657][T25919] should_failslab+0xc2/0x120 [ 1317.979700][T25919] __kmalloc_noprof+0xfc/0x820 [ 1317.979736][T25919] ? tomoyo_encode2+0xfb/0x3c0 [ 1317.979790][T25919] tomoyo_encode2+0xfb/0x3c0 [ 1317.979836][T25919] tomoyo_encode+0x29/0x50 [ 1317.979876][T25919] tomoyo_realpath_from_path+0x18c/0x690 [ 1317.979930][T25919] tomoyo_path_number_perm+0x23c/0x580 [ 1317.979968][T25919] ? tomoyo_path_number_perm+0x22e/0x580 [ 1317.980007][T25919] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1317.980086][T25919] ? find_held_lock+0x2b/0x80 [ 1317.980122][T25919] ? __fget_files+0x215/0x3d0 [ 1317.980148][T25919] ? hook_file_ioctl_common+0x140/0x440 [ 1317.980184][T25919] ? __fget_files+0x215/0x3d0 [ 1317.980221][T25919] ? __fget_files+0x21f/0x3d0 [ 1317.980265][T25919] security_file_ioctl+0xd3/0x230 [ 1317.980305][T25919] __x64_sys_ioctl+0xb7/0x210 [ 1317.980351][T25919] do_syscall_64+0x115/0x840 [ 1317.980385][T25919] ? clear_bhb_loop+0x70/0xc0 [ 1317.980421][T25919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.980451][T25919] RIP: 0033:0x7f084619e0d9 [ 1317.980476][T25919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.980504][T25919] RSP: 002b:00007f0846ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1317.980532][T25919] RAX: ffffffffffffffda RBX: 00007f0846425fa0 RCX: 00007f084619e0d9 [ 1317.980552][T25919] RDX: 0000000000000000 RSI: 0000000040045730 RDI: 0000000000000003 [ 1317.980569][T25919] RBP: 00007f0846ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.980585][T25919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.980601][T25919] R13: 00007f0846426038 R14: 00007f0846425fa0 R15: 00007fff00969478 [ 1317.980642][T25919] [ 1317.980681][T25919] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1319.216168][T24175] Bluetooth: hci0: command 0x0406 tx timeout [ 1319.376252][T24175] Bluetooth: hci2: command 0x0406 tx timeout [ 1319.456010][T24175] Bluetooth: hci1: command 0x0c1a tx timeout [ 1319.545250][T24175] Bluetooth: hci3: command 0x0c1a tx timeout [ 1320.929131][T25972] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2699'. [ 1320.966560][T25975] net_ratelimit: 254 callbacks suppressed [ 1320.966582][T25975] netlink: zone id is out of range [ 1320.979199][T25975] netlink: zone id is out of range [ 1320.992727][T25975] netlink: zone id is out of range [ 1320.993024][T25972] netlink: zone id is out of range [ 1321.029233][T25975] netlink: zone id is out of range [ 1321.029259][T25972] netlink: zone id is out of range [ 1321.066658][T25972] netlink: zone id is out of range [ 1321.079992][T25972] netlink: zone id is out of range [ 1321.087593][T25972] netlink: zone id is out of range [ 1321.093164][T25972] netlink: zone id is out of range [ 1321.294259][T24175] Bluetooth: hci0: command 0x0406 tx timeout [ 1321.454595][T24175] Bluetooth: hci2: command 0x0406 tx timeout [ 1321.527307][T25979] ptp ptp0: only physical clock in use now [ 1321.534353][T24175] Bluetooth: hci1: command 0x0c1a tx timeout [ 1321.547145][T25978] ptp ptp0: only physical clock in use now [ 1321.614062][T24175] Bluetooth: hci3: command 0x0c1a tx timeout [ 1322.256045][T25988] FAULT_INJECTION: forcing a failure. [ 1322.256045][T25988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1322.276347][T25988] CPU: 0 UID: 0 PID: 25988 Comm: syz.0.2701 Tainted: G L syzkaller #0 PREEMPT(full) [ 1322.276378][T25988] Tainted: [L]=SOFTLOCKUP [ 1322.276384][T25988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1322.276394][T25988] Call Trace: [ 1322.276400][T25988] [ 1322.276407][T25988] dump_stack_lvl+0x100/0x190 [ 1322.276432][T25988] should_fail_ex.cold+0x5/0xa [ 1322.276453][T25988] _copy_from_user+0x2e/0xd0 [ 1322.276481][T25988] copy_msghdr_from_user+0x9f/0x4c0 [ 1322.276506][T25988] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1322.276531][T25988] ? rcu_is_watching+0x12/0xc0 [ 1322.276552][T25988] ? ___sys_recvmsg+0x177/0x1a0 [ 1322.276571][T25988] ? kfree+0x1e5/0x6c0 [ 1322.276591][T25988] ___sys_recvmsg+0xdd/0x1a0 [ 1322.276619][T25988] ? __pfx____sys_recvmsg+0x10/0x10 [ 1322.276651][T25988] ? __pfx___might_resched+0x10/0x10 [ 1322.276683][T25988] do_recvmmsg+0x2f3/0x740 [ 1322.276707][T25988] ? __pfx_do_recvmmsg+0x10/0x10 [ 1322.276731][T25988] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1322.276761][T25988] ? __fget_files+0x21f/0x3d0 [ 1322.276782][T25988] __x64_sys_recvmmsg+0x22a/0x280 [ 1322.276811][T25988] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1322.276844][T25988] do_syscall_64+0x115/0x840 [ 1322.276865][T25988] ? clear_bhb_loop+0x70/0xc0 [ 1322.276886][T25988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.276905][T25988] RIP: 0033:0x7f084619e0d9 [ 1322.276921][T25988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.276938][T25988] RSP: 002b:00007f0846fdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1322.276955][T25988] RAX: ffffffffffffffda RBX: 00007f0846426090 RCX: 00007f084619e0d9 [ 1322.276967][T25988] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1322.276977][T25988] RBP: 00007f0846fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.276987][T25988] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 1322.276997][T25988] R13: 00007f0846426128 R14: 00007f0846426090 R15: 00007fff00969478 [ 1322.277019][T25988] [ 1323.614005][T24175] Bluetooth: hci1: command 0x0c1a tx timeout [ 1323.704545][T24175] Bluetooth: hci3: command 0x0c1a tx timeout [ 1323.966742][T26021] ptp ptp0: only physical clock in use now [ 1327.624173][T26071] ptp ptp0: only physical clock in use now [ 1327.864037][T26079] ptp ptp0: only physical clock in use now [ 1328.245856][T26083] ptp ptp0: only physical clock in use now [ 1331.647218][T26127] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1331.679060][T26127] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1332.020135][T26134] ptp ptp0: only physical clock in use now [ 1332.112464][T26139] ptp ptp0: only physical clock in use now [ 1334.173495][T26173] ptp ptp0: only physical clock in use now [ 1334.301890][T26172] ptp ptp0: only physical clock in use now [ 1334.477912][T26177] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 1335.461178][T26182] FAULT_INJECTION: forcing a failure. [ 1335.461178][T26182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1335.511805][T26182] CPU: 1 UID: 0 PID: 26182 Comm: syz.1.2731 Tainted: G L syzkaller #0 PREEMPT(full) [ 1335.511851][T26182] Tainted: [L]=SOFTLOCKUP [ 1335.511860][T26182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1335.511875][T26182] Call Trace: [ 1335.511893][T26182] [ 1335.511905][T26182] dump_stack_lvl+0x100/0x190 [ 1335.511943][T26182] should_fail_ex.cold+0x5/0xa [ 1335.511977][T26182] _copy_to_user+0x32/0xd0 [ 1335.512028][T26182] simple_read_from_buffer+0xcb/0x170 [ 1335.512078][T26182] proc_fail_nth_read+0x1af/0x230 [ 1335.512230][T26182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1335.512275][T26182] ? rw_verify_area+0xce/0x6d0 [ 1335.512316][T26182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1335.512357][T26182] vfs_read+0x1e4/0xb40 [ 1335.512389][T26182] ? __pfx_vfs_read+0x10/0x10 [ 1335.512412][T26182] ? __fget_files+0x215/0x3d0 [ 1335.512446][T26182] ? __fget_files+0x21f/0x3d0 [ 1335.512482][T26182] ksys_read+0x12a/0x250 [ 1335.512509][T26182] ? __pfx_ksys_read+0x10/0x10 [ 1335.512545][T26182] do_syscall_64+0x115/0x840 [ 1335.512580][T26182] ? clear_bhb_loop+0x70/0xc0 [ 1335.512637][T26182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.512665][T26182] RIP: 0033:0x7f3d9f55e90e [ 1335.512690][T26182] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1335.512717][T26182] RSP: 002b:00007f3da03d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1335.512745][T26182] RAX: ffffffffffffffda RBX: 00007f3da03d56c0 RCX: 00007f3d9f55e90e [ 1335.512764][T26182] RDX: 000000000000000f RSI: 00007f3da03d50a0 RDI: 0000000000000003 [ 1335.512780][T26182] RBP: 00007f3da03d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.512797][T26182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.512817][T26182] R13: 00007f3d9f826038 R14: 00007f3d9f825fa0 R15: 00007ffd37c021c8 [ 1335.512857][T26182] [ 1336.387210][T26213] ptp ptp0: only physical clock in use now [ 1338.266863][T26244] ptp ptp0: only physical clock in use now [ 1338.594208][T26246] ptp ptp0: only physical clock in use now [ 1339.914593][T26263] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1339.948827][T26263] blktrace: Concurrent blktraces are not allowed on ram10 [ 1339.980038][T26265] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1340.012760][T26265] blktrace: Concurrent blktraces are not allowed on ram10 [ 1340.952888][T26288] FAULT_INJECTION: forcing a failure. [ 1340.952888][T26288] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.995406][T26288] CPU: 1 UID: 0 PID: 26288 Comm: syz.1.2746 Tainted: G L syzkaller #0 PREEMPT(full) [ 1340.995452][T26288] Tainted: [L]=SOFTLOCKUP [ 1340.995462][T26288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1340.995479][T26288] Call Trace: [ 1340.995489][T26288] [ 1340.995499][T26288] dump_stack_lvl+0x100/0x190 [ 1340.995545][T26288] should_fail_ex.cold+0x5/0xa [ 1340.995580][T26288] should_failslab+0xc2/0x120 [ 1340.995625][T26288] __kmalloc_noprof+0xfc/0x820 [ 1340.995670][T26288] ? tomoyo_encode2+0xfb/0x3c0 [ 1340.995724][T26288] tomoyo_encode2+0xfb/0x3c0 [ 1340.995772][T26288] tomoyo_encode+0x29/0x50 [ 1340.995813][T26288] tomoyo_realpath_from_path+0x18c/0x690 [ 1340.995867][T26288] tomoyo_path_number_perm+0x23c/0x580 [ 1340.995905][T26288] ? tomoyo_path_number_perm+0x22e/0x580 [ 1340.995946][T26288] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1340.996027][T26288] ? find_held_lock+0x2b/0x80 [ 1340.996066][T26288] ? __fget_files+0x215/0x3d0 [ 1340.996094][T26288] ? hook_file_ioctl_common+0x140/0x440 [ 1340.996131][T26288] ? __fget_files+0x215/0x3d0 [ 1340.996164][T26288] ? __fget_files+0x21f/0x3d0 [ 1340.996199][T26288] security_file_ioctl+0xd3/0x230 [ 1340.996238][T26288] __x64_sys_ioctl+0xb7/0x210 [ 1340.996281][T26288] do_syscall_64+0x115/0x840 [ 1340.996315][T26288] ? clear_bhb_loop+0x70/0xc0 [ 1340.996351][T26288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.996389][T26288] RIP: 0033:0x7f3d9f59e0d9 [ 1340.996414][T26288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.996440][T26288] RSP: 002b:00007f3da03d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1340.996467][T26288] RAX: ffffffffffffffda RBX: 00007f3d9f825fa0 RCX: 00007f3d9f59e0d9 [ 1340.996487][T26288] RDX: 0000000000000004 RSI: 00000000c0104d03 RDI: 0000000000000003 [ 1340.996503][T26288] RBP: 00007f3da03d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.996520][T26288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.996536][T26288] R13: 00007f3d9f826038 R14: 00007f3d9f825fa0 R15: 00007ffd37c021c8 [ 1340.996576][T26288] [ 1340.996870][T26288] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1341.513789][T26299] FAULT_INJECTION: forcing a failure. [ 1341.513789][T26299] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.560926][T26299] CPU: 1 UID: 0 PID: 26299 Comm: syz.1.2748 Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.560972][T26299] Tainted: [L]=SOFTLOCKUP [ 1341.560982][T26299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1341.560999][T26299] Call Trace: [ 1341.561009][T26299] [ 1341.561019][T26299] dump_stack_lvl+0x100/0x190 [ 1341.561061][T26299] should_fail_ex.cold+0x5/0xa [ 1341.561096][T26299] should_failslab+0xc2/0x120 [ 1341.561146][T26299] __kvmalloc_node_noprof+0x116/0x970 [ 1341.561187][T26299] ? __pfx_down_write+0x10/0x10 [ 1341.561229][T26299] ? cache_write_procfs+0xdd/0x170 [ 1341.561442][T26299] ? __pfx_cache_write_procfs+0x10/0x10 [ 1341.561487][T26299] cache_write_procfs+0xdd/0x170 [ 1341.561532][T26299] ? __pfx_cache_write_procfs+0x10/0x10 [ 1341.561575][T26299] proc_reg_write+0x240/0x330 [ 1341.561613][T26299] ? __pfx_proc_reg_write+0x10/0x10 [ 1341.561643][T26299] vfs_writev+0x5ed/0xdd0 [ 1341.561701][T26299] ? __pfx_vfs_writev+0x10/0x10 [ 1341.561749][T26299] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1341.561817][T26299] ? __fget_files+0x21f/0x3d0 [ 1341.561856][T26299] ? do_writev+0x13e/0x340 [ 1341.561900][T26299] do_writev+0x13e/0x340 [ 1341.561948][T26299] ? __pfx_do_writev+0x10/0x10 [ 1341.562006][T26299] do_syscall_64+0x115/0x840 [ 1341.562042][T26299] ? clear_bhb_loop+0x70/0xc0 [ 1341.562080][T26299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.562111][T26299] RIP: 0033:0x7f3d9f59e0d9 [ 1341.562137][T26299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.562164][T26299] RSP: 002b:00007f3da03d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1341.562192][T26299] RAX: ffffffffffffffda RBX: 00007f3d9f825fa0 RCX: 00007f3d9f59e0d9 [ 1341.562212][T26299] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1341.562230][T26299] RBP: 00007f3da03d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.562247][T26299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.562264][T26299] R13: 00007f3d9f826038 R14: 00007f3d9f825fa0 R15: 00007ffd37c021c8 [ 1341.562307][T26299] [ 1344.437582][T26340] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1344.499079][T26340] blktrace: Concurrent blktraces are not allowed on ram10 [ 1345.137635][T26344] ptp ptp0: only physical clock in use now [ 1345.470410][T26349] ptp ptp0: only physical clock in use now [ 1346.696135][T26370] FAULT_INJECTION: forcing a failure. [ 1346.696135][T26370] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.745475][T26370] CPU: 0 UID: 0 PID: 26370 Comm: syz.3.2760 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.745523][T26370] Tainted: [L]=SOFTLOCKUP [ 1346.745534][T26370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1346.745551][T26370] Call Trace: [ 1346.745561][T26370] [ 1346.745573][T26370] dump_stack_lvl+0x100/0x190 [ 1346.745616][T26370] should_fail_ex.cold+0x5/0xa [ 1346.745648][T26370] ? __pfx_wq_cpumask_store+0x10/0x10 [ 1346.745682][T26370] should_failslab+0xc2/0x120 [ 1346.745722][T26370] ? __pfx_wq_cpumask_store+0x10/0x10 [ 1346.745754][T26370] __kmalloc_cache_noprof+0x91/0x6c0 [ 1346.745789][T26370] ? wq_sysfs_prep_attrs+0x8b/0x390 [ 1346.745846][T26370] ? __pfx_wq_cpumask_store+0x10/0x10 [ 1346.745877][T26370] wq_sysfs_prep_attrs+0x8b/0x390 [ 1346.745921][T26370] wq_cpumask_store+0x51/0x190 [ 1346.745955][T26370] dev_attr_store+0x58/0x80 [ 1346.746103][T26370] ? __pfx_dev_attr_store+0x10/0x10 [ 1346.746152][T26370] sysfs_kf_write+0xf2/0x150 [ 1346.746232][T26370] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1346.746269][T26370] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1346.746316][T26370] do_iter_readv_writev+0x6f7/0x930 [ 1346.746368][T26370] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1346.746441][T26370] vfs_writev+0x360/0xdd0 [ 1346.746489][T26370] ? rcu_is_watching+0x12/0xc0 [ 1346.746527][T26370] ? trace_contention_end+0x126/0x160 [ 1346.746566][T26370] ? __pfx_vfs_writev+0x10/0x10 [ 1346.746617][T26370] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1346.746685][T26370] ? __fget_files+0x21f/0x3d0 [ 1346.746727][T26370] ? do_writev+0x13e/0x340 [ 1346.746772][T26370] do_writev+0x13e/0x340 [ 1346.746829][T26370] ? __pfx_do_writev+0x10/0x10 [ 1346.746889][T26370] do_syscall_64+0x115/0x840 [ 1346.746927][T26370] ? clear_bhb_loop+0x70/0xc0 [ 1346.746966][T26370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.746998][T26370] RIP: 0033:0x7f6dc019e0d9 [ 1346.747024][T26370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.747052][T26370] RSP: 002b:00007f6dc0fa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1346.747079][T26370] RAX: ffffffffffffffda RBX: 00007f6dc0425fa0 RCX: 00007f6dc019e0d9 [ 1346.747099][T26370] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1346.747116][T26370] RBP: 00007f6dc0fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.747133][T26370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.747150][T26370] R13: 00007f6dc0426038 R14: 00007f6dc0425fa0 R15: 00007fff2b7cd0c8 [ 1346.747192][T26370] [ 1349.169081][T26406] ptp ptp0: only physical clock in use now [ 1349.432933][T26413] ptp ptp0: only physical clock in use now [ 1349.676721][T26417] ptp ptp0: only physical clock in use now [ 1351.624855][T26443] ptp ptp0: only physical clock in use now [ 1353.290754][T26464] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1353.379110][T26464] blktrace: Concurrent blktraces are not allowed on ram10 [ 1353.826554][T26471] ptp ptp0: only physical clock in use now [ 1355.699409][T26499] ptp ptp0: only physical clock in use now [ 1355.707297][T26498] ptp ptp0: only physical clock in use now [ 1358.539825][T26544] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1358.568959][T26544] blktrace: Concurrent blktraces are not allowed on ram10 [ 1359.806297][T26563] ptp ptp0: only physical clock in use now [ 1360.223010][T26572] ptp ptp0: only physical clock in use now [ 1360.266063][T26576] ptp ptp0: only physical clock in use now [ 1361.435914][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.444459][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.053284][T26585] ptp ptp0: only physical clock in use now [ 1363.215722][T26588] Process accounting resumed [ 1363.978578][T26624] ptp ptp0: only physical clock in use now [ 1365.927030][T26650] ptp ptp0: only physical clock in use now [ 1365.987750][T26654] ptp ptp0: only physical clock in use now [ 1368.077369][T26676] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1368.213300][T26676] blktrace: Concurrent blktraces are not allowed on ram10 [ 1375.517423][T26799] ptp ptp0: only physical clock in use now [ 1375.988870][T24175] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1377.404732][T26825] FAULT_INJECTION: forcing a failure. [ 1377.404732][T26825] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.483386][T26825] CPU: 0 UID: 0 PID: 26825 Comm: syz.1.2824 Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.483434][T26825] Tainted: [L]=SOFTLOCKUP [ 1377.483445][T26825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1377.483461][T26825] Call Trace: [ 1377.483471][T26825] [ 1377.483483][T26825] dump_stack_lvl+0x100/0x190 [ 1377.483522][T26825] should_fail_ex.cold+0x5/0xa [ 1377.483556][T26825] should_failslab+0xc2/0x120 [ 1377.483599][T26825] __kmalloc_noprof+0xfc/0x820 [ 1377.483634][T26825] ? rcu_is_watching+0x12/0xc0 [ 1377.483671][T26825] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1377.483724][T26825] tomoyo_realpath_from_path+0xb6/0x690 [ 1377.483775][T26825] tomoyo_path_number_perm+0x23c/0x580 [ 1377.483812][T26825] ? tomoyo_path_number_perm+0x22e/0x580 [ 1377.483853][T26825] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1377.483934][T26825] ? find_held_lock+0x2b/0x80 [ 1377.483971][T26825] ? __fget_files+0x215/0x3d0 [ 1377.483997][T26825] ? hook_file_ioctl_common+0x140/0x440 [ 1377.484033][T26825] ? __fget_files+0x215/0x3d0 [ 1377.484066][T26825] ? __fget_files+0x21f/0x3d0 [ 1377.484101][T26825] security_file_ioctl+0xd3/0x230 [ 1377.484140][T26825] __x64_sys_ioctl+0xb7/0x210 [ 1377.484187][T26825] do_syscall_64+0x115/0x840 [ 1377.484225][T26825] ? clear_bhb_loop+0x70/0xc0 [ 1377.484263][T26825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.484303][T26825] RIP: 0033:0x7f3d9f59e0d9 [ 1377.484329][T26825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1377.484355][T26825] RSP: 002b:00007f3da03d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.484383][T26825] RAX: ffffffffffffffda RBX: 00007f3d9f825fa0 RCX: 00007f3d9f59e0d9 [ 1377.484402][T26825] RDX: ffffffffffffffff RSI: 00000000400454cc RDI: 04000000000000c8 [ 1377.484421][T26825] RBP: 00007f3da03d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.484438][T26825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.484454][T26825] R13: 00007f3d9f826038 R14: 00007f3d9f825fa0 R15: 00007ffd37c021c8 [ 1377.484496][T26825] [ 1377.484507][T26825] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1378.692423][T26849] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1378.726546][T26845] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 1380.597047][T26874] kAFS: unparsable volume name [ 1382.515769][T26897] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1382.586285][T26901] blktrace: Concurrent blktraces are not allowed on ram10 [ 1382.638297][T26896] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1387.124755][T26969] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1387.134364][T23908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1387.151681][T23908] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1387.174688][T23908] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1387.186798][T23908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1387.194952][T23908] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1387.330081][T26965] ptp ptp0: only physical clock in use now [ 1388.225492][T24048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.616613][T24048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.737773][T24048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.868140][T24048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.261840][T23908] Bluetooth: hci2: command tx timeout [ 1389.958647][T27010] ptp ptp0: only physical clock in use now [ 1390.619146][T24048] bridge_slave_1: left allmulticast mode [ 1390.625240][T24048] bridge_slave_1: left promiscuous mode [ 1390.632386][T24048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.643609][T24048] bridge_slave_0: left allmulticast mode [ 1390.653652][T24048] bridge_slave_0: left promiscuous mode [ 1390.659572][T24048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.950634][T24048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.961630][T24048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.981553][T24048] bond0 (unregistering): Released all slaves [ 1391.312155][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1391.349142][T23908] Bluetooth: hci2: command tx timeout [ 1391.534965][T26970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.542513][T26970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.553508][T26970] bridge_slave_0: entered allmulticast mode [ 1391.564561][T26970] bridge_slave_0: entered promiscuous mode [ 1391.603170][T26970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.610783][T26970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.618080][T26970] bridge_slave_1: entered allmulticast mode [ 1391.629095][T26970] bridge_slave_1: entered promiscuous mode [ 1391.746028][T26970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.760969][T26970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.802120][T24048] hsr_slave_0: left promiscuous mode [ 1391.808442][T24048] hsr_slave_1: left promiscuous mode [ 1391.816893][T24048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1391.824645][T24048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.836959][T24048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.845486][T24048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.856984][T24048] veth1_macvtap: left promiscuous mode [ 1391.862686][T24048] veth0_macvtap: left promiscuous mode [ 1391.868248][T24048] veth1_vlan: left promiscuous mode [ 1391.873752][T24048] veth0_vlan: left promiscuous mode [ 1392.082779][T24048] team0 (unregistering): Port device team_slave_1 removed [ 1392.099274][T24048] team0 (unregistering): Port device team_slave_0 removed [ 1392.307973][T26970] team0: Port device team_slave_0 added [ 1392.330920][T26970] team0: Port device team_slave_1 added [ 1392.492249][T26970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.522846][T26970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.584677][T26970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.609715][T26970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.628647][T26970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.687312][T26970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.171854][T26970] hsr_slave_0: entered promiscuous mode [ 1393.179201][T26970] hsr_slave_1: entered promiscuous mode [ 1393.194054][T26970] debugfs: 'hsr0' already exists in 'hsr' [ 1393.209727][T26970] Cannot create hsr debugfs directory [ 1393.418240][T23908] Bluetooth: hci2: command tx timeout [ 1393.530084][T27056] ptp ptp0: only physical clock in use now [ 1393.957991][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1394.598586][T27066] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1395.497068][T23908] Bluetooth: hci2: command tx timeout [ 1395.588980][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1396.863231][T27107] ptp ptp0: only physical clock in use now [ 1398.496558][T26970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1398.511056][T26970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1398.522147][T26970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1398.551014][T26970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1398.577938][T26970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1398.597865][T26970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1398.607465][T26970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1398.658781][T26970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1398.842831][T27154] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1398.919418][T27154] blktrace: Concurrent blktraces are not allowed on ram10 [ 1400.701877][T26970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.798864][T26970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.934589][T23907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.941847][T23907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.069175][T23942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.076468][T23942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1401.716997][T27184] ptp ptp0: only physical clock in use now [ 1402.166619][T27215] ptp ptp0: only physical clock in use now [ 1403.201538][T26970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1405.243796][T26970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.677389][T26970] veth0_vlan: entered promiscuous mode [ 1405.847579][T26970] veth1_vlan: entered promiscuous mode [ 1405.864896][T27294] FAULT_INJECTION: forcing a failure. [ 1405.864896][T27294] name failslab, interval 1, probability 0, space 0, times 0 [ 1405.927161][T27294] CPU: 0 UID: 0 PID: 27294 Comm: syz.1.2876 Tainted: G L syzkaller #0 PREEMPT(full) [ 1405.927193][T27294] Tainted: [L]=SOFTLOCKUP [ 1405.927200][T27294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1405.927211][T27294] Call Trace: [ 1405.927218][T27294] [ 1405.927225][T27294] dump_stack_lvl+0x100/0x190 [ 1405.927251][T27294] should_fail_ex.cold+0x5/0xa [ 1405.927273][T27294] should_failslab+0xc2/0x120 [ 1405.927300][T27294] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1405.927323][T27294] ? __pfx_map_id_range_down+0x10/0x10 [ 1405.927350][T27294] ? security_inode_alloc+0x3b/0x2c0 [ 1405.927377][T27294] security_inode_alloc+0x3b/0x2c0 [ 1405.927399][T27294] inode_init_always_gfp+0xc77/0xfb0 [ 1405.927422][T27294] alloc_inode+0x8e/0x250 [ 1405.927446][T27294] new_inode+0x22/0x1c0 [ 1405.927472][T27294] debugfs_create_symlink+0xd1/0x220 [ 1405.927567][T27294] ref_tracker_dir_symlink+0x257/0x3b0 [ 1405.927590][T27294] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 1405.927639][T27294] ? __pfx_net_ns_net_init+0x10/0x10 [ 1405.927687][T27294] net_ns_net_init+0xd2/0x120 [ 1405.927715][T27294] ops_init+0x1e2/0x5f0 [ 1405.927746][T27294] setup_net+0x118/0x3a0 [ 1405.927773][T27294] ? __pfx_setup_net+0x10/0x10 [ 1405.927801][T27294] ? mutex_init_lockdep+0xf1/0x120 [ 1405.927824][T27294] copy_net_ns+0x46f/0x7c0 [ 1405.927851][T27294] create_new_namespaces+0x3ea/0xac0 [ 1405.927877][T27294] unshare_nsproxy_namespaces+0xf2/0x220 [ 1405.927899][T27294] ksys_unshare+0x438/0xab0 [ 1405.927929][T27294] ? __pfx_ksys_unshare+0x10/0x10 [ 1405.927962][T27294] __x64_sys_unshare+0x31/0x40 [ 1405.927986][T27294] do_syscall_64+0x115/0x840 [ 1405.928009][T27294] ? clear_bhb_loop+0x70/0xc0 [ 1405.928031][T27294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.928050][T27294] RIP: 0033:0x7f3d9f59e0d9 [ 1405.928066][T27294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1405.928083][T27294] RSP: 002b:00007f3da03b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1405.928101][T27294] RAX: ffffffffffffffda RBX: 00007f3d9f826090 RCX: 00007f3d9f59e0d9 [ 1405.928113][T27294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1405.928124][T27294] RBP: 00007f3d9f635024 R08: 0000000000000000 R09: 0000000000000000 [ 1405.928135][T27294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1405.928146][T27294] R13: 00007f3d9f826128 R14: 00007f3d9f826090 R15: 00007ffd37c021c8 [ 1405.928170][T27294] [ 1405.928207][T27294] debugfs: out of free dentries, can not create symlink 'netns-183c-4026533724-notrefcnt' [ 1406.642514][T27300] ptp ptp0: only physical clock in use now [ 1407.805305][T26970] veth0_macvtap: entered promiscuous mode [ 1407.847963][T26970] veth1_macvtap: entered promiscuous mode [ 1407.877201][T26970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1407.925408][T26970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.022428][T23913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.063455][T23913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.167245][T23913] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.309821][T23913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.328841][T23913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.402504][T23909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.423769][T23913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.448872][T23913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.109472][T27418] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1416.143594][T27418] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1416.881436][T27439] ptp ptp0: only physical clock in use now [ 1418.221635][T27444] kafs: addr_prefs: Invalid Command [ 1422.846442][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.853178][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.287290][T27518] FAULT_INJECTION: forcing a failure. [ 1423.287290][T27518] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.369409][T27518] CPU: 0 UID: 0 PID: 27518 Comm: syz.1.2907 Tainted: G L syzkaller #0 PREEMPT(full) [ 1423.369463][T27518] Tainted: [L]=SOFTLOCKUP [ 1423.369475][T27518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1423.369494][T27518] Call Trace: [ 1423.369511][T27518] [ 1423.369523][T27518] dump_stack_lvl+0x100/0x190 [ 1423.369567][T27518] should_fail_ex.cold+0x5/0xa [ 1423.369602][T27518] ? __pfx_proc_net_ns_init+0x10/0x10 [ 1423.369699][T27518] should_failslab+0xc2/0x120 [ 1423.369747][T27518] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1423.369788][T27518] ? proc_net_ns_init+0x42/0x420 [ 1423.369831][T27518] ? __pfx_proc_net_ns_init+0x10/0x10 [ 1423.369869][T27518] proc_net_ns_init+0x42/0x420 [ 1423.369918][T27518] ? __pfx_proc_net_ns_init+0x10/0x10 [ 1423.369955][T27518] ops_init+0x1e2/0x5f0 [ 1423.370009][T27518] setup_net+0x118/0x3a0 [ 1423.370058][T27518] ? __pfx_setup_net+0x10/0x10 [ 1423.370109][T27518] ? mutex_init_lockdep+0xf1/0x120 [ 1423.370152][T27518] copy_net_ns+0x46f/0x7c0 [ 1423.370189][T27518] create_new_namespaces+0x3ea/0xac0 [ 1423.370236][T27518] unshare_nsproxy_namespaces+0xf2/0x220 [ 1423.370276][T27518] ksys_unshare+0x438/0xab0 [ 1423.370319][T27518] ? __pfx_ksys_unshare+0x10/0x10 [ 1423.370370][T27518] __x64_sys_unshare+0x31/0x40 [ 1423.370404][T27518] do_syscall_64+0x115/0x840 [ 1423.370438][T27518] ? clear_bhb_loop+0x70/0xc0 [ 1423.370473][T27518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.370501][T27518] RIP: 0033:0x7f3d9f59e0d9 [ 1423.370525][T27518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1423.370554][T27518] RSP: 002b:00007f3da03b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1423.370584][T27518] RAX: ffffffffffffffda RBX: 00007f3d9f826090 RCX: 00007f3d9f59e0d9 [ 1423.370605][T27518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1423.370624][T27518] RBP: 00007f3d9f635024 R08: 0000000000000000 R09: 0000000000000000 [ 1423.370642][T27518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1423.370660][T27518] R13: 00007f3d9f826128 R14: 00007f3d9f826090 R15: 00007ffd37c021c8 [ 1423.370702][T27518] [ 1425.352831][T27534] ptp ptp0: only physical clock in use now [ 1427.344979][T27578] FAULT_INJECTION: forcing a failure. [ 1427.344979][T27578] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.380774][T27578] CPU: 0 UID: 0 PID: 27578 Comm: syz.2.2917 Tainted: G L syzkaller #0 PREEMPT(full) [ 1427.380828][T27578] Tainted: [L]=SOFTLOCKUP [ 1427.380839][T27578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1427.380857][T27578] Call Trace: [ 1427.380868][T27578] [ 1427.380880][T27578] dump_stack_lvl+0x100/0x190 [ 1427.380925][T27578] should_fail_ex.cold+0x5/0xa [ 1427.380961][T27578] ? __pfx_proc_net_ns_init+0x10/0x10 [ 1427.380997][T27578] should_failslab+0xc2/0x120 [ 1427.381045][T27578] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1427.381087][T27578] ? proc_net_ns_init+0x42/0x420 [ 1427.381124][T27578] ? __pfx_proc_net_ns_init+0x10/0x10 [ 1427.381159][T27578] proc_net_ns_init+0x42/0x420 [ 1427.381194][T27578] ? __pfx_proc_net_ns_init+0x10/0x10 [ 1427.381226][T27578] ops_init+0x1e2/0x5f0 [ 1427.381275][T27578] setup_net+0x118/0x3a0 [ 1427.381317][T27578] ? __pfx_setup_net+0x10/0x10 [ 1427.381363][T27578] ? mutex_init_lockdep+0xf1/0x120 [ 1427.381402][T27578] copy_net_ns+0x46f/0x7c0 [ 1427.381436][T27578] create_new_namespaces+0x3ea/0xac0 [ 1427.381509][T27578] unshare_nsproxy_namespaces+0xf2/0x220 [ 1427.381547][T27578] ksys_unshare+0x438/0xab0 [ 1427.381591][T27578] ? __pfx_ksys_unshare+0x10/0x10 [ 1427.381649][T27578] __x64_sys_unshare+0x31/0x40 [ 1427.381690][T27578] do_syscall_64+0x115/0x840 [ 1427.381729][T27578] ? clear_bhb_loop+0x70/0xc0 [ 1427.381768][T27578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.381801][T27578] RIP: 0033:0x7f55dd99e0d9 [ 1427.381827][T27578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.381855][T27578] RSP: 002b:00007f55de7ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1427.381884][T27578] RAX: ffffffffffffffda RBX: 00007f55ddc26090 RCX: 00007f55dd99e0d9 [ 1427.381902][T27578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1427.381918][T27578] RBP: 00007f55dda35024 R08: 0000000000000000 R09: 0000000000000000 [ 1427.381936][T27578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1427.381952][T27578] R13: 00007f55ddc26128 R14: 00007f55ddc26090 R15: 00007fff85413528 [ 1427.381990][T27578] [ 1428.500866][T27596] ptp ptp0: only physical clock in use now [ 1429.071905][T27604] ptp ptp0: only physical clock in use now [ 1430.831451][T27627] ptp ptp0: only physical clock in use now [ 1432.599959][T27643] FAULT_INJECTION: forcing a failure. [ 1432.599959][T27643] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.630134][T27643] CPU: 1 UID: 0 PID: 27643 Comm: syz.3.2925 Tainted: G L syzkaller #0 PREEMPT(full) [ 1432.630184][T27643] Tainted: [L]=SOFTLOCKUP [ 1432.630195][T27643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1432.630212][T27643] Call Trace: [ 1432.630222][T27643] [ 1432.630233][T27643] dump_stack_lvl+0x100/0x190 [ 1432.630276][T27643] should_fail_ex.cold+0x5/0xa [ 1432.630322][T27643] should_failslab+0xc2/0x120 [ 1432.630370][T27643] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1432.630409][T27643] ? __proc_create+0xc1/0x8f0 [ 1432.630446][T27643] ? __proc_create+0xc1/0x8f0 [ 1432.630482][T27643] ? __proc_create+0x247/0x8f0 [ 1432.630530][T27643] __proc_create+0x247/0x8f0 [ 1432.630568][T27643] ? __pfx___proc_create+0x10/0x10 [ 1432.630622][T27643] _proc_mkdir+0xb9/0x210 [ 1432.630659][T27643] ? __pfx__proc_mkdir+0x10/0x10 [ 1432.630699][T27643] ? proc_net_ns_init+0x42/0x420 [ 1432.630744][T27643] proc_net_ns_init+0x273/0x420 [ 1432.630782][T27643] ? __pfx_proc_net_ns_init+0x10/0x10 [ 1432.630817][T27643] ops_init+0x1e2/0x5f0 [ 1432.630875][T27643] setup_net+0x118/0x3a0 [ 1432.630924][T27643] ? __pfx_setup_net+0x10/0x10 [ 1432.630993][T27643] ? mutex_init_lockdep+0xf1/0x120 [ 1432.631035][T27643] copy_net_ns+0x46f/0x7c0 [ 1432.631071][T27643] create_new_namespaces+0x3ea/0xac0 [ 1432.631116][T27643] unshare_nsproxy_namespaces+0xf2/0x220 [ 1432.631156][T27643] ksys_unshare+0x438/0xab0 [ 1432.631200][T27643] ? __pfx_ksys_unshare+0x10/0x10 [ 1432.631258][T27643] __x64_sys_unshare+0x31/0x40 [ 1432.631299][T27643] do_syscall_64+0x115/0x840 [ 1432.631348][T27643] ? clear_bhb_loop+0x70/0xc0 [ 1432.631388][T27643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.631421][T27643] RIP: 0033:0x7effb2d9e0d9 [ 1432.631449][T27643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.631481][T27643] RSP: 002b:00007effb3d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1432.631514][T27643] RAX: ffffffffffffffda RBX: 00007effb3026090 RCX: 00007effb2d9e0d9 [ 1432.631537][T27643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1432.631557][T27643] RBP: 00007effb2e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1432.631577][T27643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1432.631596][T27643] R13: 00007effb3026128 R14: 00007effb3026090 R15: 00007ffd9ce0bc38 [ 1432.631640][T27643] [ 1433.668096][T27666] ptp ptp0: only physical clock in use now [ 1437.998342][T27711] ptp ptp0: only physical clock in use now [ 1440.206418][T27744] FAULT_INJECTION: forcing a failure. [ 1440.206418][T27744] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.254694][T27744] CPU: 1 UID: 0 PID: 27744 Comm: syz.0.2939 Tainted: G L syzkaller #0 PREEMPT(full) [ 1440.254744][T27744] Tainted: [L]=SOFTLOCKUP [ 1440.254756][T27744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1440.254774][T27744] Call Trace: [ 1440.254784][T27744] [ 1440.254796][T27744] dump_stack_lvl+0x100/0x190 [ 1440.254837][T27744] should_fail_ex.cold+0x5/0xa [ 1440.254873][T27744] should_failslab+0xc2/0x120 [ 1440.254917][T27744] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1440.254955][T27744] ? __pfx_map_id_range_down+0x10/0x10 [ 1440.255001][T27744] ? security_inode_alloc+0x3b/0x2c0 [ 1440.255045][T27744] security_inode_alloc+0x3b/0x2c0 [ 1440.255084][T27744] inode_init_always_gfp+0xc77/0xfb0 [ 1440.255124][T27744] alloc_inode+0x8e/0x250 [ 1440.255166][T27744] new_inode+0x22/0x1c0 [ 1440.255211][T27744] debugfs_create_symlink+0xd1/0x220 [ 1440.255259][T27744] ref_tracker_dir_symlink+0x257/0x3b0 [ 1440.255295][T27744] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 1440.255396][T27744] ? __pfx_net_ns_net_init+0x10/0x10 [ 1440.255445][T27744] net_ns_net_init+0xd2/0x120 [ 1440.255494][T27744] ops_init+0x1e2/0x5f0 [ 1440.255551][T27744] setup_net+0x118/0x3a0 [ 1440.255600][T27744] ? __pfx_setup_net+0x10/0x10 [ 1440.255648][T27744] ? mutex_init_lockdep+0xf1/0x120 [ 1440.255689][T27744] copy_net_ns+0x46f/0x7c0 [ 1440.255724][T27744] create_new_namespaces+0x3ea/0xac0 [ 1440.255770][T27744] unshare_nsproxy_namespaces+0xf2/0x220 [ 1440.255809][T27744] ksys_unshare+0x438/0xab0 [ 1440.255851][T27744] ? __pfx_ksys_unshare+0x10/0x10 [ 1440.255909][T27744] __x64_sys_unshare+0x31/0x40 [ 1440.255949][T27744] do_syscall_64+0x115/0x840 [ 1440.255988][T27744] ? clear_bhb_loop+0x70/0xc0 [ 1440.256026][T27744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.256058][T27744] RIP: 0033:0x7f084619e0d9 [ 1440.256086][T27744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.256116][T27744] RSP: 002b:00007f0846fdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1440.256146][T27744] RAX: ffffffffffffffda RBX: 00007f0846426090 RCX: 00007f084619e0d9 [ 1440.256166][T27744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1440.256184][T27744] RBP: 00007f0846235024 R08: 0000000000000000 R09: 0000000000000000 [ 1440.256202][T27744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.256220][T27744] R13: 00007f0846426128 R14: 00007f0846426090 R15: 00007fff00969478 [ 1440.256264][T27744] [ 1440.554543][T27744] debugfs: out of free dentries, can not create symlink 'netns-18e1-4026534374-notrefcnt' [ 1441.993827][T27754] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1442.001491][T27754] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1442.417543][T27761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2942'. [ 1442.846357][T27780] ptp ptp0: only physical clock in use now [ 1444.109569][T27790] ptp ptp0: only physical clock in use now [ 1444.941727][T27811] ptp ptp0: only physical clock in use now [ 1447.194345][T27840] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1447.242463][T27840] blktrace: Concurrent blktraces are not allowed on ram10 [ 1450.301177][T27876] ptp ptp0: only physical clock in use now [ 1450.554206][T27877] ptp ptp0: only physical clock in use now [ 1452.206241][T27897] ptp ptp0: only physical clock in use now [ 1452.699069][T27914] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1452.710729][T27914] blktrace: Concurrent blktraces are not allowed on ram10 [ 1452.937773][T27915] ptp ptp0: only physical clock in use now [ 1456.545296][T27958] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1456.553299][T27958] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1456.919811][T27974] vhci_hcd: not connected 4 [ 1458.038000][T27987] ptp ptp0: only physical clock in use now [ 1459.094572][T28003] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1459.105765][T28003] blktrace: Concurrent blktraces are not allowed on ram10 [ 1459.181735][T28001] ptp ptp0: only physical clock in use now [ 1460.126594][T27994] ptp ptp0: only physical clock in use now [ 1461.417561][T28027] ptp ptp0: only physical clock in use now [ 1461.798074][T24175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1461.811159][T24175] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1461.822787][T24175] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1461.833027][T24175] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1461.846646][T24175] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1463.101372][T23911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.491013][T23911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.621254][T23911] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.869612][T28060] FAULT_INJECTION: forcing a failure. [ 1463.869612][T28060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1463.890313][T28060] CPU: 0 UID: 0 PID: 28060 Comm: syz.3.2983 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.890362][T28060] Tainted: [L]=SOFTLOCKUP [ 1463.890372][T28060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1463.890389][T28060] Call Trace: [ 1463.890400][T28060] [ 1463.890415][T28060] dump_stack_lvl+0x100/0x190 [ 1463.890478][T28060] should_fail_ex.cold+0x5/0xa [ 1463.890514][T28060] _copy_from_user+0x2e/0xd0 [ 1463.890564][T28060] copy_msghdr_from_user+0x9f/0x4c0 [ 1463.890603][T28060] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1463.890645][T28060] ? rcu_is_watching+0x12/0xc0 [ 1463.890682][T28060] ? ___sys_sendmsg+0x19d/0x1e0 [ 1463.890712][T28060] ? kfree+0x1e5/0x6c0 [ 1463.890749][T28060] ___sys_sendmsg+0x106/0x1e0 [ 1463.890786][T28060] ? __pfx____sys_sendmsg+0x10/0x10 [ 1463.890852][T28060] ? __pfx___might_resched+0x10/0x10 [ 1463.890906][T28060] __sys_sendmmsg+0x20c/0x440 [ 1463.890954][T28060] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1463.890996][T28060] ? ksys_write+0x190/0x250 [ 1463.891056][T28060] ? fput+0x79/0x100 [ 1463.891091][T28060] ? ksys_write+0x1ac/0x250 [ 1463.891119][T28060] ? __pfx_ksys_write+0x10/0x10 [ 1463.891154][T28060] __x64_sys_sendmmsg+0x9c/0x100 [ 1463.891196][T28060] ? lockdep_hardirqs_on+0x78/0x100 [ 1463.891241][T28060] do_syscall_64+0x115/0x840 [ 1463.891276][T28060] ? clear_bhb_loop+0x70/0xc0 [ 1463.891311][T28060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.891341][T28060] RIP: 0033:0x7effb2d9e0d9 [ 1463.891367][T28060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.891396][T28060] RSP: 002b:00007effb3d27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1463.891424][T28060] RAX: ffffffffffffffda RBX: 00007effb3025fa0 RCX: 00007effb2d9e0d9 [ 1463.891444][T28060] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1463.891462][T28060] RBP: 00007effb3d27090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.891477][T28060] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.891494][T28060] R13: 00007effb3026038 R14: 00007effb3025fa0 R15: 00007ffd9ce0bc38 [ 1463.891531][T28060] [ 1464.111953][T23908] Bluetooth: hci4: command tx timeout [ 1464.172265][T23911] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.505012][T28069] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1464.521797][T28069] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1465.386025][T28085] ptp ptp0: only physical clock in use now [ 1465.870589][T23911] bridge_slave_1: left allmulticast mode [ 1465.890158][T23911] bridge_slave_1: left promiscuous mode [ 1465.903243][T23911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.918882][T23911] bridge_slave_0: left allmulticast mode [ 1465.931834][T23911] bridge_slave_0: left promiscuous mode [ 1465.940056][T23911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.182427][T24175] Bluetooth: hci4: command tx timeout [ 1466.228468][T23911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.241231][T23911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.253083][T23911] bond0 (unregistering): Released all slaves [ 1466.571059][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1467.015828][T23911] hsr_slave_0: left promiscuous mode [ 1467.046355][T28115] ptp ptp0: only physical clock in use now [ 1467.053883][T23911] hsr_slave_1: left promiscuous mode [ 1467.066872][T23911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1467.085379][T23911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.102257][T23911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1467.109896][T23911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.157348][T23911] veth1_macvtap: left promiscuous mode [ 1467.166314][T23911] veth0_macvtap: left promiscuous mode [ 1467.179016][T23911] veth1_vlan: left promiscuous mode [ 1467.195315][T23911] veth0_vlan: left promiscuous mode [ 1468.045306][T23911] team0 (unregistering): Port device team_slave_0 removed [ 1468.213009][T28032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.225912][T28032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.233310][T28032] bridge_slave_0: entered allmulticast mode [ 1468.249332][T28032] bridge_slave_0: entered promiscuous mode [ 1468.263603][T24175] Bluetooth: hci4: command tx timeout [ 1468.273339][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1468.396766][T28032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.405802][T28032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.421075][T28032] bridge_slave_1: entered allmulticast mode [ 1468.429138][T28032] bridge_slave_1: entered promiscuous mode [ 1468.578222][T28032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.690343][T28032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.896779][T28032] team0: Port device team_slave_0 added [ 1468.966438][T28032] team0: Port device team_slave_1 added [ 1469.487753][T28032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1469.530979][T28032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1469.601501][T28032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1469.852764][T28032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1469.901747][T28032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.010555][T28032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.340186][T24175] Bluetooth: hci4: command tx timeout [ 1470.700926][T28032] hsr_slave_0: entered promiscuous mode [ 1470.718752][T28032] hsr_slave_1: entered promiscuous mode [ 1470.805559][T28171] ptp ptp0: only physical clock in use now [ 1471.098151][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1471.719158][T28183] ptp ptp0: only physical clock in use now [ 1474.384963][T28230] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1474.392851][T28230] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1475.408062][T28260] ptp ptp0: only physical clock in use now [ 1476.528188][T28032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1476.561074][T28032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1476.569314][T28032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1476.586183][T28032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1476.622350][T28032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1476.645916][T28032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1476.804310][T28032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1476.821649][T28032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1477.840106][T28312] FAULT_INJECTION: forcing a failure. [ 1477.840106][T28312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1477.855238][T28312] CPU: 0 UID: 0 PID: 28312 Comm: syz.1.3000 Tainted: G L syzkaller #0 PREEMPT(full) [ 1477.855291][T28312] Tainted: [L]=SOFTLOCKUP [ 1477.855302][T28312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1477.855319][T28312] Call Trace: [ 1477.855330][T28312] [ 1477.855341][T28312] dump_stack_lvl+0x100/0x190 [ 1477.855383][T28312] should_fail_ex.cold+0x5/0xa [ 1477.855410][T28312] ? prepare_alloc_pages+0x16d/0x5f0 [ 1477.855458][T28312] should_fail_alloc_page+0xeb/0x140 [ 1477.855502][T28312] prepare_alloc_pages+0x1f0/0x5f0 [ 1477.855555][T28312] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1477.855596][T28312] ? rcu_is_watching+0x12/0xc0 [ 1477.855635][T28312] ? trace_mm_page_alloc+0x164/0x1c0 [ 1477.855682][T28312] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 1477.855726][T28312] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1477.855757][T28312] ? __pfx_stack_trace_save+0x10/0x10 [ 1477.855802][T28312] ? stack_depot_save_flags+0x27/0x9d0 [ 1477.855857][T28312] ? kasan_save_stack+0x3f/0x50 [ 1477.855894][T28312] ? kasan_save_stack+0x30/0x50 [ 1477.855940][T28312] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1477.855977][T28312] ? kasan_save_track+0x14/0x30 [ 1477.856024][T28312] ? __kmalloc_noprof+0x322/0x820 [ 1477.856062][T28312] ? vhost_net_ioctl+0xfa3/0x1910 [ 1477.856188][T28312] ? __x64_sys_ioctl+0x18e/0x210 [ 1477.856241][T28312] ? __lock_acquire+0x49f/0x1a40 [ 1477.856278][T28312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1477.856331][T28312] ? policy_nodemask+0xed/0x4f0 [ 1477.856382][T28312] alloc_pages_mpol+0x1fb/0x540 [ 1477.856432][T28312] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1477.856490][T28312] ___kmalloc_large_node+0xe5/0x120 [ 1477.856541][T28312] __kmalloc_large_node_noprof+0x1c/0x70 [ 1477.856594][T28312] __kmalloc_noprof+0x5a1/0x820 [ 1477.856632][T28312] ? rcu_is_watching+0x12/0xc0 [ 1477.856670][T28312] ? trace_kmalloc+0xeb/0x110 [ 1477.856713][T28312] ? vhost_dev_set_owner+0x3b2/0xa30 [ 1477.856780][T28312] vhost_dev_set_owner+0x3b2/0xa30 [ 1477.856833][T28312] vhost_net_ioctl+0xfa3/0x1910 [ 1477.856871][T28312] ? do_vfs_ioctl+0x226/0x13e0 [ 1477.856916][T28312] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1477.856958][T28312] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 1477.857015][T28312] ? find_held_lock+0x2b/0x80 [ 1477.857055][T28312] ? __fget_files+0x215/0x3d0 [ 1477.857083][T28312] ? hook_file_ioctl_common+0x140/0x440 [ 1477.857135][T28312] ? __fget_files+0x21f/0x3d0 [ 1477.857171][T28312] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 1477.857211][T28312] __x64_sys_ioctl+0x18e/0x210 [ 1477.857260][T28312] do_syscall_64+0x115/0x840 [ 1477.857297][T28312] ? clear_bhb_loop+0x70/0xc0 [ 1477.857336][T28312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.857368][T28312] RIP: 0033:0x7f3d9f59e0d9 [ 1477.857394][T28312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.857425][T28312] RSP: 002b:00007f3da03d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1477.857456][T28312] RAX: ffffffffffffffda RBX: 00007f3d9f825fa0 RCX: 00007f3d9f59e0d9 [ 1477.857476][T28312] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 1477.857494][T28312] RBP: 00007f3d9f635024 R08: 0000000000000000 R09: 0000000000000000 [ 1477.857512][T28312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.857530][T28312] R13: 00007f3d9f826038 R14: 00007f3d9f825fa0 R15: 00007ffd37c021c8 [ 1477.857572][T28312] [ 1478.253113][T28316] ptp ptp0: only physical clock in use now [ 1480.106763][T28032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.797259][T28032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1480.892682][T24048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.899873][T24048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1480.964694][T24048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.971834][T24048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.477356][T28374] nfs4: Unknown parameter '' [ 1484.182310][T28032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.255512][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.261916][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.330151][T28403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.867532][T28032] veth0_vlan: entered promiscuous mode [ 1485.908572][T28032] veth1_vlan: entered promiscuous mode [ 1485.954536][T28032] veth0_macvtap: entered promiscuous mode [ 1485.967680][T28032] veth1_macvtap: entered promiscuous mode [ 1486.037098][T28032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.083006][T28032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1486.225480][T23913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.249655][T23913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.487837][T23913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1486.513844][T23913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1486.664952][T28444] ptp ptp0: only physical clock in use now [ 1487.311956][T23909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.324177][T23909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.685224][T28449] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1487.766224][T24219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.811230][T24219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.739173][T28554] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1494.746927][T28554] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1494.912244][T28565] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1494.941927][T28565] blktrace: Concurrent blktraces are not allowed on ram10 [ 1499.830294][T28631] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1499.871198][T28631] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1502.195075][T28662] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1502.206659][T28662] blktrace: Concurrent blktraces are not allowed on ram10 [ 1503.298515][T28675] ptp ptp0: only physical clock in use now [ 1503.318901][T28690] ptp ptp0: only physical clock in use now [ 1504.957346][T28700] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1505.258409][ T5697] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1505.390822][T28715] netlink: 178 bytes leftover after parsing attributes in process `syz.0.3051'. [ 1505.450429][T28716] ptp ptp0: only physical clock in use now [ 1505.768081][T28700] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1505.883816][T28717] ptp ptp0: only physical clock in use now [ 1506.167392][T28722] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1506.204278][T28722] blktrace: Concurrent blktraces are not allowed on ram10 [ 1509.025806][T28755] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1509.047939][T28755] blktrace: Concurrent blktraces are not allowed on ram10 [ 1509.317706][T28728] ima: policy update failed [ 1509.326648][ T29] audit: type=1802 audit(1843104519.910:10): pid=28728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3055" res=0 errno=0 [ 1509.668994][T28763] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1509.678315][T28763] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1510.397468][T28774] ptp ptp0: only physical clock in use now [ 1510.573709][T28783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1510.589153][T28783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1510.599632][T28783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1510.612913][T28783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1510.624526][T28783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1511.055490][T24048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.493460][T24048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.717603][T24048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.820931][T24048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.924773][T28783] Bluetooth: hci2: command 0x0406 tx timeout [ 1512.521249][T24048] bridge_slave_1: left allmulticast mode [ 1512.537624][T24048] bridge_slave_1: left promiscuous mode [ 1512.559885][T24048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.596148][T24048] bridge_slave_0: left allmulticast mode [ 1512.612702][T24048] bridge_slave_0: left promiscuous mode [ 1512.626774][T24048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.651186][T28808] ptp ptp0: only physical clock in use now [ 1512.724499][T23908] Bluetooth: hci0: command tx timeout [ 1513.090702][T24048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1513.111284][T24048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1513.122310][T24048] bond0 (unregistering): Released all slaves [ 1513.533257][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1513.923446][T24048] hsr_slave_0: left promiscuous mode [ 1513.939878][T24048] hsr_slave_1: left promiscuous mode [ 1513.956216][T24048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1513.970715][T24048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1513.985776][T24048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1513.996927][T24048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1514.031854][T24048] veth1_macvtap: left promiscuous mode [ 1514.037524][T24048] veth0_macvtap: left promiscuous mode [ 1514.043561][T24048] veth1_vlan: left promiscuous mode [ 1514.049431][T24048] veth0_vlan: left promiscuous mode [ 1514.736067][T24048] team0 (unregistering): Port device team_slave_1 removed [ 1514.800201][T23908] Bluetooth: hci0: command tx timeout [ 1514.820155][T24048] team0 (unregistering): Port device team_slave_0 removed [ 1515.136919][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1515.149333][T28782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.164590][T28782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.172503][T28782] bridge_slave_0: entered allmulticast mode [ 1515.181674][T28782] bridge_slave_0: entered promiscuous mode [ 1515.206794][T28782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.221850][T28782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.239011][T28782] bridge_slave_1: entered allmulticast mode [ 1515.262310][T28782] bridge_slave_1: entered promiscuous mode [ 1515.391592][T28782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.416766][T28782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.686250][T28782] team0: Port device team_slave_0 added [ 1515.705536][T28782] team0: Port device team_slave_1 added [ 1515.850862][T28782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1515.864738][T28782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1515.891310][T28782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1515.981445][T28782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.994559][T28782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.033517][T28782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.321991][T28782] hsr_slave_0: entered promiscuous mode [ 1516.344498][T28782] hsr_slave_1: entered promiscuous mode [ 1516.369135][T28782] debugfs: 'hsr0' already exists in 'hsr' [ 1516.374959][T28782] Cannot create hsr debugfs directory [ 1516.454018][T28884] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1516.471862][T28884] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1516.846285][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1516.878862][T23908] Bluetooth: hci0: command tx timeout [ 1517.083986][T28896] ptp ptp0: only physical clock in use now [ 1518.955336][T23908] Bluetooth: hci0: command tx timeout [ 1519.251466][T28925] ptp ptp0: only physical clock in use now [ 1519.843019][T28932] futex_wake_op: syz.3.3076 tries to shift op by -2048; fix this program [ 1519.864866][T28932] futex_wake_op: syz.3.3076 tries to shift op by -2048; fix this program [ 1520.359064][T28782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1520.386360][T28782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1520.568963][T28782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1520.581365][T28782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1520.722226][T28782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1520.734547][T28782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1520.908840][T28782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1520.937004][T28782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1521.679286][T28984] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1521.696408][T28782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.830709][T23908] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 1521.838818][T23908] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 1522.245148][T28782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.281230][T23911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.288581][T23911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.869930][T23942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.877251][T23942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1524.664628][T29046] Invalid ELF header magic: != ELF [ 1526.127436][T28782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1526.628858][T28782] veth0_vlan: entered promiscuous mode [ 1526.928583][T28782] veth1_vlan: entered promiscuous mode [ 1527.075147][T28782] veth0_macvtap: entered promiscuous mode [ 1527.099208][T28782] veth1_macvtap: entered promiscuous mode [ 1527.139762][T28782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.217098][T28782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.251658][T23909] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.282892][T23909] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.317904][T23909] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.074527][T23913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.087907][T24048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.126696][T23913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.837542][T24219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.848859][T24219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.862952][T29107] ptp ptp0: only physical clock in use now [ 1529.806299][T29117] ptp ptp0: only physical clock in use now [ 1531.028837][T23942] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 818 with max blocks 13 with error 117 [ 1531.042512][T23942] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1531.042512][T23942] [ 1531.919026][T29174] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1531.941280][T29174] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1532.308031][T29156] ptp ptp0: only physical clock in use now [ 1534.229393][T29211] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1534.290037][T29211] blktrace: Concurrent blktraces are not allowed on ram10 [ 1535.265490][T29221] ptp ptp0: only physical clock in use now [ 1538.807505][T29274] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1540.836460][T29307] blktrace: Concurrent blktraces are not allowed on ram10 [ 1541.431702][T29317] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1541.478998][T29317] blktrace: Concurrent blktraces are not allowed on ram10 [ 1542.793621][T29334] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1542.812516][T29334] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1543.010678][T29340] FAULT_INJECTION: forcing a failure. [ 1543.010678][T29340] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.047512][T29340] CPU: 0 UID: 0 PID: 29340 Comm: syz.2.3128 Tainted: G L syzkaller #0 PREEMPT(full) [ 1543.047560][T29340] Tainted: [L]=SOFTLOCKUP [ 1543.047571][T29340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1543.047589][T29340] Call Trace: [ 1543.047600][T29340] [ 1543.047612][T29340] dump_stack_lvl+0x100/0x190 [ 1543.047655][T29340] should_fail_ex.cold+0x5/0xa [ 1543.047692][T29340] should_failslab+0xc2/0x120 [ 1543.047739][T29340] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1543.047783][T29340] ? sk_prot_alloc+0x60/0x2a0 [ 1543.047823][T29340] sk_prot_alloc+0x60/0x2a0 [ 1543.047858][T29340] sk_alloc+0x36/0xe80 [ 1543.047902][T29340] inet_create+0x3a0/0x1060 [ 1543.048054][T29340] ? inet_create+0x94/0x1060 [ 1543.048110][T29340] __sock_create+0x339/0x860 [ 1543.048155][T29340] smc_create+0x163/0x290 [ 1543.048241][T29340] __sock_create+0x339/0x860 [ 1543.048285][T29340] __sys_socket+0x14d/0x260 [ 1543.048324][T29340] ? __pfx___sys_socket+0x10/0x10 [ 1543.048375][T29340] __x64_sys_socket+0x72/0xb0 [ 1543.048411][T29340] ? lockdep_hardirqs_on+0x78/0x100 [ 1543.048451][T29340] do_syscall_64+0x115/0x840 [ 1543.048489][T29340] ? clear_bhb_loop+0x70/0xc0 [ 1543.048526][T29340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.048559][T29340] RIP: 0033:0x7f668239e0d9 [ 1543.048586][T29340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1543.048616][T29340] RSP: 002b:00007f66831bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1543.048648][T29340] RAX: ffffffffffffffda RBX: 00007f6682626090 RCX: 00007f668239e0d9 [ 1543.048669][T29340] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 1543.048687][T29340] RBP: 00007f6682435024 R08: 0000000000000000 R09: 0000000000000000 [ 1543.048707][T29340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1543.048725][T29340] R13: 00007f6682626128 R14: 00007f6682626090 R15: 00007fff4274a348 [ 1543.048768][T29340] [ 1545.010405][T29374] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1545.070000][T29374] blktrace: Concurrent blktraces are not allowed on ram10 [ 1545.666430][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.674518][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.510163][T29392] ptp ptp0: only physical clock in use now [ 1547.561577][T29406] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1547.569743][T29406] blktrace: Concurrent blktraces are not allowed on ram10 [ 1548.017462][T29414] ptp ptp0: only physical clock in use now [ 1550.236287][T29439] snd_virmidi snd_virmidi.0: control 61678:131081:1:y:5 is already present [ 1551.238282][T29450] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1551.246071][T29450] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1552.344865][T29465] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1552.370929][T29465] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1554.376170][T29493] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1554.401862][T29499] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1554.420941][T29499] blktrace: Concurrent blktraces are not allowed on ram10 [ 1555.666516][T29513] ptp ptp0: only physical clock in use now [ 1557.378271][T29541] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1557.413454][T29541] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1560.077790][T29586] ptp ptp0: only physical clock in use now [ 1561.614058][T29144] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 818 with max blocks 13 with error 117 [ 1561.674999][T29144] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1561.674999][T29144] [ 1563.988457][T28783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1564.004818][T28783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1564.016982][T28783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1564.029143][T28783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1564.037128][T28783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1564.385784][T24048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.615096][T24048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.824666][T24048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.018382][T24048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.136372][T28783] Bluetooth: hci0: command tx timeout [ 1566.510403][T29697] vivid-011: ================= START STATUS ================= [ 1566.527476][T29697] vivid-011: Radio HW Seek Mode: Bounded [ 1566.535151][T29697] vivid-011: Radio Programmable HW Seek: false [ 1566.538008][T29687] ptp ptp0: only physical clock in use now [ 1566.551256][T29697] vivid-011: RDS Rx I/O Mode: Block I/O [ 1566.591828][T29697] vivid-011: Generate RBDS Instead of RDS: false [ 1566.649120][T29697] vivid-011: RDS Reception: true [ 1566.672379][T24048] bridge_slave_1: left allmulticast mode [ 1566.698838][T24048] bridge_slave_1: left promiscuous mode [ 1566.711809][T29697] vivid-011: RDS Program Type: 0 inactive [ 1566.730057][T24048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.733942][T29697] vivid-011: RDS PS Name: inactive [ 1566.758961][T29697] vivid-011: RDS Radio Text: inactive [ 1566.781468][T24048] bridge_slave_0: left allmulticast mode [ 1566.802368][T24048] bridge_slave_0: left promiscuous mode [ 1566.819600][T29697] vivid-011: RDS Traffic Announcement: false inactive [ 1566.832537][T29697] vivid-011: RDS Traffic Program: false inactive [ 1566.836506][T24048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.844253][T29697] vivid-011: RDS Music: false inactive [ 1566.874302][T29697] vivid-011: ================== END STATUS ================== [ 1567.196907][T24048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.208686][T24048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.225434][T24048] bond0 (unregistering): Released all slaves [ 1567.524673][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1568.114186][T24048] hsr_slave_0: left promiscuous mode [ 1568.145905][T24048] hsr_slave_1: left promiscuous mode [ 1568.157788][T24048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1568.182595][T24048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.192303][T24048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.210815][T28783] Bluetooth: hci0: command tx timeout [ 1568.217725][T24048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.266982][T24048] veth1_macvtap: left promiscuous mode [ 1568.285560][T24048] veth0_macvtap: left promiscuous mode [ 1568.300717][T24048] veth1_vlan: left promiscuous mode [ 1568.307786][T24048] veth0_vlan: left promiscuous mode [ 1568.813094][T24048] team0 (unregistering): Port device team_slave_1 removed [ 1568.847605][T24048] team0 (unregistering): Port device team_slave_0 removed [ 1569.034312][T29639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.046721][T29639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.057817][T29639] bridge_slave_0: entered allmulticast mode [ 1569.066363][T29639] bridge_slave_0: entered promiscuous mode [ 1569.095641][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1569.121653][T29639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.131618][T29733] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1569.137771][T29639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.147106][T29639] bridge_slave_1: entered allmulticast mode [ 1569.151481][T29733] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1569.165241][T29733] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1569.172137][T29639] bridge_slave_1: entered promiscuous mode [ 1569.196105][T29733] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1569.212254][T29733] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1569.237210][T29733] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1569.258313][T29733] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1569.284434][T29733] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1569.298750][T29733] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1569.393478][T29639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1569.493918][T29639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.928800][T29639] team0: Port device team_slave_0 added [ 1569.948695][T29639] team0: Port device team_slave_1 added [ 1570.143398][T29639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.158222][T29639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.192457][T29639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.566357][T29639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.573912][T29639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.600740][T29639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.630444][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1570.993809][T29639] hsr_slave_0: entered promiscuous mode [ 1571.013104][T29639] hsr_slave_1: entered promiscuous mode [ 1571.027447][T29639] debugfs: 'hsr0' already exists in 'hsr' [ 1571.044978][T29639] Cannot create hsr debugfs directory [ 1571.170424][T28783] Bluetooth: hci2: command 0x0406 tx timeout [ 1571.177992][T23908] Bluetooth: hci1: command 0x0c1a tx timeout [ 1571.250682][T28783] Bluetooth: hci4: command 0x0c1a tx timeout [ 1571.329232][T28783] Bluetooth: hci0: command 0x0419 tx timeout [ 1573.248826][T28783] Bluetooth: hci2: command 0x0406 tx timeout [ 1573.328263][T28783] Bluetooth: hci4: command 0x0c1a tx timeout [ 1573.389326][T29805] ptp ptp0: only physical clock in use now [ 1573.409170][T28783] Bluetooth: hci0: command 0x0419 tx timeout [ 1575.407163][T28783] Bluetooth: hci4: command 0x0c1a tx timeout [ 1575.487147][T28783] Bluetooth: hci0: command 0x0419 tx timeout [ 1577.566605][T28783] Bluetooth: hci0: command 0x0419 tx timeout [ 1580.234400][T29952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3195'. [ 1583.761410][T29977] ptp ptp0: only physical clock in use now [ 1583.794668][ T29] audit: type=1800 audit(1843104594.407:11): pid=29984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3201" name="version" dev="configfs" ino=212992 res=0 errno=0 [ 1586.907167][T30034] ptp ptp0: only physical clock in use now [ 1587.367261][T30041] ptp ptp0: only physical clock in use now [ 1587.570078][T23908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1587.586635][T23908] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1587.595200][T23908] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1587.608337][T23908] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1587.620123][T23908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1589.720227][T23908] Bluetooth: hci3: command tx timeout [ 1589.983729][T30043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.000486][T30043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.009310][T30043] bridge_slave_0: entered allmulticast mode [ 1590.024596][T30043] bridge_slave_0: entered promiscuous mode [ 1590.048893][T30043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.069974][T30043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.089388][T30043] bridge_slave_1: entered allmulticast mode [ 1590.115049][T30043] bridge_slave_1: entered promiscuous mode [ 1590.186332][T30043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.227233][T30043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1590.324841][T30043] team0: Port device team_slave_0 added [ 1590.356586][T30043] team0: Port device team_slave_1 added [ 1590.426127][T30043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1590.447836][T30043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1590.511313][T30043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1590.688645][T30043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1590.705516][T30043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1590.735214][T30043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1590.970869][T30043] hsr_slave_0: entered promiscuous mode [ 1590.982193][T30043] hsr_slave_1: entered promiscuous mode [ 1590.994248][T30043] debugfs: 'hsr0' already exists in 'hsr' [ 1591.007788][T30043] Cannot create hsr debugfs directory [ 1591.799125][T23908] Bluetooth: hci3: command tx timeout [ 1592.472585][T24048] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 763 with max blocks 55 with error 117 [ 1592.515529][T24048] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1592.515529][T24048] [ 1592.909071][T30130] ptp ptp0: only physical clock in use now [ 1593.880326][T23908] Bluetooth: hci3: command tx timeout [ 1593.961408][T30136] ovs_?: entered promiscuous mode [ 1595.957762][T23908] Bluetooth: hci3: command tx timeout [ 1602.311732][T30273] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 1607.017508][T30307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3242'. [ 1607.045633][T30307] bond0: entered promiscuous mode [ 1607.054203][T30307] bond_slave_0: entered promiscuous mode [ 1607.070471][T30307] bond_slave_1: entered promiscuous mode [ 1607.077027][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.083508][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.482639][T30311] smpboot: CPU 1 is now offline [ 1612.816011][T30359] ptp ptp0: only physical clock in use now [ 1623.424497][T30502] ptp ptp0: only physical clock in use now [ 1624.071951][T28783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1624.087883][T28783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1624.097896][T28783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1624.108392][T28783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1624.116804][T28783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1626.184873][T23908] Bluetooth: hci5: command tx timeout [ 1626.732439][T30512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.748586][T30512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.766141][T30512] bridge_slave_0: entered allmulticast mode [ 1626.782621][T30512] bridge_slave_0: entered promiscuous mode [ 1626.799407][T30512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.814737][T30512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.830364][T30512] bridge_slave_1: entered allmulticast mode [ 1626.847858][T30512] bridge_slave_1: entered promiscuous mode [ 1626.917961][T30512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.940577][T30512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.006131][T30512] team0: Port device team_slave_0 added [ 1627.022834][T30512] team0: Port device team_slave_1 added [ 1627.101216][T30512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.116027][T30512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.172883][T30512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.205899][T30512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.215879][T30512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.242831][T30512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.415364][T30512] hsr_slave_0: entered promiscuous mode [ 1627.446700][T30512] hsr_slave_1: entered promiscuous mode [ 1627.473461][T30512] debugfs: 'hsr0' already exists in 'hsr' [ 1627.505103][T30512] Cannot create hsr debugfs directory [ 1628.262175][T23908] Bluetooth: hci5: command tx timeout [ 1629.629568][T30583] ptp ptp0: only physical clock in use now [ 1630.339796][T23908] Bluetooth: hci5: command tx timeout [ 1631.895359][T30615] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1631.931233][T30615] blktrace: Concurrent blktraces are not allowed on ram10 [ 1632.420345][T23908] Bluetooth: hci5: command tx timeout [ 1632.490566][T30625] blktrace: Concurrent blktraces are not allowed on ram10 [ 1637.470552][T30687] blktrace: Concurrent blktraces are not allowed on ram10 [ 1640.879465][T30738] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1640.908303][T30738] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1646.748337][T30790] kAFS: No cell specified [ 1647.816592][T28783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1647.829920][T28783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1647.841760][T28783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1647.854605][T28783] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1647.866739][T28783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1649.417888][T23908] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 1649.426157][T23908] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 1649.929823][T23908] Bluetooth: hci6: command tx timeout [ 1649.997309][T30815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.023198][T30815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.047609][T30815] bridge_slave_0: entered allmulticast mode [ 1650.072076][T30815] bridge_slave_0: entered promiscuous mode [ 1650.184258][T30815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.202112][T30815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.232265][T30815] bridge_slave_1: entered allmulticast mode [ 1650.260250][T30815] bridge_slave_1: entered promiscuous mode [ 1650.454637][T30815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1650.697384][T30815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1650.984901][T30815] team0: Port device team_slave_0 added [ 1651.112173][T30871] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1651.134338][T30871] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1651.271071][T30815] team0: Port device team_slave_1 added [ 1651.532881][T30815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.544765][T30815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.591760][T30815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.733278][T30815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.754035][T30815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.785404][T30815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.970483][T30815] hsr_slave_0: entered promiscuous mode [ 1651.997164][T30815] hsr_slave_1: entered promiscuous mode [ 1652.016153][T23908] Bluetooth: hci6: command tx timeout [ 1652.026592][T30815] debugfs: 'hsr0' already exists in 'hsr' [ 1652.039189][T30815] Cannot create hsr debugfs directory [ 1654.089623][T23908] Bluetooth: hci6: command tx timeout [ 1654.786568][T30920] ptp ptp0: only physical clock in use now [ 1656.167791][T23908] Bluetooth: hci6: command tx timeout [ 1661.163524][T31000] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1661.218420][T31000] blktrace: Concurrent blktraces are not allowed on ram10 [ 1665.260215][T31040] ptp ptp0: only physical clock in use now [ 1668.488163][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.496550][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.515281][ T29] audit: type=1800 audit(1843104554.917:12): pid=31094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3360" name="dbroot" dev="configfs" ino=223907 res=0 errno=0 [ 1670.085283][T31106] FAULT_INJECTION: forcing a failure. [ 1670.085283][T31106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.115354][T31106] CPU: 0 UID: 0 PID: 31106 Comm: syz.3.3363 Tainted: G L syzkaller #0 PREEMPT(full) [ 1670.115388][T31106] Tainted: [L]=SOFTLOCKUP [ 1670.115395][T31106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1670.115406][T31106] Call Trace: [ 1670.115413][T31106] [ 1670.115420][T31106] dump_stack_lvl+0x100/0x190 [ 1670.115449][T31106] should_fail_ex.cold+0x5/0xa [ 1670.115471][T31106] _copy_to_user+0x32/0xd0 [ 1670.115504][T31106] simple_read_from_buffer+0xcb/0x170 [ 1670.115541][T31106] proc_fail_nth_read+0x1af/0x230 [ 1670.115569][T31106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1670.115597][T31106] ? rw_verify_area+0xce/0x6d0 [ 1670.115623][T31106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1670.115648][T31106] vfs_read+0x1e4/0xb40 [ 1670.115668][T31106] ? __pfx_vfs_read+0x10/0x10 [ 1670.115683][T31106] ? __fget_files+0x215/0x3d0 [ 1670.115705][T31106] ? __fget_files+0x21f/0x3d0 [ 1670.115728][T31106] ksys_read+0x12a/0x250 [ 1670.115748][T31106] ? __pfx_ksys_read+0x10/0x10 [ 1670.115773][T31106] do_syscall_64+0x115/0x840 [ 1670.115800][T31106] ? clear_bhb_loop+0x70/0xc0 [ 1670.115822][T31106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.115841][T31106] RIP: 0033:0x7effb2d5e90e [ 1670.115856][T31106] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1670.115873][T31106] RSP: 002b:00007effb3d26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1670.115890][T31106] RAX: ffffffffffffffda RBX: 00007effb3d276c0 RCX: 00007effb2d5e90e [ 1670.115901][T31106] RDX: 000000000000000f RSI: 00007effb3d270a0 RDI: 0000000000000004 [ 1670.115911][T31106] RBP: 00007effb3d27090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.115922][T31106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.115932][T31106] R13: 00007effb3026038 R14: 00007effb3025fa0 R15: 00007ffd9ce0bc38 [ 1670.115954][T31106] [ 1670.408922][T31108] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1670.416587][T31108] blktrace: Concurrent blktraces are not allowed on ram10 [ 1673.190218][T23908] Bluetooth: hci1: unexpected subevent 0x18 length: 123 > 19 [ 1673.197731][T23908] Bluetooth: hci1: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 1673.836657][T31156] ptp ptp0: only physical clock in use now [ 1675.122581][T31168] FAULT_INJECTION: forcing a failure. [ 1675.122581][T31168] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.172137][T31168] CPU: 0 UID: 0 PID: 31168 Comm: syz.0.3378 Tainted: G L syzkaller #0 PREEMPT(full) [ 1675.172174][T31168] Tainted: [L]=SOFTLOCKUP [ 1675.172181][T31168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1675.172191][T31168] Call Trace: [ 1675.172197][T31168] [ 1675.172204][T31168] dump_stack_lvl+0x100/0x190 [ 1675.172230][T31168] should_fail_ex.cold+0x5/0xa [ 1675.172250][T31168] should_failslab+0xc2/0x120 [ 1675.172277][T31168] __kmalloc_cache_noprof+0x91/0x6c0 [ 1675.172296][T31168] ? rcu_is_watching+0x12/0xc0 [ 1675.172320][T31168] ? snd_card_file_add+0x52/0x320 [ 1675.172345][T31168] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1675.172440][T31168] snd_card_file_add+0x52/0x320 [ 1675.172458][T31168] ? snd_lookup_minor_data+0xc7/0x180 [ 1675.172477][T31168] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1675.172501][T31168] snd_pcm_open+0xf1/0x710 [ 1675.172525][T31168] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1675.172553][T31168] ? __pfx_snd_pcm_open+0x10/0x10 [ 1675.172576][T31168] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1675.172608][T31168] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 1675.172632][T31168] snd_pcm_playback_open+0x86/0xe0 [ 1675.172656][T31168] snd_open+0x201/0x450 [ 1675.172674][T31168] ? __pfx_snd_open+0x10/0x10 [ 1675.172690][T31168] chrdev_open+0x234/0x6a0 [ 1675.172710][T31168] ? __pfx_chrdev_open+0x10/0x10 [ 1675.172730][T31168] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1675.172757][T31168] do_dentry_open+0x6ab/0x14d0 [ 1675.172776][T31168] ? __pfx_chrdev_open+0x10/0x10 [ 1675.172799][T31168] vfs_open+0x82/0x3f0 [ 1675.172824][T31168] path_openat+0x2873/0x4280 [ 1675.172852][T31168] ? __pfx_path_openat+0x10/0x10 [ 1675.172877][T31168] do_file_open+0x20e/0x430 [ 1675.172897][T31168] ? __pfx_do_file_open+0x10/0x10 [ 1675.172930][T31168] ? alloc_fd+0x471/0x7a0 [ 1675.172950][T31168] ? do_getname+0x191/0x390 [ 1675.172974][T31168] do_sys_openat2+0x10f/0x1e0 [ 1675.172998][T31168] ? __pfx_do_sys_openat2+0x10/0x10 [ 1675.173023][T31168] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1675.173046][T31168] ? __fget_files+0x21f/0x3d0 [ 1675.173066][T31168] __x64_sys_openat+0x12d/0x210 [ 1675.173091][T31168] ? __pfx___x64_sys_openat+0x10/0x10 [ 1675.173114][T31168] ? ksys_write+0x1ac/0x250 [ 1675.173132][T31168] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1675.173170][T31168] ? syscall_user_dispatch+0x76/0x130 [ 1675.173193][T31168] do_syscall_64+0x115/0x840 [ 1675.173214][T31168] ? clear_bhb_loop+0x70/0xc0 [ 1675.173235][T31168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.173253][T31168] RIP: 0033:0x7f084619e0d9 [ 1675.173268][T31168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.173285][T31168] RSP: 002b:00007f0846ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1675.173302][T31168] RAX: ffffffffffffffda RBX: 00007f0846425fa0 RCX: 00007f084619e0d9 [ 1675.173313][T31168] RDX: 0000000000040000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1675.173323][T31168] RBP: 00007f0846ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.173333][T31168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.173343][T31168] R13: 00007f0846426038 R14: 00007f0846425fa0 R15: 00007fff00969478 [ 1675.173366][T31168] [ 1676.386272][T31178] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1676.420380][T31178] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1680.887331][T31241] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1680.941233][T31241] blktrace: Concurrent blktraces are not allowed on ram10 [ 1682.608600][T31254] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1682.625099][T31254] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0000 i0000 l0 [ 1684.326111][T28783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1684.338536][T28783] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1684.347452][T28783] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1684.357508][T28783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1684.367335][T28783] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1685.837712][T31273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.845074][T31273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.854779][T31273] bridge_slave_0: entered allmulticast mode [ 1685.862705][T31273] bridge_slave_0: entered promiscuous mode [ 1685.878996][T31273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.889753][T31273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.897726][T31273] bridge_slave_1: entered allmulticast mode [ 1685.908914][T31273] bridge_slave_1: entered promiscuous mode [ 1685.980717][T31273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.007089][T31273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.091651][T31273] team0: Port device team_slave_0 added [ 1686.108151][T31273] team0: Port device team_slave_1 added [ 1686.269190][T31273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1686.296207][T31273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.388476][T31273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1686.424397][T31273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1686.443133][T31273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.478626][T28783] Bluetooth: hci7: command tx timeout [ 1686.557312][T31273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1686.986803][T31320] ptp ptp0: only physical clock in use now [ 1687.634694][T31273] hsr_slave_0: entered promiscuous mode [ 1687.659954][T31273] hsr_slave_1: entered promiscuous mode [ 1687.679371][T31273] debugfs: 'hsr0' already exists in 'hsr' [ 1687.706392][T31273] Cannot create hsr debugfs directory [ 1688.411676][T31325] netlink: 354 bytes leftover after parsing attributes in process `syz.3.3399'. [ 1688.550780][T28783] Bluetooth: hci7: command tx timeout [ 1688.754364][T31331] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1688.770962][T31331] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1690.630052][T28783] Bluetooth: hci7: command tx timeout [ 1692.708714][T28783] Bluetooth: hci7: command tx timeout [ 1693.134581][T31385] blktrace: Concurrent blktraces are not allowed on nbd5 [ 1693.172564][T31385] blktrace: Concurrent blktraces are not allowed on ram10 [ 1699.169985][T31450] ptp ptp0: only physical clock in use now [ 1705.237978][T31541] ptp ptp0: only physical clock in use now [ 1706.935158][T31549] ptp ptp0: only physical clock in use now [ 1708.080309][T23908] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1708.091815][T23908] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1708.102733][T23908] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1708.112829][T23908] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1708.121503][T23908] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1710.219773][T23908] Bluetooth: hci8: command tx timeout [ 1710.663936][T31578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.671731][T31578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.679001][T31578] bridge_slave_0: entered allmulticast mode [ 1710.687858][T31578] bridge_slave_0: entered promiscuous mode [ 1710.701255][T31578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.715883][T31578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.725782][T31578] bridge_slave_1: entered allmulticast mode [ 1710.734638][T31578] bridge_slave_1: entered promiscuous mode [ 1710.795309][T31578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1710.834474][T31578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1710.941989][T31578] team0: Port device team_slave_0 added [ 1710.964100][T31578] team0: Port device team_slave_1 added [ 1711.052872][T31578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1711.069241][T31578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1711.153809][T31578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1711.238011][T31578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1711.264229][T31578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1711.362202][T31578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1711.501610][T23908] Bluetooth: hci3: command 0x0406 tx timeout [ 1711.589200][T31631] ptp ptp0: only physical clock in use now [ 1711.682167][T31578] hsr_slave_0: entered promiscuous mode [ 1711.707163][T31578] hsr_slave_1: entered promiscuous mode [ 1711.732690][T31578] debugfs: 'hsr0' already exists in 'hsr' [ 1711.754801][T31578] Cannot create hsr debugfs directory [ 1711.822508][T31636] ptp ptp0: only physical clock in use now [ 1712.299073][T28783] Bluetooth: hci8: command tx timeout [ 1714.377923][T28783] Bluetooth: hci8: command tx timeout [ 1715.298435][T31678] ptp ptp0: only physical clock in use now [ 1716.456885][ T30] INFO: task syz.2.3183:29803 blocked for more than 143 seconds. [ 1716.464666][ T30] Tainted: G L syzkaller #0 [ 1716.471566][T28783] Bluetooth: hci8: command tx timeout [ 1716.479011][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1716.512986][ T30] task:syz.2.3183 state:D stack:28856 pid:29803 tgid:29781 ppid:28032 task_flags:0x400040 flags:0x00080002 [ 1716.574029][ T30] Call Trace: [ 1716.588320][ T30] [ 1716.602968][ T30] __schedule+0x125c/0x6730 [ 1716.624865][ T30] ? __pfx___schedule+0x10/0x10 [ 1716.649466][ T30] ? find_held_lock+0x2b/0x80 [ 1716.670699][ T30] ? schedule+0x225/0x2c0 [ 1716.692200][ T30] schedule+0xdd/0x2c0 [ 1716.712227][ T30] schedule_preempt_disabled+0x13/0x30 [ 1716.736478][ T30] __mutex_lock+0xccc/0x1bd0 [ 1716.761224][ T30] ? devlink_health_report+0x656/0xb00 [ 1716.787780][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1716.813007][ T30] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 1716.842026][ T30] ? devlink_health_report+0x656/0xb00 [ 1716.875665][ T30] devlink_health_report+0x656/0xb00 [ 1716.897756][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 1716.926222][ T30] ? _copy_from_user+0x59/0xd0 [ 1716.947248][ T30] nsim_dev_health_break_write+0x166/0x210 [ 1717.003920][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1717.059011][ T30] full_proxy_write+0x135/0x1a0 [ 1717.084212][ T30] vfs_write+0x2aa/0x1050 [ 1717.105730][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 1717.126091][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1717.142381][ T30] ? __fget_files+0x215/0x3d0 [ 1717.156979][T31696] ptp ptp0: only physical clock in use now [ 1717.164773][ T30] ? __fget_files+0x21f/0x3d0 [ 1717.176199][ T30] ksys_write+0x12a/0x250 [ 1717.189564][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1717.208756][ T30] ? kcov_ioctl+0x17a/0x750 [ 1717.217919][ T30] do_syscall_64+0x115/0x840 [ 1717.228076][ T30] ? clear_bhb_loop+0x70/0xc0 [ 1717.239122][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.251642][ T30] RIP: 0033:0x7f668239e0d9 [ 1717.266275][ T30] RSP: 002b:00007f667f58b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1717.285774][ T30] RAX: ffffffffffffffda RBX: 00007f6682626540 RCX: 00007f668239e0d9 [ 1717.304113][ T30] RDX: 0000000000000089 RSI: 0000200000000280 RDI: 000000000000000c [ 1717.325783][ T30] RBP: 00007f6682435024 R08: 0000000000000000 R09: 0000000000000000 [ 1717.346022][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1717.364940][ T30] R13: 00007f66826265d8 R14: 00007f6682626540 R15: 00007fff4274a348 [ 1717.386011][ T30] [ 1717.392560][ T30] [ 1717.392560][ T30] Showing all locks held in the system: [ 1717.440240][ T30] 1 lock held by khungtaskd/30: [ 1717.451056][ T30] #0: ffffffff8ebe8000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1717.463101][ T30] 2 locks held by getty/5368: [ 1717.469087][ T30] #0: ffff8880374d10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1717.479161][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1717.489532][ T30] 3 locks held by kworker/u10:4/23942: [ 1717.495008][ T30] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1717.506850][ T30] #1: ffffc90006c7fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1717.517018][ T30] #2: ffffffff8ebf3978 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1717.527233][ T30] 7 locks held by syz-executor/29639: [ 1717.532621][ T30] #0: ffff888037682450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1717.542816][ T30] #1: ffff888032751480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1717.552846][ T30] #2: ffff88802a2f5c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1717.564386][ T30] #3: ffffffff90009220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1717.574972][ T30] #4: ffff8880779d9128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1717.594100][ T30] #5: ffff8880779dd258 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 1717.604522][ T30] #6: ffff888059553b00 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 1717.616472][ T30] 3 locks held by syz.2.3183/29803: [ 1717.621859][ T30] #0: ffff8880754bcd30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1717.631211][ T30] #1: ffff8880206d4450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1717.640556][ T30] #2: ffff8880779dd258 (&devlink->lock_key#13){+.+.}-{4:4}, at: devlink_health_report+0x656/0xb00 [ 1717.652570][ T30] 4 locks held by syz-executor/30043: [ 1717.660225][ T30] #0: ffff888037682450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1717.670891][ T30] #1: ffff8880565c9480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1717.680942][ T30] #2: ffff88802a2f5c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1717.691165][ T30] #3: ffffffff90009220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1717.703072][ T30] 4 locks held by syz-executor/30512: [ 1717.708639][ T30] #0: ffff888037682450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1717.717891][ T30] #1: ffff88807b1d8880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1717.728078][ T30] #2: ffff88802a2f5c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1717.739829][ T30] #3: ffffffff90009220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1717.750441][ T30] 4 locks held by syz-executor/30815: [ 1717.756987][ T30] #0: ffff888037682450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1717.766244][ T30] #1: ffff88805b61d080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1717.777704][ T30] #2: ffff88802a2f5c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1717.787944][ T30] #3: ffffffff90009220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1717.798473][ T30] 4 locks held by syz-executor/31273: [ 1717.803861][ T30] #0: ffff888037682450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1717.814181][ T30] #1: ffff888026dfe480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1717.824733][ T30] #2: ffff88802a2f5c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1717.834968][ T30] #3: ffffffff90009220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1717.845499][ T30] 4 locks held by syz-executor/31578: [ 1717.851051][ T30] #0: ffff888037682450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1717.860287][ T30] #1: ffff88805a246c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1717.872618][ T30] #2: ffff88802a2f5c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1717.882969][ T30] #3: ffffffff90009220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1717.893443][ T30] 3 locks held by syz.0.3448/31686: [ 1717.898903][ T30] #0: ffffffff90a833c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1717.908488][ T30] #1: ffffffff90a9bfc0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1717.919197][ T30] #2: ffffffff8ebf3aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1717.929454][ T30] 2 locks held by syz.0.3448/31688: [ 1717.934665][ T30] #0: ffffffff90a833c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1717.944487][ T30] #1: ffffffff90a9bfc0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1717.953762][ T30] 2 locks held by syz.3.3449/31689: [ 1717.959186][ T30] #0: ffffffff90a833c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1717.968797][ T30] #1: ffffffff90a9bfc0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1717.980477][ T30] 1 lock held by syz.3.3449/31692: [ 1717.985808][ T30] #0: ffffffff90a833c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1717.995239][ T30] 1 lock held by syz.3.3449/31693: [ 1718.000710][ T30] #0: ffffffff90a833c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1718.032530][ T30] [ 1718.043088][ T30] ============================================= [ 1718.043088][ T30] [ 1718.063292][ T30] NMI backtrace for cpu 0 [ 1718.063311][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1718.063335][ T30] Tainted: [L]=SOFTLOCKUP [ 1718.063341][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1718.063351][ T30] Call Trace: [ 1718.063357][ T30] [ 1718.063364][ T30] dump_stack_lvl+0x100/0x190 [ 1718.063391][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1718.063414][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1718.063438][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1718.063466][ T30] sys_info+0x141/0x190 [ 1718.063495][ T30] watchdog+0xcb1/0x1030 [ 1718.063525][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1718.063596][ T30] ? __pfx_watchdog+0x10/0x10 [ 1718.063623][ T30] ? __kthread_parkme+0x18c/0x230 [ 1718.063645][ T30] ? kthread+0x13a/0x450 [ 1718.063668][ T30] ? __pfx_watchdog+0x10/0x10 [ 1718.063691][ T30] kthread+0x370/0x450 [ 1718.063714][ T30] ? __pfx_kthread+0x10/0x10 [ 1718.063739][ T30] ret_from_fork+0x72b/0xd50 [ 1718.063762][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1718.063784][ T30] ? __switch_to+0x800/0x10f0 [ 1718.063800][ T30] ? __switch_to_asm+0x39/0x70 [ 1718.063824][ T30] ? __pfx_kthread+0x10/0x10 [ 1718.063849][ T30] ret_from_fork_asm+0x1a/0x30 [ 1718.063883][ T30] [ 1718.275046][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1718.281949][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1718.292638][ T30] Tainted: [L]=SOFTLOCKUP [ 1718.296964][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1718.307015][ T30] Call Trace: [ 1718.310289][ T30] [ 1718.313217][ T30] dump_stack_lvl+0x100/0x190 [ 1718.317899][ T30] vpanic+0x552/0x970 [ 1718.321882][ T30] ? __pfx_vpanic+0x10/0x10 [ 1718.326399][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1718.332575][ T30] panic+0xd1/0xe0 [ 1718.336298][ T30] ? __pfx_panic+0x10/0x10 [ 1718.340716][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1718.346871][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1718.353023][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1718.359173][ T30] ? watchdog.cold+0x1ec/0x234 [ 1718.363940][ T30] ? watchdog+0xcc1/0x1030 [ 1718.368384][ T30] watchdog.cold+0x1fd/0x234 [ 1718.372981][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1718.378791][ T30] ? __pfx_watchdog+0x10/0x10 [ 1718.383478][ T30] ? __kthread_parkme+0x18c/0x230 [ 1718.388510][ T30] ? kthread+0x13a/0x450 [ 1718.392758][ T30] ? __pfx_watchdog+0x10/0x10 [ 1718.397442][ T30] kthread+0x370/0x450 [ 1718.401522][ T30] ? __pfx_kthread+0x10/0x10 [ 1718.406130][ T30] ret_from_fork+0x72b/0xd50 [ 1718.410756][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1718.415873][ T30] ? __switch_to+0x800/0x10f0 [ 1718.420552][ T30] ? __switch_to_asm+0x39/0x70 [ 1718.425336][ T30] ? __pfx_kthread+0x10/0x10 [ 1718.429937][ T30] ret_from_fork_asm+0x1a/0x30 [ 1718.434719][ T30] [ 1718.437795][ T30] Kernel Offset: disabled [ 1718.442120][ T30] Rebooting in 86400 seconds..