last executing test programs: 45.083319863s ago: executing program 3 (id=2403): write$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') (async) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') getcwd$auto(0x0, 0xffffffffffffffff) (async) getcwd$auto(0x0, 0xffffffffffffffff) rename$auto(&(0x7f0000000280)='./file1\x00', 0x0) write$auto(0xffffffffffffffff, 0x0, 0x80000002) mmap$auto(0x0, 0x4, 0xdf, 0x9b75, 0xffffffffffffffff, 0x28000) (async) mmap$auto(0x0, 0x4, 0xdf, 0x9b75, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, 0x0, 0x0) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) io_uring_setup$auto(0x4, 0x0) readv$auto(0x3, 0x0, 0x1) (async) readv$auto(0x3, 0x0, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0xd1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2202, 0x0) write$auto(r2, &(0x7f00000001c0)='0p\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xffffffff, 0xdd, 0x80000010, r2, 0x3ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x84, 0x66) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x200007, 0x19) readv$auto(0x3, 0x0, 0x1) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) timer_create$auto(0x3, 0x0, 0x0) 43.869726538s ago: executing program 3 (id=2405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000001280)={&(0x7f0000001300)={0x14, r1, 0x9d0da3446261172d, 0x270bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0xa6ffffffffffffff, 0xfff0, 0x2400f000}, 0x20008080) 43.626998608s ago: executing program 3 (id=2406): listen$auto(0xffffffffffffffff, 0x8) r0 = timerfd_create$auto(0x9, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/erspan0/max_addresses\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x4, 0x1ff, 0x5, 0x7, 0xffffffffffffffff, 0x0, "2800000000000000000000009b9800", 0x0, r0, 0x9, 0x6, 0x5, 0x5}, 0x10) bpf$auto(0x2, 0x0, 0xb) fsopen$auto(&(0x7f00000000c0)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) semget$auto(0x0, 0x2e4a, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x11, 0x5, 0x100) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) memfd_create$auto(&(0x7f0000000080)='/dev/tty0\x00', 0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff) poll$auto(&(0x7f0000000340)={0xffffffffffffffff, 0x5, 0x3}, 0x4, 0x101) mlock$auto(0x7c88, 0x7fff) 43.178408237s ago: executing program 1 (id=2409): listen$auto(0xffffffffffffffff, 0x8) r0 = timerfd_create$auto(0x9, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/erspan0/max_addresses\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x4, 0x1ff, 0x5, 0x7, 0xffffffffffffffff, 0x0, "2800000000000000000000009b9800", 0x0, r0, 0x9, 0x6, 0x5, 0x5}, 0x10) bpf$auto(0x2, 0x0, 0xb) fsopen$auto(&(0x7f00000000c0)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) semget$auto(0x0, 0x2e4a, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) memfd_create$auto(&(0x7f0000000080)='/dev/tty0\x00', 0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff) poll$auto(&(0x7f0000000340)={0xffffffffffffffff, 0x5, 0x3}, 0x4, 0x101) mlock$auto(0x7c88, 0x7fff) 40.911800445s ago: executing program 3 (id=2413): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0xfffffffffffffe01) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r0, 0x9205, 0x0) read$auto(0x3, 0x0, 0x8080) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x100000009b72, r1, 0x100008001) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x20500, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) listen$auto(0x3, 0x81) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffef0005, 0x1a) sigaltstack$auto(0x0, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) setfsgid$auto(0x0) write$auto(0xffffffffffffffff, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z\xa6!\xe8 \xf6$7\xa0\xdcF\xb95`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xd4\a\x18n\x8d\xf0\xfe\xceL\xbe8\xdc\xb9\xb6\'\xc4~\x18\xc4\x9e\x05=4\xdc\x96\x0e\xb1\x9bL\x918\x8f\x1by\x94C\x933`\x1a\x17\xe9\x12\xb5\xb8\xf7\xd8;', 0x4) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) 39.797729212s ago: executing program 3 (id=2416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x14}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 39.628196751s ago: executing program 3 (id=2417): syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) connect$auto(0x3, &(0x7f0000000000)=@hci={0x1f, 0x4}, 0xfffffffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mprotect$auto(0x200000000000, 0x806122, 0xc) sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2}) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x2, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x45b9) write$auto(0xffffffffffffffff, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/wchan\x00', 0x2400, 0x0) mmap$auto(0x0, 0x800000000008, 0x80004000000000df, 0x10004000eb1, 0xffffffffffffffff, 0x8000008000) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x8) write$auto(0xffffffffffffffff, &(0x7f0000001580)='LnAY\xef\x1c\xcb\x1c\xae)\x13\xf7J1\xa8\x90<\xb9x\xae\x0e\xbe\x158\x81\xd4\xd0\x81KO./p\xc1\x81\x1d^\b\xb7do\xb0\xc1/\xdct\xd6@\x84\xcfJ\xd6\x90\xb4\xf6\x03\x94@\x1f\xbc\xe9\xf6\x10Pm\xabt\xdcP\xbb}F\x9e\x8f\x9b\r\xe2A\xa73\xccp\xbf\f\xd9\x0e\x10>\xfe\x86\xb9\xa3\xb6\ad\xab\x18\xffc\rD+J^\xea\x01^\xc2\x96{\x81\x7f@\xb8\x0e\x80\x85\x93\x93\x85Y\x06\xf7t\xe1\x02<\xce@\xda=.\xf8S\xd5\xd8[GF\x93\xc7\xaa/#\xe0%*C\x1a_\x85\xe1*\xdf\xc2\xc6\"\xda \xa7\x1e\xae\x96YH\x87j\xa8\xf1\xed\x0f\xb5)N\xa9\xe8\x8f\xb0vN\x8f\xffv\xa5bTmx\xb1\xf7\xae\xb9\xcc\xcd\n\xf6\x90\x93\x19$F\xa5\xa3\xcf\'\xf3\x9c\xcd\xe3\xc5\xff\x8a\xe6\xd9\x95\x05>\xfc\x87\xf6\x8a\xb5\a\r\xde\x11\x8ay\xfe\x83\xec\xf2I\x13>\xf2\xf5^\x88C\xe5\x12\xea\xdfYi*Q0lN\f\xd9i\xb6\x0f\x13\xb14r\x1e\x98+\x04\xce\x85q\xaa\xec\xb9\xefTv\x1fr2\xff\xaa\xaf\x84\xdb', 0x200081) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) open(&(0x7f00000000c0)='./file0\x00', 0x204240, 0x39) listxattrat$auto(r2, 0x0, 0xe4, 0x0, 0x0) rename$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mprotect$auto(0x0, 0xffffffff, 0x8) 39.487361342s ago: executing program 1 (id=2418): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x800000000000005) socket(0x2a, 0x2, 0x1) arch_prctl$auto_ARCH_SET_CPUID(0x1012, 0x10000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) io_setup$auto(0xffff, &(0x7f0000000580)) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) 35.742164622s ago: executing program 1 (id=2425): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0xfffffffffffffe01) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r0, 0x9205, 0x0) read$auto(0x3, 0x0, 0x8080) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x100000009b72, r1, 0x100008001) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x20500, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) listen$auto(0x3, 0x81) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffef0005, 0x1a) sigaltstack$auto(0x0, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) setfsgid$auto(0x0) write$auto(0xffffffffffffffff, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z\xa6!\xe8 \xf6$7\xa0\xdcF\xb95`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xd4\a\x18n\x8d\xf0\xfe\xceL\xbe8\xdc\xb9\xb6\'\xc4~\x18\xc4\x9e\x05=4\xdc\x96\x0e\xb1\x9bL\x918\x8f\x1by\x94C\x933`\x1a\x17\xe9\x12\xb5\xb8\xf7\xd8;', 0x4) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) 34.767294138s ago: executing program 0 (id=2427): mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x800, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000040)="2e4a68c27a01b1d2b299226dfa21fb52520c500021022a4393fa346001e72254a9a4f67fdb2e617d490f90a38fe4fc723eb7b727db8311a883ea86ce9dcd4989f6e9a39409", 0xc4}, 0x9) truncate$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@info={r1, 0xb, 0x3}, 0x6f4) mmap$auto(0x0, 0x3, 0x10, 0xeb1, 0x403, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x40084d05, 0x7) swapoff$auto(&(0x7f00000000c0)='/dev/dri/card1\x00') openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/udp_ports_sync_all\x00', 0x1, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x2, 0x7, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo$auto(r2, r3, 0x1f, 0x0) io_pgetevents$auto(0x9, 0xb, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x5}}) mmap$auto(0x0, 0x5b7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xfe, 0x403, 0x0, 0x100000, 0x7fff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) acct$auto(&(0x7f0000000180)='./cgroup/cgroup.subtree_control\x00') getsockopt$auto(r0, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) 34.220033084s ago: executing program 1 (id=2428): mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x800, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000040)="2e4a68c27a01b1d2b299226dfa21fb52520c500021022a4393fa346001e72254a9a4f67fdb2e617d490f90a38fe4fc723eb7b727db8311a883ea86ce9dcd4989f6e9a39409", 0xc4}, 0x9) truncate$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@info={r1, 0xb, 0x3}, 0x6f4) mmap$auto(0x0, 0x3, 0x10, 0xeb1, 0x403, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x40084d05, 0x7) swapoff$auto(&(0x7f00000000c0)='/dev/dri/card1\x00') openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/udp_ports_sync_all\x00', 0x1, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x2, 0x7, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo$auto(r2, r3, 0x1f, 0x0) io_pgetevents$auto(0x9, 0xb, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x5}}) mmap$auto(0x0, 0x5b7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xfe, 0x403, 0x0, 0x100000, 0x7fff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) acct$auto(&(0x7f0000000180)='./cgroup/cgroup.subtree_control\x00') getsockopt$auto(r0, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) 31.447965095s ago: executing program 0 (id=2437): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/vdpa_sim_net/version\x00', 0x6c200, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) r1 = fcntl$auto_F_UNLCK(r0, 0x4, 0x2) mmap$auto(0x0, 0x400006, 0x2000df, 0x9b72, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x6a) getpid() openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x88440, 0x0) read$auto(0x3, 0x0, 0x8) r2 = gettid() process_vm_readv$auto(r2, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xfffbffff}, 0x6, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r3) 30.444888139s ago: executing program 0 (id=2431): timer_create$auto(0x2, 0x0, 0x0) bpf$auto_BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=@query={@target_ifindex, 0x7, 0xe976, 0x2, 0x0, @count, 0x0, 0x5bf, 0xcc50, 0x3, 0x2}, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000140)=0x5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x88400, 0x0) unshare$auto(0x7fffffff) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x10, 0xd, 0x2, &(0x7f0000000000)=0x400) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/blackhole_timeout\x00', 0x1, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x183681, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x1, 0x9, 0x0) write$auto(r0, 0x0, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x105c01, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x149b01, 0x0) write$auto(r2, &(0x7f00000000c0)='0\n\xf48\x97\xff*\x8a\xeb+l\\\x9e@\\}\x04|\x03\xcb\x12\xfa\b\x1c\vr\xc0\\\x17\xcb\xb4Q\xe1)@J}\x7fw\xc7\xe58,.\xf6p\x8d\xa0\x1f\xe3\xc5\xff\r\xde\xaf\x84\xd6P\b\xdf\xfe\x1f\xa1\xb4\x89\xa0\xac\x9a\xb8\x88\xca\x00\x15\x9d`>\xcd\xcb\xbe#k\xaf\xe9\x9a0\xb6\xe2#\xc1u\xfa\xe1\x19\x92qH\x80\xb9\xa4a\xba%\xc7\xc5\xb8\v\x00\xa5\xdd\xa2\x8c\xacBY\x9b\"\x14*\xfd\x87\x84~\x94\xb5\xfd/\xe2\xadz9\xbe!7\xf9\x88F\xe9@L\x1cD\xc2ia*\x81\x10L\x8d\xde\xdf\xc5)$\x03,\xb5\x88\a\xfe\x8c\xea\x16|\x11x\xdaE\x1c\xce\xe1\xdb\xc1\x86\xd9!.\xfb\xb7\xd4%\\\x1eJ\x175\x9c\xc0\x83\x89k+\x1bKk\xc4\x8f\xb01\x9a\x94_r\xa5W\xe0\x16A', 0x2) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) r3 = bpf$auto(0x0, 0x0, 0xa3) r4 = bpf$auto(0x0, 0x0, 0xa3) getsockopt$auto_SO_RCVBUF(r4, 0x2, 0x8, &(0x7f0000000000)='*#}]\x00', &(0x7f0000000080)=0xfd) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x101800, 0xf9) ppoll$auto(&(0x7f0000000180)={r3, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x1ab940, 0x7e) 29.876520535s ago: executing program 1 (id=2432): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x84000, 0xf9) r1 = mq_open$auto(&(0x7f00000001c0)='L\x92\xe0p\x93\xf7U\xac\xf3\xfb\x97\xc9#\xef[\xb25V \xc7&\xf1\xectg\x86\xc3?L\xb8\xcc\xdf\x1f\xed\"\xba\xda\x10\'\xf2\xc9\x98\xa6)\xb4\xcckg\xda\xf6\x9a\xc5\x97l\xb5i\xf8\xba\x14\x0e\xa15U\x12\xb4)o\xf9\x83\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000040)="2e4a68c27a01b1d2b299226dfa21fb52520c500021022a4393fa346001e72254a9a4f67fdb2e617d490f90a38fe4fc723eb7b727db8311a883ea86ce9dcd4989f6e9a39409", 0xc4}, 0x9) truncate$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@info={r1, 0xb, 0x3}, 0x6f4) mmap$auto(0x0, 0x3, 0x10, 0xeb1, 0x403, 0x8000) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mtd0\x00', 0x2, 0x0) ioctl$auto(r2, 0x40084d05, 0x7) swapoff$auto(&(0x7f00000000c0)='/dev/dri/card1\x00') openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/udp_ports_sync_all\x00', 0x1, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x2, 0x7, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(r3, r4, 0x1f, 0x0) io_pgetevents$auto(0x9, 0xb, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x5}}) mmap$auto(0x0, 0x5b7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xfe, 0x403, 0x0, 0x100000, 0x7fff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) acct$auto(&(0x7f0000000180)='./cgroup/cgroup.subtree_control\x00') getsockopt$auto(r0, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) 12.341797148s ago: executing program 32 (id=2433): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r0, 0x0, 0x4800) preadv2$auto(r0, &(0x7f00000000c0)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/rescan\x00', 0xb81, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)="969e82", 0x3) read$auto(r2, 0x0, 0x20) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x9, 0x1ffe0, 0xfffff75b, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffc]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r5, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) sendmsg$auto_NFSD_CMD_VERSION_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/pci0000:00/0000:00:00.0/msi_bus\x00', 0x149b01, 0x0) r6 = setfsuid$auto(0xee00) r7 = setfsuid$auto(0xee01) setresuid$auto(r6, r7, r6) 10.313322586s ago: executing program 33 (id=2438): mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x800, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000040)="2e4a68c27a01b1d2b299226dfa21fb52520c500021022a4393fa346001e72254a9a4f67fdb2e617d490f90a38fe4fc723eb7b727db8311a883ea86ce9dcd4989f6e9a39409", 0xc4}, 0x9) truncate$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@info={r1, 0xb, 0x3}, 0x6f4) mmap$auto(0x0, 0x3, 0x10, 0xeb1, 0x403, 0x8000) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mtd0\x00', 0x2, 0x0) ioctl$auto(r2, 0x40084d05, 0x7) swapoff$auto(&(0x7f00000000c0)='/dev/dri/card1\x00') openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/udp_ports_sync_all\x00', 0x1, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x2, 0x7, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(r3, r4, 0x1f, 0x0) io_pgetevents$auto(0x9, 0xb, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x5}}) mmap$auto(0x0, 0x5b7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xfe, 0x403, 0x0, 0x100000, 0x7fff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) acct$auto(&(0x7f0000000180)='./cgroup/cgroup.subtree_control\x00') getsockopt$auto(r0, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) 3.607468683s ago: executing program 2 (id=2458): listen$auto(0xffffffffffffffff, 0x8) r0 = timerfd_create$auto(0x9, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/erspan0/max_addresses\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x4, 0x1ff, 0x5, 0x7, 0xffffffffffffffff, 0x0, "2800000000000000000000009b9800", 0x0, r0, 0x9, 0x6, 0x5, 0x5}, 0x10) bpf$auto(0x2, 0x0, 0xb) fsopen$auto(&(0x7f00000000c0)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) semget$auto(0x0, 0x2e4a, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x11, 0x5, 0x100) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) memfd_create$auto(&(0x7f0000000080)='/dev/tty0\x00', 0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff) poll$auto(&(0x7f0000000340)={0xffffffffffffffff, 0x5, 0x3}, 0x4, 0x101) mlock$auto(0x7c88, 0x7fff) 3.031543358s ago: executing program 2 (id=2459): listen$auto(0xffffffffffffffff, 0x8) r0 = timerfd_create$auto(0x9, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/erspan0/max_addresses\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0x4, 0x1ff, 0x5, 0x7, 0xffffffffffffffff, 0x0, "2800000000000000000000009b9800", 0x0, r0, 0x9, 0x6, 0x5, 0x5}, 0x10) bpf$auto(0x2, 0x0, 0xb) fsopen$auto(&(0x7f00000000c0)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) semget$auto(0x0, 0x2e4a, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x11, 0x5, 0x100) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) memfd_create$auto(&(0x7f0000000080)='/dev/tty0\x00', 0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, 0xffffffffffffffff, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff) poll$auto(&(0x7f0000000340)={0xffffffffffffffff, 0x5, 0x3}, 0x4, 0x101) mlock$auto(0x7c88, 0x7fff) 2.078553363s ago: executing program 2 (id=2460): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400, 0xbeae, 0xeb1, r0, 0x8000) futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000004) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x1, 0x0) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) pread64$auto(r2, 0x0, 0x0, 0x7fff) r3 = prctl$auto(0x8, 0xf63, 0x0, 0xffffffffffffffff, 0x272) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x3) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) syz_clone(0x100000, &(0x7f0000000480)="b6d6723d2d96ad5ab6092e6d1368bd109b3e508b0385306ca0499779ab61130ed62d8475585d482da08d85a899a667354fb075c0c485449718eb0f838775616d3ed5e3aa2aea16d20a4f47cc80bc9898b835b8fa6794498f7706fca70d00fc655efd28031543eca3326c", 0x6a, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="5a66e569f36db814e1de1132fc178664cb6d3081bb39988dab12") socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x1, 0x50) close_range$auto(0x2, 0x8, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/ip6tnl0/statistics/collisions\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 1.772421159s ago: executing program 2 (id=2461): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0xfffffffffffffe01) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r0, 0x9205, 0x0) read$auto(0x3, 0x0, 0x8080) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x100000009b72, r1, 0x100008001) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x20500, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) listen$auto(0x3, 0x81) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffef0005, 0x1a) sigaltstack$auto(0x0, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z\xa6!\xe8 \xf6$7\xa0\xdcF\xb95`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xd4\a\x18n\x8d\xf0\xfe\xceL\xbe8\xdc\xb9\xb6\'\xc4~\x18\xc4\x9e\x05=4\xdc\x96\x0e\xb1\x9bL\x918\x8f\x1by\x94C\x933`\x1a\x17\xe9\x12\xb5\xb8\xf7\xd8;', 0x4) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) 703.533875ms ago: executing program 2 (id=2462): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000280)={@raw=0x1, 0x2, 0x0, 0x92d, 0xe5c1, 0x7ce, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7cfee8687681a534}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000300)='/Eev/audio1\x00VI\xa3\xaa\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo\x00\x00\x00\x00\x00', 0x1d09) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/default/ignore_routes_with_linkdown\x00', 0x2, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fffe000) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x3) unshare$auto(0x8000000) 0s ago: executing program 2 (id=2463): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0xfffffffffffffe01) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r0, 0x9205, 0x0) read$auto(0x3, 0x0, 0x8080) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x100000009b72, r1, 0x100008001) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x20500, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) listen$auto(0x3, 0x81) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffef0005, 0x1a) sigaltstack$auto(0x0, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z\xa6!\xe8 \xf6$7\xa0\xdcF\xb95`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xd4\a\x18n\x8d\xf0\xfe\xceL\xbe8\xdc\xb9\xb6\'\xc4~\x18\xc4\x9e\x05=4\xdc\x96\x0e\xb1\x9bL\x918\x8f\x1by\x94C\x933`\x1a\x17\xe9\x12\xb5\xb8\xf7\xd8;', 0x4) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) kernel console output (not intermixed with test programs): 904714][T15438] futex_wake+0xf4/0x5e0 [ 767.904765][T15438] ? __pfx_futex_wake+0x10/0x10 [ 767.904811][T15438] ? find_held_lock+0x2b/0x80 [ 767.904856][T15438] ? exit_mm_release+0x19/0x30 [ 767.904915][T15438] do_futex+0x2b2/0x440 [ 767.904955][T15438] ? __pfx_do_futex+0x10/0x10 [ 767.904990][T15438] ? __might_fault+0xc5/0x140 [ 767.905037][T15438] mm_release+0x24a/0x2f0 [ 767.905087][T15438] do_exit+0x707/0x2ae0 [ 767.905157][T15438] ? __pfx_do_exit+0x10/0x10 [ 767.905204][T15438] ? do_raw_spin_lock+0x128/0x260 [ 767.905243][T15438] ? find_held_lock+0x2b/0x80 [ 767.905285][T15438] ? get_signal+0x7e0/0x21e0 [ 767.905327][T15438] do_group_exit+0xd5/0x2a0 [ 767.905379][T15438] get_signal+0x1ec7/0x21e0 [ 767.905433][T15438] ? __pfx_get_signal+0x10/0x10 [ 767.905475][T15438] ? do_futex+0x190/0x440 [ 767.905517][T15438] arch_do_signal_or_restart+0x91/0x7a0 [ 767.905551][T15438] ? sock_ioctl+0x2dc/0x6b0 [ 767.905605][T15438] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 767.905664][T15438] exit_to_user_mode_loop+0x139/0x6f0 [ 767.905700][T15438] ? rcu_is_watching+0x12/0xc0 [ 767.905746][T15438] do_syscall_64+0x652/0x840 [ 767.905777][T15438] ? clear_bhb_loop+0x40/0x90 [ 767.905818][T15438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.905853][T15438] RIP: 0033:0x7f121d39ce59 [ 767.905881][T15438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.905923][T15438] RSP: 002b:00007f121e1890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 767.905955][T15438] RAX: fffffffffffffe00 RBX: 00007f121d615fa8 RCX: 00007f121d39ce59 [ 767.905977][T15438] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f121d615fa8 [ 767.905997][T15438] RBP: 00007f121d615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 767.906017][T15438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.906037][T15438] R13: 00007f121d616038 R14: 00007ffdebf546b0 R15: 00007ffdebf54798 [ 767.906080][T15438] [ 768.254444][T12475] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 768.857219][T15462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2037'. [ 768.916606][T15462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.941814][T15462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.964495][T15462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.982100][T15462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.100311][T15477] openvswitch: netlink: Flow key attribute not present in set flow. [ 769.494213][T15487] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 769.585802][T15487] syz.0.2042 (15487): /proc/15487/oom_adj is deprecated, please use /proc/15487/oom_score_adj instead. [ 769.780113][T12475] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 769.806700][T15504] random: crng reseeded on system resumption [ 770.229932][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'. [ 770.757276][T15525] openvswitch: netlink: Flow key attribute not present in set flow. [ 771.548247][T15532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2051'. [ 771.653006][T15522] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 771.727554][T12475] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 772.076697][T15534] bond0: option slaves: interface -Âô]àæ©=,Dço does not exist! [ 773.001024][T15569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2059'. [ 773.324329][T15580] openvswitch: netlink: Flow key attribute not present in set flow. [ 774.779227][T15575] kexec: Could not allocate control_code_buffer [ 774.790626][T12475] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 774.798823][T12475] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 775.071312][T12475] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 775.468129][ T29] Process accounting resumed [ 775.915787][T15608] Process accounting resumed [ 776.516344][T15647] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2076'. [ 777.409028][T12475] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 778.134419][T12475] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 778.142694][T12475] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 778.985011][T15688] netlink: 29 bytes leftover after parsing attributes in process `syz.3.2084'. [ 779.333853][T15680] Process accounting resumed [ 779.345254][T12475] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 779.758242][T15702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2088'. [ 779.786144][T15702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.795174][T15702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.807209][T15702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.815136][T15702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.844357][T15707] ICMPv6: process `syz.0.2089' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 779.882110][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2089'. [ 780.567371][T15722] netlink: 'syz.1.2093': attribute type 23 has an invalid length. [ 780.860644][T15728] FAULT_INJECTION: forcing a failure. [ 780.860644][T15728] name failslab, interval 1, probability 0, space 0, times 0 [ 780.941176][T15728] CPU: 1 UID: 0 PID: 15728 Comm: syz.3.2095 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.941227][T15728] Tainted: [L]=SOFTLOCKUP [ 780.941239][T15728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 780.941259][T15728] Call Trace: [ 780.941270][T15728] [ 780.941283][T15728] dump_stack_lvl+0x100/0x190 [ 780.941334][T15728] should_fail_ex.cold+0x5/0xa [ 780.941379][T15728] should_failslab+0xc2/0x120 [ 780.941428][T15728] __kmalloc_noprof+0xfc/0x820 [ 780.941470][T15728] ? rcu_is_watching+0x12/0xc0 [ 780.941511][T15728] ? tomoyo_realpath_from_path+0xb6/0x690 [ 780.941574][T15728] tomoyo_realpath_from_path+0xb6/0x690 [ 780.941633][T15728] tomoyo_path_number_perm+0x23c/0x580 [ 780.941673][T15728] ? tomoyo_path_number_perm+0x22e/0x580 [ 780.941727][T15728] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 780.941812][T15728] ? find_held_lock+0x2b/0x80 [ 780.941856][T15728] ? __fget_files+0x215/0x3d0 [ 780.941887][T15728] ? hook_file_ioctl_common+0x140/0x440 [ 780.941929][T15728] ? __fget_files+0x215/0x3d0 [ 780.941968][T15728] ? __fget_files+0x21f/0x3d0 [ 780.942020][T15728] security_file_ioctl+0xd3/0x230 [ 780.942065][T15728] __x64_sys_ioctl+0xb7/0x210 [ 780.942120][T15728] do_syscall_64+0x115/0x840 [ 780.942152][T15728] ? clear_bhb_loop+0x40/0x90 [ 780.942195][T15728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.942231][T15728] RIP: 0033:0x7f557a79ce59 [ 780.942260][T15728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.942293][T15728] RSP: 002b:00007f557b62b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.942325][T15728] RAX: ffffffffffffffda RBX: 00007f557aa15fa0 RCX: 00007f557a79ce59 [ 780.942348][T15728] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000006 [ 780.942371][T15728] RBP: 00007f557b62b090 R08: 0000000000000000 R09: 0000000000000000 [ 780.942392][T15728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.942412][T15728] R13: 00007f557aa16038 R14: 00007f557aa15fa0 R15: 00007ffdac6c5088 [ 780.942457][T15728] [ 781.265494][T15728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 781.749151][T15734] Process accounting resumed [ 781.857533][T12475] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 782.642459][T12475] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 784.712105][T15771] vcan0: tx drop: invalid da for name 0x000000000000003f [ 785.392419][T15788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2107'. [ 786.115965][T15791] Process accounting paused [ 788.729672][T15841] vivid-011: ================= START STATUS ================= [ 788.745142][T15841] vivid-011: Radio HW Seek Mode: Bounded [ 788.760264][T15841] vivid-011: Radio Programmable HW Seek: false [ 788.784662][T15841] vivid-011: RDS Rx I/O Mode: Block I/O [ 788.799973][T15841] vivid-011: Generate RBDS Instead of RDS: false [ 788.809159][T15841] vivid-011: RDS Reception: true [ 788.824721][T15841] vivid-011: RDS Program Type: 0 inactive [ 788.838747][T15841] vivid-011: RDS PS Name: inactive [ 788.854427][T15841] vivid-011: RDS Radio Text: inactive [ 788.864814][T15841] vivid-011: RDS Traffic Announcement: false inactive [ 788.874986][T15841] vivid-011: RDS Traffic Program: false inactive [ 788.898805][T15841] vivid-011: RDS Music: false inactive [ 788.918765][T15841] vivid-011: ================== END STATUS ================== [ 789.129952][T15850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'. [ 789.200937][T15850] openvswitch: HfR: Dropping previously announced user features [ 789.755196][T15861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'. [ 789.994130][ T7198] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1341 with max blocks 25 with error 117 [ 790.012750][ T7198] EXT4-fs (sda1): This should not happen!! Data will be lost [ 790.012750][ T7198] [ 790.920495][T15886] FAULT_INJECTION: forcing a failure. [ 790.920495][T15886] name failslab, interval 1, probability 0, space 0, times 0 [ 790.949411][T15886] CPU: 0 UID: 0 PID: 15886 Comm: syz.0.2122 Tainted: G L syzkaller #0 PREEMPT(full) [ 790.949470][T15886] Tainted: [L]=SOFTLOCKUP [ 790.949483][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 790.949505][T15886] Call Trace: [ 790.949517][T15886] [ 790.949532][T15886] dump_stack_lvl+0x100/0x190 [ 790.949587][T15886] should_fail_ex.cold+0x5/0xa [ 790.949634][T15886] should_failslab+0xc2/0x120 [ 790.949688][T15886] kmem_cache_alloc_noprof+0x91/0x6a0 [ 790.949736][T15886] ? do_getname+0x35/0x390 [ 790.949789][T15886] do_getname+0x35/0x390 [ 790.949839][T15886] do_sys_openat2+0xc7/0x1e0 [ 790.949888][T15886] ? __pfx_do_sys_openat2+0x10/0x10 [ 790.949960][T15886] __x64_sys_openat+0x12d/0x210 [ 790.950011][T15886] ? __pfx___x64_sys_openat+0x10/0x10 [ 790.950077][T15886] do_syscall_64+0x115/0x840 [ 790.950111][T15886] ? clear_bhb_loop+0x40/0x90 [ 790.950155][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.950192][T15886] RIP: 0033:0x7f91e179ce59 [ 790.950222][T15886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.950257][T15886] RSP: 002b:00007f91df9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 790.950291][T15886] RAX: ffffffffffffffda RBX: 00007f91e1a15fa0 RCX: 00007f91e179ce59 [ 790.950316][T15886] RDX: 0000000000000501 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 790.950338][T15886] RBP: 00007f91e1832e6f R08: 0000000000000000 R09: 0000000000000000 [ 790.950360][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.950381][T15886] R13: 00007f91e1a16038 R14: 00007f91e1a15fa0 R15: 00007ffd44dc78a8 [ 790.950427][T15886] [ 791.129665][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2120'. [ 791.270106][T12475] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 791.311204][T15877] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2120'. [ 792.014675][T15903] dyndbg: bad flag-op ò, at start of òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿ [ 792.015002][T15903] dyndbg: flags parse failed [ 794.676050][T15936] FAULT_INJECTION: forcing a failure. [ 794.676050][T15936] name failslab, interval 1, probability 0, space 0, times 0 [ 794.694113][T15936] CPU: 1 UID: 0 PID: 15936 Comm: syz.1.2131 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.694171][T15936] Tainted: [L]=SOFTLOCKUP [ 794.694185][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 794.694206][T15936] Call Trace: [ 794.694218][T15936] [ 794.694232][T15936] dump_stack_lvl+0x100/0x190 [ 794.694284][T15936] should_fail_ex.cold+0x5/0xa [ 794.694332][T15936] should_failslab+0xc2/0x120 [ 794.694383][T15936] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 794.694433][T15936] ? __d_alloc+0x35/0xa50 [ 794.694483][T15936] __d_alloc+0x35/0xa50 [ 794.694536][T15936] d_alloc+0x4a/0x1e0 [ 794.694578][T15936] lookup_one_qstr_excl+0x171/0x250 [ 794.694629][T15936] start_dirop+0x59/0xb0 [ 794.694686][T15936] simple_start_creating+0xf9/0x110 [ 794.694720][T15936] ? __pfx_simple_start_creating+0x10/0x10 [ 794.694756][T15936] ? mntput+0x70/0xa0 [ 794.694810][T15936] ? simple_pin_fs+0xa3/0x190 [ 794.694864][T15936] debugfs_start_creating.part.0+0x82/0x170 [ 794.694919][T15936] __debugfs_create_file+0xb3/0x4f0 [ 794.694974][T15936] debugfs_create_file_full+0x41/0x60 [ 794.695029][T15936] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 794.695127][T15936] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 794.695179][T15936] ? ida_alloc_range+0x70d/0x830 [ 794.695252][T15936] ? kasan_save_track+0x14/0x30 [ 794.695299][T15936] ? __kasan_kmalloc+0xaa/0xb0 [ 794.695344][T15936] ? lockdep_init_map_type+0x5c/0x250 [ 794.695389][T15936] preinit_net.part.0+0x252/0x920 [ 794.695439][T15936] copy_net_ns+0x339/0x7c0 [ 794.695492][T15936] create_new_namespaces+0x3ea/0xac0 [ 794.695549][T15936] unshare_nsproxy_namespaces+0xf2/0x220 [ 794.695595][T15936] ksys_unshare+0x438/0xab0 [ 794.695645][T15936] ? __pfx_ksys_unshare+0x10/0x10 [ 794.695708][T15936] __x64_sys_unshare+0x31/0x40 [ 794.695754][T15936] do_syscall_64+0x115/0x840 [ 794.695786][T15936] ? clear_bhb_loop+0x40/0x90 [ 794.695829][T15936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.695866][T15936] RIP: 0033:0x7fabfa19ce59 [ 794.695895][T15936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.695930][T15936] RSP: 002b:00007fabfb112028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 794.695964][T15936] RAX: ffffffffffffffda RBX: 00007fabfa415fa0 RCX: 00007fabfa19ce59 [ 794.695987][T15936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 794.696010][T15936] RBP: 00007fabfa232e6f R08: 0000000000000000 R09: 0000000000000000 [ 794.696029][T15936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.696047][T15936] R13: 00007fabfa416038 R14: 00007fabfa415fa0 R15: 00007ffdec40e228 [ 794.696089][T15936] [ 795.065724][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2131'. [ 795.076132][T15947] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2131'. [ 795.163075][T12475] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 795.204649][T15946] openvswitch: netlink: Flow key attribute not present in set flow. [ 795.604932][ T30] audit: type=1804 audit(4294967532.390:46): pid=15958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2136" name="/newroot/468/file0" dev="tmpfs" ino=2524 res=1 errno=0 [ 795.926252][T15969] FAULT_INJECTION: forcing a failure. [ 795.926252][T15969] name failslab, interval 1, probability 0, space 0, times 0 [ 795.961487][T15969] CPU: 0 UID: 0 PID: 15969 Comm: syz.2.2138 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.961545][T15969] Tainted: [L]=SOFTLOCKUP [ 795.961555][T15969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 795.961570][T15969] Call Trace: [ 795.961579][T15969] [ 795.961588][T15969] dump_stack_lvl+0x100/0x190 [ 795.961625][T15969] should_fail_ex.cold+0x5/0xa [ 795.961658][T15969] should_failslab+0xc2/0x120 [ 795.961694][T15969] __kmalloc_cache_noprof+0x91/0x6c0 [ 795.961720][T15969] ? kasan_save_track+0x14/0x30 [ 795.961751][T15969] ? __kasan_kmalloc+0xaa/0xb0 [ 795.961781][T15969] ? nfc_allocate_device+0x15b/0x5e0 [ 795.961813][T15969] nfc_allocate_device+0x15b/0x5e0 [ 795.961845][T15969] ? __init_swait_queue_head+0xca/0x150 [ 795.961877][T15969] nci_allocate_device+0x23b/0x410 [ 795.961933][T15969] virtual_ncidev_open+0x6f/0x220 [ 795.961985][T15969] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 795.962023][T15969] misc_open+0x26d/0x450 [ 795.962049][T15969] ? __pfx_misc_open+0x10/0x10 [ 795.962074][T15969] chrdev_open+0x234/0x6a0 [ 795.962099][T15969] ? __pfx_apparmor_file_open+0x10/0x10 [ 795.962128][T15969] ? __pfx_chrdev_open+0x10/0x10 [ 795.962156][T15969] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 795.962191][T15969] do_dentry_open+0x6ab/0x14d0 [ 795.962216][T15969] ? __pfx_chrdev_open+0x10/0x10 [ 795.962249][T15969] vfs_open+0x82/0x3f0 [ 795.962284][T15969] path_openat+0x2873/0x4280 [ 795.962339][T15969] ? __pfx_path_openat+0x10/0x10 [ 795.962386][T15969] do_file_open+0x20e/0x430 [ 795.962425][T15969] ? __pfx_do_file_open+0x10/0x10 [ 795.962490][T15969] ? alloc_fd+0x471/0x7a0 [ 795.962528][T15969] ? do_getname+0x191/0x390 [ 795.962577][T15969] do_sys_openat2+0x10f/0x1e0 [ 795.962626][T15969] ? __pfx_do_sys_openat2+0x10/0x10 [ 795.962677][T15969] ? __fget_files+0x21f/0x3d0 [ 795.962719][T15969] __x64_sys_openat+0x12d/0x210 [ 795.962769][T15969] ? __pfx___x64_sys_openat+0x10/0x10 [ 795.962842][T15969] do_syscall_64+0x115/0x840 [ 795.962875][T15969] ? clear_bhb_loop+0x40/0x90 [ 795.962918][T15969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.962955][T15969] RIP: 0033:0x7f121d39ce59 [ 795.962987][T15969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.963012][T15969] RSP: 002b:00007f121b5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 795.963035][T15969] RAX: ffffffffffffffda RBX: 00007f121d616090 RCX: 00007f121d39ce59 [ 795.963052][T15969] RDX: 0000000000000200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 795.963068][T15969] RBP: 00007f121d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 795.963083][T15969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.963098][T15969] R13: 00007f121d616128 R14: 00007f121d616090 R15: 00007ffdebf54798 [ 795.963130][T15969] [ 797.103459][T15982] FAULT_INJECTION: forcing a failure. [ 797.103459][T15982] name failslab, interval 1, probability 0, space 0, times 0 [ 797.153473][T15982] CPU: 0 UID: 0 PID: 15982 Comm: syz.1.2141 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.153533][T15982] Tainted: [L]=SOFTLOCKUP [ 797.153547][T15982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 797.153569][T15982] Call Trace: [ 797.153583][T15982] [ 797.153597][T15982] dump_stack_lvl+0x100/0x190 [ 797.153649][T15982] should_fail_ex.cold+0x5/0xa [ 797.153699][T15982] should_failslab+0xc2/0x120 [ 797.153753][T15982] kmem_cache_alloc_noprof+0x91/0x6a0 [ 797.153811][T15982] ? __pfx_map_id_range_down+0x10/0x10 [ 797.153865][T15982] ? rcu_is_watching+0x12/0xc0 [ 797.153908][T15982] ? security_inode_alloc+0x3b/0x2c0 [ 797.153955][T15982] security_inode_alloc+0x3b/0x2c0 [ 797.153994][T15982] inode_init_always_gfp+0xc77/0xfb0 [ 797.154036][T15982] alloc_inode+0x8e/0x250 [ 797.154081][T15982] new_inode+0x22/0x1c0 [ 797.154125][T15982] ? refcount_dec_not_one+0x136/0x1c0 [ 797.154181][T15982] mqueue_get_inode+0x2e/0xe00 [ 797.154335][T15982] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 797.154373][T15982] ? __kasan_kmalloc+0xaa/0xb0 [ 797.154422][T15982] ? __pfx_mqueue_fill_super+0x10/0x10 [ 797.154478][T15982] mqueue_fill_super+0x14d/0x260 [ 797.154537][T15982] get_tree_nodev+0xdd/0x190 [ 797.154596][T15982] mqueue_get_tree+0xf1/0x130 [ 797.154652][T15982] vfs_get_tree+0x92/0x320 [ 797.154704][T15982] fc_mount_longterm+0x1a/0x270 [ 797.154760][T15982] mq_init_ns+0x482/0x820 [ 797.154811][T15982] copy_ipcs+0x3dd/0x7e0 [ 797.154855][T15982] create_new_namespaces+0x20a/0xac0 [ 797.154896][T15982] ? security_capable+0x80/0x260 [ 797.154936][T15982] unshare_nsproxy_namespaces+0xf2/0x220 [ 797.154982][T15982] ksys_unshare+0x438/0xab0 [ 797.155031][T15982] ? __pfx_ksys_unshare+0x10/0x10 [ 797.155095][T15982] __x64_sys_unshare+0x31/0x40 [ 797.155142][T15982] do_syscall_64+0x115/0x840 [ 797.155174][T15982] ? clear_bhb_loop+0x40/0x90 [ 797.155218][T15982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.155255][T15982] RIP: 0033:0x7fabfa19ce59 [ 797.155285][T15982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.155322][T15982] RSP: 002b:00007fabfb0f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 797.155358][T15982] RAX: ffffffffffffffda RBX: 00007fabfa416090 RCX: 00007fabfa19ce59 [ 797.155382][T15982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 797.155404][T15982] RBP: 00007fabfa232e6f R08: 0000000000000000 R09: 0000000000000000 [ 797.155426][T15982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.155448][T15982] R13: 00007fabfa416128 R14: 00007fabfa416090 R15: 00007ffdec40e228 [ 797.155493][T15982] [ 798.392874][T15999] openvswitch: netlink: Flow key attribute not present in set flow. [ 799.452799][T16023] bond0: invalid ARP target specified [ 799.760986][T16021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2149'. [ 800.158391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 801.017282][T12475] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 801.663148][T16058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2157'. [ 802.332052][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2161'. [ 803.022969][T16083] openvswitch: netlink: Flow key attribute not present in set flow. [ 804.910705][T16110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2170'. [ 804.967992][T16110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.026026][T16110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.418878][T12475] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 806.426465][T12475] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 806.528147][T12475] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 806.535868][T12475] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 807.470398][ T5774] Process accounting resumed [ 807.880067][T16120] Process accounting paused [ 807.898433][T16134] Process accounting resumed [ 808.125953][ T5774] Process accounting resumed [ 809.364646][T16131] Process accounting resumed [ 809.411316][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.417807][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.457198][T16163] FAULT_INJECTION: forcing a failure. [ 809.457198][T16163] name fail_futex, interval 1, probability 0, space 0, times 0 [ 809.520415][T16163] CPU: 0 UID: 0 PID: 16163 Comm: syz.1.2179 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.520475][T16163] Tainted: [L]=SOFTLOCKUP [ 809.520489][T16163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 809.520511][T16163] Call Trace: [ 809.520524][T16163] [ 809.520537][T16163] dump_stack_lvl+0x100/0x190 [ 809.520590][T16163] should_fail_ex.cold+0x5/0xa [ 809.520631][T16163] ? kasan_save_track+0x14/0x30 [ 809.520683][T16163] get_futex_key+0x1d2/0x14f0 [ 809.520725][T16163] ? __pfx_get_futex_key+0x10/0x10 [ 809.520777][T16163] futex_wait_setup+0x91/0x540 [ 809.520839][T16163] __futex_wait+0x19f/0x300 [ 809.520895][T16163] ? __pfx___futex_wait+0x10/0x10 [ 809.520943][T16163] ? futex_hash+0x311/0x400 [ 809.520982][T16163] ? __pfx_futex_wake_mark+0x10/0x10 [ 809.521038][T16163] ? __pfx_futex_hash+0x10/0x10 [ 809.521072][T16163] ? orangefs_debug_write+0x41e/0x640 [ 809.521144][T16163] futex_wait+0xe6/0x370 [ 809.521193][T16163] ? __pfx_futex_wait+0x10/0x10 [ 809.521247][T16163] ? find_held_lock+0x2b/0x80 [ 809.521303][T16163] ? rcu_read_lock_any_held+0x6a/0xa0 [ 809.521352][T16163] ? vfs_write+0x15d/0x1050 [ 809.521393][T16163] do_futex+0x265/0x440 [ 809.521435][T16163] ? __pfx_do_futex+0x10/0x10 [ 809.521472][T16163] ? __pfx_do_sys_openat2+0x10/0x10 [ 809.521531][T16163] __x64_sys_futex+0x34f/0x4d0 [ 809.521579][T16163] ? __pfx___x64_sys_futex+0x10/0x10 [ 809.521634][T16163] do_syscall_64+0x115/0x840 [ 809.521669][T16163] ? clear_bhb_loop+0x40/0x90 [ 809.521712][T16163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.521749][T16163] RIP: 0033:0x7fabfa19ce59 [ 809.521779][T16163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.521824][T16163] RSP: 002b:00007fabfb1120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 809.521860][T16163] RAX: ffffffffffffffda RBX: 00007fabfa415fa8 RCX: 00007fabfa19ce59 [ 809.521884][T16163] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fabfa415fa8 [ 809.521906][T16163] RBP: 00007fabfa415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 809.521927][T16163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.521949][T16163] R13: 00007fabfa416038 R14: 00007ffdec40e140 R15: 00007ffdec40e228 [ 809.521995][T16163] [ 810.003454][T16137] Process accounting paused [ 810.784206][ T30] audit: type=1800 audit(4294967547.561:47): pid=16182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2184" name="discovery_nqn" dev="configfs" ino=74635 res=0 errno=0 [ 810.827660][T16182] FAULT_INJECTION: forcing a failure. [ 810.827660][T16182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.887709][T16182] CPU: 1 UID: 0 PID: 16182 Comm: syz.1.2184 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.887764][T16182] Tainted: [L]=SOFTLOCKUP [ 810.887777][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 810.887798][T16182] Call Trace: [ 810.887810][T16182] [ 810.887823][T16182] dump_stack_lvl+0x100/0x190 [ 810.887875][T16182] should_fail_ex.cold+0x5/0xa [ 810.887921][T16182] _copy_from_iter+0x43a/0x1690 [ 810.887985][T16182] ? __pfx__copy_from_iter+0x10/0x10 [ 810.888037][T16182] ? aa_file_perm+0x7f3/0x14d0 [ 810.888110][T16182] configfs_write_iter+0xb3/0x4e0 [ 810.888143][T16182] ? __lock_acquire+0x49f/0x1a40 [ 810.888182][T16182] do_iter_readv_writev+0x6f7/0x930 [ 810.888238][T16182] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 810.888313][T16182] vfs_writev+0x360/0xdd0 [ 810.888368][T16182] ? rcu_is_watching+0x12/0xc0 [ 810.888413][T16182] ? trace_contention_end+0x126/0x160 [ 810.888455][T16182] ? __pfx_vfs_writev+0x10/0x10 [ 810.888513][T16182] ? rcu_read_lock_any_held+0x6a/0xa0 [ 810.888588][T16182] ? __fget_files+0x21f/0x3d0 [ 810.888632][T16182] ? do_writev+0x13e/0x340 [ 810.888700][T16182] do_writev+0x13e/0x340 [ 810.888756][T16182] ? __pfx_do_writev+0x10/0x10 [ 810.888824][T16182] do_syscall_64+0x115/0x840 [ 810.888858][T16182] ? clear_bhb_loop+0x40/0x90 [ 810.888905][T16182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.888942][T16182] RIP: 0033:0x7fabfa19ce59 [ 810.888972][T16182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.889006][T16182] RSP: 002b:00007fabfb0f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 810.889040][T16182] RAX: ffffffffffffffda RBX: 00007fabfa416090 RCX: 00007fabfa19ce59 [ 810.889063][T16182] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 810.889084][T16182] RBP: 00007fabfa232e6f R08: 0000000000000000 R09: 0000000000000000 [ 810.889106][T16182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.889127][T16182] R13: 00007fabfa416128 R14: 00007fabfa416090 R15: 00007ffdec40e228 [ 810.889171][T16182] [ 811.574600][T16194] FAULT_INJECTION: forcing a failure. [ 811.574600][T16194] name failslab, interval 1, probability 0, space 0, times 0 [ 811.613179][T16194] CPU: 0 UID: 0 PID: 16194 Comm: syz.2.2186 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.613236][T16194] Tainted: [L]=SOFTLOCKUP [ 811.613249][T16194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 811.613269][T16194] Call Trace: [ 811.613280][T16194] [ 811.613294][T16194] dump_stack_lvl+0x100/0x190 [ 811.613343][T16194] should_fail_ex.cold+0x5/0xa [ 811.613382][T16194] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 811.613446][T16194] should_failslab+0xc2/0x120 [ 811.613492][T16194] kmem_cache_alloc_noprof+0x91/0x6a0 [ 811.613537][T16194] ? skb_clone+0x190/0x400 [ 811.613596][T16194] skb_clone+0x190/0x400 [ 811.613640][T16194] netlink_deliver_tap+0xaed/0xcc0 [ 811.613702][T16194] netlink_unicast+0x62b/0x850 [ 811.613763][T16194] ? __pfx_netlink_unicast+0x10/0x10 [ 811.613828][T16194] netlink_sendmsg+0x8b0/0xda0 [ 811.613890][T16194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.613963][T16194] ? apparmor_socket_sendmsg+0x15b/0x270 [ 811.614023][T16194] ____sys_sendmsg+0xa4d/0xbe0 [ 811.614074][T16194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.614139][T16194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.614206][T16194] ___sys_sendmsg+0x190/0x1e0 [ 811.614260][T16194] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.614312][T16194] ? __lock_acquire+0x49f/0x1a40 [ 811.614358][T16194] ? get_pid_task+0x106/0x250 [ 811.614456][T16194] __sys_sendmsg+0x160/0x210 [ 811.614500][T16194] ? __pfx___sys_sendmsg+0x10/0x10 [ 811.614562][T16194] do_syscall_64+0x115/0x840 [ 811.614602][T16194] ? clear_bhb_loop+0x40/0x90 [ 811.614643][T16194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.614678][T16194] RIP: 0033:0x7f121d39ce59 [ 811.614705][T16194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.614737][T16194] RSP: 002b:00007f121b5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.614768][T16194] RAX: ffffffffffffffda RBX: 00007f121d616090 RCX: 00007f121d39ce59 [ 811.614790][T16194] RDX: 0000000000008010 RSI: 00002000000004c0 RDI: 0000000000000003 [ 811.614810][T16194] RBP: 00007f121b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 811.614830][T16194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.614849][T16194] R13: 00007f121d616128 R14: 00007f121d616090 R15: 00007ffdebf54798 [ 811.614892][T16194] [ 811.827015][T16188] FAULT_INJECTION: forcing a failure. [ 811.827015][T16188] name fail_futex, interval 1, probability 0, space 0, times 0 [ 812.110367][T16188] CPU: 1 UID: 0 PID: 16188 Comm: syz.0.2185 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.110406][T16188] Tainted: [L]=SOFTLOCKUP [ 812.110415][T16188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 812.110429][T16188] Call Trace: [ 812.110437][T16188] [ 812.110446][T16188] dump_stack_lvl+0x100/0x190 [ 812.110481][T16188] should_fail_ex.cold+0x5/0xa [ 812.110513][T16188] get_futex_key+0xf74/0x14f0 [ 812.110548][T16188] ? __pfx_get_futex_key+0x10/0x10 [ 812.110573][T16188] ? lock_acquire+0x1b9/0x370 [ 812.110602][T16188] futex_wake+0xf4/0x5e0 [ 812.110637][T16188] ? __pfx_futex_wake+0x10/0x10 [ 812.110669][T16188] ? find_held_lock+0x2b/0x80 [ 812.110701][T16188] ? exit_mm_release+0x19/0x30 [ 812.110738][T16188] do_futex+0x2b2/0x440 [ 812.110766][T16188] ? __pfx_do_futex+0x10/0x10 [ 812.110791][T16188] ? __might_fault+0xc5/0x140 [ 812.110825][T16188] mm_release+0x24a/0x2f0 [ 812.110851][T16188] do_exit+0x707/0x2ae0 [ 812.110889][T16188] ? __pfx_do_exit+0x10/0x10 [ 812.110923][T16188] ? do_raw_spin_lock+0x128/0x260 [ 812.110950][T16188] ? find_held_lock+0x2b/0x80 [ 812.110979][T16188] ? get_signal+0x7e0/0x21e0 [ 812.111010][T16188] do_group_exit+0xd5/0x2a0 [ 812.111049][T16188] get_signal+0x1ec7/0x21e0 [ 812.111087][T16188] ? __pfx_get_signal+0x10/0x10 [ 812.111117][T16188] ? do_futex+0x190/0x440 [ 812.111146][T16188] arch_do_signal_or_restart+0x91/0x7a0 [ 812.111171][T16188] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 812.111214][T16188] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 812.111246][T16188] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 812.111287][T16188] exit_to_user_mode_loop+0x139/0x6f0 [ 812.111312][T16188] ? rcu_is_watching+0x12/0xc0 [ 812.111344][T16188] do_syscall_64+0x652/0x840 [ 812.111365][T16188] ? clear_bhb_loop+0x40/0x90 [ 812.111395][T16188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.111420][T16188] RIP: 0033:0x7f91e179ce59 [ 812.111440][T16188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.111465][T16188] RSP: 002b:00007f91df9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 812.111487][T16188] RAX: fffffffffffffe00 RBX: 00007f91e1a15fa8 RCX: 00007f91e179ce59 [ 812.111504][T16188] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f91e1a15fa8 [ 812.111519][T16188] RBP: 00007f91e1a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 812.111539][T16188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.111553][T16188] R13: 00007f91e1a16038 R14: 00007ffd44dc77c0 R15: 00007ffd44dc78a8 [ 812.111583][T16188] [ 812.618581][T12475] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 812.762126][T16211] FAULT_INJECTION: forcing a failure. [ 812.762126][T16211] name failslab, interval 1, probability 0, space 0, times 0 [ 812.807273][T16201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2188'. [ 812.824902][T16211] CPU: 0 UID: 0 PID: 16211 Comm: syz.0.2190 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.824959][T16211] Tainted: [L]=SOFTLOCKUP [ 812.824972][T16211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 812.824991][T16211] Call Trace: [ 812.825003][T16211] [ 812.825016][T16211] dump_stack_lvl+0x100/0x190 [ 812.825063][T16211] should_fail_ex.cold+0x5/0xa [ 812.825107][T16211] should_failslab+0xc2/0x120 [ 812.825156][T16211] __kmalloc_noprof+0xfc/0x820 [ 812.825200][T16211] ? iovec_from_user+0x8d/0x140 [ 812.825259][T16211] iovec_from_user+0x8d/0x140 [ 812.825313][T16211] __import_iovec+0x81/0x640 [ 812.825362][T16211] ? irqentry_exit+0x24d/0xa00 [ 812.825440][T16211] import_iovec+0x82/0xb0 [ 812.825501][T16211] vfs_readv+0x19e/0x8d0 [ 812.825563][T16211] ? __pfx_vfs_readv+0x10/0x10 [ 812.825617][T16211] ? rcu_read_lock_any_held+0x6a/0xa0 [ 812.825688][T16211] ? __fget_files+0x21f/0x3d0 [ 812.825730][T16211] ? do_readv+0x13e/0x340 [ 812.825779][T16211] do_readv+0x13e/0x340 [ 812.825830][T16211] ? __pfx_do_readv+0x10/0x10 [ 812.825892][T16211] do_syscall_64+0x115/0x840 [ 812.825922][T16211] ? clear_bhb_loop+0x40/0x90 [ 812.825969][T16211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.826005][T16211] RIP: 0033:0x7f91e179ce59 [ 812.826032][T16211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.826065][T16211] RSP: 002b:00007f91df9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 812.826096][T16211] RAX: ffffffffffffffda RBX: 00007f91e1a15fa0 RCX: 00007f91e179ce59 [ 812.826118][T16211] RDX: 00000000000000c8 RSI: 0000200000001200 RDI: 0000000000000005 [ 812.826139][T16211] RBP: 00007f91df9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 812.826160][T16211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.826180][T16211] R13: 00007f91e1a16038 R14: 00007f91e1a15fa0 R15: 00007ffd44dc78a8 [ 812.826223][T16211] [ 813.762390][T16229] FAULT_INJECTION: forcing a failure. [ 813.762390][T16229] name fail_futex, interval 1, probability 0, space 0, times 0 [ 813.776050][T16229] CPU: 1 UID: 0 PID: 16229 Comm: syz.0.2194 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.776107][T16229] Tainted: [L]=SOFTLOCKUP [ 813.776122][T16229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 813.776145][T16229] Call Trace: [ 813.776157][T16229] [ 813.776171][T16229] dump_stack_lvl+0x100/0x190 [ 813.776223][T16229] should_fail_ex.cold+0x5/0xa [ 813.776264][T16229] ? kasan_save_track+0x14/0x30 [ 813.776316][T16229] get_futex_key+0x1d2/0x14f0 [ 813.776360][T16229] ? __pfx_get_futex_key+0x10/0x10 [ 813.776421][T16229] futex_wait_setup+0x91/0x540 [ 813.776486][T16229] __futex_wait+0x19f/0x300 [ 813.776541][T16229] ? __pfx___futex_wait+0x10/0x10 [ 813.776589][T16229] ? futex_hash+0x311/0x400 [ 813.776637][T16229] ? __pfx_futex_wake_mark+0x10/0x10 [ 813.776695][T16229] ? __pfx_futex_hash+0x10/0x10 [ 813.776730][T16229] ? orangefs_debug_write+0x41e/0x640 [ 813.776803][T16229] futex_wait+0xe6/0x370 [ 813.776853][T16229] ? __pfx_futex_wait+0x10/0x10 [ 813.776899][T16229] ? find_held_lock+0x2b/0x80 [ 813.776957][T16229] ? rcu_read_lock_any_held+0x6a/0xa0 [ 813.777008][T16229] ? vfs_write+0x15d/0x1050 [ 813.777049][T16229] do_futex+0x265/0x440 [ 813.777094][T16229] ? __pfx_do_futex+0x10/0x10 [ 813.777131][T16229] ? __pfx_do_sys_openat2+0x10/0x10 [ 813.777191][T16229] __x64_sys_futex+0x34f/0x4d0 [ 813.777241][T16229] ? __pfx___x64_sys_futex+0x10/0x10 [ 813.777282][T16229] ? ksys_write+0x1ac/0x250 [ 813.777316][T16229] ? __pfx_ksys_write+0x10/0x10 [ 813.777362][T16229] do_syscall_64+0x115/0x840 [ 813.777396][T16229] ? clear_bhb_loop+0x40/0x90 [ 813.777449][T16229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.777492][T16229] RIP: 0033:0x7f91e179ce59 [ 813.777522][T16229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.777557][T16229] RSP: 002b:00007f91df9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 813.777592][T16229] RAX: ffffffffffffffda RBX: 00007f91e1a15fa8 RCX: 00007f91e179ce59 [ 813.777615][T16229] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f91e1a15fa8 [ 813.777637][T16229] RBP: 00007f91e1a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 813.777659][T16229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.777680][T16229] R13: 00007f91e1a16038 R14: 00007ffd44dc77c0 R15: 00007ffd44dc78a8 [ 813.777727][T16229] [ 814.175049][T12475] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 817.406789][T16268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2202'. [ 817.769316][T12475] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 820.157011][T12475] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 820.164641][T12475] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 821.075960][ T5727] Process accounting resumed [ 822.046840][T16326] openvswitch: netlink: Flow key attribute not present in set flow. [ 822.647063][T16310] Process accounting resumed [ 823.432018][T16352] netlink: 318 bytes leftover after parsing attributes in process `syz.2.2221'. [ 824.070157][T16372] openvswitch: netlink: Flow key attribute not present in set flow. [ 824.355686][T16374] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 824.714648][ T4941] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 824.722216][ T4941] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 825.271084][T12475] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 825.315584][ T5727] Process accounting resumed [ 825.640360][T16379] Process accounting resumed [ 826.630474][T16413] openvswitch: netlink: Flow key attribute not present in set flow. [ 827.267977][T16424] netlink: 'syz.1.2238': attribute type 60 has an invalid length. [ 829.522481][T16422] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 835.253690][T16524] FAULT_INJECTION: forcing a failure. [ 835.253690][T16524] name fail_futex, interval 1, probability 0, space 0, times 0 [ 835.272964][T16519] netlink: 'syz.1.2259': attribute type 3 has an invalid length. [ 835.281147][T16524] CPU: 1 UID: 0 PID: 16524 Comm: syz.0.2261 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.281205][T16524] Tainted: [L]=SOFTLOCKUP [ 835.281219][T16524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 835.281241][T16524] Call Trace: [ 835.281254][T16524] [ 835.281267][T16524] dump_stack_lvl+0x100/0x190 [ 835.281318][T16524] should_fail_ex.cold+0x5/0xa [ 835.281366][T16524] get_futex_key+0x1d2/0x14f0 [ 835.281409][T16524] ? __pfx_get_futex_key+0x10/0x10 [ 835.281446][T16524] ? __pfx_futex_hash+0x10/0x10 [ 835.281485][T16524] ? kasan_quarantine_put+0x104/0x240 [ 835.281540][T16524] futex_wake+0xf4/0x5e0 [ 835.281584][T16524] ? futex_wait+0x11e/0x370 [ 835.281634][T16524] ? find_held_lock+0x2b/0x80 [ 835.281680][T16524] ? __pfx_futex_wake+0x10/0x10 [ 835.281733][T16524] ? rcu_read_lock_any_held+0x6a/0xa0 [ 835.281865][T16524] ? vfs_write+0x15d/0x1050 [ 835.281905][T16524] do_futex+0x2b2/0x440 [ 835.281966][T16524] ? __pfx_do_futex+0x10/0x10 [ 835.282004][T16524] ? __pfx_do_sys_openat2+0x10/0x10 [ 835.282064][T16524] __x64_sys_futex+0x34f/0x4d0 [ 835.282117][T16524] ? fdget_pos+0x2c0/0x380 [ 835.282154][T16524] ? __pfx___x64_sys_futex+0x10/0x10 [ 835.282194][T16524] ? ksys_write+0x1ac/0x250 [ 835.282228][T16524] ? __pfx_ksys_write+0x10/0x10 [ 835.282272][T16524] do_syscall_64+0x115/0x840 [ 835.282304][T16524] ? clear_bhb_loop+0x40/0x90 [ 835.282362][T16524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.282397][T16524] RIP: 0033:0x7f91e179ce59 [ 835.282426][T16524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.282459][T16524] RSP: 002b:00007f91df9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 835.282491][T16524] RAX: ffffffffffffffda RBX: 00007f91e1a15fa8 RCX: 00007f91e179ce59 [ 835.282513][T16524] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f91e1a15fac [ 835.282535][T16524] RBP: 00007f91e1a15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 835.282556][T16524] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 835.282579][T16524] R13: 00007f91e1a16038 R14: 00007ffd44dc77c0 R15: 00007ffd44dc78a8 [ 835.282623][T16524] [ 836.286074][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2262'. [ 836.380520][T16535] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 836.453732][T16535] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 836.508254][T16535] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 836.726894][T16536] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 837.077753][T12475] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 837.394404][ T4941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.406939][ T4941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.418465][ T4941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.441410][T16556] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 837.441693][ T4941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 837.448466][ T4941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 838.573490][ T7202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.979368][ T7202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.123566][ T7202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.340864][T16563] Process accounting paused [ 839.349280][ T7202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.486694][T16579] usbip-vudc usbip-vudc.0: gadget not bound [ 839.526480][ T4941] Bluetooth: hci2: command tx timeout [ 839.944020][T16554] Process accounting paused [ 840.605938][T16597] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 840.901575][ T7202] vlan1: left allmulticast mode [ 840.914897][ T7202] veth0_vlan: left allmulticast mode [ 840.942030][ T7202] vlan1: left promiscuous mode [ 840.956357][ T7202] bridge0: port 3(vlan1) entered disabled state [ 840.981864][ T7202] bridge_slave_1: left allmulticast mode [ 840.993200][ T7202] bridge_slave_1: left promiscuous mode [ 841.004316][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.051035][ T7202] bridge_slave_0: left allmulticast mode [ 841.069513][ T7202] bridge_slave_0: left promiscuous mode [ 841.095652][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.576879][T16606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2273'. [ 841.613905][ T4941] Bluetooth: hci2: command tx timeout [ 841.722518][ T7202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.753304][ T7202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.776995][ T7202] bond0 (unregistering): Released all slaves [ 841.848686][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 841.927036][T16553] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.951543][T16553] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.982574][T16553] bridge_slave_0: entered allmulticast mode [ 842.001259][T16553] bridge_slave_0: entered promiscuous mode [ 842.022324][ T7202] HfR: left promiscuous mode [ 842.148442][T16553] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.162853][T16553] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.196124][T16553] bridge_slave_1: entered allmulticast mode [ 842.209756][T16553] bridge_slave_1: entered promiscuous mode [ 842.224070][ T7202] tipc: Left network mode [ 842.393943][T16622] FAULT_INJECTION: forcing a failure. [ 842.393943][T16622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.430900][T16622] CPU: 0 UID: 0 PID: 16622 Comm: syz.3.2275 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.430955][T16622] Tainted: [L]=SOFTLOCKUP [ 842.430968][T16622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 842.431004][T16622] Call Trace: [ 842.431017][T16622] [ 842.431030][T16622] dump_stack_lvl+0x100/0x190 [ 842.431083][T16622] should_fail_ex.cold+0x5/0xa [ 842.431133][T16622] _copy_from_user+0x2e/0xd0 [ 842.431191][T16622] memdup_user_nul+0x6c/0x120 [ 842.431237][T16622] orangefs_debug_write+0x118/0x640 [ 842.431300][T16622] ? __debugfs_file_get+0x7e/0x860 [ 842.431341][T16622] ? __pfx_orangefs_debug_write+0x10/0x10 [ 842.431398][T16622] ? __debugfs_file_get+0x1fc/0x860 [ 842.431436][T16622] ? __pfx___debugfs_file_get+0x10/0x10 [ 842.431488][T16622] full_proxy_write+0x135/0x1a0 [ 842.431531][T16622] vfs_write+0x2aa/0x1050 [ 842.431567][T16622] ? __pfx_full_proxy_write+0x10/0x10 [ 842.431610][T16622] ? __pfx_vfs_write+0x10/0x10 [ 842.431645][T16622] ? __pfx_do_futex+0x10/0x10 [ 842.431684][T16622] ? __pfx_do_sys_openat2+0x10/0x10 [ 842.431743][T16622] ? __x64_sys_futex+0x34f/0x4d0 [ 842.431783][T16622] ? __x64_sys_futex+0x358/0x4d0 [ 842.431829][T16622] ksys_write+0x12a/0x250 [ 842.431863][T16622] ? __pfx_ksys_write+0x10/0x10 [ 842.431910][T16622] do_syscall_64+0x115/0x840 [ 842.431942][T16622] ? clear_bhb_loop+0x40/0x90 [ 842.431994][T16622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.432033][T16622] RIP: 0033:0x7f557a79ce59 [ 842.432063][T16622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.432099][T16622] RSP: 002b:00007f557b62b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 842.432132][T16622] RAX: ffffffffffffffda RBX: 00007f557aa15fa0 RCX: 00007f557a79ce59 [ 842.432156][T16622] RDX: 00000000a0000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 842.432178][T16622] RBP: 00007f557a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 842.432199][T16622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.432220][T16622] R13: 00007f557aa16038 R14: 00007f557aa15fa0 R15: 00007ffdac6c5088 [ 842.432260][T16622] [ 842.783142][T16553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.912634][T16553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.012753][T16630] openvswitch: netlink: Flow key attribute not present in set flow. [ 843.235050][T16553] team0: Port device team_slave_0 added [ 843.280463][T16553] team0: Port device team_slave_1 added [ 843.432501][T16553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.455048][T16553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.494007][T16647] openvswitch: netlink: Flow key attribute not present in set flow. [ 843.519380][T16553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.584490][T16553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.644379][T16553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.697671][ T4941] Bluetooth: hci2: command tx timeout [ 843.711109][T16553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.882233][ T4941] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 843.889885][ T4941] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 843.908801][T16553] hsr_slave_0: entered promiscuous mode [ 843.935194][T16553] hsr_slave_1: entered promiscuous mode [ 843.952312][T16553] debugfs: 'hsr0' already exists in 'hsr' [ 843.958178][T16553] Cannot create hsr debugfs directory [ 843.995621][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 844.884670][ T5774] Process accounting resumed [ 845.630352][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 845.654865][T16666] Process accounting resumed [ 845.774955][ T4941] Bluetooth: hci2: command tx timeout [ 845.917308][T16688] random: crng reseeded on system resumption [ 846.115738][T16695] FAULT_INJECTION: forcing a failure. [ 846.115738][T16695] name fail_futex, interval 1, probability 0, space 0, times 0 [ 846.132216][T16695] CPU: 1 UID: 0 PID: 16695 Comm: syz.0.2284 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.132263][T16695] Tainted: [L]=SOFTLOCKUP [ 846.132274][T16695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 846.132291][T16695] Call Trace: [ 846.132301][T16695] [ 846.132312][T16695] dump_stack_lvl+0x100/0x190 [ 846.132354][T16695] should_fail_ex.cold+0x5/0xa [ 846.132389][T16695] ? kasan_save_track+0x14/0x30 [ 846.132431][T16695] get_futex_key+0x1d2/0x14f0 [ 846.132466][T16695] ? __pfx_get_futex_key+0x10/0x10 [ 846.132509][T16695] futex_wait_setup+0x91/0x540 [ 846.132560][T16695] __futex_wait+0x19f/0x300 [ 846.132604][T16695] ? __pfx___futex_wait+0x10/0x10 [ 846.132643][T16695] ? futex_hash+0x311/0x400 [ 846.132674][T16695] ? __pfx_futex_wake_mark+0x10/0x10 [ 846.132729][T16695] ? __pfx_futex_hash+0x10/0x10 [ 846.132757][T16695] ? orangefs_debug_write+0x41e/0x640 [ 846.132819][T16695] futex_wait+0xe6/0x370 [ 846.132859][T16695] ? __pfx_futex_wait+0x10/0x10 [ 846.132902][T16695] ? find_held_lock+0x2b/0x80 [ 846.132953][T16695] ? rcu_read_lock_any_held+0x6a/0xa0 [ 846.132992][T16695] ? vfs_write+0x15d/0x1050 [ 846.133025][T16695] do_futex+0x265/0x440 [ 846.133059][T16695] ? __pfx_do_futex+0x10/0x10 [ 846.133090][T16695] ? __pfx_do_sys_openat2+0x10/0x10 [ 846.133141][T16695] __x64_sys_futex+0x34f/0x4d0 [ 846.133185][T16695] ? __pfx___x64_sys_futex+0x10/0x10 [ 846.133222][T16695] ? ksys_write+0x1ac/0x250 [ 846.133253][T16695] ? __pfx_ksys_write+0x10/0x10 [ 846.133297][T16695] do_syscall_64+0x115/0x840 [ 846.133330][T16695] ? clear_bhb_loop+0x40/0x90 [ 846.133373][T16695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.133411][T16695] RIP: 0033:0x7f91e179ce59 [ 846.133444][T16695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.133478][T16695] RSP: 002b:00007f91df9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 846.133513][T16695] RAX: ffffffffffffffda RBX: 00007f91e1a15fa8 RCX: 00007f91e179ce59 [ 846.133536][T16695] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f91e1a15fa8 [ 846.133558][T16695] RBP: 00007f91e1a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 846.133577][T16695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.133597][T16695] R13: 00007f91e1a16038 R14: 00007ffd44dc77c0 R15: 00007ffd44dc78a8 [ 846.133641][T16695] [ 846.615667][T16706] block2mtd: illegal erase size [ 848.664434][T16553] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 848.696455][T16553] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 848.714871][T16553] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 848.729034][T16553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 848.808816][T16553] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 848.829627][T16553] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 848.882016][T16553] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 848.943575][T16553] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 849.463646][T16762] FAULT_INJECTION: forcing a failure. [ 849.463646][T16762] name fail_futex, interval 1, probability 0, space 0, times 0 [ 849.477667][T16762] CPU: 1 UID: 0 PID: 16762 Comm: syz.0.2292 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.477723][T16762] Tainted: [L]=SOFTLOCKUP [ 849.477736][T16762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 849.477758][T16762] Call Trace: [ 849.477770][T16762] [ 849.477784][T16762] dump_stack_lvl+0x100/0x190 [ 849.477838][T16762] should_fail_ex.cold+0x5/0xa [ 849.477885][T16762] get_futex_key+0x1d2/0x14f0 [ 849.477927][T16762] ? __pfx_get_futex_key+0x10/0x10 [ 849.477964][T16762] ? wakeup_preempt_fair+0x640/0x1060 [ 849.478015][T16762] futex_wait_setup+0x91/0x540 [ 849.478076][T16762] __futex_wait+0x19f/0x300 [ 849.478130][T16762] ? __pfx___futex_wait+0x10/0x10 [ 849.478176][T16762] ? __pfx_try_to_wake_up+0x10/0x10 [ 849.478214][T16762] ? futex_hash+0x311/0x400 [ 849.478253][T16762] ? __pfx_futex_wake_mark+0x10/0x10 [ 849.478311][T16762] ? find_held_lock+0x2b/0x80 [ 849.478356][T16762] ? futex_wake+0x4ea/0x5e0 [ 849.478420][T16762] futex_wait+0xe6/0x370 [ 849.478467][T16762] ? __pfx_futex_wait+0x10/0x10 [ 849.478525][T16762] ? rcu_read_lock_any_held+0x6a/0xa0 [ 849.478573][T16762] ? vfs_write+0x15d/0x1050 [ 849.478614][T16762] do_futex+0x265/0x440 [ 849.478656][T16762] ? __pfx_do_futex+0x10/0x10 [ 849.478694][T16762] ? __pfx_do_sys_openat2+0x10/0x10 [ 849.478753][T16762] __x64_sys_futex+0x34f/0x4d0 [ 849.478800][T16762] ? __pfx___x64_sys_futex+0x10/0x10 [ 849.478839][T16762] ? ksys_write+0x1ac/0x250 [ 849.478870][T16762] ? __pfx_ksys_write+0x10/0x10 [ 849.478914][T16762] do_syscall_64+0x115/0x840 [ 849.478959][T16762] ? clear_bhb_loop+0x40/0x90 [ 849.479004][T16762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.479041][T16762] RIP: 0033:0x7f91e179ce59 [ 849.479072][T16762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.479107][T16762] RSP: 002b:00007f91df9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 849.479140][T16762] RAX: ffffffffffffffda RBX: 00007f91e1a15fa8 RCX: 00007f91e179ce59 [ 849.479165][T16762] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f91e1a15fa8 [ 849.479188][T16762] RBP: 00007f91e1a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 849.479210][T16762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.479232][T16762] R13: 00007f91e1a16038 R14: 00007ffd44dc77c0 R15: 00007ffd44dc78a8 [ 849.479276][T16762] [ 850.401368][T16553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.527233][T16553] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.566014][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.573297][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.666580][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.673879][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.781375][ T4941] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 853.561326][T16839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2298'. [ 853.901246][T16553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.373318][T16553] veth0_vlan: entered promiscuous mode [ 854.470247][T16553] veth1_vlan: entered promiscuous mode [ 854.546915][T16553] veth0_macvtap: entered promiscuous mode [ 854.604956][T16553] veth1_macvtap: entered promiscuous mode [ 854.673980][ T4941] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 854.748434][T16553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.825517][T16553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.011495][T16876] FAULT_INJECTION: forcing a failure. [ 855.011495][T16876] name failslab, interval 1, probability 0, space 0, times 0 [ 855.036585][T16876] CPU: 1 UID: 0 PID: 16876 Comm: syz.3.2304 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.036633][T16876] Tainted: [L]=SOFTLOCKUP [ 855.036642][T16876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 855.036658][T16876] Call Trace: [ 855.036667][T16876] [ 855.036678][T16876] dump_stack_lvl+0x100/0x190 [ 855.036713][T16876] should_fail_ex.cold+0x5/0xa [ 855.036747][T16876] should_failslab+0xc2/0x120 [ 855.036783][T16876] __kmalloc_cache_noprof+0x91/0x6c0 [ 855.036808][T16876] ? kasan_save_track+0x14/0x30 [ 855.036840][T16876] ? __kasan_kmalloc+0xaa/0xb0 [ 855.036870][T16876] ? nfc_allocate_device+0x15b/0x5e0 [ 855.036903][T16876] nfc_allocate_device+0x15b/0x5e0 [ 855.036929][T16876] ? __init_swait_queue_head+0xca/0x150 [ 855.037026][T16876] nci_allocate_device+0x23b/0x410 [ 855.037062][T16876] virtual_ncidev_open+0x6f/0x220 [ 855.037102][T16876] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 855.037140][T16876] misc_open+0x26d/0x450 [ 855.037165][T16876] ? __pfx_misc_open+0x10/0x10 [ 855.037189][T16876] chrdev_open+0x234/0x6a0 [ 855.037215][T16876] ? __pfx_apparmor_file_open+0x10/0x10 [ 855.037243][T16876] ? __pfx_chrdev_open+0x10/0x10 [ 855.037270][T16876] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 855.037304][T16876] do_dentry_open+0x6ab/0x14d0 [ 855.037329][T16876] ? __pfx_chrdev_open+0x10/0x10 [ 855.037361][T16876] vfs_open+0x82/0x3f0 [ 855.037397][T16876] path_openat+0x2873/0x4280 [ 855.037443][T16876] ? __pfx_path_openat+0x10/0x10 [ 855.037477][T16876] do_file_open+0x20e/0x430 [ 855.037506][T16876] ? __pfx_do_file_open+0x10/0x10 [ 855.037554][T16876] ? alloc_fd+0x471/0x7a0 [ 855.037581][T16876] ? do_getname+0x191/0x390 [ 855.037615][T16876] do_sys_openat2+0x10f/0x1e0 [ 855.037648][T16876] ? __pfx_do_sys_openat2+0x10/0x10 [ 855.037682][T16876] ? __fget_files+0x21f/0x3d0 [ 855.037711][T16876] __x64_sys_openat+0x12d/0x210 [ 855.037745][T16876] ? __pfx___x64_sys_openat+0x10/0x10 [ 855.037790][T16876] do_syscall_64+0x115/0x840 [ 855.037811][T16876] ? clear_bhb_loop+0x40/0x90 [ 855.037875][T16876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.037919][T16876] RIP: 0033:0x7f557a79ce59 [ 855.037943][T16876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.037967][T16876] RSP: 002b:00007f557b60a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 855.037991][T16876] RAX: ffffffffffffffda RBX: 00007f557aa16090 RCX: 00007f557a79ce59 [ 855.038008][T16876] RDX: 0000000000000218 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 855.038024][T16876] RBP: 00007f557a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 855.038039][T16876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.038054][T16876] R13: 00007f557aa16128 R14: 00007f557aa16090 R15: 00007ffdac6c5088 [ 855.038085][T16876] [ 855.410257][ T7200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.419244][ T7200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.587336][ T7202] hsr_slave_0: left promiscuous mode [ 855.626113][ T7202] hsr_slave_1: left promiscuous mode [ 855.676787][ T7202] veth1_macvtap: left promiscuous mode [ 855.694138][ T7202] veth0_macvtap: left promiscuous mode [ 855.710088][ T7202] veth1_vlan: left promiscuous mode [ 855.726820][ T7202] veth0_vlan: left promiscuous mode [ 856.248733][ T7202] team0 (unregistering): Port device team_slave_1 removed [ 856.273112][ T7202] team0 (unregistering): Port device team_slave_0 removed [ 856.313690][ T4941] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 856.321551][ T4941] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 856.479074][ T7200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.501833][ T7200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.208278][ T5770] Process accounting resumed [ 857.731714][ T7201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.779667][ T7201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.040296][T16892] Process accounting resumed [ 858.360516][ T7198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.376216][ T7198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.625201][T16908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2308'. [ 859.717553][T12475] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 859.730600][T12475] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 859.747563][T12475] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 859.760867][T12475] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 859.771507][T12475] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 861.608430][T12475] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 861.616369][T12475] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 861.876644][T12475] Bluetooth: hci4: command tx timeout [ 862.255768][ T7200] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.478606][ T7200] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.692042][T16602] Process accounting resumed [ 862.725263][T16952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2313'. [ 862.856495][ T7200] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.339781][T16926] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.367781][T16926] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.382862][T16926] bridge_slave_0: entered allmulticast mode [ 863.407440][T16926] bridge_slave_0: entered promiscuous mode [ 863.426518][T16926] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.452496][T16926] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.462876][T16926] bridge_slave_1: entered allmulticast mode [ 863.485701][T16926] bridge_slave_1: entered promiscuous mode [ 863.642230][T16926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.667758][T16926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.950111][T16926] team0: Port device team_slave_0 added [ 863.967734][T12475] Bluetooth: hci4: command tx timeout [ 863.980130][T16926] team0: Port device team_slave_1 added [ 864.069864][T16975] openvswitch: netlink: Flow key attribute not present in set flow. [ 864.176674][ T7200] bridge_slave_1: left allmulticast mode [ 864.206349][ T7200] bridge_slave_1: left promiscuous mode [ 864.223657][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.248086][T16944] Process accounting resumed [ 864.739537][ T7200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.766808][ T7200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.794311][ T7200] bond0 (unregistering): Released all slaves [ 865.021413][T16926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.035717][T16926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.067941][T16926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.086502][T16926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.093574][T16926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.164317][T16926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.313526][ T7200] HfR: left promiscuous mode [ 865.814216][T16926] hsr_slave_0: entered promiscuous mode [ 865.824738][T16926] hsr_slave_1: entered promiscuous mode [ 866.035386][T12475] Bluetooth: hci4: command tx timeout [ 866.260461][T17021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2321'. [ 866.467417][T17015] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 867.480225][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 867.600537][T12475] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 867.608777][T12475] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 868.126192][T12475] Bluetooth: hci4: command tx timeout [ 868.604366][T16602] Process accounting resumed [ 868.827769][T17061] FAULT_INJECTION: forcing a failure. [ 868.827769][T17061] name failslab, interval 1, probability 0, space 0, times 0 [ 868.866537][T17061] CPU: 1 UID: 0 PID: 17061 Comm: syz.3.2329 Tainted: G L syzkaller #0 PREEMPT(full) [ 868.866596][T17061] Tainted: [L]=SOFTLOCKUP [ 868.866610][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 868.866631][T17061] Call Trace: [ 868.866644][T17061] [ 868.866659][T17061] dump_stack_lvl+0x100/0x190 [ 868.866713][T17061] should_fail_ex.cold+0x5/0xa [ 868.866763][T17061] should_failslab+0xc2/0x120 [ 868.866825][T17061] __kmalloc_cache_noprof+0x91/0x6c0 [ 868.866863][T17061] ? kasan_save_track+0x14/0x30 [ 868.866909][T17061] ? __kasan_kmalloc+0xaa/0xb0 [ 868.866955][T17061] ? nfc_allocate_device+0x15b/0x5e0 [ 868.867002][T17061] nfc_allocate_device+0x15b/0x5e0 [ 868.867037][T17061] ? __init_swait_queue_head+0xca/0x150 [ 868.867082][T17061] nci_allocate_device+0x23b/0x410 [ 868.867133][T17061] virtual_ncidev_open+0x6f/0x220 [ 868.867191][T17061] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 868.867246][T17061] misc_open+0x26d/0x450 [ 868.867281][T17061] ? __pfx_misc_open+0x10/0x10 [ 868.867316][T17061] chrdev_open+0x234/0x6a0 [ 868.867358][T17061] ? __pfx_apparmor_file_open+0x10/0x10 [ 868.867398][T17061] ? __pfx_chrdev_open+0x10/0x10 [ 868.867440][T17061] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 868.867492][T17061] do_dentry_open+0x6ab/0x14d0 [ 868.867529][T17061] ? __pfx_chrdev_open+0x10/0x10 [ 868.867576][T17061] vfs_open+0x82/0x3f0 [ 868.867627][T17061] path_openat+0x2873/0x4280 [ 868.867680][T17061] ? __pfx_path_openat+0x10/0x10 [ 868.867727][T17061] do_file_open+0x20e/0x430 [ 868.867766][T17061] ? __pfx_do_file_open+0x10/0x10 [ 868.867842][T17061] ? alloc_fd+0x471/0x7a0 [ 868.867882][T17061] ? do_getname+0x191/0x390 [ 868.867932][T17061] do_sys_openat2+0x10f/0x1e0 [ 868.867977][T17061] ? __pfx_do_sys_openat2+0x10/0x10 [ 868.868025][T17061] ? fdget_pos+0x2aa/0x380 [ 868.868070][T17061] __x64_sys_openat+0x12d/0x210 [ 868.868118][T17061] ? __pfx___x64_sys_openat+0x10/0x10 [ 868.868181][T17061] do_syscall_64+0x115/0x840 [ 868.868213][T17061] ? clear_bhb_loop+0x40/0x90 [ 868.868259][T17061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.868305][T17061] RIP: 0033:0x7f557a79ce59 [ 868.868337][T17061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.868373][T17061] RSP: 002b:00007f557b62b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 868.868407][T17061] RAX: ffffffffffffffda RBX: 00007f557aa15fa0 RCX: 00007f557a79ce59 [ 868.868432][T17061] RDX: 0000000000000200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 868.868456][T17061] RBP: 00007f557a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 868.868478][T17061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.868499][T17061] R13: 00007f557aa16038 R14: 00007f557aa15fa0 R15: 00007ffdac6c5088 [ 868.868544][T17061] [ 869.888987][T17051] Process accounting resumed [ 870.412656][T16926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 870.444341][T16926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.464457][T16926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 870.518135][T16926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.702160][T16926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 870.729565][T16926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.925803][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.925903][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.014706][T16926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 871.028882][T16926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 872.254583][T16926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.374775][T16926] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.385152][T17107] openvswitch: netlink: Flow key attribute not present in set flow. [ 872.452487][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.459851][ T7201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.888103][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.895374][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.953122][T17115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2336'. [ 875.041423][T17143] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2341'. [ 875.434104][ T7200] hsr_slave_0: left promiscuous mode [ 875.500556][ T7200] hsr_slave_1: left promiscuous mode [ 875.538876][ T7200] veth1_vlan: left promiscuous mode [ 875.549861][ T7200] veth0_vlan: left promiscuous mode [ 876.210135][ T7200] team0 (unregistering): Port device team_slave_1 removed [ 876.252340][ T7200] team0 (unregistering): Port device team_slave_0 removed [ 877.036066][T16926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.273927][T16926] veth0_vlan: entered promiscuous mode [ 877.311494][T17173] ubi9: attaching mtd2 [ 877.328834][T17173] ubi9 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67) [ 877.370259][T16926] veth1_vlan: entered promiscuous mode [ 877.749479][T12475] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 877.758025][T12475] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 877.945754][T17183] openvswitch: netlink: Flow key attribute not present in set flow. [ 878.452709][T16926] veth0_macvtap: entered promiscuous mode [ 878.532505][T16903] Process accounting resumed [ 878.549172][T16926] veth1_macvtap: entered promiscuous mode [ 878.886075][T17191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2350'. [ 879.012572][T16926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.102380][T16926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.185006][ T7200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.209061][ T7200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.328394][T17180] Process accounting resumed [ 879.358406][ T7200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.488311][ T7200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.321794][ T7200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.333069][ T7200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.580678][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.591934][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.413513][T17227] FAULT_INJECTION: forcing a failure. [ 882.413513][T17227] name failslab, interval 1, probability 0, space 0, times 0 [ 882.445470][T17227] CPU: 1 UID: 0 PID: 17227 Comm: syz.1.2355 Tainted: G L syzkaller #0 PREEMPT(full) [ 882.445515][T17227] Tainted: [L]=SOFTLOCKUP [ 882.445524][T17227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 882.445540][T17227] Call Trace: [ 882.445549][T17227] [ 882.445558][T17227] dump_stack_lvl+0x100/0x190 [ 882.445594][T17227] should_fail_ex.cold+0x5/0xa [ 882.445628][T17227] should_failslab+0xc2/0x120 [ 882.445664][T17227] __kmalloc_cache_noprof+0x91/0x6c0 [ 882.445688][T17227] ? __lock_acquire+0x49f/0x1a40 [ 882.445712][T17227] ? tty_open+0x139/0xfa0 [ 882.445754][T17227] ? __pfx_tty_open+0x10/0x10 [ 882.445788][T17227] tty_open+0x139/0xfa0 [ 882.445850][T17227] ? __pfx_tty_open+0x10/0x10 [ 882.445896][T17227] ? chrdev_open+0x10b/0x6a0 [ 882.445932][T17227] ? chrdev_open+0x10b/0x6a0 [ 882.445974][T17227] ? __pfx_tty_open+0x10/0x10 [ 882.446030][T17227] chrdev_open+0x234/0x6a0 [ 882.446055][T17227] ? __pfx_apparmor_file_open+0x10/0x10 [ 882.446084][T17227] ? __pfx_chrdev_open+0x10/0x10 [ 882.446111][T17227] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 882.446146][T17227] do_dentry_open+0x6ab/0x14d0 [ 882.446172][T17227] ? __pfx_chrdev_open+0x10/0x10 [ 882.446203][T17227] vfs_open+0x82/0x3f0 [ 882.446240][T17227] path_openat+0x2873/0x4280 [ 882.446279][T17227] ? __pfx_path_openat+0x10/0x10 [ 882.446312][T17227] do_file_open+0x20e/0x430 [ 882.446340][T17227] ? __pfx_do_file_open+0x10/0x10 [ 882.446386][T17227] ? alloc_fd+0x471/0x7a0 [ 882.446413][T17227] ? do_getname+0x191/0x390 [ 882.446447][T17227] do_sys_openat2+0x10f/0x1e0 [ 882.446480][T17227] ? __pfx_do_sys_openat2+0x10/0x10 [ 882.446515][T17227] ? do_raw_spin_lock+0x128/0x260 [ 882.446550][T17227] __x64_sys_openat+0x12d/0x210 [ 882.446584][T17227] ? __pfx___x64_sys_openat+0x10/0x10 [ 882.446629][T17227] do_syscall_64+0x115/0x840 [ 882.446652][T17227] ? clear_bhb_loop+0x40/0x90 [ 882.446682][T17227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.446708][T17227] RIP: 0033:0x7f956439ce59 [ 882.446729][T17227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.446759][T17227] RSP: 002b:00007f9565183028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 882.446784][T17227] RAX: ffffffffffffffda RBX: 00007f9564616090 RCX: 00007f956439ce59 [ 882.446801][T17227] RDX: 0000000000103e81 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 882.446817][T17227] RBP: 00007f9564432e6f R08: 0000000000000000 R09: 0000000000000000 [ 882.446833][T17227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.446848][T17227] R13: 00007f9564616128 R14: 00007f9564616090 R15: 00007ffd1d642e48 [ 882.446907][T17227] [ 883.017743][T17234] openvswitch: netlink: Flow key attribute not present in set flow. [ 883.382393][T17244] FAULT_INJECTION: forcing a failure. [ 883.382393][T17244] name failslab, interval 1, probability 0, space 0, times 0 [ 883.396290][T17244] CPU: 1 UID: 0 PID: 17244 Comm: syz.0.2360 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.396344][T17244] Tainted: [L]=SOFTLOCKUP [ 883.396355][T17244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 883.396373][T17244] Call Trace: [ 883.396384][T17244] [ 883.396396][T17244] dump_stack_lvl+0x100/0x190 [ 883.396444][T17244] should_fail_ex.cold+0x5/0xa [ 883.396486][T17244] should_failslab+0xc2/0x120 [ 883.396534][T17244] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 883.396581][T17244] ? nvmet_root_discovery_nqn_store+0x5f/0x1d0 [ 883.396650][T17244] kstrndup+0x64/0x120 [ 883.396697][T17244] nvmet_root_discovery_nqn_store+0x5f/0x1d0 [ 883.396763][T17244] configfs_write_iter+0x302/0x4e0 [ 883.396807][T17244] do_iter_readv_writev+0x6f7/0x930 [ 883.396866][T17244] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 883.396941][T17244] vfs_writev+0x360/0xdd0 [ 883.396998][T17244] ? rcu_is_watching+0x12/0xc0 [ 883.397044][T17244] ? trace_contention_end+0x126/0x160 [ 883.397085][T17244] ? __pfx_vfs_writev+0x10/0x10 [ 883.397155][T17244] ? rcu_read_lock_any_held+0x6a/0xa0 [ 883.397232][T17244] ? __fget_files+0x21f/0x3d0 [ 883.397275][T17244] ? do_writev+0x13e/0x340 [ 883.397324][T17244] do_writev+0x13e/0x340 [ 883.397378][T17244] ? __pfx_do_writev+0x10/0x10 [ 883.397441][T17244] do_syscall_64+0x115/0x840 [ 883.397473][T17244] ? clear_bhb_loop+0x40/0x90 [ 883.397517][T17244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.397551][T17244] RIP: 0033:0x7f28d4f9ce59 [ 883.397581][T17244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.397614][T17244] RSP: 002b:00007f28d5e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 883.397648][T17244] RAX: ffffffffffffffda RBX: 00007f28d5215fa0 RCX: 00007f28d4f9ce59 [ 883.397671][T17244] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 883.397691][T17244] RBP: 00007f28d5032e6f R08: 0000000000000000 R09: 0000000000000000 [ 883.397714][T17244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.397735][T17244] R13: 00007f28d5216038 R14: 00007f28d5215fa0 R15: 00007fff1a44d648 [ 883.397779][T17244] [ 883.398216][ T30] audit: type=1800 audit(4294967620.068:48): pid=17244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2360" name="discovery_nqn" dev="configfs" ino=82992 res=0 errno=0 [ 883.882143][T17250] FAULT_INJECTION: forcing a failure. [ 883.882143][T17250] name failslab, interval 1, probability 0, space 0, times 0 [ 883.915910][T17250] CPU: 1 UID: 0 PID: 17250 Comm: syz.0.2361 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.915971][T17250] Tainted: [L]=SOFTLOCKUP [ 883.915986][T17250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 883.916010][T17250] Call Trace: [ 883.916023][T17250] [ 883.916038][T17250] dump_stack_lvl+0x100/0x190 [ 883.916095][T17250] should_fail_ex.cold+0x5/0xa [ 883.916148][T17250] should_failslab+0xc2/0x120 [ 883.916207][T17250] __kmalloc_cache_noprof+0x91/0x6c0 [ 883.916248][T17250] ? kasan_save_track+0x14/0x30 [ 883.916299][T17250] ? __kasan_kmalloc+0xaa/0xb0 [ 883.916349][T17250] ? nfc_allocate_device+0x15b/0x5e0 [ 883.916400][T17250] nfc_allocate_device+0x15b/0x5e0 [ 883.916439][T17250] ? __init_swait_queue_head+0xca/0x150 [ 883.916489][T17250] nci_allocate_device+0x23b/0x410 [ 883.916549][T17250] virtual_ncidev_open+0x6f/0x220 [ 883.916622][T17250] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 883.916684][T17250] misc_open+0x26d/0x450 [ 883.916733][T17250] ? __pfx_misc_open+0x10/0x10 [ 883.916773][T17250] chrdev_open+0x234/0x6a0 [ 883.916813][T17250] ? __pfx_apparmor_file_open+0x10/0x10 [ 883.916861][T17250] ? __pfx_chrdev_open+0x10/0x10 [ 883.916906][T17250] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 883.916963][T17250] do_dentry_open+0x6ab/0x14d0 [ 883.917003][T17250] ? __pfx_chrdev_open+0x10/0x10 [ 883.917054][T17250] vfs_open+0x82/0x3f0 [ 883.917111][T17250] path_openat+0x2873/0x4280 [ 883.917172][T17250] ? __pfx_path_openat+0x10/0x10 [ 883.917226][T17250] do_file_open+0x20e/0x430 [ 883.917273][T17250] ? __pfx_do_file_open+0x10/0x10 [ 883.917346][T17250] ? alloc_fd+0x471/0x7a0 [ 883.917389][T17250] ? do_getname+0x191/0x390 [ 883.917440][T17250] do_sys_openat2+0x10f/0x1e0 [ 883.917495][T17250] ? __pfx_do_sys_openat2+0x10/0x10 [ 883.917554][T17250] ? __fget_files+0x21f/0x3d0 [ 883.917612][T17250] __x64_sys_openat+0x12d/0x210 [ 883.917670][T17250] ? __pfx___x64_sys_openat+0x10/0x10 [ 883.917745][T17250] do_syscall_64+0x115/0x840 [ 883.917782][T17250] ? clear_bhb_loop+0x40/0x90 [ 883.917833][T17250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.917875][T17250] RIP: 0033:0x7f28d4f9ce59 [ 883.917908][T17250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.917948][T17250] RSP: 002b:00007f28d5e75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 883.917986][T17250] RAX: ffffffffffffffda RBX: 00007f28d5216090 RCX: 00007f28d4f9ce59 [ 883.918013][T17250] RDX: 0000000000000200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 883.918039][T17250] RBP: 00007f28d5032e6f R08: 0000000000000000 R09: 0000000000000000 [ 883.918064][T17250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.918088][T17250] R13: 00007f28d5216128 R14: 00007f28d5216090 R15: 00007fff1a44d648 [ 883.918139][T17250] [ 884.410434][T17254] blktrace: Concurrent blktraces are not allowed on loop8 [ 885.268901][T17262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2364'. [ 885.285771][T17262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.305802][T17262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.339757][T17262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.353256][T17262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.701271][T17275] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 886.688065][T17286] openvswitch: netlink: Flow key attribute not present in set flow. [ 887.811814][T17315] FAULT_INJECTION: forcing a failure. [ 887.811814][T17315] name failslab, interval 1, probability 0, space 0, times 0 [ 887.856474][T17315] CPU: 0 UID: 0 PID: 17315 Comm: syz.0.2384 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.856514][T17315] Tainted: [L]=SOFTLOCKUP [ 887.856523][T17315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 887.856539][T17315] Call Trace: [ 887.856548][T17315] [ 887.856558][T17315] dump_stack_lvl+0x100/0x190 [ 887.856594][T17315] should_fail_ex.cold+0x5/0xa [ 887.856628][T17315] should_failslab+0xc2/0x120 [ 887.856665][T17315] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 887.856747][T17315] ? debug_string_to_mask+0x81/0x560 [ 887.856816][T17315] kstrdup+0x51/0xe0 [ 887.856848][T17315] debug_string_to_mask+0x81/0x560 [ 887.856888][T17315] ? find_held_lock+0x2b/0x80 [ 887.856920][T17315] ? __might_fault+0xc5/0x140 [ 887.856960][T17315] ? __pfx_debug_string_to_mask+0x10/0x10 [ 887.857004][T17315] ? _copy_from_user+0x59/0xd0 [ 887.857044][T17315] orangefs_debug_write+0x499/0x640 [ 887.857088][T17315] ? __pfx_orangefs_debug_write+0x10/0x10 [ 887.857129][T17315] ? __debugfs_file_get+0x1fc/0x860 [ 887.857156][T17315] ? __pfx___debugfs_file_get+0x10/0x10 [ 887.857191][T17315] full_proxy_write+0x135/0x1a0 [ 887.857221][T17315] vfs_write+0x2aa/0x1050 [ 887.857249][T17315] ? __pfx_full_proxy_write+0x10/0x10 [ 887.857278][T17315] ? __pfx_vfs_write+0x10/0x10 [ 887.857303][T17315] ? __pfx_do_futex+0x10/0x10 [ 887.857329][T17315] ? __pfx_do_sys_openat2+0x10/0x10 [ 887.857371][T17315] ? __x64_sys_futex+0x34f/0x4d0 [ 887.857397][T17315] ? __x64_sys_futex+0x358/0x4d0 [ 887.857429][T17315] ksys_write+0x12a/0x250 [ 887.857456][T17315] ? __pfx_ksys_write+0x10/0x10 [ 887.857488][T17315] do_syscall_64+0x115/0x840 [ 887.857510][T17315] ? clear_bhb_loop+0x40/0x90 [ 887.857540][T17315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.857565][T17315] RIP: 0033:0x7f28d4f9ce59 [ 887.857586][T17315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.857610][T17315] RSP: 002b:00007f28d5e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 887.857634][T17315] RAX: ffffffffffffffda RBX: 00007f28d5215fa0 RCX: 00007f28d4f9ce59 [ 887.857651][T17315] RDX: 00000000a0000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 887.857667][T17315] RBP: 00007f28d5032e6f R08: 0000000000000000 R09: 0000000000000000 [ 887.857683][T17315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.857698][T17315] R13: 00007f28d5216038 R14: 00007f28d5215fa0 R15: 00007fff1a44d648 [ 887.857735][T17315] [ 888.918378][ T30] audit: type=1800 audit(4294967625.602:49): pid=17327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2375" name="discovery_nqn" dev="configfs" ino=82519 res=0 errno=0 [ 889.074494][T17334] openvswitch: netlink: Flow key attribute not present in set flow. [ 889.121674][T17339] random: crng reseeded on system resumption [ 889.597390][T17314] FAULT_INJECTION: forcing a failure. [ 889.597390][T17314] name failslab, interval 1, probability 0, space 0, times 0 [ 889.642684][T17314] CPU: 0 UID: 0 PID: 17314 Comm: syz.3.2375 Tainted: G L syzkaller #0 PREEMPT(full) [ 889.642757][T17314] Tainted: [L]=SOFTLOCKUP [ 889.642771][T17314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 889.642792][T17314] Call Trace: [ 889.642804][T17314] [ 889.642818][T17314] dump_stack_lvl+0x100/0x190 [ 889.642871][T17314] should_fail_ex.cold+0x5/0xa [ 889.642921][T17314] should_failslab+0xc2/0x120 [ 889.642973][T17314] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 889.643025][T17314] ? nvmet_root_discovery_nqn_store+0x5f/0x1d0 [ 889.643096][T17314] kstrndup+0x64/0x120 [ 889.643140][T17314] nvmet_root_discovery_nqn_store+0x5f/0x1d0 [ 889.643207][T17314] configfs_write_iter+0x302/0x4e0 [ 889.643251][T17314] do_iter_readv_writev+0x6f7/0x930 [ 889.643312][T17314] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 889.643389][T17314] vfs_writev+0x360/0xdd0 [ 889.643446][T17314] ? rcu_is_watching+0x12/0xc0 [ 889.643492][T17314] ? trace_contention_end+0x126/0x160 [ 889.643534][T17314] ? __pfx_vfs_writev+0x10/0x10 [ 889.643622][T17314] ? __fget_files+0x21f/0x3d0 [ 889.643669][T17314] ? do_writev+0x13e/0x340 [ 889.643731][T17314] do_writev+0x13e/0x340 [ 889.643790][T17314] ? __pfx_do_writev+0x10/0x10 [ 889.643866][T17314] do_syscall_64+0x115/0x840 [ 889.643901][T17314] ? clear_bhb_loop+0x40/0x90 [ 889.643947][T17314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.643985][T17314] RIP: 0033:0x7f557a79ce59 [ 889.644015][T17314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.644057][T17314] RSP: 002b:00007f557b5e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 889.644090][T17314] RAX: ffffffffffffffda RBX: 00007f557aa16180 RCX: 00007f557a79ce59 [ 889.644107][T17314] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000006 [ 889.644123][T17314] RBP: 00007f557a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 889.644138][T17314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.644154][T17314] R13: 00007f557aa16218 R14: 00007f557aa16180 R15: 00007ffdac6c5088 [ 889.644187][T17314] [ 890.527044][T17359] FAULT_INJECTION: forcing a failure. [ 890.527044][T17359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.540553][T17359] CPU: 0 UID: 0 PID: 17359 Comm: syz.2.2385 Tainted: G L syzkaller #0 PREEMPT(full) [ 890.540606][T17359] Tainted: [L]=SOFTLOCKUP [ 890.540620][T17359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 890.540642][T17359] Call Trace: [ 890.540653][T17359] [ 890.540667][T17359] dump_stack_lvl+0x100/0x190 [ 890.540726][T17359] should_fail_ex.cold+0x5/0xa [ 890.540774][T17359] _copy_to_iter+0x5a4/0x1720 [ 890.540835][T17359] ? __pfx__copy_to_iter+0x10/0x10 [ 890.540891][T17359] ? __pfx___might_resched+0x10/0x10 [ 890.540945][T17359] ? crng_make_state+0x2b0/0x6c0 [ 890.541005][T17359] get_random_bytes_user+0x17b/0x3d0 [ 890.541070][T17359] ? __pfx_get_random_bytes_user+0x10/0x10 [ 890.541156][T17359] do_iter_readv_writev+0x616/0x930 [ 890.541214][T17359] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 890.541276][T17359] ? bpf_lsm_file_permission+0x9/0x10 [ 890.541309][T17359] ? security_file_permission+0x76/0x210 [ 890.541358][T17359] ? rw_verify_area+0xce/0x6d0 [ 890.541413][T17359] vfs_readv+0x4d3/0x8d0 [ 890.541476][T17359] ? __pfx_vfs_readv+0x10/0x10 [ 890.541569][T17359] ? __fget_files+0x21f/0x3d0 [ 890.541613][T17359] ? do_readv+0x13e/0x340 [ 890.541665][T17359] do_readv+0x13e/0x340 [ 890.541726][T17359] ? __pfx_do_readv+0x10/0x10 [ 890.541792][T17359] do_syscall_64+0x115/0x840 [ 890.541825][T17359] ? clear_bhb_loop+0x40/0x90 [ 890.541868][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.541905][T17359] RIP: 0033:0x7f121d39ce59 [ 890.541934][T17359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.541968][T17359] RSP: 002b:00007f121e189028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 890.542002][T17359] RAX: ffffffffffffffda RBX: 00007f121d615fa0 RCX: 00007f121d39ce59 [ 890.542026][T17359] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000006 [ 890.542049][T17359] RBP: 00007f121d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 890.542071][T17359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.542092][T17359] R13: 00007f121d616038 R14: 00007f121d615fa0 R15: 00007ffdebf54798 [ 890.542137][T17359] [ 890.972129][T12475] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 890.987056][T12475] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 891.620580][T17374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2389'. [ 891.862639][ T5774] Process accounting resumed [ 892.521602][T17383] openvswitch: netlink: Flow key attribute not present in set flow. [ 892.761506][T17362] Process accounting resumed [ 893.184063][ T4941] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 894.533568][T17403] Process accounting paused [ 895.793799][ T4941] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 895.802113][ T4941] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 895.850558][T17427] openvswitch: netlink: Flow key attribute not present in set flow. [ 896.760373][ T29] Process accounting resumed [ 897.148391][T17429] Process accounting resumed [ 899.626019][ T4941] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 899.635107][ T4941] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 900.630563][ T5770] Process accounting resumed [ 901.604517][T17482] Process accounting resumed [ 902.263552][T12475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 902.279832][T12475] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 902.290622][T12475] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 902.299038][T12475] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 902.308030][T12475] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 903.860883][ T198] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.148240][ T198] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.396965][T12475] Bluetooth: hci0: command tx timeout [ 904.421120][ T198] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.617199][ T198] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.568863][ T198] bridge_slave_1: left allmulticast mode [ 905.568944][ T198] bridge_slave_1: left promiscuous mode [ 905.569206][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.604360][ T198] bridge_slave_0: left allmulticast mode [ 905.604400][ T198] bridge_slave_0: left promiscuous mode [ 905.604675][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.159673][T12475] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 906.159732][T12475] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 906.242219][ T198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.278767][ T198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.290588][ T198] bond0 (unregistering): Released all slaves [ 906.386743][ T198] HfR: left promiscuous mode [ 906.477553][T12475] Bluetooth: hci0: command tx timeout [ 906.699992][ T198] tipc: Left network mode [ 907.103985][T12475] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 907.111767][T12475] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 907.454437][ T5704] Process accounting resumed [ 907.502631][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 907.520359][T17516] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.544424][T17516] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.573833][T17516] bridge_slave_0: entered allmulticast mode [ 907.594553][T17516] bridge_slave_0: entered promiscuous mode [ 907.624054][T17516] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.642156][T17516] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.668926][T17516] bridge_slave_1: entered allmulticast mode [ 907.679359][T17516] bridge_slave_1: entered promiscuous mode [ 908.316864][T17516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.326444][ T29] Process accounting resumed [ 908.552263][T17516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.561491][T12475] Bluetooth: hci0: command tx timeout [ 908.733280][T17516] team0: Port device team_slave_0 added [ 908.762595][T17516] team0: Port device team_slave_1 added [ 909.002109][T17578] Process accounting resumed [ 909.085712][T17516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.118805][T17516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.195070][T17516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.240615][T17516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.265622][T17516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.311843][T17516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.924669][T17516] hsr_slave_0: entered promiscuous mode [ 909.941481][T17516] hsr_slave_1: entered promiscuous mode [ 909.958833][T17516] debugfs: 'hsr0' already exists in 'hsr' [ 909.978877][T17516] Cannot create hsr debugfs directory [ 910.193072][T17622] vhci_hcd vhci_hcd.2: invalid port number 16 [ 910.200919][T17622] vhci_hcd vhci_hcd.2: invalid port number 16 [ 910.416714][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 910.601052][T17448] Process accounting resumed [ 910.641680][T12475] Bluetooth: hci0: command tx timeout [ 910.673502][T17636] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 912.498057][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 912.838230][T17661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2433'. [ 913.871364][T17671] FAULT_INJECTION: forcing a failure. [ 913.871364][T17671] name fail_futex, interval 1, probability 0, space 0, times 0 [ 913.912628][T17671] CPU: 1 UID: 0 PID: 17671 Comm: syz.0.2434 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.912688][T17671] Tainted: [L]=SOFTLOCKUP [ 913.912703][T17671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 913.912725][T17671] Call Trace: [ 913.912737][T17671] [ 913.912751][T17671] dump_stack_lvl+0x100/0x190 [ 913.912805][T17671] should_fail_ex.cold+0x5/0xa [ 913.912846][T17671] ? kasan_save_track+0x14/0x30 [ 913.912897][T17671] get_futex_key+0x1d2/0x14f0 [ 913.912945][T17671] ? __pfx_get_futex_key+0x10/0x10 [ 913.912997][T17671] futex_wait_setup+0x91/0x540 [ 913.913058][T17671] __futex_wait+0x19f/0x300 [ 913.913110][T17671] ? __pfx___futex_wait+0x10/0x10 [ 913.913169][T17671] ? futex_hash+0x311/0x400 [ 913.913208][T17671] ? __pfx_futex_wake_mark+0x10/0x10 [ 913.913264][T17671] ? __pfx_futex_hash+0x10/0x10 [ 913.913297][T17671] ? orangefs_debug_write+0x41e/0x640 [ 913.913365][T17671] futex_wait+0xe6/0x370 [ 913.913415][T17671] ? __pfx_futex_wait+0x10/0x10 [ 913.913462][T17671] ? find_held_lock+0x2b/0x80 [ 913.913519][T17671] ? rcu_read_lock_any_held+0x6a/0xa0 [ 913.913569][T17671] ? vfs_write+0x15d/0x1050 [ 913.913618][T17671] do_futex+0x265/0x440 [ 913.913660][T17671] ? __pfx_do_futex+0x10/0x10 [ 913.913698][T17671] ? __pfx_do_sys_openat2+0x10/0x10 [ 913.913759][T17671] __x64_sys_futex+0x34f/0x4d0 [ 913.913807][T17671] ? __pfx___x64_sys_futex+0x10/0x10 [ 913.913847][T17671] ? ksys_write+0x1ac/0x250 [ 913.913880][T17671] ? __pfx_ksys_write+0x10/0x10 [ 913.913926][T17671] do_syscall_64+0x115/0x840 [ 913.913959][T17671] ? clear_bhb_loop+0x40/0x90 [ 913.914003][T17671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.914040][T17671] RIP: 0033:0x7f28d4f9ce59 [ 913.914069][T17671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.914105][T17671] RSP: 002b:00007f28d5e960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 913.914139][T17671] RAX: ffffffffffffffda RBX: 00007f28d5215fa8 RCX: 00007f28d4f9ce59 [ 913.914163][T17671] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f28d5215fa8 [ 913.914186][T17671] RBP: 00007f28d5215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 913.914207][T17671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.914228][T17671] R13: 00007f28d5216038 R14: 00007fff1a44d560 R15: 00007fff1a44d648 [ 913.914272][T17671] [ 914.910634][T17680] tipc: Started in network mode [ 914.916834][T17680] tipc: Node identity ee00, cluster identity 4711 [ 914.933632][T17680] tipc: Node number set to 60928 [ 915.245144][T12475] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 915.253287][T12475] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 915.955593][ T198] hsr_slave_0: left promiscuous mode [ 915.971815][ T198] hsr_slave_1: left promiscuous mode [ 916.034487][ T198] veth1_macvtap: left promiscuous mode [ 916.053709][ T198] veth0_macvtap: left promiscuous mode [ 916.071861][ T198] veth1_vlan: left promiscuous mode [ 916.086041][ T198] veth0_vlan: left promiscuous mode [ 916.870395][T16903] Process accounting resumed [ 916.985529][ T198] team0 (unregistering): Port device team_slave_1 removed [ 917.038870][ T198] team0 (unregistering): Port device team_slave_0 removed [ 928.682541][ T4941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 928.701983][ T4941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 928.711221][ T4941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 928.719989][ T4941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 928.727727][ T4941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 929.908139][T17771] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.927556][T17771] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.938982][T17771] bridge_slave_0: entered allmulticast mode [ 929.947534][T17771] bridge_slave_0: entered promiscuous mode [ 929.956518][T17771] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.963753][T17771] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.971071][T17771] bridge_slave_1: entered allmulticast mode [ 929.978805][T17771] bridge_slave_1: entered promiscuous mode [ 930.093754][T17771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.107658][T17771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.159502][T17771] team0: Port device team_slave_0 added [ 930.169504][T17771] team0: Port device team_slave_1 added [ 930.208351][T17771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.215749][T17771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.243543][T17771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.256721][T17771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.264019][T17771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.290145][T17771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.355153][T17771] hsr_slave_0: entered promiscuous mode [ 930.363221][T17771] hsr_slave_1: entered promiscuous mode [ 930.369894][T17771] debugfs: 'hsr0' already exists in 'hsr' [ 930.376308][T17771] Cannot create hsr debugfs directory [ 930.513208][T16926] Process accounting resumed [ 930.704547][ T4941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 930.725617][ T4941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 930.735482][ T4941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 930.744305][ T4941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 930.754608][ T4941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 930.821915][ T4941] Bluetooth: hci3: command tx timeout [ 932.046655][T17799] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.064783][T17799] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.086585][T17799] bridge_slave_0: entered allmulticast mode [ 932.101144][T17799] bridge_slave_0: entered promiscuous mode [ 932.124477][T17799] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.142839][T17799] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.150265][T17799] bridge_slave_1: entered allmulticast mode [ 932.165637][T17799] bridge_slave_1: entered promiscuous mode [ 932.221705][T17818] Process accounting paused [ 932.222923][T17799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.328887][T17799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.385658][T17799] team0: Port device team_slave_0 added [ 932.409874][T17799] team0: Port device team_slave_1 added [ 932.444867][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.452453][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.460509][T17799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.467870][T17799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.498275][T17799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.518627][T17799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.525757][T17799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.552815][T17799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.656036][T17799] hsr_slave_0: entered promiscuous mode [ 932.662831][T17799] hsr_slave_1: entered promiscuous mode [ 932.673221][T17799] debugfs: 'hsr0' already exists in 'hsr' [ 932.679033][T17799] Cannot create hsr debugfs directory [ 932.823488][ T4941] Bluetooth: hci2: command tx timeout [ 932.904035][ T4941] Bluetooth: hci3: command tx timeout [ 933.308121][T17837] openvswitch: netlink: Flow key attribute not present in set flow. [ 934.907095][ T4941] Bluetooth: hci2: command tx timeout [ 934.986936][ T4941] Bluetooth: hci3: command tx timeout [ 935.318130][T17850] openvswitch: netlink: Flow key attribute not present in set flow. [ 936.987210][ T4941] Bluetooth: hci2: command tx timeout [ 937.067525][ T4941] Bluetooth: hci3: command tx timeout [ 939.069185][ T4941] Bluetooth: hci2: command tx timeout [ 940.411469][T17890] FAULT_INJECTION: forcing a failure. [ 940.411469][T17890] name failslab, interval 1, probability 0, space 0, times 0 [ 940.432208][T17890] CPU: 0 UID: 0 PID: 17890 Comm: syz.2.2462 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.432260][T17890] Tainted: [L]=SOFTLOCKUP [ 940.432272][T17890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 940.432292][T17890] Call Trace: [ 940.432303][T17890] [ 940.432316][T17890] dump_stack_lvl+0x100/0x190 [ 940.432367][T17890] should_fail_ex.cold+0x5/0xa [ 940.432417][T17890] ? __pfx_mqueue_fill_super+0x10/0x10 [ 940.432473][T17890] should_failslab+0xc2/0x120 [ 940.432521][T17890] ? __pfx_mqueue_fill_super+0x10/0x10 [ 940.432577][T17890] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 940.432616][T17890] ? do_raw_spin_unlock+0x145/0x1e0 [ 940.432651][T17890] ? __d_alloc+0x35/0xa50 [ 940.432688][T17890] ? __pfx_mqueue_fill_super+0x10/0x10 [ 940.432735][T17890] __d_alloc+0x35/0xa50 [ 940.432766][T17890] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 940.432797][T17890] ? __pfx_mqueue_fill_super+0x10/0x10 [ 940.432844][T17890] d_make_root+0x3e/0x90 [ 940.432879][T17890] mqueue_fill_super+0x175/0x260 [ 940.432928][T17890] get_tree_nodev+0xdd/0x190 [ 940.432976][T17890] mqueue_get_tree+0xf1/0x130 [ 940.433023][T17890] vfs_get_tree+0x92/0x320 [ 940.433065][T17890] fc_mount_longterm+0x1a/0x270 [ 940.433111][T17890] mq_init_ns+0x482/0x820 [ 940.433145][T17890] copy_ipcs+0x3dd/0x7e0 [ 940.433180][T17890] create_new_namespaces+0x20a/0xac0 [ 940.433214][T17890] ? security_capable+0x80/0x260 [ 940.433247][T17890] unshare_nsproxy_namespaces+0xf2/0x220 [ 940.433283][T17890] ksys_unshare+0x438/0xab0 [ 940.433325][T17890] ? __pfx_ksys_unshare+0x10/0x10 [ 940.433376][T17890] __x64_sys_unshare+0x31/0x40 [ 940.433422][T17890] do_syscall_64+0x115/0x840 [ 940.433453][T17890] ? clear_bhb_loop+0x40/0x90 [ 940.433490][T17890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.433522][T17890] RIP: 0033:0x7f121d39ce59 [ 940.433546][T17890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.433576][T17890] RSP: 002b:00007f121b5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 940.433623][T17890] RAX: ffffffffffffffda RBX: 00007f121d616090 RCX: 00007f121d39ce59 [ 940.433643][T17890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 940.433661][T17890] RBP: 00007f121d432e6f R08: 0000000000000000 R09: 0000000000000000 [ 940.433680][T17890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.433698][T17890] R13: 00007f121d616128 R14: 00007f121d616090 R15: 00007ffdebf54798 [ 940.433738][T17890] [ 962.113189][T12475] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 962.123444][T12475] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 962.136606][T12475] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 962.146575][T12475] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 962.154920][T12475] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 962.699572][T17896] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.706891][T17896] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.714206][T17896] bridge_slave_0: entered allmulticast mode [ 962.721772][T17896] bridge_slave_0: entered promiscuous mode [ 962.731629][T17896] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.738845][T17896] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.746294][T17896] bridge_slave_1: entered allmulticast mode [ 962.754291][T17896] bridge_slave_1: entered promiscuous mode [ 962.786410][T17896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.798731][T17896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.833768][T17896] team0: Port device team_slave_0 added [ 962.842377][T17896] team0: Port device team_slave_1 added [ 962.870970][T17896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.878211][T17896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.904341][T17896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.916738][T17896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.924119][T17896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.951190][T17896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.000529][T17896] hsr_slave_0: entered promiscuous mode [ 963.007124][T17896] hsr_slave_1: entered promiscuous mode [ 963.013759][T17896] debugfs: 'hsr0' already exists in 'hsr' [ 963.019507][T17896] Cannot create hsr debugfs directory [ 964.212511][ T4941] Bluetooth: hci5: command tx timeout [ 966.294434][ T4941] Bluetooth: hci5: command tx timeout [ 968.376302][ T4941] Bluetooth: hci5: command tx timeout [ 970.458052][ T4941] Bluetooth: hci5: command tx timeout [ 985.751657][ T4941] Bluetooth: hci4: command 0x0406 tx timeout [ 989.137234][ T4941] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 989.150985][ T4941] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 989.159492][ T4941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 989.167782][ T4941] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 989.176742][ T4941] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 989.742738][T17921] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.750025][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.757431][T17921] bridge_slave_0: entered allmulticast mode [ 989.765247][T17921] bridge_slave_0: entered promiscuous mode [ 989.773722][T17921] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.781020][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.789538][T17921] bridge_slave_1: entered allmulticast mode [ 989.797801][T17921] bridge_slave_1: entered promiscuous mode [ 989.829388][T17921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.841974][T17921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.875627][T17921] team0: Port device team_slave_0 added [ 989.883741][T17921] team0: Port device team_slave_1 added [ 989.913975][T17921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.921401][T17921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.947451][T17921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.960562][T17921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.967601][T17921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.994547][T17921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.043313][T17921] hsr_slave_0: entered promiscuous mode [ 990.050354][T17921] hsr_slave_1: entered promiscuous mode [ 990.056839][T17921] debugfs: 'hsr0' already exists in 'hsr' [ 990.062607][T17921] Cannot create hsr debugfs directory [ 991.130847][ T4941] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 991.142980][ T4941] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 991.151394][ T4941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 991.160307][ T4941] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 991.169646][ T4941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 991.196280][T12475] Bluetooth: hci6: command tx timeout [ 991.727332][T17940] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.735551][T17940] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.742984][T17940] bridge_slave_0: entered allmulticast mode [ 991.750607][T17940] bridge_slave_0: entered promiscuous mode [ 991.759405][T17940] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.766868][T17940] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.774271][T17940] bridge_slave_1: entered allmulticast mode [ 991.781990][T17940] bridge_slave_1: entered promiscuous mode [ 991.816066][T17940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.828694][T17940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.864323][T17940] team0: Port device team_slave_0 added [ 991.872879][T17940] team0: Port device team_slave_1 added [ 991.901795][T17940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.908911][T17940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.935012][T17940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.949512][T17940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.956477][T17940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.982537][T17940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.032042][T17940] hsr_slave_0: entered promiscuous mode [ 992.039410][T17940] hsr_slave_1: entered promiscuous mode [ 992.046706][T17940] debugfs: 'hsr0' already exists in 'hsr' [ 992.052560][T17940] Cannot create hsr debugfs directory [ 993.198009][T12475] Bluetooth: hci7: command tx timeout [ 993.288395][T12475] Bluetooth: hci6: command tx timeout [ 993.922356][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.929367][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.279811][T12475] Bluetooth: hci7: command tx timeout [ 995.359982][T12475] Bluetooth: hci6: command tx timeout [ 997.361534][T12475] Bluetooth: hci7: command tx timeout [ 997.451580][T12475] Bluetooth: hci6: command tx timeout [ 999.443348][T12475] Bluetooth: hci7: command tx timeout [ 1023.166519][ T4941] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1023.183797][ T4941] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1023.193103][ T4941] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1023.203395][ T4941] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1023.211231][ T4941] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1023.770402][T17958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.777648][T17958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.785436][T17958] bridge_slave_0: entered allmulticast mode [ 1023.793012][T17958] bridge_slave_0: entered promiscuous mode [ 1023.801645][T17958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.808874][T17958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.816867][T17958] bridge_slave_1: entered allmulticast mode [ 1023.825146][T17958] bridge_slave_1: entered promiscuous mode [ 1023.858255][T17958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.870785][T17958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.904819][T17958] team0: Port device team_slave_0 added [ 1023.913101][T17958] team0: Port device team_slave_1 added [ 1023.943089][T17958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.950218][T17958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.976342][T17958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.988962][T17958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.995996][T17958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.022824][T17958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.073590][T17958] hsr_slave_0: entered promiscuous mode [ 1024.080222][T17958] hsr_slave_1: entered promiscuous mode [ 1024.086784][T17958] debugfs: 'hsr0' already exists in 'hsr' [ 1024.092538][T17958] Cannot create hsr debugfs directory [ 1025.305129][T12475] Bluetooth: hci8: command tx timeout [ 1026.746014][T17976] Bluetooth: hci0: command 0x0406 tx timeout [ 1027.386638][ T4941] Bluetooth: hci8: command tx timeout [ 1029.468372][ T4941] Bluetooth: hci8: command tx timeout [ 1031.550360][ T4941] Bluetooth: hci8: command tx timeout [ 1049.196127][T17976] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1049.210541][T17976] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1049.218776][T17976] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1049.226897][T17976] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1049.240503][T17976] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1049.809024][T17983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.816408][T17983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.823944][T17983] bridge_slave_0: entered allmulticast mode [ 1049.831978][T17983] bridge_slave_0: entered promiscuous mode [ 1049.841007][T17983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.849282][T17983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.857047][T17983] bridge_slave_1: entered allmulticast mode [ 1049.864998][T17983] bridge_slave_1: entered promiscuous mode [ 1049.899598][T17983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.911944][T17983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.948133][T17983] team0: Port device team_slave_0 added [ 1049.957151][T17983] team0: Port device team_slave_1 added [ 1049.987162][T17983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.994150][T17983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.020133][T17983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.032721][T17983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.039757][T17983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.067056][T17983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.115780][T17983] hsr_slave_0: entered promiscuous mode [ 1050.122478][T17983] hsr_slave_1: entered promiscuous mode [ 1050.129386][T17983] debugfs: 'hsr0' already exists in 'hsr' [ 1050.135217][T17983] Cannot create hsr debugfs directory [ 1051.326158][ T4941] Bluetooth: hci9: command tx timeout [ 1051.705562][T17898] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1051.714195][T17898] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1051.722913][T17898] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1051.732506][T17898] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1051.742422][T17898] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1052.307911][T18003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.315292][T18003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.322994][T18003] bridge_slave_0: entered allmulticast mode [ 1052.331341][T18003] bridge_slave_0: entered promiscuous mode [ 1052.340262][T18003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.347618][T18003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.355100][T18003] bridge_slave_1: entered allmulticast mode [ 1052.363235][T18003] bridge_slave_1: entered promiscuous mode [ 1052.372277][ T4941] Bluetooth: hci3: command 0x0406 tx timeout [ 1052.416090][T18003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.429277][T18003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.465422][T18003] team0: Port device team_slave_0 added [ 1052.473767][T18003] team0: Port device team_slave_1 added [ 1052.504381][T18003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.512267][T18003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.538784][T18003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.551913][T18003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.559119][T18003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.585161][T18003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.644567][T18003] hsr_slave_0: entered promiscuous mode [ 1052.651340][T18003] hsr_slave_1: entered promiscuous mode [ 1052.658084][T18003] debugfs: 'hsr0' already exists in 'hsr' [ 1052.663839][T18003] Cannot create hsr debugfs directory [ 1053.407300][T17976] Bluetooth: hci9: command tx timeout [ 1053.807704][T17976] Bluetooth: hci10: command tx timeout [ 1055.411759][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.418153][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.489028][T17976] Bluetooth: hci9: command tx timeout [ 1055.889964][T17976] Bluetooth: hci10: command tx timeout [ 1057.494799][T17976] Bluetooth: hci2: command 0x0406 tx timeout [ 1057.570736][ T4941] Bluetooth: hci9: command tx timeout [ 1057.971049][ T4941] Bluetooth: hci10: command tx timeout [ 1058.611632][ T31] INFO: task syz-executor:17516 blocked for more than 143 seconds. [ 1058.619611][ T31] Tainted: G L syzkaller #0 [ 1058.626241][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1058.635039][ T31] task:syz-executor state:D stack:24496 pid:17516 tgid:17516 ppid:1 task_flags:0x480140 flags:0x00080003 [ 1058.647237][ T31] Call Trace: [ 1058.650557][ T31] [ 1058.653587][ T31] __schedule+0x125c/0x6730 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1058.659067][ T31] ? __pfx___schedule+0x10/0x10 [ 1058.664732][ T31] ? find_held_lock+0x2b/0x80 [ 1058.670128][ T31] ? schedule+0x225/0x2c0 [ 1058.674670][ T31] schedule+0xdd/0x2c0 [ 1058.679143][ T31] schedule_timeout+0x1b2/0x280 [ 1058.684148][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1058.689599][ T31] ? mark_held_locks+0x40/0x70 [ 1058.694710][ T31] __wait_for_common+0x2e7/0x4c0 [ 1058.699732][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1058.706294][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1058.713205][ T31] remove_one+0x312/0x420 [ 1058.717646][ T31] ? up_write+0x2e5/0x5c0 [ 1058.722493][ T31] __simple_recursive_removal+0x148/0x5c0 [ 1058.728309][ T31] ? __pfx_remove_one+0x10/0x10 [ 1058.733777][ T31] debugfs_remove+0x5d/0x80 [ 1058.738382][ T31] nsim_drv_remove+0xd2/0x1e0 [ 1058.743509][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1058.749326][ T31] device_remove+0xcb/0x180 [ 1058.754329][ T31] device_release_driver_internal+0x44e/0x620 [ 1058.761914][ T31] bus_remove_device+0x2bc/0x560 [ 1058.766964][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 1058.773064][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 1058.778821][ T31] device_del+0x376/0x9b0 [ 1058.784288][ T31] ? __pfx_device_del+0x10/0x10 [ 1058.789259][ T31] device_unregister+0x1d/0xe0 [ 1058.794496][ T31] del_device_store+0x346/0x480 [ 1058.799808][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1058.805554][ T31] ? find_held_lock+0x2b/0x80 [ 1058.810363][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1058.816913][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1058.823522][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1058.829039][ T31] bus_attr_store+0x74/0xb0 [ 1058.834158][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 1058.839450][ T31] sysfs_kf_write+0xf2/0x150 [ 1058.844571][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1058.849983][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1058.857970][ T31] vfs_write+0x6ac/0x1050 [ 1058.868356][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1058.874596][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1058.879464][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1058.885220][ T31] ksys_write+0x12a/0x250 [ 1058.889635][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1058.894997][ T31] do_syscall_64+0x115/0x840 [ 1058.899676][ T31] ? clear_bhb_loop+0x40/0x90 [ 1058.904866][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.910854][ T31] RIP: 0033:0x7fe79a75d68e [ 1058.915809][ T31] RSP: 002b:00007ffce9bee1c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1058.924727][ T31] RAX: ffffffffffffffda RBX: 000055555b87c500 RCX: 00007fe79a75d68e [ 1058.933256][ T31] RDX: 0000000000000001 RSI: 00007ffce9bee250 RDI: 0000000000000005 [ 1058.941347][ T31] RBP: 00007fe79a8336f2 R08: 0000000000000000 R09: 0000000000000000 [ 1058.949971][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.958369][ T31] R13: 00007ffce9bee250 R14: 00007fe79b544620 R15: 0000000000000003 [ 1058.967930][ T31] [ 1058.971040][ T31] INFO: task syz.1.2433:17661 blocked for more than 143 seconds. [ 1058.979295][ T31] Tainted: G L syzkaller #0 [ 1058.988266][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1059.021620][ T31] task:syz.1.2433 state:D stack:26056 pid:17661 tgid:17660 ppid:16553 task_flags:0x400140 flags:0x00080002 [ 1059.053463][ T31] Call Trace: [ 1059.061959][ T31] [ 1059.065350][ T6125] Process accounting resumed [ 1059.073048][ T31] __schedule+0x125c/0x6730 [ 1059.086677][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1059.109569][ T31] ? __pfx___schedule+0x10/0x10 [ 1059.128952][ T31] ? find_held_lock+0x2b/0x80 [ 1059.137845][ T31] ? schedule+0x225/0x2c0 [ 1059.145597][ T31] schedule+0xdd/0x2c0 [ 1059.151817][ T31] schedule_preempt_disabled+0x13/0x30 [ 1059.160253][ T31] __mutex_lock+0xccc/0x1bd0 [ 1059.169025][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1059.176899][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1059.183822][ T31] ? __kmalloc_noprof+0x343/0x820 [ 1059.190438][ T31] ? nsim_bus_dev_max_vfs_write+0x1bb/0x410 [ 1059.198402][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1059.206181][ T31] nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1059.213878][ T31] ? __pfx_nsim_bus_dev_max_vfs_write+0x10/0x10 [ 1059.220224][ T31] ? __debugfs_file_get+0x1fc/0x860 [ 1059.227693][ T31] full_proxy_write+0x135/0x1a0 [ 1059.233012][ T31] vfs_write+0x2aa/0x1050 [ 1059.237428][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 1059.243340][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1059.248199][ T31] ? __pfx_do_futex+0x10/0x10 [ 1059.253719][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1059.259037][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 1059.264451][ T31] ? __x64_sys_futex+0x358/0x4d0 [ 1059.270438][ T31] ksys_write+0x12a/0x250 [ 1059.276778][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1059.281736][ T31] do_syscall_64+0x115/0x840 [ 1059.286913][ T31] ? clear_bhb_loop+0x40/0x90 [ 1059.291660][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.298177][ T31] RIP: 0033:0x7f956439ce59 [ 1059.302949][ T31] RSP: 002b:00007f95651a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1059.311484][ T31] RAX: ffffffffffffffda RBX: 00007f9564615fa0 RCX: 00007f956439ce59 [ 1059.320080][ T31] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000002 [ 1059.328444][ T31] RBP: 00007f9564432e6f R08: 0000000000000000 R09: 0000000000000000 [ 1059.339150][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.350617][ T31] R13: 00007f9564616038 R14: 00007f9564615fa0 R15: 00007ffd1d642e48 [ 1059.359354][ T31] [ 1059.362651][ T31] [ 1059.362651][ T31] Showing all locks held in the system: [ 1059.370444][ T31] 1 lock held by khungtaskd/31: [ 1059.377278][ T31] #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1059.399449][ T31] 2 locks held by getty/5378: [ 1059.404280][ T31] #0: ffff8880377770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1059.416080][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1059.427071][ T31] 3 locks held by kworker/0:2/16903: [ 1059.432534][ T31] #0: ffff88813fe6b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1059.443287][ T31] #1: ffffc900065bfd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1059.453214][ T31] #2: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1059.463733][ T31] 7 locks held by syz-executor/17516: [ 1059.469463][ T31] #0: ffff8880337aa450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1059.480583][ T31] #1: ffff888033a81880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1059.490567][ T31] #2: ffff888029e91f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1059.500813][ T31] #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1059.515054][ T31] #4: ffff8880339c3128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1059.526040][ T31] #5: ffff8880339c2258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 1059.536566][ T31] #6: ffff888077b422f0 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 1059.548781][ T31] 2 locks held by syz.1.2433/17661: [ 1059.554441][ T31] #0: ffff8880202a8450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1059.563867][ T31] #1: ffff8880339c2258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 [ 1059.576086][ T31] 2 locks held by syz.0.2438/17698: [ 1059.583649][ T31] #0: ffff8880202a8450 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 1059.593313][ T31] #1: ffff888077b422f0 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xb3c/0x4280 [ 1059.612119][ T31] 4 locks held by syz-executor/17771: [ 1059.617583][ T31] #0: ffff8880337aa450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1059.631100][ T31] #1: ffff88805c2ab480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1059.641147][ T31] #2: ffff888029e91f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1059.651352][ T31] #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1059.661963][ T31] 4 locks held by syz-executor/17799: [ 1059.667556][ T31] #0: ffff8880337aa450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1059.676739][ T31] #1: ffff88807b69ac80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1059.687544][ T31] #2: ffff888029e91f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1059.697950][ T31] #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1059.708426][ T31] 4 locks held by syz-executor/17896: [ 1059.713884][ T31] #0: ffff8880337aa450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1059.723342][ T31] #1: ffff8880379c9080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1059.733703][ T31] #2: ffff888029e91f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1059.744748][ T31] #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1059.755479][ T31] 4 locks held by syz-executor/17921: [ 1059.760921][ T31] #0: ffff8880337aa450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1059.770551][ T31] #1: ffff88806b7ee080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1059.780774][ T31] #2: ffff888029e91f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1059.792186][ T31] #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1059.803015][ T31] 4 locks held by syz-executor/17940: [ 1059.808477][ T31] #0: ffff8880337aa450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1059.818081][ T31] #1: ffff88805b496c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1059.828288][ T31] #2: ffff888029e91f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1059.838776][ T31] #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1059.849702][ T31] 4 locks held by syz-executor/17958: [ 1059.855825][ T31] #0: ffff8880337aa450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1059.865241][ T31] #1: ffff88806b7bf080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1059.875403][ T31] #2: ffff888029e91f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1059.886729][ T31] #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1059.897793][ T31] 4 locks held by syz-executor/17983: [ 1059.903520][ T31] #0: ffff8880337aa450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1059.913079][ T31] #1: ffff88807f18d080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1059.923287][ T31] #2: ffff888029e91f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1059.933782][ T31] #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1059.944513][ T31] 4 locks held by syz-executor/18003: [ 1059.949957][ T31] #0: ffff8880337aa450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1059.959528][ T31] #1: ffff8880207aa880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1059.969745][ T31] #2: ffff888029e91f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1059.980466][ T31] #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1059.993595][ T31] [ 1059.996006][ T31] ============================================= [ 1059.996006][ T31] [ 1060.027757][ T31] NMI backtrace for cpu 0 [ 1060.027793][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1060.027838][ T31] Tainted: [L]=SOFTLOCKUP [ 1060.027851][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1060.027871][ T31] Call Trace: [ 1060.027882][ T31] [ 1060.027895][ T31] dump_stack_lvl+0x100/0x190 [ 1060.027944][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1060.027992][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1060.028048][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1060.028103][ T31] sys_info+0x141/0x190 [ 1060.028143][ T31] watchdog+0xcb1/0x1030 [ 1060.028202][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1060.028255][ T31] ? __pfx_watchdog+0x10/0x10 [ 1060.028308][ T31] ? __kthread_parkme+0x18c/0x230 [ 1060.028353][ T31] ? kthread+0x13a/0x450 [ 1060.028398][ T31] ? __pfx_watchdog+0x10/0x10 [ 1060.028446][ T31] kthread+0x370/0x450 [ 1060.028492][ T31] ? __pfx_kthread+0x10/0x10 [ 1060.028542][ T31] ret_from_fork+0x72b/0xd50 [ 1060.028587][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1060.028633][ T31] ? __switch_to+0x800/0x10f0 [ 1060.028665][ T31] ? __switch_to_asm+0x39/0x70 [ 1060.028716][ T31] ? __pfx_kthread+0x10/0x10 [ 1060.028765][ T31] ret_from_fork_asm+0x1a/0x30 [ 1060.028845][ T31] [ 1060.028870][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1060.059083][ T4941] Bluetooth: hci10: command tx timeout [ 1060.173049][ C1] NMI backtrace for cpu 1 [ 1060.173073][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1060.173110][ C1] Tainted: [L]=SOFTLOCKUP [ 1060.173120][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1060.173137][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1060.173185][ C1] Code: d6 86 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 57 11 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1060.173212][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 1060.173234][ C1] RAX: 00000000003a55bd RBX: ffff88801e698000 RCX: ffffffff8b9a42d5 [ 1060.173253][ C1] RDX: 0000000000000000 RSI: ffffffff8df59017 RDI: ffffffff8c1e8f80 [ 1060.173270][ C1] RBP: ffffed1003cd3000 R08: 0000000000000001 R09: ffffed10170a678d [ 1060.173288][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 1060.173305][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 1060.173324][ C1] FS: 0000000000000000(0000) GS:ffff8881243e7000(0000) knlGS:0000000000000000 [ 1060.173349][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1060.173367][ C1] CR2: 000055e55bc1aee8 CR3: 000000000e592000 CR4: 00000000003526f0 [ 1060.173385][ C1] Call Trace: [ 1060.173395][ C1] [ 1060.173405][ C1] default_idle+0x9/0x10 [ 1060.173432][ C1] default_idle_call+0x6c/0xb0 [ 1060.173460][ C1] do_idle+0x3a7/0x5b0 [ 1060.173492][ C1] ? __pfx_do_idle+0x10/0x10 [ 1060.173521][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1060.173564][ C1] cpu_startup_entry+0x4f/0x60 [ 1060.173595][ C1] start_secondary+0x21d/0x2d0 [ 1060.173627][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1060.173662][ C1] common_startup_64+0x13e/0x158 [ 1060.173711][ C1] [ 1060.353676][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1060.360573][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1060.371272][ T31] Tainted: [L]=SOFTLOCKUP [ 1060.375609][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1060.385680][ T31] Call Trace: [ 1060.388979][ T31] [ 1060.391933][ T31] dump_stack_lvl+0x100/0x190 [ 1060.396639][ T31] vpanic+0x552/0x970 [ 1060.400649][ T31] ? __pfx_vpanic+0x10/0x10 [ 1060.405200][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1060.411386][ T31] panic+0xd1/0xe0 [ 1060.415124][ T31] ? __pfx_panic+0x10/0x10 [ 1060.419555][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1060.425730][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1060.431932][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1060.438135][ T31] ? watchdog.cold+0x1ec/0x234 [ 1060.442927][ T31] ? watchdog+0xcc1/0x1030 [ 1060.447378][ T31] watchdog.cold+0x1fd/0x234 [ 1060.451997][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1060.457836][ T31] ? __pfx_watchdog+0x10/0x10 [ 1060.462643][ T31] ? __kthread_parkme+0x18c/0x230 [ 1060.467736][ T31] ? kthread+0x13a/0x450 [ 1060.472008][ T31] ? __pfx_watchdog+0x10/0x10 [ 1060.476708][ T31] kthread+0x370/0x450 [ 1060.480798][ T31] ? __pfx_kthread+0x10/0x10 [ 1060.485416][ T31] ret_from_fork+0x72b/0xd50 [ 1060.490042][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1060.495183][ T31] ? __switch_to+0x800/0x10f0 [ 1060.499878][ T31] ? __switch_to_asm+0x39/0x70 [ 1060.504687][ T31] ? __pfx_kthread+0x10/0x10 [ 1060.509351][ T31] ret_from_fork_asm+0x1a/0x30 [ 1060.514167][ T31] [ 1060.517829][ T31] Kernel Offset: disabled [ 1060.522175][ T31] Rebooting in 86400 seconds..