last executing test programs: 17m41.041080715s ago: executing program 0 (id=3052): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(r0, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/11/hwirq\x00', 0x28000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000b40)=""/4096, 0x1000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f0000000200)="81d66e48a0f6307f8f32310031d01f37383b8511") madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 17m39.413033887s ago: executing program 0 (id=3060): r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r0, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 17m39.143191119s ago: executing program 0 (id=3071): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8301, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) fsopen$auto(0x0, 0x1) setrlimit$auto(0x7ffb, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xf400, &(0x7f0000000000), 0x3) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x200, 0xb07e) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000004487543c67abec8ec07e5c1f15b3eb15f1bb4fc8ef4bcef29ee5b803edd647e6c7d3d693e6", @ANYRES16=r0, @ANYBLOB="010029bd7000ffdbdf2505000000180001801400020073797a5f74756e0000000000000000000800090003000000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) socket(0x10, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) syz_clone3(&(0x7f0000000340)={0x400, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17m37.047885821s ago: executing program 0 (id=3069): ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000000)={0x0, 0x4000, 0xc, 0x8001, 0x3, 0xffffffffffffffff}) setuid$auto(0xe) mprotect$auto(0x200000000000, 0x806121, 0x8) (async, rerun: 32) ptrace$auto_PTRACE_GETSIGINFO(0x4202, r0, 0x8, 0x6) (async, rerun: 32) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x3, 0x6) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0x10, 0x2, 0x0) (async, rerun: 64) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) r3 = socket(0x2, 0x1, 0x0) setsockopt$auto(r3, 0x6, 0x13, 0x0, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20044001) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x7) write$auto(0x3, 0x0, 0x5c8) (async, rerun: 32) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card2/midi3\x00', 0x800, 0x0) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd700002dcdf250300000004000800100001800c00108008000100", @ANYRES32, @ANYBLOB="9adb15f547b53b0cc6bcecd5bef65d4e1dbb3bc57cca0cf3596b7f77e140dabc019c5f4387955ed9c07f4d925aada41504009c00f3e40427dd8a4d539d645be7a8c9b0c7fc1123200e"], 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) 17m36.85821727s ago: executing program 0 (id=3072): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(r0, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/11/hwirq\x00', 0x28000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000b40)=""/4096, 0x1000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f0000000200)="81d66e48a0f6307f8f32310031d01f37383b8511") madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 17m35.138893715s ago: executing program 0 (id=3077): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88200, 0x0) r1 = ioctl$auto_SIOCGIFHWADDR2(r0, 0x8927, &(0x7f0000000100)="d8d37a1190be37c415d6858baa050dcad0216d7b2c73f9dcd44f8382d4cc9af47a16a503ad5aeab55b4cdfeda58a98a0aa7813dec162d301338d8cd3eb75a2b25b6c0da8394129f130a25b40e47262b341f394d9932603a0626a282ac4fff0800fcdd2753a664be16cf99d0c3d9eb6828a93") ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x28, 0x3, 0x6) setsockopt$auto(0x400000000000003, 0x29, 0xce, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0x400020007, 0x0, 0x0, 0x0, 0x8000000000000000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram9/make-it-fail\x00', 0x2002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty14\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b49, 0x1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/sctp/rto_beta_exp_divisor\x00', 0xa0081, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x482400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r5) sendmsg$auto_SMC_PNETID_ADD(r5, &(0x7f0000000180)={0x0, 0x5e, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004890}, 0x44c0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) 17m20.083469193s ago: executing program 32 (id=3077): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88200, 0x0) r1 = ioctl$auto_SIOCGIFHWADDR2(r0, 0x8927, &(0x7f0000000100)="d8d37a1190be37c415d6858baa050dcad0216d7b2c73f9dcd44f8382d4cc9af47a16a503ad5aeab55b4cdfeda58a98a0aa7813dec162d301338d8cd3eb75a2b25b6c0da8394129f130a25b40e47262b341f394d9932603a0626a282ac4fff0800fcdd2753a664be16cf99d0c3d9eb6828a93") ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x28, 0x3, 0x6) setsockopt$auto(0x400000000000003, 0x29, 0xce, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0x400020007, 0x0, 0x0, 0x0, 0x8000000000000000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram9/make-it-fail\x00', 0x2002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty14\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b49, 0x1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/sctp/rto_beta_exp_divisor\x00', 0xa0081, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x482400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r5) sendmsg$auto_SMC_PNETID_ADD(r5, &(0x7f0000000180)={0x0, 0x5e, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004890}, 0x44c0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) 22.385695446s ago: executing program 2 (id=6994): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/11/hwirq\x00', 0x28000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r1, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x100000002, 0x100000001) 20.668578229s ago: executing program 2 (id=7002): mmap$auto(0x4, 0x402000c, 0x9, 0xebf, 0x401, 0x8000) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) timer_delete$auto(0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$auto_SO_TIMESTAMPING_OLD(0xffffffffffffffff, 0x7, 0x25, &(0x7f0000000100)='/dev/dvb/adapter0/demux0\x00', 0x22) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80041}, 0x44000) sendmsg$auto_SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000) landlock_restrict_self$auto(0xffffffffffffffff, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r1, 0x2271, 0x38) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x119) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sysfs$auto(0x6, 0x5, 0x8000000007) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x121940, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000002c0), 0x44100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x10803, 0x0) kill$auto(0x0, 0x11) move_pages$auto(0x0, 0x40000008001, 0x0, 0x0, 0x0, 0x96) 17.587634993s ago: executing program 2 (id=7012): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) io_cancel$auto(0x6, 0x0, 0x0) setsockopt$auto(r0, 0x104000000000010e, 0xc, 0x0, 0x6) 17.296556931s ago: executing program 2 (id=7013): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto(r0, 0x4b67, 0x1) socket(0x1, 0x80003, 0x100) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) connect$auto(r3, &(0x7f00000018c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)=ANY=[@ANYBLOB="a3000000", @ANYRES16=0x0, @ANYRESOCT], 0x44}}, 0x4044000) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r5 = socket(0x10, 0x2, 0x9) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) listen$auto(0x3, 0x81) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21020cbd70c031cd0ce401"], 0x14}}, 0x4000091) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c001) msgctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000300)={{0x0, 0x0, 0xee01, 0x7, 0x8001, 0x5a48, 0x2}, &(0x7f00000000c0)=0x35, &(0x7f0000000240), 0x10001, 0x4, 0x8000, 0x9, 0x10, 0x800, 0x0, 0x4, @inferred=0xffffffffffffffff, @raw=0x6}) fstat$auto(r5, &(0x7f0000000380)={0x0, 0x0, 0x5, 0x8, 0x0, r6, 0x0, 0x0, 0x8001, 0x8001, 0x8, 0x9, 0x7fffffff, 0x2, 0x2, 0x5, 0x7}) 16.230870264s ago: executing program 2 (id=7017): r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ed03667ddcd6d026df250a00000a00000200252f00e2a85c41e75a02715b2d"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) 15.810331282s ago: executing program 2 (id=7020): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/available_events\x00', 0x680, 0x0) read$auto_ftrace_avail_fops_trace_events(r0, &(0x7f00000000c0)=""/197, 0xc5) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, r0, 0x8000) r1 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r1, 0x7b9, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000020c0)=""/4093, 0xffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r4, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x40, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0xffffffcc}, @HWSIM_ATTR_TX_INFO={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x1}, @HWSIM_ATTR_FLAGS={0x25, 0x4, 0x2}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x2}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x20000010) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) r7 = semctl$auto_GETPID(0x10001, 0x6, 0xb, 0x100000001) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000001480)={{@raw=0x9, 0x2, 0x5, 0x0, "e462f5a29a0b2f987b9ea452a1bc9eaafd83a8eb9eea79a10397a3126cb6c4380ae1dc84e847c5ccf57f14eb", @inferred=r7}, 0x1, @integer64=@value=[0xf, 0x80, 0x0, 0x3, 0x3, 0x1000, 0xd1f6, 0x5, 0x10, 0x8, 0x4, 0xbe1, 0x1, 0x0, 0x0, 0xffffffffffffff80, 0x40, 0x5, 0x4, 0x3, 0xfffffffffffff000, 0x5, 0x2, 0x2, 0x7, 0x8, 0x2, 0x1, 0x2, 0x5cb56b90, 0x0, 0x81, 0xfffffffffffffffb, 0x9, 0x0, 0x10, 0x2, 0x6, 0x0, 0x6, 0x5, 0x5, 0x8, 0x6, 0xe7d8, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x0, 0x8000000000000001, 0x6, 0xc500000000000000, 0x2, 0x9, 0x0, 0x40, 0x4, 0x5, 0x4, 0xe, 0xb, 0x800, 0x10000], "2ffa3e20e80e755123e1f42e350d190e3032fa30c3621af4571878aad95f51aea60df3a075b1c15529b67947b4b67f290e12883f526b4e566ef511611abf96d1d9b723613b1fce6def179ed465852003f47d532de2721cc6b407490cd09e96be8bf6d01dca81d1d22f2554f48d1796ac750c48d1a4c1d889a0e6b6528742320c"}) unshare$auto(0x40000080) 9.009218977s ago: executing program 3 (id=7035): r0 = seccomp$auto(0x9, 0x4b8, &(0x7f0000000000)="4703ad1e41a8ae0f1b724276d43e78d1ae167d4b4004436a5d84f512f945f015e6e5d78140a2835c9f99c631b2e565b62f3b25eec2ab610d0805ab3683d959ec41dce92bdd80d66bc14865a3f885a8319be1b2bdb4b0b01aa669c88733245dbf678ce37d45b4279b800bf65c73f639c376876d95f66ae8fff03b8588f7c67450cbea287bc3db4f58d62a704568107c9ebf3cbfcd6cdc36da868d564ea656ac50b581b55c6ff4d08ee8b7b405b1307a3e54d478d11c31afa5d24a481dbce71464fe8e12ecab363527a94d4f88623f11d637aceab3521892ea2769d524bc67e19539b9486ad380ff3c1f1449573c72412628da") mmap$auto(0x200000000000000, 0x1, 0xfffffffdfffffffa, 0x9b72, r0, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x6, 0x675a, 0xbb, 0x477b6f99, r0, 0x2) eventfd2$auto(0x6, 0x1) 7.371284685s ago: executing program 1 (id=7037): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/11/hwirq\x00', 0x28000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r1, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x100000002, 0x100000001) 6.142628739s ago: executing program 4 (id=7038): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x80, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x800006, 0x10006, 0x8c48, 0x29b, 0x0, 0x7f, 0x0, 0x6}, {0x300, 0x4, 0x52, 0x1000, 0x2, 0x1a7b870a, 0x76c2, 0x1009, 0x100000000}}) 4.827353566s ago: executing program 3 (id=7039): open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)="81d66e48a0f6307f8f32310031d01f") 4.733539424s ago: executing program 4 (id=7040): mmap$auto(0x0, 0x20009, 0x4000000000dc, 0xeb1, 0x401, 0x80000007ffc) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x1, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x200000001000000, 0xfffff7fffffffff7, 0x3ee) mmap$auto(0x0, 0x3, 0x4000000000dd, 0x40eb1, 0x401, 0x401) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x39db00, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$auto(0x8000000, 0x0, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x40, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x194) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000000c0), 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) mmap$auto(0xfffffffffffffffb, 0x1, 0xdf, 0xdb74, 0xffffffffffffffff, 0x10001) io_uring_setup$auto(0x8008, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf2503000000040008000c0001800800100004"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 4.649868829s ago: executing program 1 (id=7041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x18, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HWSIM_ATTR_NO_VIF={0x4}]}, 0x18}, 0x1, 0x2000000000000000, 0x0, 0x24040000}, 0x40004) 3.946054215s ago: executing program 1 (id=7042): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(r0, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/11/hwirq\x00', 0x28000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f0000000200)="81d66e48a0f6307f8f32310031d01f") madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r1, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x100000002, 0x100000001) 3.202479248s ago: executing program 3 (id=7043): r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$auto_I2C_SMBUS(r0, 0x720, &(0x7f0000000300)="f962c3b85c68") socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, 0x0, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, 0x0, 0x1) io_uring_setup$auto(0x59, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_adjtime$auto(0x354d, 0x0) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) rt_sigsuspend$auto(0x0, 0x8) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x14c0, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001300)={{r2, &(0x7f00000000c0)="e4890ec30a1f5f9e0d08165a1af37aa398a023b5c9fbdd8d594951a87f44d8e66d802c973e3302d5a7ca590fc1c36ff3a5766311a64805399cdd681d70b67506006bccf324a1522dc75ee068219323b7f9a2259c6c05071aa7f70c5c433ce1c3a8fd62fa64718d44131e2b71be7db650593945128d9c733c9425c0e52741cbadc54185e96c6505dcc7dc3203f2c95ba954762dd53c0e6f26a4ea7d7eb7036d69cce38da5470bf0d3035da8fa1a074e22617f72eea472", 0x1, &(0x7f0000000180)="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", 0x7, &(0x7f0000001180)="5f3d0d9a8bbdfb6147fa34c71c21b449283220617a9eccf51faa5ec8ba407c3de4bde6953305f7317c075c0525e84ad213ac1fa699919d19925e959f4f1ea9190299e83d1ba4a0bd34f1e36c6cbca3aa6a37cf28e85dd012eab5e93493dfbadaded9cb825307977ee7ca4bddfee27c7405ae717cd05295e060ab22283ce8bdd7b724cffe40fe30cefcd26315f7b9f284e29beb6e8b84ca8ae84ad0d164c76b3bb024eebc8747fd7f6b2224bccabc9881bc9a6a7b170cf06a9bd9e235eadd1faa9e16f0b54df3bf34", &(0x7f0000001280)=0xf}, {[0x2, 0xffc, 0xe, 0x2]}, 0x2, 0xe0, &(0x7f00000012c0)="17ee5190269e512f8af3c8bf359897fa3e241065066bf465f110aa4f9f07bdd071141d3034b00cff5819f30cbd0ec7e3a4dc23"}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto_SO_BINDTOIFINDEX(r0, 0xfff, 0x3e, &(0x7f0000001380)='/sys/devices/virtual/bluetooth/hci4\x00', 0x6) uname$auto(0x0) 2.985298526s ago: executing program 4 (id=7044): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002ebd70fad0c4819a96185f0008000300", @ANYRES32=r2, @ANYBLOB='\b\x00&'], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) 2.770402735s ago: executing program 4 (id=7045): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto(r0, 0x4b67, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x1, 0x80003, 0x100) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) connect$auto(r2, &(0x7f00000018c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)=ANY=[@ANYBLOB="a3000000", @ANYRES16=0x0, @ANYRESOCT], 0x44}}, 0x4044000) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r4 = socket(0x10, 0x2, 0x9) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) listen$auto(0x3, 0x81) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21020cbd70c031cd0ce401"], 0x14}}, 0x4000091) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c001) msgctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000300)={{0x0, 0x0, 0xee01, 0x7, 0x8001, 0x5a48, 0x2}, &(0x7f00000000c0)=0x35, &(0x7f0000000240), 0x10001, 0x4, 0x8000, 0x9, 0x10, 0x800, 0x0, 0x4, @inferred=0xffffffffffffffff, @raw=0x6}) fstat$auto(r4, &(0x7f0000000380)={0x0, 0x0, 0x5, 0x8, 0x0, r5, 0x0, 0x0, 0x8001, 0x8001, 0x8, 0x9, 0x7fffffff, 0x2, 0x2, 0x5, 0x7}) 2.450638812s ago: executing program 4 (id=7046): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) r1 = socket(0x2, 0x3, 0xa) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@l2={0x1f, 0xfb6d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x55) sendto$auto(0x3, 0x0, 0xf, 0x10, &(0x7f0000000140)=@in={0x2, 0x0, @empty}, 0x19) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) listen$auto(r1, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) write$auto(0x3, 0x0, 0xffd8) getsockopt$auto(r0, 0x1, 0x9, 0x0, 0x0) 2.14391047s ago: executing program 3 (id=7047): socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) write$auto(r0, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) pipe2$auto(0x0, 0x80) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0xf, 0xeb1, 0xfffffffffffffffa, 0x8) io_uring_setup$auto(0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 1.482825469s ago: executing program 4 (id=7048): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(r0, 0x83) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/11/hwirq\x00', 0x28000, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f0000000200)="81d66e48a0f6307f8f32310031d01f") madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r1, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x100000002, 0x100000001) 1.227025925s ago: executing program 1 (id=7049): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf252c0000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x1000060}, 0x400c080) 1.141522828s ago: executing program 3 (id=7050): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) r1 = socket(0x2, 0x3, 0xa) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@l2={0x1f, 0xfb6d, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x55) sendto$auto(0x3, 0x0, 0xf, 0x10, &(0x7f0000000140)=@in={0x2, 0x0, @empty}, 0x19) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) listen$auto(r1, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) getsockopt$auto(r0, 0x1, 0x9, 0x0, 0x0) 1.033288607s ago: executing program 1 (id=7051): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) socket(0x25, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/txpower\x00', 0x0, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0xa4060000, [{0x40000010, 0x400, 0x718c1257}]}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 346.463364ms ago: executing program 33 (id=7020): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/available_events\x00', 0x680, 0x0) read$auto_ftrace_avail_fops_trace_events(r0, &(0x7f00000000c0)=""/197, 0xc5) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, r0, 0x8000) r1 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r1, 0x7b9, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000020c0)=""/4093, 0xffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r4, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x40, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0xffffffcc}, @HWSIM_ATTR_TX_INFO={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x1}, @HWSIM_ATTR_FLAGS={0x25, 0x4, 0x2}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x2}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x20000010) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) r7 = semctl$auto_GETPID(0x10001, 0x6, 0xb, 0x100000001) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000001480)={{@raw=0x9, 0x2, 0x5, 0x0, "e462f5a29a0b2f987b9ea452a1bc9eaafd83a8eb9eea79a10397a3126cb6c4380ae1dc84e847c5ccf57f14eb", @inferred=r7}, 0x1, @integer64=@value=[0xf, 0x80, 0x0, 0x3, 0x3, 0x1000, 0xd1f6, 0x5, 0x10, 0x8, 0x4, 0xbe1, 0x1, 0x0, 0x0, 0xffffffffffffff80, 0x40, 0x5, 0x4, 0x3, 0xfffffffffffff000, 0x5, 0x2, 0x2, 0x7, 0x8, 0x2, 0x1, 0x2, 0x5cb56b90, 0x0, 0x81, 0xfffffffffffffffb, 0x9, 0x0, 0x10, 0x2, 0x6, 0x0, 0x6, 0x5, 0x5, 0x8, 0x6, 0xe7d8, 0x7fff, 0x7fffffff, 0x2, 0x2, 0x0, 0x8000000000000001, 0x6, 0xc500000000000000, 0x2, 0x9, 0x0, 0x40, 0x4, 0x5, 0x4, 0xe, 0xb, 0x800, 0x10000], "2ffa3e20e80e755123e1f42e350d190e3032fa30c3621af4571878aad95f51aea60df3a075b1c15529b67947b4b67f290e12883f526b4e566ef511611abf96d1d9b723613b1fce6def179ed465852003f47d532de2721cc6b407490cd09e96be8bf6d01dca81d1d22f2554f48d1796ac750c48d1a4c1d889a0e6b6528742320c"}) unshare$auto(0x40000080) 341.807758ms ago: executing program 3 (id=7053): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) socket(0x25, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/txpower\x00', 0x0, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0xa7060000, [{0x40000010, 0x400, 0x718c1257}]}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 1 (id=7054): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto(0xffffffffffffffff, 0x4b67, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x1, 0x80003, 0x100) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) connect$auto(r2, &(0x7f00000018c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)=ANY=[@ANYBLOB="a3000000", @ANYRES16=0x0, @ANYRESOCT], 0x44}}, 0x4044000) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r4 = socket(0x10, 0x2, 0x9) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) listen$auto(0x3, 0x81) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21020cbd70c031cd0ce401"], 0x14}}, 0x4000091) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c001) msgctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000300)={{0x0, 0x0, 0xee01, 0x7, 0x8001, 0x5a48, 0x2}, &(0x7f00000000c0)=0x35, &(0x7f0000000240), 0x10001, 0x4, 0x8000, 0x9, 0x10, 0x800, 0x0, 0x4, @inferred=0xffffffffffffffff, @raw=0x6}) fstat$auto(r4, &(0x7f0000000380)={0x0, 0x0, 0x5, 0x8, 0x0, r5, 0x0, 0x0, 0x8001, 0x8001, 0x8, 0x9, 0x7fffffff, 0x2, 0x2, 0x5, 0x7}) kernel console output (not intermixed with test programs): s in 'hsr' [ 1620.188507][T30069] Cannot create hsr debugfs directory [ 1621.158980][T30163] zswap: compressor not available [ 1621.234903][T30175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6512'. [ 1621.295702][T30180] ptrace attach of "./syz-executor exec"[27193] was attempted by "./syz-executor exec"[30180] [ 1621.877030][T30188] openvswitch: netlink: Missing valid actions attribute. [ 1623.039458][T30069] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1623.381937][T30069] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1623.544766][T30069] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1623.623785][T30069] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1623.644146][T30217] futex_wake_op: syz.3.6521 tries to shift op by -2048; fix this program [ 1623.699216][T30217] futex_wake_op: syz.3.6521 tries to shift op by -2048; fix this program [ 1624.566522][T30069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1624.648320][T30069] 8021q: adding VLAN 0 to HW filter on device team0 [ 1624.712586][T22108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.719808][T22108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1624.813587][T22108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.820796][T22108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1626.822587][T30069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.627165][T30069] veth0_vlan: entered promiscuous mode [ 1627.774639][T30069] veth1_vlan: entered promiscuous mode [ 1627.971339][T30069] veth0_macvtap: entered promiscuous mode [ 1628.002727][T30069] veth1_macvtap: entered promiscuous mode [ 1628.158859][T30069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1628.225912][T30069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1628.269543][T24241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.328374][T21957] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.380231][T21957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.416067][T21957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.951969][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1628.983953][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.101917][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.143298][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.332945][T30328] FAULT_INJECTION: forcing a failure. [ 1629.332945][T30328] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.414105][T30328] CPU: 0 UID: 0 PID: 30328 Comm: syz.3.6538 Tainted: G L syzkaller #0 PREEMPT(full) [ 1629.414151][T30328] Tainted: [L]=SOFTLOCKUP [ 1629.414162][T30328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1629.414180][T30328] Call Trace: [ 1629.414191][T30328] [ 1629.414202][T30328] dump_stack_lvl+0x100/0x190 [ 1629.414249][T30328] should_fail_ex.cold+0x5/0xa [ 1629.414284][T30328] should_failslab+0xc2/0x120 [ 1629.414312][T30328] __kvmalloc_node_noprof+0xfa/0xa00 [ 1629.414354][T30328] ? io_uring_setup.cold+0x171/0x1d09 [ 1629.414395][T30328] ? lockdep_init_map_type+0x5c/0x250 [ 1629.414437][T30328] io_uring_setup.cold+0x171/0x1d09 [ 1629.414482][T30328] ? __pfx_io_uring_setup+0x10/0x10 [ 1629.414516][T30328] ? do_futex+0x192/0x350 [ 1629.414553][T30328] ? __pfx_do_futex+0x10/0x10 [ 1629.414607][T30328] ? xfd_validate_state+0x129/0x190 [ 1629.414655][T30328] __x64_sys_io_uring_setup+0xc2/0x170 [ 1629.414689][T30328] do_syscall_64+0x106/0xf80 [ 1629.414721][T30328] ? clear_bhb_loop+0x40/0x90 [ 1629.414757][T30328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.414786][T30328] RIP: 0033:0x7f573619c799 [ 1629.414810][T30328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1629.414837][T30328] RSP: 002b:00007f5736ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1629.414864][T30328] RAX: ffffffffffffffda RBX: 00007f5736415fa0 RCX: 00007f573619c799 [ 1629.414884][T30328] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1629.414908][T30328] RBP: 00007f5736232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1629.414926][T30328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1629.414943][T30328] R13: 00007f5736416038 R14: 00007f5736415fa0 R15: 00007fffef87fdd8 [ 1629.414982][T30328] [ 1630.238163][T30344] netlink: 'syz.4.6542': attribute type 1 has an invalid length. [ 1630.268941][T30344] nbd: error processing sock list [ 1630.963650][T30355] nfs: Unknown parameter 'nH021' [ 1633.821443][T30376] nbd: socks must be embedded in a SOCK_ITEM attr [ 1636.979576][T30413] nfs: Unknown parameter 'nH021' [ 1638.316983][T30431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6563'. [ 1640.481862][T30452] FAULT_INJECTION: forcing a failure. [ 1640.481862][T30452] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.672520][T30452] CPU: 1 UID: 0 PID: 30452 Comm: syz.3.6570 Tainted: G L syzkaller #0 PREEMPT(full) [ 1640.672568][T30452] Tainted: [L]=SOFTLOCKUP [ 1640.672592][T30452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1640.672609][T30452] Call Trace: [ 1640.672618][T30452] [ 1640.672630][T30452] dump_stack_lvl+0x100/0x190 [ 1640.672677][T30452] should_fail_ex.cold+0x5/0xa [ 1640.672707][T30452] ? tomoyo_encode2+0xfb/0x3c0 [ 1640.672733][T30452] should_failslab+0xc2/0x120 [ 1640.672757][T30452] __kmalloc_noprof+0xe0/0x850 [ 1640.672792][T30452] ? d_absolute_path+0x136/0x1b0 [ 1640.672829][T30452] tomoyo_encode2+0xfb/0x3c0 [ 1640.672861][T30452] tomoyo_encode+0x29/0x50 [ 1640.672888][T30452] tomoyo_realpath_from_path+0x18c/0x690 [ 1640.672925][T30452] tomoyo_path_number_perm+0x23c/0x580 [ 1640.672966][T30452] ? tomoyo_path_number_perm+0x22e/0x580 [ 1640.673017][T30452] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1640.673064][T30452] ? rcu_read_unlock+0x17/0x60 [ 1640.673103][T30452] ? do_raw_spin_lock+0x128/0x260 [ 1640.673162][T30452] ? find_held_lock+0x2b/0x80 [ 1640.673189][T30452] ? __pfx_d_add+0x10/0x10 [ 1640.673219][T30452] ? d_alloc+0x176/0x1e0 [ 1640.673247][T30452] ? current_check_access_path+0x281/0x460 [ 1640.673297][T30452] ? __pfx_current_check_access_path+0x10/0x10 [ 1640.673345][T30452] ? simple_lookup+0x105/0x1d0 [ 1640.673392][T30452] tomoyo_path_mknod+0x164/0x190 [ 1640.673427][T30452] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1640.673465][T30452] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1640.673515][T30452] security_path_mknod+0x161/0x300 [ 1640.673551][T30452] filename_mknodat+0x241/0x7f0 [ 1640.673595][T30452] ? __pfx_filename_mknodat+0x10/0x10 [ 1640.673625][T30452] ? strncpy_from_user+0x19d/0x2d0 [ 1640.673671][T30452] ? do_getname+0x191/0x390 [ 1640.673708][T30452] __x64_sys_mknod+0x8f/0xc0 [ 1640.673739][T30452] do_syscall_64+0x106/0xf80 [ 1640.673769][T30452] ? clear_bhb_loop+0x40/0x90 [ 1640.673804][T30452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.673834][T30452] RIP: 0033:0x7f573619c799 [ 1640.673859][T30452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1640.673888][T30452] RSP: 002b:00007f5736fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1640.673918][T30452] RAX: ffffffffffffffda RBX: 00007f5736416090 RCX: 00007f573619c799 [ 1640.673938][T30452] RDX: 0000000000000017 RSI: 0000000000000e6c RDI: 0000200000000080 [ 1640.673956][T30452] RBP: 00007f5736232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1640.673974][T30452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1640.673991][T30452] R13: 00007f5736416128 R14: 00007f5736416090 R15: 00007fffef87fdd8 [ 1640.674030][T30452] [ 1640.960846][T30452] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1642.366453][T30457] NFSD: Failed to start, no listeners configured. [ 1643.281349][T24241] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.621468][T26811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1643.639756][T26811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1643.651088][T26811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1643.662833][T26811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1643.673097][T26811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1643.862759][T24241] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.183092][T24241] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.774713][T24241] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.736245][T26811] Bluetooth: hci0: command tx timeout [ 1645.969455][T24241] bridge_slave_1: left allmulticast mode [ 1645.986432][T24241] bridge_slave_1: left promiscuous mode [ 1645.997696][T24241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.046706][T24241] bridge_slave_0: left allmulticast mode [ 1646.053032][T24241] bridge_slave_0: left promiscuous mode [ 1646.060502][T24241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.696192][T24241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1647.805519][T26811] Bluetooth: hci0: command tx timeout [ 1647.830073][T24241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1648.035049][T24241] bond0 (unregistering): Released all slaves [ 1648.172575][T30460] chnl_net:caif_netlink_parms(): no params data found [ 1648.928705][T30517] FAULT_INJECTION: forcing a failure. [ 1648.928705][T30517] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.993977][T30517] CPU: 1 UID: 0 PID: 30517 Comm: syz.4.6587 Tainted: G L syzkaller #0 PREEMPT(full) [ 1648.994024][T30517] Tainted: [L]=SOFTLOCKUP [ 1648.994034][T30517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1648.994051][T30517] Call Trace: [ 1648.994061][T30517] [ 1648.994073][T30517] dump_stack_lvl+0x100/0x190 [ 1648.994121][T30517] should_fail_ex.cold+0x5/0xa [ 1648.994154][T30517] should_failslab+0xc2/0x120 [ 1648.994182][T30517] __kvmalloc_node_noprof+0xfa/0xa00 [ 1648.994224][T30517] ? io_uring_setup.cold+0x171/0x1d09 [ 1648.994264][T30517] ? lockdep_init_map_type+0x5c/0x250 [ 1648.994305][T30517] io_uring_setup.cold+0x171/0x1d09 [ 1648.994350][T30517] ? __pfx_io_uring_setup+0x10/0x10 [ 1648.994384][T30517] ? do_futex+0x192/0x350 [ 1648.994419][T30517] ? __pfx_do_futex+0x10/0x10 [ 1648.994472][T30517] ? xfd_validate_state+0x129/0x190 [ 1648.994520][T30517] __x64_sys_io_uring_setup+0xc2/0x170 [ 1648.994553][T30517] do_syscall_64+0x106/0xf80 [ 1648.994583][T30517] ? clear_bhb_loop+0x40/0x90 [ 1648.994618][T30517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.994645][T30517] RIP: 0033:0x7f5fd4b9c799 [ 1648.994670][T30517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.994700][T30517] RSP: 002b:00007f5fd5ad6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1648.994725][T30517] RAX: ffffffffffffffda RBX: 00007f5fd4e15fa0 RCX: 00007f5fd4b9c799 [ 1648.994742][T30517] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1648.994759][T30517] RBP: 00007f5fd4c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1648.994777][T30517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1648.994794][T30517] R13: 00007f5fd4e16038 R14: 00007f5fd4e15fa0 R15: 00007ffc8d2efd98 [ 1648.994832][T30517] [ 1649.874191][T26811] Bluetooth: hci0: command tx timeout [ 1650.044941][T30527] nfs: Unknown parameter 'nH021' [ 1650.054949][T30460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.062050][T30460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.171615][T30460] bridge_slave_0: entered allmulticast mode [ 1650.196996][T30460] bridge_slave_0: entered promiscuous mode [ 1650.256319][T30460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.265982][T30460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.293540][T30460] bridge_slave_1: entered allmulticast mode [ 1650.302385][T30460] bridge_slave_1: entered promiscuous mode [ 1651.290141][T30460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.306803][T30460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1651.943455][T26811] Bluetooth: hci0: command tx timeout [ 1652.039856][T24241] hsr_slave_0: left promiscuous mode [ 1652.074340][T17700] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1652.086115][T17700] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1652.099652][T17700] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1652.115488][T17700] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1652.122614][T24241] hsr_slave_1: left promiscuous mode [ 1652.128838][T24241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1652.172722][T17700] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1652.225479][T24241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1652.279548][T24241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1652.352730][T24241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1652.393754][T24241] veth1_macvtap: left promiscuous mode [ 1652.399297][T24241] veth0_macvtap: left promiscuous mode [ 1652.405404][T24241] veth1_vlan: left promiscuous mode [ 1652.410700][T24241] veth0_vlan: left promiscuous mode [ 1653.676042][T24241] team0 (unregistering): Port device team_slave_1 removed [ 1653.743378][T24241] team0 (unregistering): Port device team_slave_0 removed [ 1654.251582][T26811] Bluetooth: hci3: command tx timeout [ 1654.473647][T30460] team0: Port device team_slave_0 added [ 1654.604575][T30460] team0: Port device team_slave_1 added [ 1654.786595][T30460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1654.831879][T30460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1654.913336][T30460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1654.970821][T30460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1654.991364][T30460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1655.049790][T30460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1655.830867][T30460] hsr_slave_0: entered promiscuous mode [ 1655.904268][T30460] hsr_slave_1: entered promiscuous mode [ 1655.911352][T30460] debugfs: 'hsr0' already exists in 'hsr' [ 1655.951586][T30460] Cannot create hsr debugfs directory [ 1656.320891][T26811] Bluetooth: hci3: command tx timeout [ 1656.953371][T24241] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.362275][T24241] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.657361][T24241] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.063683][T24241] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.124522][T30586] FAULT_INJECTION: forcing a failure. [ 1658.124522][T30586] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.159306][T30586] CPU: 1 UID: 0 PID: 30586 Comm: syz.4.6597 Tainted: G L syzkaller #0 PREEMPT(full) [ 1658.159355][T30586] Tainted: [L]=SOFTLOCKUP [ 1658.159366][T30586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1658.159389][T30586] Call Trace: [ 1658.159400][T30586] [ 1658.159411][T30586] dump_stack_lvl+0x100/0x190 [ 1658.159460][T30586] should_fail_ex.cold+0x5/0xa [ 1658.159493][T30586] ? lsm_blob_alloc+0x68/0x90 [ 1658.159524][T30586] should_failslab+0xc2/0x120 [ 1658.159552][T30586] __kmalloc_noprof+0xe0/0x850 [ 1658.159591][T30586] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1658.159626][T30586] lsm_blob_alloc+0x68/0x90 [ 1658.159658][T30586] security_sk_alloc+0x2d/0x290 [ 1658.159697][T30586] sk_prot_alloc+0x1d1/0x2a0 [ 1658.159739][T30586] sk_alloc+0x36/0xe80 [ 1658.159769][T30586] unix_create1+0xa6/0x700 [ 1658.159809][T30586] unix_create+0x145/0x270 [ 1658.159847][T30586] __sock_create+0x339/0x860 [ 1658.159901][T30586] __sys_socketpair+0x261/0x5b0 [ 1658.159946][T30586] ? __pfx___sys_socketpair+0x10/0x10 [ 1658.159990][T30586] ? xfd_validate_state+0x129/0x190 [ 1658.160039][T30586] __x64_sys_socketpair+0x96/0x100 [ 1658.160081][T30586] ? lockdep_hardirqs_on+0x78/0x100 [ 1658.160114][T30586] do_syscall_64+0x106/0xf80 [ 1658.160144][T30586] ? clear_bhb_loop+0x40/0x90 [ 1658.160176][T30586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.160206][T30586] RIP: 0033:0x7f5fd4b9c799 [ 1658.160229][T30586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1658.160256][T30586] RSP: 002b:00007f5fd5ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1658.160291][T30586] RAX: ffffffffffffffda RBX: 00007f5fd4e16090 RCX: 00007f5fd4b9c799 [ 1658.160311][T30586] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 1658.160330][T30586] RBP: 00007f5fd4c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1658.160348][T30586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1658.160366][T30586] R13: 00007f5fd4e16128 R14: 00007f5fd4e16090 R15: 00007ffc8d2efd98 [ 1658.160404][T30586] [ 1658.608276][T26811] Bluetooth: hci3: command tx timeout [ 1658.887661][T30540] chnl_net:caif_netlink_parms(): no params data found [ 1659.092639][T30595] random: crng reseeded on system resumption [ 1660.619418][T26811] Bluetooth: hci3: command tx timeout [ 1661.280635][T30540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.314405][T30540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.341831][T30540] bridge_slave_0: entered allmulticast mode [ 1661.397332][T30540] bridge_slave_0: entered promiscuous mode [ 1662.224258][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1662.230724][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1662.354104][T24241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1662.442540][T24241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1662.475816][T24241] bond0 (unregistering): Released all slaves [ 1662.758137][T30540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.765316][T30540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.827201][T30540] bridge_slave_1: entered allmulticast mode [ 1662.867120][T30540] bridge_slave_1: entered promiscuous mode [ 1662.937257][T30631] input input73: cannot allocate more than FF_MAX_EFFECTS effects [ 1663.223221][T30540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.243445][T30540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.529525][T30540] team0: Port device team_slave_0 added [ 1663.580732][T30540] team0: Port device team_slave_1 added [ 1663.892161][T30540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.921247][T30540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.040809][T30540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.055280][T30460] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1664.160449][T30540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.167413][T30540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.279896][T30540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.296510][T30460] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1664.314771][T30460] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1664.510951][T30460] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1665.190511][T30540] hsr_slave_0: entered promiscuous mode [ 1665.206694][T30540] hsr_slave_1: entered promiscuous mode [ 1665.213295][T30540] debugfs: 'hsr0' already exists in 'hsr' [ 1665.220172][T30540] Cannot create hsr debugfs directory [ 1665.400947][T24241] hsr_slave_0: left promiscuous mode [ 1665.437065][T24241] hsr_slave_1: left promiscuous mode [ 1665.448095][T24241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.476222][T24241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.507326][T24241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.535896][T24241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.596937][T24241] veth1_macvtap: left promiscuous mode [ 1665.614877][T24241] veth0_macvtap: left promiscuous mode [ 1665.642470][T24241] veth1_vlan: left promiscuous mode [ 1665.656334][T24241] veth0_vlan: left promiscuous mode [ 1666.416882][T24241] team0 (unregistering): Port device team_slave_1 removed [ 1666.488668][T24241] team0 (unregistering): Port device team_slave_0 removed [ 1667.681805][T30460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1668.272521][T30460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1668.649448][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.656650][T12161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1668.737484][T21956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.744670][T21956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1669.378037][T17700] Bluetooth: hci2: command 0x0406 tx timeout [ 1670.217276][T30717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6611'. [ 1670.318920][T17700] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1670.335243][T17700] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1670.344086][T17700] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1670.356799][T17700] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1670.364991][T17700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1670.392440][T24241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.790519][T24241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.048520][T24241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.170089][T24241] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.240585][T30460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1671.348790][T30540] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1671.504230][T30540] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1671.627690][T30540] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1671.955855][T30540] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1672.492687][T26811] Bluetooth: hci1: command tx timeout [ 1672.711332][T24241] bridge_slave_1: left allmulticast mode [ 1672.734718][T24241] bridge_slave_1: left promiscuous mode [ 1672.776481][T24241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.886681][T24241] bridge_slave_0: left allmulticast mode [ 1672.927631][T24241] bridge_slave_0: left promiscuous mode [ 1672.949120][T24241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.017257][T30761] sd 0:0:1:0: PR command failed: 1026 [ 1674.027722][T24241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1674.058496][T30761] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1674.065712][T30761] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1674.091984][T24241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1674.119988][T24241] bond0 (unregistering): Released all slaves [ 1674.169317][T30460] veth0_vlan: entered promiscuous mode [ 1674.190603][T30719] chnl_net:caif_netlink_parms(): no params data found [ 1674.250193][T30540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.339808][T30460] veth1_vlan: entered promiscuous mode [ 1674.550056][T26811] Bluetooth: hci1: command tx timeout [ 1674.594044][T30719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.641750][T30719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.667329][T30719] bridge_slave_0: entered allmulticast mode [ 1674.716179][T30719] bridge_slave_0: entered promiscuous mode [ 1674.737578][T30540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1674.763355][T30460] veth0_macvtap: entered promiscuous mode [ 1674.976266][T30719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.004068][T30719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.050538][T30719] bridge_slave_1: entered allmulticast mode [ 1675.136017][T30719] bridge_slave_1: entered promiscuous mode [ 1675.196415][T30773] nfs: Unknown parameter 'nH021' [ 1675.297831][T30460] veth1_macvtap: entered promiscuous mode [ 1675.417068][T12165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.424285][T12165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1675.644346][T30460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1675.676621][T12165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.683746][T12165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.229962][T30719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.320403][T30719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.554597][T30460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.627795][T26811] Bluetooth: hci1: command tx timeout [ 1676.659313][T24241] hsr_slave_0: left promiscuous mode [ 1676.699308][T24241] hsr_slave_1: left promiscuous mode [ 1676.709511][T24241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1676.727641][T24241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1676.743784][T24241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1676.751679][T24241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1676.785110][T24241] veth1_macvtap: left promiscuous mode [ 1676.790611][T24241] veth0_macvtap: left promiscuous mode [ 1676.827708][T24241] veth1_vlan: left promiscuous mode [ 1676.833145][T24241] veth0_vlan: left promiscuous mode [ 1677.710728][T24241] team0 (unregistering): Port device team_slave_1 removed [ 1677.770707][T24241] team0 (unregistering): Port device team_slave_0 removed [ 1678.281310][T30719] team0: Port device team_slave_0 added [ 1678.304089][ T86] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.342707][ T86] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.383525][ T86] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.421018][T30719] team0: Port device team_slave_1 added [ 1678.576508][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.692839][T26811] Bluetooth: hci1: command tx timeout [ 1678.731842][T30719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1678.744888][T30719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1678.856751][T30719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1678.908302][T30719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1678.926387][T30719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.031597][T30719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1679.505115][T30719] hsr_slave_0: entered promiscuous mode [ 1679.513857][T30719] hsr_slave_1: entered promiscuous mode [ 1679.522624][T30719] debugfs: 'hsr0' already exists in 'hsr' [ 1679.528382][T30719] Cannot create hsr debugfs directory [ 1679.607768][T12166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.676297][T12166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.245120][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.305931][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.442616][T30810] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 1681.127001][T30540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1682.431000][T30540] veth0_vlan: entered promiscuous mode [ 1682.577290][T30540] veth1_vlan: entered promiscuous mode [ 1682.846181][T30540] veth0_macvtap: entered promiscuous mode [ 1682.908775][T30540] veth1_macvtap: entered promiscuous mode [ 1683.099881][T30540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1683.166242][T30540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1683.316062][T24241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.361812][T24241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.455477][T30719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1683.517455][T24241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.559309][T24241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.581974][T30719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1683.629458][T30719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1683.700980][T30719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1684.281828][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.315204][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.571332][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.579641][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.855759][T30719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1685.709463][T30719] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.009443][T24241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.016649][T24241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.201759][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.208982][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1687.852079][T30719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1689.337439][T30719] veth0_vlan: entered promiscuous mode [ 1689.367687][T30719] veth1_vlan: entered promiscuous mode [ 1689.430721][T30915] random: crng reseeded on system resumption [ 1689.472008][T30719] veth0_macvtap: entered promiscuous mode [ 1689.550910][T30719] veth1_macvtap: entered promiscuous mode [ 1689.730065][T30719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.815526][T30719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.881444][T12166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.940585][T12166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.997690][T12166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.127349][T12166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.652296][T30929] XFS: Clearing xfsstats [ 1692.308438][T30938] nfs: Unknown parameter 'nH021' [ 1692.670791][T12164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.723698][T12164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.481744][T12165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.528821][T12165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1694.090357][T30950] netlink: 330 bytes leftover after parsing attributes in process `syz.4.6610'. [ 1695.472917][T30972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6636'. [ 1695.520600][T30967] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 1695.576819][T30961] nfs: Unknown parameter 'nH021' [ 1695.743087][T30972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1695.953389][T30972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1697.334959][T30981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6639'. [ 1699.052725][T31001] nfs: Unknown parameter 'nH021' [ 1705.096972][T31065] HSR: entered promiscuous mode [ 1706.961787][T31085] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1707.037228][T31084] netlink: 'syz.4.6664': attribute type 23 has an invalid length. [ 1708.303822][T31103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6669'. [ 1708.473673][T31103] HSR: entered promiscuous mode [ 1715.408640][T31163] nfs: Unknown parameter 'nH021' [ 1715.815443][T31165] nfs: Unknown parameter 'nH021' [ 1716.609545][T31177] netlink: 326 bytes leftover after parsing attributes in process `syz.1.6685'. [ 1717.281317][T31192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6690'. [ 1718.826990][T31213] FAULT_INJECTION: forcing a failure. [ 1718.826990][T31213] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.881700][T31213] CPU: 0 UID: 0 PID: 31213 Comm: syz.4.6694 Tainted: G L syzkaller #0 PREEMPT(full) [ 1718.881748][T31213] Tainted: [L]=SOFTLOCKUP [ 1718.881759][T31213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1718.881778][T31213] Call Trace: [ 1718.881787][T31213] [ 1718.881799][T31213] dump_stack_lvl+0x100/0x190 [ 1718.881847][T31213] should_fail_ex.cold+0x5/0xa [ 1718.881881][T31213] should_failslab+0xc2/0x120 [ 1718.881908][T31213] __kvmalloc_node_noprof+0xfa/0xa00 [ 1718.881950][T31213] ? io_uring_setup.cold+0x171/0x1d09 [ 1718.881989][T31213] ? lockdep_init_map_type+0x5c/0x250 [ 1718.882032][T31213] io_uring_setup.cold+0x171/0x1d09 [ 1718.882088][T31213] ? __pfx_io_uring_setup+0x10/0x10 [ 1718.882123][T31213] ? do_futex+0x192/0x350 [ 1718.882160][T31213] ? __pfx_do_futex+0x10/0x10 [ 1718.882211][T31213] ? xfd_validate_state+0x129/0x190 [ 1718.882261][T31213] __x64_sys_io_uring_setup+0xc2/0x170 [ 1718.882292][T31213] do_syscall_64+0x106/0xf80 [ 1718.882324][T31213] ? clear_bhb_loop+0x40/0x90 [ 1718.882360][T31213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.882388][T31213] RIP: 0033:0x7f875719c799 [ 1718.882412][T31213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.882438][T31213] RSP: 002b:00007f87580ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1718.882465][T31213] RAX: ffffffffffffffda RBX: 00007f8757415fa0 RCX: 00007f875719c799 [ 1718.882483][T31213] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1718.882501][T31213] RBP: 00007f8757232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1718.882517][T31213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1718.882534][T31213] R13: 00007f8757416038 R14: 00007f8757415fa0 R15: 00007ffdb390ba28 [ 1718.882571][T31213] [ 1722.914652][T31243] zswap: compressor not available [ 1723.147147][T31272] netlink: 354 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1723.352617][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1723.358985][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1723.365968][T31273] nfs: Unknown parameter 'nH021' [ 1724.225850][T31284] nfs: Unknown parameter 'nH021' [ 1724.379304][T31286] FAULT_INJECTION: forcing a failure. [ 1724.379304][T31286] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.413239][T31286] CPU: 0 UID: 0 PID: 31286 Comm: syz.2.6712 Tainted: G L syzkaller #0 PREEMPT(full) [ 1724.413267][T31286] Tainted: [L]=SOFTLOCKUP [ 1724.413273][T31286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1724.413291][T31286] Call Trace: [ 1724.413298][T31286] [ 1724.413304][T31286] dump_stack_lvl+0x100/0x190 [ 1724.413333][T31286] should_fail_ex.cold+0x5/0xa [ 1724.413351][T31286] should_failslab+0xc2/0x120 [ 1724.413366][T31286] __kvmalloc_node_noprof+0xfa/0xa00 [ 1724.413389][T31286] ? io_uring_setup.cold+0x171/0x1d09 [ 1724.413413][T31286] ? lockdep_init_map_type+0x5c/0x250 [ 1724.413436][T31286] io_uring_setup.cold+0x171/0x1d09 [ 1724.413460][T31286] ? __pfx_io_uring_setup+0x10/0x10 [ 1724.413477][T31286] ? do_futex+0x192/0x350 [ 1724.413497][T31286] ? __pfx_do_futex+0x10/0x10 [ 1724.413524][T31286] ? xfd_validate_state+0x129/0x190 [ 1724.413550][T31286] __x64_sys_io_uring_setup+0xc2/0x170 [ 1724.413568][T31286] do_syscall_64+0x106/0xf80 [ 1724.413585][T31286] ? clear_bhb_loop+0x40/0x90 [ 1724.413603][T31286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.413618][T31286] RIP: 0033:0x7f9b1a99c799 [ 1724.413632][T31286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.413647][T31286] RSP: 002b:00007f9b1b7ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1724.413662][T31286] RAX: ffffffffffffffda RBX: 00007f9b1ac15fa0 RCX: 00007f9b1a99c799 [ 1724.413672][T31286] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1724.413681][T31286] RBP: 00007f9b1aa32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1724.413690][T31286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1724.413699][T31286] R13: 00007f9b1ac16038 R14: 00007f9b1ac15fa0 R15: 00007ffd470992d8 [ 1724.413718][T31286] [ 1728.107131][T31313] sg_write: data in/out 100663260/90 bytes for SCSI command 0x0-- guessing data in; [ 1728.107131][T31313] program syz.2.6719 not setting count and/or reply_len properly [ 1728.195585][T31312] netlink: 346 bytes leftover after parsing attributes in process `syz.4.6718'. [ 1728.625778][T31303] FAULT_INJECTION: forcing a failure. [ 1728.625778][T31303] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.685240][T31303] CPU: 1 UID: 0 PID: 31303 Comm: syz.1.6715 Tainted: G L syzkaller #0 PREEMPT(full) [ 1728.685289][T31303] Tainted: [L]=SOFTLOCKUP [ 1728.685301][T31303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1728.685319][T31303] Call Trace: [ 1728.685329][T31303] [ 1728.685342][T31303] dump_stack_lvl+0x100/0x190 [ 1728.685390][T31303] should_fail_ex.cold+0x5/0xa [ 1728.685428][T31303] ? acpi_ns_internalize_name+0x161/0x2e0 [ 1728.685467][T31303] should_failslab+0xc2/0x120 [ 1728.685496][T31303] __kmalloc_noprof+0xe0/0x850 [ 1728.685545][T31303] acpi_ns_internalize_name+0x161/0x2e0 [ 1728.685581][T31303] ? __pfx_acpi_ns_internalize_name+0x10/0x10 [ 1728.685617][T31303] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 1728.685665][T31303] ? kasan_save_stack+0x3f/0x50 [ 1728.685704][T31303] ? kasan_save_stack+0x30/0x50 [ 1728.685742][T31303] ? kasan_save_track+0x14/0x30 [ 1728.685780][T31303] ? __kasan_kmalloc+0xaa/0xb0 [ 1728.685817][T31303] ? acpi_evaluate_object+0xf5/0xe00 [ 1728.685851][T31303] ? acpi_evaluate_integer+0xdf/0x220 [ 1728.685881][T31303] ? status_show+0xa0/0x120 [ 1728.685923][T31303] acpi_ns_get_node_unlocked+0x18c/0x500 [ 1728.685964][T31303] ? __pfx_acpi_ns_get_node_unlocked+0x10/0x10 [ 1728.686004][T31303] ? mark_held_locks+0x40/0x70 [ 1728.686049][T31303] ? acpi_os_wait_semaphore+0x21e/0x3b0 [ 1728.686102][T31303] ? acpi_ns_get_node+0x6c/0xf0 [ 1728.686144][T31303] acpi_ns_get_node+0x6c/0xf0 [ 1728.686183][T31303] acpi_ns_evaluate+0xb01/0x1670 [ 1728.686223][T31303] acpi_evaluate_object+0x420/0xe00 [ 1728.686259][T31303] ? kasan_save_stack+0x30/0x50 [ 1728.686298][T31303] ? kasan_save_track+0x14/0x30 [ 1728.686342][T31303] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1728.686394][T31303] acpi_evaluate_integer+0xdf/0x220 [ 1728.686427][T31303] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1728.686476][T31303] ? __pfx_status_show+0x10/0x10 [ 1728.686524][T31303] status_show+0xa0/0x120 [ 1728.686561][T31303] ? __pfx_status_show+0x10/0x10 [ 1728.686609][T31303] dev_attr_show+0x52/0xa0 [ 1728.686653][T31303] ? __pfx_dev_attr_show+0x10/0x10 [ 1728.686694][T31303] sysfs_kf_seq_show+0x217/0x3a0 [ 1728.686736][T31303] seq_read_iter+0x32f/0x1270 [ 1728.686793][T31303] kernfs_fop_read_iter+0x46c/0x610 [ 1728.686824][T31303] ? rw_verify_area+0xce/0x6d0 [ 1728.686861][T31303] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1728.686892][T31303] vfs_read+0x825/0xb30 [ 1728.686936][T31303] ? __pfx_vfs_read+0x10/0x10 [ 1728.687002][T31303] ksys_read+0x12a/0x250 [ 1728.687042][T31303] ? __pfx_ksys_read+0x10/0x10 [ 1728.687080][T31303] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1728.687122][T31303] ? syscall_user_dispatch+0x76/0x130 [ 1728.687168][T31303] do_syscall_64+0x106/0xf80 [ 1728.687201][T31303] ? clear_bhb_loop+0x40/0x90 [ 1728.687236][T31303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.687266][T31303] RIP: 0033:0x7fe33959c799 [ 1728.687314][T31303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.687343][T31303] RSP: 002b:00007fe33a51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1728.687371][T31303] RAX: ffffffffffffffda RBX: 00007fe339816090 RCX: 00007fe33959c799 [ 1728.687391][T31303] RDX: 000000000000007f RSI: 0000200000000240 RDI: 0000000000000005 [ 1728.687409][T31303] RBP: 00007fe339632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1728.687427][T31303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1728.687445][T31303] R13: 00007fe339816128 R14: 00007fe339816090 R15: 00007fff505fb2f8 [ 1728.687486][T31303] [ 1729.190668][T31316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1729.196907][T31316] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1729.451536][T31316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1729.489997][T31316] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1729.587473][T31316] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1729.670163][T31316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1729.731121][T31316] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1729.776528][T31316] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1729.851755][T31316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1729.870201][T31316] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1729.943951][T31316] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1730.462050][T31335] FAULT_INJECTION: forcing a failure. [ 1730.462050][T31335] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.504919][T31335] CPU: 1 UID: 0 PID: 31335 Comm: syz.1.6725 Tainted: G L syzkaller #0 PREEMPT(full) [ 1730.504965][T31335] Tainted: [L]=SOFTLOCKUP [ 1730.504976][T31335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1730.504993][T31335] Call Trace: [ 1730.505003][T31335] [ 1730.505014][T31335] dump_stack_lvl+0x100/0x190 [ 1730.505062][T31335] should_fail_ex.cold+0x5/0xa [ 1730.505097][T31335] should_failslab+0xc2/0x120 [ 1730.505123][T31335] __kvmalloc_node_noprof+0xfa/0xa00 [ 1730.505162][T31335] ? io_uring_setup.cold+0x171/0x1d09 [ 1730.505203][T31335] ? lockdep_init_map_type+0x5c/0x250 [ 1730.505247][T31335] io_uring_setup.cold+0x171/0x1d09 [ 1730.505294][T31335] ? __pfx_io_uring_setup+0x10/0x10 [ 1730.505327][T31335] ? do_futex+0x192/0x350 [ 1730.505363][T31335] ? __pfx_do_futex+0x10/0x10 [ 1730.505417][T31335] ? xfd_validate_state+0x129/0x190 [ 1730.505468][T31335] __x64_sys_io_uring_setup+0xc2/0x170 [ 1730.505502][T31335] do_syscall_64+0x106/0xf80 [ 1730.505533][T31335] ? clear_bhb_loop+0x40/0x90 [ 1730.505570][T31335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.505600][T31335] RIP: 0033:0x7fe33959c799 [ 1730.505625][T31335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1730.505664][T31335] RSP: 002b:00007fe33a53f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1730.505693][T31335] RAX: ffffffffffffffda RBX: 00007fe339815fa0 RCX: 00007fe33959c799 [ 1730.505713][T31335] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1730.505731][T31335] RBP: 00007fe339632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1730.505746][T31335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1730.505763][T31335] R13: 00007fe339816038 R14: 00007fe339815fa0 R15: 00007fff505fb2f8 [ 1730.505799][T31335] [ 1730.697430][T17700] Bluetooth: hci2: command 0x0406 tx timeout [ 1731.197948][T17700] Bluetooth: hci3: unexpected subevent 0x18 length: 123 > 19 [ 1731.206749][T17700] Bluetooth: hci3: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 1731.467529][T17700] Bluetooth: hci0: command 0x0c1a tx timeout [ 1731.688973][T31353] Bluetooth: hci3: command 0x0c1a tx timeout [ 1731.927823][T31353] Bluetooth: hci1: command 0x0c1a tx timeout [ 1732.162018][T31371] nfs: Unknown parameter 'nH021' [ 1732.723528][T31353] Bluetooth: hci2: command 0x0406 tx timeout [ 1733.510344][T31372] FAULT_INJECTION: forcing a failure. [ 1733.510344][T31372] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.529251][T31353] Bluetooth: hci0: command 0x0c1a tx timeout [ 1733.705320][T31372] CPU: 0 UID: 0 PID: 31372 Comm: syz.3.6733 Tainted: G L syzkaller #0 PREEMPT(full) [ 1733.705364][T31372] Tainted: [L]=SOFTLOCKUP [ 1733.705374][T31372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1733.705390][T31372] Call Trace: [ 1733.705401][T31372] [ 1733.705412][T31372] dump_stack_lvl+0x100/0x190 [ 1733.705458][T31372] should_fail_ex.cold+0x5/0xa [ 1733.705489][T31372] should_failslab+0xc2/0x120 [ 1733.705516][T31372] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1733.705548][T31372] ? acpi_ds_create_walk_state+0x95/0x300 [ 1733.705608][T31372] acpi_ds_create_walk_state+0x95/0x300 [ 1733.705654][T31372] acpi_ps_execute_method+0x2c1/0xe90 [ 1733.705691][T31372] acpi_ns_evaluate+0x640/0x1670 [ 1733.705728][T31372] acpi_evaluate_object+0x420/0xe00 [ 1733.705764][T31372] ? kasan_save_stack+0x30/0x50 [ 1733.705800][T31372] ? kasan_save_track+0x14/0x30 [ 1733.705845][T31372] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1733.705895][T31372] acpi_evaluate_integer+0xdf/0x220 [ 1733.705930][T31372] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1733.705982][T31372] ? __pfx_status_show+0x10/0x10 [ 1733.706017][T31372] status_show+0xa0/0x120 [ 1733.706051][T31372] ? __pfx_status_show+0x10/0x10 [ 1733.706096][T31372] dev_attr_show+0x52/0xa0 [ 1733.706141][T31372] ? __pfx_dev_attr_show+0x10/0x10 [ 1733.706179][T31372] sysfs_kf_seq_show+0x217/0x3a0 [ 1733.706218][T31372] seq_read_iter+0x32f/0x1270 [ 1733.706276][T31372] kernfs_fop_read_iter+0x46c/0x610 [ 1733.706307][T31372] ? rw_verify_area+0xce/0x6d0 [ 1733.706342][T31372] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1733.706372][T31372] vfs_read+0x825/0xb30 [ 1733.706413][T31372] ? __pfx_vfs_read+0x10/0x10 [ 1733.706471][T31372] ksys_read+0x12a/0x250 [ 1733.706508][T31372] ? __pfx_ksys_read+0x10/0x10 [ 1733.706545][T31372] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1733.706593][T31372] ? syscall_user_dispatch+0x76/0x130 [ 1733.706635][T31372] do_syscall_64+0x106/0xf80 [ 1733.706668][T31372] ? clear_bhb_loop+0x40/0x90 [ 1733.706702][T31372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.706731][T31372] RIP: 0033:0x7f573619c799 [ 1733.706756][T31372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1733.706783][T31372] RSP: 002b:00007f5736fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1733.706809][T31372] RAX: ffffffffffffffda RBX: 00007f5736416090 RCX: 00007f573619c799 [ 1733.706828][T31372] RDX: 000000000000007f RSI: 0000200000000240 RDI: 0000000000000005 [ 1733.706845][T31372] RBP: 00007f5736232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1733.706861][T31372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1733.706878][T31372] R13: 00007f5736416128 R14: 00007f5736416090 R15: 00007fffef87fdd8 [ 1733.706918][T31372] [ 1734.007149][T31353] Bluetooth: hci1: command 0x0c1a tx timeout [ 1735.078862][T12166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.337845][T12166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.588586][T31353] Bluetooth: hci0: command 0x0c1a tx timeout [ 1735.610997][T12166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.774276][T26811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1735.793364][T26811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1735.807929][T26811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1735.819319][T26811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1735.830177][T26811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1735.954227][T12166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.076495][T31353] Bluetooth: hci1: command 0x0c1a tx timeout [ 1736.614478][T31403] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^ ' [ 1736.792974][T31405] FAULT_INJECTION: forcing a failure. [ 1736.792974][T31405] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.843460][T31405] CPU: 0 UID: 0 PID: 31405 Comm: syz.3.6743 Tainted: G L syzkaller #0 PREEMPT(full) [ 1736.843508][T31405] Tainted: [L]=SOFTLOCKUP [ 1736.843518][T31405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1736.843534][T31405] Call Trace: [ 1736.843544][T31405] [ 1736.843555][T31405] dump_stack_lvl+0x100/0x190 [ 1736.843602][T31405] should_fail_ex.cold+0x5/0xa [ 1736.843634][T31405] should_failslab+0xc2/0x120 [ 1736.843660][T31405] __kvmalloc_node_noprof+0xfa/0xa00 [ 1736.843699][T31405] ? io_uring_setup.cold+0x171/0x1d09 [ 1736.843738][T31405] ? lockdep_init_map_type+0x5c/0x250 [ 1736.843781][T31405] io_uring_setup.cold+0x171/0x1d09 [ 1736.843827][T31405] ? __pfx_io_uring_setup+0x10/0x10 [ 1736.843862][T31405] ? do_futex+0x192/0x350 [ 1736.843899][T31405] ? __pfx_do_futex+0x10/0x10 [ 1736.843954][T31405] ? xfd_validate_state+0x129/0x190 [ 1736.844004][T31405] __x64_sys_io_uring_setup+0xc2/0x170 [ 1736.844037][T31405] do_syscall_64+0x106/0xf80 [ 1736.844068][T31405] ? clear_bhb_loop+0x40/0x90 [ 1736.844103][T31405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.844133][T31405] RIP: 0033:0x7f573619c799 [ 1736.844156][T31405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1736.844180][T31405] RSP: 002b:00007f5736ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1736.844204][T31405] RAX: ffffffffffffffda RBX: 00007f5736415fa0 RCX: 00007f573619c799 [ 1736.844223][T31405] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1736.844242][T31405] RBP: 00007f5736232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1736.844260][T31405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1736.844276][T31405] R13: 00007f5736416038 R14: 00007f5736415fa0 R15: 00007fffef87fdd8 [ 1736.844319][T31405] [ 1737.336153][T31387] chnl_net:caif_netlink_parms(): no params data found [ 1737.561147][T12166] bridge_slave_1: left allmulticast mode [ 1737.570446][T12166] bridge_slave_1: left promiscuous mode [ 1737.576271][T12166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.676255][T12166] bridge_slave_0: left allmulticast mode [ 1737.708333][T12166] bridge_slave_0: left promiscuous mode [ 1737.714183][T12166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.896635][T31353] Bluetooth: hci3: command tx timeout [ 1738.950008][T12166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.010484][T12166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.046923][T12166] bond0 (unregistering): Released all slaves [ 1739.499816][T31387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.519432][T31387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.527709][T31387] bridge_slave_0: entered allmulticast mode [ 1739.536175][T31387] bridge_slave_0: entered promiscuous mode [ 1739.562060][T31387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.571057][T31387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.589931][T31387] bridge_slave_1: entered allmulticast mode [ 1739.598133][T31387] bridge_slave_1: entered promiscuous mode [ 1739.667968][T31387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.731789][T31387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1739.965880][T31353] Bluetooth: hci3: command tx timeout [ 1739.993394][T31387] team0: Port device team_slave_0 added [ 1740.002295][T31387] team0: Port device team_slave_1 added [ 1740.485286][T31387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1740.492282][T31387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.573501][T31387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1740.773869][T31387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1740.780869][T31387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.963620][T31387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.474739][T31387] hsr_slave_0: entered promiscuous mode [ 1741.546988][T31387] hsr_slave_1: entered promiscuous mode [ 1741.608769][T31387] debugfs: 'hsr0' already exists in 'hsr' [ 1741.614556][T31387] Cannot create hsr debugfs directory [ 1741.756829][T12166] hsr_slave_0: left promiscuous mode [ 1741.826259][T12166] hsr_slave_1: left promiscuous mode [ 1741.832434][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1741.894095][T12166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1741.968214][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1742.007339][T12166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.047288][T31353] Bluetooth: hci3: command tx timeout [ 1742.094496][T12166] veth1_macvtap: left promiscuous mode [ 1742.100183][T12166] veth0_macvtap: left promiscuous mode [ 1742.169645][T12166] veth1_vlan: left promiscuous mode [ 1742.187521][T12166] veth0_vlan: left promiscuous mode [ 1743.211573][T31458] FAULT_INJECTION: forcing a failure. [ 1743.211573][T31458] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.278242][T31458] CPU: 0 UID: 0 PID: 31458 Comm: syz.4.6748 Tainted: G L syzkaller #0 PREEMPT(full) [ 1743.278288][T31458] Tainted: [L]=SOFTLOCKUP [ 1743.278299][T31458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1743.278317][T31458] Call Trace: [ 1743.278327][T31458] [ 1743.278339][T31458] dump_stack_lvl+0x100/0x190 [ 1743.278391][T31458] should_fail_ex.cold+0x5/0xa [ 1743.278423][T31458] should_failslab+0xc2/0x120 [ 1743.278452][T31458] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1743.278486][T31458] ? acpi_evaluate_object+0xf5/0xe00 [ 1743.278525][T31458] ? __lock_acquire+0x4a5/0x2630 [ 1743.278567][T31458] acpi_evaluate_object+0xf5/0xe00 [ 1743.278604][T31458] ? kasan_save_stack+0x30/0x50 [ 1743.278650][T31458] ? kasan_save_track+0x14/0x30 [ 1743.278697][T31458] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1743.278752][T31458] acpi_evaluate_integer+0xdf/0x220 [ 1743.278787][T31458] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1743.278837][T31458] ? __pfx_status_show+0x10/0x10 [ 1743.278873][T31458] status_show+0xa0/0x120 [ 1743.278911][T31458] ? __pfx_status_show+0x10/0x10 [ 1743.278958][T31458] dev_attr_show+0x52/0xa0 [ 1743.279001][T31458] ? __pfx_dev_attr_show+0x10/0x10 [ 1743.279042][T31458] sysfs_kf_seq_show+0x217/0x3a0 [ 1743.279082][T31458] seq_read_iter+0x32f/0x1270 [ 1743.279140][T31458] kernfs_fop_read_iter+0x46c/0x610 [ 1743.279169][T31458] ? rw_verify_area+0xce/0x6d0 [ 1743.279206][T31458] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1743.279239][T31458] vfs_read+0x825/0xb30 [ 1743.279285][T31458] ? __pfx_vfs_read+0x10/0x10 [ 1743.279350][T31458] ksys_read+0x12a/0x250 [ 1743.279391][T31458] ? __pfx_ksys_read+0x10/0x10 [ 1743.279429][T31458] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1743.279466][T31458] ? syscall_user_dispatch+0x76/0x130 [ 1743.279511][T31458] do_syscall_64+0x106/0xf80 [ 1743.279542][T31458] ? clear_bhb_loop+0x40/0x90 [ 1743.279579][T31458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.279609][T31458] RIP: 0033:0x7f875719c799 [ 1743.279639][T31458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.279669][T31458] RSP: 002b:00007f87580c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1743.279696][T31458] RAX: ffffffffffffffda RBX: 00007f8757416090 RCX: 00007f875719c799 [ 1743.279716][T31458] RDX: 000000000000007f RSI: 0000200000000240 RDI: 0000000000000005 [ 1743.279735][T31458] RBP: 00007f8757232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1743.279752][T31458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1743.279770][T31458] R13: 00007f8757416128 R14: 00007f8757416090 R15: 00007ffdb390ba28 [ 1743.279811][T31458] [ 1743.557788][T12166] team0 (unregistering): Port device team_slave_1 removed [ 1743.642641][T12166] team0 (unregistering): Port device team_slave_0 removed [ 1744.104148][T31353] Bluetooth: hci3: command tx timeout [ 1746.517407][T26811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1746.549454][T12166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.565753][T26811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1746.575017][T26811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1746.583188][T26811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1746.590870][T26811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1746.931168][T12166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.314966][T12166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.625331][T12166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.180046][T31387] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1748.389408][T31387] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1748.469054][T31387] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1748.642355][T31353] Bluetooth: hci2: command tx timeout [ 1748.755580][T31387] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1749.058960][T12166] bridge_slave_1: left allmulticast mode [ 1749.066430][T12166] bridge_slave_1: left promiscuous mode [ 1749.094512][T12166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.142046][T12166] bridge_slave_0: left allmulticast mode [ 1749.147754][T12166] bridge_slave_0: left promiscuous mode [ 1749.217243][T12166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.986251][T12166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1750.029387][T12166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1750.065485][T12166] bond0 (unregistering): Released all slaves [ 1750.497790][T12166] .^: left promiscuous mode [ 1750.720438][T31353] Bluetooth: hci2: command tx timeout [ 1750.840032][T31484] chnl_net:caif_netlink_parms(): no params data found [ 1752.144827][T31484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.176524][T31484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.186633][T31558] zswap: compressor not available [ 1752.242255][T31484] bridge_slave_0: entered allmulticast mode [ 1752.250870][T31484] bridge_slave_0: entered promiscuous mode [ 1752.378050][T31387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1752.425125][T31484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.474110][T31484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.488202][T31484] bridge_slave_1: entered allmulticast mode [ 1752.522108][T31484] bridge_slave_1: entered promiscuous mode [ 1752.676636][T12166] hsr_slave_0: left promiscuous mode [ 1752.730699][T12166] hsr_slave_1: left promiscuous mode [ 1752.736911][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1752.779586][T26811] Bluetooth: hci2: command tx timeout [ 1752.800257][T12166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1752.814659][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1752.829044][T12166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1752.888172][T12166] veth1_macvtap: left promiscuous mode [ 1752.919444][T12166] veth0_macvtap: left promiscuous mode [ 1752.925109][T12166] veth1_vlan: left promiscuous mode [ 1752.930730][T12166] veth0_vlan: left promiscuous mode [ 1753.772270][T12166] team0 (unregistering): Port device team_slave_1 removed [ 1753.881836][T12166] team0 (unregistering): Port device team_slave_0 removed [ 1754.505045][T31573] netlink: 330 bytes leftover after parsing attributes in process `syz.4.6761'. [ 1754.548208][T31484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1754.596279][T31484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1754.726946][T31387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1754.848630][T26811] Bluetooth: hci2: command tx timeout [ 1754.973591][T31484] team0: Port device team_slave_0 added [ 1755.024529][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.031833][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1755.094391][T22108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.101566][T22108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1755.175062][T31484] team0: Port device team_slave_1 added [ 1755.466407][T31484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1755.473382][T31484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.574751][T31484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1755.589041][T31484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1755.596933][T31484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.623905][T31484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1755.941243][T31484] hsr_slave_0: entered promiscuous mode [ 1755.978010][T31484] hsr_slave_1: entered promiscuous mode [ 1756.003819][T31484] debugfs: 'hsr0' already exists in 'hsr' [ 1756.025774][T31484] Cannot create hsr debugfs directory [ 1756.539787][T31606] bridge0: port 3(bond0) entered blocking state [ 1756.546184][T31606] bridge0: port 3(bond0) entered disabled state [ 1756.601544][T31606] bond0: entered allmulticast mode [ 1756.633493][T31606] bond_slave_0: entered allmulticast mode [ 1756.649783][T31606] bond_slave_1: entered allmulticast mode [ 1756.658007][T31606] bond0: entered promiscuous mode [ 1756.725109][T31606] bond_slave_0: entered promiscuous mode [ 1756.765798][T31606] bond_slave_1: entered promiscuous mode [ 1756.782864][T31606] bridge0: port 3(bond0) entered blocking state [ 1756.789322][T31606] bridge0: port 3(bond0) entered forwarding state [ 1757.480729][T31621] FAULT_INJECTION: forcing a failure. [ 1757.480729][T31621] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.497415][T31621] CPU: 0 UID: 0 PID: 31621 Comm: syz.2.6765 Tainted: G L syzkaller #0 PREEMPT(full) [ 1757.497462][T31621] Tainted: [L]=SOFTLOCKUP [ 1757.497473][T31621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1757.497492][T31621] Call Trace: [ 1757.497502][T31621] [ 1757.497513][T31621] dump_stack_lvl+0x100/0x190 [ 1757.497563][T31621] should_fail_ex.cold+0x5/0xa [ 1757.497596][T31621] should_failslab+0xc2/0x120 [ 1757.497625][T31621] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1757.497666][T31621] ? sock_alloc_inode+0x25/0x1c0 [ 1757.497708][T31621] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1757.497747][T31621] sock_alloc_inode+0x25/0x1c0 [ 1757.497783][T31621] alloc_inode+0x68/0x250 [ 1757.497818][T31621] sock_alloc+0x44/0x280 [ 1757.497849][T31621] ? security_socket_create+0x7f/0x250 [ 1757.497888][T31621] __sock_create+0xc2/0x860 [ 1757.497934][T31621] __sys_socket+0x14d/0x260 [ 1757.497976][T31621] ? __pfx___sys_socket+0x10/0x10 [ 1757.498028][T31621] __x64_sys_socket+0x72/0xb0 [ 1757.498066][T31621] ? lockdep_hardirqs_on+0x78/0x100 [ 1757.498099][T31621] do_syscall_64+0x106/0xf80 [ 1757.498129][T31621] ? clear_bhb_loop+0x40/0x90 [ 1757.498165][T31621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.498194][T31621] RIP: 0033:0x7f9b1a99c799 [ 1757.498218][T31621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1757.498246][T31621] RSP: 002b:00007f9b1b788028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1757.498273][T31621] RAX: ffffffffffffffda RBX: 00007f9b1ac16180 RCX: 00007f9b1a99c799 [ 1757.498293][T31621] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 1757.498317][T31621] RBP: 00007f9b1aa32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1757.498335][T31621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1757.498352][T31621] R13: 00007f9b1ac16218 R14: 00007f9b1ac16180 R15: 00007ffd470992d8 [ 1757.498392][T31621] [ 1757.498406][T31621] socket: no more sockets [ 1758.176045][T31387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1758.996380][T31387] veth0_vlan: entered promiscuous mode [ 1759.300936][T31387] veth1_vlan: entered promiscuous mode [ 1759.333038][T31634] FAULT_INJECTION: forcing a failure. [ 1759.333038][T31634] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.360216][T31634] CPU: 1 UID: 0 PID: 31634 Comm: syz.4.6767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1759.360261][T31634] Tainted: [L]=SOFTLOCKUP [ 1759.360272][T31634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1759.360288][T31634] Call Trace: [ 1759.360297][T31634] [ 1759.360309][T31634] dump_stack_lvl+0x100/0x190 [ 1759.360356][T31634] should_fail_ex.cold+0x5/0xa [ 1759.360388][T31634] should_failslab+0xc2/0x120 [ 1759.360415][T31634] __kvmalloc_node_noprof+0xfa/0xa00 [ 1759.360452][T31634] ? io_uring_setup.cold+0x171/0x1d09 [ 1759.360493][T31634] ? lockdep_init_map_type+0x5c/0x250 [ 1759.360532][T31634] io_uring_setup.cold+0x171/0x1d09 [ 1759.360574][T31634] ? __pfx_io_uring_setup+0x10/0x10 [ 1759.360607][T31634] ? do_futex+0x192/0x350 [ 1759.360642][T31634] ? __pfx_do_futex+0x10/0x10 [ 1759.360691][T31634] ? xfd_validate_state+0x129/0x190 [ 1759.360738][T31634] __x64_sys_io_uring_setup+0xc2/0x170 [ 1759.360769][T31634] do_syscall_64+0x106/0xf80 [ 1759.360806][T31634] ? clear_bhb_loop+0x40/0x90 [ 1759.360840][T31634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.360867][T31634] RIP: 0033:0x7f875719c799 [ 1759.360889][T31634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1759.360917][T31634] RSP: 002b:00007f87580ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1759.360942][T31634] RAX: ffffffffffffffda RBX: 00007f8757415fa0 RCX: 00007f875719c799 [ 1759.360960][T31634] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1759.360976][T31634] RBP: 00007f8757232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1759.360992][T31634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1759.361008][T31634] R13: 00007f8757416038 R14: 00007f8757415fa0 R15: 00007ffdb390ba28 [ 1759.361041][T31634] [ 1759.810682][T31484] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1759.889113][T31484] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1759.951333][T31484] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1760.013936][T31484] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1760.199303][T31387] veth0_macvtap: entered promiscuous mode [ 1760.313271][T31387] veth1_macvtap: entered promiscuous mode [ 1760.473008][T31387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1760.583816][T31387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1760.671858][T12161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.756798][T12161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.785722][T12161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.807582][T12161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.055529][T31484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.329299][T12164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.355019][T12164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1761.420399][T31484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1761.547466][T21956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.554697][T21956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1761.707092][T12166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.714409][T12166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1761.729251][T24241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.792284][T24241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.053447][T31484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1764.415256][T31484] veth0_vlan: entered promiscuous mode [ 1764.885604][T31729] nfs: Unknown parameter 'nH021' [ 1765.065623][T31732] nfs: Unknown parameter 'nH021' [ 1765.128961][T31484] veth1_vlan: entered promiscuous mode [ 1765.774886][T31484] veth0_macvtap: entered promiscuous mode [ 1766.840195][T31484] veth1_macvtap: entered promiscuous mode [ 1767.322200][T31484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1767.420761][T31484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1767.620171][ T1039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.675704][ T1039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.731472][ T1039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.780159][ T1039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.106633][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.146420][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.279250][T24241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.297679][T24241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.976830][T31759] FAULT_INJECTION: forcing a failure. [ 1768.976830][T31759] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.010520][T31759] CPU: 1 UID: 0 PID: 31759 Comm: syz.3.6785 Tainted: G L syzkaller #0 PREEMPT(full) [ 1769.010548][T31759] Tainted: [L]=SOFTLOCKUP [ 1769.010555][T31759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1769.010565][T31759] Call Trace: [ 1769.010571][T31759] [ 1769.010578][T31759] dump_stack_lvl+0x100/0x190 [ 1769.010609][T31759] should_fail_ex.cold+0x5/0xa [ 1769.010628][T31759] should_failslab+0xc2/0x120 [ 1769.010643][T31759] __kvmalloc_node_noprof+0xfa/0xa00 [ 1769.010665][T31759] ? io_uring_setup.cold+0x171/0x1d09 [ 1769.010689][T31759] ? lockdep_init_map_type+0x5c/0x250 [ 1769.010713][T31759] io_uring_setup.cold+0x171/0x1d09 [ 1769.010737][T31759] ? __pfx_io_uring_setup+0x10/0x10 [ 1769.010755][T31759] ? do_futex+0x192/0x350 [ 1769.010775][T31759] ? __pfx_do_futex+0x10/0x10 [ 1769.010803][T31759] ? xfd_validate_state+0x129/0x190 [ 1769.010837][T31759] __x64_sys_io_uring_setup+0xc2/0x170 [ 1769.010856][T31759] do_syscall_64+0x106/0xf80 [ 1769.010874][T31759] ? clear_bhb_loop+0x40/0x90 [ 1769.010893][T31759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.010909][T31759] RIP: 0033:0x7f1bc9f9c799 [ 1769.010925][T31759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1769.010940][T31759] RSP: 002b:00007f1bcaea5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1769.010956][T31759] RAX: ffffffffffffffda RBX: 00007f1bca215fa0 RCX: 00007f1bc9f9c799 [ 1769.010966][T31759] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1769.010976][T31759] RBP: 00007f1bca032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1769.010986][T31759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1769.010996][T31759] R13: 00007f1bca216038 R14: 00007f1bca215fa0 R15: 00007ffe407352d8 [ 1769.011017][T31759] [ 1770.132598][T31771] nfs: Unknown parameter 'nH021' [ 1771.361900][T31791] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1773.459955][ T29] audit: type=1800 audit(4294967535.579:21): pid=31823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6803" name="dbroot" dev="configfs" ino=895740 res=0 errno=0 [ 1773.724612][T31825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6804'. [ 1773.739445][ T29] audit: type=1800 audit(4294967535.820:22): pid=31825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6804" name="dbroot" dev="configfs" ino=895740 res=0 errno=0 [ 1774.124598][T31825] team0: Port device team_slave_1 removed [ 1774.568276][T31827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6795'. [ 1775.523312][T31353] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1775.536227][T31353] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1775.561175][T31353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1775.580989][T31353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1775.593589][T31353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1776.112232][T31838] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1776.551546][T12165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.618269][T31353] Bluetooth: hci2: command tx timeout [ 1777.691510][T12165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.449004][T12165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.967806][T12165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.679507][T31353] Bluetooth: hci2: command tx timeout [ 1779.758062][T31872] zswap: compressor not available [ 1780.338807][T31833] chnl_net:caif_netlink_parms(): no params data found [ 1780.549586][T12165] bridge_slave_1: left allmulticast mode [ 1780.596704][T12165] bridge_slave_1: left promiscuous mode [ 1780.640388][T12165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.789161][T12165] bridge_slave_0: left allmulticast mode [ 1780.833810][T12165] bridge_slave_0: left promiscuous mode [ 1780.884339][T12165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.764369][T31353] Bluetooth: hci2: command tx timeout [ 1782.533570][T12165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1782.552580][T12165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1782.597024][T12165] bond0 (unregistering): Released all slaves [ 1783.833324][T31353] Bluetooth: hci2: command tx timeout [ 1783.847711][T31833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.856192][T31833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.947312][T31833] bridge_slave_0: entered allmulticast mode [ 1784.020559][T31833] bridge_slave_0: entered promiscuous mode [ 1784.040115][T31833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.040224][T31833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.040456][T31833] bridge_slave_1: entered allmulticast mode [ 1784.048971][T31833] bridge_slave_1: entered promiscuous mode [ 1784.461381][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1784.467825][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1784.959594][T12165] hsr_slave_0: left promiscuous mode [ 1784.998720][T12165] hsr_slave_1: left promiscuous mode [ 1785.046650][T12165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1785.082735][T12165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1785.129135][T12165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1785.139864][T12165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1785.207680][T12165] veth1_macvtap: left promiscuous mode [ 1785.222595][T12165] veth0_macvtap: left promiscuous mode [ 1785.261001][T12165] veth1_vlan: left promiscuous mode [ 1785.267662][T12165] veth0_vlan: left promiscuous mode [ 1786.563236][T12165] team0 (unregistering): Port device team_slave_1 removed [ 1786.638083][T12165] team0 (unregistering): Port device team_slave_0 removed [ 1787.381453][T31833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1787.439207][T31833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.703937][T31833] team0: Port device team_slave_0 added [ 1787.762127][T31833] team0: Port device team_slave_1 added [ 1787.988468][T31833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.014683][T31833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.049909][T31833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1788.128896][T31833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1788.161829][T31833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1788.324250][T31833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1788.627438][T31944] nfs: Unknown parameter 'nH021' [ 1788.752725][T31946] FAULT_INJECTION: forcing a failure. [ 1788.752725][T31946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.770792][T31946] CPU: 1 UID: 0 PID: 31946 Comm: syz.1.6825 Tainted: G L syzkaller #0 PREEMPT(full) [ 1788.770835][T31946] Tainted: [L]=SOFTLOCKUP [ 1788.770845][T31946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1788.770860][T31946] Call Trace: [ 1788.770870][T31946] [ 1788.770880][T31946] dump_stack_lvl+0x100/0x190 [ 1788.770930][T31946] should_fail_ex.cold+0x5/0xa [ 1788.770957][T31946] _copy_to_user+0x32/0xd0 [ 1788.770995][T31946] sk_getsockopt+0xdba/0x3440 [ 1788.771033][T31946] ? __pfx_sk_getsockopt+0x10/0x10 [ 1788.771069][T31946] ? __lock_acquire+0x4a5/0x2630 [ 1788.771099][T31946] ? find_held_lock+0x2b/0x80 [ 1788.771126][T31946] ? aa_sk_perm+0x309/0xaa0 [ 1788.771170][T31946] ? find_held_lock+0x2b/0x80 [ 1788.771193][T31946] ? __might_fault+0xc5/0x140 [ 1788.771225][T31946] ? __might_fault+0xc5/0x140 [ 1788.771269][T31946] do_sock_getsockopt+0x373/0x3d0 [ 1788.771307][T31946] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1788.771360][T31946] __sys_getsockopt+0x133/0x1d0 [ 1788.771391][T31946] ? __pfx_ksys_write+0x10/0x10 [ 1788.771434][T31946] ? __x64_sys_getsockopt+0xbd/0x160 [ 1788.771461][T31946] __x64_sys_getsockopt+0xbd/0x160 [ 1788.771488][T31946] ? do_syscall_64+0x95/0xf80 [ 1788.771516][T31946] ? lockdep_hardirqs_on+0x78/0x100 [ 1788.771545][T31946] do_syscall_64+0x106/0xf80 [ 1788.771572][T31946] ? clear_bhb_loop+0x40/0x90 [ 1788.771605][T31946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.771631][T31946] RIP: 0033:0x7f3c7659c799 [ 1788.771654][T31946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.771680][T31946] RSP: 002b:00007f3c77471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1788.771704][T31946] RAX: ffffffffffffffda RBX: 00007f3c76815fa0 RCX: 00007f3c7659c799 [ 1788.771723][T31946] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003 [ 1788.771738][T31946] RBP: 00007f3c77471090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.771754][T31946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.771770][T31946] R13: 00007f3c76816038 R14: 00007f3c76815fa0 R15: 00007fffca6d8258 [ 1788.771805][T31946] [ 1789.265020][T31833] hsr_slave_0: entered promiscuous mode [ 1789.282595][T31833] hsr_slave_1: entered promiscuous mode [ 1789.289051][T31833] debugfs: 'hsr0' already exists in 'hsr' [ 1789.356551][T31833] Cannot create hsr debugfs directory [ 1793.146484][T31995] nfs: Unknown parameter 'nH021' [ 1793.223355][T32001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6831'. [ 1794.022184][T31833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1794.104544][T31833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1794.130477][T31833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1794.272415][T31833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1795.117887][T31833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1795.266184][T31833] 8021q: adding VLAN 0 to HW filter on device team0 [ 1795.339877][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.347020][T12161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1795.667799][T12161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.667953][T12161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1795.720498][T31833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1795.745655][T31833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1796.534746][T32064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6838'. [ 1796.579383][T32064] netlink: 'syz.4.6838': attribute type 1 has an invalid length. [ 1796.623151][T32064] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6838'. [ 1797.355158][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6841'. [ 1797.751280][T31833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1798.098901][T31833] veth0_vlan: entered promiscuous mode [ 1798.186127][T31833] veth1_vlan: entered promiscuous mode [ 1798.343718][T32105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6844'. [ 1798.351461][T31833] veth0_macvtap: entered promiscuous mode [ 1798.439837][T31833] veth1_macvtap: entered promiscuous mode [ 1798.533626][T31833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1798.628371][T31833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1798.709141][T12161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.766243][T12161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.840993][T12161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.876231][T12161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1799.474646][T32110] zswap: compressor not available [ 1799.871304][T12161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1799.923912][T12161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.099419][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.107533][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.857517][T12166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.417242][T12166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.831570][T32172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6852'. [ 1805.024536][T32176] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 700000007 [ 1805.211616][T26811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1805.227207][T26811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1805.238746][T26811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1805.247356][T26811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1805.255197][T26811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1805.829923][T12166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.111583][T12166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.297001][T26811] Bluetooth: hci3: command tx timeout [ 1807.318511][T32197] FAULT_INJECTION: forcing a failure. [ 1807.318511][T32197] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.425970][T32197] CPU: 0 UID: 0 PID: 32197 Comm: syz.2.6860 Tainted: G L syzkaller #0 PREEMPT(full) [ 1807.426017][T32197] Tainted: [L]=SOFTLOCKUP [ 1807.426028][T32197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1807.426046][T32197] Call Trace: [ 1807.426055][T32197] [ 1807.426066][T32197] dump_stack_lvl+0x100/0x190 [ 1807.426111][T32197] should_fail_ex.cold+0x5/0xa [ 1807.426144][T32197] should_failslab+0xc2/0x120 [ 1807.426172][T32197] __kvmalloc_node_noprof+0xfa/0xa00 [ 1807.426212][T32197] ? io_uring_setup.cold+0x171/0x1d09 [ 1807.426252][T32197] ? lockdep_init_map_type+0x5c/0x250 [ 1807.426294][T32197] io_uring_setup.cold+0x171/0x1d09 [ 1807.426344][T32197] ? __pfx_io_uring_setup+0x10/0x10 [ 1807.426379][T32197] ? do_futex+0x192/0x350 [ 1807.426416][T32197] ? __pfx_do_futex+0x10/0x10 [ 1807.426464][T32197] ? xfd_validate_state+0x129/0x190 [ 1807.426514][T32197] __x64_sys_io_uring_setup+0xc2/0x170 [ 1807.426545][T32197] do_syscall_64+0x106/0xf80 [ 1807.426575][T32197] ? clear_bhb_loop+0x40/0x90 [ 1807.426609][T32197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.426639][T32197] RIP: 0033:0x7f9b1a99c799 [ 1807.426661][T32197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1807.426689][T32197] RSP: 002b:00007f9b1b7ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1807.426717][T32197] RAX: ffffffffffffffda RBX: 00007f9b1ac15fa0 RCX: 00007f9b1a99c799 [ 1807.426735][T32197] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1807.426754][T32197] RBP: 00007f9b1aa32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1807.426771][T32197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1807.426789][T32197] R13: 00007f9b1ac16038 R14: 00007f9b1ac15fa0 R15: 00007ffd470992d8 [ 1807.426825][T32197] [ 1807.619344][T12166] bridge_slave_1: left allmulticast mode [ 1807.625060][T12166] bridge_slave_1: left promiscuous mode [ 1807.630889][T12166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.850048][T12166] bridge_slave_0: left allmulticast mode [ 1807.867050][T12166] bridge_slave_0: left promiscuous mode [ 1807.903361][T12166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.050311][T12166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1809.132814][T12166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1809.176580][T12166] bond0 (unregistering): Released all slaves [ 1809.377199][T26811] Bluetooth: hci3: command tx timeout [ 1809.870568][T32180] chnl_net:caif_netlink_parms(): no params data found [ 1811.085971][T12166] hsr_slave_0: left promiscuous mode [ 1811.148679][T12166] hsr_slave_1: left promiscuous mode [ 1811.182851][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1811.215213][T12166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1811.240186][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1811.324814][T12166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1811.439696][T26811] Bluetooth: hci3: command tx timeout [ 1811.519746][T12166] veth1_macvtap: left promiscuous mode [ 1811.553556][T12166] veth0_macvtap: left promiscuous mode [ 1811.563912][T12166] veth1_vlan: left promiscuous mode [ 1811.598282][T31353] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1811.611029][T31353] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1811.619756][T31353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1811.634229][T31353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1811.644903][T31353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1811.652578][T12166] veth0_vlan: left promiscuous mode [ 1811.893509][T32232] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 1812.727041][T12166] team0 (unregistering): Port device team_slave_1 removed [ 1812.847850][T12166] team0 (unregistering): Port device team_slave_0 removed [ 1813.509836][T26811] Bluetooth: hci3: command tx timeout [ 1813.752438][T26811] Bluetooth: hci2: command tx timeout [ 1813.763188][T32180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1813.770922][T32180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.771134][T32180] bridge_slave_0: entered allmulticast mode [ 1813.775386][T32180] bridge_slave_0: entered promiscuous mode [ 1813.790947][T32180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1813.795316][T32180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.795542][T32180] bridge_slave_1: entered allmulticast mode [ 1813.797392][T32180] bridge_slave_1: entered promiscuous mode [ 1813.964937][T32247] nfs: Unknown parameter 'nH021' [ 1814.127035][T32180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1814.326460][T32180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1814.833551][T32180] team0: Port device team_slave_0 added [ 1814.891433][T32180] team0: Port device team_slave_1 added [ 1815.157302][T32180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1815.164296][T32180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.296181][T32180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1815.576159][T32180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1815.606877][T32180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.683585][T32180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1815.811550][T26811] Bluetooth: hci2: command tx timeout [ 1816.216631][T12166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.437625][T32180] hsr_slave_0: entered promiscuous mode [ 1816.472183][T32180] hsr_slave_1: entered promiscuous mode [ 1816.498903][T32180] debugfs: 'hsr0' already exists in 'hsr' [ 1816.511274][T32180] Cannot create hsr debugfs directory [ 1816.585504][T32230] chnl_net:caif_netlink_parms(): no params data found [ 1816.699333][T12166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.038434][T12166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.542170][T12166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.880966][T26811] Bluetooth: hci2: command tx timeout [ 1818.226288][T32230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.264796][T32230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.299898][T32230] bridge_slave_0: entered allmulticast mode [ 1818.307825][T32230] bridge_slave_0: entered promiscuous mode [ 1818.343526][T32230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.388970][T32230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.421946][T32230] bridge_slave_1: entered allmulticast mode [ 1818.466734][T32230] bridge_slave_1: entered promiscuous mode [ 1819.270037][T32230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1819.434746][T32230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1819.622212][T12166] bridge_slave_1: left allmulticast mode [ 1819.628070][T12166] bridge_slave_1: left promiscuous mode [ 1819.691612][T12166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.744104][T12166] bridge_slave_0: left allmulticast mode [ 1819.749809][T12166] bridge_slave_0: left promiscuous mode [ 1819.795903][T12166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.950276][T26811] Bluetooth: hci2: command tx timeout [ 1820.461266][T12166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1820.529076][T12166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1820.574236][T12166] bond0 (unregistering): Released all slaves [ 1820.799944][T32230] team0: Port device team_slave_0 added [ 1820.990935][T32230] team0: Port device team_slave_1 added [ 1821.476333][T32230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1821.502893][T32230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1821.565225][T32230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1821.783855][T32230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1821.822467][T32230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1821.857286][T32230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1822.277544][T12166] hsr_slave_0: left promiscuous mode [ 1822.328288][T12166] hsr_slave_1: left promiscuous mode [ 1822.335320][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1822.373668][T12166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1822.427877][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1822.435310][T12166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1822.528120][T12166] veth1_macvtap: left promiscuous mode [ 1822.557229][T12166] veth0_macvtap: left promiscuous mode [ 1822.562870][T12166] veth1_vlan: left promiscuous mode [ 1822.608571][T12166] veth0_vlan: left promiscuous mode [ 1824.097538][T12166] team0 (unregistering): Port device team_slave_1 removed [ 1824.205096][T12166] team0 (unregistering): Port device team_slave_0 removed [ 1824.708678][T32230] hsr_slave_0: entered promiscuous mode [ 1824.737790][T32230] hsr_slave_1: entered promiscuous mode [ 1824.744283][T32230] debugfs: 'hsr0' already exists in 'hsr' [ 1824.785768][T32230] Cannot create hsr debugfs directory [ 1825.330501][T32180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1825.592660][T32180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1825.770657][T32180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1825.918850][T32180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1826.123919][T32366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6884'. [ 1826.827919][T32180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.029605][T32180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.068105][T12165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.075314][T12165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1827.254906][T21956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.262129][T21956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1827.979182][T32230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1828.197993][T32230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1828.286546][T32230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1828.404769][T32230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1829.074404][T32180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1830.162639][T32180] veth0_vlan: entered promiscuous mode [ 1830.251516][T32230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1830.354464][T32180] veth1_vlan: entered promiscuous mode [ 1830.428627][T32230] 8021q: adding VLAN 0 to HW filter on device team0 [ 1830.570451][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.577677][T12161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1830.740102][T12165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.747317][T12165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1830.817862][T32180] veth0_macvtap: entered promiscuous mode [ 1831.159433][T32180] veth1_macvtap: entered promiscuous mode [ 1831.411435][T32436] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1831.482208][T32180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1831.700677][T32180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1832.025427][T12161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.275724][ T86] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.413441][ T86] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.483811][ T86] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.058737][T32230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1833.460058][T21956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1833.467886][T21956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1833.775295][T12166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1833.807738][T12166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1833.912140][T32230] veth0_vlan: entered promiscuous mode [ 1834.000997][T32230] veth1_vlan: entered promiscuous mode [ 1834.211714][T32230] veth0_macvtap: entered promiscuous mode [ 1834.428739][T32230] veth1_macvtap: entered promiscuous mode [ 1834.504510][T32474] nfs: Unknown parameter 'nH021' [ 1834.715788][T32230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.040088][T32230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.148183][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.278403][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.370215][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.589726][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.464984][T21956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.472836][T21956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.517539][T21956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.551290][T21956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1840.891291][T32571] nfs: Unknown parameter 'nH021' [ 1842.115843][T32564] binder: 32563:32564 ioctl c018620c 0 returned -1 [ 1843.878029][T32586] NFSD: Failed to start, no listeners configured. [ 1844.390548][T32602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6911'. [ 1845.585002][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1845.591451][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1846.964281][T32626] FAULT_INJECTION: forcing a failure. [ 1846.964281][T32626] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.050743][T32626] CPU: 0 UID: 0 PID: 32626 Comm: syz.2.6920 Tainted: G L syzkaller #0 PREEMPT(full) [ 1847.050788][T32626] Tainted: [L]=SOFTLOCKUP [ 1847.050798][T32626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1847.050814][T32626] Call Trace: [ 1847.050824][T32626] [ 1847.050834][T32626] dump_stack_lvl+0x100/0x190 [ 1847.050875][T32626] should_fail_ex.cold+0x5/0xa [ 1847.050908][T32626] should_failslab+0xc2/0x120 [ 1847.050936][T32626] __kvmalloc_node_noprof+0xfa/0xa00 [ 1847.050976][T32626] ? io_uring_setup.cold+0x171/0x1d09 [ 1847.051024][T32626] ? lockdep_init_map_type+0x5c/0x250 [ 1847.051065][T32626] io_uring_setup.cold+0x171/0x1d09 [ 1847.051109][T32626] ? __pfx_io_uring_setup+0x10/0x10 [ 1847.051142][T32626] ? do_futex+0x192/0x350 [ 1847.051178][T32626] ? __pfx_do_futex+0x10/0x10 [ 1847.051231][T32626] ? xfd_validate_state+0x129/0x190 [ 1847.051278][T32626] __x64_sys_io_uring_setup+0xc2/0x170 [ 1847.051311][T32626] do_syscall_64+0x106/0xf80 [ 1847.051340][T32626] ? clear_bhb_loop+0x40/0x90 [ 1847.051387][T32626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.051412][T32626] RIP: 0033:0x7f9b1a99c799 [ 1847.051432][T32626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1847.051461][T32626] RSP: 002b:00007f9b1b7ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1847.051487][T32626] RAX: ffffffffffffffda RBX: 00007f9b1ac15fa0 RCX: 00007f9b1a99c799 [ 1847.051507][T32626] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1847.051524][T32626] RBP: 00007f9b1aa32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1847.051541][T32626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1847.051557][T32626] R13: 00007f9b1ac16038 R14: 00007f9b1ac15fa0 R15: 00007ffd470992d8 [ 1847.051595][T32626] [ 1848.481481][T32638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6924'. [ 1851.234070][T32646] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1851.244969][T12165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.816410][T12165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.204029][T12165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.214068][T31353] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1852.237079][T31353] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1852.245840][T31353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1852.264301][T31353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1852.285780][T31353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1852.590524][T32672] nfs: Unknown parameter 'nH021' [ 1852.777514][T12165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.259357][T12165] bridge_slave_1: left allmulticast mode [ 1854.274374][T12165] bridge_slave_1: left promiscuous mode [ 1854.293175][T12165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.341121][T26811] Bluetooth: hci2: command tx timeout [ 1854.365723][T12165] bridge_slave_0: left allmulticast mode [ 1854.403570][T12165] bridge_slave_0: left promiscuous mode [ 1854.442778][T12165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.544438][T12165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1855.570660][T12165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1855.624125][T12165] bond0 (unregistering): Released all slaves [ 1856.410629][T26811] Bluetooth: hci2: command tx timeout [ 1856.962584][T32694] nfs: Unknown parameter 'nH021' [ 1857.526703][T32664] chnl_net:caif_netlink_parms(): no params data found [ 1857.701940][T12165] hsr_slave_0: left promiscuous mode [ 1857.745978][T12165] hsr_slave_1: left promiscuous mode [ 1857.765801][T12165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1857.816137][T12165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1857.861638][T12165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1857.873812][T12165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1857.891686][T12165] veth1_macvtap: left promiscuous mode [ 1857.897488][T12165] veth0_macvtap: left promiscuous mode [ 1858.469467][T26811] Bluetooth: hci2: command tx timeout [ 1858.927590][T12165] team0 (unregistering): Port device team_slave_1 removed [ 1858.994512][T12165] team0 (unregistering): Port device team_slave_0 removed [ 1859.716465][T32664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.778999][T32664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.829930][T32664] bridge_slave_0: entered allmulticast mode [ 1859.840373][T32664] bridge_slave_0: entered promiscuous mode [ 1860.037731][T32664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.057979][T32664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.101231][T32664] bridge_slave_1: entered allmulticast mode [ 1860.150436][T32664] bridge_slave_1: entered promiscuous mode [ 1860.538862][T26811] Bluetooth: hci2: command tx timeout [ 1860.590789][T32664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1860.729668][T32664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1861.000883][T32664] team0: Port device team_slave_0 added [ 1861.039403][T32664] team0: Port device team_slave_1 added [ 1861.243058][T32664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1861.294909][T32664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1861.417282][T32664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1861.444970][T32664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1861.452164][T32664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1861.563547][T32664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1861.666303][T32742] nfs: Unknown parameter 'nH021' [ 1861.799795][T32664] hsr_slave_0: entered promiscuous mode [ 1861.872953][T32664] hsr_slave_1: entered promiscuous mode [ 1861.922436][T32664] debugfs: 'hsr0' already exists in 'hsr' [ 1861.928227][T32664] Cannot create hsr debugfs directory [ 1864.040599][ T312] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1865.670310][ T337] nfs: Unknown parameter 'nH021' [ 1865.820401][T32664] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1865.843970][ T326] vivid-007: ================= START STATUS ================= [ 1865.884580][ T326] vivid-007: Generate PTS: true [ 1865.930016][ T326] vivid-007: Generate SCR: true [ 1866.099886][ T326] tpg source WxH: 320x240 (Y'CbCr) [ 1866.105299][ T326] tpg field: 1 [ 1866.119143][ T326] tpg crop: (0,0)/320x240 [ 1866.149550][ T326] tpg compose: (0,0)/320x240 [ 1866.320774][ T326] tpg colorspace: 8 [ 1866.324640][ T326] tpg transfer function: 0/0 [ 1866.438401][T32664] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1866.606756][T32664] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1866.710777][ T326] tpg Y'CbCr encoding: 0/0 [ 1866.715260][ T326] tpg quantization: 0/0 [ 1866.929827][T32664] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1867.035201][ T326] tpg RGB range: 0/2 [ 1867.049664][ T326] vivid-007: ================== END STATUS ================== [ 1867.368180][ T319] kexec: Could not allocate control_code_buffer [ 1869.161702][T32664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1869.337455][T32664] 8021q: adding VLAN 0 to HW filter on device team0 [ 1869.636651][T12166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.643979][T12166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1869.812487][T12165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.819648][T12165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1870.069443][ T407] nfs: Unknown parameter 'nH021' [ 1870.905105][ T416] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1872.065527][T32664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1872.998420][T32664] veth0_vlan: entered promiscuous mode [ 1873.099731][T32664] veth1_vlan: entered promiscuous mode [ 1874.336052][T32664] veth0_macvtap: entered promiscuous mode [ 1874.382499][T32664] veth1_macvtap: entered promiscuous mode [ 1874.558330][T32664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1874.589722][T32664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1874.666087][T12166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.804138][T12166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.870711][T12166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.910167][ T459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6979'. [ 1874.973433][T12166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.801330][T21957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.809188][T21957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1876.235391][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.332542][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1876.587276][ T476] nfs: Unknown parameter 'nH021' [ 1876.805510][ T483] FAULT_INJECTION: forcing a failure. [ 1876.805510][ T483] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.872783][ T483] CPU: 0 UID: 0 PID: 483 Comm: syz.3.6930 Tainted: G L syzkaller #0 PREEMPT(full) [ 1876.872811][ T483] Tainted: [L]=SOFTLOCKUP [ 1876.872817][ T483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1876.872827][ T483] Call Trace: [ 1876.872833][ T483] [ 1876.872841][ T483] dump_stack_lvl+0x100/0x190 [ 1876.872870][ T483] should_fail_ex.cold+0x5/0xa [ 1876.872890][ T483] should_failslab+0xc2/0x120 [ 1876.872905][ T483] __kvmalloc_node_noprof+0xfa/0xa00 [ 1876.872929][ T483] ? io_uring_setup.cold+0x171/0x1d09 [ 1876.872952][ T483] ? lockdep_init_map_type+0x5c/0x250 [ 1876.872975][ T483] io_uring_setup.cold+0x171/0x1d09 [ 1876.873000][ T483] ? __pfx_io_uring_setup+0x10/0x10 [ 1876.873019][ T483] ? do_futex+0x192/0x350 [ 1876.873040][ T483] ? __pfx_do_futex+0x10/0x10 [ 1876.873068][ T483] ? xfd_validate_state+0x129/0x190 [ 1876.873097][ T483] __x64_sys_io_uring_setup+0xc2/0x170 [ 1876.873115][ T483] do_syscall_64+0x106/0xf80 [ 1876.873133][ T483] ? clear_bhb_loop+0x40/0x90 [ 1876.873153][ T483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.873169][ T483] RIP: 0033:0x7f571a59c799 [ 1876.873193][ T483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1876.873210][ T483] RSP: 002b:00007f571b3da028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1876.873226][ T483] RAX: ffffffffffffffda RBX: 00007f571a815fa0 RCX: 00007f571a59c799 [ 1876.873238][ T483] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1876.873247][ T483] RBP: 00007f571a632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1876.873257][ T483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1876.873267][ T483] R13: 00007f571a816038 R14: 00007f571a815fa0 R15: 00007ffe3f65e758 [ 1876.873287][ T483] [ 1877.823674][ T495] nfs: Unknown parameter 'nH021' [ 1882.004727][ T531] FAULT_INJECTION: forcing a failure. [ 1882.004727][ T531] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.126520][ T531] CPU: 0 UID: 0 PID: 531 Comm: syz.1.6988 Tainted: G L syzkaller #0 PREEMPT(full) [ 1882.126566][ T531] Tainted: [L]=SOFTLOCKUP [ 1882.126577][ T531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1882.126594][ T531] Call Trace: [ 1882.126604][ T531] [ 1882.126616][ T531] dump_stack_lvl+0x100/0x190 [ 1882.126665][ T531] should_fail_ex.cold+0x5/0xa [ 1882.126698][ T531] should_failslab+0xc2/0x120 [ 1882.126727][ T531] __kvmalloc_node_noprof+0xfa/0xa00 [ 1882.126766][ T531] ? io_uring_setup.cold+0x171/0x1d09 [ 1882.126807][ T531] ? lockdep_init_map_type+0x5c/0x250 [ 1882.126850][ T531] io_uring_setup.cold+0x171/0x1d09 [ 1882.126895][ T531] ? __pfx_io_uring_setup+0x10/0x10 [ 1882.126928][ T531] ? do_futex+0x192/0x350 [ 1882.126973][ T531] ? __pfx_do_futex+0x10/0x10 [ 1882.127027][ T531] ? xfd_validate_state+0x129/0x190 [ 1882.127075][ T531] __x64_sys_io_uring_setup+0xc2/0x170 [ 1882.127109][ T531] do_syscall_64+0x106/0xf80 [ 1882.127141][ T531] ? clear_bhb_loop+0x40/0x90 [ 1882.127175][ T531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.127205][ T531] RIP: 0033:0x7f2983f9c799 [ 1882.127230][ T531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1882.127259][ T531] RSP: 002b:00007f2984e5f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1882.127288][ T531] RAX: ffffffffffffffda RBX: 00007f2984215fa0 RCX: 00007f2983f9c799 [ 1882.127307][ T531] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1882.127325][ T531] RBP: 00007f2984032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1882.127344][ T531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1882.127361][ T531] R13: 00007f2984216038 R14: 00007f2984215fa0 R15: 00007ffd50951e98 [ 1882.127399][ T531] [ 1884.587916][ T553] binder: 552:553 unknown command 49 [ 1884.593281][ T553] binder: 552:553 ioctl c0306201 0 returned -22 [ 1885.292934][T26811] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1890.858135][ T644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7017'. [ 1892.299862][ T667] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1895.572985][ T702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7030'. [ 1901.185640][ T753] FAULT_INJECTION: forcing a failure. [ 1901.185640][ T753] name failslab, interval 1, probability 0, space 0, times 0 [ 1901.344187][ T753] CPU: 0 UID: 0 PID: 753 Comm: syz.4.7038 Tainted: G L syzkaller #0 PREEMPT(full) [ 1901.344238][ T753] Tainted: [L]=SOFTLOCKUP [ 1901.344249][ T753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1901.344267][ T753] Call Trace: [ 1901.344277][ T753] [ 1901.344289][ T753] dump_stack_lvl+0x100/0x190 [ 1901.344336][ T753] should_fail_ex.cold+0x5/0xa [ 1901.344368][ T753] should_failslab+0xc2/0x120 [ 1901.344398][ T753] __kvmalloc_node_noprof+0xfa/0xa00 [ 1901.344440][ T753] ? io_uring_setup.cold+0x171/0x1d09 [ 1901.344477][ T753] ? lockdep_init_map_type+0x5c/0x250 [ 1901.344518][ T753] io_uring_setup.cold+0x171/0x1d09 [ 1901.344565][ T753] ? __pfx_io_uring_setup+0x10/0x10 [ 1901.344598][ T753] ? do_futex+0x192/0x350 [ 1901.344635][ T753] ? __pfx_do_futex+0x10/0x10 [ 1901.344685][ T753] ? xfd_validate_state+0x129/0x190 [ 1901.344727][ T753] __x64_sys_io_uring_setup+0xc2/0x170 [ 1901.344759][ T753] do_syscall_64+0x106/0xf80 [ 1901.344790][ T753] ? clear_bhb_loop+0x40/0x90 [ 1901.344823][ T753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.344850][ T753] RIP: 0033:0x7f875719c799 [ 1901.344872][ T753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.344901][ T753] RSP: 002b:00007f87580ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1901.344930][ T753] RAX: ffffffffffffffda RBX: 00007f8757415fa0 RCX: 00007f875719c799 [ 1901.344949][ T753] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 1901.344967][ T753] RBP: 00007f8757232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1901.344984][ T753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1901.345001][ T753] R13: 00007f8757416038 R14: 00007f8757415fa0 R15: 00007ffdb390ba28 [ 1901.345038][ T753] [ 1902.458839][ T760] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input74 [ 1902.899013][ T769] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1903.070299][ T766] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input75 [ 1903.642745][ T782] nfs: Unknown parameter 'nH021' [ 1904.767353][ T807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7047'. [ 1904.825633][ T807] FAULT_INJECTION: forcing a failure. [ 1904.825633][ T807] name failslab, interval 1, probability 0, space 0, times 0 [ 1904.859419][ T807] CPU: 0 UID: 0 PID: 807 Comm: syz.3.7047 Tainted: G L syzkaller #0 PREEMPT(full) [ 1904.859476][ T807] Tainted: [L]=SOFTLOCKUP [ 1904.859487][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1904.859506][ T807] Call Trace: [ 1904.859516][ T807] [ 1904.859529][ T807] dump_stack_lvl+0x100/0x190 [ 1904.859578][ T807] should_fail_ex.cold+0x5/0xa [ 1904.859612][ T807] should_failslab+0xc2/0x120 [ 1904.859641][ T807] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1904.859680][ T807] ? __d_alloc+0x34/0xa80 [ 1904.859717][ T807] __d_alloc+0x34/0xa80 [ 1904.859749][ T807] d_alloc_pseudo+0x1c/0xc0 [ 1904.859786][ T807] alloc_file_pseudo+0xcf/0x230 [ 1904.859821][ T807] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1904.859856][ T807] ? __raw_spin_lock_init+0x3a/0x110 [ 1904.859899][ T807] create_pipe_files+0x360/0x970 [ 1904.859929][ T807] do_pipe2+0xbd/0x1e0 [ 1904.859954][ T807] ? __pfx_do_pipe2+0x10/0x10 [ 1904.859980][ T807] ? xfd_validate_state+0x129/0x190 [ 1904.860028][ T807] __x64_sys_pipe2+0x54/0x80 [ 1904.860055][ T807] do_syscall_64+0x106/0xf80 [ 1904.860087][ T807] ? clear_bhb_loop+0x40/0x90 [ 1904.860123][ T807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.860154][ T807] RIP: 0033:0x7f571a59c799 [ 1904.860179][ T807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1904.860208][ T807] RSP: 002b:00007f571b3da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 1904.860238][ T807] RAX: ffffffffffffffda RBX: 00007f571a815fa0 RCX: 00007f571a59c799 [ 1904.860258][ T807] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 1904.860276][ T807] RBP: 00007f571a632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1904.860294][ T807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1904.860312][ T807] R13: 00007f571a816038 R14: 00007f571a815fa0 R15: 00007ffe3f65e758 [ 1904.860350][ T807] [ 1905.721118][ T814] nfs: Unknown parameter 'nH021' [ 1906.714493][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1906.720981][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1906.935556][ T790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1906.951318][ T790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1906.958533][ T790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1906.964443][ T790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1906.995848][ T790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1907.484192][ T836] chnl_net:caif_netlink_parms(): no params data found [ 1907.656210][ T836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.663447][ T836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.671981][ T836] bridge_slave_0: entered allmulticast mode [ 1907.680454][ T836] bridge_slave_0: entered promiscuous mode [ 1907.696824][ T836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.705971][ T836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.713269][ T836] bridge_slave_1: entered allmulticast mode [ 1907.721692][ T836] bridge_slave_1: entered promiscuous mode [ 1907.772304][ T836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1907.776563][ T836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1907.827017][ T836] team0: Port device team_slave_0 added [ 1907.830124][ T836] team0: Port device team_slave_1 added [ 1907.881603][ T836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1907.881627][ T836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1907.881660][ T836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1907.884643][ T836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1907.935520][ T836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1907.935560][ T836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1907.996709][ T836] hsr_slave_0: entered promiscuous mode [ 1908.013392][ T836] hsr_slave_1: entered promiscuous mode [ 1908.019923][ T836] debugfs: 'hsr0' already exists in 'hsr' [ 1908.026312][ T836] Cannot create hsr debugfs directory [ 1908.445881][ T864] nfs: Unknown parameter 'nH021' [ 1908.589147][ T836] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1908.633419][ T836] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1908.812402][ T836] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1908.833671][ T836] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1909.095903][ T836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1909.096636][ T790] Bluetooth: hci4: command tx timeout [ 1909.159844][ T836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1909.185194][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1909.192364][ T789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1909.237673][ T803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1909.244922][ T803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1909.448786][ T836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1909.670160][ T836] veth0_vlan: entered promiscuous mode [ 1909.693954][ T836] veth1_vlan: entered promiscuous mode [ 1909.731195][ T836] veth0_macvtap: entered promiscuous mode [ 1909.742067][ T836] veth1_macvtap: entered promiscuous mode [ 1909.759426][ T836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1909.773106][ T836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1909.786145][ T821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.797529][ T821] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.808560][ T821] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.818010][ T821] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.890570][ T789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1909.901141][ T789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1909.933228][ T878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1909.941099][ T878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1911.156160][ T790] Bluetooth: hci4: command tx timeout [ 1913.226938][ T798] Bluetooth: hci4: command tx timeout [ 1915.294798][ T798] Bluetooth: hci4: command tx timeout [ 1929.149090][ T798] Bluetooth: hci3: command 0x0406 tx timeout [ 1967.828584][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1967.835037][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2028.954130][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2028.960444][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2031.018392][ T798] Bluetooth: hci4: command 0x0406 tx timeout [ 2051.873991][ T30] INFO: task kworker/u11:2:793 blocked for more than 143 seconds. [ 2051.881857][ T30] Tainted: G L syzkaller #0 [ 2051.888660][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2051.897381][ T30] task:kworker/u11:2 state:D stack:26808 pid:793 tgid:793 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2051.910043][ T30] Workqueue: netns cleanup_net [ 2051.914941][ T30] Call Trace: [ 2051.918268][ T30] [ 2051.921215][ T30] __schedule+0xfee/0x60e0 [ 2051.925958][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2051.930969][ T30] ? __pfx___schedule+0x10/0x10 [ 2051.936420][ T30] ? find_held_lock+0x2b/0x80 [ 2051.941112][ T30] ? schedule+0x2bf/0x390 [ 2051.945650][ T30] schedule+0xdd/0x390 [ 2051.949744][ T30] schedule_timeout+0x1b2/0x280 [ 2051.955628][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2051.961059][ T30] ? mark_held_locks+0x40/0x70 [ 2051.965894][ T30] __wait_for_common+0x2e7/0x4c0 [ 2051.970875][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2051.976299][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 2051.981776][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2051.987066][ T30] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 2051.992915][ T30] __flush_workqueue+0x3f7/0x1200 [ 2051.998265][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2052.004655][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2052.009624][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 2052.015937][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 2052.021240][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 2052.029641][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 2052.035306][ T30] rds_tcp_listen_stop+0x104/0x160 [ 2052.040442][ T30] rds_tcp_exit_net+0xe0/0x870 [ 2052.045716][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 2052.051122][ T30] ? __pfx___might_resched+0x10/0x10 [ 2052.057459][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 2052.062924][ T30] ops_undo_list+0x2ee/0xab0 [ 2052.067539][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 2052.072662][ T30] ? cleanup_net+0x332/0x920 [ 2052.077326][ T30] ? idr_destroy+0x62/0x2e0 [ 2052.081835][ T30] cleanup_net+0x499/0x920 [ 2052.086361][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 2052.091336][ T30] ? rcu_is_watching+0x12/0xc0 [ 2052.096208][ T30] process_one_work+0x9d7/0x1920 [ 2052.101181][ T30] ? __pfx_process_one_work+0x10/0x10 [ 2052.107953][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 2052.112962][ T30] worker_thread+0x5da/0xe40 [ 2052.117581][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2052.123434][ T30] ? kthread+0x13a/0x450 [ 2052.127683][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2052.135725][ T30] kthread+0x370/0x450 [ 2052.139819][ T30] ? __pfx_kthread+0x10/0x10 [ 2052.144471][ T30] ret_from_fork+0x754/0xd80 [ 2052.149084][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2052.154687][ T30] ? __switch_to+0x7b4/0x1120 [ 2052.160254][ T30] ? __pfx_kthread+0x10/0x10 [ 2052.164919][ T30] ret_from_fork_asm+0x1a/0x30 [ 2052.169708][ T30] [ 2052.172813][ T30] INFO: task syz.3.7053:831 blocked for more than 143 seconds. [ 2052.180363][ T30] Tainted: G L syzkaller #0 [ 2052.187696][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2052.196673][ T30] task:syz.3.7053 state:D stack:26792 pid:831 tgid:830 ppid:32664 task_flags:0x400140 flags:0x00080006 [ 2052.210007][ T30] Call Trace: [ 2052.213613][ T30] [ 2052.216577][ T30] __schedule+0xfee/0x60e0 [ 2052.221008][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2052.226078][ T30] ? __pfx___schedule+0x10/0x10 [ 2052.231130][ T30] ? find_held_lock+0x2b/0x80 [ 2052.236546][ T30] ? schedule+0x2bf/0x390 [ 2052.240904][ T30] schedule+0xdd/0x390 [ 2052.247914][ T30] schedule_timeout+0x1b2/0x280 [ 2052.252860][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2052.259147][ T30] ? mark_held_locks+0x40/0x70 [ 2052.264899][ T30] __wait_for_common+0x2e7/0x4c0 [ 2052.269850][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2052.275301][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 2052.280993][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2052.286286][ T30] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 2052.292154][ T30] __flush_workqueue+0x3f7/0x1200 [ 2052.297197][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 2052.302741][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 2052.309255][ T30] ? release_sock+0x21/0x220 [ 2052.313947][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 2052.319425][ T30] ? __local_bh_enable_ip+0x9e/0x120 [ 2052.324785][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 2052.330259][ T30] rds_tcp_listen_stop+0x104/0x160 [ 2052.335443][ T30] rds_tcp_exit_net+0xe0/0x870 [ 2052.340246][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 2052.346438][ T30] ? __pfx___might_resched+0x10/0x10 [ 2052.355004][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 2052.361398][ T30] ops_undo_list+0x2ee/0xab0 [ 2052.366058][ T30] ? kfree+0x120/0x6b0 [ 2052.370128][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 2052.375331][ T30] ? ops_init+0x2fa/0x5f0 [ 2052.379679][ T30] setup_net+0x1fa/0x3a0 [ 2052.384262][ T30] ? __pfx_setup_net+0x10/0x10 [ 2052.389036][ T30] ? lockdep_init_map_type+0x5c/0x250 [ 2052.394491][ T30] ? mutex_init_lockep+0x110/0x150 [ 2052.399843][ T30] copy_net_ns+0x46f/0x7c0 [ 2052.404389][ T30] create_new_namespaces+0x3ea/0xac0 [ 2052.410963][ T30] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 2052.416610][ T30] ksys_unshare+0x473/0xad0 [ 2052.421213][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 2052.426261][ T30] __x64_sys_unshare+0x31/0x40 [ 2052.431180][ T30] do_syscall_64+0x106/0xf80 [ 2052.435860][ T30] ? clear_bhb_loop+0x40/0x90 [ 2052.440564][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2052.446516][ T30] RIP: 0033:0x7f571a59c799 [ 2052.451613][ T30] RSP: 002b:00007f571b3da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2052.460034][ T30] RAX: ffffffffffffffda RBX: 00007f571a815fa0 RCX: 00007f571a59c799 [ 2052.471855][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2052.479849][ T30] RBP: 00007f571a632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 2052.487903][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2052.495944][ T30] R13: 00007f571a816038 R14: 00007f571a815fa0 R15: 00007ffe3f65e758 [ 2052.505713][ T30] [ 2052.508794][ T30] [ 2052.508794][ T30] Showing all locks held in the system: [ 2052.518179][ T30] 1 lock held by khungtaskd/30: [ 2052.523118][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2052.533095][ T30] 2 locks held by getty/22274: [ 2052.537854][ T30] #0: ffff8880339b80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2052.547702][ T30] #1: ffffc9000678b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 2052.557908][ T30] 2 locks held by kworker/u11:1/792: [ 2052.565040][ T30] #0: ffff88801eb30148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 2052.577713][ T30] #1: ffffc90004f4fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 2052.590851][ T30] 3 locks held by kworker/u11:2/793: [ 2052.596166][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 2052.606612][ T30] #1: ffffc90003eb7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 2052.617938][ T30] #2: ffffffff905f9b90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 2052.627805][ T30] 2 locks held by kworker/u11:5/823: [ 2052.633177][ T30] #0: ffff88801eb30148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 2052.643885][ T30] #1: ffffc90003e57d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 2052.655451][ T30] 1 lock held by syz.3.7053/831: [ 2052.660473][ T30] #0: ffffffff905f9b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 2052.671540][ T30] [ 2052.673893][ T30] ============================================= [ 2052.673893][ T30] [ 2052.684758][ T30] NMI backtrace for cpu 0 [ 2052.684777][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2052.684797][ T30] Tainted: [L]=SOFTLOCKUP [ 2052.684803][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2052.684812][ T30] Call Trace: [ 2052.684817][ T30] [ 2052.684824][ T30] dump_stack_lvl+0x100/0x190 [ 2052.684858][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2052.684881][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2052.684903][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2052.684927][ T30] sys_info+0x141/0x190 [ 2052.684946][ T30] watchdog+0xd25/0x1050 [ 2052.684965][ T30] ? __pfx_watchdog+0x10/0x10 [ 2052.684978][ T30] ? __kthread_parkme+0x18c/0x230 [ 2052.685003][ T30] ? kthread+0x13a/0x450 [ 2052.685032][ T30] ? __pfx_watchdog+0x10/0x10 [ 2052.685054][ T30] kthread+0x370/0x450 [ 2052.685082][ T30] ? __pfx_kthread+0x10/0x10 [ 2052.685110][ T30] ret_from_fork+0x754/0xd80 [ 2052.685132][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2052.685154][ T30] ? __switch_to+0x7b4/0x1120 [ 2052.685170][ T30] ? __pfx_kthread+0x10/0x10 [ 2052.685189][ T30] ret_from_fork_asm+0x1a/0x30 [ 2052.685213][ T30] [ 2052.685220][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2052.812281][ C1] NMI backtrace for cpu 1 [ 2052.812302][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2052.812335][ C1] Tainted: [L]=SOFTLOCKUP [ 2052.812344][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2052.812359][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2052.812390][ C1] Code: b8 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 9a 1e 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2052.812413][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 2052.812432][ C1] RAX: 000000000100ddc9 RBX: ffff88801e6e8000 RCX: ffffffff8b8cec75 [ 2052.812448][ C1] RDX: 0000000000000000 RSI: ffffffff8de7ae3c RDI: ffffffff8c1aefa0 [ 2052.812464][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 2052.812479][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cdd000 [ 2052.812494][ C1] R13: 0000000000000001 R14: ffffffff90d99c10 R15: 0000000000000000 [ 2052.812510][ C1] FS: 0000000000000000(0000) GS:ffff88812444e000(0000) knlGS:0000000000000000 [ 2052.812531][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2052.812546][ C1] CR2: 00005631a9774660 CR3: 000000002da26000 CR4: 00000000003526f0 [ 2052.812561][ C1] Call Trace: [ 2052.812571][ C1] [ 2052.812579][ C1] default_idle+0x9/0x10 [ 2052.812607][ C1] default_idle_call+0x6c/0xb0 [ 2052.812636][ C1] do_idle+0x35b/0x4b0 [ 2052.812659][ C1] ? __pfx_do_idle+0x10/0x10 [ 2052.812684][ C1] cpu_startup_entry+0x4f/0x60 [ 2052.812706][ C1] start_secondary+0x21d/0x2d0 [ 2052.812736][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2052.812770][ C1] common_startup_64+0x13e/0x148 [ 2052.812803][ C1] [ 2052.987378][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2052.994245][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2053.004929][ T30] Tainted: [L]=SOFTLOCKUP [ 2053.009246][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2053.019296][ T30] Call Trace: [ 2053.022570][ T30] [ 2053.025496][ T30] dump_stack_lvl+0x100/0x190 [ 2053.030193][ T30] vpanic+0x552/0x970 [ 2053.034177][ T30] ? __pfx_vpanic+0x10/0x10 [ 2053.038691][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2053.044877][ T30] panic+0xd1/0xe0 [ 2053.048627][ T30] ? __pfx_panic+0x10/0x10 [ 2053.053063][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2053.059232][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2053.065396][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2053.071557][ T30] ? watchdog.cold+0x198/0x1ca [ 2053.076335][ T30] ? watchdog+0xd35/0x1050 [ 2053.080754][ T30] watchdog.cold+0x1a9/0x1ca [ 2053.085357][ T30] ? __pfx_watchdog+0x10/0x10 [ 2053.090034][ T30] ? __kthread_parkme+0x18c/0x230 [ 2053.095090][ T30] ? kthread+0x13a/0x450 [ 2053.099349][ T30] ? __pfx_watchdog+0x10/0x10 [ 2053.104024][ T30] kthread+0x370/0x450 [ 2053.108099][ T30] ? __pfx_kthread+0x10/0x10 [ 2053.112728][ T30] ret_from_fork+0x754/0xd80 [ 2053.117330][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2053.122453][ T30] ? __switch_to+0x7b4/0x1120 [ 2053.127133][ T30] ? __pfx_kthread+0x10/0x10 [ 2053.131735][ T30] ret_from_fork_asm+0x1a/0x30 [ 2053.136531][ T30] [ 2053.139936][ T30] Kernel Offset: disabled [ 2053.144256][ T30] Rebooting in 86400 seconds..