last executing test programs: 40.321112522s ago: executing program 2 (id=446): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) r2 = getsockopt$auto(r1, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r2, r2, 0x8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r5, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r7 = wait4$auto(r6, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0x6, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r7, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r7}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r7, 0xc, 0x6) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) ioctl$auto(r0, 0x921064a2, 0x20000000020000a) r8 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000000)={{0x3, 0xffffffff, 0x1, 0x4005, 0x6}, "654c18440000738236000000fdc4fc151014d9ac0200000000001000"}) readv$auto(r8, &(0x7f0000000180)={0x0, 0x4}, 0x4) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) socket(0x2, 0x80002, 0x73) 38.874042343s ago: executing program 2 (id=447): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x109802, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0xffffffffffffffff) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x2, 0x3, 0x800008002, 0x40eb1, 0x602, 0x5) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffc, 0x0, 0x0, 0x5bd, r2, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r3 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r4, 0x0, 0x8) 35.743181794s ago: executing program 2 (id=453): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000800000) mprotect$auto(0x0, 0x2, 0x1000002) mmap$auto(0x0, 0x8b69, 0xdf, 0xeb5, 0x401, 0x1000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x102, 0x4000011, 0x0, 0x6, 0x5, 0x80a, 0xffffffffffffffff, [0x0, 0x40], {0x3f000, 0x10001, 0x3, 0x2de, 0x8e, 0x0, 0x101, 0x6, 0x2000009}, {0xfff7fffd, 0x3, 0x52, 0x1a7, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0xc01) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1001}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x800001ffffffff}, 0x6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r0, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) 35.475401359s ago: executing program 2 (id=455): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close$auto(0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x100000000000000, 0x400053, 0x9) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)=0xc) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008012, 0x3, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x9, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000e80)=""/206, 0xce) madvise$auto(0x0, 0x2003f0, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 31.830953078s ago: executing program 2 (id=463): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdd, 0x9b72, 0xffffffffffffffff, 0x8001) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100002, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) 30.114074575s ago: executing program 2 (id=465): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d") mmap$auto(0x10000, 0x5, 0xdf, 0x9b72, 0x2, 0x8000008001) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) read$auto(0x3, 0x0, 0x8080) sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) 30.113868256s ago: executing program 3 (id=466): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r1, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) rt_sigsuspend$auto(0x0, 0x8) shutdown$auto(0x200000003, 0x2) 26.581610701s ago: executing program 3 (id=470): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c0") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) read$auto(0x3, 0x0, 0x8080) sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 23.997246287s ago: executing program 3 (id=472): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a8000, 0x0) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) statmount$auto(0x0, &(0x7f0000000380)={0x55c35ef, 0x2f, 0x3, 0x62, 0x28000, 0xfffffffffffffffe, 0x0, 0x800, 0x13, 0x8, 0x5, 0x40, 0xf, 0x1, 0x21fd, 0x0, 0xe7, 0x1000, 0x2, 0xffffffffffffffff, 0x2d8, 0x5, 0x7, 0x2, 0x7, 0x1, 0x4, 0x4, 0xe, 0x7, 0x8, [0x61, 0xd0e, 0x8, 0x5, 0x3ff, 0x7, 0x10000, 0x1ff, 0x3, 0x121980a3, 0x4, 0x8001, 0x5, 0x40, 0x7, 0xb1a3, 0x80000000, 0x5, 0x2a6, 0x100000000, 0x7, 0xfffffffffffffff9, 0x4, 0x3, 0x0, 0x6, 0xe43, 0x5, 0x9c8, 0x4, 0x2e1, 0x100, 0x1, 0xfffffffffffff538, 0x2, 0x8, 0x8, 0x100000000, 0x7f, 0xfffffffffffffff1, 0x8, 0x0, 0x2]}, 0x9, 0xcc) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10002}, 0x6) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)=""/210, 0xd2) dup2$auto(0x5, 0x4) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) setrlimit$auto(0x2, &(0x7f0000000080)={0x3, 0x20000000000006}) mprotect$auto(0x200000000000, 0x806121, 0x6) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) 21.719001015s ago: executing program 3 (id=475): unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffb, 0x2020007, 0x206, 0xeb1, 0xffffffffffffffff, 0x208001) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\xf5\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\t\x00\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00\r\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) bind$auto(0x3, 0x0, 0x6d) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2, 0x801, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05082dbd7000ecdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttyp3/dev\x00', 0x402402, 0x0) fanotify_init$auto(0xf, 0x0) mmap$auto(0x0, 0x5, 0x7, 0x400ff, 0xffffffffffffffff, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x5, 0x0) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(0x0, 0x80000, 0xf3) 19.546310262s ago: executing program 3 (id=478): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000800000) mprotect$auto(0x0, 0x2, 0x1000002) mmap$auto(0x0, 0x8b69, 0xdf, 0xeb5, 0x401, 0x1000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x102, 0x4000011, 0x0, 0x6, 0x5, 0x80a, 0xffffffffffffffff, [0x0, 0x40], {0x3f000, 0x10001, 0x3, 0x2de, 0x8e, 0x0, 0x101, 0x6, 0x2000009}, {0xfff7fffd, 0x3, 0x52, 0x1a7, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0xc01) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1001}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x800001ffffffff}, 0x6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r0, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) writev$auto(r1, &(0x7f0000000340)={0x0, 0x18}, 0x8) ioctl$auto_UI_SET_FFBIT(r1, 0x4004556b, 0x0) 19.106773683s ago: executing program 3 (id=479): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100253d7000fddbdf2501000000140007800c1401800800018000000000040089800c0002000600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 14.69029604s ago: executing program 0 (id=483): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, r0, [0x5], {0xd74c, 0x10000, 0x3ff, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0x2, 0x1, 0x6, 0x7, 0x1, 0x40, 0x176c7, 0x1, 0x100000005}}) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x7) fadvise64$auto_POSIX_FADV_NOREUSE(0xffffffffffffffff, 0x2, 0x7, 0x5) unshare$auto(0x40000080) sysfs$auto(0x2, 0x23, 0x0) close_range$auto(0x2, 0x8, 0x0) 11.723914862s ago: executing program 0 (id=488): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000001240), 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/eql/queues/rx-0/rps_flow_cnt\x00', 0x42062, 0x0) write$auto(r4, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000600)={{&(0x7f0000000400)="5cdd59f1a68d086a02a2cc1399c7b3f7410eb36cfbec7e7224eaf6de379d09771080b197b8057225ffa98bc9a7bd53a5aee9a2d48d74d149c199be3009d2d61af64942e106e9b586aabcd7ae4de8a0e87e02af7f6af674c2fc8d8a8a78916f9c23e6b8a8be7141ae87f2996f079bfcbadc2ef4a6a3e894ba7dd3d9f11bd4d055", 0x6, 0x0, 0x2, &(0x7f0000000580)="6ea0838008f497d022b78e5e7eb7c80c499b948523cfff8c50f12ebc124c316e0b644f39bb8b55a743fb004e0ed1aec82d0b82794ab3801ad7705749f562a3d87256f1ec7ebea9a0fd16decd422f095cc3abfc2c4e7fcc9916d6a7139c731bdeed", 0x4, 0xc7b}, 0xfffffffe}, 0x6, 0x2) 10.762314595s ago: executing program 0 (id=489): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000800000) mprotect$auto(0x0, 0x2, 0x1000002) mmap$auto(0x0, 0x8b69, 0xdf, 0xeb5, 0x401, 0x1000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x102, 0x4000011, 0x0, 0x6, 0x5, 0x80a, 0xffffffffffffffff, [0x0, 0x40], {0x3f000, 0x10001, 0x3, 0x2de, 0x8e, 0x0, 0x101, 0x6, 0x2000009}, {0xfff7fffd, 0x3, 0x52, 0x1a7, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0xc01) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1001}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x800001ffffffff}, 0x6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r0, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={0x0, 0x18}, 0x8) 10.295392925s ago: executing program 0 (id=490): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, r1, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) rt_sigsuspend$auto(0x0, 0x8) shutdown$auto(0x200000003, 0x2) 8.789298749s ago: executing program 0 (id=493): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) r2 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x101102, 0x0) write$auto_proc_pid_attr_operations_base(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x20000050) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x800000000ffb, 0x8000000008012, r3, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000000), 0x2}, 0x2) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xfffffffd, 0x2, 0x8000000000000000, 0x0) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r6 = landlock_create_ruleset$auto(&(0x7f0000000140)={0x4, 0x1, 0x9}, 0xe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) landlock_restrict_self$auto(r6, 0xb) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) pread64$auto(r5, 0x0, 0xeda5, 0xc86) 8.577936086s ago: executing program 1 (id=494): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) socket(0x28, 0x5, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xf, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) syz_clone(0x52000080, &(0x7f00000002c0)="0271bf5e4c70398cb7edd8a89e8ee339acbf0cc78f19ed8920accb8839cec476fc37ddf008a9b1bccebee4bc2b7a7ca0560fd14bf151f56fa88fe007bcfd8711c7", 0x41, &(0x7f0000000380), 0x0, &(0x7f0000000d40)="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") mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x2) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), r0) sendmsg$auto_SMC_NETLINK_GET_LGR_SMCD(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, "7a87b7426eb80af8483cdbc50586ff08a64dca344bda4bd90490b70bccfeef03d9ff48c1eccf7e0f8313aecb87d2ca6eb5b6cb383c5bcfce7deea5a48eb8bf2e8ea4cb95b82d9578e8701a2af34b1b7c7cbea1a1619fe85e70ce515904adef3791911fcf524cbc4b2b99086c5cc2980a16e067c2a962017fd7388baabe10e4863d8943050f4a16cc6e28e8319b173c05e0046e77c518efeb6f7efd137154bc039018"}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x8800) socket(0x25, 0x5, 0x73) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fchmodat2$auto(0xffffffffffffff9c, 0x0, 0x61ed, 0x4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) semctl$auto_IPC_STAT(0xf7, 0x140, 0x2, 0xd3c7) setrlimit$auto(0x5, &(0x7f0000000000)={0x3, 0x4}) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) 7.720255522s ago: executing program 0 (id=495): mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb1, 0x405, 0x200000008000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8081, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_mempolicy$auto(0x5, &(0x7f0000000080)=0x5, 0x21) kexec_load$auto(0x0, 0x2, 0x0, 0x1000000000004) ioctl$auto_SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) r2 = getpid() move_pages$auto(r2, 0x3, 0x0, &(0x7f0000001100)=0xc5cf, 0x0, 0x4c8) epoll_create$auto(0x1) capset$auto(0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) close_range$auto(0xffffffffffffffff, r1, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x7ff, 0x3, 0x101, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 6.245464096s ago: executing program 1 (id=496): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8000000000000000, 0xdb, 0x100eb4, 0xffffffffffffffff, 0x4) mmap$auto(0x5, 0x2020206, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x29, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x9, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) timer_settime$auto(0x0, 0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x5) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) landlock_restrict_self$auto(r2, 0x1) 4.010041087s ago: executing program 32 (id=479): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100253d7000fddbdf2501000000140007800c1401800800018000000000040089800c0002000600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 1.979863915s ago: executing program 1 (id=498): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000800000) mprotect$auto(0x0, 0x2, 0x1000002) mmap$auto(0x0, 0x8b69, 0xdf, 0xeb5, 0x401, 0x1000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x102, 0x4000011, 0x0, 0x6, 0x5, 0x80a, 0xffffffffffffffff, [0x0, 0x40], {0x3f000, 0x10001, 0x3, 0x2de, 0x8e, 0x0, 0x101, 0x6, 0x2000009}, {0xfff7fffd, 0x3, 0x52, 0x1a7, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0xc01) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1001}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x800001ffffffff}, 0x6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r0, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={0x0, 0x18}, 0x8) ioctl$auto_UI_SET_FFBIT(r1, 0x4004556b, 0x0) 1.297868445s ago: executing program 1 (id=499): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000800000) mprotect$auto(0x0, 0x2, 0x1000002) mmap$auto(0x0, 0x8b69, 0xdf, 0xeb5, 0x401, 0x1000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x102, 0x4000011, 0x0, 0x6, 0x5, 0x80a, 0xffffffffffffffff, [0x0, 0x40], {0x3f000, 0x10001, 0x3, 0x2de, 0x8e, 0x0, 0x101, 0x6, 0x2000009}, {0xfff7fffd, 0x3, 0x52, 0x1a7, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0xc01) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1001}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x800001ffffffff}, 0x6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r0, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) ioctl$auto_UI_SET_FFBIT(r1, 0x4004556b, 0x0) 779.181495ms ago: executing program 1 (id=500): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000800000) mprotect$auto(0x0, 0x2, 0x1000002) mmap$auto(0x0, 0x8b69, 0xdf, 0xeb5, 0x401, 0x1000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x102, 0x4000011, 0x0, 0x6, 0x5, 0x80a, 0xffffffffffffffff, [0x0, 0x40], {0x3f000, 0x10001, 0x3, 0x2de, 0x8e, 0x0, 0x101, 0x6, 0x2000009}, {0xfff7fffd, 0x3, 0x52, 0x1a7, 0x10001, 0x4040, 0x76c5, 0x8, 0x8000000000040000}}) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0xc01) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1001}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x800001ffffffff}, 0x6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r0, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) ioctl$auto_UI_SET_FFBIT(r1, 0x4004556b, 0x0) 0s ago: executing program 1 (id=501): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r0, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) kernel console output (not intermixed with test programs): 5.499010][ T7303] FAULT_INJECTION: forcing a failure. [ 195.499010][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 195.595917][ T7303] CPU: 0 UID: 0 PID: 7303 Comm: syz.3.173 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.595947][ T7303] Tainted: [L]=SOFTLOCKUP [ 195.595953][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.595964][ T7303] Call Trace: [ 195.595970][ T7303] [ 195.595977][ T7303] dump_stack_lvl+0x100/0x190 [ 195.596002][ T7303] should_fail_ex.cold+0x5/0xa [ 195.596022][ T7303] should_failslab+0xc2/0x120 [ 195.596045][ T7303] __kmalloc_cache_noprof+0x91/0x6c0 [ 195.596072][ T7303] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 195.596100][ T7303] ? vidtv_psi_sdt_service_init+0x52/0x200 [ 195.596125][ T7303] vidtv_psi_sdt_service_init+0x52/0x200 [ 195.596147][ T7303] vidtv_channel_si_init+0x5d4/0x18f0 [ 195.596176][ T7303] vidtv_mux_init+0x522/0xbf0 [ 195.596201][ T7303] vidtv_start_feed+0x34e/0x500 [ 195.596228][ T7303] ? __pfx_vidtv_start_feed+0x10/0x10 [ 195.596255][ T7303] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 195.596294][ T7303] dmx_section_feed_start_filtering+0x3a8/0x660 [ 195.596330][ T7303] dvb_dmxdev_filter_start+0x767/0xdd0 [ 195.596363][ T7303] dvb_demux_do_ioctl+0xe64/0x1200 [ 195.596396][ T7303] dvb_usercopy+0x167/0x340 [ 195.596419][ T7303] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 195.596446][ T7303] ? __pfx_dvb_usercopy+0x10/0x10 [ 195.596477][ T7303] ? __fget_files+0x21f/0x3d0 [ 195.596512][ T7303] dvb_demux_ioctl+0x29/0x40 [ 195.596535][ T7303] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 195.596559][ T7303] __x64_sys_ioctl+0x18e/0x210 [ 195.596583][ T7303] do_syscall_64+0x115/0x840 [ 195.596611][ T7303] ? clear_bhb_loop+0x40/0x90 [ 195.596633][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.596651][ T7303] RIP: 0033:0x7f80c9d9de59 [ 195.596667][ T7303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.596692][ T7303] RSP: 002b:00007f80c7fb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.596709][ T7303] RAX: ffffffffffffffda RBX: 00007f80ca026180 RCX: 00007f80c9d9de59 [ 195.596720][ T7303] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 195.596731][ T7303] RBP: 00007f80c9e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 195.596741][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.596751][ T7303] R13: 00007f80ca026218 R14: 00007f80ca026180 R15: 00007fff8541be88 [ 195.596775][ T7303] [ 196.245603][ T7307] netlink: 342 bytes leftover after parsing attributes in process `syz.2.174'. [ 197.174149][ T7282] Process accounting paused [ 197.765719][ T7323] hub 1-0:1.0: USB hub found [ 197.864190][ T7338] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 197.893662][ T7323] hub 1-0:1.0: 1 port detected [ 197.921038][ T7338] netlink: 9 bytes leftover after parsing attributes in process `syz.1.179'. [ 198.263637][ T7348] random: crng reseeded on system resumption [ 198.512869][ T7349] hub 1-0:1.0: USB hub found [ 198.619690][ T7349] hub 1-0:1.0: 1 port detected [ 198.999502][ T7334] Process accounting resumed [ 201.629446][ T7399] random: crng reseeded on system resumption [ 203.436130][ T7421] futex_wake_op: syz.2.191 tries to shift op by -2048; fix this program [ 203.486311][ T7421] futex_wake_op: syz.2.191 tries to shift op by -2048; fix this program [ 207.105599][ T7460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.198'. [ 207.214226][ T5633] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 207.558282][ T7466] FAULT_INJECTION: forcing a failure. [ 207.558282][ T7466] name failslab, interval 1, probability 0, space 0, times 0 [ 207.681589][ T7466] CPU: 0 UID: 0 PID: 7466 Comm: syz.2.200 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.681628][ T7466] Tainted: [L]=SOFTLOCKUP [ 207.681634][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.681644][ T7466] Call Trace: [ 207.681651][ T7466] [ 207.681658][ T7466] dump_stack_lvl+0x100/0x190 [ 207.681683][ T7466] should_fail_ex.cold+0x5/0xa [ 207.681703][ T7466] should_failslab+0xc2/0x120 [ 207.681725][ T7466] kmem_cache_alloc_noprof+0x91/0x6a0 [ 207.681747][ T7466] ? __pmd_alloc+0xbf/0x950 [ 207.681775][ T7466] __pmd_alloc+0xbf/0x950 [ 207.681800][ T7466] __handle_mm_fault+0xa9c/0x2a00 [ 207.681832][ T7466] ? mt_find+0x45e/0x8e0 [ 207.681851][ T7466] ? __pfx___handle_mm_fault+0x10/0x10 [ 207.681877][ T7466] ? __pfx_mt_find+0x10/0x10 [ 207.681906][ T7466] ? find_vma+0xbf/0x140 [ 207.681925][ T7466] ? __pfx_find_vma+0x10/0x10 [ 207.681951][ T7466] handle_mm_fault+0x37b/0xa30 [ 207.681982][ T7466] do_user_addr_fault+0x74c/0x12f0 [ 207.682012][ T7466] exc_page_fault+0x6f/0xd0 [ 207.682039][ T7466] asm_exc_page_fault+0x26/0x30 [ 207.682056][ T7466] RIP: 0010:__put_user_8+0xd/0x30 [ 207.682084][ T7466] Code: 89 01 31 c9 0f 01 ca e9 d1 d9 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 [ 207.682100][ T7466] RSP: 0018:ffffc900034cfed8 EFLAGS: 00050246 [ 207.682114][ T7466] RAX: 0000000000000018 RBX: 0000000000000000 RCX: 0000000000000000 [ 207.682125][ T7466] RDX: 0000000000080000 RSI: ffffffff825b8ab1 RDI: ffffffff8c400080 [ 207.682136][ T7466] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001c8 [ 207.682146][ T7466] R10: 0000000000000200 R11: 0000000000000000 R12: 00007f4c7382c9a0 [ 207.682156][ T7466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000112 [ 207.682173][ T7466] ? __might_fault+0x111/0x140 [ 207.682204][ T7466] __x64_sys_get_robust_list+0xbf/0x150 [ 207.682225][ T7466] do_syscall_64+0x115/0x840 [ 207.682251][ T7466] ? clear_bhb_loop+0x40/0x90 [ 207.682272][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.682290][ T7466] RIP: 0033:0x7f4c7299de59 [ 207.682304][ T7466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.682320][ T7466] RSP: 002b:00007f4c7382c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000112 [ 207.682336][ T7466] RAX: ffffffffffffffda RBX: 00007f4c72c25fa0 RCX: 00007f4c7299de59 [ 207.682347][ T7466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.682356][ T7466] RBP: 00007f4c72a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 207.682366][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.682376][ T7466] R13: 00007f4c72c26038 R14: 00007f4c72c25fa0 R15: 00007ffdafe00978 [ 207.682398][ T7466] [ 208.316917][ T7473] NFSD: Failed to start, no listeners configured. [ 209.186830][ T7478] NFSD: Failed to start, no listeners configured. [ 209.196541][ T1156] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 1 with error 117 [ 209.287497][ T1156] EXT4-fs (sda1): This should not happen!! Data will be lost [ 209.287497][ T1156] [ 209.352068][ T1156] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 0 with max blocks 1 with error 117 [ 209.377841][ T7495] netlink: 'syz.3.206': attribute type 4 has an invalid length. [ 209.418579][ T1156] EXT4-fs (sda1): This should not happen!! Data will be lost [ 209.418579][ T1156] [ 209.462699][ T1156] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 1 with error 117 [ 209.512955][ T1156] EXT4-fs (sda1): This should not happen!! Data will be lost [ 209.512955][ T1156] [ 209.691945][ T7483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.875157][ T30] audit: type=1800 audit(4294967340.968:10): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.207" name="version" dev="configfs" ino=18452 res=0 errno=0 [ 210.103618][ T7483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.639299][ T7483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.861003][ T7483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.021581][ T7509] syz.3.210 uses obsolete (PF_INET,SOCK_PACKET) [ 211.528789][ T5633] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 213.300622][ T7539] FAULT_INJECTION: forcing a failure. [ 213.300622][ T7539] name failslab, interval 1, probability 0, space 0, times 0 [ 213.370521][ T7539] CPU: 0 UID: 0 PID: 7539 Comm: syz.3.215 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.370556][ T7539] Tainted: [L]=SOFTLOCKUP [ 213.370564][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.370574][ T7539] Call Trace: [ 213.370581][ T7539] [ 213.370589][ T7539] dump_stack_lvl+0x100/0x190 [ 213.370615][ T7539] should_fail_ex.cold+0x5/0xa [ 213.370636][ T7539] should_failslab+0xc2/0x120 [ 213.370667][ T7539] __kmalloc_noprof+0xfc/0x820 [ 213.370698][ T7539] ? process_preds+0x452/0x1d90 [ 213.370731][ T7539] process_preds+0x452/0x1d90 [ 213.370764][ T7539] apply_subsystem_event_filter+0x4a0/0x17a0 [ 213.370796][ T7539] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 213.370826][ T7539] ? _copy_from_user+0x59/0xd0 [ 213.370853][ T7539] subsystem_filter_write+0x95/0x120 [ 213.370878][ T7539] vfs_write+0x2aa/0x1050 [ 213.370905][ T7539] ? __pfx_subsystem_filter_write+0x10/0x10 [ 213.370930][ T7539] ? __pfx_vfs_write+0x10/0x10 [ 213.370956][ T7539] ? __fget_files+0x215/0x3d0 [ 213.370988][ T7539] ? __fget_files+0x21f/0x3d0 [ 213.371020][ T7539] ksys_write+0x12a/0x250 [ 213.371046][ T7539] ? __pfx_ksys_write+0x10/0x10 [ 213.371079][ T7539] do_syscall_64+0x115/0x840 [ 213.371107][ T7539] ? clear_bhb_loop+0x40/0x90 [ 213.371128][ T7539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.371146][ T7539] RIP: 0033:0x7f80c9d9de59 [ 213.371162][ T7539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.371178][ T7539] RSP: 002b:00007f80c7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 213.371196][ T7539] RAX: ffffffffffffffda RBX: 00007f80ca025fa0 RCX: 00007f80c9d9de59 [ 213.371208][ T7539] RDX: 0000000000000071 RSI: 0000200000000040 RDI: 0000000000000006 [ 213.371218][ T7539] RBP: 00007f80c9e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 213.371228][ T7539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.371238][ T7539] R13: 00007f80ca026038 R14: 00007f80ca025fa0 R15: 00007fff8541be88 [ 213.371261][ T7539] [ 213.917971][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.000550][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 218.801528][ T1172] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 1 with error 117 [ 218.887714][ T1172] EXT4-fs (sda1): This should not happen!! Data will be lost [ 218.887714][ T1172] [ 218.947226][ T1172] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 0 with max blocks 1 with error 117 [ 219.026834][ T1172] EXT4-fs (sda1): This should not happen!! Data will be lost [ 219.026834][ T1172] [ 219.129477][ T1172] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 1 with error 117 [ 219.207101][ T1172] EXT4-fs (sda1): This should not happen!! Data will be lost [ 219.207101][ T1172] [ 223.708579][ T7626] Process accounting resumed [ 223.869278][ T7642] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.234'. [ 228.226646][ T7686] FAULT_INJECTION: forcing a failure. [ 228.226646][ T7686] name failslab, interval 1, probability 0, space 0, times 0 [ 228.299930][ T7686] CPU: 0 UID: 0 PID: 7686 Comm: syz.0.242 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.299961][ T7686] Tainted: [L]=SOFTLOCKUP [ 228.299967][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 228.299978][ T7686] Call Trace: [ 228.299985][ T7686] [ 228.299992][ T7686] dump_stack_lvl+0x100/0x190 [ 228.300017][ T7686] should_fail_ex.cold+0x5/0xa [ 228.300038][ T7686] should_failslab+0xc2/0x120 [ 228.300062][ T7686] __kmalloc_cache_noprof+0x91/0x6c0 [ 228.300091][ T7686] ? trace_pid_list_alloc+0x9d/0x480 [ 228.300121][ T7686] trace_pid_list_alloc+0x9d/0x480 [ 228.300147][ T7686] trace_pid_write+0x110/0x460 [ 228.300171][ T7686] ? __pfx_trace_pid_write+0x10/0x10 [ 228.300208][ T7686] event_pid_write.isra.0+0x1e4/0x7d0 [ 228.300234][ T7686] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 228.300277][ T7686] vfs_write+0x2aa/0x1050 [ 228.300304][ T7686] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 228.300332][ T7686] ? __pfx_vfs_write+0x10/0x10 [ 228.300357][ T7686] ? __fget_files+0x215/0x3d0 [ 228.300389][ T7686] ? __fget_files+0x21f/0x3d0 [ 228.300421][ T7686] ksys_write+0x12a/0x250 [ 228.300447][ T7686] ? __pfx_ksys_write+0x10/0x10 [ 228.300480][ T7686] do_syscall_64+0x115/0x840 [ 228.300508][ T7686] ? clear_bhb_loop+0x40/0x90 [ 228.300529][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.300547][ T7686] RIP: 0033:0x7fb41f79de59 [ 228.300564][ T7686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.300581][ T7686] RSP: 002b:00007fb4206b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.300599][ T7686] RAX: ffffffffffffffda RBX: 00007fb41fa25fa0 RCX: 00007fb41f79de59 [ 228.300610][ T7686] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 228.300620][ T7686] RBP: 00007fb41f833e6f R08: 0000000000000000 R09: 0000000000000000 [ 228.300631][ T7686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.300641][ T7686] R13: 00007fb41fa26038 R14: 00007fb41fa25fa0 R15: 00007ffdbeb08118 [ 228.300665][ T7686] [ 228.547751][ T7686] Process accounting resumed [ 229.962864][ T5633] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 231.827057][ T7730] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 232.023849][ T30] audit: type=1800 audit(4294967363.096:11): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.250" name="dbroot" dev="configfs" ino=19754 res=0 errno=0 [ 232.381824][ T7737] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by "mNjeHO;\x5cBImHi~(4αۯgQTlF\x07͇C1Qgi_(#X9m5vq͛A;(³*>WG_>!{Q[t%Y\x0dK.\x5cM%\x22\x09T\x5c^w\x0cK+ѬYec\x09W:Tp0Dmo{M@JLBE~Q\x0d7C\x09&F\x1bgyjhΟ܍v7PLg%gk\x0a۷\x0cU\x5cYS :ܮ\x1b(F|rrTHƒ!kX\x22) R+cnwH7r! 1\x07i^&SDʋaitU !\x09]?S.&w\x07SJs3=n@cb*CxwS2)\x09L!\x09mrn|۽iKUѣ\x0b:iGD\x09hN:ܟ]]݂2^\x09HCCaJSbhix+UwE:,lr@\x09ţd;E[ݽ\x0dG!Ϛ:boeoޔ7xO#2K-p/־rT|{>gmvA挍E7([!SZDrtQplZ{\x0d\x0dO[^ /oyg3La(2+G]qf\x09UjsC~1r퇰\x5c$gXfjg:R]Iӯj!nmre}\x1bβ+YȉXf\x5cC]\x1brKYo8ɻ\x0b!_^6-J [ 233.950677][ T7754] FAULT_INJECTION: forcing a failure. [ 233.950677][ T7754] name failslab, interval 1, probability 0, space 0, times 0 [ 234.597276][ T7760] [U] ^R [ 234.620699][ T7762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'. [ 234.667370][ T7762] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 234.709488][ T7754] CPU: 0 UID: 0 PID: 7754 Comm: syz.3.256 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.709519][ T7754] Tainted: [L]=SOFTLOCKUP [ 234.709526][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 234.709536][ T7754] Call Trace: [ 234.709542][ T7754] [ 234.709550][ T7754] dump_stack_lvl+0x100/0x190 [ 234.709574][ T7754] should_fail_ex.cold+0x5/0xa [ 234.709595][ T7754] should_failslab+0xc2/0x120 [ 234.709618][ T7754] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 234.709640][ T7754] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 234.709660][ T7754] ? rcu_is_watching+0x12/0xc0 [ 234.709679][ T7754] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 234.709706][ T7754] krealloc_node_align_noprof+0x1f9/0x3e0 [ 234.709729][ T7754] snd_pcm_hw_rule_add+0x3b3/0x510 [ 234.709772][ T7754] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 234.709797][ T7754] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 234.709819][ T7754] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 234.709845][ T7754] ? mutex_init_lockdep+0xf1/0x120 [ 234.709873][ T7754] ? snd_pcm_attach_substream+0x287/0xd20 [ 234.709896][ T7754] snd_pcm_open_substream+0x942/0x1850 [ 234.709922][ T7754] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 234.709942][ T7754] ? snd_pcm_oss_open+0x5e5/0x1390 [ 234.709974][ T7754] snd_pcm_oss_open+0x735/0x1390 [ 234.710007][ T7754] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 234.710033][ T7754] ? __lock_acquire+0x49f/0x1a40 [ 234.710058][ T7754] ? __pfx_default_wake_function+0x10/0x10 [ 234.710085][ T7754] ? do_raw_spin_lock+0x128/0x260 [ 234.710104][ T7754] ? soundcore_open+0x231/0x5a0 [ 234.710127][ T7754] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 234.710160][ T7754] soundcore_open+0x2e3/0x5a0 [ 234.710184][ T7754] ? __pfx_soundcore_open+0x10/0x10 [ 234.710206][ T7754] chrdev_open+0x234/0x6a0 [ 234.710233][ T7754] ? __pfx_apparmor_file_open+0x10/0x10 [ 234.710262][ T7754] ? __pfx_chrdev_open+0x10/0x10 [ 234.710292][ T7754] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 234.710315][ T7754] do_dentry_open+0x6ab/0x14d0 [ 234.710341][ T7754] ? __pfx_chrdev_open+0x10/0x10 [ 234.710373][ T7754] vfs_open+0x82/0x3f0 [ 234.710396][ T7754] path_openat+0x2873/0x4280 [ 234.710434][ T7754] ? __pfx_path_openat+0x10/0x10 [ 234.710467][ T7754] do_file_open+0x20e/0x430 [ 234.710497][ T7754] ? __pfx_do_file_open+0x10/0x10 [ 234.710541][ T7754] ? alloc_fd+0x471/0x7a0 [ 234.710569][ T7754] ? do_getname+0x191/0x390 [ 234.710591][ T7754] do_sys_openat2+0x10f/0x1e0 [ 234.710612][ T7754] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.710634][ T7754] ? __fget_files+0x21f/0x3d0 [ 234.710665][ T7754] __x64_sys_openat+0x12d/0x210 [ 234.710686][ T7754] ? __pfx___x64_sys_openat+0x10/0x10 [ 234.710709][ T7754] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 234.710737][ T7754] ? syscall_user_dispatch+0x76/0x130 [ 234.710758][ T7754] do_syscall_64+0x115/0x840 [ 234.710785][ T7754] ? clear_bhb_loop+0x40/0x90 [ 234.710807][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.710825][ T7754] RIP: 0033:0x7f80c9d9de59 [ 234.710841][ T7754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.710857][ T7754] RSP: 002b:00007f80c7fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.710876][ T7754] RAX: ffffffffffffffda RBX: 00007f80ca026090 RCX: 00007f80c9d9de59 [ 234.710887][ T7754] RDX: 0000000000020b42 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 234.710898][ T7754] RBP: 00007f80c9e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 234.710908][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.710918][ T7754] R13: 00007f80ca026128 R14: 00007f80ca026090 R15: 00007fff8541be88 [ 234.710940][ T7754] [ 237.049021][ T7792] random: crng reseeded on system resumption [ 241.648486][ T7821] Process accounting resumed [ 242.072598][ T30] audit: type=1800 audit(4294967373.131:12): pid=7857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.274" name="lu_gp_id" dev="configfs" ino=20608 res=0 errno=0 [ 242.507987][ T7864] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[7089] was attempted by ")9oJDyz{i}.KƊުb={Lhly] gY\x0dXuu tj͙oYr+/M\x09\x0dbX{ei[Y/&\x5cu³{8ͻ 3jlyQ%`-x| 91>?4G \x0a/Z wQ\x22$`Vd|[cO?X׹fG?\x5cKh%sV5zz|E\x09;ѨI-+JN+X櫈`kr}#:\x22xLdp\x0bxpRUE#Jv\x07 [ 243.846821][ T7878] FAULT_INJECTION: forcing a failure. [ 243.846821][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 244.429428][ T7878] CPU: 0 UID: 0 PID: 7878 Comm: syz.2.280 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.429459][ T7878] Tainted: [L]=SOFTLOCKUP [ 244.429465][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.429475][ T7878] Call Trace: [ 244.429482][ T7878] [ 244.429489][ T7878] dump_stack_lvl+0x100/0x190 [ 244.429513][ T7878] should_fail_ex.cold+0x5/0xa [ 244.429533][ T7878] should_failslab+0xc2/0x120 [ 244.429556][ T7878] __kmalloc_cache_noprof+0x91/0x6c0 [ 244.429584][ T7878] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 244.429624][ T7878] ? proc_do_submiturb+0x722/0x3820 [ 244.429655][ T7878] proc_do_submiturb+0x722/0x3820 [ 244.429696][ T7878] usbdev_ioctl+0x2adb/0x3aa0 [ 244.429727][ T7878] ? __pfx_usbdev_ioctl+0x10/0x10 [ 244.429758][ T7878] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 244.429783][ T7878] ? do_vfs_ioctl+0x226/0x13e0 [ 244.429806][ T7878] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 244.429835][ T7878] ? find_held_lock+0x2b/0x80 [ 244.429854][ T7878] ? __fget_files+0x215/0x3d0 [ 244.429878][ T7878] ? hook_file_ioctl_common+0x140/0x440 [ 244.429913][ T7878] ? __pfx_usbdev_ioctl+0x10/0x10 [ 244.429941][ T7878] __x64_sys_ioctl+0x18e/0x210 [ 244.429965][ T7878] do_syscall_64+0x115/0x840 [ 244.429992][ T7878] ? clear_bhb_loop+0x40/0x90 [ 244.430021][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.430039][ T7878] RIP: 0033:0x7f4c7299de59 [ 244.430054][ T7878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.430070][ T7878] RSP: 002b:00007f4c7382c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.430088][ T7878] RAX: ffffffffffffffda RBX: 00007f4c72c25fa0 RCX: 00007f4c7299de59 [ 244.430099][ T7878] RDX: 0000200000000100 RSI: 000000008038550a RDI: 0000000000000007 [ 244.430110][ T7878] RBP: 00007f4c72a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 244.430124][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.430135][ T7878] R13: 00007f4c72c26038 R14: 00007f4c72c25fa0 R15: 00007ffdafe00978 [ 244.430158][ T7878] [ 249.800075][ T5633] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 249.800101][ T5633] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 249.816188][ T5633] Bluetooth: hci2: Unknown advertising packet type: 0x3e [ 249.816230][ T5633] Bluetooth: hci2: adv larger than maximum supported [ 249.825677][ T5633] Bluetooth: hci2: Malformed LE Event: 0x0d [ 250.087357][ T1156] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 0 with max blocks 1 with error 117 [ 250.187314][ T1156] EXT4-fs (sda1): This should not happen!! Data will be lost [ 250.187314][ T1156] [ 250.248121][ T1156] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 2 with error 117 [ 250.326265][ T1156] EXT4-fs (sda1): This should not happen!! Data will be lost [ 250.326265][ T1156] [ 250.407534][ T1156] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 2 with error 117 [ 250.502605][ T1156] EXT4-fs (sda1): This should not happen!! Data will be lost [ 250.502605][ T1156] [ 252.015731][ T1156] bridge_slave_1: left allmulticast mode [ 252.051436][ T1156] bridge_slave_1: left promiscuous mode [ 252.087810][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.163841][ T1156] bridge_slave_0: left allmulticast mode [ 252.201842][ T1156] bridge_slave_0: left promiscuous mode [ 252.239657][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.041061][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.056113][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.067656][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.077884][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.085715][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.118917][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.183370][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.233856][ T1156] bond0 (unregistering): Released all slaves [ 254.022762][ T1156] hsr_slave_0: left promiscuous mode [ 254.054940][ T1156] hsr_slave_1: left promiscuous mode [ 254.089566][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.128495][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.166014][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.201352][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.313840][ T1156] veth1_macvtap: left promiscuous mode [ 254.339023][ T1156] veth0_macvtap: left promiscuous mode [ 254.363159][ T1156] veth1_vlan: left promiscuous mode [ 254.389551][ T1156] veth0_vlan: left promiscuous mode [ 255.137828][ T5640] Bluetooth: hci2: command tx timeout [ 255.302659][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 255.334508][ T8002] Process accounting paused [ 255.382991][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 255.395659][ T5640] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 256.022644][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.044137][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.217758][ T5640] Bluetooth: hci2: command tx timeout [ 258.205131][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.237538][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.279941][ T7990] bridge_slave_0: entered allmulticast mode [ 258.318781][ T7990] bridge_slave_0: entered promiscuous mode [ 258.365992][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.395750][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.432527][ T7990] bridge_slave_1: entered allmulticast mode [ 258.463234][ T7990] bridge_slave_1: entered promiscuous mode [ 258.614728][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.681879][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.835122][ T7990] team0: Port device team_slave_0 added [ 259.025828][ T7990] team0: Port device team_slave_1 added [ 259.045832][ T8048] Process accounting paused [ 259.200933][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.239961][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.298956][ T5640] Bluetooth: hci2: command tx timeout [ 259.354839][ T7990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.420092][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.443349][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.548505][ T7990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.848644][ T7990] hsr_slave_0: entered promiscuous mode [ 259.881730][ T7990] hsr_slave_1: entered promiscuous mode [ 259.903218][ T7990] debugfs: 'hsr0' already exists in 'hsr' [ 259.934468][ T7990] Cannot create hsr debugfs directory [ 260.746241][ T8077] netlink: 350 bytes leftover after parsing attributes in process `syz.0.311'. [ 260.767569][ T7990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 260.849954][ T7990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.888248][ T7990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 260.930121][ T7990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.967340][ T7990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.014600][ T7990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 261.047108][ T7990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.189189][ T7990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.379553][ T5640] Bluetooth: hci2: command tx timeout [ 261.541091][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.628027][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.684563][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.691797][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.801947][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.809143][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.770007][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.972520][ T8129] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 2 with error 117 [ 263.996118][ T7990] veth0_vlan: entered promiscuous mode [ 264.092288][ T7990] veth1_vlan: entered promiscuous mode [ 264.206726][ T8129] EXT4-fs (sda1): This should not happen!! Data will be lost [ 264.206726][ T8129] [ 264.256468][ T7990] veth0_macvtap: entered promiscuous mode [ 264.314653][ T7990] veth1_macvtap: entered promiscuous mode [ 264.434395][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.497615][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.568495][ T1001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.632249][ T1001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.682912][ T1001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.737048][ T1001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.045014][ T8149] FAULT_INJECTION: forcing a failure. [ 265.045014][ T8149] name failslab, interval 1, probability 0, space 0, times 0 [ 265.102275][ T8149] CPU: 0 UID: 0 PID: 8149 Comm: syz.3.319 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.102306][ T8149] Tainted: [L]=SOFTLOCKUP [ 265.102312][ T8149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.102323][ T8149] Call Trace: [ 265.102329][ T8149] [ 265.102337][ T8149] dump_stack_lvl+0x100/0x190 [ 265.102361][ T8149] should_fail_ex.cold+0x5/0xa [ 265.102381][ T8149] should_failslab+0xc2/0x120 [ 265.102404][ T8149] __kmalloc_noprof+0xfc/0x820 [ 265.102424][ T8149] ? tomoyo_profile+0x47/0x60 [ 265.102450][ T8149] ? tomoyo_supervisor+0x65d/0x1340 [ 265.102480][ T8149] tomoyo_supervisor+0x65d/0x1340 [ 265.102510][ T8149] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 265.102551][ T8149] ? tomoyo_check_path_acl+0x141/0x210 [ 265.102572][ T8149] ? tomoyo_check_acl+0x1f7/0x410 [ 265.102608][ T8149] tomoyo_path_permission+0x270/0x3b0 [ 265.102630][ T8149] tomoyo_check_open_permission+0x34d/0x3c0 [ 265.102651][ T8149] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 265.102679][ T8149] ? hook_file_open+0x24f/0x8f0 [ 265.102717][ T8149] ? path_get+0x61/0x80 [ 265.102737][ T8149] tomoyo_file_open+0x6b/0x90 [ 265.102765][ T8149] security_file_open+0xb5/0x1e0 [ 265.102787][ T8149] do_dentry_open+0x588/0x14d0 [ 265.102821][ T8149] vfs_open+0x82/0x3f0 [ 265.102844][ T8149] path_openat+0x2873/0x4280 [ 265.102882][ T8149] ? __pfx_path_openat+0x10/0x10 [ 265.102916][ T8149] do_file_open+0x20e/0x430 [ 265.102946][ T8149] ? __pfx_do_file_open+0x10/0x10 [ 265.102989][ T8149] ? alloc_fd+0x471/0x7a0 [ 265.103019][ T8149] ? do_getname+0x191/0x390 [ 265.103040][ T8149] do_sys_openat2+0x10f/0x1e0 [ 265.103062][ T8149] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.103085][ T8149] ? __fget_files+0x21f/0x3d0 [ 265.103115][ T8149] __x64_sys_openat+0x12d/0x210 [ 265.103137][ T8149] ? __pfx___x64_sys_openat+0x10/0x10 [ 265.103168][ T8149] do_syscall_64+0x115/0x840 [ 265.103195][ T8149] ? clear_bhb_loop+0x40/0x90 [ 265.103216][ T8149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.103242][ T8149] RIP: 0033:0x7f80c9d9de59 [ 265.103258][ T8149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.103275][ T8149] RSP: 002b:00007f80c7fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 265.103292][ T8149] RAX: ffffffffffffffda RBX: 00007f80ca026090 RCX: 00007f80c9d9de59 [ 265.103303][ T8149] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 265.103314][ T8149] RBP: 00007f80c9e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 265.103324][ T8149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.103335][ T8149] R13: 00007f80ca026128 R14: 00007f80ca026090 R15: 00007fff8541be88 [ 265.103358][ T8149] [ 266.179787][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.206473][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.389354][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.433815][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.383540][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.389906][ T8179] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 269.456646][ T8179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 269.508727][ T8179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.537232][ T8179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.566485][ T8179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 269.629687][ T8179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 271.464808][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout [ 271.544628][ T5633] Bluetooth: hci1: command 0x0c1a tx timeout [ 271.551640][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 271.643178][ T8224] Ignoring unsupported numa_zonelist_order value: [ 271.701573][ T8225] random: crng reseeded on system resumption [ 272.249811][ T8228] ubi: mtd0 is already attached to ubi1 [ 273.625718][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.095437][ T8242] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 1 with error 117 [ 274.221074][ T8242] EXT4-fs (sda1): This should not happen!! Data will be lost [ 274.221074][ T8242] [ 274.453549][ T8247] FAULT_INJECTION: forcing a failure. [ 274.453549][ T8247] name failslab, interval 1, probability 0, space 0, times 0 [ 274.603806][ T8247] CPU: 0 UID: 0 PID: 8247 Comm: syz.0.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.603836][ T8247] Tainted: [L]=SOFTLOCKUP [ 274.603843][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 274.603853][ T8247] Call Trace: [ 274.603859][ T8247] [ 274.603867][ T8247] dump_stack_lvl+0x100/0x190 [ 274.603892][ T8247] should_fail_ex.cold+0x5/0xa [ 274.603912][ T8247] should_failslab+0xc2/0x120 [ 274.603935][ T8247] __kmalloc_noprof+0xfc/0x820 [ 274.603955][ T8247] ? mpi_alloc_limb_space+0x31/0x60 [ 274.603982][ T8247] mpi_alloc_limb_space+0x31/0x60 [ 274.604002][ T8247] mpi_powm+0x1083/0x1e50 [ 274.604032][ T8247] ? __pfx_mpi_powm+0x10/0x10 [ 274.604052][ T8247] ? mpi_free+0xa0/0x150 [ 274.604070][ T8247] ? mpi_free+0xe1/0x150 [ 274.604088][ T8247] ? kfree+0x22b/0x6c0 [ 274.604124][ T8247] ? mpi_free+0xe6/0x150 [ 274.604147][ T8247] rsa_enc+0x1fe/0x3b0 [ 274.604165][ T8247] ? __pfx_rsa_enc+0x10/0x10 [ 274.604182][ T8247] ? __virt_addr_valid+0x239/0x430 [ 274.604200][ T8247] ? sg_init_one+0xf5/0x1b0 [ 274.604221][ T8247] rsassa_pkcs1_verify+0x4eb/0xc20 [ 274.604248][ T8247] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 274.604281][ T8247] ? rsa_max_size+0xd/0x70 [ 274.604296][ T8247] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 274.604320][ T8247] public_key_verify_signature+0x5ee/0x910 [ 274.604347][ T8247] ? __pfx_public_key_verify_signature+0x10/0x10 [ 274.604380][ T8247] ? asymmetric_key_generate_id+0x7e/0x180 [ 274.604405][ T8247] x509_check_for_self_signed+0x325/0x510 [ 274.604433][ T8247] x509_cert_parse+0x60c/0x910 [ 274.604455][ T8247] ? ___sys_sendmsg+0x190/0x1e0 [ 274.604479][ T8247] ? __sys_sendmsg+0x160/0x210 [ 274.604497][ T8247] ? do_syscall_64+0x115/0x840 [ 274.604526][ T8247] pkcs7_extract_cert+0xa4/0x380 [ 274.604555][ T8247] asn1_ber_decoder+0x12b3/0x2170 [ 274.604592][ T8247] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 274.604625][ T8247] ? kasan_save_track+0x14/0x30 [ 274.604644][ T8247] ? __kasan_kmalloc+0xaa/0xb0 [ 274.604664][ T8247] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 274.604692][ T8247] ? pkcs7_parse_message+0x15f/0x870 [ 274.604721][ T8247] pkcs7_parse_message+0x289/0x870 [ 274.604750][ T8247] verify_pkcs7_signature+0x30/0xa0 [ 274.604781][ T8247] valid_regdb+0x211/0x590 [ 274.604805][ T8247] ? __pfx_valid_regdb+0x10/0x10 [ 274.604824][ T8247] ? __kasan_kmalloc+0xaa/0xb0 [ 274.604847][ T8247] reg_reload_regdb+0x11a/0x460 [ 274.604871][ T8247] ? __pfx_reg_reload_regdb+0x10/0x10 [ 274.604896][ T8247] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 274.604911][ T8247] ? nl80211_pre_doit+0x19a/0xae0 [ 274.604930][ T8247] genl_family_rcv_msg_doit+0x214/0x300 [ 274.604951][ T8247] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 274.604969][ T8247] ? genl_get_cmd+0x3e7/0x760 [ 274.605002][ T8247] ? bpf_lsm_capable+0x9/0x10 [ 274.605019][ T8247] ? security_capable+0x80/0x260 [ 274.605050][ T8247] genl_rcv_msg+0x560/0x800 [ 274.605069][ T8247] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.605090][ T8247] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 274.605117][ T8247] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 274.605140][ T8247] ? __pfx_nl80211_post_doit+0x10/0x10 [ 274.605167][ T8247] netlink_rcv_skb+0x159/0x420 [ 274.605193][ T8247] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.605212][ T8247] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.605249][ T8247] ? netlink_deliver_tap+0x1ae/0xcc0 [ 274.605278][ T8247] genl_rcv+0x28/0x40 [ 274.605304][ T8247] netlink_unicast+0x585/0x850 [ 274.605334][ T8247] ? __pfx_netlink_unicast+0x10/0x10 [ 274.605367][ T8247] netlink_sendmsg+0x8b0/0xda0 [ 274.605398][ T8247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.605427][ T8247] ? apparmor_socket_sendmsg+0x15b/0x270 [ 274.605458][ T8247] ____sys_sendmsg+0xa4d/0xbe0 [ 274.605482][ T8247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.605509][ T8247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.605540][ T8247] ? plist_check_list+0x1b8/0x280 [ 274.605562][ T8247] ? plist_del+0x308/0x510 [ 274.605586][ T8247] ___sys_sendmsg+0x190/0x1e0 [ 274.605617][ T8247] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.605641][ T8247] ? __lock_acquire+0x49f/0x1a40 [ 274.605667][ T8247] ? futex_wake+0x220/0x5e0 [ 274.605712][ T8247] __sys_sendmsg+0x160/0x210 [ 274.605732][ T8247] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.605764][ T8247] do_syscall_64+0x115/0x840 [ 274.605791][ T8247] ? clear_bhb_loop+0x40/0x90 [ 274.605817][ T8247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.605836][ T8247] RIP: 0033:0x7fb41f79de59 [ 274.605852][ T8247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.605869][ T8247] RSP: 002b:00007fb420694028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.605886][ T8247] RAX: ffffffffffffffda RBX: 00007fb41fa26090 RCX: 00007fb41f79de59 [ 274.605898][ T8247] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 000000000000000a [ 274.605908][ T8247] RBP: 00007fb41f833e6f R08: 0000000000000000 R09: 0000000000000000 [ 274.605919][ T8247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.605929][ T8247] R13: 00007fb41fa26128 R14: 00007fb41fa26090 R15: 00007ffdbeb08118 [ 274.605952][ T8247] [ 275.755159][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 276.140615][ T5633] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 277.340902][ T1001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.626995][ T1001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.842158][ T1001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.995150][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.013931][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.024147][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.032399][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.040223][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.127389][ T1001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.954426][ T1001] bridge_slave_1: left allmulticast mode [ 278.996041][ T1001] bridge_slave_1: left promiscuous mode [ 279.039796][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.192363][ T1001] bridge_slave_0: left allmulticast mode [ 279.216359][ T1001] bridge_slave_0: left promiscuous mode [ 279.245373][ T1001] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.111111][ T5640] Bluetooth: hci2: command tx timeout [ 280.302608][ T8285] Process accounting resumed [ 280.419990][ T1001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.491068][ T1001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.538050][ T1001] bond0 (unregistering): Released all slaves [ 280.557873][ T8310] FAULT_INJECTION: forcing a failure. [ 280.557873][ T8310] name failslab, interval 1, probability 0, space 0, times 0 [ 280.615344][ T8310] CPU: 0 UID: 0 PID: 8310 Comm: syz.3.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.615375][ T8310] Tainted: [L]=SOFTLOCKUP [ 280.615381][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.615391][ T8310] Call Trace: [ 280.615397][ T8310] [ 280.615405][ T8310] dump_stack_lvl+0x100/0x190 [ 280.615430][ T8310] should_fail_ex.cold+0x5/0xa [ 280.615450][ T8310] should_failslab+0xc2/0x120 [ 280.615474][ T8310] kmem_cache_alloc_noprof+0x91/0x6a0 [ 280.615494][ T8310] ? kernel_text_address+0x8d/0x100 [ 280.615522][ T8310] ? vm_area_dup+0x27/0x8e0 [ 280.615559][ T8310] vm_area_dup+0x27/0x8e0 [ 280.615586][ T8310] __split_vma+0x18c/0xda0 [ 280.615616][ T8310] ? __pfx___split_vma+0x10/0x10 [ 280.615641][ T8310] ? __pfx_stack_trace_save+0x10/0x10 [ 280.615663][ T8310] ? crypto_sha256_init+0x16/0x20 [ 280.615691][ T8310] ? kasan_save_stack+0x3f/0x50 [ 280.615709][ T8310] ? kasan_save_stack+0x30/0x50 [ 280.615727][ T8310] ? kasan_save_track+0x14/0x30 [ 280.615745][ T8310] ? __kasan_kmalloc+0xaa/0xb0 [ 280.615762][ T8310] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 280.615792][ T8310] vms_gather_munmap_vmas+0x1d2/0x1720 [ 280.615822][ T8310] ? mtree_range_walk+0x72b/0xb70 [ 280.615850][ T8310] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 280.615886][ T8310] ? mas_walk+0x6ef/0x9b0 [ 280.615920][ T8310] __mmap_region+0x4a7/0x2db0 [ 280.615948][ T8310] ? integrity_audit_message+0x426/0x4f0 [ 280.615974][ T8310] ? __mutex_unlock_slowpath+0x35d/0x930 [ 280.616002][ T8310] ? __pfx___mmap_region+0x10/0x10 [ 280.616030][ T8310] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.616074][ T8310] ? __pfx_ima_add_template_entry+0x10/0x10 [ 280.616105][ T8310] ? ima_calc_field_array_hash+0x378/0x440 [ 280.616132][ T8310] ? process_measurement+0x109c/0x2350 [ 280.616149][ T8310] ? process_measurement+0x109c/0x2350 [ 280.616170][ T8310] ? __mutex_unlock_slowpath+0x35d/0x930 [ 280.616201][ T8310] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.616229][ T8310] ? process_measurement+0x10a9/0x2350 [ 280.616246][ T8310] ? rcu_is_watching+0x12/0xc0 [ 280.616298][ T8310] mmap_region+0x527/0x620 [ 280.616317][ T8310] ? __pfx_mmap_region+0x10/0x10 [ 280.616334][ T8310] ? shmem_get_unmapped_area+0x141/0x960 [ 280.616360][ T8310] ? mtree_load+0x311/0xa90 [ 280.616375][ T8310] ? cap_mmap_addr+0x4b/0x120 [ 280.616401][ T8310] ? bpf_lsm_mmap_addr+0x9/0x30 [ 280.616427][ T8310] ? security_mmap_addr+0x71/0x1e0 [ 280.616448][ T8310] ? __get_unmapped_area+0x255/0x3e0 [ 280.616473][ T8310] do_mmap+0xc63/0x12f0 [ 280.616502][ T8310] ? __pfx_do_mmap+0x10/0x10 [ 280.616525][ T8310] ? __pfx_down_write_killable+0x10/0x10 [ 280.616554][ T8310] __do_sys_remap_file_pages+0x8d4/0xa10 [ 280.616587][ T8310] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 280.616611][ T8310] ? __x64_sys_futex+0x34f/0x4d0 [ 280.616626][ T8310] ? __x64_sys_futex+0x358/0x4d0 [ 280.616646][ T8310] ? xfd_validate_state+0x129/0x190 [ 280.616673][ T8310] do_syscall_64+0x115/0x840 [ 280.616699][ T8310] ? clear_bhb_loop+0x40/0x90 [ 280.616722][ T8310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.616740][ T8310] RIP: 0033:0x7f80c9d9de59 [ 280.616755][ T8310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.616772][ T8310] RSP: 002b:00007f80c7fd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 280.616789][ T8310] RAX: ffffffffffffffda RBX: 00007f80ca026090 RCX: 00007f80c9d9de59 [ 280.616800][ T8310] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000006a27 [ 280.616811][ T8310] RBP: 00007f80c9e33e6f R08: 0000000000000004 R09: 0000000000000000 [ 280.616821][ T8310] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 280.616831][ T8310] R13: 00007f80ca026128 R14: 00007f80ca026090 R15: 00007fff8541be88 [ 280.616853][ T8310] [ 281.306280][ T3305] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 0 with max blocks 1 with error 117 [ 281.321889][ T3305] EXT4-fs (sda1): This should not happen!! Data will be lost [ 281.321889][ T3305] [ 281.331901][ T3305] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 1 with error 117 [ 281.345030][ T3305] EXT4-fs (sda1): This should not happen!! Data will be lost [ 281.345030][ T3305] [ 281.355336][ T3305] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 1 with error 117 [ 281.367826][ T3305] EXT4-fs (sda1): This should not happen!! Data will be lost [ 281.367826][ T3305] [ 281.818466][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 282.192178][ T5640] Bluetooth: hci2: command tx timeout [ 282.618097][ T1001] hsr_slave_0: left promiscuous mode [ 282.643602][ T1001] hsr_slave_1: left promiscuous mode [ 282.672648][ T1001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.706835][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.736871][ T1001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.758286][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.794385][ T1001] veth1_macvtap: left promiscuous mode [ 282.827240][ T1001] veth0_macvtap: left promiscuous mode [ 282.853354][ T1001] veth1_vlan: left promiscuous mode [ 282.871123][ T1001] veth0_vlan: left promiscuous mode [ 283.329939][ T1001] team0 (unregistering): Port device team_slave_1 removed [ 283.358190][ T1001] team0 (unregistering): Port device team_slave_0 removed [ 283.549945][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 284.271670][ T5640] Bluetooth: hci2: command tx timeout [ 285.625432][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.653194][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.670210][ T8277] bridge_slave_0: entered allmulticast mode [ 285.694739][ T8277] bridge_slave_0: entered promiscuous mode [ 285.736127][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.762460][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.790067][ T8277] bridge_slave_1: entered allmulticast mode [ 285.818001][ T8277] bridge_slave_1: entered promiscuous mode [ 286.037353][ T8277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.150378][ T8385] futex_wake_op: syz.1.350 tries to shift op by -2048; fix this program [ 286.188240][ T8385] futex_wake_op: syz.1.350 tries to shift op by -2048; fix this program [ 286.222819][ T8277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.260175][ T8385] 0x000000000001-0x000000020000 : "" [ 286.313418][ T8386] ubi: mtd0 is already attached to ubi1 [ 286.352145][ T5640] Bluetooth: hci2: command tx timeout [ 286.401111][ T8385] ftl_cs: FTL header corrupt! [ 287.019106][ T8277] team0: Port device team_slave_0 added [ 287.080945][ T8277] team0: Port device team_slave_1 added [ 287.110649][ T8398] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 287.527363][ T8277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.573788][ T8277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.720234][ T8277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.790339][ T8277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.809930][ T8366] Process accounting resumed [ 287.827518][ T8277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.961774][ T8277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.400512][ T8277] hsr_slave_0: entered promiscuous mode [ 288.423670][ T8277] hsr_slave_1: entered promiscuous mode [ 288.446234][ T8277] debugfs: 'hsr0' already exists in 'hsr' [ 288.468822][ T8277] Cannot create hsr debugfs directory [ 289.996668][ T8277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 290.074613][ T8277] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 290.116930][ T8277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 290.205455][ T8277] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.255939][ T8277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 290.325901][ T8277] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.371281][ T8277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.429754][ T8277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 291.077223][ T8277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.313965][ T8277] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.366024][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.373217][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.473456][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.480706][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.641099][ T8277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.971762][ T8277] veth0_vlan: entered promiscuous mode [ 294.020536][ T8277] veth1_vlan: entered promiscuous mode [ 294.118227][ T8277] veth0_macvtap: entered promiscuous mode [ 294.169203][ T8277] veth1_macvtap: entered promiscuous mode [ 294.258491][ T8277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.314875][ T8277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.374125][ T1172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.427014][ T1172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.478904][ T1172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.528290][ T1172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.771538][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.829956][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.973739][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.023313][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.339625][ T8531] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 298.320829][ T5640] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 298.320858][ T5640] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 298.337624][ T5640] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 299.908431][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.371'. [ 299.963428][ T8577] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 301.953286][ T8602] FAULT_INJECTION: forcing a failure. [ 301.953286][ T8602] name failslab, interval 1, probability 0, space 0, times 0 [ 302.024535][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 302.158704][ T8602] CPU: 0 UID: 0 PID: 8602 Comm: syz.3.374 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.158737][ T8602] Tainted: [L]=SOFTLOCKUP [ 302.158744][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.158756][ T8602] Call Trace: [ 302.158762][ T8602] [ 302.158769][ T8602] dump_stack_lvl+0x100/0x190 [ 302.158794][ T8602] should_fail_ex.cold+0x5/0xa [ 302.158814][ T8602] should_failslab+0xc2/0x120 [ 302.158838][ T8602] kmem_cache_alloc_noprof+0x91/0x6a0 [ 302.158857][ T8602] ? __proc_create+0xc1/0x8f0 [ 302.158886][ T8602] ? __proc_create+0xc1/0x8f0 [ 302.158913][ T8602] ? __proc_create+0x247/0x8f0 [ 302.158943][ T8602] __proc_create+0x247/0x8f0 [ 302.158972][ T8602] ? __pfx___proc_create+0x10/0x10 [ 302.159003][ T8602] ? _raw_write_unlock+0x28/0x50 [ 302.159030][ T8602] ? proc_register+0x56d/0x910 [ 302.159061][ T8602] proc_create_reg+0x75/0x170 [ 302.159078][ T8602] ? __pfx_can_reset_stats_proc_show+0x10/0x10 [ 302.159098][ T8602] proc_create_net_single+0x86/0x180 [ 302.159127][ T8602] ? __pfx_proc_create_net_single+0x10/0x10 [ 302.159158][ T8602] ? round_jiffies+0x10a/0x160 [ 302.159189][ T8602] can_init_proc+0x112/0x4b0 [ 302.159217][ T8602] can_pernet_init+0x1e4/0x370 [ 302.159249][ T8602] ? __pfx_can_pernet_init+0x10/0x10 [ 302.159276][ T8602] ops_init+0x1e2/0x5f0 [ 302.159302][ T8602] setup_net+0x118/0x3a0 [ 302.159324][ T8602] ? __pfx_setup_net+0x10/0x10 [ 302.159346][ T8602] ? mutex_init_lockdep+0xf1/0x120 [ 302.159378][ T8602] copy_net_ns+0x46f/0x7c0 [ 302.159403][ T8602] create_new_namespaces+0x3ea/0xac0 [ 302.159438][ T8602] unshare_nsproxy_namespaces+0xf2/0x220 [ 302.159469][ T8602] ksys_unshare+0x438/0xab0 [ 302.159491][ T8602] ? __pfx_ksys_unshare+0x10/0x10 [ 302.159520][ T8602] __x64_sys_unshare+0x31/0x40 [ 302.159540][ T8602] do_syscall_64+0x115/0x840 [ 302.159567][ T8602] ? clear_bhb_loop+0x40/0x90 [ 302.159588][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.159607][ T8602] RIP: 0033:0x7f80c9d9de59 [ 302.159624][ T8602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.159642][ T8602] RSP: 002b:00007f80c7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 302.159660][ T8602] RAX: ffffffffffffffda RBX: 00007f80ca025fa0 RCX: 00007f80c9d9de59 [ 302.159672][ T8602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 302.159682][ T8602] RBP: 00007f80c9e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 302.159693][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.159703][ T8602] R13: 00007f80ca026038 R14: 00007f80ca025fa0 R15: 00007fff8541be88 [ 302.159725][ T8602] [ 305.333912][ T8641] futex_wake_op: syz.3.382 tries to shift op by -2048; fix this program [ 305.391231][ T8641] futex_wake_op: syz.3.382 tries to shift op by -2048; fix this program [ 305.475196][ T8643] ubi: mtd0 is already attached to ubi1 [ 305.502480][ T8641] futex_wake_op: syz.3.382 tries to shift op by -2048; fix this program [ 306.059332][ T8636] Process accounting resumed [ 306.327117][ T8646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.394940][ T8652] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 1 with error 117 [ 306.512514][ T8652] EXT4-fs (sda1): This should not happen!! Data will be lost [ 306.512514][ T8652] [ 306.568248][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.385'. [ 307.385745][ T8646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.578692][ T8646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.668463][ T8646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.210074][ T8675] device-mapper: ioctl: Invalid ioctl structure: name d, dev 3000000000 [ 310.945283][ T8685] Process accounting resumed [ 311.573371][ T8699] Process accounting paused [ 311.649686][ T14] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 0 with max blocks 1 with error 117 [ 311.728318][ T14] EXT4-fs (sda1): This should not happen!! Data will be lost [ 311.728318][ T14] [ 311.790929][ T14] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 2 with error 117 [ 311.877408][ T14] EXT4-fs (sda1): This should not happen!! Data will be lost [ 311.877408][ T14] [ 311.943687][ T14] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 1 with error 117 [ 312.014332][ T14] EXT4-fs (sda1): This should not happen!! Data will be lost [ 312.014332][ T14] [ 312.597181][ T3305] bridge_slave_1: left allmulticast mode [ 312.615673][ T3305] bridge_slave_1: left promiscuous mode [ 312.632192][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.668916][ T3305] bridge_slave_0: left allmulticast mode [ 312.702075][ T3305] bridge_slave_0: left promiscuous mode [ 312.728204][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.196874][ T3305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.263304][ T3305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.306002][ T30] audit: type=1800 audit(4294967444.336:13): pid=8724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.401" name="dbroot" dev="configfs" ino=25679 res=0 errno=0 [ 313.327510][ T3305] bond0 (unregistering): Released all slaves [ 313.353775][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.369098][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.378725][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.388714][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.403329][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.765323][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.777746][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.789930][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.814469][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.826126][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.001646][ T3305] hsr_slave_0: left promiscuous mode [ 314.040385][ T3305] hsr_slave_1: left promiscuous mode [ 314.069349][ T3305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.118982][ T3305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.162570][ T3305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.202783][ T3305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.271869][ T3305] veth1_macvtap: left promiscuous mode [ 314.290422][ T3305] veth0_macvtap: left promiscuous mode [ 314.308896][ T3305] veth1_vlan: left promiscuous mode [ 314.340401][ T3305] veth0_vlan: left promiscuous mode [ 314.954394][ T3305] team0 (unregistering): Port device team_slave_1 removed [ 314.992424][ T3305] team0 (unregistering): Port device team_slave_0 removed [ 315.488577][ T5640] Bluetooth: hci1: command tx timeout [ 315.897865][ T5640] Bluetooth: hci2: command tx timeout [ 316.073193][ T3305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.203331][ T5640] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 316.452193][ T3305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.639732][ T3305] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.840975][ T3305] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.492186][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.502199][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.567777][ T5640] Bluetooth: hci1: command tx timeout [ 317.967746][ T5640] Bluetooth: hci2: command tx timeout [ 318.156496][ T3305] bridge_slave_1: left allmulticast mode [ 318.184009][ T3305] bridge_slave_1: left promiscuous mode [ 318.212049][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.264783][ T3305] bridge_slave_0: left allmulticast mode [ 318.292857][ T3305] bridge_slave_0: left promiscuous mode [ 318.321712][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.911445][ T3305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.951751][ T3305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.987376][ T3305] bond0 (unregistering): Released all slaves [ 319.359623][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 319.488080][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.498747][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.506153][ T8727] bridge_slave_0: entered allmulticast mode [ 319.520611][ T8727] bridge_slave_0: entered promiscuous mode [ 319.565607][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.585467][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.593468][ T8727] bridge_slave_1: entered allmulticast mode [ 319.601689][ T8727] bridge_slave_1: entered promiscuous mode [ 319.628377][ T3305] hsr_slave_0: left promiscuous mode [ 319.636388][ T3305] hsr_slave_1: left promiscuous mode [ 319.644104][ T3305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.652318][ T5640] Bluetooth: hci1: command tx timeout [ 319.664081][ T3305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.672404][ T3305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.681908][ T3305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.695699][ T3305] veth1_macvtap: left promiscuous mode [ 319.701646][ T3305] veth0_macvtap: left promiscuous mode [ 319.707384][ T3305] veth1_vlan: left promiscuous mode [ 319.714047][ T3305] veth0_vlan: left promiscuous mode [ 319.947711][ T3305] team0 (unregistering): Port device team_slave_1 removed [ 319.965270][ T3305] team0 (unregistering): Port device team_slave_0 removed [ 320.049911][ T5640] Bluetooth: hci2: command tx timeout [ 320.183267][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.284718][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.471562][ T8727] team0: Port device team_slave_0 added [ 320.507425][ T8738] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.546424][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.584303][ T8738] bridge_slave_0: entered allmulticast mode [ 320.620161][ T8738] bridge_slave_0: entered promiscuous mode [ 320.666398][ T8727] team0: Port device team_slave_1 added [ 320.776177][ T8738] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.812543][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.835713][ T8738] bridge_slave_1: entered allmulticast mode [ 320.878144][ T8738] bridge_slave_1: entered promiscuous mode [ 320.971722][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.005866][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.133747][ T8727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.277239][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.317066][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.427511][ T8727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.494743][ T8738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.548256][ T8738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.733158][ T5640] Bluetooth: hci1: command tx timeout [ 321.745192][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 322.028118][ T8738] team0: Port device team_slave_0 added [ 322.082015][ T8738] team0: Port device team_slave_1 added [ 322.131312][ T5640] Bluetooth: hci2: command tx timeout [ 322.150309][ T8727] hsr_slave_0: entered promiscuous mode [ 322.205203][ T8727] hsr_slave_1: entered promiscuous mode [ 322.422071][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.439514][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.491489][ T8738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.519515][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.535262][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.590296][ T8738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.789758][ T8738] hsr_slave_0: entered promiscuous mode [ 322.814122][ T8738] hsr_slave_1: entered promiscuous mode [ 322.834696][ T8738] debugfs: 'hsr0' already exists in 'hsr' [ 322.858594][ T8738] Cannot create hsr debugfs directory [ 323.746743][ T8861] sctp: [Deprecated]: syz.3.419 (pid 8861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.746743][ T8861] Use struct sctp_sack_info instead [ 323.796210][ T8727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.842588][ T8727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.878796][ T8727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 323.921496][ T8727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.958519][ T8727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.009313][ T8727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.175244][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 324.216907][ T8727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.273582][ T8727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.054362][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.353844][ T8727] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.535766][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.543136][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.747400][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.754645][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.927463][ T8738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 325.953614][ T8738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.050493][ T8738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.128614][ T8738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.153673][ T8738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.188801][ T8738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.600716][ T8738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.640792][ T8738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.637705][ T8738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.768979][ T8738] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.864682][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.871912][ T3305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.930225][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.937558][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.901644][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.487290][ T8738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.630019][ T8738] veth0_vlan: entered promiscuous mode [ 329.661629][ T8727] veth0_vlan: entered promiscuous mode [ 329.683905][ T8738] veth1_vlan: entered promiscuous mode [ 329.720176][ T8727] veth1_vlan: entered promiscuous mode [ 329.770566][ T8738] veth0_macvtap: entered promiscuous mode [ 329.799328][ T8738] veth1_macvtap: entered promiscuous mode [ 329.831870][ T8727] veth0_macvtap: entered promiscuous mode [ 329.860670][ T8727] veth1_macvtap: entered promiscuous mode [ 329.918669][ T8738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.946793][ T8738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.962299][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.001376][ T1172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.024648][ T1172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.043262][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.067030][ T1172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.085273][ T1172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.381572][ T3305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.406672][ T3305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.445395][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.483138][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.529656][ T3305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.557724][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.569361][ T3305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.589058][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.969745][ T8995] NFSD: Failed to start, no listeners configured. [ 332.297590][ T8999] NFSD: Failed to start, no listeners configured. [ 335.276131][ T9016] Process accounting resumed [ 336.085636][ T9034] FAULT_INJECTION: forcing a failure. [ 336.085636][ T9034] name failslab, interval 1, probability 0, space 0, times 0 [ 336.289063][ T9034] CPU: 0 UID: 0 PID: 9034 Comm: syz.0.423 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.289095][ T9034] Tainted: [L]=SOFTLOCKUP [ 336.289102][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 336.289112][ T9034] Call Trace: [ 336.289118][ T9034] [ 336.289125][ T9034] dump_stack_lvl+0x100/0x190 [ 336.289150][ T9034] should_fail_ex.cold+0x5/0xa [ 336.289172][ T9034] should_failslab+0xc2/0x120 [ 336.289195][ T9034] __kmalloc_cache_noprof+0x91/0x6c0 [ 336.289230][ T9034] ? rcu_is_watching+0x12/0xc0 [ 336.289251][ T9034] ? can_pernet_init+0xb7/0x370 [ 336.289283][ T9034] ? __pfx_can_pernet_init+0x10/0x10 [ 336.289312][ T9034] can_pernet_init+0xb7/0x370 [ 336.289342][ T9034] ? __pfx_can_pernet_init+0x10/0x10 [ 336.289370][ T9034] ops_init+0x1e2/0x5f0 [ 336.289394][ T9034] setup_net+0x118/0x3a0 [ 336.289416][ T9034] ? __pfx_setup_net+0x10/0x10 [ 336.289437][ T9034] ? mutex_init_lockdep+0xf1/0x120 [ 336.289472][ T9034] copy_net_ns+0x46f/0x7c0 [ 336.289498][ T9034] create_new_namespaces+0x3ea/0xac0 [ 336.289533][ T9034] unshare_nsproxy_namespaces+0xf2/0x220 [ 336.289565][ T9034] ksys_unshare+0x438/0xab0 [ 336.289587][ T9034] ? __pfx_ksys_unshare+0x10/0x10 [ 336.289616][ T9034] __x64_sys_unshare+0x31/0x40 [ 336.289636][ T9034] do_syscall_64+0x115/0x840 [ 336.289663][ T9034] ? clear_bhb_loop+0x40/0x90 [ 336.289685][ T9034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.289704][ T9034] RIP: 0033:0x7fc23b19de59 [ 336.289720][ T9034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.289738][ T9034] RSP: 002b:00007fc23bf83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 336.289756][ T9034] RAX: ffffffffffffffda RBX: 00007fc23b425fa0 RCX: 00007fc23b19de59 [ 336.289767][ T9034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 336.289777][ T9034] RBP: 00007fc23b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 336.289788][ T9034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.289798][ T9034] R13: 00007fc23b426038 R14: 00007fc23b425fa0 R15: 00007ffc841d39e8 [ 336.289821][ T9034] [ 337.000768][ T9040] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 1 with error 117 [ 337.043743][ T9040] EXT4-fs (sda1): This should not happen!! Data will be lost [ 337.043743][ T9040] [ 339.090288][ T9063] NFSD: Failed to start, no listeners configured. [ 339.318433][ T9071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.430'. [ 339.357076][ T9067] NFSD: Failed to start, no listeners configured. [ 339.373212][ T9068] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 1 with error 117 [ 339.470648][ T9071] ipvlan1: entered promiscuous mode [ 339.507245][ T9068] EXT4-fs (sda1): This should not happen!! Data will be lost [ 339.507245][ T9068] [ 339.567255][ T9071] ipvlan1: entered allmulticast mode [ 339.601626][ T9071] veth0_vlan: entered allmulticast mode [ 340.525291][ T1172] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 0 with max blocks 1 with error 117 [ 340.611597][ T1172] EXT4-fs (sda1): This should not happen!! Data will be lost [ 340.611597][ T1172] [ 340.667702][ T1172] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 2 with error 117 [ 340.735155][ T1172] EXT4-fs (sda1): This should not happen!! Data will be lost [ 340.735155][ T1172] [ 340.804950][ T1172] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 2 with error 117 [ 340.868573][ T1172] EXT4-fs (sda1): This should not happen!! Data will be lost [ 340.868573][ T1172] [ 341.074873][ T9082] Process accounting paused [ 341.335127][ T14] bridge_slave_1: left allmulticast mode [ 341.354594][ T14] bridge_slave_1: left promiscuous mode [ 341.391246][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.445628][ T14] bridge_slave_0: left allmulticast mode [ 341.481823][ T14] bridge_slave_0: left promiscuous mode [ 341.513016][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.213414][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.250110][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.283326][ T14] bond0 (unregistering): Released all slaves [ 342.395471][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.409818][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.421002][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.432844][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.441842][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.579250][ T5633] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 342.825665][ T14] hsr_slave_0: left promiscuous mode [ 342.848839][ T14] hsr_slave_1: left promiscuous mode [ 342.865402][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.889655][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.924220][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.947171][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.982612][ T14] veth1_macvtap: left promiscuous mode [ 342.993555][ T14] veth0_macvtap: left promiscuous mode [ 343.008194][ T14] veth1_vlan: left promiscuous mode [ 343.022106][ T14] veth0_vlan: left promiscuous mode [ 343.468973][ T14] team0 (unregistering): Port device team_slave_1 removed [ 343.505757][ T14] team0 (unregistering): Port device team_slave_0 removed [ 344.543141][ T5633] Bluetooth: hci1: command tx timeout [ 344.887911][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.043924][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.156661][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.215161][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.227217][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.237148][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.247283][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.259526][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.410311][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.519674][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.545174][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.559821][ T9098] bridge_slave_0: entered allmulticast mode [ 345.573172][ T9098] bridge_slave_0: entered promiscuous mode [ 345.648427][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.673583][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.693855][ T9098] bridge_slave_1: entered allmulticast mode [ 345.704574][ T9098] bridge_slave_1: entered promiscuous mode [ 345.859608][ T9098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.895300][ T9098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.944602][ T14] bridge_slave_1: left allmulticast mode [ 345.953711][ T14] bridge_slave_1: left promiscuous mode [ 345.969755][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.982687][ T3305] EXT4-fs: 4 callbacks suppressed [ 345.982704][ T3305] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 0 with max blocks 1 with error 117 [ 346.017032][ T14] bridge_slave_0: left allmulticast mode [ 346.030695][ T3305] EXT4-fs (sda1): This should not happen!! Data will be lost [ 346.030695][ T3305] [ 346.041589][ T14] bridge_slave_0: left promiscuous mode [ 346.053560][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.067256][ T3305] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 1 with error 117 [ 346.104694][ T3305] EXT4-fs (sda1): This should not happen!! Data will be lost [ 346.104694][ T3305] [ 346.145784][ T3305] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 1 with error 117 [ 346.187981][ T3305] EXT4-fs (sda1): This should not happen!! Data will be lost [ 346.187981][ T3305] [ 346.389204][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.414017][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.433841][ T14] bond0 (unregistering): Released all slaves [ 346.549342][ T9098] team0: Port device team_slave_0 added [ 346.574913][ T9098] team0: Port device team_slave_1 added [ 346.625228][ T5640] Bluetooth: hci1: command tx timeout [ 346.799440][ T14] hsr_slave_0: left promiscuous mode [ 346.812802][ T14] hsr_slave_1: left promiscuous mode [ 346.825124][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.842344][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.860165][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.868510][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.884069][ T14] veth1_macvtap: left promiscuous mode [ 346.890975][ T14] veth0_macvtap: left promiscuous mode [ 346.897672][ T14] veth1_vlan: left promiscuous mode [ 346.903580][ T14] veth0_vlan: left promiscuous mode [ 347.110424][ T14] team0 (unregistering): Port device team_slave_1 removed [ 347.129319][ T14] team0 (unregistering): Port device team_slave_0 removed [ 347.241486][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.251927][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.288732][ T9098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.320953][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 347.341486][ T9098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.352953][ T5640] Bluetooth: hci2: command tx timeout [ 347.371541][ T9098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.408465][ T9098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.559466][ T9098] hsr_slave_0: entered promiscuous mode [ 347.575289][ T9098] hsr_slave_1: entered promiscuous mode [ 348.101862][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.124925][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.142254][ T9123] bridge_slave_0: entered allmulticast mode [ 348.161011][ T9123] bridge_slave_0: entered promiscuous mode [ 348.259992][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.276355][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.293139][ T9123] bridge_slave_1: entered allmulticast mode [ 348.310375][ T9123] bridge_slave_1: entered promiscuous mode [ 348.430731][ T9123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.453200][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 348.467899][ T9123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.521827][ T9098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.545612][ T9098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 348.564425][ T9098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.585515][ T9098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 348.600086][ T9123] team0: Port device team_slave_0 added [ 348.608745][ T9098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.638528][ T9098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 348.658405][ T9123] team0: Port device team_slave_1 added [ 348.695325][ T9098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.703751][ T5640] Bluetooth: hci1: command tx timeout [ 348.716160][ T9098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 348.770195][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.784047][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.836072][ T9123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.878014][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.894100][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.948555][ T9123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.062954][ T9123] hsr_slave_0: entered promiscuous mode [ 349.086017][ T9123] hsr_slave_1: entered promiscuous mode [ 349.101730][ T9123] debugfs: 'hsr0' already exists in 'hsr' [ 349.116203][ T9123] Cannot create hsr debugfs directory [ 349.358433][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.377619][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 349.423944][ T5640] Bluetooth: hci2: command tx timeout [ 349.437888][ T9098] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.530850][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.538096][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.581674][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.588843][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.385713][ T9123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 350.407390][ T9123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 350.446093][ T9123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 350.486904][ T9123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 350.513798][ T9123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.551111][ T9123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 350.583849][ T9123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 350.615870][ T9123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 350.785200][ T5640] Bluetooth: hci1: command tx timeout [ 350.842848][ T9123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.913419][ T9123] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.952331][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.959491][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.017405][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.024588][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.061713][ T9098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.232385][ T9098] veth0_vlan: entered promiscuous mode [ 351.276492][ T9098] veth1_vlan: entered promiscuous mode [ 351.380672][ T9098] veth0_macvtap: entered promiscuous mode [ 351.426041][ T9098] veth1_macvtap: entered promiscuous mode [ 351.495465][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.504943][ T5640] Bluetooth: hci2: command tx timeout [ 351.551155][ T9098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.602335][ T1172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.638099][ T1172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.666654][ T1172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.683253][ T1172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.885824][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.918667][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.989429][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.019942][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.443245][ T9123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.576366][ T9123] veth0_vlan: entered promiscuous mode [ 352.603170][ T9123] veth1_vlan: entered promiscuous mode [ 352.692067][ T9123] veth0_macvtap: entered promiscuous mode [ 352.737067][ T9123] veth1_macvtap: entered promiscuous mode [ 352.808974][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.857137][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.901094][ T1001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.930848][ T1001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.980607][ T1001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.011353][ T1001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.223456][ T3305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.268033][ T3305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.367803][ T3305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.396931][ T3305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.585932][ T5640] Bluetooth: hci2: command tx timeout [ 354.270219][ T9253] Process accounting resumed [ 356.857547][ T9330] blktrace: Concurrent blktraces are not allowed on loop2 [ 357.181681][ T1001] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 0 with max blocks 1 with error 117 [ 357.271812][ T1001] EXT4-fs (sda1): This should not happen!! Data will be lost [ 357.271812][ T1001] [ 357.329559][ T1001] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 1 with error 117 [ 357.402296][ T1001] EXT4-fs (sda1): This should not happen!! Data will be lost [ 357.402296][ T1001] [ 357.464014][ T1001] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 1 with error 117 [ 357.532275][ T1001] EXT4-fs (sda1): This should not happen!! Data will be lost [ 357.532275][ T1001] [ 357.569853][ T9330] FAULT_INJECTION: forcing a failure. [ 357.569853][ T9330] name fail_futex, interval 1, probability 0, space 0, times 1 [ 357.610091][ T9330] CPU: 0 UID: 0 PID: 9330 Comm: syz.2.446 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.610121][ T9330] Tainted: [L]=SOFTLOCKUP [ 357.610127][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.610138][ T9330] Call Trace: [ 357.610144][ T9330] [ 357.610151][ T9330] dump_stack_lvl+0x100/0x190 [ 357.610248][ T9330] should_fail_ex.cold+0x5/0xa [ 357.610285][ T9330] get_futex_key+0x295/0x14f0 [ 357.610341][ T9330] ? __pfx_get_futex_key+0x10/0x10 [ 357.610369][ T9330] ? lock_acquire+0x1b9/0x370 [ 357.610417][ T9330] futex_wake+0xf4/0x5e0 [ 357.610447][ T9330] ? __pfx_futex_wake+0x10/0x10 [ 357.610469][ T9330] ? find_held_lock+0x2b/0x80 [ 357.610489][ T9330] ? exit_mm_release+0x19/0x30 [ 357.610522][ T9330] do_futex+0x2b2/0x440 [ 357.610540][ T9330] ? __pfx_do_futex+0x10/0x10 [ 357.610555][ T9330] ? __might_fault+0xc5/0x140 [ 357.610608][ T9330] mm_release+0x24a/0x2f0 [ 357.610638][ T9330] do_exit+0x707/0x2ae0 [ 357.610663][ T9330] ? __pfx_do_exit+0x10/0x10 [ 357.610685][ T9330] ? do_raw_spin_lock+0x128/0x260 [ 357.610701][ T9330] ? find_held_lock+0x2b/0x80 [ 357.610720][ T9330] ? get_signal+0x7e0/0x21e0 [ 357.610744][ T9330] do_group_exit+0xd5/0x2a0 [ 357.610768][ T9330] get_signal+0x1ec7/0x21e0 [ 357.610793][ T9330] ? __pfx_get_signal+0x10/0x10 [ 357.610812][ T9330] ? do_futex+0x190/0x440 [ 357.610831][ T9330] arch_do_signal_or_restart+0x91/0x7a0 [ 357.610871][ T9330] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 357.610911][ T9330] exit_to_user_mode_loop+0x139/0x6f0 [ 357.610950][ T9330] ? rcu_is_watching+0x12/0xc0 [ 357.610971][ T9330] do_syscall_64+0x652/0x840 [ 357.611090][ T9330] ? clear_bhb_loop+0x40/0x90 [ 357.611124][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.611142][ T9330] RIP: 0033:0x7fdac1d9de59 [ 357.611157][ T9330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.611176][ T9330] RSP: 002b:00007fdac2c150e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 357.611193][ T9330] RAX: fffffffffffffe00 RBX: 00007fdac2026098 RCX: 00007fdac1d9de59 [ 357.611204][ T9330] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdac2026098 [ 357.611214][ T9330] RBP: 00007fdac2026090 R08: 0000000000000000 R09: 0000000000000000 [ 357.611224][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.611235][ T9330] R13: 00007fdac2026128 R14: 00007ffc6781a5f0 R15: 00007ffc6781a6d8 [ 357.611257][ T9330] [ 363.093276][ T9374] Process accounting resumed [ 363.312841][ T9402] netlink: 342 bytes leftover after parsing attributes in process `syz.1.458'. [ 363.947784][ T9406] ubi9: attaching mtd2 [ 363.970435][ T9406] ubi9 error: ubi_attach_mtd_dev: bad VID header (10) or data offsets (74) [ 364.355600][ T9412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.461'. [ 365.983515][ T9429] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 1 with error 117 [ 366.082185][ T9429] EXT4-fs (sda1): This should not happen!! Data will be lost [ 366.082185][ T9429] [ 366.935543][ T1001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.377831][ T1001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.636337][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.651096][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.663691][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.678457][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.688002][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.750977][ T1001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.987125][ T1001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.756842][ T1001] bridge_slave_1: left allmulticast mode [ 368.784989][ T1001] bridge_slave_1: left promiscuous mode [ 368.818472][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.869296][ T1001] bridge_slave_0: left allmulticast mode [ 368.905251][ T1001] bridge_slave_0: left promiscuous mode [ 368.933564][ T1001] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.337440][ T9457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.467'. [ 369.754863][ T5633] Bluetooth: hci1: command tx timeout [ 369.792012][ T1001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.828060][ T1001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.861921][ T1001] bond0 (unregistering): Released all slaves [ 370.136666][ T9441] Process accounting resumed [ 370.575005][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 370.869716][ T1001] hsr_slave_0: left promiscuous mode [ 370.922305][ T1001] hsr_slave_1: left promiscuous mode [ 370.950460][ T1001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.991593][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.027687][ T1001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.073677][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.145267][ T1001] veth1_macvtap: left promiscuous mode [ 371.174805][ T1001] veth0_macvtap: left promiscuous mode [ 371.201127][ T1001] veth1_vlan: left promiscuous mode [ 371.232936][ T1001] veth0_vlan: left promiscuous mode [ 371.837527][ T5633] Bluetooth: hci1: command tx timeout [ 372.159041][ T1001] team0 (unregistering): Port device team_slave_1 removed [ 372.226316][ T1001] team0 (unregistering): Port device team_slave_0 removed [ 373.714659][ T9504] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 373.916000][ T5633] Bluetooth: hci1: command tx timeout [ 374.853206][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 375.018197][ T9447] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.055419][ T9447] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.089306][ T9447] bridge_slave_0: entered allmulticast mode [ 375.138566][ T9447] bridge_slave_0: entered promiscuous mode [ 375.350007][ T9447] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.410128][ T9447] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.449901][ T9447] bridge_slave_1: entered allmulticast mode [ 375.500082][ T9447] bridge_slave_1: entered promiscuous mode [ 375.741823][ T9447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.841065][ T9447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.996917][ T5633] Bluetooth: hci1: command tx timeout [ 376.090177][ T9447] team0: Port device team_slave_0 added [ 376.197814][ T9447] team0: Port device team_slave_1 added [ 376.767888][ T9447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.803858][ T9447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.902862][ T9447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.943114][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 376.986031][ T9447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.003981][ T9447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.093684][ T9447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.313233][ T9447] hsr_slave_0: entered promiscuous mode [ 377.349214][ T9447] hsr_slave_1: entered promiscuous mode [ 378.552950][ T9581] bond0: invalid ARP target specified [ 378.890467][ T9581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.479'. [ 378.962178][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.973403][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.985501][ T9594] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 382.296881][ T9648] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 386.254795][ T9707] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 387.982582][ T9711] Process accounting resumed [ 388.041599][ T1001] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 0 with max blocks 1 with error 117 [ 388.088929][ T1001] EXT4-fs (sda1): This should not happen!! Data will be lost [ 388.088929][ T1001] [ 388.127352][ T1001] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:6: bg 2: bad block bitmap checksum [ 388.167580][ T1001] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 983 with max blocks 41 with error 74 [ 388.213881][ T1001] EXT4-fs (sda1): This should not happen!! Data will be lost [ 388.213881][ T1001] [ 388.265692][ T1001] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 0 with max blocks 1 with error 117 [ 388.325957][ T1001] EXT4-fs (sda1): This should not happen!! Data will be lost [ 388.325957][ T1001] [ 388.369357][ T1001] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 2 with error 117 [ 388.432770][ T1001] EXT4-fs (sda1): This should not happen!! Data will be lost [ 388.432770][ T1001] [ 389.384757][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.637614][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.762768][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.876340][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.899071][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.913002][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.922336][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.929942][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 390.048140][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.787148][ T36] bridge_slave_1: left allmulticast mode [ 390.812801][ T36] bridge_slave_1: left promiscuous mode [ 390.841788][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.876958][ T36] bridge_slave_0: left allmulticast mode [ 390.893738][ T36] bridge_slave_0: left promiscuous mode [ 390.912503][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.467736][ T9759] hub 1-0:1.0: USB hub found [ 391.522810][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.567971][ T9759] hub 1-0:1.0: 1 port detected [ 391.590161][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.623194][ T36] bond0 (unregistering): Released all slaves [ 391.657368][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 392.006000][ T5640] Bluetooth: hci2: command tx timeout [ 392.124060][ T36] hsr_slave_0: left promiscuous mode [ 392.147043][ T36] hsr_slave_1: left promiscuous mode [ 392.164121][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.191636][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.218622][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.242647][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.291908][ T36] veth1_macvtap: left promiscuous mode [ 392.310249][ T36] veth0_macvtap: left promiscuous mode [ 392.332074][ T36] veth1_vlan: left promiscuous mode [ 392.349772][ T36] veth0_vlan: left promiscuous mode [ 393.079864][ T36] team0 (unregistering): Port device team_slave_1 removed [ 393.151981][ T36] team0 (unregistering): Port device team_slave_0 removed [ 393.190550][ T9794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 393.207485][ T9794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.224320][ T9794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.232595][ T9794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.241942][ T9794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.649312][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 394.105399][ T9794] Bluetooth: hci2: command tx timeout [ 394.573212][ T9745] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.617177][ T9745] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.657670][ T9745] bridge_slave_0: entered allmulticast mode [ 394.693628][ T9745] bridge_slave_0: entered promiscuous mode [ 394.733094][ T9745] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.780024][ T9745] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.810585][ T9745] bridge_slave_1: entered allmulticast mode [ 394.852356][ T9745] bridge_slave_1: entered promiscuous mode [ 395.048210][ T9745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.095876][ T9745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.277389][ T9745] team0: Port device team_slave_0 added [ 395.286940][ T9794] Bluetooth: hci4: command tx timeout [ 395.331717][ T9745] team0: Port device team_slave_1 added [ 395.431900][ T9824] Process accounting paused [ 395.442398][ T9745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.466299][ T9745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.545346][ T9745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.589250][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 395.601690][ T9745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.618352][ T9745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.674909][ T9745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.744040][ T9830] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 395.887189][ T9745] hsr_slave_0: entered promiscuous mode [ 395.919954][ T9745] hsr_slave_1: entered promiscuous mode [ 395.949098][ T9745] debugfs: 'hsr0' already exists in 'hsr' [ 395.975484][ T9745] Cannot create hsr debugfs directory [ 396.170644][ T9794] Bluetooth: hci2: command tx timeout [ 396.490713][ T9852] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 396.516497][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.541316][ T9793] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.565073][ T9793] bridge_slave_0: entered allmulticast mode [ 396.609366][ T9793] bridge_slave_0: entered promiscuous mode [ 396.689385][ T9793] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.718178][ T9793] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.738941][ T9793] bridge_slave_1: entered allmulticast mode [ 396.771240][ T9793] bridge_slave_1: entered promiscuous mode [ 396.921107][ T9793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.946686][ T9793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.039601][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 397.065341][ T9793] team0: Port device team_slave_0 added [ 397.085172][ T9793] team0: Port device team_slave_1 added [ 397.180940][ T9793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.206328][ T9793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.267526][ T9793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.293518][ T9793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.317453][ T9793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.368922][ T9794] Bluetooth: hci4: command tx timeout [ 397.374426][ T9793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.501281][ T9793] hsr_slave_0: entered promiscuous mode [ 397.519423][ T9793] hsr_slave_1: entered promiscuous mode [ 397.538333][ T9793] debugfs: 'hsr0' already exists in 'hsr' [ 397.547934][ T9793] Cannot create hsr debugfs directory [ 398.248032][ T9794] Bluetooth: hci2: command tx timeout [ 399.448899][ T9794] Bluetooth: hci4: command tx timeout [ 401.529654][ T9794] Bluetooth: hci4: command tx timeout [ 418.748369][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 0 with max blocks 1 with error 117 [ 418.761660][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 418.761660][ T36] [ 418.880550][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 985 with max blocks 39 with error 117 [ 418.893461][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 418.893461][ T36] [ 418.905308][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 1 with error 117 [ 418.919399][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 418.919399][ T36] [ 428.422527][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.435243][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.449250][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.458715][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.466563][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.965438][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.972663][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.980661][ T9929] bridge_slave_0: entered allmulticast mode [ 428.989935][ T9929] bridge_slave_0: entered promiscuous mode [ 428.999091][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.006437][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.014344][ T9929] bridge_slave_1: entered allmulticast mode [ 429.021542][ T9929] bridge_slave_1: entered promiscuous mode [ 429.058788][ T9929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.072315][ T9929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.102432][ T9929] team0: Port device team_slave_0 added [ 429.111952][ T9929] team0: Port device team_slave_1 added [ 429.137174][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.144723][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.172229][ T9929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.186225][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.193533][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.220775][ T9929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.267484][ T9929] hsr_slave_0: entered promiscuous mode [ 429.274368][ T9929] hsr_slave_1: entered promiscuous mode [ 429.280699][ T9929] debugfs: 'hsr0' already exists in 'hsr' [ 429.287007][ T9929] Cannot create hsr debugfs directory [ 430.504145][ T5640] Bluetooth: hci5: command tx timeout [ 432.585126][ T5640] Bluetooth: hci5: command tx timeout [ 434.666191][ T5640] Bluetooth: hci5: command tx timeout [ 436.747198][ T5640] Bluetooth: hci5: command tx timeout [ 440.432044][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.440574][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.156924][ T14] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 983 with max blocks 41 with error 117 [ 449.169726][ T14] EXT4-fs (sda1): This should not happen!! Data will be lost [ 449.169726][ T14] [ 450.456625][ T9794] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 450.470820][ T9794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 450.481397][ T9794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 450.489392][ T9794] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 450.500454][ T9794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 451.012099][ T9955] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.019455][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.027612][ T9955] bridge_slave_0: entered allmulticast mode [ 451.035284][ T9955] bridge_slave_0: entered promiscuous mode [ 451.043345][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.050688][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.058393][ T9955] bridge_slave_1: entered allmulticast mode [ 451.065922][ T9955] bridge_slave_1: entered promiscuous mode [ 451.100355][ T9955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.112593][ T9955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.145247][ T9955] team0: Port device team_slave_0 added [ 451.153404][ T9955] team0: Port device team_slave_1 added [ 451.179297][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.187506][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.215331][ T9955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.228227][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.235750][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.262435][ T9955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.306382][ T9955] hsr_slave_0: entered promiscuous mode [ 451.312971][ T9955] hsr_slave_1: entered promiscuous mode [ 451.322746][ T9955] debugfs: 'hsr0' already exists in 'hsr' [ 451.329934][ T9955] Cannot create hsr debugfs directory [ 452.595258][ T5640] Bluetooth: hci6: command tx timeout [ 453.490498][ T9794] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 453.503497][ T9794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 453.516863][ T9794] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 453.528051][ T9794] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 453.542324][ T9794] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 454.049724][ T9976] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.058685][ T9976] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.066415][ T9976] bridge_slave_0: entered allmulticast mode [ 454.073656][ T9976] bridge_slave_0: entered promiscuous mode [ 454.083605][ T9976] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.091565][ T9976] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.099195][ T9976] bridge_slave_1: entered allmulticast mode [ 454.106679][ T9976] bridge_slave_1: entered promiscuous mode [ 454.137962][ T9976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.150305][ T9976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.182718][ T9976] team0: Port device team_slave_0 added [ 454.192525][ T9976] team0: Port device team_slave_1 added [ 454.220317][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.227432][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.254059][ T9976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.267572][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.274541][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.302546][ T9976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.346196][ T9976] hsr_slave_0: entered promiscuous mode [ 454.352586][ T9976] hsr_slave_1: entered promiscuous mode [ 454.359711][ T9976] debugfs: 'hsr0' already exists in 'hsr' [ 454.366818][ T9976] Cannot create hsr debugfs directory [ 454.676232][ T9794] Bluetooth: hci6: command tx timeout [ 455.556689][ T9794] Bluetooth: hci7: command tx timeout [ 456.757231][ T9794] Bluetooth: hci6: command tx timeout [ 457.637710][ T9794] Bluetooth: hci7: command tx timeout [ 458.838302][ T9794] Bluetooth: hci6: command tx timeout [ 459.718762][ T9794] Bluetooth: hci7: command tx timeout [ 461.799702][ T9794] Bluetooth: hci7: command tx timeout [ 479.415874][ T1156] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1362 with max blocks 174 with error 117 [ 479.429142][ T1156] EXT4-fs (sda1): This should not happen!! Data will be lost [ 479.429142][ T1156] [ 488.591019][ T5640] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 488.603712][ T5640] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 488.616179][ T5640] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 488.625508][ T5640] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 488.638198][ T5640] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 489.147099][ T9994] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.154436][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.161652][ T9994] bridge_slave_0: entered allmulticast mode [ 489.170839][ T9994] bridge_slave_0: entered promiscuous mode [ 489.180156][ T9994] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.188800][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.198236][ T9994] bridge_slave_1: entered allmulticast mode [ 489.205645][ T9994] bridge_slave_1: entered promiscuous mode [ 489.237323][ T9994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.249265][ T9994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.281835][ T9994] team0: Port device team_slave_0 added [ 489.290153][ T9994] team0: Port device team_slave_1 added [ 489.318578][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.325698][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.354418][ T9994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.366881][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.374231][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.401914][ T9994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.449075][ T9994] hsr_slave_0: entered promiscuous mode [ 489.455783][ T9994] hsr_slave_1: entered promiscuous mode [ 489.461992][ T9994] debugfs: 'hsr0' already exists in 'hsr' [ 489.468604][ T9994] Cannot create hsr debugfs directory [ 490.694192][ T9794] Bluetooth: hci8: command tx timeout [ 492.775200][ T9794] Bluetooth: hci8: command tx timeout [ 493.735702][ T9794] Bluetooth: hci1: command 0x0406 tx timeout [ 494.856389][ T5640] Bluetooth: hci8: command tx timeout [ 496.937319][ T5640] Bluetooth: hci8: command tx timeout [ 501.901397][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.908189][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.560833][ T9794] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 510.574994][ T9794] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 510.588021][ T9794] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 510.596210][ T9794] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 510.612467][ T9794] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 511.121673][T10017] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.129612][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.137969][T10017] bridge_slave_0: entered allmulticast mode [ 511.145488][T10017] bridge_slave_0: entered promiscuous mode [ 511.153689][T10017] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.161044][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.168685][T10017] bridge_slave_1: entered allmulticast mode [ 511.176182][T10017] bridge_slave_1: entered promiscuous mode [ 511.210229][T10017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.223394][T10017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.254503][T10017] team0: Port device team_slave_0 added [ 511.262334][T10017] team0: Port device team_slave_1 added [ 511.288986][T10017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.296328][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.325812][T10017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.338266][T10017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.346801][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.373395][T10017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.416714][T10017] hsr_slave_0: entered promiscuous mode [ 511.423365][T10017] hsr_slave_1: entered promiscuous mode [ 511.433066][T10017] debugfs: 'hsr0' already exists in 'hsr' [ 511.440340][T10017] Cannot create hsr debugfs directory [ 512.625118][ T9794] Bluetooth: hci9: command tx timeout [ 513.595005][T10044] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 513.607877][T10044] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 513.619748][T10044] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 513.628981][T10044] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 513.637925][T10044] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 514.134033][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.141382][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.150043][T10043] bridge_slave_0: entered allmulticast mode [ 514.157742][T10043] bridge_slave_0: entered promiscuous mode [ 514.165931][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.173096][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.181826][T10043] bridge_slave_1: entered allmulticast mode [ 514.190928][T10043] bridge_slave_1: entered promiscuous mode [ 514.224966][T10043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.236469][T10044] Bluetooth: hci2: command 0x0406 tx timeout [ 514.263944][T10043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.298711][T10043] team0: Port device team_slave_0 added [ 514.309325][T10043] team0: Port device team_slave_1 added [ 514.335381][T10043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.342583][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.369177][T10043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.381712][T10043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.390022][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.420441][T10043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.463534][T10043] hsr_slave_0: entered promiscuous mode [ 514.473145][T10043] hsr_slave_1: entered promiscuous mode [ 514.479963][T10043] debugfs: 'hsr0' already exists in 'hsr' [ 514.485726][T10043] Cannot create hsr debugfs directory [ 514.706129][ T5640] Bluetooth: hci9: command tx timeout [ 515.666696][ T5640] Bluetooth: hci10: command tx timeout [ 516.787205][ T5640] Bluetooth: hci9: command tx timeout [ 517.747692][ T5640] Bluetooth: hci10: command tx timeout [ 518.868504][ T5640] Bluetooth: hci9: command tx timeout [ 519.356732][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 519.828939][T10044] Bluetooth: hci10: command tx timeout [ 521.909885][T10044] Bluetooth: hci10: command tx timeout [ 530.715599][ T31] INFO: task syz-executor:9447 blocked for more than 143 seconds. [ 530.723627][ T31] Tainted: G L syzkaller #0 [ 530.731786][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 530.741096][ T31] task:syz-executor state:D stack:23976 pid:9447 tgid:9447 ppid:1 task_flags:0x480140 flags:0x00080002 [ 530.753509][ T31] Call Trace: [ 530.757157][ T31] [ 530.760126][ T31] __schedule+0x125c/0x6730 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 530.765217][ T31] ? __pfx___schedule+0x10/0x10 [ 530.770597][ T31] ? find_held_lock+0x2b/0x80 [ 530.784650][ T31] ? schedule+0x225/0x2c0 [ 530.791513][ T31] schedule+0xdd/0x2c0 [ 530.804414][ T31] schedule_timeout+0x1b2/0x280 [ 530.810944][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 530.825590][ T31] ? mark_held_locks+0x40/0x70 [ 530.835791][ T31] __wait_for_common+0x2e7/0x4c0 [ 530.845728][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 530.857292][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 530.875563][ T31] remove_one+0x312/0x420 [ 530.880076][ T31] ? up_write+0x2e5/0x5c0 [ 530.891945][ T31] __simple_recursive_removal+0x148/0x5c0 [ 530.904180][ T31] ? __pfx_remove_one+0x10/0x10 [ 530.910504][ T31] debugfs_remove+0x5d/0x80 [ 530.920003][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 530.961918][ T31] nsim_dev_reload_destroy+0x144/0x4a0 [ 531.003902][ T31] nsim_drv_remove+0x52/0x1e0 [ 531.015104][ T5625] Process accounting resumed [ 531.024418][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 531.044357][ T31] device_remove+0xcb/0x180 [ 531.054456][ T31] device_release_driver_internal+0x44e/0x620 [ 531.067360][ T31] bus_remove_device+0x2bc/0x560 [ 531.078632][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 531.088888][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 531.102369][ T31] device_del+0x376/0x9b0 [ 531.113638][ T31] ? __pfx_device_del+0x10/0x10 [ 531.120252][ T31] device_unregister+0x1d/0xe0 [ 531.125516][ T31] del_device_store+0x346/0x480 [ 531.130459][ T31] ? __pfx_del_device_store+0x10/0x10 [ 531.136401][ T31] ? find_held_lock+0x2b/0x80 [ 531.141253][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 531.148744][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 531.153688][ T31] ? __pfx_del_device_store+0x10/0x10 [ 531.159519][ T31] bus_attr_store+0x74/0xb0 [ 531.164094][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 531.169584][ T31] sysfs_kf_write+0xf2/0x150 [ 531.174506][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 531.179829][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 531.185428][ T31] vfs_write+0x6ac/0x1050 [ 531.189901][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 531.197863][ T31] ? __pfx_vfs_write+0x10/0x10 [ 531.203843][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 531.209508][ T31] ksys_write+0x12a/0x250 [ 531.213929][ T31] ? __pfx_ksys_write+0x10/0x10 [ 531.219206][ T31] do_syscall_64+0x115/0x840 [ 531.223845][ T31] ? clear_bhb_loop+0x40/0x90 [ 531.229084][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.235549][ T31] RIP: 0033:0x7fac1755e68e [ 531.240042][ T31] RSP: 002b:00007ffd49f1bf68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 531.248883][ T31] RAX: ffffffffffffffda RBX: 000055556d311500 RCX: 00007fac1755e68e [ 531.260055][ T31] RDX: 0000000000000001 RSI: 00007ffd49f1bff0 RDI: 0000000000000005 [ 531.268302][ T31] RBP: 00007fac176346f2 R08: 0000000000000000 R09: 0000000000000000 [ 531.277524][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.285731][ T31] R13: 00007ffd49f1bff0 R14: 00007fac18354620 R15: 0000000000000003 [ 531.293793][ T31] [ 531.315168][ T31] INFO: task syz.3.479:9582 blocked for more than 143 seconds. [ 531.332726][ T31] Tainted: G L syzkaller #0 [ 531.345938][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.368288][ T31] task:syz.3.479 state:D stack:28856 pid:9582 tgid:9580 ppid:5634 task_flags:0x400040 flags:0x00080002 [ 531.394339][ T31] Call Trace: [ 531.404241][ T31] [ 531.407710][ T31] __schedule+0x125c/0x6730 [ 531.417028][ T31] ? do_raw_spin_lock+0x128/0x260 [ 531.426764][ T31] ? __pfx___schedule+0x10/0x10 [ 531.443928][ T31] ? find_held_lock+0x2b/0x80 [ 531.454610][ T31] ? schedule+0x225/0x2c0 [ 531.467956][ T31] schedule+0xdd/0x2c0 [ 531.479184][ T31] schedule_preempt_disabled+0x13/0x30 [ 531.494459][ T31] __mutex_lock+0xccc/0x1bd0 [ 531.500546][ T31] ? devlink_health_report+0x656/0xb00 [ 531.515129][ T31] ? __pfx_devlink_nl_notify_filter+0x10/0x10 [ 531.526085][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 531.536369][ T31] ? devlink_recover_notify.constprop.0+0x443/0x550 [ 531.554747][ T31] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 531.564661][ T31] ? devlink_health_report+0x656/0xb00 [ 531.586759][ T31] devlink_health_report+0x656/0xb00 [ 531.592385][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 531.600125][ T31] ? _copy_from_user+0x59/0xd0 [ 531.605335][ T31] nsim_dev_health_break_write+0x166/0x210 [ 531.612454][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 531.619429][ T31] full_proxy_write+0x135/0x1a0 [ 531.624776][ T31] vfs_write+0x2aa/0x1050 [ 531.629172][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 531.635133][ T31] ? __pfx_vfs_write+0x10/0x10 [ 531.639989][ T31] ? __fget_files+0x215/0x3d0 [ 531.644989][ T31] ? __fget_files+0x21f/0x3d0 [ 531.649860][ T31] ksys_write+0x12a/0x250 [ 531.654232][ T31] ? __pfx_ksys_write+0x10/0x10 [ 531.659631][ T31] do_syscall_64+0x115/0x840 [ 531.664643][ T31] ? clear_bhb_loop+0x40/0x90 [ 531.669391][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.679341][ T31] RIP: 0033:0x7f80c9d9de59 [ 531.683809][ T31] RSP: 002b:00007f80c7fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 531.692856][ T31] RAX: ffffffffffffffda RBX: 00007f80ca026090 RCX: 00007f80c9d9de59 [ 531.703402][ T31] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000005 [ 531.712808][ T31] RBP: 00007f80c9e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 531.721146][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.729484][ T31] R13: 00007f80ca026128 R14: 00007f80ca026090 R15: 00007fff8541be88 [ 531.738016][ T31] [ 531.768039][ T31] [ 531.768039][ T31] Showing all locks held in the system: [ 531.803626][ T31] 3 locks held by kworker/u8:1/14: [ 531.814720][ T31] #0: ffff88801bc4c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 531.826451][ T31] #1: ffffc90000137d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 531.837355][ T31] #2: ffffffff90a9dfc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 531.847171][ T31] 1 lock held by khungtaskd/31: [ 531.852090][ T31] #0: ffffffff8ebe5f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 531.862743][ T31] 2 locks held by getty/6140: [ 531.867956][ T31] #0: ffff8880363fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 531.878269][ T31] #1: ffffc9000340b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 531.888768][ T31] 2 locks held by syz.1.70/6294: [ 531.893775][ T31] #0: ffffffff90a9dfc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 531.903304][ T31] #1: ffffffff8ebf19a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 531.913665][ T31] 7 locks held by syz-executor/9447: [ 531.923989][ T31] #0: ffff888032a8e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 531.933388][ T31] #1: ffff8880324c9080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 531.943661][ T31] #2: ffff88802975b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 531.954344][ T31] #3: ffffffff9000c660 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 531.965272][ T31] #4: ffff888057294128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 531.976251][ T31] #5: ffff888012db1258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 531.986948][ T31] #6: ffff888055697160 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 532.000099][ T31] 3 locks held by syz.3.479/9582: [ 532.005490][ T31] #0: ffff88802c02d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 532.016714][ T31] #1: ffff8880206d8450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 532.029309][ T31] #2: ffff888012db1258 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_health_report+0x656/0xb00 [ 532.040271][ T31] 4 locks held by syz-executor/9745: [ 532.046419][ T31] #0: ffff888032a8e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 532.055816][ T31] #1: ffff88802efbfc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 532.066093][ T31] #2: ffff88802975b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 532.077193][ T31] #3: ffffffff9000c660 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 532.087871][ T31] 4 locks held by syz-executor/9793: [ 532.093345][ T31] #0: ffff888032a8e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 532.102734][ T31] #1: ffff8880794d2480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 532.112880][ T31] #2: ffff88802975b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 532.124200][ T31] #3: ffffffff9000c660 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 532.137272][ T31] 4 locks held by syz-executor/9929: [ 532.142709][ T31] #0: ffff888032a8e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 532.152064][ T31] #1: ffff888058fd7480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 532.163454][ T31] #2: ffff88802975b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 532.173885][ T31] #3: ffffffff9000c660 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 532.185875][ T31] 4 locks held by syz-executor/9955: [ 532.191341][ T31] #0: ffff888032a8e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 532.200898][ T31] #1: ffff88805b354480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 532.210995][ T31] #2: ffff88802975b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 532.221361][ T31] #3: ffffffff9000c660 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 532.233052][ T31] 4 locks held by syz-executor/9976: [ 532.239262][ T31] #0: ffff888032a8e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 532.250712][ T31] #1: ffff888059c53880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 532.260884][ T31] #2: ffff88802975b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 532.271314][ T31] #3: ffffffff9000c660 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 532.282073][ T31] 4 locks held by syz-executor/9994: [ 532.287747][ T31] #0: ffff888032a8e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 532.297206][ T31] #1: ffff88802c686c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 532.307208][ T31] #2: ffff88802975b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 532.319760][ T31] #3: ffffffff9000c660 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 532.331395][ T31] 4 locks held by syz-executor/10017: [ 532.337113][ T31] #0: ffff888032a8e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 532.346706][ T31] #1: ffff88805a45d880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 532.358995][ T31] #2: ffff88802975b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 532.369762][ T31] #3: ffffffff9000c660 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 532.380430][ T31] 4 locks held by syz-executor/10043: [ 532.386045][ T31] #0: ffff888032a8e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 532.395846][ T31] #1: ffff88807f7a6080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 532.405914][ T31] #2: ffff88802975b788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 532.416269][ T31] #3: ffffffff9000c660 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 532.433006][ T31] [ 532.437105][ T31] ============================================= [ 532.437105][ T31] [ 532.458603][ T6294] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.1.70: Error -117 reading block bitmap for 2 [ 532.476228][ T31] NMI backtrace for cpu 0 [ 532.476248][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 532.476274][ T31] Tainted: [L]=SOFTLOCKUP [ 532.476280][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 532.476290][ T31] Call Trace: [ 532.476296][ T31] [ 532.476303][ T31] dump_stack_lvl+0x100/0x190 [ 532.476330][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 532.476352][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 532.476402][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 532.476474][ T31] sys_info+0x141/0x190 [ 532.476494][ T31] watchdog+0xcb1/0x1030 [ 532.476530][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 532.476556][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.476584][ T31] ? __kthread_parkme+0x18c/0x230 [ 532.476605][ T31] ? kthread+0x13a/0x450 [ 532.476626][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.476648][ T31] kthread+0x370/0x450 [ 532.476669][ T31] ? __pfx_kthread+0x10/0x10 [ 532.476692][ T31] ret_from_fork+0x72b/0xd50 [ 532.476713][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 532.476734][ T31] ? __switch_to+0x800/0x10f0 [ 532.476760][ T31] ? __switch_to_asm+0x39/0x70 [ 532.476783][ T31] ? __pfx_kthread+0x10/0x10 [ 532.476806][ T31] ret_from_fork_asm+0x1a/0x30 [ 532.476839][ T31] [ 532.633391][ T6294] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.1.70: Error -117 reading block bitmap for 2 [ 532.691088][ T14] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.718952][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 532.725851][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 532.736559][ T31] Tainted: [L]=SOFTLOCKUP [ 532.740885][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 532.750973][ T31] Call Trace: [ 532.754257][ T31] [ 532.757193][ T31] dump_stack_lvl+0x100/0x190 [ 532.761977][ T31] vpanic+0x552/0x970 [ 532.765979][ T31] ? __pfx_vpanic+0x10/0x10 [ 532.770513][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 532.776681][ T31] panic+0xd1/0xe0 [ 532.780409][ T31] ? __pfx_panic+0x10/0x10 [ 532.784949][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 532.791172][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 532.797374][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 532.803539][ T31] ? watchdog.cold+0x1ec/0x234 [ 532.808311][ T31] ? watchdog+0xcc1/0x1030 [ 532.812741][ T31] watchdog.cold+0x1fd/0x234 [ 532.817342][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 532.823168][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.827884][ T31] ? __kthread_parkme+0x18c/0x230 [ 532.832914][ T31] ? kthread+0x13a/0x450 [ 532.837164][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.841850][ T31] kthread+0x370/0x450 [ 532.845925][ T31] ? __pfx_kthread+0x10/0x10 [ 532.850544][ T31] ret_from_fork+0x72b/0xd50 [ 532.855165][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 532.860334][ T31] ? __switch_to+0x800/0x10f0 [ 532.865075][ T31] ? __switch_to_asm+0x39/0x70 [ 532.869864][ T31] ? __pfx_kthread+0x10/0x10 [ 532.874476][ T31] ret_from_fork_asm+0x1a/0x30 [ 532.879283][ T31] [ 532.882391][ T31] Kernel Offset: disabled [ 532.886730][ T31] Rebooting in 86400 seconds..