0xffffffffffffffff, 0x2e, 0x7ff}, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
ioctl$auto_SNDCTL_DSP_SETDUPLEX(r3, 0x5016, &(0x7f0000000300)="eea59e029fbee3c434431aafc3d705ee9721e7a6bb4936ef9ba42484cb2d53e8078554ee2943bb2e5ee68e1497e75059a3850e7ac7f663342b464297d6ea679984b5487436c4b226b8c121861479c274562adb760d7f0dd089badf319acff4313682afc4ebe3bf6f63e7cb7138c9323b128831cd5b14d4327e11575cdfa8aa21e22a9e735fe4594fab98189c25c36ac56e4647b383ff777ce541bff7b23f8f4bf6d330fc54fbf5375d2346f432a531e2ca8bd08d4a46b5c0713616b1b9bbe8a0531590e93b33a8d7d921c13030eb9211dd573fef80df9e6ed4f4001f7c3f05c55eccd09732ec17f0c083aa7529b2b20a52dc6cd731e2d4f2bf56d3421987b459e3d01c3aa2a4e9131d4e35a5861804b0db0daff7e73dceb8a4fc17818c6c739702cbfbe4f733b7b2081aab496c4471f0385d886d6793a394e06e740e37d20bff7d3dd8db048f0dd5b7ebba3f18b484e98edc9a0e83756b693d5f7d7b5ab609333580fb0e900db22067f98451b9f8ffd41f695e4ea4ad1d70edf2ecf5aee710878457f8a934917dea7abd1658bb09a7d34549d6980d8ed9019ab092044d9a8f533bb813b217ac65c87c1f5db2ccad2e63bfde3e88e6948aaa1ae62140d74b57b9ed3c2f3de9d96f0d3a35b3d9226cbbedc7436619906cc97b0dc928040ac10e326e5c1565ab5875904e43d0827c24f74cde58bc9743c21b0e4057e9689e72c3bd8873a14397f10ab97793528704aa3fc61fa8e051784ce94ebad302f703a22266230aec5c286ca6266be8e19687b28e3c65152905a473306edc50e6cc1ee0fe4d5fe800828d178b6ecc9dee4483aab2649ea3c884dfce50c8b92cc56d72ccdf738f2dde3acd663aa0ad580f40535fa4a0541c27b657c6fc4dc48b7e507f0de1075a735888925fdb7c577b0784dcff41b30d92d2bf9f98c6a831bd54ec4322a22b898ebe0c5dc0b591c2bb36a67d100fe57e172e2132247def835c50f882c0de65e56ea3296ba604ed92e6575a090a876a411f098a51bd0ced1e92929282cd8d9d1865b6c5fdeabb741425654dc775867d78b510986523d55bd10e3b83c20b70ed200e55109339fa7931864c1b0dcf558d495800ec8a4cb17cef8e440b42ec4a93dbb0921c852023c26f7b0333e295b300be62f96c3bc7db7a1a6b085dd58c78ed0936ac5bf2bc64f1f286c50f7ed1eb5129ccc03265620a4bc49fe008cb37039634bbde6a28c8e26d17eed24b86767cba813e24c5789b1fde9dc5d99bacc6f6a76c50001fea0f79056770d4eb95f0fd1964e3e0c01c35f4bbeacc8a3e57e8ffbef1e56ed64ead6e7d93ebfd6da1c80c3108249c4182c829f3f14037915c864444667926bf2ee544e4e808ad0af18295fdcf44bc47d68917f2e07fdc06421a920bc13ac83e1ccfa887ab34eb4e9c2aa1d3e7eefec354d6eb5625a629b3e856c9c2368c682745caeb527a2fc10730f16e2fcb5f973ca51de4155f52c62367658942ca7995eac5f95aecb1a3686777feda12d641c922894e9c318b98800ef4f1c8225dd3c8a5c5b1572abdebee8482ccd95645c5cef01e0ecaa448dbef6482418e73c4cb105723701b82de1626e4b20bfd233f150c57b712169c4019e5d5eda9dca0c46d9a4d321ec18ac67f5b614e3b025cbd9655a4921b7e55564e3cf3cc933d5d0265656ed8a8a3c059d8100de8094c9d62b96a4da49e7628aa59596f3a803b9c5ee75e69a8bc69d74b00808af0012799618d307d862b32087067582c17d289ef7128cd4ea7b2056e6de803b80583cd9f9e93f968d7e278d944ff212e713e552a61a5fb5b830a68ae115c4ca7c4f73c47d965ad9a4bc2b96faecb2844c80f56549d6f8902e2a90b76fcb6acd02eeed0cb62d304e7a8d2e7787e4336eb35059cf2778c07c70c45c3b056f1e647837b6f41d76e6c2dc89b0d2939f96eb190f2b9fa659bd661291987fb2a94f7fd34d7cfd8ccc5b79aa4d5ec0b10232269d1fd9ed9d3d1329178dbd48617444dc86aa1a99b02bedad6140e98dbf6cfdd30edc6280c936af14860f60c70dc1b5ebac5b7e4662ac297cad0e2f3676039e0dc45ec9f815941239316860b8d167da4e0e5b63abcda83acd705c79a079c259c2d50e7a894e961ac1b8d00309a784552ee1d15ebedd251e9e9849b6eef3af8265aa00542be850d6a481545600cc5416dc2f67d6f5e4efde67e24adfd5aee48eda92e083ca2c00024dc7f90a7a2775cd519c65d0d26995ab75f8bf99becf5d8bdeeeac0fa92052a1220b6505992ad6992d215d6d884e175505c9ef89be8577fa5cf9e4c3da5cd3f95b1f7b4ed8758fa009fa2fe228559fcd77b7f0e2fe64ef1b85e63bd1a995162af7c94fec19dae788a9968ab0f751b9df3bbe0150c601e985241ba33c3076ecb649f886c3956c6e4535ffdc71d6ed1615a10562b9b544ccc80e0fc532ba8313a1aba3bec64d17e861e93e74310de966598dba52c224ca7fc529189c256fe2a75d0dff6c6526186f786ea685343662a3f063f360b5686e8b4391e815a73ee5238bfc191275cc7c84a060f64eda3a578ef5b0ee68c6e0b651fb0a7423219ce45ad678f3a8e84495b6fd2deaa56a19d2ff17dab07b2981809d088eceb504c7e4e66a85e11906709d4f991c372b8609925fe92e9032f2a9d92cf9803116b003929dcd1d46606a7ac44a32769c7da94170a7bdae174b1249b52813ec9aef953bff5e3feb9248b842b9dfbc2e64d33887c6d5549574e7b7740e1e564c09f059e860223640000a3c6625105dfd6bd29749a75dbf82c3a9595724f3595e452b7c28209a8c2842add26c5e944c9b4b7cb2cf76ee9d5be9027f774f4a0f0ef90861de4b0c8f711b679b33a90f4c5bd32335d59bd044be5ee8ea24830632874b19060d6d01b876736427c33a2466ffed666c19db0ea0390a3848fbc00a8264cfc036efce69b827194f219858809ff965e7ceef452f2856c56d595206ef79c23c553ea8bffdc0d0bab384c115d5cbea602d73e1fcf37502dfa7f7fa202fb5432c8b577e6a68f46a82f643befdf00918f8181c94f37105af582646096f5324d5671037d54182f575a721c539bf7289a0526bb20ed19ac428ab3c0777a045aeaada747c58da77f7600a8a70e25aa74b7799678897ffc527f02f99b8b1de2f6d47e23fbce41da0b8df0e1281dee6c50d438e3743d1c7fe023429259c375b7a2a22c72d2647d591d6569bd51c5a6ed7f3a589b9ffc3981a384d726c2d9d2d2e33680f0f63acc2421a4d45127e5692d84c3253bcefe32382a2cde92d197c9ff23276b52010ff2d8cba43e7d07550d431f3c0e900ce205627e76289db73ec181db9b8959b57b196922d17b33a9361c18f4e2047708b914cb061c431702bf35c6967b3f0075c590578ff8e154574747ec080bb81f6b5aefd6019e2d349d70a00f90a7d4c19b4f0ffd9f9f958407adbc05c810f8ac13a1ac4695da5f0c0b345d6b8014865573396e54c20a541a1bca4c73951d5c6508e1eb8c39687a2fd245a1f44277c8e597b2b35cce27e609a148d0c10a609c58b713d9bdb5ed02a105c36f6fab198232363432ff7e9a48cd168561707988f05ffa4ed1d2a375b4e53492a78b513fd95e3926fe5ce5a4847aec252bd7b2b9f4a96491b0a81d4edf69e699349ec26816dcfe5108dafbae56bbb997800dc8d7de367ef97ddcae8a3565757c4aad340ecc95adf092ce598f2da150f1cfb64798cebcb70e381db508c00ad5f2678040699395d7df8a30536e52869435617c359551a6c113767b5a209b65e41348f0135408bc8e68408b5972321f4e22f9a90f260650b08fa101820bf66b19271bb3a1ebd54b969fa18953a18697591c91ba2926175d939309a5a4ef05d49abdcc48c8c7e512ddee877bd2e298de6ac224a186d2f949afe7e9c3b7c4a94a6a373d030e60d29fd60c2b08140f5f1ef4a1bb9809b0403e52234dde42084e09449189bb5a2730372488f55149a41d5cf4593d1b43cbd651e7b92351dbe79e2006090722ac30ddef78a66bbb350d300786d5068572fb4b8b191ad1e9fd3d40b07f2f4f22b0f54ab09bfc529a411747872b1b6acae78da96c91e772365230b6ef7b22c4b2ecc788c4f784335ac18959e7ef3e1fec4366a562940918b45c3100241d5d3484a3a1e753b5b4eb4120989da3bbf157672c21e4159f94cabf028110ea5e0fa4d4449880bbccc9f9c4d3fd3ea0a235401096a663de05aa6aa7a596b888568fe3283569278c2224eb999e85445c1ce2aad55480e7516ccdc489190016354f0bd2b4495a939499bee488634d48b0f8263c0513060ce5418252c1e3731c6a52520c3cac8f06b478c07810e9972369d391051ed8b78d391810152fb9c3d3f0a1954e80930cb06d039a15f178c2f13f68d6ca118248899402526321a838ae35cbf644b19ff52d82bf4c194f84460a5735e09fc9aba05544ff6dcef60ff6fd7c19d2a7bb09c1ebe3928f4358dbd7aaa215a7fa766ce071ed55a72c50a8a0f3408024dde2555a43a3b39ce41363b3ecbabb9d6bfd5c82d8664c329099cc55fe1220059f8c75f9b692063163234f2f2261db2dc5eb6c135537ca04e6aecd9307149209b68179293c3bbe90dbbd15f81d4cbdb80b19be870fe89f999f45ba39eb287064d2bd295c3c76baad581dfc4c20655848b4e1db4faa43243bbf67945ab861d813dadef1e952a384e20ca6626a0b7687e40c3662c4ed994782661c00ee6bbd26a0dacde6bec96a27a08be71151a23eb2c636d4528c555f54ed5ecdb5210d5b76a6d9d97254e85fa02e5b78300856a3d7868e4e62df3380a60d2a5b58d24f4fe9be9cfaf0dcd87acdf5be189a2d53f1d557edeb87df12d29cb5e01f3f79f7b0ac1dc9a6a649d0e993c162625dd8a77a1586aa4fdda0e55cbd8486e250a4646ce90ac01cf2a63273629fccd2b114dc292e8ad087191f6548797868b654051f9e849fe0b2b3f5d74cbcfd5ea738267af752b1f6f9e71e8bd045d64437ee161d3aa9f23daebaa6dbc49d8bdbbfde57dda61ac7cbffdf0e71db0b846d5b9f0c367e74fd1df9795b0b770c1d009264d3fa5a971824708555c7584eee8ab23d1af361056a0d419f89500fbe321b04a1444a889fd0752e4ece103637ec2aa4e82887f149857b802ee520ef1d3976c11afdd20581b3aceddf7f3a29e2f3ef3eec4d72a9f5e4c23bde6994ac401e1d13f27b3c23e1eedd74b27d15f18ae22478db6e1df58724d780f7374d166db2a658e130b96087762e4cef30ded33bf7e20b9a0c0e72705a3849450b23a4a9d6d40a285afb994d89d46bbd48eb32e13196dcc9af90f6fbd646d9480503f8d7bdd0448dfea834457f154d9324e32cf3e84e07482c67fb1b30934b532ac13f6d29e9a8ebdbd1d9d715ef9930920c27f72e25a714dd6afeacb95441f995a1770d6ea8bc8ac26e12ac3ae9890ccf93d57bf3cccd256ce78c644d999e9ac19186e829aca0ab5a66b1191084cbc9af72f0a95d78d63e8c6dbaec728e9f8b8a44cae4900a26f1088de03afe6656cfd929442bdca00a1cd25faa195b919ed63222be0cef9951a9f7c3fa8d021a25ffcb03db2ea73a1d015e3962c3bbbcc4337ce83d9215ca36ca7dacd0bbbdf8290c4c97a203cb7f5c7aee8c2f07614fa1a1d78f7e01976f1213f1b0e5f9ffa89b29798bcab2d3312cdd77a9e558e983c44796c2b9279f49300a1ca0664de9c1cdb95bd7a0aeb8dc10be85af54510f26bc96630e77ed554babdfefa67c82c58071ec39877fc3f40b3a4c5048bae49832e24063066fc7c300")
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80)
r5 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r6 = socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000280)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1b0035bd7000f9dbdf2503000000040008000c000380080019800400058012000100898771f1c19f17790485908286dd000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x400c880)
sendfile$auto(r6, r2, &(0x7f00000002c0)=0x2, 0x0)
3.481517196s ago: executing program 1 (id=3264):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)="da24393584c45438c834bc3dee0997c9533423ad0599ecb565ab782fa6ab395796cfcf87edbbfaaf2fad220d11ea91e2dfac1a0942f7ae22e56431c99b0eb5386301d3c83b73df07a98c49415f2ee8060ce165c5035d6699dc4e0fc61afef506d5a73cb889c038c42ab0de8a732c76f6234852b51820f7338ff3adea489b03d95b97c2cd46b774d53e5a2d304e7a23c5bcd99c95a1a62cb5e9ad4f17618318eb80bdd2d756abb4eac859f693dc2cdfa57cc354b1fc715216f9f552f366f1cfc096a21752a8c20a440dac3d8e7ad402566528da3c0ec0f85552b00a9f548ab2168aff081eebebbb89", 0xe8)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/49, 0x1a)
3.42196935s ago: executing program 5 (id=3265):
preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0)
read$auto_usbdev_file_operations_usb(r1, &(0x7f0000000180)=""/38, 0x26)
socket(0x2c, 0x80003, 0x0)
setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9)
syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
open(&(0x7f00000001c0)='./file0\x00', 0x202240, 0xe1)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r2, 0x0, 0x20)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xffffffff]}, 0x0)
3.367686028s ago: executing program 1 (id=3267):
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0)
write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e)
preadv$auto(r0, 0x0, 0x10000, 0x794f23bd, 0x1)
r1 = prctl$auto(0x8, 0x7, 0x0, 0x0, 0x1)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
mmap$auto(0x7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8002)
r2 = socket(0x2b, 0x1, 0x1)
r3 = getsockopt$auto(r2, 0x0, 0x80, 0x0, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, 0x0, 0x24084005)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
mmap$auto(0x0, 0x20009, 0xb, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdb, 0xebd, 0xffffffffffffffff, 0x8001)
madvise$auto(0x2, 0x454, 0x1000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
close_range$auto(0x2, 0x8, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
r4 = semctl$auto(0x7, 0x2, 0x13, 0x1)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x108, 0x0, 0x6c, 0x697a}, 0xed71390}, 0x9a6, 0xff00)
pwrite64$auto(0xc8, 0x0, 0x4e, 0x3)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x84)
sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r3, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES64=r4, @ANYRES16=r1], 0x514}}, 0x20000040)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
unshare$auto(0x40000080)
getsockopt$auto_SO_TIMESTAMP_OLD(0xffffffffffffffff, 0xd, 0x1d, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x4a83d047)
2.785855188s ago: executing program 5 (id=3268):
mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x80f00, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_VENDOR(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r2, 0x705, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
unshare$auto(0x40000080)
write$auto(0xca, 0x0, 0x7d)
r3 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x143382, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x101100, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0xe40, 0x0)
mmap$auto(0x18a5, 0x80a5, 0x8, 0x10, r3, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop10\x00', 0x82500, 0x0)
fadvise64$auto(r4, 0x8, 0x3, 0x4)
socket(0x10, 0x2, 0x15)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffe3a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1500f9"], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x800001, 0x0, 0x0, 0x9}, 0x8}, 0x7, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
prctl$auto(0x23, 0x80000000000a, 0x80000001, 0x0, 0x0)
2.471627125s ago: executing program 1 (id=3269):
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0)
write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e)
preadv$auto(r0, 0x0, 0x10000, 0x794f23bd, 0x1)
prctl$auto(0x8, 0x7, 0x0, 0x0, 0x1)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5715, 0x0)
ioperm$auto(0x3, 0x1, 0x8)
2.108514082s ago: executing program 1 (id=3270):
prctl$auto(0x35, 0x1, 0x8, 0x0, 0x0)
prctl$auto(0x34, 0x1, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
2.056505674s ago: executing program 1 (id=3271):
preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0)
read$auto_usbdev_file_operations_usb(r1, &(0x7f0000000180)=""/38, 0x26)
socket(0x2c, 0x80003, 0x0)
setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9)
syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
open(&(0x7f00000001c0)='./file0\x00', 0x202240, 0xe1)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0)
ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xffffffff]}, 0x0)
1.815979064s ago: executing program 5 (id=3273):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
socket(0x10, 0x2, 0x14)
socket(0x10, 0x2, 0x4)
openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
getdents64$auto(r0, 0x0, 0x400)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram11/events_poll_msecs\x00', 0x20681, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0)
ioctl$auto(r2, 0xc0385638, r1)
1.583152259s ago: executing program 5 (id=3274):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
ustat$auto(0x801, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0) (async)
r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) (async)
r2 = openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0x8000, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r3 = eventfd$auto(0x0)
readv$auto(r0, &(0x7f0000000280)={0x0, 0x732fb310}, 0xff) (async, rerun: 32)
write$auto(r2, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) (async, rerun: 32)
linkat$auto(0xffffffffffffffff, 0x0, r3, 0x0, 0x1000)
ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x10040026f34, 0x0) (async)
lstat$auto(0x0, &(0x7f0000000180)={0x1, 0x100000000000001c, 0x27fffffffffa, 0x63, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000008040000a, 0x3, 0x7, 0xc, 0xffffffff80000000, 0x800000000000b, 0x2, 0x240000100103}) (async)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
r4 = socket(0x10, 0x2, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) (async)
r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) (async)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
read$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffffff, 0x0, 0x0) (async)
r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x519201, 0x0) (async)
read$auto_proc_pid_maps_operations_internal(r3, &(0x7f0000000180)=""/86, 0x56) (async)
r7 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0)
ioctl$auto_VHOST_SET_OWNER(r7, 0xaf01, 0x5) (async)
ioctl$auto(r7, 0x4008af23, r6)
r8 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0)
ioctl$auto_PROCMAP_QUERY(r8, 0xc0686611, &(0x7f0000000080)={0x100, 0x0, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x5, 0x7, 0x8000000009})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="ff070000", @ANYRES16, @ANYBLOB="01002cbd7000fddbdf25280000000800070000000000"], 0x1c}, 0x1, 0x6000, 0x0, 0x1}, 0x20008800) (async)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001003a66520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)
598.958389ms ago: executing program 43 (id=3240):
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r0, 0x4143, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x300000000000000, 0x0, 0x4081}, 0x8800)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x201, 0xc000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0)
ioctl$auto(0x3, 0x5410, 0x38)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r4 = socket(0x2b, 0x1, 0x0)
openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x500, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a)
sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xa00009}, 0x6, 0x20000003)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd13/power/autosuspend_delay_ms\x00', 0x105401, 0x0)
socket(0xa, 0x801, 0x84)
getpid()
sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6)
r5 = io_uring_setup$auto(0x59, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'})
r6 = socket(0x11, 0x80003, 0x0)
mmap$auto(0x0, 0x26, 0xdf, 0x9b72, 0x1000, 0x28000)
setsockopt$auto(r6, 0x107, 0xd, 0x0, 0x8000)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x4001ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0xc, 0x64, 0x0, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x5c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x6}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0xe}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xcbf9}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x969}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4890}, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0xc0000, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio24\x00', 0x802, 0x0)
553.780584ms ago: executing program 5 (id=3276):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card1/pcm0p/oss\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000000c0), r0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0)
mmap$auto(0x0, 0x20009, 0x7fff, 0xeb1, 0x401, 0x200008000)
write$auto(0x3, 0x0, 0xfdef)
sendmsg$auto_NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="08002bbd7000fcdbdf2505000000140500000000000000616e31001e00000000000008000400e000000214000300000000000000000000000000000000001400060077673200000000000000000000000000050001000b00000008000400acedec718a000500ac1e00017a000700bca64fe92d2dbc9e96601edd089c30819aa70b973256da1bfb15b7747b4ec40ea339b409e9880ec0ebc2197bc9bfaa0000840434b4a82f2272eed3c5f8d553d400ebedd1b826873739e8b3210e57cf66cd0536a1bbdc406e303ac2da744b0000080005008674e000000100"/228], 0xf4}}, 0x0)
mmap$auto(0x0, 0x80004, 0x400000000e2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x50)
socketpair$auto(0x1, 0x8, 0x2, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0xfffd, 0x7000004)
mmap$auto(0x4, 0x6, 0x2, 0x14, 0xffffffffffffffff, 0x308000000000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
socket(0x15, 0x5, 0x0)
bind$auto(0x3, 0x0, 0x6a)
r2 = socket(0x1d, 0x3, 0x1)
setsockopt$auto(r2, 0x65, 0x6, 0x0, 0x4)
r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
ioctl$auto_RTC_UIE_ON(r3, 0x7003, 0x4)
close_range$auto(0x2, 0x8, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/65, 0x41)
552.924984ms ago: executing program 1 (id=3277):
preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0)
read$auto_usbdev_file_operations_usb(r1, &(0x7f0000000180)=""/38, 0x26)
socket(0x2c, 0x80003, 0x0)
setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9)
syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
open(&(0x7f00000001c0)='./file0\x00', 0x202240, 0xe1)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r2, 0x0, 0x20)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xffffffff]}, 0x0)
0s ago: executing program 5 (id=3278):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x22, 0x3, 0x400)
clone$auto(0x0, 0x43, 0x0, 0x0, 0xfffffffffffff9fe)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$auto(r1, 0x0, 0x1f40)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r2, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00')
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x880)
timer_create$auto(0x9, 0x0, 0x0)
socket(0xa, 0x1, 0x100)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82", 0x37)
process_mrelease$auto(0xffffffffffffffff, 0xa)
write$auto(0x3, 0x0, 0x100082)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$auto(0x3, 0x0, 0x7fffffff)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x121000, 0x0)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66)
read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, &(0x7f00000002c0)=""/190, 0xfffffe39)
clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
kernel console output (not intermixed with test programs):
000ca
[ 768.442892][T20324] RAX: ffffffffffffffda RBX: 00007f3d66215fa8 RCX: 00007f3d65f9ce59
[ 768.442903][T20324] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3d66215fa8
[ 768.442912][T20324] RBP: 00007f3d66215fa0 R08: 0000000000000000 R09: 0000000000000000
[ 768.442922][T20324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 768.442932][T20324] R13: 00007f3d66216038 R14: 00007ffd99962370 R15: 00007ffd99962458
[ 768.442952][T20324]
[ 769.811689][T20352] blktrace: Concurrent blktraces are not allowed on loop2
[ 770.546138][T20370] FAULT_INJECTION: forcing a failure.
[ 770.546138][T20370] name fail_futex, interval 1, probability 0, space 0, times 0
[ 770.567327][T20370] CPU: 0 UID: 0 PID: 20370 Comm: syz.1.2942 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 770.567356][T20370] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 770.567362][T20370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 770.567373][T20370] Call Trace:
[ 770.567378][T20370]
[ 770.567385][T20370] dump_stack_lvl+0x100/0x190
[ 770.567407][T20370] should_fail_ex.cold+0x5/0xa
[ 770.567424][T20370] ? __page_table_check_zero+0x333/0x410
[ 770.567444][T20370] get_futex_key+0x1d2/0x1510
[ 770.567471][T20370] ? __pfx_get_futex_key+0x10/0x10
[ 770.567494][T20370] ? prep_compound_page+0x27d/0x570
[ 770.567516][T20370] ? post_alloc_hook+0xed/0x120
[ 770.567541][T20370] futex_wait_setup+0x83/0x510
[ 770.567565][T20370] __futex_wait+0x19f/0x300
[ 770.567585][T20370] ? __pfx___futex_wait+0x10/0x10
[ 770.567606][T20370] ? __pfx_futex_wake_mark+0x10/0x10
[ 770.567627][T20370] ? futex_hash+0x2ad/0x370
[ 770.567650][T20370] ? futex_hash+0x141/0x370
[ 770.567674][T20370] futex_wait+0xe6/0x370
[ 770.567693][T20370] ? __pfx_futex_wait+0x10/0x10
[ 770.567718][T20370] ? __pfx_clockevents_program_event+0x10/0x10
[ 770.567738][T20370] do_futex+0x1ef/0x350
[ 770.567754][T20370] ? __pfx_do_futex+0x10/0x10
[ 770.567773][T20370] ? find_held_lock+0x2b/0x80
[ 770.567792][T20370] ? rcu_read_unlock+0x17/0x60
[ 770.567812][T20370] ? rcu_read_unlock+0x17/0x60
[ 770.567833][T20370] __x64_sys_futex+0x34f/0x4d0
[ 770.567852][T20370] ? __pfx___x64_sys_futex+0x10/0x10
[ 770.567867][T20370] ? trace_kmalloc+0xe3/0x110
[ 770.567884][T20370] ? __bitmap_clear+0x11d/0x160
[ 770.567908][T20370] ? rcu_is_watching+0x12/0xc0
[ 770.567927][T20370] do_syscall_64+0x115/0x840
[ 770.567948][T20370] ? clear_bhb_loop+0x40/0x90
[ 770.567966][T20370] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 770.567982][T20370] RIP: 0033:0x7faa86d9ce59
[ 770.567995][T20370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 770.568010][T20370] RSP: 002b:00007faa87b890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 770.568033][T20370] RAX: ffffffffffffffda RBX: 00007faa87015fa8 RCX: 00007faa86d9ce59
[ 770.568044][T20370] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa87015fa8
[ 770.568053][T20370] RBP: 00007faa87015fa0 R08: 0000000000000000 R09: 0000000000000000
[ 770.568062][T20370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 770.568072][T20370] R13: 00007faa87016038 R14: 00007ffd4d15cec0 R15: 00007ffd4d15cfa8
[ 770.568093][T20370]
[ 772.725272][ T6076] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[ 772.917863][T20404] FAULT_INJECTION: forcing a failure.
[ 772.917863][T20404] name failslab, interval 1, probability 0, space 0, times 0
[ 772.953257][T20404] CPU: 0 UID: 0 PID: 20404 Comm: syz.1.2952 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 772.953285][T20404] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 772.953291][T20404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 772.953300][T20404] Call Trace:
[ 772.953306][T20404]
[ 772.953312][T20404] dump_stack_lvl+0x100/0x190
[ 772.953333][T20404] should_fail_ex.cold+0x5/0xa
[ 772.953352][T20404] should_failslab+0xc2/0x120
[ 772.953371][T20404] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 772.953394][T20404] ? taskstats_exit+0x67b/0xc10
[ 772.953414][T20404] ? rcu_is_watching+0x12/0xc0
[ 772.953434][T20404] taskstats_exit+0x67b/0xc10
[ 772.953454][T20404] ? __pfx_acct_update_integrals+0x10/0x10
[ 772.953475][T20404] ? __pfx_taskstats_exit+0x10/0x10
[ 772.953496][T20404] ? rcu_read_lock_any_held+0x6a/0xa0
[ 772.953515][T20404] ? exit_signals+0x395/0xaf0
[ 772.953535][T20404] do_exit+0x65c/0x2af0
[ 772.953560][T20404] ? __pfx_do_exit+0x10/0x10
[ 772.953585][T20404] ? do_raw_spin_lock+0x128/0x260
[ 772.953601][T20404] ? find_held_lock+0x2b/0x80
[ 772.953619][T20404] ? get_signal+0x7e5/0x2210
[ 772.953638][T20404] do_group_exit+0xd5/0x2a0
[ 772.953661][T20404] get_signal+0x20ff/0x2210
[ 772.953686][T20404] ? __pfx_get_signal+0x10/0x10
[ 772.953706][T20404] ? do_futex+0x192/0x350
[ 772.953723][T20404] arch_do_signal_or_restart+0x91/0x7a0
[ 772.953745][T20404] ? find_held_lock+0x2b/0x80
[ 772.953763][T20404] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 772.953791][T20404] ? rcu_is_watching+0x12/0xc0
[ 772.953810][T20404] exit_to_user_mode_loop+0x98/0x670
[ 772.953841][T20404] ? rcu_is_watching+0x12/0xc0
[ 772.953859][T20404] do_syscall_64+0x652/0x840
[ 772.953881][T20404] ? clear_bhb_loop+0x40/0x90
[ 772.953899][T20404] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 772.953915][T20404] RIP: 0033:0x7faa86d9ce59
[ 772.953928][T20404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 772.953942][T20404] RSP: 002b:00007faa87b890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 772.953958][T20404] RAX: fffffffffffffe00 RBX: 00007faa87015fa8 RCX: 00007faa86d9ce59
[ 772.953968][T20404] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa87015fa8
[ 772.953977][T20404] RBP: 00007faa87015fa0 R08: 0000000000000000 R09: 0000000000000000
[ 772.953986][T20404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 772.953995][T20404] R13: 00007faa87016038 R14: 00007ffd4d15cec0 R15: 00007ffd4d15cfa8
[ 772.954014][T20404]
[ 773.432659][ T6076] Bluetooth: hci2: unexpected event 0x2c length: 1022 > 17
[ 773.432698][ T6076] Bluetooth: hci2: Ignoring connect complete event for invalid link type
[ 775.783423][T20426] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2957'.
[ 775.835181][T20426] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2957'.
[ 776.055314][T20429] FAULT_INJECTION: forcing a failure.
[ 776.055314][T20429] name failslab, interval 1, probability 0, space 0, times 0
[ 776.090314][T20429] CPU: 0 UID: 0 PID: 20429 Comm: syz.4.2958 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 776.090342][T20429] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 776.090348][T20429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 776.090358][T20429] Call Trace:
[ 776.090363][T20429]
[ 776.090369][T20429] dump_stack_lvl+0x100/0x190
[ 776.090391][T20429] should_fail_ex.cold+0x5/0xa
[ 776.090411][T20429] should_failslab+0xc2/0x120
[ 776.090431][T20429] kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 776.090455][T20429] ? __d_alloc+0x34/0xa40
[ 776.090479][T20429] __d_alloc+0x34/0xa40
[ 776.090501][T20429] d_alloc_parallel+0x111/0x14e0
[ 776.090522][T20429] ? find_held_lock+0x2b/0x80
[ 776.090541][T20429] ? __d_lookup+0x25c/0x4a0
[ 776.090555][T20429] ? __pfx_d_alloc_parallel+0x10/0x10
[ 776.090573][T20429] ? __d_lookup+0x266/0x4a0
[ 776.090593][T20429] lookup_open.isra.0+0x57c/0x11b0
[ 776.090613][T20429] ? __pfx_lookup_open.isra.0+0x10/0x10
[ 776.090645][T20429] ? mnt_get_write_access+0x1e9/0x2f0
[ 776.090672][T20429] path_openat+0xa98/0x31a0
[ 776.090698][T20429] ? __pfx_path_openat+0x10/0x10
[ 776.090723][T20429] do_file_open+0x20e/0x430
[ 776.090744][T20429] ? __pfx_do_file_open+0x10/0x10
[ 776.090770][T20429] ? __pfx_kfree_link+0x10/0x10
[ 776.090791][T20429] ? alloc_fd+0x476/0x790
[ 776.090811][T20429] ? do_getname+0x191/0x390
[ 776.090834][T20429] do_sys_openat2+0x10d/0x1e0
[ 776.090858][T20429] ? __pfx_do_sys_openat2+0x10/0x10
[ 776.090887][T20429] __x64_sys_openat+0x12d/0x210
[ 776.090910][T20429] ? __pfx___x64_sys_openat+0x10/0x10
[ 776.090932][T20429] ? ksys_write+0x1ac/0x250
[ 776.090952][T20429] ? rcu_is_watching+0x12/0xc0
[ 776.090972][T20429] do_syscall_64+0x115/0x840
[ 776.090992][T20429] ? clear_bhb_loop+0x40/0x90
[ 776.091011][T20429] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 776.091026][T20429] RIP: 0033:0x7f3d65f5d68e
[ 776.091040][T20429] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 776.091054][T20429] RSP: 002b:00007f3d66e57ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 776.091069][T20429] RAX: ffffffffffffffda RBX: 00007f3d66e586c0 RCX: 00007f3d65f5d68e
[ 776.091080][T20429] RDX: 0000000000000002 RSI: 00007f3d66e57f90 RDI: ffffffffffffff9c
[ 776.091089][T20429] RBP: 00007f3d66032d6f R08: 0000000000000000 R09: 0000000000000000
[ 776.091099][T20429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 776.091108][T20429] R13: 00007f3d66216038 R14: 00007f3d66215fa0 R15: 00007ffd99962458
[ 776.091127][T20429]
[ 776.604301][T20443] FAULT_INJECTION: forcing a failure.
[ 776.604301][T20443] name fail_futex, interval 1, probability 0, space 0, times 0
[ 776.622598][T20443] CPU: 0 UID: 0 PID: 20443 Comm: syz.1.2961 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 776.622628][T20443] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 776.622634][T20443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 776.622644][T20443] Call Trace:
[ 776.622649][T20443]
[ 776.622656][T20443] dump_stack_lvl+0x100/0x190
[ 776.622677][T20443] should_fail_ex.cold+0x5/0xa
[ 776.622698][T20443] get_futex_key+0x1d2/0x1510
[ 776.622725][T20443] ? __pfx_get_futex_key+0x10/0x10
[ 776.622749][T20443] ? trace_pid_list_is_set+0x11a/0x390
[ 776.622768][T20443] ? trace_pid_list_is_set+0x22c/0x390
[ 776.622791][T20443] futex_wait_setup+0x83/0x510
[ 776.622815][T20443] __futex_wait+0x19f/0x300
[ 776.622835][T20443] ? __pfx___futex_wait+0x10/0x10
[ 776.622852][T20443] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 776.622875][T20443] ? __pfx_futex_wake_mark+0x10/0x10
[ 776.622897][T20443] ? find_held_lock+0x2b/0x80
[ 776.622915][T20443] ? futex_wake+0x456/0x530
[ 776.622936][T20443] futex_wait+0xe6/0x370
[ 776.622955][T20443] ? __pfx_futex_wait+0x10/0x10
[ 776.622978][T20443] ? ksys_write+0x190/0x250
[ 776.623000][T20443] do_futex+0x1ef/0x350
[ 776.623016][T20443] ? __pfx_do_futex+0x10/0x10
[ 776.623031][T20443] ? find_held_lock+0x2b/0x80
[ 776.623058][T20443] ? rcu_read_unlock+0x17/0x60
[ 776.623078][T20443] ? rcu_read_unlock+0x17/0x60
[ 776.623099][T20443] __x64_sys_futex+0x34f/0x4d0
[ 776.623118][T20443] ? __pfx___x64_sys_futex+0x10/0x10
[ 776.623134][T20443] ? trace_kmalloc+0xe3/0x110
[ 776.623151][T20443] ? __bitmap_clear+0x11d/0x160
[ 776.623175][T20443] ? rcu_is_watching+0x12/0xc0
[ 776.623195][T20443] do_syscall_64+0x115/0x840
[ 776.623215][T20443] ? clear_bhb_loop+0x40/0x90
[ 776.623233][T20443] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 776.623249][T20443] RIP: 0033:0x7faa86d9ce59
[ 776.623262][T20443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 776.623277][T20443] RSP: 002b:00007faa87b890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 776.623292][T20443] RAX: ffffffffffffffda RBX: 00007faa87015fa8 RCX: 00007faa86d9ce59
[ 776.623302][T20443] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa87015fa8
[ 776.623311][T20443] RBP: 00007faa87015fa0 R08: 0000000000000000 R09: 0000000000000000
[ 776.623320][T20443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 776.623330][T20443] R13: 00007faa87016038 R14: 00007ffd4d15cec0 R15: 00007ffd4d15cfa8
[ 776.623350][T20443]
[ 777.988805][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2964'.
[ 780.107033][T16500] Process accounting resumed
[ 780.297922][ T6076] Bluetooth: hci4: unexpected event 0x2c length: 1022 > 17
[ 780.297948][ T6076] Bluetooth: hci4: Ignoring connect complete event for invalid link type
[ 780.705389][ T6419] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 780.728932][ T6419] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 780.750119][ T6419] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 780.768657][ T6419] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 780.787253][ T6419] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 780.868982][ T6076] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 780.885871][ T6076] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 780.901211][ T6076] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 780.910987][ T6076] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 780.925636][ T6076] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 781.146260][T20494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'.
[ 782.395256][T20536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2980'.
[ 782.859299][ T6419] Bluetooth: hci3: command tx timeout
[ 783.018220][ T6419] Bluetooth: hci5: command tx timeout
[ 783.232954][T20498] bridge0: port 1(bridge_slave_0) entered blocking state
[ 783.259087][T20498] bridge0: port 1(bridge_slave_0) entered disabled state
[ 783.278291][T20498] bridge_slave_0: entered allmulticast mode
[ 783.300539][T20498] bridge_slave_0: entered promiscuous mode
[ 783.377901][T20498] bridge0: port 2(bridge_slave_1) entered blocking state
[ 783.400861][T20498] bridge0: port 2(bridge_slave_1) entered disabled state
[ 783.428906][T20498] bridge_slave_1: entered allmulticast mode
[ 783.455338][T20498] bridge_slave_1: entered promiscuous mode
[ 783.499738][T20502] bridge0: port 1(bridge_slave_0) entered blocking state
[ 783.521089][T20502] bridge0: port 1(bridge_slave_0) entered disabled state
[ 783.548216][T20502] bridge_slave_0: entered allmulticast mode
[ 783.560406][T20502] bridge_slave_0: entered promiscuous mode
[ 783.594226][T20502] bridge0: port 2(bridge_slave_1) entered blocking state
[ 783.594290][T20502] bridge0: port 2(bridge_slave_1) entered disabled state
[ 783.594371][T20502] bridge_slave_1: entered allmulticast mode
[ 783.595341][T20502] bridge_slave_1: entered promiscuous mode
[ 783.635098][T20498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 783.649944][T20498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 783.710260][T20502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 783.714201][T20502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 783.715563][T20498] team0: Port device team_slave_0 added
[ 783.792624][T20498] team0: Port device team_slave_1 added
[ 783.842396][T20502] team0: Port device team_slave_0 added
[ 783.845039][T20502] team0: Port device team_slave_1 added
[ 783.885612][T20498] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 783.885628][T20498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 783.885648][T20498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 783.891537][T20502] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 783.891552][T20502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 783.891571][T20502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 783.903895][T20502] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 783.903909][T20502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 783.905686][T20502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 783.924716][T20498] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 783.924730][T20498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 783.924749][T20498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 784.127768][T20502] hsr_slave_0: entered promiscuous mode
[ 784.130293][T20502] hsr_slave_1: entered promiscuous mode
[ 784.130734][T20502] debugfs: 'hsr0' already exists in 'hsr'
[ 784.130750][T20502] Cannot create hsr debugfs directory
[ 784.139020][T20498] hsr_slave_0: entered promiscuous mode
[ 784.141186][T20498] hsr_slave_1: entered promiscuous mode
[ 784.141723][T20498] debugfs: 'hsr0' already exists in 'hsr'
[ 784.141739][T20498] Cannot create hsr debugfs directory
[ 784.930183][ T6076] Bluetooth: hci3: command tx timeout
[ 785.086475][ T6076] Bluetooth: hci5: command tx timeout
[ 785.958607][T20498] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 786.002599][T20498] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 786.030484][T20498] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 786.069147][T20498] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 786.100925][T20498] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 786.146500][T20498] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 786.247721][T20498] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 786.266382][T20498] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 786.411864][T20502] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 786.462478][T20502] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 786.535698][T20502] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 786.610762][T20502] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 786.655618][T20502] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 786.701626][T20502] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 786.734014][T20502] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 786.771185][T20502] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 786.996826][ T6076] Bluetooth: hci3: command tx timeout
[ 787.030884][T20498] 8021q: adding VLAN 0 to HW filter on device bond0
[ 787.052313][T20612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2989'.
[ 787.103516][T20498] 8021q: adding VLAN 0 to HW filter on device team0
[ 787.158093][ T6076] Bluetooth: hci5: command tx timeout
[ 787.180913][ T7167] bridge0: port 1(bridge_slave_0) entered blocking state
[ 787.188048][ T7167] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 787.259188][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state
[ 787.266357][ T7167] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 787.345300][T20502] 8021q: adding VLAN 0 to HW filter on device bond0
[ 787.402236][T20502] 8021q: adding VLAN 0 to HW filter on device team0
[ 787.432901][T14719] bridge0: port 1(bridge_slave_0) entered blocking state
[ 787.440032][T14719] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 787.473273][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state
[ 787.480394][ T7167] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 787.541038][T20498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 788.673590][T20498] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 788.800700][T20502] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 789.067058][ T6076] Bluetooth: hci3: command tx timeout
[ 789.225556][ T6076] Bluetooth: hci5: command tx timeout
[ 789.379311][T20498] veth0_vlan: entered promiscuous mode
[ 789.433233][T20498] veth1_vlan: entered promiscuous mode
[ 789.505831][T20502] veth0_vlan: entered promiscuous mode
[ 789.550999][T20498] veth0_macvtap: entered promiscuous mode
[ 789.574310][T20502] veth1_vlan: entered promiscuous mode
[ 789.592673][T20498] veth1_macvtap: entered promiscuous mode
[ 789.645569][T20498] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 789.679614][T20498] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 789.718108][T20502] veth0_macvtap: entered promiscuous mode
[ 789.749980][T10586] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 789.773612][T10586] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 789.794491][T20502] veth1_macvtap: entered promiscuous mode
[ 789.815438][T10586] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 789.874209][T10586] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 789.978717][T20502] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 790.142498][T20502] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 790.234727][T14719] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 790.253917][T14719] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 790.312947][T14719] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 790.353362][ T7167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 790.373827][ T7167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 790.405797][T14719] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 790.607755][T14719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 790.634820][T14719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 790.649856][ T6070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 790.684740][ T6070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 790.770798][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 790.803156][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 790.985799][T20689] FAULT_INJECTION: forcing a failure.
[ 790.985799][T20689] name fail_futex, interval 1, probability 0, space 0, times 0
[ 791.039804][T20689] CPU: 0 UID: 0 PID: 20689 Comm: syz.6.2971 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 791.039833][T20689] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 791.039840][T20689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 791.039849][T20689] Call Trace:
[ 791.039855][T20689]
[ 791.039862][T20689] dump_stack_lvl+0x100/0x190
[ 791.039883][T20689] should_fail_ex.cold+0x5/0xa
[ 791.039900][T20689] ? __page_table_check_zero+0x333/0x410
[ 791.039920][T20689] get_futex_key+0x1d2/0x1510
[ 791.039946][T20689] ? __pfx_get_futex_key+0x10/0x10
[ 791.039969][T20689] ? prep_compound_page+0x27d/0x570
[ 791.039991][T20689] ? post_alloc_hook+0xed/0x120
[ 791.040016][T20689] futex_wait_setup+0x83/0x510
[ 791.040039][T20689] __futex_wait+0x19f/0x300
[ 791.040060][T20689] ? __pfx___futex_wait+0x10/0x10
[ 791.040081][T20689] ? __pfx_futex_wake_mark+0x10/0x10
[ 791.040102][T20689] ? futex_hash+0x2ad/0x370
[ 791.040125][T20689] ? futex_hash+0x141/0x370
[ 791.040149][T20689] futex_wait+0xe6/0x370
[ 791.040168][T20689] ? __pfx_futex_wait+0x10/0x10
[ 791.040190][T20689] ? ksys_write+0x190/0x250
[ 791.040212][T20689] do_futex+0x1ef/0x350
[ 791.040228][T20689] ? __pfx_do_futex+0x10/0x10
[ 791.040243][T20689] ? find_held_lock+0x2b/0x80
[ 791.040261][T20689] ? rcu_read_unlock+0x17/0x60
[ 791.040287][T20689] ? rcu_read_unlock+0x17/0x60
[ 791.040308][T20689] __x64_sys_futex+0x34f/0x4d0
[ 791.040327][T20689] ? __pfx___x64_sys_futex+0x10/0x10
[ 791.040343][T20689] ? trace_kmalloc+0xe3/0x110
[ 791.040362][T20689] ? __bitmap_clear+0x11d/0x160
[ 791.040387][T20689] ? rcu_is_watching+0x12/0xc0
[ 791.040407][T20689] do_syscall_64+0x115/0x840
[ 791.040428][T20689] ? clear_bhb_loop+0x40/0x90
[ 791.040455][T20689] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 791.040472][T20689] RIP: 0033:0x7ff16259ce59
[ 791.040486][T20689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 791.040502][T20689] RSP: 002b:00007ff1634100e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 791.040518][T20689] RAX: ffffffffffffffda RBX: 00007ff162815fa8 RCX: 00007ff16259ce59
[ 791.040528][T20689] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff162815fa8
[ 791.040537][T20689] RBP: 00007ff162815fa0 R08: 0000000000000000 R09: 0000000000000000
[ 791.040547][T20689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 791.040556][T20689] R13: 00007ff162816038 R14: 00007ffd5b2faa50 R15: 00007ffd5b2fab38
[ 791.040575][T20689]
[ 791.477610][T20684] Process accounting paused
[ 792.422791][ T6419] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 792.439658][ T6419] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 792.465838][ T6419] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 792.501700][ T6419] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 792.521847][ T6068] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 792.822081][T20718] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 793.089843][T20714] FAULT_INJECTION: forcing a failure.
[ 793.089843][T20714] name failslab, interval 1, probability 0, space 0, times 0
[ 793.171628][T20714] CPU: 0 UID: 0 PID: 20714 Comm: syz.6.3001 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 793.171659][T20714] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 793.171666][T20714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 793.171675][T20714] Call Trace:
[ 793.171681][T20714]
[ 793.171687][T20714] dump_stack_lvl+0x100/0x190
[ 793.171709][T20714] should_fail_ex.cold+0x5/0xa
[ 793.171730][T20714] ? lsm_blob_alloc+0x68/0x90
[ 793.171752][T20714] should_failslab+0xc2/0x120
[ 793.171772][T20714] __kmalloc_noprof+0xe0/0x850
[ 793.171786][T20714] ? trace_kmem_cache_alloc+0xd5/0x100
[ 793.171808][T20714] lsm_blob_alloc+0x68/0x90
[ 793.171830][T20714] security_prepare_creds+0x2d/0x290
[ 793.171852][T20714] prepare_creds+0x5d6/0x950
[ 793.171870][T20714] prepare_exec_creds+0x10/0x240
[ 793.171885][T20714] bprm_execve+0xcc/0x1740
[ 793.171907][T20714] ? alloc_bprm+0x3da/0x710
[ 793.171922][T20714] ? alloc_bprm+0x3da/0x710
[ 793.171937][T20714] ? __pfx_bprm_execve+0x10/0x10
[ 793.171953][T20714] ? copy_string_kernel+0x339/0x3f0
[ 793.171972][T20714] do_execveat_common.isra.0+0x4a5/0x580
[ 793.171996][T20714] __x64_sys_execve+0x93/0xd0
[ 793.172014][T20714] do_syscall_64+0x115/0x840
[ 793.172039][T20714] ? clear_bhb_loop+0x40/0x90
[ 793.172062][T20714] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 793.172081][T20714] RIP: 0033:0x7ff16259ce59
[ 793.172095][T20714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 793.172110][T20714] RSP: 002b:00007ff163410028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[ 793.172125][T20714] RAX: ffffffffffffffda RBX: 00007ff162815fa0 RCX: 00007ff16259ce59
[ 793.172136][T20714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[ 793.172146][T20714] RBP: 00007ff162632d6f R08: 0000000000000000 R09: 0000000000000000
[ 793.172155][T20714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 793.172165][T20714] R13: 00007ff162816038 R14: 00007ff162815fa0 R15: 00007ffd5b2fab38
[ 793.172186][T20714]
[ 794.268421][T20705] bridge0: port 1(bridge_slave_0) entered blocking state
[ 794.301129][T20705] bridge0: port 1(bridge_slave_0) entered disabled state
[ 794.337028][T20705] bridge_slave_0: entered allmulticast mode
[ 794.362804][T20705] bridge_slave_0: entered promiscuous mode
[ 794.418738][T20705] bridge0: port 2(bridge_slave_1) entered blocking state
[ 794.448729][T20705] bridge0: port 2(bridge_slave_1) entered disabled state
[ 794.474968][T20705] bridge_slave_1: entered allmulticast mode
[ 794.512387][T20705] bridge_slave_1: entered promiscuous mode
[ 794.637542][ T6068] Bluetooth: hci6: command tx timeout
[ 794.655541][T20705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 794.723080][T20705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 794.821850][T20705] team0: Port device team_slave_0 added
[ 794.853558][T20705] team0: Port device team_slave_1 added
[ 795.068315][T20705] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 795.086112][T20705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 795.148889][ T6068] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18
[ 795.166155][ T6068] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18
[ 795.177017][ T6068] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0'
[ 795.186868][ T6068] CPU: 0 UID: 0 PID: 6068 Comm: kworker/u11:0 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 795.186895][ T6068] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 795.186901][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 795.186913][ T6068] Workqueue: hci5 hci_rx_work
[ 795.186937][ T6068] Call Trace:
[ 795.186943][ T6068]
[ 795.186949][ T6068] dump_stack_lvl+0x100/0x190
[ 795.186969][ T6068] sysfs_warn_dup.cold+0x1c/0x28
[ 795.186992][ T6068] sysfs_create_dir_ns+0x24b/0x2b0
[ 795.187010][ T6068] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 795.187025][ T6068] ? find_held_lock+0x2b/0x80
[ 795.187045][ T6068] ? kobject_add_internal+0x25f/0x930
[ 795.187061][ T6068] ? kobject_add_internal+0x25f/0x930
[ 795.187077][ T6068] ? do_raw_spin_unlock+0x145/0x1e0
[ 795.187095][ T6068] kobject_add_internal+0x2c8/0x930
[ 795.187114][ T6068] kobject_add+0x16a/0x1e0
[ 795.187129][ T6068] ? __pfx_kobject_add+0x10/0x10
[ 795.187142][ T6068] ? class_to_subsys+0x10f/0x150
[ 795.187195][ T6068] ? kobject_put+0xb9/0x640
[ 795.187218][ T6068] ? _raw_spin_unlock+0x28/0x50
[ 795.187242][ T6068] device_add+0x294/0x1950
[ 795.187261][ T6068] ? __pfx_dev_set_name+0x10/0x10
[ 795.187281][ T6068] ? __pfx_device_add+0x10/0x10
[ 795.187297][ T6068] ? mgmt_send_event_skb+0x2fb/0x460
[ 795.187323][ T6068] hci_conn_add_sysfs+0x1a3/0x260
[ 795.187346][ T6068] le_conn_complete_evt+0x11eb/0x1f60
[ 795.187371][ T6068] ? __pfx_le_conn_complete_evt+0x10/0x10
[ 795.187389][ T6068] ? __pfx_bt_warn+0x10/0x10
[ 795.187420][ T6068] hci_le_conn_complete_evt+0x23c/0x3a0
[ 795.187447][ T6068] ? skb_pull_data+0x15f/0x1e0
[ 795.187475][ T6068] hci_le_meta_evt+0x34a/0x5f0
[ 795.187499][ T6068] ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 795.187528][ T6068] hci_event_packet+0x51c/0xcd0
[ 795.187547][ T6068] ? __pfx_hci_le_meta_evt+0x10/0x10
[ 795.187568][ T6068] ? __pfx_hci_event_packet+0x10/0x10
[ 795.187589][ T6068] ? kcov_remote_start+0x374/0x660
[ 795.187612][ T6068] ? lockdep_hardirqs_on+0x78/0x100
[ 795.187637][ T6068] hci_rx_work+0x451/0xfc0
[ 795.187663][ T6068] process_one_work+0xa0e/0x1980
[ 795.187698][ T6068] ? __pfx_process_one_work+0x10/0x10
[ 795.187727][ T6068] ? __pfx_hci_rx_work+0x10/0x10
[ 795.187751][ T6068] worker_thread+0x5ef/0xe50
[ 795.187777][ T6068] ? kthread+0x13a/0x450
[ 795.187802][ T6068] ? __pfx_worker_thread+0x10/0x10
[ 795.187816][ T6068] kthread+0x370/0x450
[ 795.187840][ T6068] ? __pfx_kthread+0x10/0x10
[ 795.187866][ T6068] ret_from_fork+0x72b/0xd50
[ 795.187886][ T6068] ? __pfx_ret_from_fork+0x10/0x10
[ 795.187906][ T6068] ? __switch_to+0x800/0x1100
[ 795.187928][ T6068] ? __switch_to_asm+0x39/0x70
[ 795.187950][ T6068] ? __pfx_kthread+0x10/0x10
[ 795.187981][ T6068] ret_from_fork_asm+0x1a/0x30
[ 795.188014][ T6068]
[ 795.189779][ T6068] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 795.497339][ T6068] Bluetooth: hci5: failed to register connection device
[ 795.532513][T20705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 795.560405][T20705] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 795.577577][T20705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 795.640804][T20705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 795.736399][T20705] hsr_slave_0: entered promiscuous mode
[ 795.750545][T20705] hsr_slave_1: entered promiscuous mode
[ 795.772229][T20705] debugfs: 'hsr0' already exists in 'hsr'
[ 795.785661][T20705] Cannot create hsr debugfs directory
[ 796.128397][T20705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 796.278746][T20705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 796.364374][T20705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 796.458495][T20705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 796.708640][ T6068] Bluetooth: hci6: command tx timeout
[ 796.783993][T20705] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 796.804010][T20705] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 796.823466][T20705] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 796.845541][T20705] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 796.869534][T20705] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 796.894594][T20705] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 796.913601][T20705] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 796.941298][T20705] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 797.199899][T20705] 8021q: adding VLAN 0 to HW filter on device bond0
[ 797.236282][T20705] 8021q: adding VLAN 0 to HW filter on device team0
[ 797.262478][ T7167] bridge0: port 1(bridge_slave_0) entered blocking state
[ 797.269646][ T7167] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 797.319860][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state
[ 797.327058][ T7181] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 797.503331][ T6068] Bluetooth: hci5: command 0x2016 tx timeout
[ 798.171662][T20705] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 798.568200][T20705] veth0_vlan: entered promiscuous mode
[ 798.585723][T20705] veth1_vlan: entered promiscuous mode
[ 798.644545][T20705] veth0_macvtap: entered promiscuous mode
[ 798.674855][T20705] veth1_macvtap: entered promiscuous mode
[ 798.722349][T20705] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 798.760715][T20705] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 798.776158][ T6068] Bluetooth: hci6: command tx timeout
[ 798.798074][ T7172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 798.832685][ T7172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 798.871539][ T7172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 798.895048][ T7172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 799.100352][ T6287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 799.123908][ T6287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 799.206487][ T7183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 799.222589][ T7183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 799.580341][ T6068] Bluetooth: hci5: command 0x2016 tx timeout
[ 800.123236][ C0] sd 0:0:1:0: [sda] tag#9097 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 800.133640][ C0] sd 0:0:1:0: [sda] tag#9097 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00
[ 800.508456][T20847] random: crng reseeded on system resumption
[ 800.846342][ T6076] Bluetooth: hci6: command tx timeout
[ 801.086257][ C0] sd 0:0:1:0: [sda] tag#9131 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 801.096702][ C0] sd 0:0:1:0: [sda] tag#9131 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00
[ 801.640675][ T6076] Bluetooth: hci5: command 0x2016 tx timeout
[ 802.917131][T20882] kfence: disabled
[ 803.677771][ T6068] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 803.696601][ T6068] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 803.706482][ T6068] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 803.714393][ T6068] Bluetooth: hci5: command 0x2016 tx timeout
[ 803.729464][ T6068] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 803.737837][ T6068] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 804.941928][T20893] bridge0: port 1(bridge_slave_0) entered blocking state
[ 804.965677][T20893] bridge0: port 1(bridge_slave_0) entered disabled state
[ 804.991549][T20893] bridge_slave_0: entered allmulticast mode
[ 805.028523][T20893] bridge_slave_0: entered promiscuous mode
[ 805.061674][T20893] bridge0: port 2(bridge_slave_1) entered blocking state
[ 805.084290][T20893] bridge0: port 2(bridge_slave_1) entered disabled state
[ 805.113167][T20893] bridge_slave_1: entered allmulticast mode
[ 805.130764][T20893] bridge_slave_1: entered promiscuous mode
[ 805.222661][T20893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 805.261013][T20893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 805.308001][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 805.321246][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 805.375930][T20893] team0: Port device team_slave_0 added
[ 805.403120][T20893] team0: Port device team_slave_1 added
[ 805.493671][T20893] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 805.517379][T20893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 805.603593][T20893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 805.644084][T20893] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 805.666182][T20893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 805.753823][T20893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 805.779319][ T6068] Bluetooth: hci7: command tx timeout
[ 805.932782][T20893] hsr_slave_0: entered promiscuous mode
[ 805.960199][T20893] hsr_slave_1: entered promiscuous mode
[ 805.979929][T20893] debugfs: 'hsr0' already exists in 'hsr'
[ 805.999069][T20893] Cannot create hsr debugfs directory
[ 806.304345][T20930] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 806.806515][T20893] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 806.826010][T20893] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 806.848951][T20893] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 806.857804][T20893] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 806.858455][T20893] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 806.869521][T20893] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 806.910623][T20893] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 806.926538][T20893] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 807.197179][T20893] 8021q: adding VLAN 0 to HW filter on device bond0
[ 807.230032][T20893] 8021q: adding VLAN 0 to HW filter on device team0
[ 807.245597][ T7172] bridge0: port 1(bridge_slave_0) entered blocking state
[ 807.245695][ T7172] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 807.258228][T10583] bridge0: port 2(bridge_slave_1) entered blocking state
[ 807.258297][T10583] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 807.744917][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3030'.
[ 807.849328][ T6068] Bluetooth: hci7: command tx timeout
[ 808.758532][T20893] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 809.747316][T20893] veth0_vlan: entered promiscuous mode
[ 809.802001][T20893] veth1_vlan: entered promiscuous mode
[ 809.880084][T20893] veth0_macvtap: entered promiscuous mode
[ 809.914247][T20893] veth1_macvtap: entered promiscuous mode
[ 809.920526][ T6068] Bluetooth: hci7: command tx timeout
[ 809.973252][T20893] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 810.023507][T20893] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 810.053844][T10586] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 810.082715][T10586] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 810.125978][T10586] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 810.385186][T10586] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 810.675648][ T6076] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 810.688795][ T6076] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 810.696888][ T6076] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 810.717328][ T6076] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 810.725415][ T6076] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 810.739324][ T7171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 810.804887][ T7171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 810.899640][ T7171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 810.936725][ T7171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 811.979074][T21033] netlink: 'syz.8.3040': attribute type 19 has an invalid length.
[ 811.992390][ T6076] Bluetooth: hci7: command tx timeout
[ 812.021510][T21033] netlink: 334 bytes leftover after parsing attributes in process `syz.8.3040'.
[ 812.783810][ T6076] Bluetooth: hci8: command tx timeout
[ 812.861312][T21007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 812.893201][T21007] bridge0: port 1(bridge_slave_0) entered disabled state
[ 812.907120][T21007] bridge_slave_0: entered allmulticast mode
[ 812.938959][T21007] bridge_slave_0: entered promiscuous mode
[ 813.010468][T21007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 813.048195][T21007] bridge0: port 2(bridge_slave_1) entered disabled state
[ 813.088820][T21007] bridge_slave_1: entered allmulticast mode
[ 813.131877][T21007] bridge_slave_1: entered promiscuous mode
[ 813.222551][T21052] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 813.312621][T21007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 813.374296][T21007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 813.589256][T21007] team0: Port device team_slave_0 added
[ 813.624800][T21007] team0: Port device team_slave_1 added
[ 813.856556][T21007] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 813.892646][T21007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 814.011559][T21007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 814.194273][T21007] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 814.231164][T21007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 814.350343][T21007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 814.564895][T21069] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[20705] was attempted by "û¯žÎÛ`EµoMˆR¬&=û8ŠÎ\x22þ[¸I{(ÐRN™ÔÝ\x5c\x09ê3ØRÊ,á¨W”·•¯hIÒ;}B1ÚìãÍrâ»§-\x0c¶†\x07Rª¼œÉÏ9ž©hJÿÚ:¤zÑW#VkƒPL·b3¢ÖZˆó•S^Œ-,úÃÍÛñô“.Cèl'#¼Îê\x0c §\x22Vs˜Ã+§}Û€“¦#°Œ_%:™ïõġ̀ô¹ÖÁD\x07û/•ǰ¸\x0a\x0clÝmЀ¨x$˜„³íšóe§ù”ì©àlÌW\x1bˆ‚(\x1bl¸\x0aתØc\x0b™G8²Ó÷UÇÒ¨Ð~~ß”à‡Ü£o|Au}é;awê”ù?/J£ükwž–ùøwEáÈús$.&ÉÒ¯ >'iè;ƒh+õgÎÏÏx[i·îò\x07hþ^•ö9®Ì~L\x0c|Ÿ\x0d/`Oð2q ¯‚ÔíÃzpY„È?VÐýÒx½F2\x0bg+|â<_ãÚù3f8fÀÜø“¸…HÃö£²¦^pš‰àjÏLqî;ü—ë\x22Á4Iõ©*½ø1dg%Êü«.8qÀJ†ý2å\x0dÓBiì9€:›JŒµ!R\x0bHžDI&¿gƒÞ)ò74‹%…˜×ÐP½îdlÑŠJØŠ)‡«4¡‚© &\x0bZU‹íÔÚ@NmÎd™KÚx\x07½n󆀌74 ÒfP/S鮎 y»Y„ÜÙ&ÑD!/\x5cE¢æˆC¥g¾<\x09HZ½ÍîÞ©6Q—ß¡Ç|;z|vŽ
[ 814.654467][T21007] hsr_slave_0: entered promiscuous mode
[ 814.878958][ T6076] Bluetooth: hci8: command tx timeout
[ 815.060309][T21007] hsr_slave_1: entered promiscuous mode
[ 815.080740][T21007] debugfs: 'hsr0' already exists in 'hsr'
[ 815.102966][T21007] Cannot create hsr debugfs directory
[ 815.410671][T21082] openvswitch: netlink: Key type 16368 is out of range max 32
[ 815.605528][T21083] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3048'.
[ 816.923016][ T6076] Bluetooth: hci8: command tx timeout
[ 817.673999][T21007] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 817.700217][T21007] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 817.731876][T21007] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 817.780414][T21007] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 817.822401][T21007] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 817.896459][T21007] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 817.973292][T21007] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 818.022089][T21007] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 818.990757][ T6076] Bluetooth: hci8: command tx timeout
[ 819.188435][T21007] 8021q: adding VLAN 0 to HW filter on device bond0
[ 819.420570][T21007] 8021q: adding VLAN 0 to HW filter on device team0
[ 819.511367][T14719] bridge0: port 1(bridge_slave_0) entered blocking state
[ 819.518524][T14719] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 819.586176][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state
[ 819.593359][ T7950] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 820.663624][T21007] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 821.482401][T21007] veth0_vlan: entered promiscuous mode
[ 821.598348][T21007] veth1_vlan: entered promiscuous mode
[ 821.792539][T21007] veth0_macvtap: entered promiscuous mode
[ 821.843152][T21007] veth1_macvtap: entered promiscuous mode
[ 821.920329][T21007] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 821.954262][T21007] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 821.985024][ T7950] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 822.004048][ T7950] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 822.031602][ T7950] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 822.157997][ T7950] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 822.322745][T21203] FAULT_INJECTION: forcing a failure.
[ 822.322745][T21203] name failslab, interval 1, probability 0, space 0, times 0
[ 822.338289][T21203] CPU: 0 UID: 0 PID: 21203 Comm: syz.4.3064 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 822.338317][T21203] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 822.338324][T21203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 822.338334][T21203] Call Trace:
[ 822.338340][T21203]
[ 822.338346][T21203] dump_stack_lvl+0x100/0x190
[ 822.338379][T21203] should_fail_ex.cold+0x5/0xa
[ 822.338401][T21203] should_failslab+0xc2/0x120
[ 822.338422][T21203] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 822.338445][T21203] ? security_file_alloc+0x34/0x2c0
[ 822.338470][T21203] ? trace_kmem_cache_alloc+0xd5/0x100
[ 822.338490][T21203] security_file_alloc+0x34/0x2c0
[ 822.338510][T21203] init_file+0x95/0x480
[ 822.338532][T21203] alloc_empty_file+0x79/0x1c0
[ 822.338554][T21203] path_openat+0xe8/0x31a0
[ 822.338572][T21203] ? kasan_save_stack+0x3f/0x50
[ 822.338585][T21203] ? kasan_save_stack+0x30/0x50
[ 822.338599][T21203] ? kasan_save_track+0x14/0x30
[ 822.338613][T21203] ? __kasan_slab_alloc+0x89/0x90
[ 822.338628][T21203] ? kmem_cache_alloc_noprof+0x241/0x6e0
[ 822.338650][T21203] ? do_getname+0x35/0x390
[ 822.338670][T21203] ? do_sys_openat2+0xc5/0x1e0
[ 822.338691][T21203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 822.338709][T21203] ? __pfx_path_openat+0x10/0x10
[ 822.338734][T21203] do_file_open+0x20e/0x430
[ 822.338754][T21203] ? __pfx_do_file_open+0x10/0x10
[ 822.338786][T21203] ? alloc_fd+0x476/0x790
[ 822.338805][T21203] ? do_getname+0x191/0x390
[ 822.338828][T21203] do_sys_openat2+0x10d/0x1e0
[ 822.338849][T21203] ? __pfx_do_sys_openat2+0x10/0x10
[ 822.338873][T21203] ? __sys_sendmsg+0x18f/0x220
[ 822.338895][T21203] __x64_sys_openat+0x12d/0x210
[ 822.338918][T21203] ? __pfx___x64_sys_openat+0x10/0x10
[ 822.338957][T21203] ? rcu_is_watching+0x12/0xc0
[ 822.338978][T21203] do_syscall_64+0x115/0x840
[ 822.338999][T21203] ? clear_bhb_loop+0x40/0x90
[ 822.339017][T21203] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 822.339033][T21203] RIP: 0033:0x7fe89799ce59
[ 822.339047][T21203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 822.339062][T21203] RSP: 002b:00007fe8987f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 822.339077][T21203] RAX: ffffffffffffffda RBX: 00007fe897c15fa0 RCX: 00007fe89799ce59
[ 822.339087][T21203] RDX: 000000000006ab82 RSI: 00002000000011c0 RDI: ffffffffffffff9c
[ 822.339097][T21203] RBP: 00007fe897a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 822.339106][T21203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 822.339115][T21203] R13: 00007fe897c16038 R14: 00007fe897c15fa0 R15: 00007ffeb3c3aaf8
[ 822.339135][T21203]
[ 822.797539][ T7167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 822.805443][ T7167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 822.812989][ T7167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 822.820916][ T7167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 823.591726][T21214] zswap: compressor not available
[ 827.111985][T21284] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0e02a (__mcheck_cpu_init_prepare_banks+0x18a/0x380)
[ 827.127690][T21284] Call Trace:
[ 827.130969][T21284]
[ 827.133906][T21284] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10
[ 827.140577][T21284] ? irqentry_exit+0x24d/0x970
[ 827.145333][T21284] ? lockdep_hardirqs_on+0x78/0x100
[ 827.150535][T21284] ? irqentry_exit+0x24d/0x970
[ 827.155296][T21284] mce_cpu_restart+0xd5/0x1f0
[ 827.159968][T21284] ? __pfx_mce_cpu_restart+0x10/0x10
[ 827.165244][T21284] smp_call_function_many_cond+0x13d4/0x1700
[ 827.171218][T21284] ? __pfx_mce_cpu_restart+0x10/0x10
[ 827.176493][T21284] ? _raw_spin_unlock_irqrestore+0x31/0x80
[ 827.182294][T21284] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 827.188092][T21284] ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 827.194409][T21284] ? __pfx___try_to_del_timer_sync+0x10/0x10
[ 827.200384][T21284] ? __timer_delete_sync+0x151/0x1c0
[ 827.205666][T21284] ? __pfx_mce_cpu_restart+0x10/0x10
[ 827.210937][T21284] on_each_cpu_cond_mask+0x40/0x90
[ 827.216043][T21284] set_bank+0x240/0x3a0
[ 827.220185][T21284] ? __pfx_set_bank+0x10/0x10
[ 827.225029][T21284] ? find_held_lock+0x2b/0x80
[ 827.229695][T21284] ? sysfs_file_kobj+0xe4/0x290
[ 827.234539][T21284] ? sysfs_file_kobj+0xe4/0x290
[ 827.239383][T21284] ? __pfx_set_bank+0x10/0x10
[ 827.244044][T21284] dev_attr_store+0x58/0x80
[ 827.248546][T21284] ? __pfx_dev_attr_store+0x10/0x10
[ 827.253762][T21284] sysfs_kf_write+0xf2/0x150
[ 827.258374][T21284] kernfs_fop_write_iter+0x3e0/0x5f0
[ 827.263671][T21284] ? __pfx_sysfs_kf_write+0x10/0x10
[ 827.268970][T21284] vfs_write+0x6ac/0x1070
[ 827.273294][T21284] ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 827.279113][T21284] ? __pfx_vfs_write+0x10/0x10
[ 827.283892][T21284] ksys_write+0x12a/0x250
[ 827.288223][T21284] ? __pfx_ksys_write+0x10/0x10
[ 827.293074][T21284] ? rcu_is_watching+0x12/0xc0
[ 827.297835][T21284] do_syscall_64+0x115/0x840
[ 827.302422][T21284] ? clear_bhb_loop+0x40/0x90
[ 827.307093][T21284] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 827.312980][T21284] RIP: 0033:0x7fe89799ce59
[ 827.317386][T21284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 827.336983][T21284] RSP: 002b:00007fe8987f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 827.345383][T21284] RAX: ffffffffffffffda RBX: 00007fe897c15fa0 RCX: 00007fe89799ce59
[ 827.353336][T21284] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003
[ 827.361291][T21284] RBP: 00007fe897a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 827.369248][T21284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 827.377205][T21284] R13: 00007fe897c16038 R14: 00007fe897c15fa0 R15: 00007ffeb3c3aaf8
[ 827.385173][T21284]
[ 828.631284][T21298] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3085'.
[ 829.792321][T21325] udc dummy_udc.0: soft-connect without a gadget driver
[ 829.900180][T21328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3092'.
[ 829.999757][T21329] FAULT_INJECTION: forcing a failure.
[ 829.999757][T21329] name failslab, interval 1, probability 0, space 0, times 0
[ 830.114362][T21333] blktrace: Concurrent blktraces are not allowed on sg0
[ 830.170816][T21329] CPU: 0 UID: 0 PID: 21329 Comm: syz.6.3092 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 830.170845][T21329] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 830.170851][T21329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 830.170861][T21329] Call Trace:
[ 830.170867][T21329]
[ 830.170874][T21329] dump_stack_lvl+0x100/0x190
[ 830.170896][T21329] should_fail_ex.cold+0x5/0xa
[ 830.170917][T21329] should_failslab+0xc2/0x120
[ 830.170936][T21329] kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 830.170960][T21329] ? alloc_inode+0x68/0x250
[ 830.170983][T21329] ? simple_start_creating+0xb0/0x110
[ 830.171003][T21329] ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 830.171132][T21329] alloc_inode+0x68/0x250
[ 830.171155][T21329] new_inode+0x22/0x1c0
[ 830.171180][T21329] __debugfs_create_file+0x105/0x4f0
[ 830.171199][T21329] debugfs_create_file_full+0x41/0x60
[ 830.171218][T21329] ref_tracker_dir_debugfs+0x19e/0x2e0
[ 830.171235][T21329] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[ 830.171266][T21329] ? lockdep_init_map_type+0x5c/0x250
[ 830.171293][T21329] preinit_net.part.0+0x43b/0x920
[ 830.171312][T21329] copy_net_ns+0x339/0x7c0
[ 830.171332][T21329] create_new_namespaces+0x3ea/0xac0
[ 830.171357][T21329] unshare_nsproxy_namespaces+0xf2/0x220
[ 830.171377][T21329] ksys_unshare+0x438/0xab0
[ 830.171400][T21329] ? __pfx_ksys_unshare+0x10/0x10
[ 830.171420][T21329] ? xfd_validate_state+0x129/0x190
[ 830.171434][T21329] ? ksys_write+0x1ac/0x250
[ 830.171457][T21329] __x64_sys_unshare+0x31/0x40
[ 830.171488][T21329] do_syscall_64+0x115/0x840
[ 830.171511][T21329] ? clear_bhb_loop+0x40/0x90
[ 830.171530][T21329] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 830.171547][T21329] RIP: 0033:0x7ff16259ce59
[ 830.171561][T21329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 830.171576][T21329] RSP: 002b:00007ff1633ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 830.171591][T21329] RAX: ffffffffffffffda RBX: 00007ff162816090 RCX: 00007ff16259ce59
[ 830.171602][T21329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 830.171611][T21329] RBP: 00007ff162632d6f R08: 0000000000000000 R09: 0000000000000000
[ 830.171621][T21329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 830.171636][T21329] R13: 00007ff162816128 R14: 00007ff162816090 R15: 00007ffd5b2fab38
[ 830.171655][T21329]
[ 830.514508][T21329] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff8880743ad078'
[ 830.924948][T21343] bond0: invalid ARP target specified
[ 832.219035][T21387] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3103'.
[ 832.257750][T21387] FAULT_INJECTION: forcing a failure.
[ 832.257750][T21387] name failslab, interval 1, probability 0, space 0, times 0
[ 832.293848][T21387] CPU: 0 UID: 0 PID: 21387 Comm: syz.4.3103 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 832.293877][T21387] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 832.293883][T21387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 832.293893][T21387] Call Trace:
[ 832.293899][T21387]
[ 832.293905][T21387] dump_stack_lvl+0x100/0x190
[ 832.293927][T21387] should_fail_ex.cold+0x5/0xa
[ 832.293949][T21387] should_failslab+0xc2/0x120
[ 832.293969][T21387] __kvmalloc_node_noprof+0xfa/0xa00
[ 832.293984][T21387] ? io_alloc_cache_init+0x38/0x170
[ 832.294003][T21387] ? lockdep_init_map_type+0x5c/0x250
[ 832.294030][T21387] io_alloc_cache_init+0x38/0x170
[ 832.294049][T21387] io_uring_setup.cold+0x3cd/0x1c6e
[ 832.294076][T21387] ? __pfx_io_uring_setup+0x10/0x10
[ 832.294185][T21387] ? do_futex+0x192/0x350
[ 832.294203][T21387] ? __pfx_do_futex+0x10/0x10
[ 832.294227][T21387] ? xfd_validate_state+0x129/0x190
[ 832.294249][T21387] __x64_sys_io_uring_setup+0xc2/0x170
[ 832.294275][T21387] do_syscall_64+0x115/0x840
[ 832.294295][T21387] ? clear_bhb_loop+0x40/0x90
[ 832.294315][T21387] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 832.294331][T21387] RIP: 0033:0x7fe89799ce59
[ 832.294346][T21387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 832.294361][T21387] RSP: 002b:00007fe8987f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[ 832.294376][T21387] RAX: ffffffffffffffda RBX: 00007fe897c15fa0 RCX: 00007fe89799ce59
[ 832.294386][T21387] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059
[ 832.294396][T21387] RBP: 00007fe897a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 832.294406][T21387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 832.294415][T21387] R13: 00007fe897c16038 R14: 00007fe897c15fa0 R15: 00007ffeb3c3aaf8
[ 832.294435][T21387]
[ 833.202911][T21395] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3105'.
[ 834.373798][ T6068] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 834.391792][ T6068] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 834.402032][ T6068] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 834.416029][ T6068] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 834.423514][ T6068] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 834.534793][T21402] bond0: invalid ARP target specified
[ 835.387435][T21437] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0]
[ 835.438374][T21438] ubi0: attaching mtd0
[ 835.470194][T21438] ubi0: scanning is finished
[ 835.503772][T21438] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 835.704857][T21438] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 836.500776][ T6068] Bluetooth: hci7: command tx timeout
[ 837.370368][T21408] bridge0: port 1(bridge_slave_0) entered blocking state
[ 837.394783][T21408] bridge0: port 1(bridge_slave_0) entered disabled state
[ 837.433512][T21408] bridge_slave_0: entered allmulticast mode
[ 837.466762][T21408] bridge_slave_0: entered promiscuous mode
[ 837.496030][T21408] bridge0: port 2(bridge_slave_1) entered blocking state
[ 837.514694][T21480] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 837.529426][T21408] bridge0: port 2(bridge_slave_1) entered disabled state
[ 837.550315][T21480] FAULT_INJECTION: forcing a failure.
[ 837.550315][T21480] name failslab, interval 1, probability 0, space 0, times 0
[ 837.565167][T21408] bridge_slave_1: entered allmulticast mode
[ 837.578902][T21408] bridge_slave_1: entered promiscuous mode
[ 837.592848][T21480] CPU: 0 UID: 0 PID: 21480 Comm: syz.9.3121 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 837.592876][T21480] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 837.592883][T21480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 837.592892][T21480] Call Trace:
[ 837.592899][T21480]
[ 837.592905][T21480] dump_stack_lvl+0x100/0x190
[ 837.592927][T21480] should_fail_ex.cold+0x5/0xa
[ 837.592948][T21480] should_failslab+0xc2/0x120
[ 837.592967][T21480] __kmalloc_cache_noprof+0x7a/0x6f0
[ 837.592989][T21480] ? pty_common_install+0x10e/0xb30
[ 837.593080][T21480] pty_common_install+0x10e/0xb30
[ 837.593101][T21480] ? __pfx_pty_install+0x10/0x10
[ 837.593118][T21480] tty_init_dev.part.0+0x9e/0x470
[ 837.593140][T21480] tty_open+0xa63/0xfa0
[ 837.593163][T21480] ? __pfx_tty_open+0x10/0x10
[ 837.593181][T21480] ? chrdev_open+0x589/0x6a0
[ 837.593199][T21480] ? chrdev_open+0x589/0x6a0
[ 837.593220][T21480] ? __pfx_tty_open+0x10/0x10
[ 837.593239][T21480] chrdev_open+0x234/0x6a0
[ 837.593261][T21480] ? __pfx_chrdev_open+0x10/0x10
[ 837.593289][T21480] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 837.593315][T21480] do_dentry_open+0x6ab/0x14d0
[ 837.593334][T21480] ? __pfx_chrdev_open+0x10/0x10
[ 837.593356][T21480] vfs_open+0x82/0x3f0
[ 837.593381][T21480] path_openat+0x208c/0x31a0
[ 837.593406][T21480] ? __pfx_path_openat+0x10/0x10
[ 837.593432][T21480] do_file_open+0x20e/0x430
[ 837.593452][T21480] ? __pfx_do_file_open+0x10/0x10
[ 837.593484][T21480] ? alloc_fd+0x476/0x790
[ 837.593504][T21480] ? do_getname+0x191/0x390
[ 837.593527][T21480] do_sys_openat2+0x10d/0x1e0
[ 837.593549][T21480] ? __pfx_do_sys_openat2+0x10/0x10
[ 837.593581][T21480] __x64_sys_openat+0x12d/0x210
[ 837.593606][T21480] ? __pfx___x64_sys_openat+0x10/0x10
[ 837.593627][T21480] ? exit_to_user_mode_loop+0xf3/0x670
[ 837.593654][T21480] ? rcu_is_watching+0x12/0xc0
[ 837.593674][T21480] do_syscall_64+0x115/0x840
[ 837.593695][T21480] ? clear_bhb_loop+0x40/0x90
[ 837.593713][T21480] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 837.593729][T21480] RIP: 0033:0x7f79fa99ce59
[ 837.593744][T21480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 837.593758][T21480] RSP: 002b:00007f79fb81b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 837.593774][T21480] RAX: ffffffffffffffda RBX: 00007f79fac15fa0 RCX: 00007f79fa99ce59
[ 837.593784][T21480] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 837.593794][T21480] RBP: 00007f79faa32d6f R08: 0000000000000000 R09: 0000000000000000
[ 837.593803][T21480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 837.593812][T21480] R13: 00007f79fac16038 R14: 00007f79fac15fa0 R15: 00007ffcfeaa5168
[ 837.593833][T21480]
[ 838.551235][T21408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 838.621105][ T6068] Bluetooth: hci7: command tx timeout
[ 838.712047][T21408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 838.841460][T21408] team0: Port device team_slave_0 added
[ 839.024594][T21408] team0: Port device team_slave_1 added
[ 839.156377][T21495] blktrace: Concurrent blktraces are not allowed on loop2
[ 839.441379][T21408] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 839.460225][T21408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 839.530874][T21408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 839.566896][T21408] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 839.586644][T21408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 839.649227][T21408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 840.133138][T21408] hsr_slave_0: entered promiscuous mode
[ 840.165388][T21408] hsr_slave_1: entered promiscuous mode
[ 840.194784][T21408] debugfs: 'hsr0' already exists in 'hsr'
[ 840.219863][T21408] Cannot create hsr debugfs directory
[ 840.637488][ T6068] Bluetooth: hci7: command tx timeout
[ 840.773160][ T30] audit: type=1800 audit(4294969564.167:25): pid=21503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3126" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[ 842.707433][ T6068] Bluetooth: hci7: command tx timeout
[ 845.950476][T21408] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 846.234988][T21408] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 846.316862][T21408] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 846.364967][T21408] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 846.421677][T21408] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 846.489509][T21408] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 846.520482][T21408] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 846.558302][T21408] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 847.090806][T21408] 8021q: adding VLAN 0 to HW filter on device bond0
[ 847.184442][T21408] 8021q: adding VLAN 0 to HW filter on device team0
[ 847.218370][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state
[ 847.225542][ T7952] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 847.288808][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state
[ 847.295963][ T7952] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 847.634040][T21647] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3137'.
[ 847.756867][T21653] FAULT_INJECTION: forcing a failure.
[ 847.756867][T21653] name failslab, interval 1, probability 0, space 0, times 0
[ 847.829309][T21653] CPU: 0 UID: 0 PID: 21653 Comm: syz.6.3138 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 847.829339][T21653] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 847.829345][T21653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 847.829355][T21653] Call Trace:
[ 847.829360][T21653]
[ 847.829367][T21653] dump_stack_lvl+0x100/0x190
[ 847.829388][T21653] should_fail_ex.cold+0x5/0xa
[ 847.829416][T21653] should_failslab+0xc2/0x120
[ 847.829436][T21653] kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 847.829461][T21653] ? __d_alloc+0x34/0xa40
[ 847.829486][T21653] __d_alloc+0x34/0xa40
[ 847.829508][T21653] d_alloc_pseudo+0x1c/0xc0
[ 847.829522][T21653] alloc_file_pseudo+0xcf/0x230
[ 847.829546][T21653] ? __pfx_alloc_file_pseudo+0x10/0x10
[ 847.829573][T21653] __shmem_file_setup+0x205/0x460
[ 847.829595][T21653] ? __pfx___shmem_file_setup+0x10/0x10
[ 847.829617][T21653] ? vm_area_alloc+0x1f/0x160
[ 847.829640][T21653] shmem_zero_setup+0x96/0x1b0
[ 847.829658][T21653] __mmap_region+0x2509/0x2dd0
[ 847.829684][T21653] ? __pfx___mmap_region+0x10/0x10
[ 847.829710][T21653] ? rcu_is_watching+0x12/0xc0
[ 847.829727][T21653] ? trace_pelt_se_tp+0x13b/0x190
[ 847.829755][T21653] ? find_held_lock+0x2b/0x80
[ 847.829772][T21653] ? debug_object_activate+0x331/0x490
[ 847.829792][T21653] ? debug_object_activate+0x331/0x490
[ 847.829813][T21653] ? do_raw_spin_unlock+0x145/0x1e0
[ 847.829830][T21653] ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 847.829858][T21653] ? find_held_lock+0x2b/0x80
[ 847.829886][T21653] ? rcu_is_watching+0x12/0xc0
[ 847.829903][T21653] ? finish_task_switch.isra.0+0x2cb/0x1010
[ 847.829922][T21653] ? lockdep_hardirqs_on+0x78/0x100
[ 847.829974][T21653] mmap_region+0x35d/0x620
[ 847.829989][T21653] ? rcu_is_watching+0x12/0xc0
[ 847.830006][T21653] ? __pfx_mmap_region+0x10/0x10
[ 847.830025][T21653] ? cap_mmap_addr+0x4b/0x120
[ 847.830040][T21653] ? bpf_lsm_mmap_addr+0x9/0x30
[ 847.830055][T21653] ? security_mmap_addr+0x71/0x1e0
[ 847.830074][T21653] ? __get_unmapped_area+0x255/0x3e0
[ 847.830095][T21653] do_mmap+0xc63/0x12f0
[ 847.830116][T21653] ? __pfx_do_mmap+0x10/0x10
[ 847.830135][T21653] ? __pfx_down_write_killable+0x10/0x10
[ 847.830161][T21653] vm_mmap_pgoff+0x29e/0x470
[ 847.830183][T21653] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 847.830203][T21653] ? do_futex+0x192/0x350
[ 847.830219][T21653] ? __pfx_do_futex+0x10/0x10
[ 847.830238][T21653] ksys_mmap_pgoff+0xe4/0x610
[ 847.830256][T21653] ? __x64_sys_futex+0x358/0x4d0
[ 847.830272][T21653] ? __pfx_ksys_mmap_pgoff+0x10/0x10
[ 847.830289][T21653] ? xfd_validate_state+0x129/0x190
[ 847.830304][T21653] ? ksys_write+0x1ac/0x250
[ 847.830324][T21653] __x64_sys_mmap+0x125/0x190
[ 847.830343][T21653] do_syscall_64+0x115/0x840
[ 847.830362][T21653] ? clear_bhb_loop+0x40/0x90
[ 847.830381][T21653] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 847.830436][T21653] RIP: 0033:0x7ff16259ce59
[ 847.830451][T21653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 847.830467][T21653] RSP: 002b:00007ff163410028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 847.830483][T21653] RAX: ffffffffffffffda RBX: 00007ff162815fa0 RCX: 00007ff16259ce59
[ 847.830493][T21653] RDX: 00004000000000db RSI: 0000000000020009 RDI: 0000000000000000
[ 847.830503][T21653] RBP: 00007ff162632d6f R08: 0000000000000401 R09: 0000000000008000
[ 847.830513][T21653] R10: 0040000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[ 847.830523][T21653] R13: 00007ff162816038 R14: 00007ff162815fa0 R15: 00007ffd5b2fab38
[ 847.830543][T21653]
[ 848.509270][T21669] FAULT_INJECTION: forcing a failure.
[ 848.509270][T21669] name failslab, interval 1, probability 0, space 0, times 0
[ 848.522109][T21669] CPU: 0 UID: 0 PID: 21669 Comm: syz.9.3142 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 848.522137][T21669] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 848.522143][T21669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 848.522153][T21669] Call Trace:
[ 848.522159][T21669]
[ 848.522166][T21669] dump_stack_lvl+0x100/0x190
[ 848.522187][T21669] should_fail_ex.cold+0x5/0xa
[ 848.522208][T21669] should_failslab+0xc2/0x120
[ 848.522227][T21669] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 848.522251][T21669] ? do_getname+0x35/0x390
[ 848.522276][T21669] do_getname+0x35/0x390
[ 848.522307][T21669] do_sys_openat2+0xc5/0x1e0
[ 848.522331][T21669] ? __pfx_do_sys_openat2+0x10/0x10
[ 848.522354][T21669] ? __fget_files+0x21f/0x3d0
[ 848.522377][T21669] __x64_sys_openat+0x12d/0x210
[ 848.522402][T21669] ? __pfx___x64_sys_openat+0x10/0x10
[ 848.522428][T21669] ? rcu_is_watching+0x12/0xc0
[ 848.522447][T21669] do_syscall_64+0x115/0x840
[ 848.522468][T21669] ? clear_bhb_loop+0x40/0x90
[ 848.522486][T21669] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 848.522502][T21669] RIP: 0033:0x7f79fa99ce59
[ 848.522515][T21669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 848.522530][T21669] RSP: 002b:00007f79fb81b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 848.522545][T21669] RAX: ffffffffffffffda RBX: 00007f79fac15fa0 RCX: 00007f79fa99ce59
[ 848.522555][T21669] RDX: 000000000004a001 RSI: 0000200000000140 RDI: ffffffffffffff9c
[ 848.522565][T21669] RBP: 00007f79faa32d6f R08: 0000000000000000 R09: 0000000000000000
[ 848.522574][T21669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 848.522583][T21669] R13: 00007f79fac16038 R14: 00007f79fac15fa0 R15: 00007ffcfeaa5168
[ 848.522603][T21669]
[ 849.483970][T21408] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 849.968129][T21408] veth0_vlan: entered promiscuous mode
[ 850.027063][T21408] veth1_vlan: entered promiscuous mode
[ 850.175969][T21408] veth0_macvtap: entered promiscuous mode
[ 850.224686][T21408] veth1_macvtap: entered promiscuous mode
[ 850.417872][T21711] blktrace: Concurrent blktraces are not allowed on loop2
[ 850.500998][T21408] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 850.603243][T21408] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 850.683470][ T7177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 850.744256][ T7177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 850.848502][ T7177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 850.910470][ T7177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 851.659205][ T7949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 851.719255][ T7949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 851.764787][T21743] FAULT_INJECTION: forcing a failure.
[ 851.764787][T21743] name failslab, interval 1, probability 0, space 0, times 0
[ 851.847425][T21743] CPU: 0 UID: 0 PID: 21743 Comm: syz.6.3152 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 851.847453][T21743] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 851.847459][T21743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 851.847469][T21743] Call Trace:
[ 851.847475][T21743]
[ 851.847481][T21743] dump_stack_lvl+0x100/0x190
[ 851.847503][T21743] should_fail_ex.cold+0x5/0xa
[ 851.847524][T21743] should_failslab+0xc2/0x120
[ 851.847544][T21743] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 851.847567][T21743] ? alloc_empty_file+0x5b/0x1c0
[ 851.847589][T21743] ? __pfx_stack_trace_save+0x10/0x10
[ 851.847611][T21743] alloc_empty_file+0x5b/0x1c0
[ 851.847633][T21743] path_openat+0xe8/0x31a0
[ 851.847650][T21743] ? kasan_save_stack+0x3f/0x50
[ 851.847664][T21743] ? kasan_save_stack+0x30/0x50
[ 851.847678][T21743] ? kasan_save_track+0x14/0x30
[ 851.847692][T21743] ? __kasan_slab_alloc+0x89/0x90
[ 851.847709][T21743] ? kmem_cache_alloc_noprof+0x241/0x6e0
[ 851.847731][T21743] ? do_getname+0x35/0x390
[ 851.847751][T21743] ? do_sys_openat2+0xc5/0x1e0
[ 851.847772][T21743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 851.847790][T21743] ? __pfx_path_openat+0x10/0x10
[ 851.847815][T21743] do_file_open+0x20e/0x430
[ 851.847835][T21743] ? __pfx_do_file_open+0x10/0x10
[ 851.847866][T21743] ? alloc_fd+0x476/0x790
[ 851.847886][T21743] ? do_getname+0x191/0x390
[ 851.847909][T21743] do_sys_openat2+0x10d/0x1e0
[ 851.847930][T21743] ? __pfx_do_sys_openat2+0x10/0x10
[ 851.847953][T21743] ? __fget_files+0x21f/0x3d0
[ 851.847975][T21743] __x64_sys_openat+0x12d/0x210
[ 851.847997][T21743] ? __pfx___x64_sys_openat+0x10/0x10
[ 851.848023][T21743] ? rcu_is_watching+0x12/0xc0
[ 851.848043][T21743] do_syscall_64+0x115/0x840
[ 851.848071][T21743] ? clear_bhb_loop+0x40/0x90
[ 851.848090][T21743] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 851.848106][T21743] RIP: 0033:0x7ff16259ce59
[ 851.848120][T21743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 851.848135][T21743] RSP: 002b:00007ff163410028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 851.848150][T21743] RAX: ffffffffffffffda RBX: 00007ff162815fa0 RCX: 00007ff16259ce59
[ 851.848160][T21743] RDX: 0000000000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 851.848170][T21743] RBP: 00007ff162632d6f R08: 0000000000000000 R09: 0000000000000000
[ 851.848180][T21743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 851.848189][T21743] R13: 00007ff162816038 R14: 00007ff162815fa0 R15: 00007ffd5b2fab38
[ 851.848209][T21743]
[ 852.182585][ T7949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 852.191219][ T7949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 852.707134][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3153'.
[ 854.270474][T21809] FAULT_INJECTION: forcing a failure.
[ 854.270474][T21809] name fail_futex, interval 1, probability 0, space 0, times 0
[ 854.361223][T21809] CPU: 0 UID: 0 PID: 21809 Comm: syz.9.3162 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 854.361257][T21809] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 854.361263][T21809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 854.361273][T21809] Call Trace:
[ 854.361279][T21809]
[ 854.361285][T21809] dump_stack_lvl+0x100/0x190
[ 854.361308][T21809] should_fail_ex.cold+0x5/0xa
[ 854.361331][T21809] get_futex_key+0x1d2/0x1510
[ 854.361358][T21809] ? __pfx_get_futex_key+0x10/0x10
[ 854.361380][T21809] ? futex_hash+0x2ad/0x370
[ 854.361404][T21809] ? futex_hash+0x141/0x370
[ 854.361429][T21809] futex_wake+0xea/0x530
[ 854.361447][T21809] ? __pfx_futex_wait+0x10/0x10
[ 854.361465][T21809] ? __pfx_futex_wake+0x10/0x10
[ 854.361491][T21809] do_futex+0x32b/0x350
[ 854.361506][T21809] ? __pfx_do_futex+0x10/0x10
[ 854.361521][T21809] ? find_held_lock+0x2b/0x80
[ 854.361539][T21809] ? rcu_read_unlock+0x17/0x60
[ 854.361558][T21809] ? rcu_read_unlock+0x17/0x60
[ 854.361586][T21809] __x64_sys_futex+0x34f/0x4d0
[ 854.361605][T21809] ? __pfx___x64_sys_futex+0x10/0x10
[ 854.361620][T21809] ? trace_kmalloc+0xe3/0x110
[ 854.361638][T21809] ? __bitmap_clear+0x11d/0x160
[ 854.361664][T21809] ? rcu_is_watching+0x12/0xc0
[ 854.361684][T21809] do_syscall_64+0x115/0x840
[ 854.361706][T21809] ? clear_bhb_loop+0x40/0x90
[ 854.361724][T21809] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 854.361740][T21809] RIP: 0033:0x7f79fa99ce59
[ 854.361753][T21809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 854.361768][T21809] RSP: 002b:00007f79fb81b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 854.361784][T21809] RAX: ffffffffffffffda RBX: 00007f79fac15fa8 RCX: 00007f79fa99ce59
[ 854.361794][T21809] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f79fac15fac
[ 854.361804][T21809] RBP: 00007f79fac15fa0 R08: 0000000000000001 R09: 0000000000000000
[ 854.361813][T21809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 854.361822][T21809] R13: 00007f79fac16038 R14: 00007ffcfeaa5080 R15: 00007ffcfeaa5168
[ 854.361841][T21809]
[ 854.677312][T21815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3164'.
[ 854.718058][T21810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 854.772546][T21815] team0: Port device team_slave_1 removed
[ 855.304398][T21838] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 856.541971][T21890] FAULT_INJECTION: forcing a failure.
[ 856.541971][T21890] name failslab, interval 1, probability 0, space 0, times 0
[ 856.697470][T21890] CPU: 0 UID: 0 PID: 21890 Comm: syz.9.3179 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 856.697497][T21890] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 856.697503][T21890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 856.697512][T21890] Call Trace:
[ 856.697517][T21890]
[ 856.697523][T21890] dump_stack_lvl+0x100/0x190
[ 856.697544][T21890] should_fail_ex.cold+0x5/0xa
[ 856.697564][T21890] should_failslab+0xc2/0x120
[ 856.697582][T21890] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 856.697606][T21890] ? security_file_alloc+0x34/0x2c0
[ 856.697625][T21890] ? trace_kmem_cache_alloc+0xd5/0x100
[ 856.697646][T21890] security_file_alloc+0x34/0x2c0
[ 856.697666][T21890] init_file+0x95/0x480
[ 856.697687][T21890] alloc_empty_file_noaccount+0x45/0xd0
[ 856.697717][T21890] alloc_file_pseudo_noaccount+0x13a/0x230
[ 856.697742][T21890] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10
[ 856.697768][T21890] ? iput+0x3a/0x40
[ 856.697791][T21890] bdev_file_open_by_dev+0x13a/0x210
[ 856.697907][T21890] blkdev_bszset+0x170/0x240
[ 856.697952][T21890] ? __pfx_blkdev_bszset+0x10/0x10
[ 856.697975][T21890] ? find_held_lock+0x2b/0x80
[ 856.697994][T21890] ? __fget_files+0x215/0x3d0
[ 856.698010][T21890] ? hook_file_ioctl_common+0x149/0x410
[ 856.698032][T21890] blkdev_ioctl+0x513/0x6f0
[ 856.698054][T21890] ? __pfx_blkdev_ioctl+0x10/0x10
[ 856.698079][T21890] ? __pfx_blkdev_ioctl+0x10/0x10
[ 856.698102][T21890] __x64_sys_ioctl+0x18e/0x210
[ 856.698119][T21890] do_syscall_64+0x115/0x840
[ 856.698141][T21890] ? clear_bhb_loop+0x40/0x90
[ 856.698159][T21890] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 856.698175][T21890] RIP: 0033:0x7f79fa99ce59
[ 856.698188][T21890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 856.698203][T21890] RSP: 002b:00007f79fb81b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 856.698219][T21890] RAX: ffffffffffffffda RBX: 00007f79fac15fa0 RCX: 00007f79fa99ce59
[ 856.698229][T21890] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000003
[ 856.698238][T21890] RBP: 00007f79faa32d6f R08: 0000000000000000 R09: 0000000000000000
[ 856.698247][T21890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 856.698256][T21890] R13: 00007f79fac16038 R14: 00007f79fac15fa0 R15: 00007ffcfeaa5168
[ 856.698274][T21890]
[ 857.155952][T21903] kAFS: No cell specified
[ 857.907180][T21914] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 858.015360][T21916] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 858.049168][ T6076] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 858.066078][ T6076] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 858.074474][ T6076] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 858.085595][ T6076] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 858.099557][ T6076] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 859.291102][T21917] bridge0: port 1(bridge_slave_0) entered blocking state
[ 859.311238][T21917] bridge0: port 1(bridge_slave_0) entered disabled state
[ 859.328616][T21917] bridge_slave_0: entered allmulticast mode
[ 859.339012][T21917] bridge_slave_0: entered promiscuous mode
[ 859.363557][T21917] bridge0: port 2(bridge_slave_1) entered blocking state
[ 859.380220][T21917] bridge0: port 2(bridge_slave_1) entered disabled state
[ 859.397676][T21917] bridge_slave_1: entered allmulticast mode
[ 859.417379][T21917] bridge_slave_1: entered promiscuous mode
[ 859.491657][T21917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 859.522645][T21917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 859.588050][T21917] team0: Port device team_slave_0 added
[ 859.607126][T21917] team0: Port device team_slave_1 added
[ 859.657199][T21917] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 859.675738][T21917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 859.734108][T21917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 859.758741][T21917] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 859.777294][T21917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 859.837640][T21917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 859.932999][T21917] hsr_slave_0: entered promiscuous mode
[ 859.942990][T21917] hsr_slave_1: entered promiscuous mode
[ 859.958090][T21917] debugfs: 'hsr0' already exists in 'hsr'
[ 859.978158][T21917] Cannot create hsr debugfs directory
[ 860.137346][ T6076] Bluetooth: hci9: command tx timeout
[ 861.673388][T21917] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 861.715594][T21917] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 861.741386][T21917] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 861.775047][T21917] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 861.809364][T21917] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 861.856450][T21917] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 861.882721][T21917] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 861.921640][T21917] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 861.982467][T21958] bond0: option slaves: interface -Âô]àæ©=,Dço does not exist!
[ 862.206851][ T6076] Bluetooth: hci9: command tx timeout
[ 862.401202][T21917] 8021q: adding VLAN 0 to HW filter on device bond0
[ 862.709153][T21917] 8021q: adding VLAN 0 to HW filter on device team0
[ 862.772069][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state
[ 862.779470][ T7949] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 862.884394][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state
[ 862.891517][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 864.275070][ T6076] Bluetooth: hci9: command tx timeout
[ 864.476361][T21917] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 864.631919][T21917] veth0_vlan: entered promiscuous mode
[ 864.695717][T21917] veth1_vlan: entered promiscuous mode
[ 864.796823][T21917] veth0_macvtap: entered promiscuous mode
[ 864.817884][T22040] ubi0: attaching mtd0
[ 864.835585][T22040] ubi0: scanning is finished
[ 864.862721][T22040] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 864.871272][T21917] veth1_macvtap: entered promiscuous mode
[ 864.997596][T21917] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 865.044915][T21917] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 865.103907][T22040] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 865.162025][T14719] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 865.162100][T14719] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 865.162137][T14719] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 865.162163][T14719] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 865.480319][ T7952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 865.480338][ T7952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 865.783381][ T7177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 865.844260][ T7177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 866.277945][ T6076] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[ 866.344317][ T6068] Bluetooth: hci9: command tx timeout
[ 866.448182][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 866.456573][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 866.729835][T22075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 870.541154][T22116] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3194'.
[ 870.614496][T22116] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3194'.
[ 871.767824][T22140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3199'.
[ 871.834785][T22149] FAULT_INJECTION: forcing a failure.
[ 871.834785][T22149] name failslab, interval 1, probability 0, space 0, times 0
[ 871.872674][T22149] CPU: 0 UID: 0 PID: 22149 Comm: syz.2.3200 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 871.872706][T22149] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 871.872712][T22149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 871.872722][T22149] Call Trace:
[ 871.872728][T22149]
[ 871.872735][T22149] dump_stack_lvl+0x100/0x190
[ 871.872756][T22149] should_fail_ex.cold+0x5/0xa
[ 871.872777][T22149] should_failslab+0xc2/0x120
[ 871.872798][T22149] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 871.872821][T22149] ? anon_vma_clone+0x2ba/0xcd0
[ 871.872845][T22149] anon_vma_clone+0x2ba/0xcd0
[ 871.872871][T22149] __split_vma+0x51f/0xda0
[ 871.872895][T22149] ? __pfx___split_vma+0x10/0x10
[ 871.872927][T22149] vma_modify+0x12ad/0x25c0
[ 871.872956][T22149] ? __pfx_vma_modify+0x10/0x10
[ 871.872989][T22149] vma_modify_policy+0x238/0x300
[ 871.873013][T22149] ? __pfx_vma_modify_policy+0x10/0x10
[ 871.873035][T22149] ? find_held_lock+0x2b/0x80
[ 871.873068][T22149] mbind_range+0x175/0x550
[ 871.873091][T22149] do_mbind+0x7dc/0xfd0
[ 871.873117][T22149] ? __pfx_do_mbind+0x10/0x10
[ 871.873136][T22149] ? ksys_write+0x190/0x250
[ 871.873162][T22149] ? __pfx_get_nodes+0x10/0x10
[ 871.873183][T22149] kernel_mbind+0x1b7/0x200
[ 871.873205][T22149] ? __pfx_kernel_mbind+0x10/0x10
[ 871.873227][T22149] ? rcu_is_watching+0x12/0xc0
[ 871.873247][T22149] do_syscall_64+0x115/0x840
[ 871.873268][T22149] ? clear_bhb_loop+0x40/0x90
[ 871.873287][T22149] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 871.873303][T22149] RIP: 0033:0x7f7f1a39ce59
[ 871.873317][T22149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 871.873332][T22149] RSP: 002b:00007f7f1b229028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 871.873347][T22149] RAX: ffffffffffffffda RBX: 00007f7f1a616270 RCX: 00007f7f1a39ce59
[ 871.873358][T22149] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000
[ 871.873367][T22149] RBP: 00007f7f1a432d6f R08: 0000000000000006 R09: 0000000000000002
[ 871.873376][T22149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 871.873385][T22149] R13: 00007f7f1a616308 R14: 00007f7f1a616270 R15: 00007fffc15e3748
[ 871.873404][T22149]
[ 873.010558][T20895] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 873.026364][T20895] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 873.034629][T20895] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 873.042688][T20895] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 873.052459][T20895] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 873.618600][T22178] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 874.255884][ T6068] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 874.277933][ T6068] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 874.287519][ T6068] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 874.297077][ T6068] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 874.327320][ T6068] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 875.102426][ T6068] Bluetooth: hci10: command tx timeout
[ 875.941950][T22165] bridge0: port 1(bridge_slave_0) entered blocking state
[ 875.961489][T22165] bridge0: port 1(bridge_slave_0) entered disabled state
[ 875.994577][T22165] bridge_slave_0: entered allmulticast mode
[ 876.001804][T22165] bridge_slave_0: entered promiscuous mode
[ 876.041867][T22165] bridge0: port 2(bridge_slave_1) entered blocking state
[ 876.060609][T22165] bridge0: port 2(bridge_slave_1) entered disabled state
[ 876.085861][T22165] bridge_slave_1: entered allmulticast mode
[ 876.097726][T22165] bridge_slave_1: entered promiscuous mode
[ 876.192390][T22165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 876.231872][T22165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 876.337194][T22165] team0: Port device team_slave_0 added
[ 876.364896][T22165] team0: Port device team_slave_1 added
[ 876.372851][ T6068] Bluetooth: hci11: command tx timeout
[ 876.490786][T22165] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 876.510494][T22165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 876.580734][T22165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 876.609003][T22165] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 876.651461][T22165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 876.721000][T22165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 876.848830][T22193] bridge0: port 1(bridge_slave_0) entered blocking state
[ 876.869245][T22193] bridge0: port 1(bridge_slave_0) entered disabled state
[ 876.887817][T22193] bridge_slave_0: entered allmulticast mode
[ 876.908343][T22193] bridge_slave_0: entered promiscuous mode
[ 876.948147][T22193] bridge0: port 2(bridge_slave_1) entered blocking state
[ 876.966050][T22193] bridge0: port 2(bridge_slave_1) entered disabled state
[ 876.981847][T22193] bridge_slave_1: entered allmulticast mode
[ 876.999981][T22193] bridge_slave_1: entered promiscuous mode
[ 877.035463][T22165] hsr_slave_0: entered promiscuous mode
[ 877.049682][T22165] hsr_slave_1: entered promiscuous mode
[ 877.062156][T22165] debugfs: 'hsr0' already exists in 'hsr'
[ 877.076528][T22165] Cannot create hsr debugfs directory
[ 877.168037][ T6068] Bluetooth: hci10: command tx timeout
[ 877.184312][T22193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 877.211956][T22193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 877.363821][T22193] team0: Port device team_slave_0 added
[ 877.403231][T22193] team0: Port device team_slave_1 added
[ 877.521595][T22193] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 877.529880][T22193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 877.560426][T22193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 877.591222][T22193] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 877.603946][T22193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 877.630730][T22193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 877.732176][T22165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 877.783218][T22193] hsr_slave_0: entered promiscuous mode
[ 877.802899][T22193] hsr_slave_1: entered promiscuous mode
[ 877.811117][T22193] debugfs: 'hsr0' already exists in 'hsr'
[ 877.817095][T22193] Cannot create hsr debugfs directory
[ 877.849095][T22165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 878.017386][T22165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 878.152979][T22193] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 878.216120][T22193] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 878.284645][T22193] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 878.353564][T22193] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 878.442737][ T6068] Bluetooth: hci11: command tx timeout
[ 878.513636][T22165] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 878.538674][T22165] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 878.546880][T22165] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 878.567821][T22165] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 878.598455][T22165] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 878.610968][T22165] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 878.652509][T22165] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 878.667812][T22165] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 878.727220][T22193] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 878.737396][T22193] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 878.753745][T22193] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 878.771249][T22193] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 878.788559][T22193] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 878.801082][T22193] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 878.824821][T22193] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 878.835234][T22193] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 878.897760][T22165] 8021q: adding VLAN 0 to HW filter on device bond0
[ 878.934168][T22165] 8021q: adding VLAN 0 to HW filter on device team0
[ 878.950529][T14719] bridge0: port 1(bridge_slave_0) entered blocking state
[ 878.957656][T14719] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 878.985774][T14719] bridge0: port 2(bridge_slave_1) entered blocking state
[ 878.992913][T14719] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 879.090016][T22193] 8021q: adding VLAN 0 to HW filter on device bond0
[ 879.132562][T22193] 8021q: adding VLAN 0 to HW filter on device team0
[ 879.156119][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state
[ 879.163254][ T6074] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 879.209149][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state
[ 879.216267][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 879.237601][ T6068] Bluetooth: hci10: command tx timeout
[ 879.746646][T22165] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 879.886392][T22165] veth0_vlan: entered promiscuous mode
[ 879.909613][T22165] veth1_vlan: entered promiscuous mode
[ 879.930907][T22193] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 879.997749][T22165] veth0_macvtap: entered promiscuous mode
[ 880.022057][T22165] veth1_macvtap: entered promiscuous mode
[ 880.070915][T22165] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 880.098234][T22165] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 880.130127][ T7167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 880.149417][ T7167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 880.178668][ T7167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 880.201164][ T7167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 880.412930][ T6074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 880.454320][ T6074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 880.504461][ T7167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 880.514097][ T6068] Bluetooth: hci11: command tx timeout
[ 880.535466][ T7167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 880.557736][T22193] veth0_vlan: entered promiscuous mode
[ 880.580898][T22193] veth1_vlan: entered promiscuous mode
[ 880.673072][T22193] veth0_macvtap: entered promiscuous mode
[ 880.716577][T22193] veth1_macvtap: entered promiscuous mode
[ 880.807421][T22193] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 880.860089][T22193] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 880.891355][T22306] zswap: compressor not available
[ 880.907501][ T7952] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 880.939079][ T7952] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 880.962567][ T7952] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 881.004293][ T7952] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 881.222444][ T7952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 881.271237][ T7952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 881.306455][ T6068] Bluetooth: hci10: command tx timeout
[ 881.354723][T14719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 881.399384][T14719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 881.634763][T22325] FAULT_INJECTION: forcing a failure.
[ 881.634763][T22325] name failslab, interval 1, probability 0, space 0, times 0
[ 881.699144][T22325] CPU: 0 UID: 0 PID: 22325 Comm: syz.5.3206 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 881.699172][T22325] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 881.699178][T22325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 881.699187][T22325] Call Trace:
[ 881.699193][T22325]
[ 881.699199][T22325] dump_stack_lvl+0x100/0x190
[ 881.699222][T22325] should_fail_ex.cold+0x5/0xa
[ 881.699245][T22325] should_failslab+0xc2/0x120
[ 881.699264][T22325] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 881.699287][T22325] ? alloc_empty_file+0x5b/0x1c0
[ 881.699310][T22325] ? __pfx_stack_trace_save+0x10/0x10
[ 881.699332][T22325] alloc_empty_file+0x5b/0x1c0
[ 881.699354][T22325] path_openat+0xe8/0x31a0
[ 881.699372][T22325] ? kasan_save_stack+0x3f/0x50
[ 881.699386][T22325] ? kasan_save_stack+0x30/0x50
[ 881.699400][T22325] ? kasan_save_track+0x14/0x30
[ 881.699413][T22325] ? __kasan_slab_alloc+0x89/0x90
[ 881.699428][T22325] ? kmem_cache_alloc_noprof+0x241/0x6e0
[ 881.699450][T22325] ? do_getname+0x35/0x390
[ 881.699470][T22325] ? do_sys_openat2+0xc5/0x1e0
[ 881.699492][T22325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 881.699510][T22325] ? __pfx_path_openat+0x10/0x10
[ 881.699535][T22325] do_file_open+0x20e/0x430
[ 881.699555][T22325] ? __pfx_do_file_open+0x10/0x10
[ 881.699586][T22325] ? alloc_fd+0x476/0x790
[ 881.699605][T22325] ? do_getname+0x191/0x390
[ 881.699628][T22325] do_sys_openat2+0x10d/0x1e0
[ 881.699650][T22325] ? __pfx_do_sys_openat2+0x10/0x10
[ 881.699673][T22325] ? __fget_files+0x21f/0x3d0
[ 881.699694][T22325] __x64_sys_openat+0x12d/0x210
[ 881.699717][T22325] ? __pfx___x64_sys_openat+0x10/0x10
[ 881.699742][T22325] ? rcu_is_watching+0x12/0xc0
[ 881.699762][T22325] do_syscall_64+0x115/0x840
[ 881.699782][T22325] ? clear_bhb_loop+0x40/0x90
[ 881.699800][T22325] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 881.699815][T22325] RIP: 0033:0x7f213fb9ce59
[ 881.699829][T22325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 881.699843][T22325] RSP: 002b:00007f21409f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 881.699859][T22325] RAX: ffffffffffffffda RBX: 00007f213fe15fa0 RCX: 00007f213fb9ce59
[ 881.699869][T22325] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 881.699879][T22325] RBP: 00007f213fc32d6f R08: 0000000000000000 R09: 0000000000000000
[ 881.699888][T22325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 881.699897][T22325] R13: 00007f213fe16038 R14: 00007f213fe15fa0 R15: 00007ffe7a3bd908
[ 881.699917][T22325]
[ 882.518105][T22337] FAULT_INJECTION: forcing a failure.
[ 882.518105][T22337] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 882.549883][T22337] CPU: 0 UID: 0 PID: 22337 Comm: syz.0.3213 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 882.549912][T22337] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 882.549919][T22337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 882.549928][T22337] Call Trace:
[ 882.549934][T22337]
[ 882.549940][T22337] dump_stack_lvl+0x100/0x190
[ 882.549969][T22337] should_fail_ex.cold+0x5/0xa
[ 882.549987][T22337] ? prepare_alloc_pages+0x16d/0x5f0
[ 882.550009][T22337] should_fail_alloc_page+0xeb/0x140
[ 882.550029][T22337] prepare_alloc_pages+0x1f0/0x5f0
[ 882.550052][T22337] __alloc_frozen_pages_noprof+0x19a/0x2bc0
[ 882.550077][T22337] ? rcu_is_watching+0x12/0xc0
[ 882.550094][T22337] ? trace_mm_page_alloc+0x163/0x1d0
[ 882.550113][T22337] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0
[ 882.550137][T22337] ? vhost_dev_set_owner+0x190/0xa30
[ 882.550155][T22337] ? stack_trace_save+0x8e/0xc0
[ 882.550175][T22337] ? __pfx_stack_trace_save+0x10/0x10
[ 882.550194][T22337] ? stack_depot_save_flags+0x27/0x9d0
[ 882.550218][T22337] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 882.550244][T22337] ? vhost_dev_set_owner+0x190/0xa30
[ 882.550258][T22337] ? kasan_save_stack+0x3f/0x50
[ 882.550273][T22337] ? kasan_save_stack+0x30/0x50
[ 882.550287][T22337] ? kasan_save_track+0x14/0x30
[ 882.550302][T22337] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 882.550326][T22337] ? vhost_net_ioctl+0xfa3/0x1910
[ 882.550342][T22337] ? __x64_sys_ioctl+0x18e/0x210
[ 882.550359][T22337] ? __lock_acquire+0x4a5/0x2630
[ 882.550385][T22337] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 882.550407][T22337] ? policy_nodemask+0xed/0x4f0
[ 882.550426][T22337] alloc_pages_mpol+0x1fb/0x540
[ 882.550445][T22337] ? __pfx_alloc_pages_mpol+0x10/0x10
[ 882.550467][T22337] ? vhost_dev_set_owner+0x3b2/0xa30
[ 882.550482][T22337] ___kmalloc_large_node+0xe5/0x120
[ 882.550502][T22337] __kmalloc_large_node_noprof+0x1c/0x70
[ 882.550523][T22337] __kmalloc_noprof+0x5be/0x850
[ 882.550542][T22337] vhost_dev_set_owner+0x3b2/0xa30
[ 882.550563][T22337] vhost_net_ioctl+0xfa3/0x1910
[ 882.550578][T22337] ? do_vfs_ioctl+0x226/0x13e0
[ 882.550594][T22337] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 882.550608][T22337] ? __pfx_vhost_net_ioctl+0x10/0x10
[ 882.550628][T22337] ? find_held_lock+0x2b/0x80
[ 882.550646][T22337] ? __fget_files+0x215/0x3d0
[ 882.550662][T22337] ? hook_file_ioctl_common+0x149/0x410
[ 882.550685][T22337] ? __fget_files+0x21f/0x3d0
[ 882.550705][T22337] ? __pfx_vhost_net_ioctl+0x10/0x10
[ 882.550722][T22337] __x64_sys_ioctl+0x18e/0x210
[ 882.550739][T22337] do_syscall_64+0x115/0x840
[ 882.550759][T22337] ? clear_bhb_loop+0x40/0x90
[ 882.550778][T22337] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 882.550798][T22337] RIP: 0033:0x7f6bf459ce59
[ 882.550812][T22337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 882.550827][T22337] RSP: 002b:00007f6bf54f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 882.550843][T22337] RAX: ffffffffffffffda RBX: 00007f6bf4815fa0 RCX: 00007f6bf459ce59
[ 882.550853][T22337] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005
[ 882.550862][T22337] RBP: 00007f6bf4632d6f R08: 0000000000000000 R09: 0000000000000000
[ 882.550872][T22337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 882.550882][T22337] R13: 00007f6bf4816038 R14: 00007f6bf4815fa0 R15: 00007fffe464cc58
[ 882.550903][T22337]
[ 883.299726][ T6068] Bluetooth: hci11: command tx timeout
[ 884.247469][T22355] random: crng reseeded on system resumption
[ 885.211135][T22367] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 888.047092][T22405] FAULT_INJECTION: forcing a failure.
[ 888.047092][T22405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 888.160543][T22405] CPU: 0 UID: 0 PID: 22405 Comm: syz.0.3229 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 888.160571][T22405] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 888.160577][T22405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 888.160586][T22405] Call Trace:
[ 888.160592][T22405]
[ 888.160598][T22405] dump_stack_lvl+0x100/0x190
[ 888.160619][T22405] should_fail_ex.cold+0x5/0xa
[ 888.160639][T22405] _copy_to_iter+0x5a4/0x1720
[ 888.160663][T22405] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 888.160688][T22405] ? __pfx__copy_to_iter+0x10/0x10
[ 888.160708][T22405] ? snd_minor_info_oss_read+0x227/0x2d0
[ 888.160822][T22405] seq_read_iter+0xdab/0x1270
[ 888.160849][T22405] seq_read+0x33b/0x4c0
[ 888.160865][T22405] ? __pfx_seq_read+0x10/0x10
[ 888.160885][T22405] ? lock_acquire+0x1b1/0x370
[ 888.160916][T22405] ? __pfx_seq_read+0x10/0x10
[ 888.160932][T22405] proc_reg_read+0x240/0x330
[ 888.160950][T22405] ? __pfx_proc_reg_read+0x10/0x10
[ 888.160971][T22405] vfs_read+0x1e4/0xb30
[ 888.160990][T22405] ? __pfx_vfs_read+0x10/0x10
[ 888.161007][T22405] ? __fget_files+0x215/0x3d0
[ 888.161028][T22405] ? __fget_files+0x21f/0x3d0
[ 888.161051][T22405] ksys_read+0x12a/0x250
[ 888.161068][T22405] ? __pfx_ksys_read+0x10/0x10
[ 888.161086][T22405] ? rcu_is_watching+0x12/0xc0
[ 888.161106][T22405] do_syscall_64+0x115/0x840
[ 888.161126][T22405] ? clear_bhb_loop+0x40/0x90
[ 888.161145][T22405] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 888.161161][T22405] RIP: 0033:0x7f6bf459ce59
[ 888.161174][T22405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 888.161189][T22405] RSP: 002b:00007f6bf54f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 888.161203][T22405] RAX: ffffffffffffffda RBX: 00007f6bf4815fa0 RCX: 00007f6bf459ce59
[ 888.161214][T22405] RDX: 0000000000000041 RSI: 0000200000000000 RDI: 0000000000000003
[ 888.161223][T22405] RBP: 00007f6bf54f6090 R08: 0000000000000000 R09: 0000000000000000
[ 888.161232][T22405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 888.161241][T22405] R13: 00007f6bf4816038 R14: 00007f6bf4815fa0 R15: 00007fffe464cc58
[ 888.161260][T22405]
[ 890.924126][T20895] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 890.943158][T20895] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 890.952032][T20895] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 890.960082][T20895] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 890.972680][T20895] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 891.075737][T22441] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 891.628749][T22453] FAULT_INJECTION: forcing a failure.
[ 891.628749][T22453] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 891.800476][T22453] CPU: 0 UID: 0 PID: 22453 Comm: syz.5.3236 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 891.800505][T22453] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 891.800511][T22453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 891.800521][T22453] Call Trace:
[ 891.800526][T22453]
[ 891.800533][T22453] dump_stack_lvl+0x100/0x190
[ 891.800555][T22453] should_fail_ex.cold+0x5/0xa
[ 891.800573][T22453] ? prepare_alloc_pages+0x16d/0x5f0
[ 891.800595][T22453] should_fail_alloc_page+0xeb/0x140
[ 891.800616][T22453] prepare_alloc_pages+0x1f0/0x5f0
[ 891.800638][T22453] __alloc_frozen_pages_noprof+0x19a/0x2bc0
[ 891.800662][T22453] ? rcu_is_watching+0x12/0xc0
[ 891.800680][T22453] ? trace_mm_page_alloc+0x163/0x1d0
[ 891.800699][T22453] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0
[ 891.800725][T22453] ? vhost_dev_set_owner+0x190/0xa30
[ 891.800742][T22453] ? stack_trace_save+0x8e/0xc0
[ 891.800762][T22453] ? __pfx_stack_trace_save+0x10/0x10
[ 891.800782][T22453] ? stack_depot_save_flags+0x27/0x9d0
[ 891.800806][T22453] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 891.800829][T22453] ? look_up_lock_class+0x55/0x120
[ 891.800852][T22453] ? vhost_dev_set_owner+0x190/0xa30
[ 891.800867][T22453] ? kasan_save_stack+0x3f/0x50
[ 891.800881][T22453] ? kasan_save_stack+0x30/0x50
[ 891.800895][T22453] ? kasan_save_track+0x14/0x30
[ 891.800910][T22453] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 891.800934][T22453] ? vhost_net_ioctl+0xfa3/0x1910
[ 891.800949][T22453] ? __x64_sys_ioctl+0x18e/0x210
[ 891.800966][T22453] ? __lock_acquire+0x4a5/0x2630
[ 891.800992][T22453] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 891.801014][T22453] ? policy_nodemask+0xed/0x4f0
[ 891.801033][T22453] alloc_pages_mpol+0x1fb/0x540
[ 891.801052][T22453] ? __pfx_alloc_pages_mpol+0x10/0x10
[ 891.801074][T22453] ? vhost_dev_set_owner+0x3b2/0xa30
[ 891.801088][T22453] ___kmalloc_large_node+0xe5/0x120
[ 891.801109][T22453] __kmalloc_large_node_noprof+0x1c/0x70
[ 891.801130][T22453] __kmalloc_noprof+0x5be/0x850
[ 891.801148][T22453] vhost_dev_set_owner+0x3b2/0xa30
[ 891.801170][T22453] vhost_net_ioctl+0xfa3/0x1910
[ 891.801185][T22453] ? do_vfs_ioctl+0x226/0x13e0
[ 891.801209][T22453] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 891.801224][T22453] ? __pfx_vhost_net_ioctl+0x10/0x10
[ 891.801246][T22453] ? find_held_lock+0x2b/0x80
[ 891.801265][T22453] ? __fget_files+0x215/0x3d0
[ 891.801281][T22453] ? hook_file_ioctl_common+0x149/0x410
[ 891.801304][T22453] ? __fget_files+0x21f/0x3d0
[ 891.801324][T22453] ? __pfx_vhost_net_ioctl+0x10/0x10
[ 891.801341][T22453] __x64_sys_ioctl+0x18e/0x210
[ 891.801358][T22453] do_syscall_64+0x115/0x840
[ 891.801378][T22453] ? clear_bhb_loop+0x40/0x90
[ 891.801397][T22453] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 891.801412][T22453] RIP: 0033:0x7f213fb9ce59
[ 891.801426][T22453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 891.801441][T22453] RSP: 002b:00007f21409f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 891.801457][T22453] RAX: ffffffffffffffda RBX: 00007f213fe15fa0 RCX: 00007f213fb9ce59
[ 891.801467][T22453] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005
[ 891.801477][T22453] RBP: 00007f213fc32d6f R08: 0000000000000000 R09: 0000000000000000
[ 891.801487][T22453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 891.801496][T22453] R13: 00007f213fe16038 R14: 00007f213fe15fa0 R15: 00007ffe7a3bd908
[ 891.801517][T22453]
[ 893.005310][T20895] Bluetooth: hci12: command tx timeout
[ 893.638700][T22443] bridge0: port 1(bridge_slave_0) entered blocking state
[ 893.671813][T22443] bridge0: port 1(bridge_slave_0) entered disabled state
[ 893.710719][T22443] bridge_slave_0: entered allmulticast mode
[ 893.747633][T22443] bridge_slave_0: entered promiscuous mode
[ 893.784237][T22443] bridge0: port 2(bridge_slave_1) entered blocking state
[ 893.847602][T22443] bridge0: port 2(bridge_slave_1) entered disabled state
[ 893.894860][T22443] bridge_slave_1: entered allmulticast mode
[ 893.933186][T22443] bridge_slave_1: entered promiscuous mode
[ 894.116320][T22443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 894.205429][T22443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 894.399647][T22443] team0: Port device team_slave_0 added
[ 894.456293][T22443] team0: Port device team_slave_1 added
[ 894.764804][T22443] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 894.801815][T22443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 894.925890][T22443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 894.995639][T22443] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 895.022161][T22443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 895.079088][T20895] Bluetooth: hci12: command tx timeout
[ 895.123910][T22443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 895.329213][T22443] hsr_slave_0: entered promiscuous mode
[ 895.357472][T22443] hsr_slave_1: entered promiscuous mode
[ 895.381500][T22443] debugfs: 'hsr0' already exists in 'hsr'
[ 895.412663][T22443] Cannot create hsr debugfs directory
[ 896.112515][T22443] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 896.443601][T22443] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 896.649714][T22443] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 896.802139][T22443] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 897.143690][T20895] Bluetooth: hci12: command tx timeout
[ 897.218547][T22443] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 897.239772][T22443] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 897.258019][T22443] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 897.282711][T22443] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 897.299954][T22443] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 897.327241][T22443] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 897.360561][T22443] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 897.394723][T22443] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 897.579240][T22443] 8021q: adding VLAN 0 to HW filter on device bond0
[ 897.620150][T22443] 8021q: adding VLAN 0 to HW filter on device team0
[ 897.642741][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 897.649872][ T6287] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 897.695910][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 897.703166][ T6287] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 898.449212][T22443] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 898.541948][T22443] veth0_vlan: entered promiscuous mode
[ 898.570732][T22443] veth1_vlan: entered promiscuous mode
[ 898.638926][T22443] veth0_macvtap: entered promiscuous mode
[ 898.666329][T22443] veth1_macvtap: entered promiscuous mode
[ 898.708166][T22443] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 898.746364][T22443] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 898.777771][T14719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 898.844872][T14719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 898.884230][T14719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 898.940488][T14719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 899.089109][ T6074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 899.117316][ T6074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 899.190421][ T6287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 899.209768][ T6287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 899.218148][T20895] Bluetooth: hci12: command tx timeout
[ 901.589349][T22577] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3255'.
[ 901.813314][T22583] futex_wake_op: syz.1.3257 tries to shift op by -2048; fix this program
[ 901.823572][T22583] 0x000000000001-0x000000020000 : ""
[ 901.852917][T22583] ftl_cs: FTL header corrupt!
[ 901.897014][T22585] blktrace: Concurrent blktraces are not allowed on loop2
[ 903.652811][T22613] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 904.151428][T20895] Bluetooth: hci5: command 0x2016 tx timeout
[ 904.158885][T20895] Bluetooth: hci3: command 0x0406 tx timeout
[ 904.360876][T22613] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 904.693191][T22619] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 904.747299][T22613] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 904.898392][T22613] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 905.004680][T22613] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 905.499838][T22633] FAULT_INJECTION: forcing a failure.
[ 905.499838][T22633] name fail_futex, interval 1, probability 0, space 0, times 0
[ 905.530043][T22633] CPU: 0 UID: 0 PID: 22633 Comm: syz.1.3267 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 905.530072][T22633] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 905.530079][T22633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 905.530088][T22633] Call Trace:
[ 905.530094][T22633]
[ 905.530101][T22633] dump_stack_lvl+0x100/0x190
[ 905.530122][T22633] should_fail_ex.cold+0x5/0xa
[ 905.530144][T22633] get_futex_key+0x1d2/0x1510
[ 905.530171][T22633] ? __pfx_get_futex_key+0x10/0x10
[ 905.530201][T22633] ? futex_hash+0x2ad/0x370
[ 905.530227][T22633] ? __lock_acquire+0x4a5/0x2630
[ 905.530254][T22633] futex_wake+0xea/0x530
[ 905.530275][T22633] ? __pfx_futex_wake+0x10/0x10
[ 905.530296][T22633] ? __fget_files+0x215/0x3d0
[ 905.530317][T22633] do_futex+0x32b/0x350
[ 905.530333][T22633] ? __pfx_do_futex+0x10/0x10
[ 905.530348][T22633] ? fdget+0x18b/0x210
[ 905.530365][T22633] ? __sys_sendmsg+0x18f/0x220
[ 905.530382][T22633] __x64_sys_futex+0x34f/0x4d0
[ 905.530400][T22633] ? __pfx___x64_sys_futex+0x10/0x10
[ 905.530419][T22633] ? rcu_is_watching+0x12/0xc0
[ 905.530439][T22633] do_syscall_64+0x115/0x840
[ 905.530460][T22633] ? clear_bhb_loop+0x40/0x90
[ 905.530478][T22633] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 905.530493][T22633] RIP: 0033:0x7f358879ce59
[ 905.530507][T22633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 905.530522][T22633] RSP: 002b:00007f35895860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 905.530538][T22633] RAX: ffffffffffffffda RBX: 00007f3588a15fa8 RCX: 00007f358879ce59
[ 905.530548][T22633] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3588a15fac
[ 905.530558][T22633] RBP: 00007f3588a15fa0 R08: 0000000000000001 R09: 0000000000000000
[ 905.530567][T22633] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 905.530577][T22633] R13: 00007f3588a16038 R14: 00007ffc681eb680 R15: 00007ffc681eb768
[ 905.530596][T22633]
[ 906.410770][T22642] FAULT_INJECTION: forcing a failure.
[ 906.410770][T22642] name failslab, interval 1, probability 0, space 0, times 0
[ 906.460886][T22642] CPU: 0 UID: 0 PID: 22642 Comm: syz.1.3269 Tainted: G U L syzkaller #0 PREEMPT(full)
[ 906.460915][T22642] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 906.460921][T22642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 906.460931][T22642] Call Trace:
[ 906.460937][T22642]
[ 906.460945][T22642] dump_stack_lvl+0x100/0x190
[ 906.460966][T22642] should_fail_ex.cold+0x5/0xa
[ 906.460986][T22642] should_failslab+0xc2/0x120
[ 906.461005][T22642] kmem_cache_alloc_noprof+0x7b/0x6e0
[ 906.461028][T22642] ? do_getname+0x35/0x390
[ 906.461052][T22642] do_getname+0x35/0x390
[ 906.461075][T22642] do_sys_openat2+0xc5/0x1e0
[ 906.461098][T22642] ? __pfx_do_sys_openat2+0x10/0x10
[ 906.461126][T22642] __x64_sys_openat+0x12d/0x210
[ 906.461149][T22642] ? __pfx___x64_sys_openat+0x10/0x10
[ 906.461182][T22642] ? rcu_is_watching+0x12/0xc0
[ 906.461203][T22642] do_syscall_64+0x115/0x840
[ 906.461224][T22642] ? clear_bhb_loop+0x40/0x90
[ 906.461243][T22642] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 906.461259][T22642] RIP: 0033:0x7f358879ce59
[ 906.461273][T22642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 906.461287][T22642] RSP: 002b:00007f3589586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 906.461303][T22642] RAX: ffffffffffffffda RBX: 00007f3588a15fa0 RCX: 00007f358879ce59
[ 906.461313][T22642] RDX: 0000000000101000 RSI: 0000200000000240 RDI: ffffffffffffff9c
[ 906.461323][T22642] RBP: 00007f3588832d6f R08: 0000000000000000 R09: 0000000000000000
[ 906.461331][T22642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 906.461340][T22642] R13: 00007f3588a16038 R14: 00007f3588a15fa0 R15: 00007ffc681eb768
[ 906.461359][T22642]
[ 908.479427][ T6068] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 908.497574][ T6068] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 908.510136][ T6068] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 908.519250][ T6068] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 908.531435][ T6068] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 909.085065][ T31] INFO: task syz.5.2912:20245 blocked for more than 143 seconds.
[ 909.096787][ T31] Tainted: G U L syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 909.136898][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 909.184866][ T31] task:syz.5.2912 state:D stack:28232 pid:20245 tgid:20234 ppid:12513 task_flags:0x400140 flags:0x00080002
[ 909.260513][ T31] Call Trace:
[ 909.277968][ T31]
[ 909.293083][ T31] __schedule+0x1295/0x67a0
[ 909.351643][ T31] ? __pfx___schedule+0x10/0x10
[ 909.402436][ T31] ? find_held_lock+0x2b/0x80
[ 909.438865][ T31] ? schedule+0x2bf/0x390
[ 909.477996][ T31] schedule+0xdd/0x390
[ 909.512395][ T31] schedule_preempt_disabled+0x13/0x30
[ 909.548900][ T31] __mutex_lock+0xced/0x1b10
[ 909.574360][ T31] ? nfsd_shutdown_threads+0x5b/0xf0
[ 909.593749][ T31] ? __pfx___mutex_lock+0x10/0x10
[ 909.609583][ T31] ? net_generic+0xea/0x2a0
[ 909.638686][ T31] ? net_generic+0xea/0x2a0
[ 909.648843][ T31] ? nfsd_shutdown_threads+0x5b/0xf0
[ 909.661441][ T31] nfsd_shutdown_threads+0x5b/0xf0
[ 909.677428][ T31] nfsd_umount+0x3b/0x60
[ 909.693599][ T31] deactivate_locked_super+0xc1/0x1b0
[ 909.711198][ T31] deactivate_super+0xe7/0x110
[ 909.740934][ T31] cleanup_mnt+0x21f/0x450
[ 909.755631][ T31] task_work_run+0x150/0x240
[ 909.771416][ T31] ? __pfx_task_work_run+0x10/0x10
[ 909.790015][ T31] ? rcu_is_watching+0x12/0xc0
[ 909.807786][ T31] exit_to_user_mode_loop+0x157/0x670
[ 909.832566][ T31] ? rcu_is_watching+0x12/0xc0
[ 909.854160][ T31] do_syscall_64+0x652/0x840
[ 909.867704][ T31] ? clear_bhb_loop+0x40/0x90
[ 909.875892][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 909.889541][ T31] RIP: 0033:0x7f3362b9ce59
[ 909.894003][ T31] RSP: 002b:00007f3363a7a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 909.904148][ T31] RAX: fffffffffffffffe RBX: 00007f3362e16360 RCX: 00007f3362b9ce59
[ 909.913704][ T31] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000
[ 909.922007][ T31] RBP: 00007f3362c32d6f R08: 0000000000000000 R09: 0000000000000000
[ 909.934687][ T31] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000
[ 909.942913][ T31] R13: 00007f3362e163f8 R14: 00007f3362e16360 R15: 00007ffdbc8f7428
[ 909.951234][ T31]
[ 910.048985][ T31]
[ 910.048985][ T31] Showing all locks held in the system:
[ 910.095592][ T31] 1 lock held by khungtaskd/31:
[ 910.115595][ T31] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 910.157603][ T31] 5 locks held by kworker/u10:16/7177:
[ 910.175696][ T31] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 910.214432][ T31] #1: ffffc900034bfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 910.262892][ T31] #2: ffffffff905ed8c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[ 910.292922][ T31] #3: ffffffff90606620 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0
[ 910.320409][ T31] #4: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 910.378718][ T31] 2 locks held by kworker/u10:41/14720:
[ 910.397949][ T31] #0: ffff88801ebc4940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 910.447329][ T31] #1: ffffc90005347d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 910.480898][ T31] 2 locks held by getty/16991:
[ 910.488474][ T31] #0: ffff88803765f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 910.498536][ T31] #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[ 910.509131][ T31] 2 locks held by syz-executor/17000:
[ 910.516960][ T31] #0: ffff88805c4de0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[ 910.527626][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 910.537959][ T31] 2 locks held by syz.4.2418/17793:
[ 910.549042][ T31] #0: ffff8880591a60d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[ 910.559584][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 910.569405][ T31] 2 locks held by syz.5.2912/20245:
[ 910.578895][ T31] #0: ffff88806562a0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[ 910.591288][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 910.601205][ T6068] Bluetooth: hci13: command tx timeout
[ 910.611075][ T31] 2 locks held by syz.0.2913/20243:
[ 910.616505][ T31] #0: ffffffff906b4a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 910.624909][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[ 910.635283][ T31] 2 locks held by syz-executor/20498:
[ 910.644741][ T31] #0: ffff8880369c80d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[ 910.655768][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 910.665615][ T31] 2 locks held by syz.7.3006/20756:
[ 910.670827][ T31] #0: ffffffff906b4a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 910.679717][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[ 910.696665][ T31] 2 locks held by syz-executor/21007:
[ 910.702054][ T31] #0: ffff88803e39e0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[ 910.712628][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 910.722463][ T31] 2 locks held by syz.8.3056/21145:
[ 910.727865][ T31] #0: ffff88803256e0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[ 910.738680][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 910.752732][ T31] 2 locks held by syz-executor/21408:
[ 910.758953][ T31] #0: ffff8880343140d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[ 910.769423][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 910.779270][ T31] 2 locks held by syz.4.3129/21530:
[ 910.784642][ T31] #0: ffffffff906b4a88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 910.795076][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80
[ 910.809197][ T31] 2 locks held by syz-executor/21917:
[ 910.814924][ T31] #0: ffff88802228e0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[ 910.825418][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 910.836510][ T31] 2 locks held by syz-executor/22165:
[ 910.841896][ T31] #0: ffff888078e580d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110
[ 910.856910][ T31] #1: ffffffff8ec623e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0
[ 910.866819][ T31] 3 locks held by syz-executor/22443:
[ 910.872377][ T31] #0: ffff88808a470ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 910.881981][ T31] #1: ffff88808a4700b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0
[ 910.892045][ T31] #2: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[ 910.904043][ T31] 1 lock held by syz-executor/22669:
[ 910.909344][ T31] #0: ffff88803378cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 910.924621][ T31] 1 lock held by syz.5.3278/22680:
[ 910.929752][ T31] #0: ffff8880346acea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 910.984723][ T31]
[ 911.010831][ T31] =============================================
[ 911.010831][ T31]
[ 911.060977][ T31] NMI backtrace for cpu 0
[ 911.060995][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full)
[ 911.061017][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 911.061023][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 911.061032][ T31] Call Trace:
[ 911.061038][ T31]
[ 911.061044][ T31] dump_stack_lvl+0x100/0x190
[ 911.061065][ T31] nmi_cpu_backtrace.cold+0x12d/0x151
[ 911.061083][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 911.061099][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 911.061120][ T31] sys_info+0x141/0x190
[ 911.061133][ T31] watchdog+0xcb1/0x1030
[ 911.061157][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 911.061177][ T31] ? __pfx_watchdog+0x10/0x10
[ 911.061201][ T31] ? __kthread_parkme+0x18c/0x230
[ 911.061222][ T31] ? kthread+0x13a/0x450
[ 911.061242][ T31] ? __pfx_watchdog+0x10/0x10
[ 911.061261][ T31] kthread+0x370/0x450
[ 911.061282][ T31] ? __pfx_kthread+0x10/0x10
[ 911.061304][ T31] ret_from_fork+0x72b/0xd50
[ 911.061321][ T31] ? __pfx_ret_from_fork+0x10/0x10
[ 911.061337][ T31] ? __switch_to+0x800/0x1100
[ 911.061357][ T31] ? __switch_to_asm+0x39/0x70
[ 911.061375][ T31] ? __pfx_kthread+0x10/0x10
[ 911.061397][ T31] ret_from_fork_asm+0x1a/0x30
[ 911.061424][ T31]
[ 911.312025][ T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 911.318890][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full)
[ 911.329554][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 911.334747][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 911.344786][ T31] Call Trace:
[ 911.348053][ T31]
[ 911.350973][ T31] dump_stack_lvl+0x100/0x190
[ 911.355645][ T31] vpanic+0x552/0x970
[ 911.359612][ T31] ? __pfx_vpanic+0x10/0x10
[ 911.364098][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 911.370239][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 911.376380][ T31] panic+0xd1/0xe0
[ 911.380088][ T31] ? __pfx_panic+0x10/0x10
[ 911.384487][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 911.390625][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 911.396763][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 911.402903][ T31] ? watchdog.cold+0x1ec/0x234
[ 911.407656][ T31] ? watchdog+0xcc1/0x1030
[ 911.412064][ T31] watchdog.cold+0x1fd/0x234
[ 911.416652][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 911.422452][ T31] ? __pfx_watchdog+0x10/0x10
[ 911.427118][ T31] ? __kthread_parkme+0x18c/0x230
[ 911.432135][ T31] ? kthread+0x13a/0x450
[ 911.436366][ T31] ? __pfx_watchdog+0x10/0x10
[ 911.441033][ T31] kthread+0x370/0x450
[ 911.445095][ T31] ? __pfx_kthread+0x10/0x10
[ 911.449677][ T31] ret_from_fork+0x72b/0xd50
[ 911.454254][ T31] ? __pfx_ret_from_fork+0x10/0x10
[ 911.459352][ T31] ? __switch_to+0x800/0x1100
[ 911.464021][ T31] ? __switch_to_asm+0x39/0x70
[ 911.468792][ T31] ? __pfx_kthread+0x10/0x10
[ 911.473382][ T31] ret_from_fork_asm+0x1a/0x30
[ 911.478143][ T31]
[ 911.481217][ T31] Kernel Offset: disabled
[ 911.485562][ T31] Rebooting in 86400 seconds..