last executing test programs: 1m39.903347389s ago: executing program 3 (id=1488): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000140)) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x1d, 0x2, 0x7) getsockopt$auto(r3, 0x6b, 0xdc5a, 0xfffffffffffffffe, 0x0) r4 = prctl$auto_PR_SET_MM_START_CODE(0x80, 0x1, 0xffffffffffffffff, 0x7, 0x410) madvise$auto(0x8, 0x6, 0x8) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/45, 0x2d) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r5, 0x80045519, 0x0) read$auto(r2, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mlockall$auto(0x3) madvise$auto(0x110c230000, 0x80000000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/sctp/cookie_hmac_alg\x00', 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r6, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_ENABLE_RINGS(r6, 0xc, &(0x7f0000000040)="23aa20a93d9097d5404f7f8347d96f4df9aef8c268ff595e5e95529bfe582b2d38157d594662e5d2dd6c424466f10a514878ff103799f07f3ae10cfdb837f13bac7d2b9eeaf289451ab324", 0x3) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m36.27883636s ago: executing program 3 (id=1503): unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/pcmC0D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT642(r1, 0xc0984124, &(0x7f0000000580)={0x10003, "33626888", 0x4179ed4f, 0x1, 0xa, 0x1, 0x8, 0x6, 0x5, 0x101, 0x3, 0x1ff, 0x0, 0x8, 0xfffffffffffffffc, 0x14000000, 0x17795cb1, 0x1, 0xfffffffc, "2effd87679bd5e47a63add6f535cd80f84710b55"}) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyp8\x00', 0x10000, 0x0) ioctl$auto_TIOCGWINSZ(r2, 0x5413, &(0x7f00000001c0)="731fdadbb1c68d1dc61d5fb0f4e2b7ea557505ff797529467b8b1e21330ee4415c104bd806df056c9c963aee406c63906148ad51bad6963822bdbad3fce40d0d2b0606") madvise$auto(0x0, 0x5d6, 0x19) madvise$auto(0x7ff00, 0x2003f2, 0x15) r3 = userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_MSG_INFO(0xc3, 0xc, 0x0) r4 = ioctl$auto_TUNGETVNETLE2(r3, 0x800454dd, &(0x7f0000000040)=0x4) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000000080)="61af1196866674823f52bab45f7a58d944f79c75e1e555cbe49341cdf32636dfd937f318a00629c6830e24b21fb6f7c3ad0dfd9e7d25fa5b8b6333aa2ddd2bc8579e678e604e36058bba012301f261a38f8f0924d87d6ea3884ac787d9e4a2409d7ec1526034646e2a135a9976adf52158b063fcab757b48400b8a69c9ee5b1928d1a0ae295e331db0b5890a604d2a5557c670f7f7059b8d50063bb29bdc196c7ec1cd24b6eead24f9311663356212b56bc91a4c128723ab2c03cf03453073") bind$auto(0x3, 0x0, 0x6a) mmap$auto(0xfffffffffffffffd, 0x9, 0xa2, 0x8000008b71, 0xffffffffffffffff, 0x8000) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x109000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000100)=0x219f) r6 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read$auto_debug_help_fops_orangefs_debugfs(r6, &(0x7f0000000340)=""/231, 0xe7) socket(0x2, 0x80802, 0x2) 1m33.596175019s ago: executing program 3 (id=1511): socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0xb, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) r1 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x82142, 0x0) pread64$auto(r1, 0x0, 0x400000e, 0x100000000007) write$auto(r0, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0xffffffff, 0x38, &(0x7f0000000040)='TIPCv2\x00', &(0x7f00000000c0)=0x81) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r2) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000003200)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000014) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) timer_create$auto(0x3, 0x0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/tracing/per_cpu/cpu0/trace\x00', 0x901a01, 0x0) 1m32.661702748s ago: executing program 3 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008", @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) 1m32.280259307s ago: executing program 3 (id=1518): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x8e02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2, 0x4, 0x800000000000eb1, r0, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000200)='J\xb2^JJL\x0e\xa2=\x97\xa9\x9a\xd3Mu\xc4\xfao7\xb7P\xd0\xa8\x9b\xe8\x96\xccA\xc5\xdd\xb3\x18\x89\xcf\xdf1 c\xdbgI\x93\x8d(\xf4\xe8\xeft\xa7\"D\xa9/\xf5J\v\xb58Y\xabG[\xaaK\x01tq!\x85\xd5Y\xbb\xe7\xd0\x17\xe2', 0x10000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, 0x0, 0x2, 0x100) getrlimit$auto(0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4c881}, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f00000001c0), 0xca}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x8, 0x0) 1m32.07713708s ago: executing program 3 (id=1520): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r0 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7, 0x80, 0x12, r0, 0x7ff) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0x2, 0x20, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0x0, 0x1, 0xfd}]}, 0x50}, 0x1, 0x100000000000000, 0x0, 0x4048000}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socketcall$auto(0x100000a, 0x0) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffff7, 0x6a0000000000000) mmap$auto(0x4, 0x80000f76, 0xdf, 0x14, 0x401, 0x8000) pipe$auto(0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x189160, 0x0) ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) read$auto_ptdump_curknl_fops_(r2, &(0x7f0000000140)=""/168, 0xa8) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) 1m16.87964775s ago: executing program 32 (id=1520): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r0 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7, 0x80, 0x12, r0, 0x7ff) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0x2, 0x20, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0x0, 0x1, 0xfd}]}, 0x50}, 0x1, 0x100000000000000, 0x0, 0x4048000}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socketcall$auto(0x100000a, 0x0) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffff7, 0x6a0000000000000) mmap$auto(0x4, 0x80000f76, 0xdf, 0x14, 0x401, 0x8000) pipe$auto(0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2a, 0x2, 0x1) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x189160, 0x0) ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) read$auto_ptdump_curknl_fops_(r2, &(0x7f0000000140)=""/168, 0xa8) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) 5.995486429s ago: executing program 0 (id=1809): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socket(0x10, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01ffe5"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='$'], 0x1ac}, 0x1, 0x0, 0x0, 0x4002080}, 0x40000) 5.977212146s ago: executing program 2 (id=1810): sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100"], 0x2c}, 0x1, 0x0, 0x0, 0x4c881}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f00000001c0), 0xca}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x8, 0x0) 5.646758924s ago: executing program 0 (id=1811): clock_settime$auto(0xd53, &(0x7f0000000000)={0x6, 0xaa8}) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) sched_setaffinity$auto(0x0, 0xd, &(0x7f0000000200)=0x8000000000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) read$auto_state_fops_(r0, &(0x7f0000000080)=""/73, 0x49) close_range$auto(r0, r0, 0x7) r1 = epoll_create$auto(0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1b, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000100)={0xe, 0x403, 0x5, 0x80b, 0x10001, 0x2, "eb20749af69e202ae4f26a7d90348e5fcc60164b1f9277f1f917b2b8a5ce52c890e70e4d56cd17a05f5632985d68ba4220b18765e3c615f2c618e5706778829b04eed6a6df7b6b9f0c97d8a377e89ace2aa3f54f6e0f64b93b6ebe3b78d7d5d82640efd3e1e8e0d5dda726d87c84e1684f77ba069eb21adab697c46a1636e8ba666fa837c56f"}, 0x20, 0x0, 0x8000006) epoll_wait$auto(r1, 0x0, 0xe007, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x5, 0x1, 0x8) socket(0xa, 0x1, 0x100) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x28082, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x100, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000140)="13") ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 4.980563159s ago: executing program 2 (id=1813): mmap$auto(0x2, 0x20009, 0x4000000000df, 0xebd, 0xffffffffffffffff, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shmctl$auto_IPC_INFO(0x1, 0x3, &(0x7f00000003c0)={{0xb, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7, 0x2}, 0x18f, 0x10004, 0x7, 0x4df9e870, @raw=0x3, @raw=0x8001, 0xb, 0x0, 0x0, 0x0}) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x1, 0x66) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sg1\x00', 0x41, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec27\x00', 0x80200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000800000eb1, 0xffffffffffffffff, 0x5) r1 = ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)) sendmsg$auto(r1, &(0x7f0000000380)={&(0x7f00000000c0)="e94335d9f78f0ebfa34cee0649a4e81bfe9f4d3d4869f82a4e06b0c35f39b47abf7801dcc6611ec31cbd809fa4dc80a94cf6c8f08b315fc2eb07d73b92fed010f33b1a8b69405a6a75d91951c5cdd7b6a3550ca6bcc7230f9d51c27e64e952ee24a75a464edb9ece781616bde2511d67714c1292d4", 0x7, &(0x7f0000000280)={&(0x7f0000000180)="001f0530c7f8735b7f6b67628bcd233676156376b3b6b6f3ae1b58c6e74f93493e3da1ec0a502e0af3368f00f53ba88aca98ce85b6ef7f13c27055623e201582b9abec22f06083fad2b8290495667ee64cd6e952aa453a249db0d17089245e133fed7bad0e4223606935f7059f981e83cd7c9dafe8dbb66668d9d68728ad4c499038c577", 0x3}, 0x6, &(0x7f0000000340)="800923951db691aae3adb6ce57bb14d9d638d33ac9cbbee9ffbed1ce89e9f2a0cdf5dcd2eb87e43ca223dda66ce023422a7c4c4edc00", 0x4, 0x100}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r3 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYBLOB="01002abd7000fddbdf250d00000008000300", @ANYRESDEC=r3, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="2207b0ebde99c6d10794befab0efbc7131413ee1a59f2cf20a2c131b09272df960b8ee6f6cd74e596f970d55f536606a765aad6ab23ceb3cd88f8c67998d29c1efb0dfc78361e48134effc7ec4e185b88c9130442eda9162c4bc890b659d32a965e524a073d6eeffb5e46bdd4f99e7c4d89c7d0df0adf9a0469c9d63a525d9b3f2aac8fa84d3d5f6576a70b42527d0881c14256da3927bc53f92964c371f0bc01a86a4ad73bb9b9b56ab2a8157407f3e32e9550d59966b5e"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x15) io_uring_setup$auto(0x52, 0x0) madvise$auto(0x6, 0x7, 0x1) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vivid.0/cec9/power/runtime_suspended_time\x00', 0x2c2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 4.885946842s ago: executing program 1 (id=1814): ioctl$auto(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000040)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x57) 4.739474712s ago: executing program 1 (id=1815): openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r0, 0x13, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x00\x00\x00\x16\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r3 = socket(0x10, 0x2, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x9, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x400000000004}, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r7, 0x77bed28568c43d3b, 0x70b52a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r13], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a4, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x1a4}}, 0x4000800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r14 = socket(0x2, 0x1, 0x106) setsockopt$auto(r14, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4fc9, &(0x7f00000002c0)={0x0, 0xff8c}, 0x5, 0x0, 0x4, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x81, 0x87, 0x19, 0xffffffffffffffff, 0x8000) 4.528358584s ago: executing program 4 (id=1817): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)={0x0, 0xff, 0x0}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) socket(0x1e, 0x2, 0x0) (async, rerun: 32) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) (async) arch_prctl$auto(0x5001, 0x2) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) (async, rerun: 32) writev$auto(r1, &(0x7f0000000140)={0x0, 0x6}, 0x4) 4.244949183s ago: executing program 1 (id=1818): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(r0, 0xa, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x4) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25080000007e4f436e5cd0065991155ebc4817ef264c033794724abb0fa21e56"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4800) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd5\x00', 0xc040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000dc, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) read$auto_transaction_log_fops_(0xffffffffffffffff, &(0x7f0000000100)=""/3, 0x3) mmap$auto(0x0, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={"1f1fd77c243ceeb4703491d444db6e35afa5f26ce57f7f18a90a101228aa45b5", 0x7, 0x8, 0x7, 0x10000000001, 0xbc4, r6}) sysfs$auto(0x3, 0x23, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r4, 0x8000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) 4.188176459s ago: executing program 0 (id=1819): openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r0, 0x13, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x00\x00\x00\x00\x16\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r3 = socket(0x10, 0x2, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x9, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x400000000004}, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r7, 0x77bed28568c43d3b, 0x70b52a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r13], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a4, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_WOL_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x1a4}}, 0x4000800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r14 = socket(0x2, 0x1, 0x106) setsockopt$auto(r14, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4fc9, &(0x7f00000002c0)={0x0, 0xff8c}, 0x5, 0x0, 0x4, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x81, 0x87, 0x19, 0xffffffffffffffff, 0x8000) 3.743007524s ago: executing program 0 (id=1820): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mbind$auto(0xf4000000, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x20, 0x0) 3.481131183s ago: executing program 1 (id=1821): sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027"], 0x2c}, 0x1, 0x0, 0x0, 0x4c881}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f00000001c0), 0xca}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x8, 0x0) 3.240526596s ago: executing program 4 (id=1822): unshare$auto(0x40000080) mmap$auto(0x2, 0x2020004, 0x2, 0xeb1, 0xffffffffffffffff, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\xf5\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\t\x00\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00\r\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) bind$auto(0x3, 0x0, 0x6d) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/free_buffer\x00', 0x2d04c0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x0, 0x0) socket(0xa, 0x6, 0x488) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x8, 0x9, 0x0) close_range$auto(0x2, 0x8000, 0x0) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r4, 0x3b8e, r3) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd2/sched/read1_next_rq\x00', 0x14b100, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r5, 0x40104d05, r5) r6 = socket(0x27, 0x800, 0x1009) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r4, @ANYRES16=r2, @ANYBLOB="05082dbd7000ecdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, r6, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) 2.963791074s ago: executing program 0 (id=1823): mmap$auto(0x2, 0x20009, 0x4000000000df, 0xebd, 0xffffffffffffffff, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shmctl$auto_IPC_INFO(0x1, 0x3, &(0x7f00000003c0)={{0xb, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7, 0x2}, 0x18f, 0x10004, 0x7, 0x4df9e870, @raw=0x3, @raw=0x8001, 0xb, 0x0, 0x0, 0x0}) getsockopt$auto_SO_RCVPRIORITY(r0, 0x0, 0x52, &(0x7f0000001040)='\xf8V\xe1c\xc0\xd4\n\xb6\x0f%\xa7\xee^\xe3\x9fE\x9e)a\xa8\x10\xba8G!o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`t\xf4t\x1e\xd3\xc7\xb8\xe2+\xdb4\xa1\xfdC\xeb\xbc\xdd\x1c\x8cp8\x14\x1d\xeb\xd9C\xd5\xab\x8c\xbb\x0e!\xae\'\x9c<\xe6\x92<\x83Qa$b\xd2\xfc\x90\xcb-\xe2i\xa5!w\x1a\xb1\xe8\xa6o\b\xce\xb5z4k\x035*\' V\xeb\xb1S\xf2-\xd4\xcd\x1c\xf7\x9e-,\xa7\x1a\xd2\x84\x13T\x12\x12\xf8 ;Z4\xa9\xe1\xe0\x93\xb2d\x16r1\'\xf0^\xe41\xa9\x98\b\xc6\b\x83\x8b$\xf9&\x99\x88\x81\xda\x04\x06\xd2(D\xb1\xddZ\xfc\xca~_\xd4\xc7\x17\"\xbei\xc2\xe2\xa8\xee\xed\x95\xe5\xc4F\a\x8cwb$\xc6\x7f61q\xf9\xe5\xe9\xffF2*-D\xa3o\x96\xe8$B\xfd\xfbh\x0e\xf9(\xa0\xd2F2X*\xcc\xa6\xebX\x82cU1\x0e\tL\x99hs?\xd8SP8 F\x18\xed+Q\x03\x9d\x8c\xfc\xdf\xf4\xe3v\"\xfdv\"M\x9a', &(0x7f0000000300)=0x81) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x1, 0x66) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x41, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec27\x00', 0x80200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000800000eb1, 0xffffffffffffffff, 0x5) r1 = ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)) sendmsg$auto(r1, &(0x7f0000000380)={&(0x7f00000000c0)="e94335d9f78f0ebfa34cee0649a4e81bfe9f4d3d4869f82a4e06b0c35f39b47abf7801dcc6611ec31cbd809fa4dc80a94cf6c8f08b315fc2eb07d73b92fed010f33b1a8b69405a6a75d91951c5cdd7b6a3550ca6bcc7230f9d51c27e64e952ee24a75a464edb9ece781616bde2511d67714c1292d4", 0x7, &(0x7f0000000280)={&(0x7f0000000180)="001f0530c7f8735b7f6b67628bcd233676156376b3b6b6f3ae1b58c6e74f93493e3da1ec0a502e0af3368f00f53ba88aca98ce85b6ef7f13c27055623e201582b9abec22f06083fad2b8290495667ee64cd6e952aa453a249db0d17089245e133fed7bad0e4223606935f7059f981e83cd7c9dafe8dbb66668d9d68728ad4c499038c577", 0x3}, 0x6, &(0x7f0000000340)="800923951db691aae3adb6ce57bb14d9d638d33ac9cbbee9ffbed1ce89e9f2a0cdf5dcd2eb87e43ca223dda66ce023422a7c4c4edc00", 0x4, 0x100}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r3 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r4 = signalfd$auto(r3, 0x0, 0x8) sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYBLOB="01002abd7000fddbdf250d00000008000300", @ANYRESDEC=r3, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="2207b0ebde99c6d10794befab0efbc7131413ee1a59f2cf20a2c131b09272df960b8ee6f6cd74e596f970d55f536606a765aad6ab23ceb3cd88f8c67998d29c1efb0dfc78361e48134effc7ec4e185b88c9130442eda9162c4bc890b659d32a965e524a073d6eeffb5e46bdd4f99e7c4d89c7d0df0adf9a0469c9d63a525d9b3f2aac8fa84d3d5f6576a70b42527d0881c14256da3927bc53f92964c371f0bc01a86a4ad73bb9b9b56ab2a8157407f3e32e9550d59966b5e"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x15) io_uring_setup$auto(0x52, 0x0) madvise$auto(0x6, 0x7, 0x1) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vivid.0/cec9/power/runtime_suspended_time\x00', 0x2c2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 2.546629849s ago: executing program 2 (id=1824): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xf2, 0x0, 0x0, @uid}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200400f0}, 0x1500) 2.505056267s ago: executing program 4 (id=1825): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000000)=@can={0x1d, r3}, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) flock$auto(r0, 0x823) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 2.490197166s ago: executing program 1 (id=1826): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x24000055}, 0x200408c1) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/1u\x00', 0x10000, 0x0) ioctl$auto(0xffffffffffffffff, 0x800064bd, 0xffffffffffffffff) madvise$auto(0x2000000000040, 0x8001, 0x80015) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) fallocate$auto(0xffffffffffffffff, 0x0, 0x9, 0x4cbd5d) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x2) socket(0xa, 0x2, 0x0) socket(0xa, 0x5, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r2) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="93ab2cbd7000fbdbdf25080000000800320001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240088d0}, 0x10) connect$auto(0x3, 0x0, 0x55) mmap$auto(0xffffffffffffffda, 0x3000000000000, 0x3, 0x2000000eb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) fsconfig$auto_XFS_DAX_NEVER(r1, 0x7, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/1u\x00', &(0x7f0000000080)="ed31de5b4b601b5735dcb181f844f605f771050a7926d08072777b2f41e685826bd905f931901677a586ba2df98d931b4bd2b4b53440e38c31ad207ed4ccc2dde8025b9643d285d12f665a9dc0a6bd9c431d57be419422e1030875f28b47e857b39fc530ec6a93f0832d0c110094ac6faf420faa702b2e453c1f754b8870444833db05f79a1b3d53a09cb93bbc504bb24567d772be9c4cc8f623b94a3b73bfd300bec15f029b1e3eb6ad", 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) 2.273670079s ago: executing program 2 (id=1827): socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0xb, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x482882, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) r1 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x82142, 0x0) pread64$auto(r1, 0x0, 0x400000e, 0x100000000007) write$auto(r0, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0xffffffff, 0x38, &(0x7f0000000040)='TIPCv2\x00', &(0x7f00000000c0)=0x81) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x5, 0xffffffff, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r2) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000003200)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000014) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socket(0x2, 0x3, 0xf) getsockopt$auto(0xffffffffffffffff, 0x100, 0xed3, 0x0, 0x0) timer_create$auto(0x3, 0x0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/tracing/per_cpu/cpu0/trace\x00', 0x901a01, 0x0) 2.194202317s ago: executing program 4 (id=1828): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b009eff", @ANYBLOB="1800"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) 2.024188053s ago: executing program 4 (id=1829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x0, 0x4, "c3c890b3d81bdc3a29ff689c6264ede9e3"}]}, 0x28}}, 0x20000040) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xf, 0x5, 0xca3e) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r3, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 1.280817113s ago: executing program 2 (id=1830): r0 = socket(0x29, 0x2, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8910, 0x24) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x18181, 0x0) mmap$auto(0x200000000, 0x20009, 0x5, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x40080, 0x0) prctl$auto(0x4e, 0x3, 0x0, 0x1, 0x0) (async) read$auto(r3, 0x0, 0x20) (async) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r4, 0x0, 0x7, 0x4cbd5d) utime$auto(&(0x7f0000000040)='./file0\x00', 0x0) (async) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x1c1402, 0x0) socket(0x2, 0x1, 0x106) (async) shutdown$auto(0x200000003, 0x2) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffffffdffe00, &(0x7f0000000140)='+') (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) (async) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) acct$auto(&(0x7f0000000100)='/dev/v4l-subdev2\x00') 743.416258ms ago: executing program 0 (id=1831): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e1000000ff00"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x4020009, 0xdf, 0x14, 0x401, 0x8001) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800) socket(0x10, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x100, 0x0) open(0x0, 0x22240, 0x154) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS2\x00', 0x141e81, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) pwrite64$auto(r1, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\xfe\xe8\xe0\x96\xb1x\xc5\x1f\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n\xb5\r\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\x04\x00\x05f+\xee\xd8\xe6D\x9e\xb18Aw\x92\xe8\xb8>\x81{', 0x4, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(r1, 0x0, 0x3, 0x0) 376.232672ms ago: executing program 1 (id=1832): mmap$auto(0x2, 0x20009, 0x4000000000df, 0xebd, 0xffffffffffffffff, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x0, 0x52, &(0x7f0000001040)='\xf8V\xe1c\xc0\xd4\n\xb6\x0f%\xa7\xee^\xe3\x9fE\x9e)a\xa8\x10\xba8G!o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`t\xf4t\x1e\xd3\xc7\xb8\xe2+\xdb4\xa1\xfdC\xeb\xbc\xdd\x1c\x8cp8\x14\x1d\xeb\xd9C\xd5\xab\x8c\xbb\x0e!\xae\'\x9c<\xe6\x92<\x83Qa$b\xd2\xfc\x90\xcb-\xe2i\xa5!w\x1a\xb1\xe8\xa6o\b\xce\xb5z4k\x035*\' V\xeb\xb1S\xf2-\xd4\xcd\x1c\xf7\x9e-,\xa7\x1a\xd2\x84\x13T\x12\x12\xf8 ;Z4\xa9\xe1\xe0\x93\xb2d\x16r1\'\xf0^\xe41\xa9\x98\b\xc6\b\x83\x8b$\xf9&\x99\x88\x81\xda\x04\x06\xd2(D\xb1\xddZ\xfc\xca~_\xd4\xc7\x17\"\xbei\xc2\xe2\xa8\xee\xed\x95\xe5\xc4F\a\x8cwb$\xc6\x7f61q\xf9\xe5\xe9\xffF2*-D\xa3o\x96\xe8$B\xfd\xfbh\x0e\xf9(\xa0\xd2F2X*\xcc\xa6\xebX\x82cU1\x0e\tL\x99hs?\xd8SP8 F\x18\xed+Q\x03\x9d\x8c\xfc\xdf\xf4\xe3v\"\xfdv\"M\x9a', &(0x7f0000000300)=0x81) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x1, 0x66) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sg1\x00', 0x41, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec27\x00', 0x80200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000800000eb1, 0xffffffffffffffff, 0x5) r1 = ioctl$auto_TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)) sendmsg$auto(r1, &(0x7f0000000380)={&(0x7f00000000c0)="e94335d9f78f0ebfa34cee0649a4e81bfe9f4d3d4869f82a4e06b0c35f39b47abf7801dcc6611ec31cbd809fa4dc80a94cf6c8f08b315fc2eb07d73b92fed010f33b1a8b69405a6a75d91951c5cdd7b6a3550ca6bcc7230f9d51c27e64e952ee24a75a464edb9ece781616bde2511d67714c1292d4", 0x7, &(0x7f0000000280)={&(0x7f0000000180)="001f0530c7f8735b7f6b67628bcd233676156376b3b6b6f3ae1b58c6e74f93493e3da1ec0a502e0af3368f00f53ba88aca98ce85b6ef7f13c27055623e201582b9abec22f06083fad2b8290495667ee64cd6e952aa453a249db0d17089245e133fed7bad0e4223606935f7059f981e83cd7c9dafe8dbb66668d9d68728ad4c499038c577", 0x3}, 0x6, &(0x7f0000000340)="800923951db691aae3adb6ce57bb14d9d638d33ac9cbbee9ffbed1ce89e9f2a0cdf5dcd2eb87e43ca223dda66ce023422a7c4c4edc00", 0x4, 0x100}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r3 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYBLOB="01002abd7000fddbdf250d00000008000300", @ANYRESDEC=r3, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="2207b0ebde99c6d10794befab0efbc7131413ee1a59f2cf20a2c131b09272df960b8ee6f6cd74e596f970d55f536606a765aad6ab23ceb3cd88f8c67998d29c1efb0dfc78361e48134effc7ec4e185b88c9130442eda9162c4bc890b659d32a965e524a073d6eeffb5e46bdd4f99e7c4d89c7d0df0adf9a0469c9d63a525d9b3f2aac8fa84d3d5f6576a70b42527d0881c14256da3927bc53f92964c371f0bc01a86a4ad73bb9b9b56ab2a8157407f3e32e9550d59966b5e"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x15) io_uring_setup$auto(0x52, 0x0) madvise$auto(0x6, 0x7, 0x1) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vivid.0/cec9/power/runtime_suspended_time\x00', 0x2c2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 272.660647ms ago: executing program 2 (id=1833): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0xfffffc00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x8000) bpf$auto(0x8, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x1, 0x6, 0xc0d6, 0x5a3, 0x101, 0x401, 0x5, 0x800, 0x3e1b2d20, 0x0, 0x1, 0x9, 0xff}, 0x10) socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) 0s ago: executing program 4 (id=1834): sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027"], 0x2c}, 0x1, 0x0, 0x0, 0x4c881}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f00000001c0), 0xca}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x8, 0x0) kernel console output (not intermixed with test programs): [ 351.159167][T10649] ? alloc_fd+0x471/0x7a0 [ 351.159198][T10649] ? do_getname+0x191/0x390 [ 351.159235][T10649] do_sys_openat2+0x10f/0x1e0 [ 351.159272][T10649] ? __pfx_do_sys_openat2+0x10/0x10 [ 351.159310][T10649] ? ksys_semctl.constprop.0+0x14e/0x2e0 [ 351.159436][T10649] __x64_sys_openat+0x12d/0x210 [ 351.159474][T10649] ? __pfx___x64_sys_openat+0x10/0x10 [ 351.159525][T10649] do_syscall_64+0x115/0x840 [ 351.159630][T10649] ? clear_bhb_loop+0x40/0x90 [ 351.159678][T10649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.159706][T10649] RIP: 0033:0x7f61c499ce59 [ 351.159727][T10649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.159752][T10649] RSP: 002b:00007f61c58fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 351.159778][T10649] RAX: ffffffffffffffda RBX: 00007f61c4c15fa0 RCX: 00007f61c499ce59 [ 351.159796][T10649] RDX: 0000000000022a02 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 351.159813][T10649] RBP: 00007f61c4a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 351.159829][T10649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.159845][T10649] R13: 00007f61c4c16038 R14: 00007f61c4c15fa0 R15: 00007ffc9a992d58 [ 351.159882][T10649] [ 352.443921][T10671] zswap: compressor not available [ 354.626781][T10690] bond0: option packets_per_slave: invalid value ( Xµn) [ 354.668977][T10690] bond0: option packets_per_slave: allowed values 0 - 65535 [ 354.821587][T10693] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 354.838650][T10693] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 354.854662][T10693] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.873765][T10693] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.059060][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.208290][T10732] zswap: compressor not available [ 356.859958][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.866056][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 356.940062][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 357.246672][T10746] FAULT_INJECTION: forcing a failure. [ 357.246672][T10746] name failslab, interval 1, probability 0, space 0, times 0 [ 357.327813][T10746] CPU: 0 UID: 0 PID: 10746 Comm: syz.0.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.327861][T10746] Tainted: [L]=SOFTLOCKUP [ 357.327867][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.327877][T10746] Call Trace: [ 357.327882][T10746] [ 357.327888][T10746] dump_stack_lvl+0x100/0x190 [ 357.327912][T10746] should_fail_ex.cold+0x5/0xa [ 357.327935][T10746] should_failslab+0xc2/0x120 [ 357.327956][T10746] kmem_cache_alloc_noprof+0x91/0x6a0 [ 357.327974][T10746] ? net_alloc_generic+0x1e/0x70 [ 357.328082][T10746] ? copy_net_ns+0xe8/0x7c0 [ 357.328106][T10746] copy_net_ns+0xe8/0x7c0 [ 357.328128][T10746] ? copy_cgroup_ns+0x71/0x970 [ 357.328157][T10746] create_new_namespaces+0x3ea/0xac0 [ 357.328185][T10746] unshare_nsproxy_namespaces+0xf2/0x220 [ 357.328205][T10746] ksys_unshare+0x438/0xab0 [ 357.328228][T10746] ? __pfx_ksys_unshare+0x10/0x10 [ 357.328254][T10746] __x64_sys_unshare+0x31/0x40 [ 357.328273][T10746] do_syscall_64+0x115/0x840 [ 357.328287][T10746] ? clear_bhb_loop+0x40/0x90 [ 357.328305][T10746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.328320][T10746] RIP: 0033:0x7f61c499ce59 [ 357.328335][T10746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.328349][T10746] RSP: 002b:00007f61c58dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 357.328365][T10746] RAX: ffffffffffffffda RBX: 00007f61c4c16090 RCX: 00007f61c499ce59 [ 357.328375][T10746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 357.328384][T10746] RBP: 00007f61c4a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 357.328393][T10746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.328402][T10746] R13: 00007f61c4c16128 R14: 00007f61c4c16090 R15: 00007ffc9a992d58 [ 357.328422][T10746] [ 357.811441][T10762] random: crng reseeded on system resumption [ 358.638077][T10790] zswap: compressor not available [ 360.171531][T10830] blktrace: Concurrent blktraces are not allowed on nbd5 [ 360.218082][T10830] blktrace: Concurrent blktraces are not allowed on nbd5 [ 360.959606][T10849] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.977097][T10849] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.989260][T10849] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.011041][T10849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.331477][T10857] zswap: compressor not available [ 363.023332][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 363.023576][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 363.029750][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 363.035553][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 364.349450][T10916] zswap: compressor not available [ 367.056159][ T29] audit: type=1800 audit(1782753348.907:9): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.992" name="members" dev="configfs" ino=30717 res=0 errno=0 [ 367.761726][T10993] FAULT_INJECTION: forcing a failure. [ 367.761726][T10993] name failslab, interval 1, probability 0, space 0, times 0 [ 367.775229][T10993] CPU: 1 UID: 0 PID: 10993 Comm: syz.1.999 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.775277][T10993] Tainted: [L]=SOFTLOCKUP [ 367.775286][T10993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.775307][T10993] Call Trace: [ 367.775316][T10993] [ 367.775326][T10993] dump_stack_lvl+0x100/0x190 [ 367.775365][T10993] should_fail_ex.cold+0x5/0xa [ 367.775401][T10993] should_failslab+0xc2/0x120 [ 367.775441][T10993] kmem_cache_alloc_noprof+0x91/0x6a0 [ 367.775473][T10993] ? net_alloc_generic+0x1e/0x70 [ 367.775508][T10993] ? copy_net_ns+0xe8/0x7c0 [ 367.775549][T10993] copy_net_ns+0xe8/0x7c0 [ 367.775594][T10993] ? copy_cgroup_ns+0x71/0x970 [ 367.775624][T10993] create_new_namespaces+0x3ea/0xac0 [ 367.775663][T10993] unshare_nsproxy_namespaces+0xf2/0x220 [ 367.775694][T10993] ksys_unshare+0x438/0xab0 [ 367.775730][T10993] ? __pfx_ksys_unshare+0x10/0x10 [ 367.775764][T10993] ? ksys_read+0x1ac/0x250 [ 367.775799][T10993] __x64_sys_unshare+0x31/0x40 [ 367.775831][T10993] do_syscall_64+0x115/0x840 [ 367.775856][T10993] ? clear_bhb_loop+0x40/0x90 [ 367.775888][T10993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.775917][T10993] RIP: 0033:0x7f74e379ce59 [ 367.775941][T10993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.775968][T10993] RSP: 002b:00007f74e4703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 367.776001][T10993] RAX: ffffffffffffffda RBX: 00007f74e3a16090 RCX: 00007f74e379ce59 [ 367.776019][T10993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 367.776037][T10993] RBP: 00007f74e3832e6f R08: 0000000000000000 R09: 0000000000000000 [ 367.776052][T10993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.776067][T10993] R13: 00007f74e3a16128 R14: 00007f74e3a16090 R15: 00007fff9c1b0518 [ 367.776103][T10993] [ 370.272190][T11043] blktrace: Concurrent blktraces are not allowed on nbd5 [ 370.304069][T11043] blktrace: Concurrent blktraces are not allowed on nbd5 [ 370.611528][T11027] bond0: option packets_per_slave: invalid value ( Xµn) [ 370.619523][T11027] bond0: option packets_per_slave: allowed values 0 - 65535 [ 370.739639][T11028] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 370.757221][T11028] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 370.776273][T11028] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.800020][T11028] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.574336][T11062] FAULT_INJECTION: forcing a failure. [ 371.574336][T11062] name failslab, interval 1, probability 0, space 0, times 0 [ 371.626418][T11062] CPU: 1 UID: 0 PID: 11062 Comm: syz.0.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.626464][T11062] Tainted: [L]=SOFTLOCKUP [ 371.626474][T11062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.626490][T11062] Call Trace: [ 371.626498][T11062] [ 371.626510][T11062] dump_stack_lvl+0x100/0x190 [ 371.626553][T11062] should_fail_ex.cold+0x5/0xa [ 371.626592][T11062] should_failslab+0xc2/0x120 [ 371.626635][T11062] kmem_cache_alloc_noprof+0x91/0x6a0 [ 371.626668][T11062] ? net_alloc_generic+0x1e/0x70 [ 371.626704][T11062] ? copy_net_ns+0xe8/0x7c0 [ 371.626747][T11062] copy_net_ns+0xe8/0x7c0 [ 371.626782][T11062] ? copy_cgroup_ns+0x71/0x970 [ 371.626811][T11062] create_new_namespaces+0x3ea/0xac0 [ 371.626848][T11062] unshare_nsproxy_namespaces+0xf2/0x220 [ 371.626884][T11062] ksys_unshare+0x438/0xab0 [ 371.626923][T11062] ? __pfx_ksys_unshare+0x10/0x10 [ 371.626972][T11062] __x64_sys_unshare+0x31/0x40 [ 371.627008][T11062] do_syscall_64+0x115/0x840 [ 371.627034][T11062] ? clear_bhb_loop+0x40/0x90 [ 371.627069][T11062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.627099][T11062] RIP: 0033:0x7f61c499ce59 [ 371.627122][T11062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.627149][T11062] RSP: 002b:00007f61c58dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 371.627175][T11062] RAX: ffffffffffffffda RBX: 00007f61c4c16090 RCX: 00007f61c499ce59 [ 371.627194][T11062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 371.627211][T11062] RBP: 00007f61c4a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 371.627228][T11062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.627244][T11062] R13: 00007f61c4c16128 R14: 00007f61c4c16090 R15: 00007ffc9a992d58 [ 371.627279][T11062] [ 371.885654][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 372.740285][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 372.761879][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 372.830175][T11086] vhci_hcd vhci_hcd.2: invalid port number 16 [ 372.836447][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 372.836508][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 372.896055][T11086] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 374.493580][ T50] Bluetooth: hci2: unexpected event 0x30 length: 10 > 3 [ 374.505812][T11121] program syz.1.1027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.164648][T11148] blktrace: Concurrent blktraces are not allowed on nbd5 [ 377.211712][T11148] blktrace: Concurrent blktraces are not allowed on nbd5 [ 377.360537][T11152] blktrace: Concurrent blktraces are not allowed on nbd5 [ 377.415617][T11152] blktrace: Concurrent blktraces are not allowed on nbd5 [ 378.574469][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.582391][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.039449][T11173] FAULT_INJECTION: forcing a failure. [ 379.039449][T11173] name failslab, interval 1, probability 0, space 0, times 0 [ 379.088877][T11173] CPU: 0 UID: 0 PID: 11173 Comm: syz.1.1042 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.088904][T11173] Tainted: [L]=SOFTLOCKUP [ 379.088909][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.088919][T11173] Call Trace: [ 379.088924][T11173] [ 379.088931][T11173] dump_stack_lvl+0x100/0x190 [ 379.088955][T11173] should_fail_ex.cold+0x5/0xa [ 379.088976][T11173] should_failslab+0xc2/0x120 [ 379.088998][T11173] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 379.089018][T11173] ? __d_alloc+0x35/0xa50 [ 379.089037][T11173] __d_alloc+0x35/0xa50 [ 379.089056][T11173] d_alloc+0x4a/0x1e0 [ 379.089076][T11173] lookup_one_qstr_excl+0x171/0x250 [ 379.089098][T11173] start_dirop+0x59/0xb0 [ 379.089120][T11173] simple_start_creating+0xf9/0x110 [ 379.089136][T11173] ? __pfx_simple_start_creating+0x10/0x10 [ 379.089151][T11173] ? mntput+0x70/0xa0 [ 379.089172][T11173] ? simple_pin_fs+0xa3/0x190 [ 379.089198][T11173] debugfs_start_creating.part.0+0x82/0x170 [ 379.089333][T11173] __debugfs_create_file+0xb3/0x4f0 [ 379.089357][T11173] debugfs_create_file_full+0x41/0x60 [ 379.089380][T11173] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 379.089463][T11173] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 379.089486][T11173] ? ida_alloc_range+0x70d/0x830 [ 379.089549][T11173] ? kasan_save_track+0x14/0x30 [ 379.089569][T11173] ? __kasan_kmalloc+0xaa/0xb0 [ 379.089588][T11173] ? lockdep_init_map_type+0x5c/0x250 [ 379.089608][T11173] preinit_net.part.0+0x252/0x920 [ 379.089629][T11173] copy_net_ns+0x339/0x7c0 [ 379.089651][T11173] create_new_namespaces+0x3ea/0xac0 [ 379.089672][T11173] unshare_nsproxy_namespaces+0xf2/0x220 [ 379.089691][T11173] ksys_unshare+0x438/0xab0 [ 379.089711][T11173] ? __pfx_ksys_unshare+0x10/0x10 [ 379.089737][T11173] __x64_sys_unshare+0x31/0x40 [ 379.089763][T11173] do_syscall_64+0x115/0x840 [ 379.089777][T11173] ? clear_bhb_loop+0x40/0x90 [ 379.089796][T11173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.089811][T11173] RIP: 0033:0x7f74e379ce59 [ 379.089825][T11173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.089840][T11173] RSP: 002b:00007f74e4703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 379.089855][T11173] RAX: ffffffffffffffda RBX: 00007f74e3a16090 RCX: 00007f74e379ce59 [ 379.089866][T11173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 379.089876][T11173] RBP: 00007f74e3832e6f R08: 0000000000000000 R09: 0000000000000000 [ 379.089885][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.089895][T11173] R13: 00007f74e3a16128 R14: 00007f74e3a16090 R15: 00007fff9c1b0518 [ 379.089915][T11173] [ 381.094511][T11199] bond0: option packets_per_slave: invalid value ( Xµn) [ 381.109370][T11199] bond0: option packets_per_slave: allowed values 0 - 65535 [ 381.276788][T11197] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 381.300903][T11197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 381.335190][T11197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 381.356706][T11197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.482805][T11241] zswap: compressor not available [ 382.709479][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 383.102038][T11257] blktrace: Concurrent blktraces are not allowed on nbd5 [ 383.154399][T11257] blktrace: Concurrent blktraces are not allowed on nbd5 [ 383.347224][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 383.350145][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 383.353361][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 383.651415][T11262] random: crng reseeded on system resumption [ 385.722752][T11309] FAULT_INJECTION: forcing a failure. [ 385.722752][T11309] name failslab, interval 1, probability 0, space 0, times 0 [ 385.743327][T11309] CPU: 1 UID: 0 PID: 11309 Comm: syz.1.1068 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.743373][T11309] Tainted: [L]=SOFTLOCKUP [ 385.743384][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 385.743401][T11309] Call Trace: [ 385.743410][T11309] [ 385.743422][T11309] dump_stack_lvl+0x100/0x190 [ 385.743466][T11309] should_fail_ex.cold+0x5/0xa [ 385.743505][T11309] should_failslab+0xc2/0x120 [ 385.743548][T11309] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 385.743587][T11309] ? __d_alloc+0x35/0xa50 [ 385.743625][T11309] __d_alloc+0x35/0xa50 [ 385.743662][T11309] d_alloc+0x4a/0x1e0 [ 385.743697][T11309] lookup_one_qstr_excl+0x171/0x250 [ 385.743742][T11309] start_dirop+0x59/0xb0 [ 385.743785][T11309] simple_start_creating+0xf9/0x110 [ 385.743814][T11309] ? __pfx_simple_start_creating+0x10/0x10 [ 385.743844][T11309] ? mntput+0x70/0xa0 [ 385.743888][T11309] ? simple_pin_fs+0xa3/0x190 [ 385.743932][T11309] debugfs_start_creating.part.0+0x82/0x170 [ 385.743976][T11309] __debugfs_create_file+0xb3/0x4f0 [ 385.744022][T11309] debugfs_create_file_full+0x41/0x60 [ 385.744070][T11309] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 385.744116][T11309] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 385.744161][T11309] ? ida_alloc_range+0x70d/0x830 [ 385.744217][T11309] ? kasan_save_track+0x14/0x30 [ 385.744252][T11309] ? __kasan_kmalloc+0xaa/0xb0 [ 385.744290][T11309] ? lockdep_init_map_type+0x5c/0x250 [ 385.744335][T11309] preinit_net.part.0+0x252/0x920 [ 385.744377][T11309] copy_net_ns+0x339/0x7c0 [ 385.744419][T11309] create_new_namespaces+0x3ea/0xac0 [ 385.744459][T11309] unshare_nsproxy_namespaces+0xf2/0x220 [ 385.744493][T11309] ksys_unshare+0x438/0xab0 [ 385.744535][T11309] ? __pfx_ksys_unshare+0x10/0x10 [ 385.744584][T11309] __x64_sys_unshare+0x31/0x40 [ 385.744619][T11309] do_syscall_64+0x115/0x840 [ 385.744645][T11309] ? clear_bhb_loop+0x40/0x90 [ 385.744678][T11309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.744706][T11309] RIP: 0033:0x7f74e379ce59 [ 385.744731][T11309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.744757][T11309] RSP: 002b:00007f74e4703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 385.744783][T11309] RAX: ffffffffffffffda RBX: 00007f74e3a16090 RCX: 00007f74e379ce59 [ 385.744801][T11309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 385.744815][T11309] RBP: 00007f74e3832e6f R08: 0000000000000000 R09: 0000000000000000 [ 385.744831][T11309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.744846][T11309] R13: 00007f74e3a16128 R14: 00007f74e3a16090 R15: 00007fff9c1b0518 [ 385.744882][T11309] [ 386.176394][T11307] zswap: compressor not available [ 390.939081][T11396] bond0: option packets_per_slave: invalid value ( Xµn) [ 390.958031][T11396] bond0: option packets_per_slave: allowed values 0 - 65535 [ 390.969198][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 391.365361][T11409] raw_sendmsg: syz.2.1094 forgot to set AF_INET. Fix it! [ 391.388201][T11391] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 391.406693][T11391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.426376][T11391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 391.445589][T11391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 392.156350][T11428] zswap: compressor not available [ 392.663158][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 392.763983][T11450] tipc: Withdrawal distribution failure [ 393.469462][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 393.469500][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 393.475540][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 395.281051][T11519] blktrace: Concurrent blktraces are not allowed on nbd5 [ 395.313775][T11519] blktrace: Concurrent blktraces are not allowed on nbd5 [ 396.816799][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 396.951804][T11565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1116'. [ 397.663962][T11594] zswap: compressor not available [ 398.137052][T11597] bond0: option packets_per_slave: invalid value ( Xµn) [ 398.149408][T11597] bond0: option packets_per_slave: allowed values 0 - 65535 [ 398.372435][T11593] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.395776][T11593] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.426043][T11593] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.441745][T11593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.842269][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 400.394986][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 400.469114][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 400.469124][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 400.762609][T11650] zswap: compressor not available [ 400.824484][T11661] FAULT_INJECTION: forcing a failure. [ 400.824484][T11661] name failslab, interval 1, probability 0, space 0, times 0 [ 400.852905][T11661] CPU: 1 UID: 0 PID: 11661 Comm: syz.1.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.852949][T11661] Tainted: [L]=SOFTLOCKUP [ 400.852955][T11661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.852964][T11661] Call Trace: [ 400.852970][T11661] [ 400.852977][T11661] dump_stack_lvl+0x100/0x190 [ 400.853001][T11661] should_fail_ex.cold+0x5/0xa [ 400.853022][T11661] should_failslab+0xc2/0x120 [ 400.853046][T11661] kmem_cache_alloc_noprof+0x91/0x6a0 [ 400.853066][T11661] ? net_alloc_generic+0x1e/0x70 [ 400.853085][T11661] ? copy_net_ns+0xe8/0x7c0 [ 400.853107][T11661] copy_net_ns+0xe8/0x7c0 [ 400.853125][T11661] ? copy_cgroup_ns+0x71/0x970 [ 400.853141][T11661] create_new_namespaces+0x3ea/0xac0 [ 400.853162][T11661] unshare_nsproxy_namespaces+0xf2/0x220 [ 400.853180][T11661] ksys_unshare+0x438/0xab0 [ 400.853201][T11661] ? __pfx_ksys_unshare+0x10/0x10 [ 400.853227][T11661] __x64_sys_unshare+0x31/0x40 [ 400.853245][T11661] do_syscall_64+0x115/0x840 [ 400.853260][T11661] ? clear_bhb_loop+0x40/0x90 [ 400.853278][T11661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.853294][T11661] RIP: 0033:0x7f74e379ce59 [ 400.853309][T11661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.853323][T11661] RSP: 002b:00007f74e4703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 400.853338][T11661] RAX: ffffffffffffffda RBX: 00007f74e3a16090 RCX: 00007f74e379ce59 [ 400.853348][T11661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 400.853357][T11661] RBP: 00007f74e3832e6f R08: 0000000000000000 R09: 0000000000000000 [ 400.853366][T11661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.853375][T11661] R13: 00007f74e3a16128 R14: 00007f74e3a16090 R15: 00007fff9c1b0518 [ 400.853394][T11661] [ 401.492332][T11671] bond0: option packets_per_slave: invalid value ( Xµn) [ 401.530393][T11671] bond0: option packets_per_slave: allowed values 0 - 65535 [ 401.617754][T11680] bond0: option packets_per_slave: invalid value ( Xµn) [ 401.650730][T11680] bond0: option packets_per_slave: allowed values 0 - 65535 [ 401.943791][T11660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 401.962231][T11660] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.968574][T11660] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.976318][T11660] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 402.318744][T11688] blktrace: Concurrent blktraces are not allowed on nbd5 [ 402.354187][T11688] blktrace: Concurrent blktraces are not allowed on nbd5 [ 403.573064][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 403.975097][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 403.975162][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 403.981200][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 404.793619][T11742] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 405.127351][T11740] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 405.144932][T11740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 405.163217][T11740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.180749][T11740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 405.386886][T11759] futex_wake_op: syz.1.1153 tries to shift op by -2048; fix this program [ 405.441350][T11759] futex_wake_op: syz.1.1153 tries to shift op by -2048; fix this program [ 405.470376][T11759] futex_wake_op: syz.1.1153 tries to shift op by -2048; fix this program [ 405.511657][T11759] futex_wake_op: syz.1.1153 tries to shift op by -2048; fix this program [ 405.538484][T11759] futex_wake_op: syz.1.1153 tries to shift op by -2048; fix this program [ 405.597379][T11759] futex_wake_op: syz.1.1153 tries to shift op by -2048; fix this program [ 405.692881][T11759] futex_wake_op: syz.1.1153 tries to shift op by -2048; fix this program [ 405.733283][T11759] futex_wake_op: syz.1.1153 tries to shift op by -2048; fix this program [ 405.744323][T11759] futex_wake_op: syz.1.1153 tries to shift op by -2048; fix this program [ 405.773686][T11759] futex_wake_op: syz.1.1153 tries to shift op by -2048; fix this program [ 406.678675][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.773269][T11792] FAULT_INJECTION: forcing a failure. [ 406.773269][T11792] name failslab, interval 1, probability 0, space 0, times 0 [ 406.812381][T11792] CPU: 1 UID: 0 PID: 11792 Comm: syz.0.1158 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.812409][T11792] Tainted: [L]=SOFTLOCKUP [ 406.812415][T11792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 406.812424][T11792] Call Trace: [ 406.812430][T11792] [ 406.812439][T11792] dump_stack_lvl+0x100/0x190 [ 406.812463][T11792] should_fail_ex.cold+0x5/0xa [ 406.812485][T11792] should_failslab+0xc2/0x120 [ 406.812506][T11792] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 406.812526][T11792] ? __d_alloc+0x35/0xa50 [ 406.812547][T11792] __d_alloc+0x35/0xa50 [ 406.812566][T11792] d_alloc+0x4a/0x1e0 [ 406.812583][T11792] lookup_one_qstr_excl+0x171/0x250 [ 406.812605][T11792] start_dirop+0x59/0xb0 [ 406.812627][T11792] simple_start_creating+0xf9/0x110 [ 406.812643][T11792] ? __pfx_simple_start_creating+0x10/0x10 [ 406.812661][T11792] ? mntput+0x70/0xa0 [ 406.812683][T11792] ? simple_pin_fs+0xa3/0x190 [ 406.812717][T11792] debugfs_start_creating.part.0+0x82/0x170 [ 406.812757][T11792] __debugfs_create_file+0xb3/0x4f0 [ 406.812781][T11792] debugfs_create_file_full+0x41/0x60 [ 406.812805][T11792] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 406.812829][T11792] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 406.812851][T11792] ? ida_alloc_range+0x70d/0x830 [ 406.812880][T11792] ? kasan_save_track+0x14/0x30 [ 406.812898][T11792] ? __kasan_kmalloc+0xaa/0xb0 [ 406.812917][T11792] ? lockdep_init_map_type+0x5c/0x250 [ 406.812937][T11792] preinit_net.part.0+0x252/0x920 [ 406.812958][T11792] copy_net_ns+0x339/0x7c0 [ 406.812979][T11792] create_new_namespaces+0x3ea/0xac0 [ 406.813000][T11792] unshare_nsproxy_namespaces+0xf2/0x220 [ 406.813019][T11792] ksys_unshare+0x438/0xab0 [ 406.813039][T11792] ? __pfx_ksys_unshare+0x10/0x10 [ 406.813065][T11792] __x64_sys_unshare+0x31/0x40 [ 406.813084][T11792] do_syscall_64+0x115/0x840 [ 406.813097][T11792] ? clear_bhb_loop+0x40/0x90 [ 406.813115][T11792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.813131][T11792] RIP: 0033:0x7f61c499ce59 [ 406.813152][T11792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.813167][T11792] RSP: 002b:00007f61c58dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 406.813184][T11792] RAX: ffffffffffffffda RBX: 00007f61c4c16090 RCX: 00007f61c499ce59 [ 406.813195][T11792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 406.813210][T11792] RBP: 00007f61c4a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 406.813226][T11792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.813241][T11792] R13: 00007f61c4c16128 R14: 00007f61c4c16090 R15: 00007ffc9a992d58 [ 406.813277][T11792] [ 407.381480][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 407.388587][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 407.394726][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 409.647481][T11829] bond0: option packets_per_slave: invalid value ( Xµn) [ 409.672694][T11829] bond0: option packets_per_slave: allowed values 0 - 65535 [ 409.846773][T11826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 409.876253][T11826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 409.885741][T11826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 409.898881][T11826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 411.217716][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 411.523328][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 411.934774][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 411.936066][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 411.940876][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 412.569896][T11871] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 412.589346][T11871] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 412.605696][T11871] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 412.626200][T11871] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 412.641525][T11871] page dumped because: unmovable page [ 412.676299][T11871] page_owner info is not present (never set?) [ 415.819053][T11932] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 415.835347][T11932] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 415.857564][T11932] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 415.900250][T11932] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 415.909290][T11947] zswap: compressor not available [ 415.938048][T11932] page dumped because: unmovable page [ 415.970289][T11932] page_owner info is not present (never set?) [ 416.289470][T11954] random: crng reseeded on system resumption [ 418.939651][T12027] blktrace: Concurrent blktraces are not allowed on nbd5 [ 418.961221][T12027] blktrace: Concurrent blktraces are not allowed on nbd5 [ 420.394787][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'. [ 420.930858][T12040] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 421.905787][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'. [ 421.962189][T12081] ubi0: attaching mtd0 [ 422.026059][T12081] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 422.069742][T12081] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 422.087819][T12081] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 422.106606][T12081] eraseblock attaching information dump: [ 422.126730][T12081] ec -1 [ 422.138052][T12081] pnum 0 [ 422.154162][T12081] lnum 0 [ 422.167150][T12081] scrub 1 [ 422.180522][T12081] sqnum 1 [ 422.202308][T12081] Volume identifier header dump: [ 422.217228][T12081] magic 55424921 [ 422.228817][T12081] version 1 [ 422.237354][T12081] vol_type 1 [ 422.258396][T12081] copy_flag 0 [ 422.270280][T12081] compat 5 [ 422.319772][T12081] vol_id 2147479551 [ 422.319806][T12081] lnum 0 [ 422.319821][T12081] data_size 0 [ 422.319832][T12081] used_ebs 0 [ 422.319842][T12081] data_pad 0 [ 422.319854][T12081] sqnum 1 [ 422.319865][T12081] hdr_crc 65b3bd2d [ 422.319883][T12081] Volume identifier header hexdump: [ 422.536962][T12081] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 423.444983][T12112] bond0: option packets_per_slave: invalid value ( Xµn) [ 423.457792][T12112] bond0: option packets_per_slave: allowed values 0 - 65535 [ 423.712079][T12108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 423.727801][T12108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 423.748515][T12108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 423.762193][T12108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 425.163552][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 425.790769][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 425.790787][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 425.790822][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 427.008022][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 428.957075][T12202] bond0: option packets_per_slave: invalid value ( Xµn) [ 428.964109][T12202] bond0: option packets_per_slave: allowed values 0 - 65535 [ 428.998118][T12220] tipc: Started in network mode [ 429.013358][T12220] tipc: Node identity ffffffff, cluster identity 4711 [ 429.035804][T12220] tipc: Node number set to 4294967295 [ 429.056608][T12204] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 429.084116][T12204] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 429.095699][T12204] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 429.117888][T12204] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 429.338929][T12229] zswap: compressor not available [ 430.011300][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 430.189738][T12253] zswap: compressor not available [ 431.126157][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 431.126204][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 431.138390][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 431.263384][T12270] can: request_module (can-proto-4) failed. [ 431.830338][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'. [ 432.363797][T12301] FAULT_INJECTION: forcing a failure. [ 432.363797][T12301] name failslab, interval 1, probability 0, space 0, times 0 [ 432.381335][T12301] CPU: 1 UID: 0 PID: 12301 Comm: syz.1.1265 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.381381][T12301] Tainted: [L]=SOFTLOCKUP [ 432.381391][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.381409][T12301] Call Trace: [ 432.381419][T12301] [ 432.381429][T12301] dump_stack_lvl+0x100/0x190 [ 432.381460][T12301] should_fail_ex.cold+0x5/0xa [ 432.381486][T12301] should_failslab+0xc2/0x120 [ 432.381509][T12301] __kmalloc_cache_noprof+0x91/0x6c0 [ 432.381526][T12301] ? sctp_add_bind_addr+0xae/0x3e0 [ 432.381634][T12301] sctp_add_bind_addr+0xae/0x3e0 [ 432.381652][T12301] sctp_copy_local_addr_list+0x349/0x550 [ 432.381721][T12301] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 432.381741][T12301] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 432.381783][T12301] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 432.381810][T12301] sctp_bind_addr_copy+0x331/0x530 [ 432.381830][T12301] sctp_connect_new_asoc+0x1c9/0x770 [ 432.381853][T12301] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 432.381878][T12301] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 432.381901][T12301] sctp_sendmsg+0x1743/0x22e0 [ 432.381942][T12301] ? __pfx___might_resched+0x10/0x10 [ 432.381994][T12301] ? __pfx_futex_wake_mark+0x10/0x10 [ 432.382018][T12301] ? __pfx_sctp_sendmsg+0x10/0x10 [ 432.382039][T12301] ? aa_sk_perm+0x309/0xaa0 [ 432.382099][T12301] ? __might_fault+0xc5/0x140 [ 432.382118][T12301] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 432.382159][T12301] ? __pfx_sctp_sendmsg+0x10/0x10 [ 432.382181][T12301] inet_sendmsg+0x11c/0x140 [ 432.382244][T12301] __sys_sendto+0x453/0x4e0 [ 432.382317][T12301] ? __pfx_inet_sendmsg+0x10/0x10 [ 432.382335][T12301] ? __pfx___sys_sendto+0x10/0x10 [ 432.382357][T12301] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 432.382386][T12301] ? xfd_validate_state+0x129/0x190 [ 432.382418][T12301] __x64_sys_sendto+0xe0/0x1c0 [ 432.382434][T12301] ? do_syscall_64+0x90/0x840 [ 432.382449][T12301] ? lockdep_hardirqs_on+0x78/0x100 [ 432.382496][T12301] do_syscall_64+0x115/0x840 [ 432.382510][T12301] ? clear_bhb_loop+0x40/0x90 [ 432.382529][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.382545][T12301] RIP: 0033:0x7f74e379ce59 [ 432.382560][T12301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.382575][T12301] RSP: 002b:00007f74e4703028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 432.382591][T12301] RAX: ffffffffffffffda RBX: 00007f74e3a16090 RCX: 00007f74e379ce59 [ 432.382601][T12301] RDX: 000000000002000f RSI: 0000000000000000 RDI: 0000000000000003 [ 432.382610][T12301] RBP: 00007f74e3832e6f R08: 0000200000000000 R09: 000000000000001c [ 432.382620][T12301] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 432.382629][T12301] R13: 00007f74e3a16128 R14: 00007f74e3a16090 R15: 00007fff9c1b0518 [ 432.382650][T12301] [ 433.088259][T12308] FAULT_INJECTION: forcing a failure. [ 433.088259][T12308] name failslab, interval 1, probability 0, space 0, times 0 [ 433.111402][T12308] CPU: 0 UID: 0 PID: 12308 Comm: syz.2.1267 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.111428][T12308] Tainted: [L]=SOFTLOCKUP [ 433.111434][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 433.111443][T12308] Call Trace: [ 433.111449][T12308] [ 433.111455][T12308] dump_stack_lvl+0x100/0x190 [ 433.111480][T12308] should_fail_ex.cold+0x5/0xa [ 433.111501][T12308] should_failslab+0xc2/0x120 [ 433.111523][T12308] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 433.111543][T12308] ? __d_alloc+0x35/0xa50 [ 433.111564][T12308] __d_alloc+0x35/0xa50 [ 433.111583][T12308] d_alloc+0x4a/0x1e0 [ 433.111600][T12308] lookup_one_qstr_excl+0x171/0x250 [ 433.111622][T12308] start_dirop+0x59/0xb0 [ 433.111645][T12308] simple_start_creating+0xf9/0x110 [ 433.111666][T12308] ? __pfx_simple_start_creating+0x10/0x10 [ 433.111682][T12308] ? mntput+0x70/0xa0 [ 433.111705][T12308] ? simple_pin_fs+0xa3/0x190 [ 433.111729][T12308] debugfs_start_creating.part.0+0x82/0x170 [ 433.111752][T12308] __debugfs_create_file+0xb3/0x4f0 [ 433.111775][T12308] debugfs_create_file_full+0x41/0x60 [ 433.111797][T12308] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 433.111822][T12308] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 433.111846][T12308] ? ida_alloc_range+0x70d/0x830 [ 433.111876][T12308] ? kasan_save_track+0x14/0x30 [ 433.111894][T12308] ? __kasan_kmalloc+0xaa/0xb0 [ 433.111914][T12308] ? lockdep_init_map_type+0x5c/0x250 [ 433.111933][T12308] preinit_net.part.0+0x252/0x920 [ 433.111954][T12308] copy_net_ns+0x339/0x7c0 [ 433.111975][T12308] create_new_namespaces+0x3ea/0xac0 [ 433.111997][T12308] unshare_nsproxy_namespaces+0xf2/0x220 [ 433.112015][T12308] ksys_unshare+0x438/0xab0 [ 433.112035][T12308] ? __pfx_ksys_unshare+0x10/0x10 [ 433.112061][T12308] __x64_sys_unshare+0x31/0x40 [ 433.112080][T12308] do_syscall_64+0x115/0x840 [ 433.112093][T12308] ? clear_bhb_loop+0x40/0x90 [ 433.112111][T12308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.112126][T12308] RIP: 0033:0x7fd20459ce59 [ 433.112141][T12308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.112156][T12308] RSP: 002b:00007fd2053cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 433.112171][T12308] RAX: ffffffffffffffda RBX: 00007fd204816090 RCX: 00007fd20459ce59 [ 433.112182][T12308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 433.112191][T12308] RBP: 00007fd204632e6f R08: 0000000000000000 R09: 0000000000000000 [ 433.112200][T12308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.112210][T12308] R13: 00007fd204816128 R14: 00007fd204816090 R15: 00007ffd04e74b68 [ 433.112230][T12308] [ 434.558352][T12330] blktrace: Concurrent blktraces are not allowed on nbd5 [ 434.583394][T12330] blktrace: Concurrent blktraces are not allowed on nbd5 [ 434.923016][T12334] random: crng reseeded on system resumption [ 436.336494][T12368] blktrace: Concurrent blktraces are not allowed on nbd5 [ 436.373556][T12368] blktrace: Concurrent blktraces are not allowed on nbd5 [ 439.731185][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.738732][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.482912][T12483] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 443.770468][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1300'. [ 443.808961][T12477] bond0: option packets_per_slave: invalid value ( Xµn) [ 443.816181][T12477] bond0: option packets_per_slave: allowed values 0 - 65535 [ 443.986335][T12476] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 443.995444][T12476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 444.004787][T12476] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 444.022248][T12476] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 444.247658][T12503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 445.345638][T12523] blktrace: Concurrent blktraces are not allowed on nbd5 [ 445.383365][T12523] blktrace: Concurrent blktraces are not allowed on nbd5 [ 445.392663][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 445.570757][T12525] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1309'. [ 445.904519][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 446.017783][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 446.018123][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 446.023915][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 446.986644][T12547] bond0: option packets_per_slave: invalid value ( Xµn) [ 446.998084][T12547] bond0: option packets_per_slave: allowed values 0 - 65535 [ 447.072244][T12563] FAULT_INJECTION: forcing a failure. [ 447.072244][T12563] name failslab, interval 1, probability 0, space 0, times 0 [ 447.101206][T12563] CPU: 1 UID: 0 PID: 12563 Comm: syz.1.1317 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.101255][T12563] Tainted: [L]=SOFTLOCKUP [ 447.101265][T12563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 447.101281][T12563] Call Trace: [ 447.101290][T12563] [ 447.101300][T12563] dump_stack_lvl+0x100/0x190 [ 447.101341][T12563] should_fail_ex.cold+0x5/0xa [ 447.101378][T12563] should_failslab+0xc2/0x120 [ 447.101419][T12563] __kmalloc_noprof+0xfc/0x820 [ 447.101455][T12563] ? tomoyo_encode2+0xfb/0x3c0 [ 447.101574][T12563] tomoyo_encode2+0xfb/0x3c0 [ 447.101617][T12563] tomoyo_encode+0x29/0x50 [ 447.101653][T12563] tomoyo_realpath_from_path+0x18c/0x690 [ 447.101701][T12563] tomoyo_path_number_perm+0x23c/0x580 [ 447.101733][T12563] ? tomoyo_path_number_perm+0x22e/0x580 [ 447.101769][T12563] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 447.101840][T12563] ? find_held_lock+0x2b/0x80 [ 447.101875][T12563] ? __fget_files+0x215/0x3d0 [ 447.101900][T12563] ? hook_file_ioctl_common+0x140/0x440 [ 447.101962][T12563] ? __fget_files+0x215/0x3d0 [ 447.101994][T12563] ? __fget_files+0x21f/0x3d0 [ 447.102026][T12563] security_file_ioctl+0xd3/0x230 [ 447.102088][T12563] __x64_sys_ioctl+0xb7/0x210 [ 447.102130][T12563] do_syscall_64+0x115/0x840 [ 447.102155][T12563] ? clear_bhb_loop+0x40/0x90 [ 447.102190][T12563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.102227][T12563] RIP: 0033:0x7f74e379ce59 [ 447.102251][T12563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.102277][T12563] RSP: 002b:00007f74e4724028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.102304][T12563] RAX: ffffffffffffffda RBX: 00007f74e3a15fa0 RCX: 00007f74e379ce59 [ 447.102323][T12563] RDX: 0000000000000000 RSI: 000000004008550d RDI: 0000000000000003 [ 447.102340][T12563] RBP: 00007f74e4724090 R08: 0000000000000000 R09: 0000000000000000 [ 447.102357][T12563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.102373][T12563] R13: 00007f74e3a16038 R14: 00007f74e3a15fa0 R15: 00007fff9c1b0518 [ 447.102410][T12563] [ 447.314136][T12563] ERROR: Out of memory at tomoyo_realpath_from_path. [ 447.349366][T12545] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 447.355545][T12545] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 447.361648][T12545] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 447.367654][T12545] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 447.977799][T12558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 447.995436][T12558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 448.021975][T12558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 448.038571][T12558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 448.284453][T12579] FAULT_INJECTION: forcing a failure. [ 448.284453][T12579] name failslab, interval 1, probability 0, space 0, times 0 [ 448.347311][T12579] CPU: 1 UID: 0 PID: 12579 Comm: syz.2.1320 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.347338][T12579] Tainted: [L]=SOFTLOCKUP [ 448.347343][T12579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 448.347353][T12579] Call Trace: [ 448.347358][T12579] [ 448.347365][T12579] dump_stack_lvl+0x100/0x190 [ 448.347389][T12579] should_fail_ex.cold+0x5/0xa [ 448.347410][T12579] should_failslab+0xc2/0x120 [ 448.347432][T12579] kmem_cache_alloc_noprof+0x91/0x6a0 [ 448.347451][T12579] ? net_alloc_generic+0x1e/0x70 [ 448.347470][T12579] ? copy_net_ns+0xe8/0x7c0 [ 448.347492][T12579] copy_net_ns+0xe8/0x7c0 [ 448.347514][T12579] ? copy_cgroup_ns+0x71/0x970 [ 448.347530][T12579] create_new_namespaces+0x3ea/0xac0 [ 448.347551][T12579] unshare_nsproxy_namespaces+0xf2/0x220 [ 448.347569][T12579] ksys_unshare+0x438/0xab0 [ 448.347590][T12579] ? __pfx_ksys_unshare+0x10/0x10 [ 448.347616][T12579] __x64_sys_unshare+0x31/0x40 [ 448.347634][T12579] do_syscall_64+0x115/0x840 [ 448.347648][T12579] ? clear_bhb_loop+0x40/0x90 [ 448.347666][T12579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.347681][T12579] RIP: 0033:0x7fd20459ce59 [ 448.347697][T12579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.347724][T12579] RSP: 002b:00007fd2053cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 448.347751][T12579] RAX: ffffffffffffffda RBX: 00007fd204816090 RCX: 00007fd20459ce59 [ 448.347767][T12579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 448.347783][T12579] RBP: 00007fd204632e6f R08: 0000000000000000 R09: 0000000000000000 [ 448.347799][T12579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.347814][T12579] R13: 00007fd204816128 R14: 00007fd204816090 R15: 00007ffd04e74b68 [ 448.347844][T12579] [ 448.926607][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1322'. [ 449.601189][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 449.999468][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 450.078970][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 450.078977][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 450.856274][T12643] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1331'. [ 454.058052][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'. [ 454.217142][T12705] FAULT_INJECTION: forcing a failure. [ 454.217142][T12705] name failslab, interval 1, probability 0, space 0, times 0 [ 454.289605][T12705] CPU: 0 UID: 0 PID: 12705 Comm: syz.1.1347 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.289651][T12705] Tainted: [L]=SOFTLOCKUP [ 454.289662][T12705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.289678][T12705] Call Trace: [ 454.289687][T12705] [ 454.289696][T12705] dump_stack_lvl+0x100/0x190 [ 454.289739][T12705] should_fail_ex.cold+0x5/0xa [ 454.289778][T12705] should_failslab+0xc2/0x120 [ 454.289820][T12705] __kmalloc_cache_noprof+0x91/0x6c0 [ 454.289850][T12705] ? net_alloc_generic+0x1e/0x70 [ 454.289886][T12705] ? copy_net_ns+0x135/0x7c0 [ 454.289925][T12705] copy_net_ns+0x135/0x7c0 [ 454.289965][T12705] ? copy_cgroup_ns+0x71/0x970 [ 454.289997][T12705] create_new_namespaces+0x3ea/0xac0 [ 454.290053][T12705] unshare_nsproxy_namespaces+0xf2/0x220 [ 454.290090][T12705] ksys_unshare+0x438/0xab0 [ 454.290130][T12705] ? __pfx_ksys_unshare+0x10/0x10 [ 454.290182][T12705] __x64_sys_unshare+0x31/0x40 [ 454.290218][T12705] do_syscall_64+0x115/0x840 [ 454.290244][T12705] ? clear_bhb_loop+0x40/0x90 [ 454.290280][T12705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.290308][T12705] RIP: 0033:0x7f74e379ce59 [ 454.290331][T12705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.290358][T12705] RSP: 002b:00007f74e4703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 454.290385][T12705] RAX: ffffffffffffffda RBX: 00007f74e3a16090 RCX: 00007f74e379ce59 [ 454.290403][T12705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 454.290421][T12705] RBP: 00007f74e3832e6f R08: 0000000000000000 R09: 0000000000000000 [ 454.290438][T12705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.290456][T12705] R13: 00007f74e3a16128 R14: 00007f74e3a16090 R15: 00007fff9c1b0518 [ 454.290492][T12705] [ 455.445262][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 456.233088][T12740] blktrace: Concurrent blktraces are not allowed on nbd5 [ 456.265610][T12740] blktrace: Concurrent blktraces are not allowed on nbd5 [ 458.591727][T12769] FAULT_INJECTION: forcing a failure. [ 458.591727][T12769] name failslab, interval 1, probability 0, space 0, times 0 [ 458.656423][T12769] CPU: 1 UID: 0 PID: 12769 Comm: syz.0.1361 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.656469][T12769] Tainted: [L]=SOFTLOCKUP [ 458.656477][T12769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 458.656492][T12769] Call Trace: [ 458.656500][T12769] [ 458.656511][T12769] dump_stack_lvl+0x100/0x190 [ 458.656553][T12769] should_fail_ex.cold+0x5/0xa [ 458.656588][T12769] should_failslab+0xc2/0x120 [ 458.656626][T12769] kmem_cache_alloc_noprof+0x91/0x6a0 [ 458.656659][T12769] ? __pfx_map_id_range_down+0x10/0x10 [ 458.656698][T12769] ? security_inode_alloc+0x3b/0x2c0 [ 458.656804][T12769] security_inode_alloc+0x3b/0x2c0 [ 458.656837][T12769] inode_init_always_gfp+0xc77/0xfb0 [ 458.656881][T12769] alloc_inode+0x8e/0x250 [ 458.656914][T12769] path_from_stashed+0x25b/0x750 [ 458.656942][T12769] ? do_raw_spin_unlock+0x145/0x1e0 [ 458.656981][T12769] ns_get_path+0x60/0x80 [ 458.657008][T12769] proc_ns_get_link+0x25b/0x2e0 [ 458.657067][T12769] ? __pfx_proc_ns_get_link+0x10/0x10 [ 458.657107][T12769] ? atime_needs_update+0x8b/0x6b0 [ 458.657144][T12769] pick_link+0xd17/0x13c0 [ 458.657179][T12769] ? __pfx_proc_ns_get_link+0x10/0x10 [ 458.657220][T12769] step_into_slowpath+0x9ba/0xf90 [ 458.657262][T12769] ? rcu_is_watching+0x12/0xc0 [ 458.657293][T12769] ? __pfx_step_into_slowpath+0x10/0x10 [ 458.657328][T12769] ? find_held_lock+0x2b/0x80 [ 458.657372][T12769] path_openat+0x13b5/0x4280 [ 458.657429][T12769] ? __pfx_path_openat+0x10/0x10 [ 458.657468][T12769] do_file_open+0x20e/0x430 [ 458.657496][T12769] ? __pfx_do_file_open+0x10/0x10 [ 458.657548][T12769] ? alloc_fd+0x471/0x7a0 [ 458.657576][T12769] ? do_getname+0x191/0x390 [ 458.657611][T12769] do_sys_openat2+0x10f/0x1e0 [ 458.657645][T12769] ? __pfx_do_sys_openat2+0x10/0x10 [ 458.657681][T12769] ? __fget_files+0x21f/0x3d0 [ 458.657712][T12769] __x64_sys_openat+0x12d/0x210 [ 458.657746][T12769] ? __pfx___x64_sys_openat+0x10/0x10 [ 458.657792][T12769] do_syscall_64+0x115/0x840 [ 458.657818][T12769] ? clear_bhb_loop+0x40/0x90 [ 458.657853][T12769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.657891][T12769] RIP: 0033:0x7f61c495d68e [ 458.657913][T12769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 458.657940][T12769] RSP: 002b:00007f61c58fcec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 458.657966][T12769] RAX: ffffffffffffffda RBX: 00007f61c58fd6c0 RCX: 00007f61c495d68e [ 458.657983][T12769] RDX: 0000000000000002 RSI: 00007f61c58fcf90 RDI: ffffffffffffff9c [ 458.658000][T12769] RBP: 00007f61c4a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 458.658015][T12769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.658031][T12769] R13: 00007f61c4c16038 R14: 00007f61c4c15fa0 R15: 00007ffc9a992d58 [ 458.658066][T12769] [ 459.477152][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 460.109728][T12800] FAULT_INJECTION: forcing a failure. [ 460.109728][T12800] name failslab, interval 1, probability 0, space 0, times 0 [ 460.160265][T12800] CPU: 1 UID: 0 PID: 12800 Comm: syz.2.1368 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.160293][T12800] Tainted: [L]=SOFTLOCKUP [ 460.160298][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.160308][T12800] Call Trace: [ 460.160313][T12800] [ 460.160320][T12800] dump_stack_lvl+0x100/0x190 [ 460.160344][T12800] should_fail_ex.cold+0x5/0xa [ 460.160366][T12800] should_failslab+0xc2/0x120 [ 460.160388][T12800] kmem_cache_alloc_noprof+0x91/0x6a0 [ 460.160406][T12800] ? net_alloc_generic+0x1e/0x70 [ 460.160425][T12800] ? copy_net_ns+0xe8/0x7c0 [ 460.160447][T12800] copy_net_ns+0xe8/0x7c0 [ 460.160465][T12800] ? copy_cgroup_ns+0x71/0x970 [ 460.160482][T12800] create_new_namespaces+0x3ea/0xac0 [ 460.160503][T12800] unshare_nsproxy_namespaces+0xf2/0x220 [ 460.160527][T12800] ksys_unshare+0x438/0xab0 [ 460.160548][T12800] ? __pfx_ksys_unshare+0x10/0x10 [ 460.160573][T12800] __x64_sys_unshare+0x31/0x40 [ 460.160592][T12800] do_syscall_64+0x115/0x840 [ 460.160606][T12800] ? clear_bhb_loop+0x40/0x90 [ 460.160627][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.160643][T12800] RIP: 0033:0x7fd20459ce59 [ 460.160659][T12800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.160674][T12800] RSP: 002b:00007fd2053ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 460.160689][T12800] RAX: ffffffffffffffda RBX: 00007fd204816180 RCX: 00007fd20459ce59 [ 460.160699][T12800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 460.160709][T12800] RBP: 00007fd204632e6f R08: 0000000000000000 R09: 0000000000000000 [ 460.160719][T12800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.160728][T12800] R13: 00007fd204816218 R14: 00007fd204816180 R15: 00007ffd04e74b68 [ 460.160748][T12800] [ 462.644498][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 463.106608][T12835] nbd: illegal input index -1024 [ 463.467041][T12842] blktrace: Concurrent blktraces are not allowed on nbd5 [ 463.495506][T12842] blktrace: Concurrent blktraces are not allowed on nbd5 [ 464.395592][T12852] random: crng reseeded on system resumption [ 464.490418][T12851] hub 1-0:1.0: USB hub found [ 464.499090][T12851] hub 1-0:1.0: 1 port detected [ 466.406731][T12895] bond0: option packets_per_slave: invalid value ( Xµn) [ 466.428103][T12895] bond0: option packets_per_slave: allowed values 0 - 65535 [ 466.812238][T12888] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 466.836679][T12888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 466.858132][T12888] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 466.870747][T12888] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 468.235564][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 468.875420][T12938] FAULT_INJECTION: forcing a failure. [ 468.875420][T12938] name failslab, interval 1, probability 0, space 0, times 0 [ 468.888245][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 468.888744][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 468.894651][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 468.908991][T12938] CPU: 1 UID: 0 PID: 12938 Comm: syz.1.1399 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.909017][T12938] Tainted: [L]=SOFTLOCKUP [ 468.909023][T12938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 468.909039][T12938] Call Trace: [ 468.909044][T12938] [ 468.909051][T12938] dump_stack_lvl+0x100/0x190 [ 468.909080][T12938] should_fail_ex.cold+0x5/0xa [ 468.909103][T12938] should_failslab+0xc2/0x120 [ 468.909125][T12938] kmem_cache_alloc_noprof+0x91/0x6a0 [ 468.909143][T12938] ? net_alloc_generic+0x1e/0x70 [ 468.909162][T12938] ? copy_net_ns+0xe8/0x7c0 [ 468.909184][T12938] copy_net_ns+0xe8/0x7c0 [ 468.909203][T12938] ? copy_cgroup_ns+0x71/0x970 [ 468.909220][T12938] create_new_namespaces+0x3ea/0xac0 [ 468.909241][T12938] unshare_nsproxy_namespaces+0xf2/0x220 [ 468.909260][T12938] ksys_unshare+0x438/0xab0 [ 468.909280][T12938] ? __pfx_ksys_unshare+0x10/0x10 [ 468.909299][T12938] ? ksys_read+0x1ac/0x250 [ 468.909318][T12938] __x64_sys_unshare+0x31/0x40 [ 468.909337][T12938] do_syscall_64+0x115/0x840 [ 468.909351][T12938] ? clear_bhb_loop+0x40/0x90 [ 468.909369][T12938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.909390][T12938] RIP: 0033:0x7f74e379ce59 [ 468.909405][T12938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.909420][T12938] RSP: 002b:00007f74e4703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 468.909436][T12938] RAX: ffffffffffffffda RBX: 00007f74e3a16090 RCX: 00007f74e379ce59 [ 468.909447][T12938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 468.909456][T12938] RBP: 00007f74e3832e6f R08: 0000000000000000 R09: 0000000000000000 [ 468.909466][T12938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.909475][T12938] R13: 00007f74e3a16128 R14: 00007f74e3a16090 R15: 00007fff9c1b0518 [ 468.909494][T12938] [ 469.479231][T12941] random: crng reseeded on system resumption [ 470.161831][T12963] blktrace: Concurrent blktraces are not allowed on nbd5 [ 470.200366][T12963] blktrace: Concurrent blktraces are not allowed on nbd5 [ 470.859592][T12975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 471.129624][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 473.687082][T13015] random: crng reseeded on system resumption [ 475.149588][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 475.479520][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 478.765898][T13130] bond0: option packets_per_slave: invalid value ( Xµn) [ 478.785579][T13130] bond0: option packets_per_slave: allowed values 0 - 65535 [ 478.976048][T13129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 479.003226][T13129] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 479.023768][T13129] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 479.043340][T13129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 479.868736][T13149] bond0: option packets_per_slave: invalid value ( Xµn) [ 479.879783][T13149] bond0: option packets_per_slave: allowed values 0 - 65535 [ 480.126451][T13147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 480.144433][T13147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 480.165576][T13147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 480.180817][T13147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 480.724578][T13183] blktrace: Concurrent blktraces are not allowed on nbd5 [ 480.747442][T13183] blktrace: Concurrent blktraces are not allowed on nbd5 [ 481.105837][T13172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 481.132134][T13172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 481.151884][T13172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 481.167811][T13172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 482.465053][T13223] bond0: option packets_per_slave: invalid value ( Xµn) [ 482.533262][T13223] bond0: option packets_per_slave: allowed values 0 - 65535 [ 482.789006][T13214] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 482.809369][T13214] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 482.849778][T13214] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 482.879548][T13214] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 483.543024][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 483.758097][T13249] blktrace: Concurrent blktraces are not allowed on nbd5 [ 483.791969][T13249] blktrace: Concurrent blktraces are not allowed on nbd5 [ 484.162685][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 484.419564][ T29] audit: type=1800 audit(1782753466.807:10): pid=13255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1468" name="features" dev="configfs" ino=43355 res=0 errno=0 [ 484.677953][T13265] FAULT_INJECTION: forcing a failure. [ 484.677953][T13265] name failslab, interval 1, probability 0, space 0, times 0 [ 484.718296][T13265] CPU: 0 UID: 0 PID: 13265 Comm: syz.0.1470 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.718341][T13265] Tainted: [L]=SOFTLOCKUP [ 484.718350][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.718366][T13265] Call Trace: [ 484.718375][T13265] [ 484.718385][T13265] dump_stack_lvl+0x100/0x190 [ 484.718426][T13265] should_fail_ex.cold+0x5/0xa [ 484.718463][T13265] should_failslab+0xc2/0x120 [ 484.718501][T13265] kmem_cache_alloc_noprof+0x91/0x6a0 [ 484.718536][T13265] ? trace_kmem_cache_alloc+0xdd/0x100 [ 484.718573][T13265] ? security_file_alloc+0x34/0x2c0 [ 484.718616][T13265] security_file_alloc+0x34/0x2c0 [ 484.718653][T13265] init_file+0x95/0x480 [ 484.718686][T13265] alloc_empty_file+0x79/0x1c0 [ 484.718723][T13265] path_openat+0xe7/0x4280 [ 484.718750][T13265] ? __kasan_slab_alloc+0x89/0x90 [ 484.718785][T13265] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 484.718817][T13265] ? do_getname+0x35/0x390 [ 484.718850][T13265] ? do_sys_openat2+0xc7/0x1e0 [ 484.718883][T13265] ? __x64_sys_openat+0x12d/0x210 [ 484.718918][T13265] ? do_syscall_64+0x115/0x840 [ 484.718943][T13265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.718983][T13265] ? __pfx_path_openat+0x10/0x10 [ 484.719020][T13265] do_file_open+0x20e/0x430 [ 484.719049][T13265] ? __pfx_do_file_open+0x10/0x10 [ 484.719099][T13265] ? alloc_fd+0x471/0x7a0 [ 484.719126][T13265] ? do_getname+0x191/0x390 [ 484.719160][T13265] do_sys_openat2+0x10f/0x1e0 [ 484.719203][T13265] ? __pfx_do_sys_openat2+0x10/0x10 [ 484.719239][T13265] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 484.719350][T13265] ? __fget_files+0x21f/0x3d0 [ 484.719383][T13265] __x64_sys_openat+0x12d/0x210 [ 484.719422][T13265] ? __pfx___x64_sys_openat+0x10/0x10 [ 484.719457][T13265] ? ksys_write+0x1ac/0x250 [ 484.719495][T13265] do_syscall_64+0x115/0x840 [ 484.719517][T13265] ? clear_bhb_loop+0x40/0x90 [ 484.719546][T13265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.719572][T13265] RIP: 0033:0x7f61c495d68e [ 484.719594][T13265] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 484.719620][T13265] RSP: 002b:00007f61c58fcec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 484.719646][T13265] RAX: ffffffffffffffda RBX: 00007f61c58fd6c0 RCX: 00007f61c495d68e [ 484.719664][T13265] RDX: 0000000000000002 RSI: 00007f61c58fcf90 RDI: ffffffffffffff9c [ 484.719679][T13265] RBP: 00007f61c58fd090 R08: 0000000000000000 R09: 0000000000000000 [ 484.719696][T13265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.719711][T13265] R13: 00007f61c4c16038 R14: 00007f61c4c15fa0 R15: 00007ffc9a992d58 [ 484.719744][T13265] [ 485.056200][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 485.056225][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 485.070567][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 485.694289][T13285] zswap: compressor not available [ 485.702050][T13287] FAULT_INJECTION: forcing a failure. [ 485.702050][T13287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.741021][T13287] CPU: 1 UID: 0 PID: 13287 Comm: syz.2.1473 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.741068][T13287] Tainted: [L]=SOFTLOCKUP [ 485.741077][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 485.741093][T13287] Call Trace: [ 485.741101][T13287] [ 485.741112][T13287] dump_stack_lvl+0x100/0x190 [ 485.741141][T13287] should_fail_ex.cold+0x5/0xa [ 485.741169][T13287] _copy_to_iter+0x1f3/0x1720 [ 485.741271][T13287] ? __mutex_unlock_slowpath+0x35d/0x930 [ 485.741298][T13287] ? __pfx__copy_to_iter+0x10/0x10 [ 485.741319][T13287] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 485.741346][T13287] ? kernfs_put_active+0x93/0xe0 [ 485.741364][T13287] seq_read_iter+0xdab/0x1270 [ 485.741396][T13287] kernfs_fop_read_iter+0x46c/0x610 [ 485.741415][T13287] ? rw_verify_area+0xce/0x6d0 [ 485.741437][T13287] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 485.741458][T13287] vfs_read+0x82e/0xb40 [ 485.741485][T13287] ? __pfx_vfs_read+0x10/0x10 [ 485.741527][T13287] ksys_read+0x12a/0x250 [ 485.741551][T13287] ? __pfx_ksys_read+0x10/0x10 [ 485.741577][T13287] do_syscall_64+0x115/0x840 [ 485.741591][T13287] ? clear_bhb_loop+0x40/0x90 [ 485.741610][T13287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.741625][T13287] RIP: 0033:0x7fd20459ce59 [ 485.741638][T13287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.741655][T13287] RSP: 002b:00007fd20538a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.741671][T13287] RAX: ffffffffffffffda RBX: 00007fd204816270 RCX: 00007fd20459ce59 [ 485.741681][T13287] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000008 [ 485.741689][T13287] RBP: 00007fd20538a090 R08: 0000000000000000 R09: 0000000000000000 [ 485.741698][T13287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.741707][T13287] R13: 00007fd204816308 R14: 00007fd204816270 R15: 00007ffd04e74b68 [ 485.741726][T13287] [ 486.673232][T13293] capability: warning: `syz.1.1476' uses 32-bit capabilities (legacy support in use) [ 487.968330][T13332] FAULT_INJECTION: forcing a failure. [ 487.968330][T13332] name failslab, interval 1, probability 0, space 0, times 0 [ 488.014595][T13332] CPU: 1 UID: 0 PID: 13332 Comm: syz.2.1481 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.014643][T13332] Tainted: [L]=SOFTLOCKUP [ 488.014653][T13332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.014670][T13332] Call Trace: [ 488.014679][T13332] [ 488.014689][T13332] dump_stack_lvl+0x100/0x190 [ 488.014728][T13332] should_fail_ex.cold+0x5/0xa [ 488.014764][T13332] should_failslab+0xc2/0x120 [ 488.014802][T13332] kmem_cache_alloc_noprof+0x91/0x6a0 [ 488.014835][T13332] ? lockdep_init_map_type+0x5c/0x250 [ 488.014862][T13332] ? copy_process+0x453e/0x8030 [ 488.014901][T13332] copy_process+0x453e/0x8030 [ 488.014951][T13332] ? __pfx_copy_process+0x10/0x10 [ 488.014982][T13332] ? futex_wake+0x4ea/0x5e0 [ 488.015027][T13332] kernel_clone+0x176/0x9d0 [ 488.015062][T13332] ? __pfx_kernel_clone+0x10/0x10 [ 488.015117][T13332] __do_sys_clone+0xd9/0x120 [ 488.015150][T13332] ? __pfx___do_sys_clone+0x10/0x10 [ 488.015183][T13332] ? __fget_files+0x21f/0x3d0 [ 488.015233][T13332] do_syscall_64+0x115/0x840 [ 488.015257][T13332] ? clear_bhb_loop+0x40/0x90 [ 488.015289][T13332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.015316][T13332] RIP: 0033:0x7fd20459ce59 [ 488.015339][T13332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.015365][T13332] RSP: 002b:00007fd2053cbfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 488.015390][T13332] RAX: ffffffffffffffda RBX: 00007fd204816090 RCX: 00007fd20459ce59 [ 488.015408][T13332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.015424][T13332] RBP: 00007fd204632e6f R08: 0000000000000000 R09: 0000000000000000 [ 488.015440][T13332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.015457][T13332] R13: 00007fd204816128 R14: 00007fd204816090 R15: 00007ffd04e74b68 [ 488.015499][T13332] [ 489.550941][T13351] bond0: option packets_per_slave: invalid value ( Xµn) [ 489.585044][T13351] bond0: option packets_per_slave: allowed values 0 - 65535 [ 489.973775][T13349] bond0: option packets_per_slave: invalid value ( Xµn) [ 489.981266][T13349] bond0: option packets_per_slave: allowed values 0 - 65535 [ 489.990761][T13346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 490.000580][T13346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 490.015523][T13346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 490.026524][T13346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 490.332547][T13374] vivid-008: ================= START STATUS ================= [ 490.383426][T13374] vivid-008: ================== END STATUS ================== [ 491.418951][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 492.046296][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 492.053969][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 492.060179][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 492.715870][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 493.048519][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1502'. [ 494.434282][T13436] FAULT_INJECTION: forcing a failure. [ 494.434282][T13436] name failslab, interval 1, probability 0, space 0, times 0 [ 494.483792][T13436] CPU: 0 UID: 0 PID: 13436 Comm: syz.2.1506 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.483839][T13436] Tainted: [L]=SOFTLOCKUP [ 494.483849][T13436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 494.483866][T13436] Call Trace: [ 494.483875][T13436] [ 494.483885][T13436] dump_stack_lvl+0x100/0x190 [ 494.483925][T13436] should_fail_ex.cold+0x5/0xa [ 494.483972][T13436] should_failslab+0xc2/0x120 [ 494.484012][T13436] __kmalloc_cache_noprof+0x91/0x6c0 [ 494.484043][T13436] ? proc_self_get_link+0x189/0x1f0 [ 494.484091][T13436] proc_self_get_link+0x189/0x1f0 [ 494.484132][T13436] pick_link+0xac2/0x13c0 [ 494.484172][T13436] ? __pfx_proc_self_get_link+0x10/0x10 [ 494.484218][T13436] step_into_slowpath+0x9ba/0xf90 [ 494.484267][T13436] ? __pfx_step_into_slowpath+0x10/0x10 [ 494.484314][T13436] ? lookup_fast+0x2da/0x600 [ 494.484350][T13436] ? inode_permission+0x374/0x620 [ 494.484391][T13436] link_path_walk+0xf28/0x1cc0 [ 494.484445][T13436] path_openat+0x1c9/0x4280 [ 494.484472][T13436] ? __kasan_slab_alloc+0x89/0x90 [ 494.484504][T13436] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 494.484534][T13436] ? do_getname+0x35/0x390 [ 494.484563][T13436] ? __x64_sys_openat+0x12d/0x210 [ 494.484608][T13436] ? __pfx_path_openat+0x10/0x10 [ 494.484647][T13436] do_file_open+0x20e/0x430 [ 494.484678][T13436] ? __pfx_do_file_open+0x10/0x10 [ 494.484733][T13436] ? alloc_fd+0x471/0x7a0 [ 494.484764][T13436] ? do_getname+0x191/0x390 [ 494.484801][T13436] do_sys_openat2+0x10f/0x1e0 [ 494.484838][T13436] ? __pfx_do_sys_openat2+0x10/0x10 [ 494.484875][T13436] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 494.484933][T13436] __x64_sys_openat+0x12d/0x210 [ 494.484980][T13436] ? __pfx___x64_sys_openat+0x10/0x10 [ 494.485031][T13436] do_syscall_64+0x115/0x840 [ 494.485056][T13436] ? clear_bhb_loop+0x40/0x90 [ 494.485090][T13436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.485120][T13436] RIP: 0033:0x7fd20459ce59 [ 494.485143][T13436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.485167][T13436] RSP: 002b:00007fd2053ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 494.485193][T13436] RAX: ffffffffffffffda RBX: 00007fd204815fa0 RCX: 00007fd20459ce59 [ 494.485212][T13436] RDX: 0000000000050201 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 494.485230][T13436] RBP: 00007fd204632e6f R08: 0000000000000000 R09: 0000000000000000 [ 494.485246][T13436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.485262][T13436] R13: 00007fd204816038 R14: 00007fd204815fa0 R15: 00007ffd04e74b68 [ 494.485299][T13436] [ 494.944783][T13444] nbd: illegal input index -1024 [ 496.722333][T13457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 496.736077][T13457] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 496.752528][T13457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 496.760118][T13457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.803612][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 496.951723][T13474] HfR: left promiscuous mode [ 497.754424][T13492] bond0: option packets_per_slave: invalid value ( Xµn) [ 497.798532][T13492] bond0: option packets_per_slave: allowed values 0 - 65535 [ 498.119160][T13485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 498.138902][T13485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 498.152888][T13485] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 498.168268][T13485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 498.259279][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'. [ 499.616224][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 500.168750][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 500.174926][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 500.182776][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 500.224350][T13524] random: crng reseeded on system resumption [ 500.901176][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.910440][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.993881][T13599] blktrace: Concurrent blktraces are not allowed on nbd5 [ 505.031805][T13599] blktrace: Concurrent blktraces are not allowed on nbd5 [ 505.158670][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 506.306113][T13615] blktrace: Concurrent blktraces are not allowed on nbd5 [ 506.318966][ T5632] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 506.351212][T13615] blktrace: Concurrent blktraces are not allowed on nbd5 [ 510.272363][T13669] zswap: compressor 000 not available [ 510.479015][T13668] zswap: compressor 000 not available [ 510.681222][T13679] bond0: option packets_per_slave: invalid value ( Xµn) [ 510.711591][T13679] bond0: option packets_per_slave: allowed values 0 - 65535 [ 511.003914][T13673] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 511.031286][T13685] bond0: option packets_per_slave: invalid value ( Xµn) [ 511.055667][T13673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.062060][T13685] bond0: option packets_per_slave: allowed values 0 - 65535 [ 511.092442][T13673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 511.124564][T13673] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 511.259525][T13673] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 511.513656][T13689] bridge0: port 3(netdevsim3) entered blocking state [ 511.546705][T13689] bridge0: port 3(netdevsim3) entered disabled state [ 511.566304][T13689] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 511.608733][T13689] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 511.646578][T13689] bridge0: port 3(netdevsim3) entered blocking state [ 511.654990][T13689] bridge0: port 3(netdevsim3) entered forwarding state [ 513.069403][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 513.159066][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 513.308135][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 513.712992][T13694] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 513.745042][T13694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 513.769003][T13694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 513.830492][T13694] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 513.865857][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 513.906532][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 513.920611][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 513.930234][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 513.940619][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 513.948473][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.499755][T13736] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input10 [ 515.294503][T13750] blktrace: Concurrent blktraces are not allowed on nbd5 [ 515.329291][T13750] blktrace: Concurrent blktraces are not allowed on nbd5 [ 515.776893][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 515.828811][T11546] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.866843][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 516.016385][ T5631] Bluetooth: hci4: command tx timeout [ 516.088449][T13747] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 516.088475][T13754] bond0: option packets_per_slave: invalid value () [ 516.105362][T13754] bond0: option packets_per_slave: allowed values 0 - 65535 [ 516.105553][T13747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 516.194457][T13747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 516.207714][T13747] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 516.240391][T13747] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 516.385711][T11546] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.446977][T13747] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 516.690996][T13764] vivid-007: ================= START STATUS ================= [ 516.699170][T13764] vivid-007: Generate PTS: true [ 516.707234][T13764] vivid-007: Generate SCR: true [ 516.712334][T13764] tpg source WxH: 320x240 (Y'CbCr) [ 516.736824][T13764] tpg field: 1 [ 516.741795][T13764] tpg crop: (0,0)/320x240 [ 516.754644][T13764] tpg compose: (0,0)/320x240 [ 516.761282][T13764] tpg colorspace: 8 [ 516.769439][T13764] tpg transfer function: 0/0 [ 516.778095][T13764] tpg Y'CbCr encoding: 0/0 [ 516.786355][T13764] tpg quantization: 0/0 [ 516.795024][T13764] tpg RGB range: 0/2 [ 516.801402][T13764] vivid-007: ================== END STATUS ================== [ 516.967098][T11546] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.210463][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 517.226637][T11546] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.165993][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 518.256175][ T5632] Bluetooth: hci4: command 0x040f tx timeout [ 518.257425][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 518.337691][T11546] bridge_slave_1: left allmulticast mode [ 518.366618][T11546] bridge_slave_1: left promiscuous mode [ 518.383992][T11546] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.432621][T11546] bridge_slave_0: left allmulticast mode [ 518.449287][T11546] bridge_slave_0: left promiscuous mode [ 518.455204][T13796] blktrace: Concurrent blktraces are not allowed on nbd5 [ 518.467458][T11546] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.487495][T13796] blktrace: Concurrent blktraces are not allowed on nbd5 [ 518.803746][T11546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.825337][T11546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.835902][T11546] bond0 (unregistering): Released all slaves [ 518.849438][T13708] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.858136][T13708] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.874270][T13708] bridge_slave_0: entered allmulticast mode [ 518.882313][T13708] bridge_slave_0: entered promiscuous mode [ 518.919888][T13708] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.935244][T13708] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.967994][T13708] bridge_slave_1: entered allmulticast mode [ 519.006505][T13708] bridge_slave_1: entered promiscuous mode [ 519.029697][T11546] tipc: Left network mode [ 519.187791][T13708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.294586][T13708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.358196][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 519.476470][T13708] team0: Port device team_slave_0 added [ 519.484687][T13815] zswap: compressor not available [ 519.532875][T13708] team0: Port device team_slave_1 added [ 519.607710][T13708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.634229][T13708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.662290][T13708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.715773][T13708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.727148][T13708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.756421][T13708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.768960][ T5631] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 520.068405][T11546] hsr_slave_0: left promiscuous mode [ 520.108118][T11546] hsr_slave_1: left promiscuous mode [ 520.125576][T11546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.146338][T11546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.170255][T11546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.179236][T11546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.212567][T11546] veth1_macvtap: left promiscuous mode [ 520.222832][T11546] veth0_macvtap: left promiscuous mode [ 520.229742][T11546] veth1_vlan: left promiscuous mode [ 520.235461][T11546] veth0_vlan: left promiscuous mode [ 520.316628][ T5631] Bluetooth: hci4: command 0x040f tx timeout [ 520.799621][T13853] blktrace: Concurrent blktraces are not allowed on nbd5 [ 520.850512][T13853] blktrace: Concurrent blktraces are not allowed on nbd5 [ 520.963531][T11546] team0 (unregistering): Port device team_slave_1 removed [ 521.009443][T11546] team0 (unregistering): Port device team_slave_0 removed [ 521.158037][T13708] hsr_slave_0: entered promiscuous mode [ 521.173433][T13708] hsr_slave_1: entered promiscuous mode [ 521.179904][T13708] debugfs: 'hsr0' already exists in 'hsr' [ 521.186218][T13708] Cannot create hsr debugfs directory [ 521.193789][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 522.097239][T13876] blktrace: Concurrent blktraces are not allowed on nbd5 [ 522.121374][T13876] blktrace: Concurrent blktraces are not allowed on nbd5 [ 522.387927][ T5631] Bluetooth: hci4: command 0x040f tx timeout [ 522.810784][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 523.526583][T13708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 523.557341][T13708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.573953][T13708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 523.599003][T13708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.703666][T13708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 523.734096][T13708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.751663][T13708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 523.796041][T13708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 524.457850][ T5631] Bluetooth: hci4: command 0x040f tx timeout [ 524.545829][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 524.663360][T13708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.739695][T13708] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.795105][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.802354][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.884262][T13933] FAULT_INJECTION: forcing a failure. [ 524.884262][T13933] name failslab, interval 1, probability 0, space 0, times 0 [ 524.900772][T13933] CPU: 0 UID: 0 PID: 13933 Comm: syz.2.1590 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.900824][T13933] Tainted: [L]=SOFTLOCKUP [ 524.900834][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 524.900851][T13933] Call Trace: [ 524.900861][T13933] [ 524.900871][T13933] dump_stack_lvl+0x100/0x190 [ 524.900915][T13933] should_fail_ex.cold+0x5/0xa [ 524.900952][T13933] should_failslab+0xc2/0x120 [ 524.900993][T13933] kmem_cache_alloc_noprof+0x91/0x6a0 [ 524.901031][T13933] ? trace_kmem_cache_alloc+0xdd/0x100 [ 524.901073][T13933] ? security_file_alloc+0x34/0x2c0 [ 524.901116][T13933] security_file_alloc+0x34/0x2c0 [ 524.901155][T13933] init_file+0x95/0x480 [ 524.901189][T13933] alloc_empty_file+0x79/0x1c0 [ 524.901226][T13933] path_openat+0xe7/0x4280 [ 524.901254][T13933] ? __kasan_slab_alloc+0x89/0x90 [ 524.901289][T13933] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 524.901321][T13933] ? do_getname+0x35/0x390 [ 524.901353][T13933] ? do_sys_openat2+0xc7/0x1e0 [ 524.901389][T13933] ? __x64_sys_openat+0x12d/0x210 [ 524.901423][T13933] ? do_syscall_64+0x115/0x840 [ 524.901448][T13933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.901488][T13933] ? __pfx_path_openat+0x10/0x10 [ 524.901529][T13933] do_file_open+0x20e/0x430 [ 524.901563][T13933] ? __pfx_do_file_open+0x10/0x10 [ 524.901617][T13933] ? alloc_fd+0x471/0x7a0 [ 524.901649][T13933] ? do_getname+0x191/0x390 [ 524.901694][T13933] do_sys_openat2+0x10f/0x1e0 [ 524.901733][T13933] ? __pfx_do_sys_openat2+0x10/0x10 [ 524.901774][T13933] ? __do_sys_capset+0xfb/0x460 [ 524.901821][T13933] __x64_sys_openat+0x12d/0x210 [ 524.901860][T13933] ? __pfx___x64_sys_openat+0x10/0x10 [ 524.901909][T13933] do_syscall_64+0x115/0x840 [ 524.901938][T13933] ? clear_bhb_loop+0x40/0x90 [ 524.901971][T13933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.901999][T13933] RIP: 0033:0x7fd20459ce59 [ 524.902021][T13933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.902044][T13933] RSP: 002b:00007fd2053ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 524.902067][T13933] RAX: ffffffffffffffda RBX: 00007fd204815fa0 RCX: 00007fd20459ce59 [ 524.902082][T13933] RDX: 0000000000000402 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 524.902100][T13933] RBP: 00007fd204632e6f R08: 0000000000000000 R09: 0000000000000000 [ 524.902115][T13933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.902131][T13933] R13: 00007fd204816038 R14: 00007fd204815fa0 R15: 00007ffd04e74b68 [ 524.902164][T13933] [ 525.169199][T11546] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.176432][T11546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.190133][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 525.318129][T13904] kexec: Could not allocate control_code_buffer [ 525.689946][T13945] futex_atomic_op_inuser: 28 callbacks suppressed [ 525.689969][T13945] futex_wake_op: syz.0.1591 tries to shift op by -2048; fix this program [ 525.783282][T13938] futex_wake_op: syz.2.1590 tries to shift op by -1; fix this program [ 526.426846][T13964] blktrace: Concurrent blktraces are not allowed on nbd5 [ 526.501461][T13964] blktrace: Concurrent blktraces are not allowed on nbd5 [ 526.538266][ T5631] Bluetooth: hci4: command 0x040f tx timeout [ 526.573390][T13708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.672719][T13708] veth0_vlan: entered promiscuous mode [ 527.720274][T13708] veth1_vlan: entered promiscuous mode [ 527.850016][T13708] veth0_macvtap: entered promiscuous mode [ 527.892055][T13708] veth1_macvtap: entered promiscuous mode [ 527.918662][T13980] nvme_fabrics: missing parameter 'transport=%s' [ 527.934241][T13980] nvme_fabrics: missing parameter 'nqn=%s' [ 527.952899][T13708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.976450][T13708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.012038][T11546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.046130][T11546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.067503][T11546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.108784][T11546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.332534][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.366607][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.464141][T11551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.481088][T11551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.288024][T14007] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1600'. [ 529.444908][ T5631] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5 [ 530.011820][T14027] openvswitch: netlink: Multiple metadata blocks provided [ 531.167475][T14043] netlink: Unknown conntrack attr (type=257, max=9) [ 531.313420][T14024] bond0: option packets_per_slave: invalid value () [ 531.335246][T14024] bond0: option packets_per_slave: allowed values 0 - 65535 [ 531.421334][T14028] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 531.449580][T14028] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 531.458818][T14028] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 531.480063][T14028] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 532.294014][T14061] bond0: option packets_per_slave: invalid value ( Xµn) [ 532.304984][T14061] bond0: option packets_per_slave: allowed values 0 - 65535 [ 532.645059][T14053] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 532.665289][T14053] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 532.689186][T14053] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 532.706937][T14053] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 533.332177][T14079] bond0: option packets_per_slave: invalid value ( Xµn) [ 533.339582][T14079] bond0: option packets_per_slave: allowed values 0 - 65535 [ 533.533351][T14075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 533.559370][T14075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 533.580849][T14075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 533.603355][T14075] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 534.729911][T14108] FAULT_INJECTION: forcing a failure. [ 534.729911][T14108] name failslab, interval 1, probability 0, space 0, times 0 [ 534.768386][T14108] CPU: 0 UID: 0 PID: 14108 Comm: syz.4.1617 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.768434][T14108] Tainted: [L]=SOFTLOCKUP [ 534.768445][T14108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 534.768462][T14108] Call Trace: [ 534.768472][T14108] [ 534.768483][T14108] dump_stack_lvl+0x100/0x190 [ 534.768528][T14108] should_fail_ex.cold+0x5/0xa [ 534.768568][T14108] should_failslab+0xc2/0x120 [ 534.768611][T14108] __kmalloc_cache_noprof+0x91/0x6c0 [ 534.768644][T14108] ? drm_atomic_commit_alloc+0xb8/0x120 [ 534.768800][T14108] drm_atomic_commit_alloc+0xb8/0x120 [ 534.768839][T14108] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 534.768940][T14108] ? trace_contention_end+0x126/0x160 [ 534.768974][T14108] ? __mutex_lock+0x26d/0x1bd0 [ 534.769008][T14108] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 534.769052][T14108] ? drm_master_internal_acquire+0x21/0x80 [ 534.769134][T14108] drm_client_modeset_commit_locked+0x14d/0x580 [ 534.769186][T14108] drm_client_modeset_commit+0x4f/0x80 [ 534.769230][T14108] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 534.769312][T14108] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 534.769359][T14108] drm_fbdev_client_restore+0x1b/0x30 [ 534.769451][T14108] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 534.769484][T14108] drm_client_dev_restore+0x205/0x2a0 [ 534.769534][T14108] drm_release+0x2c6/0x360 [ 534.769626][T14108] ? __pfx_drm_release+0x10/0x10 [ 534.769665][T14108] __fput+0x3ff/0xb50 [ 534.769712][T14108] task_work_run+0x150/0x240 [ 534.769757][T14108] ? __pfx_task_work_run+0x10/0x10 [ 534.769812][T14108] exit_to_user_mode_loop+0x1d8/0x6f0 [ 534.769843][T14108] ? rcu_is_watching+0x12/0xc0 [ 534.769883][T14108] do_syscall_64+0x652/0x840 [ 534.769910][T14108] ? clear_bhb_loop+0x40/0x90 [ 534.769946][T14108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.769976][T14108] RIP: 0033:0x7f4f65f9ce59 [ 534.770002][T14108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.770030][T14108] RSP: 002b:00007f4f641f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 534.770059][T14108] RAX: 0000000000000000 RBX: 00007f4f66216090 RCX: 00007f4f65f9ce59 [ 534.770079][T14108] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 534.770112][T14108] RBP: 00007f4f66032e6f R08: 0000000000000000 R09: 0000000000000000 [ 534.770131][T14108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.770149][T14108] R13: 00007f4f66216128 R14: 00007f4f66216090 R15: 00007fffb04af988 [ 534.770191][T14108] [ 535.027555][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 535.565435][T14128] blktrace: Concurrent blktraces are not allowed on nbd5 [ 535.596213][T14128] blktrace: Concurrent blktraces are not allowed on nbd5 [ 535.606130][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 535.606157][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 535.614248][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 537.764595][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'. [ 538.434302][T14207] blktrace: Concurrent blktraces are not allowed on nbd5 [ 538.485102][T14207] blktrace: Concurrent blktraces are not allowed on nbd5 [ 539.619486][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 541.775070][T14297] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 542.253979][T14311] FAULT_INJECTION: forcing a failure. [ 542.253979][T14311] name failslab, interval 1, probability 0, space 0, times 0 [ 542.327901][T14311] CPU: 0 UID: 0 PID: 14311 Comm: syz.2.1650 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.327946][T14311] Tainted: [L]=SOFTLOCKUP [ 542.327955][T14311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 542.327975][T14311] Call Trace: [ 542.327984][T14311] [ 542.327994][T14311] dump_stack_lvl+0x100/0x190 [ 542.328034][T14311] should_fail_ex.cold+0x5/0xa [ 542.328072][T14311] should_failslab+0xc2/0x120 [ 542.328115][T14311] __kmalloc_cache_noprof+0x91/0x6c0 [ 542.328146][T14311] ? snd_timer_user_open+0x6b/0x180 [ 542.328282][T14311] ? __pfx_snd_timer_user_open+0x10/0x10 [ 542.328305][T14311] snd_timer_user_open+0x6b/0x180 [ 542.328329][T14311] snd_open+0x201/0x450 [ 542.328391][T14311] ? __pfx_snd_open+0x10/0x10 [ 542.328410][T14311] chrdev_open+0x234/0x6a0 [ 542.328426][T14311] ? __pfx_apparmor_file_open+0x10/0x10 [ 542.328443][T14311] ? __pfx_chrdev_open+0x10/0x10 [ 542.328463][T14311] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 542.328508][T14311] do_dentry_open+0x6ab/0x14d0 [ 542.328533][T14311] ? __pfx_chrdev_open+0x10/0x10 [ 542.328552][T14311] vfs_open+0x82/0x3f0 [ 542.328573][T14311] path_openat+0x2873/0x4280 [ 542.328596][T14311] ? __pfx_path_openat+0x10/0x10 [ 542.328616][T14311] do_file_open+0x20e/0x430 [ 542.328633][T14311] ? __pfx_do_file_open+0x10/0x10 [ 542.328661][T14311] ? alloc_fd+0x471/0x7a0 [ 542.328677][T14311] ? do_getname+0x191/0x390 [ 542.328697][T14311] do_sys_openat2+0x10f/0x1e0 [ 542.328716][T14311] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.328737][T14311] ? __fget_files+0x21f/0x3d0 [ 542.328754][T14311] __x64_sys_openat+0x12d/0x210 [ 542.328774][T14311] ? __pfx___x64_sys_openat+0x10/0x10 [ 542.328801][T14311] do_syscall_64+0x115/0x840 [ 542.328815][T14311] ? clear_bhb_loop+0x40/0x90 [ 542.328833][T14311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.328848][T14311] RIP: 0033:0x7fd20459ce59 [ 542.328868][T14311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.328882][T14311] RSP: 002b:00007fd2053cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 542.328898][T14311] RAX: ffffffffffffffda RBX: 00007fd204816090 RCX: 00007fd20459ce59 [ 542.328908][T14311] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 542.328917][T14311] RBP: 00007fd204632e6f R08: 0000000000000000 R09: 0000000000000000 [ 542.328926][T14311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.328935][T14311] R13: 00007fd204816128 R14: 00007fd204816090 R15: 00007ffd04e74b68 [ 542.328954][T14311] [ 545.549983][T14377] bond0: option packets_per_slave: invalid value ( Xµn) [ 545.572827][T14377] bond0: option packets_per_slave: allowed values 0 - 65535 [ 545.925216][T14387] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1667'. [ 545.997941][T14390] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1667'. [ 546.044201][T14372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 546.061067][T14372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 546.080526][T14372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 546.103757][T14372] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 547.273936][T14418] nbd: illegal input index -1024 [ 547.391528][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 548.108045][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 548.114171][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 548.120350][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 548.568227][T14444] FAULT_INJECTION: forcing a failure. [ 548.568227][T14444] name failslab, interval 1, probability 0, space 0, times 0 [ 548.654728][T14444] CPU: 0 UID: 0 PID: 14444 Comm: syz.0.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.654779][T14444] Tainted: [L]=SOFTLOCKUP [ 548.654790][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.654808][T14444] Call Trace: [ 548.654817][T14444] [ 548.654828][T14444] dump_stack_lvl+0x100/0x190 [ 548.654876][T14444] should_fail_ex.cold+0x5/0xa [ 548.654916][T14444] should_failslab+0xc2/0x120 [ 548.654959][T14444] __kmalloc_noprof+0xfc/0x820 [ 548.654997][T14444] ? process_vm_rw_core.constprop.0+0x1d7/0x950 [ 548.655042][T14444] process_vm_rw_core.constprop.0+0x1d7/0x950 [ 548.655081][T14444] ? futex_unqueue+0x13d/0x2c0 [ 548.655115][T14444] ? __futex_wait+0x256/0x300 [ 548.655156][T14444] ? __pfx___futex_wait+0x10/0x10 [ 548.655195][T14444] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 548.655235][T14444] ? import_ubuf+0x1b6/0x220 [ 548.655292][T14444] ? iovec_from_user+0xda/0x140 [ 548.655344][T14444] process_vm_rw+0x226/0x2d0 [ 548.655374][T14444] ? futex_wait+0x11e/0x370 [ 548.655412][T14444] ? __pfx_process_vm_rw+0x10/0x10 [ 548.655448][T14444] ? find_held_lock+0x2b/0x80 [ 548.655480][T14444] ? ksys_write+0x190/0x250 [ 548.655505][T14444] ? ksys_write+0x190/0x250 [ 548.655540][T14444] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 548.655585][T14444] ? 0xffffffff81000000 [ 548.655616][T14444] ? xfd_validate_state+0x129/0x190 [ 548.655654][T14444] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 548.655688][T14444] ? do_syscall_64+0x90/0x840 [ 548.655710][T14444] ? lockdep_hardirqs_on+0x78/0x100 [ 548.655750][T14444] do_syscall_64+0x115/0x840 [ 548.655772][T14444] ? clear_bhb_loop+0x40/0x90 [ 548.655804][T14444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.655832][T14444] RIP: 0033:0x7f61c499ce59 [ 548.655853][T14444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.655878][T14444] RSP: 002b:00007f61c58dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 548.655903][T14444] RAX: ffffffffffffffda RBX: 00007f61c4c16090 RCX: 00007f61c499ce59 [ 548.655921][T14444] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 00000000000006dd [ 548.655937][T14444] RBP: 00007f61c4a32e6f R08: 0000000000000006 R09: 0000000000000000 [ 548.655953][T14444] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 548.655969][T14444] R13: 00007f61c4c16128 R14: 00007f61c4c16090 R15: 00007ffc9a992d58 [ 548.656003][T14444] [ 548.663186][T14442] FAULT_INJECTION: forcing a failure. [ 548.663186][T14442] name failslab, interval 1, probability 0, space 0, times 0 [ 548.789964][T14434] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 548.915601][T14442] CPU: 1 UID: 0 PID: 14442 Comm: syz.0.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.915644][T14442] Tainted: [L]=SOFTLOCKUP [ 548.915654][T14442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.915670][T14442] Call Trace: [ 548.915680][T14442] [ 548.915690][T14442] dump_stack_lvl+0x100/0x190 [ 548.915731][T14442] should_fail_ex.cold+0x5/0xa [ 548.915769][T14442] should_failslab+0xc2/0x120 [ 548.915817][T14442] __kmalloc_noprof+0xfc/0x820 [ 548.915854][T14442] ? tomoyo_encode2+0xfb/0x3c0 [ 548.915900][T14442] tomoyo_encode2+0xfb/0x3c0 [ 548.915944][T14442] tomoyo_encode+0x29/0x50 [ 548.915981][T14442] tomoyo_realpath_from_path+0x18c/0x690 [ 548.916028][T14442] tomoyo_check_open_permission+0x2af/0x3c0 [ 548.916065][T14442] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 548.916111][T14442] ? hook_file_open+0x24f/0x8f0 [ 548.916173][T14442] ? path_get+0x61/0x80 [ 548.916208][T14442] tomoyo_file_open+0x6b/0x90 [ 548.916236][T14442] security_file_open+0xb5/0x1e0 [ 548.916274][T14442] do_dentry_open+0x588/0x14d0 [ 548.916312][T14442] vfs_open+0x82/0x3f0 [ 548.916351][T14442] path_openat+0x2873/0x4280 [ 548.916396][T14442] ? __pfx_path_openat+0x10/0x10 [ 548.916435][T14442] do_file_open+0x20e/0x430 [ 548.916466][T14442] ? __pfx_do_file_open+0x10/0x10 [ 548.916521][T14442] ? alloc_fd+0x471/0x7a0 [ 548.916553][T14442] ? do_getname+0x191/0x390 [ 548.916591][T14442] do_sys_openat2+0x10f/0x1e0 [ 548.916633][T14442] ? __pfx_do_sys_openat2+0x10/0x10 [ 548.916672][T14442] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 548.916731][T14442] __x64_sys_openat+0x12d/0x210 [ 548.916769][T14442] ? __pfx___x64_sys_openat+0x10/0x10 [ 548.916826][T14442] do_syscall_64+0x115/0x840 [ 548.916851][T14442] ? clear_bhb_loop+0x40/0x90 [ 548.916886][T14442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.916919][T14442] RIP: 0033:0x7f61c499ce59 [ 548.916943][T14442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.916969][T14442] RSP: 002b:00007f61c58fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.916996][T14442] RAX: ffffffffffffffda RBX: 00007f61c4c15fa0 RCX: 00007f61c499ce59 [ 548.917015][T14442] RDX: 0000000000084000 RSI: 0000200000002740 RDI: ffffffffffffff9c [ 548.917033][T14442] RBP: 00007f61c4a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 548.917050][T14442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.917066][T14442] R13: 00007f61c4c16038 R14: 00007f61c4c15fa0 R15: 00007ffc9a992d58 [ 548.917103][T14442] [ 548.921606][T14442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 549.007064][T14434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.203447][T14434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.213117][T14434] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 550.108873][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 550.160024][ T29] audit: type=1804 audit(1782753532.839:11): pid=14461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1685" name="/newroot/sys/kernel/tracing/dynamic_events" dev="tracefs" ino=37 res=1 errno=0 [ 551.054919][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 551.213832][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 551.219977][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 551.230899][T14476] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 551.671424][T14488] nbd: illegal input index -1024 [ 551.748169][T14487] zswap: compressor not available [ 553.580331][T14503] bond0: option packets_per_slave: invalid value ( Xµn) [ 553.619508][T14503] bond0: option packets_per_slave: allowed values 0 - 65535 [ 553.970155][T14502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 553.993164][T14502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 554.003994][T14502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 554.028797][T14502] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 554.232729][ T29] audit: type=1800 audit(1782753536.948:12): pid=14512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1697" name="dbroot" dev="configfs" ino=48128 res=0 errno=0 [ 554.283765][T14512] db_root: cannot open: /dev/audio1 [ 554.306296][T14512] db_root: not a directory: /dev/audio1 [ 554.674891][T14518] FAULT_INJECTION: forcing a failure. [ 554.674891][T14518] name failslab, interval 1, probability 0, space 0, times 0 [ 554.764628][T14518] CPU: 1 UID: 0 PID: 14518 Comm: syz.0.1698 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.764673][T14518] Tainted: [L]=SOFTLOCKUP [ 554.764683][T14518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.764699][T14518] Call Trace: [ 554.764709][T14518] [ 554.764720][T14518] dump_stack_lvl+0x100/0x190 [ 554.764765][T14518] should_fail_ex.cold+0x5/0xa [ 554.764804][T14518] should_failslab+0xc2/0x120 [ 554.764846][T14518] kmem_cache_alloc_noprof+0x91/0x6a0 [ 554.764882][T14518] ? d_instantiate+0x8a/0xb0 [ 554.764924][T14518] ? d_instantiate+0x8a/0xb0 [ 554.764956][T14518] ? alloc_empty_file+0x5b/0x1c0 [ 554.765001][T14518] alloc_empty_file+0x5b/0x1c0 [ 554.765038][T14518] alloc_file_pseudo+0x183/0x290 [ 554.765077][T14518] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 554.765125][T14518] __shmem_file_setup+0x205/0x460 [ 554.765207][T14518] ? __pfx___shmem_file_setup+0x10/0x10 [ 554.765254][T14518] ? vm_area_alloc+0x1f/0x160 [ 554.765286][T14518] shmem_zero_setup+0x96/0x1b0 [ 554.765322][T14518] __mmap_region+0x24ef/0x2db0 [ 554.765357][T14518] ? __lock_acquire+0x49f/0x1a40 [ 554.765385][T14518] ? __pfx___mmap_region+0x10/0x10 [ 554.765417][T14518] ? __lock_acquire+0x49f/0x1a40 [ 554.765445][T14518] ? __lock_acquire+0x49f/0x1a40 [ 554.765490][T14518] ? __lock_acquire+0x49f/0x1a40 [ 554.765518][T14518] ? do_raw_spin_unlock+0x145/0x1e0 [ 554.765552][T14518] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 554.765684][T14518] ? lockdep_hardirqs_on+0x78/0x100 [ 554.765729][T14518] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 554.765819][T14518] ? preempt_schedule_thunk+0x16/0x40 [ 554.765859][T14518] mmap_region+0x35d/0x620 [ 554.765893][T14518] ? rcu_is_watching+0x12/0xc0 [ 554.765938][T14518] ? __pfx_mmap_region+0x10/0x10 [ 554.765976][T14518] ? cap_mmap_addr+0x4b/0x120 [ 554.766004][T14518] ? bpf_lsm_mmap_addr+0x9/0x30 [ 554.766040][T14518] ? security_mmap_addr+0x71/0x1e0 [ 554.766077][T14518] ? __get_unmapped_area+0x255/0x3e0 [ 554.766118][T14518] do_mmap+0xc63/0x12f0 [ 554.766165][T14518] ? __pfx_do_mmap+0x10/0x10 [ 554.766205][T14518] ? __pfx_down_write_killable+0x10/0x10 [ 554.766245][T14518] vm_mmap_pgoff+0x29e/0x470 [ 554.766291][T14518] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 554.766337][T14518] ? __pfx_do_futex+0x10/0x10 [ 554.766377][T14518] ksys_mmap_pgoff+0xe4/0x610 [ 554.766417][T14518] ? __x64_sys_futex+0x358/0x4d0 [ 554.766450][T14518] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 554.766489][T14518] ? xfd_validate_state+0x129/0x190 [ 554.766532][T14518] __x64_sys_mmap+0x125/0x190 [ 554.766573][T14518] do_syscall_64+0x115/0x840 [ 554.766599][T14518] ? clear_bhb_loop+0x40/0x90 [ 554.766634][T14518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.766664][T14518] RIP: 0033:0x7f61c499ce59 [ 554.766690][T14518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.766717][T14518] RSP: 002b:00007f61c58fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 554.766745][T14518] RAX: ffffffffffffffda RBX: 00007f61c4c15fa0 RCX: 00007f61c499ce59 [ 554.766764][T14518] RDX: 00004000000000df RSI: 000000000002000d RDI: 0000000000000000 [ 554.766783][T14518] RBP: 00007f61c4a32e6f R08: 0000000000000404 R09: 0000000000008000 [ 554.766800][T14518] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 554.766817][T14518] R13: 00007f61c4c16038 R14: 00007f61c4c15fa0 R15: 00007ffc9a992d58 [ 554.766856][T14518] [ 555.422720][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 556.071668][ T5631] Bluetooth: hci4: command 0x040f tx timeout [ 556.078710][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 556.078744][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 556.360222][T14534] netlink: 'syz.4.1702': attribute type 4 has an invalid length. [ 556.382017][T14534] netlink: 314 bytes leftover after parsing attributes in process `syz.4.1702'. [ 559.243575][T14562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 559.270719][T14562] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 559.286869][T14562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 559.314827][T14562] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 559.926799][ T5632] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 560.133584][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 560.869659][T14586] kexec: Could not allocate control_code_buffer [ 561.019489][T14603] FAULT_INJECTION: forcing a failure. [ 561.019489][T14603] name failslab, interval 1, probability 0, space 0, times 0 [ 561.051202][T14603] CPU: 1 UID: 0 PID: 14603 Comm: syz.2.1717 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.051248][T14603] Tainted: [L]=SOFTLOCKUP [ 561.051258][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 561.051276][T14603] Call Trace: [ 561.051285][T14603] [ 561.051295][T14603] dump_stack_lvl+0x100/0x190 [ 561.051338][T14603] should_fail_ex.cold+0x5/0xa [ 561.051388][T14603] should_failslab+0xc2/0x120 [ 561.051430][T14603] kmem_cache_alloc_noprof+0x91/0x6a0 [ 561.051466][T14603] ? __pfx_map_id_range_down+0x10/0x10 [ 561.051508][T14603] ? security_inode_alloc+0x3b/0x2c0 [ 561.051550][T14603] security_inode_alloc+0x3b/0x2c0 [ 561.051583][T14603] inode_init_always_gfp+0xc77/0xfb0 [ 561.051620][T14603] alloc_inode+0x8e/0x250 [ 561.051659][T14603] path_from_stashed+0x25b/0x750 [ 561.051691][T14603] ? do_raw_spin_unlock+0x145/0x1e0 [ 561.051732][T14603] ns_get_path+0x60/0x80 [ 561.051764][T14603] proc_ns_get_link+0x25b/0x2e0 [ 561.051809][T14603] ? __pfx_proc_ns_get_link+0x10/0x10 [ 561.051854][T14603] ? atime_needs_update+0x8b/0x6b0 [ 561.051897][T14603] pick_link+0xd17/0x13c0 [ 561.051939][T14603] ? __pfx_proc_ns_get_link+0x10/0x10 [ 561.051987][T14603] step_into_slowpath+0x9ba/0xf90 [ 561.052036][T14603] ? rcu_is_watching+0x12/0xc0 [ 561.052071][T14603] ? __pfx_step_into_slowpath+0x10/0x10 [ 561.052112][T14603] ? find_held_lock+0x2b/0x80 [ 561.052162][T14603] path_openat+0x13b5/0x4280 [ 561.052209][T14603] ? __pfx_path_openat+0x10/0x10 [ 561.052247][T14603] do_file_open+0x20e/0x430 [ 561.052278][T14603] ? __pfx_do_file_open+0x10/0x10 [ 561.052335][T14603] ? alloc_fd+0x471/0x7a0 [ 561.052378][T14603] ? do_getname+0x191/0x390 [ 561.052418][T14603] do_sys_openat2+0x10f/0x1e0 [ 561.052457][T14603] ? __pfx_do_sys_openat2+0x10/0x10 [ 561.052499][T14603] ? __fget_files+0x21f/0x3d0 [ 561.052534][T14603] __x64_sys_openat+0x12d/0x210 [ 561.052574][T14603] ? __pfx___x64_sys_openat+0x10/0x10 [ 561.052626][T14603] do_syscall_64+0x115/0x840 [ 561.052651][T14603] ? clear_bhb_loop+0x40/0x90 [ 561.052684][T14603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.052712][T14603] RIP: 0033:0x7fd20455d68e [ 561.052736][T14603] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 561.052764][T14603] RSP: 002b:00007fd2053ecec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 561.052791][T14603] RAX: ffffffffffffffda RBX: 00007fd2053ed6c0 RCX: 00007fd20455d68e [ 561.052811][T14603] RDX: 0000000000000002 RSI: 00007fd2053ecf90 RDI: ffffffffffffff9c [ 561.052829][T14603] RBP: 00007fd204632e6f R08: 0000000000000000 R09: 0000000000000000 [ 561.052847][T14603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.052864][T14603] R13: 00007fd204816038 R14: 00007fd204815fa0 R15: 00007ffd04e74b68 [ 561.052903][T14603] [ 561.340064][ T5632] Bluetooth: hci4: command 0x040f tx timeout [ 561.340389][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 561.346208][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 562.056720][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.064894][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.330713][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'. [ 562.738496][T14636] bond0: option packets_per_slave: invalid value ( Xµn) [ 562.753704][T14636] bond0: option packets_per_slave: allowed values 0 - 65535 [ 562.953749][T14635] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 562.985858][T14635] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 563.023006][T14635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 563.055238][T14635] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 563.369293][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 563.629345][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1729'. [ 564.004626][T14673] bond0: option packets_per_slave: invalid value ( Xµn) [ 564.028384][T14673] bond0: option packets_per_slave: allowed values 0 - 65535 [ 564.517934][T14668] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 564.532649][T14668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 564.549125][T14668] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 564.566067][T14668] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 565.291676][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'. [ 565.703821][T14706] bond0: option packets_per_slave: invalid value ( Xµn) [ 565.715977][T14706] bond0: option packets_per_slave: allowed values 0 - 65535 [ 565.902753][T14704] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 565.913391][T14704] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 565.952209][T14704] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 566.019202][T14704] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 567.220753][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 567.937495][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 568.016574][ T5632] Bluetooth: hci4: command 0x040f tx timeout [ 568.017131][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 568.173111][T14750] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1747'. [ 568.389347][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 568.960711][T14767] bond0: option packets_per_slave: invalid value ( Xµn) [ 568.996615][T14767] bond0: option packets_per_slave: allowed values 0 - 65535 [ 569.191891][T14762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 569.232938][T14762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 569.275499][T14762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 569.281845][T14762] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 569.327154][T14779] nbd: illegal input index -1024 [ 569.752813][T14785] FAULT_INJECTION: forcing a failure. [ 569.752813][T14785] name failslab, interval 1, probability 0, space 0, times 0 [ 569.778241][T14785] CPU: 1 UID: 0 PID: 14785 Comm: syz.2.1755 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.778296][T14785] Tainted: [L]=SOFTLOCKUP [ 569.778306][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 569.778323][T14785] Call Trace: [ 569.778333][T14785] [ 569.778345][T14785] dump_stack_lvl+0x100/0x190 [ 569.778388][T14785] should_fail_ex.cold+0x5/0xa [ 569.778427][T14785] should_failslab+0xc2/0x120 [ 569.778469][T14785] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 569.778508][T14785] ? __d_alloc+0x35/0xa50 [ 569.778546][T14785] __d_alloc+0x35/0xa50 [ 569.778582][T14785] d_alloc+0x4a/0x1e0 [ 569.778616][T14785] lookup_one_qstr_excl+0x171/0x250 [ 569.778658][T14785] start_dirop+0x59/0xb0 [ 569.778704][T14785] simple_start_creating+0xf9/0x110 [ 569.778733][T14785] ? __pfx_simple_start_creating+0x10/0x10 [ 569.778764][T14785] ? mntput+0x70/0xa0 [ 569.778805][T14785] ? simple_pin_fs+0xa3/0x190 [ 569.778850][T14785] debugfs_start_creating.part.0+0x82/0x170 [ 569.778894][T14785] __debugfs_create_file+0xb3/0x4f0 [ 569.778939][T14785] debugfs_create_file_full+0x41/0x60 [ 569.778982][T14785] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 569.779029][T14785] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 569.779071][T14785] ? ida_alloc_range+0x70d/0x830 [ 569.779129][T14785] ? kasan_save_track+0x14/0x30 [ 569.779165][T14785] ? __kasan_kmalloc+0xaa/0xb0 [ 569.779203][T14785] ? lockdep_init_map_type+0x5c/0x250 [ 569.779239][T14785] preinit_net.part.0+0x252/0x920 [ 569.779285][T14785] copy_net_ns+0x339/0x7c0 [ 569.779328][T14785] create_new_namespaces+0x3ea/0xac0 [ 569.779370][T14785] unshare_nsproxy_namespaces+0xf2/0x220 [ 569.779406][T14785] ksys_unshare+0x438/0xab0 [ 569.779446][T14785] ? __pfx_ksys_unshare+0x10/0x10 [ 569.779497][T14785] __x64_sys_unshare+0x31/0x40 [ 569.779534][T14785] do_syscall_64+0x115/0x840 [ 569.779559][T14785] ? clear_bhb_loop+0x40/0x90 [ 569.779595][T14785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.779625][T14785] RIP: 0033:0x7fd20459ce59 [ 569.779649][T14785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.779676][T14785] RSP: 002b:00007fd2053ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 569.779705][T14785] RAX: ffffffffffffffda RBX: 00007fd204815fa0 RCX: 00007fd20459ce59 [ 569.779725][T14785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 569.779742][T14785] RBP: 00007fd204632e6f R08: 0000000000000000 R09: 0000000000000000 [ 569.779760][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.779777][T14785] R13: 00007fd204816038 R14: 00007fd204815fa0 R15: 00007ffd04e74b68 [ 569.779816][T14785] [ 570.565592][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 570.590504][T14798] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 571.281603][ T50] Bluetooth: hci4: command 0x040f tx timeout [ 571.287701][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 571.287757][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 572.111368][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 572.256655][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 573.475842][T14848] bond0: option packets_per_slave: invalid value ( Xµn) [ 573.500801][T14848] bond0: option packets_per_slave: allowed values 0 - 65535 [ 573.514498][T14858] nbd: illegal input index -1024 [ 573.548161][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'. [ 573.713096][T14836] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 573.761192][T14836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 573.802584][T14836] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 573.822358][T14836] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 574.030405][T14868] blktrace: Concurrent blktraces are not allowed on nbd5 [ 574.064280][T14868] blktrace: Concurrent blktraces are not allowed on nbd5 [ 575.024204][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 575.153198][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1774'. [ 575.750883][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 575.821158][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 575.827283][ T5631] Bluetooth: hci4: command 0x040f tx timeout [ 575.964950][T14902] bond0: option packets_per_slave: invalid value ( Xµn) [ 575.972115][T14902] bond0: option packets_per_slave: allowed values 0 - 65535 [ 576.088595][T14917] nbd: illegal input index -1024 [ 576.304768][T14905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 576.331470][T14905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 576.353284][T14905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 576.390211][T14905] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 576.433739][T14922] FAULT_INJECTION: forcing a failure. [ 576.433739][T14922] name failslab, interval 1, probability 0, space 0, times 0 [ 576.479420][T14922] CPU: 0 UID: 0 PID: 14922 Comm: syz.0.1785 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.479470][T14922] Tainted: [L]=SOFTLOCKUP [ 576.479481][T14922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 576.479502][T14922] Call Trace: [ 576.479512][T14922] [ 576.479522][T14922] dump_stack_lvl+0x100/0x190 [ 576.479567][T14922] should_fail_ex.cold+0x5/0xa [ 576.479607][T14922] should_failslab+0xc2/0x120 [ 576.479648][T14922] kmem_cache_alloc_noprof+0x91/0x6a0 [ 576.479686][T14922] ? __pfx_futex_hash+0x10/0x10 [ 576.479714][T14922] ? mpol_new+0x11b/0x2d0 [ 576.479764][T14922] mpol_new+0x11b/0x2d0 [ 576.479805][T14922] do_mbind+0x210/0xfd0 [ 576.479845][T14922] ? __pfx_do_mbind+0x10/0x10 [ 576.479895][T14922] ? __pfx_get_nodes+0x10/0x10 [ 576.479943][T14922] kernel_mbind+0x1b7/0x200 [ 576.479975][T14922] ? __pfx_kernel_mbind+0x10/0x10 [ 576.480016][T14922] do_syscall_64+0x115/0x840 [ 576.480043][T14922] ? clear_bhb_loop+0x40/0x90 [ 576.480078][T14922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.480109][T14922] RIP: 0033:0x7f61c499ce59 [ 576.480134][T14922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.480160][T14922] RSP: 002b:00007f61c58fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 576.480188][T14922] RAX: ffffffffffffffda RBX: 00007f61c4c15fa0 RCX: 00007f61c499ce59 [ 576.480207][T14922] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 576.480224][T14922] RBP: 00007f61c4a32e6f R08: 0000000000000006 R09: 0000000000000002 [ 576.480242][T14922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.480259][T14922] R13: 00007f61c4c16038 R14: 00007f61c4c15fa0 R15: 00007ffc9a992d58 [ 576.480298][T14922] [ 576.483433][ T5631] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 578.251344][T14946] blktrace: Concurrent blktraces are not allowed on nbd5 [ 578.284035][T14946] blktrace: Concurrent blktraces are not allowed on nbd5 [ 578.386319][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 578.392502][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 578.449547][ T5631] Bluetooth: hci4: command 0x040f tx timeout [ 578.973068][T14963] netlink: 'syz.1.1792': attribute type 5 has an invalid length. [ 578.982558][T14963] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1792'. [ 579.327734][T14966] zswap: compressor not available [ 580.705540][T14973] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 580.720365][T14973] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 580.743704][T14973] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 580.758224][T14973] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 582.436169][T15020] netlink: 'syz.2.1802': attribute type 1 has an invalid length. [ 582.451597][T15020] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1802'. [ 582.639909][T15026] blktrace: Concurrent blktraces are not allowed on nbd5 [ 582.658053][T15026] blktrace: Concurrent blktraces are not allowed on nbd5 [ 582.748715][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 582.754798][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 582.765761][T15015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 582.786598][T15015] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 582.802206][T15015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 582.823552][T15015] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 583.108587][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'. [ 583.627399][T15052] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 584.103637][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 584.819849][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 584.825945][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 584.832089][ T5631] Bluetooth: hci4: command 0x040f tx timeout [ 584.915631][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'. [ 585.218397][T15090] blktrace: Concurrent blktraces are not allowed on nbd5 [ 585.248902][T15090] blktrace: Concurrent blktraces are not allowed on nbd5 [ 585.412779][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'. [ 586.414479][T15118] smpboot: CPU 1 is now offline [ 586.467543][T15119] zero sized request [ 586.977479][T15126] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 587.015639][T15129] syz.4.1825(15129): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 587.480873][T15142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1829'. [ 589.165216][T15168] nbd: illegal input index -1024 [ 589.240952][T15142] Process accounting resumed [ 590.951682][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 590.957848][T15161] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 591.682437][T15161] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 591.688881][T15161] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 591.695058][T15161] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 593.021609][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 593.738411][ T5631] Bluetooth: hci4: command 0x040f tx timeout [ 593.744548][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 621.931155][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.939091][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.363245][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.370810][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.521131][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.527707][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.527957][ T30] INFO: task kworker/u8:7:630 blocked in I/O wait for more than 143 seconds. [ 752.537945][ T30] Tainted: G L syzkaller #0 [ 752.544491][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 752.553943][ T30] task:kworker/u8:7 state:D stack:23352 pid:630 tgid:630 ppid:2 task_flags:0x4248160 flags:0x00080000 [ 752.566388][ T30] Workqueue: writeback wb_workfn (flush-8:0) [ 752.572702][ T30] Call Trace: [ 752.575995][ T30] [ 752.580153][ T30] __schedule+0x125c/0x6730 [ 752.584785][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 752.591513][ T30] ? __blk_flush_plug+0x2f3/0x4b0 [ 752.596659][ T30] ? __pfx___schedule+0x10/0x10 [ 752.602736][ T30] ? find_held_lock+0x2b/0x80 [ 752.608474][ T30] ? schedule+0x225/0x2c0 [ 752.612845][ T30] ? rq_qos_wait+0x21c/0x330 [ 752.618338][ T30] schedule+0xdd/0x2c0 [ 752.622441][ T30] io_schedule+0x8a/0xf0 [ 752.626686][ T30] rq_qos_wait+0x22d/0x330 [ 752.632687][ T30] ? __pfx_rq_qos_wait+0x10/0x10 [ 752.637880][ T30] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 752.643637][ T30] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 752.649350][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 752.655286][ T30] wbt_wait+0x18a/0x310 [ 752.660383][ T30] ? __pfx_wbt_wait+0x10/0x10 [ 752.665227][ T30] ? blk_rq_merge_ok+0xa1/0x5b0 [ 752.670448][ T30] ? __pfx_dd_bio_merge+0x10/0x10 [ 752.675634][ T30] ? __pfx_wbt_wait+0x10/0x10 [ 752.680731][ T30] __rq_qos_throttle+0x56/0xa0 [ 752.685512][ T30] blk_mq_submit_bio+0xc06/0x3010 [ 752.691583][ T30] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 752.697646][ T30] ? blk_add_trace_bio+0xe9/0x4a0 [ 752.703006][ T30] __submit_bio+0x90/0x3d0 [ 752.708412][ T30] submit_bio_noacct_nocheck+0x549/0xc00 [ 752.714561][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 752.721648][ T30] ? __pfx___might_resched+0x10/0x10 [ 752.727642][ T30] submit_bio_noacct+0xd18/0x1ff0 [ 752.732735][ T30] ext4_io_submit+0xf7/0x1a0 [ 752.738296][ T30] ext4_do_writepages+0xa15/0x3ed0 [ 752.743446][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 752.749607][ T30] ? __pfx_ext4_do_writepages+0x10/0x10 [ 752.755185][ T30] ? ext4_writepages+0x347/0x750 [ 752.760429][ T30] ext4_writepages+0x347/0x750 [ 752.765241][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 752.771314][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 752.776942][ T30] do_writepages+0x278/0x600 [ 752.781563][ T30] ? __pfx_do_writepages+0x10/0x10 [ 752.787127][ T30] __writeback_single_inode+0x164/0x1300 [ 752.792790][ T30] ? find_held_lock+0x2b/0x80 [ 752.798735][ T30] ? __pfx___writeback_single_inode+0x10/0x10 [ 752.805077][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 752.810970][ T30] writeback_sb_inodes+0x766/0x1c50 [ 752.816206][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 752.822770][ T30] ? _raw_spin_unlock+0x28/0x50 [ 752.827830][ T30] ? move_expired_inodes+0x5ea/0x8f0 [ 752.833129][ T30] __writeback_inodes_wb+0xf8/0x2d0 [ 752.839032][ T30] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 752.844863][ T30] ? queue_io+0x287/0x530 [ 752.849872][ T30] wb_writeback+0x6f6/0xb50 [ 752.854612][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 752.859847][ T30] ? get_nr_inodes+0x100/0x150 [ 752.864626][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 752.870082][ T30] wb_workfn+0x93f/0xc80 [ 752.874342][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 752.880983][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 752.885771][ T30] ? rcu_is_watching+0x12/0xc0 [ 752.890767][ T30] process_one_work+0xa23/0x1940 [ 752.895725][ T30] ? __pfx_process_one_work+0x10/0x10 [ 752.901453][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 752.907233][ T30] worker_thread+0x5ef/0xe50 [ 752.911846][ T30] ? __pfx_worker_thread+0x10/0x10 [ 752.917661][ T30] ? kthread+0x13a/0x450 [ 752.921918][ T30] ? __pfx_worker_thread+0x10/0x10 [ 752.928526][ T30] kthread+0x370/0x450 [ 752.932625][ T30] ? __pfx_kthread+0x10/0x10 [ 752.937506][ T30] ret_from_fork+0x72b/0xd50 [ 752.942107][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 752.947873][ T30] ? __switch_to+0x800/0x10f0 [ 752.952732][ T30] ? __switch_to_asm+0x39/0x70 [ 752.958236][ T30] ? __pfx_kthread+0x10/0x10 [ 752.962843][ T30] ret_from_fork_asm+0x1a/0x30 [ 752.967838][ T30] [ 752.970941][ T30] INFO: task jbd2/sda1-8:4953 blocked in I/O wait for more than 143 seconds. [ 752.980121][ T30] Tainted: G L syzkaller #0 [ 752.987316][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 752.996159][ T30] task:jbd2/sda1-8 state:D stack:25896 pid:4953 tgid:4953 ppid:2 task_flags:0x240040 flags:0x00080000 [ 753.009955][ T30] Call Trace: [ 753.013250][ T30] [ 753.016975][ T30] __schedule+0x125c/0x6730 [ 753.021518][ T30] ? __pfx___schedule+0x10/0x10 [ 753.027084][ T30] ? find_held_lock+0x2b/0x80 [ 753.031785][ T30] ? schedule+0x225/0x2c0 [ 753.036888][ T30] schedule+0xdd/0x2c0 [ 753.040987][ T30] io_schedule+0x8a/0xf0 [ 753.045471][ T30] bit_wait_io+0xd/0xe0 [ 753.049641][ T30] __wait_on_bit+0x65/0x180 [ 753.054138][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 753.059656][ T30] out_of_line_wait_on_bit+0xdc/0x110 [ 753.065057][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 753.072005][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 753.079345][ T30] ? __pfx___might_resched+0x10/0x10 [ 753.090008][ T30] __wait_on_buffer+0x64/0x70 [ 753.094751][ T30] jbd2_journal_commit_transaction+0x37ef/0x6700 [ 753.102405][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 753.109605][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 753.115707][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 753.121457][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 753.128279][ T30] ? _raw_spin_lock_irqsave+0x52/0x60 [ 753.133680][ T30] ? find_held_lock+0x2b/0x80 [ 753.139037][ T30] ? __try_to_del_timer_sync+0x107/0x160 [ 753.144718][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 753.151359][ T30] ? __timer_delete_sync+0x151/0x1c0 [ 753.156869][ T30] kjournald2+0x200/0x760 [ 753.161641][ T30] ? __pfx_kjournald2+0x10/0x10 [ 753.167319][ T30] ? find_held_lock+0x2b/0x80 [ 753.172020][ T30] ? __kthread_parkme+0xbb/0x230 [ 753.178132][ T30] ? rcu_is_watching+0x12/0xc0 [ 753.182916][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 753.189275][ T30] ? __kthread_parkme+0x18c/0x230 [ 753.194318][ T30] ? kthread+0x13a/0x450 [ 753.198821][ T30] ? __pfx_kjournald2+0x10/0x10 [ 753.203691][ T30] kthread+0x370/0x450 [ 753.208633][ T30] ? __pfx_kthread+0x10/0x10 [ 753.213503][ T30] ret_from_fork+0x72b/0xd50 [ 753.218381][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 753.223505][ T30] ? __switch_to+0x800/0x10f0 [ 753.228550][ T30] ? __switch_to_asm+0x39/0x70 [ 753.233417][ T30] ? __pfx_kthread+0x10/0x10 [ 753.238837][ T30] ret_from_fork_asm+0x1a/0x30 [ 753.243779][ T30] [ 753.253840][ T30] INFO: task syz-executor:5612 blocked in I/O wait for more than 144 seconds. [ 753.264026][ T30] Tainted: G L syzkaller #0 [ 753.270717][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 753.279694][ T30] task:syz-executor state:D stack:22936 pid:5612 tgid:5612 ppid:5611 task_flags:0x440100 flags:0x00080000 [ 753.292626][ T30] Call Trace: [ 753.296083][ T30] [ 753.299019][ T30] __schedule+0x125c/0x6730 [ 753.303535][ T30] ? __pfx___schedule+0x10/0x10 [ 753.308711][ T30] ? find_held_lock+0x2b/0x80 [ 753.313650][ T30] ? schedule+0x225/0x2c0 [ 753.318778][ T30] schedule+0xdd/0x2c0 [ 753.322870][ T30] io_schedule+0x8a/0xf0 [ 753.327461][ T30] bit_wait_io+0xd/0xe0 [ 753.331635][ T30] __wait_on_bit+0x65/0x180 [ 753.336489][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 753.341444][ T30] out_of_line_wait_on_bit+0xdc/0x110 [ 753.347640][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 753.353647][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 753.359791][ T30] do_get_write_access+0x836/0x11e0 [ 753.365678][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 753.371673][ T30] __ext4_journal_get_write_access+0x6a/0x340 [ 753.378151][ T30] ext4_reserve_inode_write+0x1b7/0x330 [ 753.384141][ T30] __ext4_mark_inode_dirty+0x18f/0x880 [ 753.389633][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 753.397061][ T30] ? trace_jbd2_handle_start+0x83/0x240 [ 753.402624][ T30] ? jbd2__journal_start+0xf7/0x6a0 [ 753.408604][ T30] ? __ext4_journal_start_sb+0x367/0x670 [ 753.414683][ T30] ? __ext4_journal_start_sb+0x1ce/0x670 [ 753.420333][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 753.426056][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 753.431441][ T30] ext4_dirty_inode+0xd9/0x130 [ 753.436447][ T30] ? rcu_is_watching+0x12/0xc0 [ 753.441232][ T30] __mark_inode_dirty+0x1f3/0x16e0 [ 753.446705][ T30] file_update_time_flags+0x46b/0x500 [ 753.452101][ T30] ext4_page_mkwrite+0x324/0x1850 [ 753.457938][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 753.463976][ T30] do_page_mkwrite+0x17a/0x440 [ 753.468756][ T30] ? __pfx_filemap_map_pages+0x10/0x10 [ 753.475015][ T30] do_fault+0x3b5/0x1750 [ 753.479279][ T30] __handle_mm_fault+0x187d/0x2a00 [ 753.488271][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 753.494043][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 753.499549][ T30] ? lock_vma_under_rcu+0x17c/0x590 [ 753.506041][ T30] handle_mm_fault+0x37b/0xa30 [ 753.510982][ T30] do_user_addr_fault+0x5a3/0x12f0 [ 753.516990][ T30] exc_page_fault+0x6f/0xd0 [ 753.521526][ T30] asm_exc_page_fault+0x26/0x30 [ 753.526628][ T30] RIP: 0033:0x7f780fe7b467 [ 753.531052][ T30] RSP: 002b:00007ffcfacc3540 EFLAGS: 00010202 [ 753.537899][ T30] RAX: 00007f780ea58000 RBX: 00005555887a7690 RCX: 0000000000000001 [ 753.546130][ T30] RDX: 0000000000002963 RSI: 00005555887a74f8 RDI: 0000000000000002 [ 753.554373][ T30] RBP: 00007ffcfacc3a40 R08: 0000000000000320 R09: 00005555887a74f8 [ 753.562352][ T30] R10: 0000000000400000 R11: 0000000000000002 R12: 00007ffcfacc3880 [ 753.573240][ T30] R13: 00007ffcfacc3670 R14: 585858582e7a7973 R15: 00007ffcfacc35c0 [ 753.581432][ T30] [ 753.585219][ T30] INFO: task syz.1.1832:15164 blocked in I/O wait for more than 144 seconds. [ 753.594919][ T30] Tainted: G L syzkaller #0 [ 753.601424][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 753.610471][ T30] task:syz.1.1832 state:D stack:27144 pid:15164 tgid:15164 ppid:5626 task_flags:0x440040 flags:0x00080002 [ 753.623721][ T30] Call Trace: [ 753.627018][ T30] [ 753.629939][ T30] __schedule+0x125c/0x6730 [ 753.634805][ T30] ? __pfx___schedule+0x10/0x10 [ 753.639697][ T30] ? find_held_lock+0x2b/0x80 [ 753.645809][ T30] ? schedule+0x225/0x2c0 [ 753.650193][ T30] schedule+0xdd/0x2c0 [ 753.654558][ T30] io_schedule+0x8a/0xf0 [ 753.658823][ T30] bit_wait_io+0xd/0xe0 [ 753.663400][ T30] __wait_on_bit+0x65/0x180 [ 753.667930][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 753.673802][ T30] out_of_line_wait_on_bit+0xdc/0x110 [ 753.679208][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 753.685986][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 753.691471][ T30] do_get_write_access+0x836/0x11e0 [ 753.697814][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 753.704012][ T30] __ext4_journal_get_write_access+0x6a/0x340 [ 753.710098][ T30] ext4_reserve_inode_write+0x1b7/0x330 [ 753.716017][ T30] __ext4_mark_inode_dirty+0x18f/0x880 [ 753.721740][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 753.728281][ T30] ? trace_jbd2_handle_start+0x83/0x240 [ 753.734886][ T30] ? jbd2__journal_start+0xf7/0x6a0 [ 753.740108][ T30] ? __ext4_journal_start_sb+0x367/0x670 [ 753.746057][ T30] ? __ext4_journal_start_sb+0x1ce/0x670 [ 753.751726][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 753.757486][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 753.763084][ T30] ext4_dirty_inode+0xd9/0x130 [ 753.767865][ T30] ? rcu_is_watching+0x12/0xc0 [ 753.772992][ T30] __mark_inode_dirty+0x1f3/0x16e0 [ 753.778130][ T30] file_update_time_flags+0x46b/0x500 [ 753.784349][ T30] ext4_page_mkwrite+0x324/0x1850 [ 753.789401][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 753.795505][ T30] do_page_mkwrite+0x17a/0x440 [ 753.800504][ T30] ? __pfx_filemap_map_pages+0x10/0x10 [ 753.806789][ T30] do_fault+0x3b5/0x1750 [ 753.811063][ T30] __handle_mm_fault+0x187d/0x2a00 [ 753.816467][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 753.822313][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 753.827791][ T30] ? lock_vma_under_rcu+0x17c/0x590 [ 753.833241][ T30] handle_mm_fault+0x37b/0xa30 [ 753.838020][ T30] do_user_addr_fault+0x5a3/0x12f0 [ 753.844256][ T30] exc_page_fault+0x6f/0xd0 [ 753.848783][ T30] asm_exc_page_fault+0x26/0x30 [ 753.853903][ T30] RIP: 0033:0x7f74e3671580 [ 753.858323][ T30] RSP: 002b:00007fff9c1b05b0 EFLAGS: 00010202 [ 753.865639][ T30] RAX: 0000001b34400000 RBX: ffffffff8b982121 RCX: 0000001b343ffff8 [ 753.873843][ T30] RDX: 0000001b34024220 RSI: 0000000000000008 RDI: 00007f74e4545720 [ 753.882368][ T30] RBP: 00000000000005a8 R08: 00007f74e3a00000 R09: 00007f74e3a02000 [ 753.890390][ T30] R10: 000000008b982125 R11: 000000000000001b R12: 00007f74e3a16128 [ 753.899170][ T30] R13: 0000000000034783 R14: ffffffff8b982b46 R15: 00007f74e4545720 [ 753.907776][ T30] ? xas_load+0x26/0x5c0 [ 753.912707][ T30] ? xas_create_range+0x4d1/0x720 [ 753.917750][ T30] [ 753.920800][ T30] INFO: task syz.2.1833:15166 blocked in I/O wait for more than 144 seconds. [ 753.930213][ T30] Tainted: G L syzkaller #0 [ 753.937026][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 753.945869][ T30] task:syz.2.1833 state:D stack:27144 pid:15166 tgid:15166 ppid:5635 task_flags:0x440040 flags:0x00080002 [ 753.958931][ T30] Call Trace: [ 753.962909][ T30] [ 753.965853][ T30] __schedule+0x125c/0x6730 [ 753.970369][ T30] ? __pfx___schedule+0x10/0x10 [ 753.976203][ T30] ? find_held_lock+0x2b/0x80 [ 753.981185][ T30] ? schedule+0x225/0x2c0 [ 753.985532][ T30] schedule+0xdd/0x2c0 [ 753.989592][ T30] io_schedule+0x8a/0xf0 [ 753.994272][ T30] bit_wait_io+0xd/0xe0 [ 753.998452][ T30] __wait_on_bit+0x65/0x180 [ 754.003837][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 754.008801][ T30] out_of_line_wait_on_bit+0xdc/0x110 [ 754.015044][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 754.022058][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 754.027784][ T30] do_get_write_access+0x836/0x11e0 [ 754.033267][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 754.039267][ T30] __ext4_journal_get_write_access+0x6a/0x340 [ 754.046779][ T30] ext4_reserve_inode_write+0x1b7/0x330 [ 754.052579][ T30] __ext4_mark_inode_dirty+0x18f/0x880 [ 754.058059][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 754.065151][ T30] ? trace_jbd2_handle_start+0x83/0x240 [ 754.070909][ T30] ? jbd2__journal_start+0xf7/0x6a0 [ 754.076118][ T30] ? __ext4_journal_start_sb+0x367/0x670 [ 754.082524][ T30] ? __ext4_journal_start_sb+0x1ce/0x670 [ 754.088174][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 754.093383][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 754.098779][ T30] ext4_dirty_inode+0xd9/0x130 [ 754.103883][ T30] ? rcu_is_watching+0x12/0xc0 [ 754.108655][ T30] __mark_inode_dirty+0x1f3/0x16e0 [ 754.114587][ T30] file_update_time_flags+0x46b/0x500 [ 754.119974][ T30] ext4_page_mkwrite+0x324/0x1850 [ 754.126087][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 754.132514][ T30] do_page_mkwrite+0x17a/0x440 [ 754.137292][ T30] ? __pfx_filemap_map_pages+0x10/0x10 [ 754.143011][ T30] do_fault+0x3b5/0x1750 [ 754.147268][ T30] __handle_mm_fault+0x187d/0x2a00 [ 754.152750][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 754.158054][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 754.163760][ T30] ? lock_vma_under_rcu+0x17c/0x590 [ 754.168973][ T30] handle_mm_fault+0x37b/0xa30 [ 754.175259][ T30] do_user_addr_fault+0x5a3/0x12f0 [ 754.180543][ T30] exc_page_fault+0x6f/0xd0 [ 754.185059][ T30] asm_exc_page_fault+0x26/0x30 [ 754.194157][ T30] RIP: 0033:0x7fd204471580 [ 754.201738][ T30] RSP: 002b:00007ffd04e74c00 EFLAGS: 00010202 [ 754.207822][ T30] RAX: 0000001b34504000 RBX: ffffffff82015f4b RCX: 0000001b34503ff8 [ 754.216196][ T30] RDX: 0000001b34124220 RSI: 0000000000000008 RDI: 00007fd205345720 [ 754.224871][ T30] RBP: 000000000000010f R08: 00007fd204800000 R09: 00007fd204802000 [ 754.233733][ T30] R10: 0000000082015f4f R11: 000000000000000a R12: 00007fd204816038 [ 754.242406][ T30] R13: 0000000000000122 R14: ffffffff820155c6 R15: 00007fd205345720 [ 754.250560][ T30] ? __css_rstat_updated+0xf6/0x5a0 [ 754.255781][ T30] ? css_rstat_flush+0x39b/0x2060 [ 754.261145][ T30] [ 754.267691][ T30] INFO: task syz.4.1834:15174 blocked in I/O wait for more than 145 seconds. [ 754.278589][ T30] Tainted: G L syzkaller #0 [ 754.286009][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 754.295082][ T30] task:syz.4.1834 state:D stack:26168 pid:15174 tgid:15174 ppid:13708 task_flags:0x440040 flags:0x00080002 [ 754.307825][ T30] Call Trace: [ 754.311305][ T30] [ 754.314252][ T30] __schedule+0x125c/0x6730 [ 754.318763][ T30] ? __pfx___schedule+0x10/0x10 [ 754.324052][ T30] ? find_held_lock+0x2b/0x80 [ 754.328744][ T30] ? schedule+0x225/0x2c0 [ 754.334388][ T30] schedule+0xdd/0x2c0 [ 754.338481][ T30] io_schedule+0x8a/0xf0 [ 754.343394][ T30] bit_wait_io+0xd/0xe0 [ 754.347567][ T30] __wait_on_bit+0x65/0x180 [ 754.352862][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 754.357817][ T30] out_of_line_wait_on_bit+0xdc/0x110 [ 754.363502][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 754.369773][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 754.375255][ T30] do_get_write_access+0x836/0x11e0 [ 754.380675][ T30] jbd2_journal_get_write_access+0x1d6/0x280 [ 754.386666][ T30] __ext4_journal_get_write_access+0x6a/0x340 [ 754.393571][ T30] ext4_reserve_inode_write+0x1b7/0x330 [ 754.399618][ T30] __ext4_mark_inode_dirty+0x18f/0x880 [ 754.405095][ T30] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 754.411894][ T30] ? trace_jbd2_handle_start+0x83/0x240 [ 754.417727][ T30] ? jbd2__journal_start+0xf7/0x6a0 [ 754.423173][ T30] ? __ext4_journal_start_sb+0x367/0x670 [ 754.428821][ T30] ? __ext4_journal_start_sb+0x1ce/0x670 [ 754.435029][ T30] ? ext4_dirty_inode+0xa1/0x130 [ 754.441601][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 754.446996][ T30] ext4_dirty_inode+0xd9/0x130 [ 754.452461][ T30] ? rcu_is_watching+0x12/0xc0 [ 754.457258][ T30] __mark_inode_dirty+0x1f3/0x16e0 [ 754.463305][ T30] file_update_time_flags+0x46b/0x500 [ 754.468939][ T30] ext4_page_mkwrite+0x324/0x1850 [ 754.473982][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 754.479786][ T30] do_page_mkwrite+0x17a/0x440 [ 754.484569][ T30] ? __pfx_filemap_map_pages+0x10/0x10 [ 754.490302][ T30] do_fault+0x3b5/0x1750 [ 754.494564][ T30] __handle_mm_fault+0x187d/0x2a00 [ 754.500438][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 754.505735][ T30] ? __pfx___handle_mm_fault+0x10/0x10 [ 754.511794][ T30] ? lock_vma_under_rcu+0x17c/0x590 [ 754.517014][ T30] handle_mm_fault+0x37b/0xa30 [ 754.526034][ T30] do_user_addr_fault+0x5a3/0x12f0 [ 754.531680][ T30] exc_page_fault+0x6f/0xd0 [ 754.536452][ T30] asm_exc_page_fault+0x26/0x30 [ 754.541654][ T30] RIP: 0033:0x7f4f65e71580 [ 754.546074][ T30] RSP: 002b:00007fffb04afa20 EFLAGS: 00010202 [ 754.552937][ T30] RAX: 0000001b2d821000 RBX: ffffffff8967a393 RCX: 0000001b2d820ff8 [ 754.561484][ T30] RDX: 0000001b2d424220 RSI: 0000000000000008 RDI: 00007f4f66d45720 [ 754.570171][ T30] RBP: 00000000000000f0 R08: 00007f4f66200000 R09: 00007f4f66202000 [ 754.578295][ T30] R10: 000000008967a397 R11: 0000000000000003 R12: 00007f4f66216038 [ 754.586274][ T30] R13: 0000000000000102 R14: ffffffff8967a8e9 R15: 00007f4f66d45720 [ 754.594697][ T30] ? consume_skb+0xc9/0x110 [ 754.600047][ T30] ? skb_errqueue_purge+0x3/0x480 [ 754.606890][ T30] [ 754.613950][ T30] [ 754.613950][ T30] Showing all locks held in the system: [ 754.630440][ T30] 1 lock held by khungtaskd/30: [ 754.635309][ T30] #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 754.646452][ T30] 4 locks held by kworker/u8:7/630: [ 754.651921][ T30] #0: ffff8880202a2140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 754.663387][ T30] #1: ffffc9000386fd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 754.675865][ T30] #2: ffff88803560a0d8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 754.688049][ T30] #3: ffff888035608c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 754.698720][ T30] 2 locks held by getty/5382: [ 754.703404][ T30] #0: ffff8880365fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 754.713541][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 754.724459][ T30] 3 locks held by syz-executor/5612: [ 754.730252][ T30] #0: ffff8880745361c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 754.740524][ T30] #1: ffff88803560a548 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 754.750247][ T30] #2: ffff8880367f6938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 754.760655][ T30] 3 locks held by syz.1.1832/15164: [ 754.765866][ T30] #0: ffff8880771c9588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 754.776237][ T30] #1: ffff88803560a548 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 754.786341][ T30] #2: ffff8880367f6938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 754.796606][ T30] 3 locks held by syz.2.1833/15166: [ 754.802008][ T30] #0: ffff88805e9a3308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 754.811521][ T30] #1: ffff88803560a548 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 754.821204][ T30] #2: ffff8880367f6938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 754.831477][ T30] 3 locks held by syz.4.1834/15174: [ 754.836688][ T30] #0: ffff88807c56da88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 754.846794][ T30] #1: ffff88803560a548 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 754.857050][ T30] #2: ffff8880367f6938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 754.866732][ T30] [ 754.869638][ T30] ============================================= [ 754.869638][ T30] [ 754.878903][ T30] NMI backtrace for cpu 0 [ 754.878920][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 754.878941][ T30] Tainted: [L]=SOFTLOCKUP [ 754.878946][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 754.878955][ T30] Call Trace: [ 754.878960][ T30] [ 754.878966][ T30] dump_stack_lvl+0x100/0x190 [ 754.878989][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 754.879010][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 754.879049][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 754.879124][ T30] sys_info+0x141/0x190 [ 754.879140][ T30] watchdog+0xcb1/0x1030 [ 754.879173][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 754.879195][ T30] ? __pfx_watchdog+0x10/0x10 [ 754.879217][ T30] ? __kthread_parkme+0x18c/0x230 [ 754.879237][ T30] ? kthread+0x13a/0x450 [ 754.879255][ T30] ? __pfx_watchdog+0x10/0x10 [ 754.879275][ T30] kthread+0x370/0x450 [ 754.879294][ T30] ? __pfx_kthread+0x10/0x10 [ 754.879315][ T30] ret_from_fork+0x72b/0xd50 [ 754.879334][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 754.879353][ T30] ? __switch_to+0x800/0x10f0 [ 754.879367][ T30] ? __switch_to_asm+0x39/0x70 [ 754.879388][ T30] ? __pfx_kthread+0x10/0x10 [ 754.879408][ T30] ret_from_fork_asm+0x1a/0x30 [ 754.879438][ T30] [ 755.015826][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 755.022677][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 755.033341][ T30] Tainted: [L]=SOFTLOCKUP [ 755.037642][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 755.047678][ T30] Call Trace: [ 755.050940][ T30] [ 755.053854][ T30] dump_stack_lvl+0x100/0x190 [ 755.058522][ T30] vpanic+0x552/0x970 [ 755.062485][ T30] ? __pfx_vpanic+0x10/0x10 [ 755.066975][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 755.073165][ T30] panic+0xd1/0xe0 [ 755.076870][ T30] ? __pfx_panic+0x10/0x10 [ 755.081268][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 755.087410][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 755.093635][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 755.099795][ T30] ? watchdog.cold+0x1ec/0x234 [ 755.104542][ T30] ? watchdog+0xcc1/0x1030 [ 755.108951][ T30] watchdog.cold+0x1fd/0x234 [ 755.113528][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 755.119322][ T30] ? __pfx_watchdog+0x10/0x10 [ 755.123985][ T30] ? __kthread_parkme+0x18c/0x230 [ 755.128995][ T30] ? kthread+0x13a/0x450 [ 755.133226][ T30] ? __pfx_watchdog+0x10/0x10 [ 755.137892][ T30] kthread+0x370/0x450 [ 755.141948][ T30] ? __pfx_kthread+0x10/0x10 [ 755.146525][ T30] ret_from_fork+0x72b/0xd50 [ 755.151102][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 755.156202][ T30] ? __switch_to+0x800/0x10f0 [ 755.160857][ T30] ? __switch_to_asm+0x39/0x70 [ 755.165611][ T30] ? __pfx_kthread+0x10/0x10 [ 755.170190][ T30] ret_from_fork_asm+0x1a/0x30 [ 755.174958][ T30] [ 755.178024][ T30] Kernel Offset: disabled [ 755.182356][ T30] Rebooting in 86400 seconds..