last executing test programs: 3m34.876196658s ago: executing program 2 (id=2465): mprotect$auto(0x110c238000, 0x1, 0x3) socket(0x2, 0x3, 0x100) sendmmsg$auto(0x3, 0x0, 0x3, 0xa6) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setresuid$auto(0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) 3m34.611378532s ago: executing program 2 (id=2467): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000440)={"418ef67ec66e0db15bb8990e04939e3fb53a9652090c8add1d2d9aa525ca872b", 0xe8a5, 0x2, 0x9, 0x0, 0x8000, 0x0}) prctl$auto(0x3b, 0x3, r4, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) pipe2$auto(0x0, 0x4800) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r7, 0xc0045520, r6) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r8, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0xb8, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_BSSID={0x6a, 0xf5, "e01f7111b0a4f0e9d0a52cac524e2a759ed0ee5a24cb9f786c01e15b93bcce999ba51a31243fab9f9aa26f13411490f788570e572c05d5c56ab5f366be6808e57ca577a39357a79659c07b2bd3c9fc3897820c6160cc951a5e6dc755d18f7d57951d55fcf7a2"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe0b4}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_MESH_ID={0x1b, 0x18, "1365921c280959ce8eb325acafa0285e10debed92ea209"}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x400c050}, 0x45) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) 3m32.897190211s ago: executing program 2 (id=2479): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x103841, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_11={0x80000000000021, 0x200000003, 0x5, 0x7, 0x1, 0x6f, 0x9dd8, 0xe98e}, 0x6f4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@raw=0xfffffffe, 0x85, 0xf67, 0x1, "669cbbd9e9756f22fdffa199e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x101}, 0x0, @integer=@value=[0x6, 0x0, 0x5, 0x80, 0xfffffffffffffffe, 0xa676, 0x4, 0x8000000000000001, 0x100000000000004, 0x2090, 0xf7a, 0x6, 0x3, 0x1, 0x0, 0x7fffffffffffffff, 0x9, 0x3, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x6, 0x2, 0x8, 0x10, 0xfffffffffffffffe, 0x2, 0x7, 0x6d, 0x3, 0xfffffffffffffff7, 0x10000, 0x5, 0x6, 0x3ff, 0x5, 0x6, 0x7, 0x200000000a78, 0x100000000000000, 0x100000004, 0x1, 0x0, 0x29, 0x81, 0x50, 0x5, 0x6, 0x8, 0x2afb, 0x803, 0x80, 0x4, 0x0, 0x4572, 0x9, 0xce13, 0x0, 0x4, 0x6, 0xd, 0x0, 0xfff, 0xc, 0xfffffffffffffffb, 0x6, 0xff, 0x10001, 0x0, 0x9, 0x9, 0x3, 0xd3ad, 0x9, 0x5, 0x7, 0x100000001, 0xffffffffffffffdc, 0x4, 0x1, 0x1000, 0x100000001, 0x100, 0x80000005, 0x8, 0x7, 0x4, 0x8, 0x800000000010, 0xff, 0x2006, 0xff8000000, 0x2a4c32e3, 0x800, 0x19, 0x200000000000007, 0x4, 0x57, 0x1, 0x6, 0x7fffffffffffffff, 0x119af68c, 0x3, 0x4, 0x7, 0x6, 0x0, 0x8000000000000001, 0x5, 0x8, 0xc8d, 0x7, 0x4000007, 0x2, 0x9, 0xfffffffffffffff8, 0x4, 0xd, 0x6, 0xb, 0x10001, 0x4bb2, 0x2, 0x400, 0x401, 0x8, 0x7], "282f77b07e718e11749a346177741dc299a28a585e87e0d908e2c8e50de501951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c8500"}) 3m32.668151964s ago: executing program 2 (id=2481): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socket(0xa, 0x3, 0x3b) (async) semctl$auto_SEM_STAT(0x0, 0x80000000, 0x12, 0x0) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000003c0)=@test={r1, 0x0, 0x8, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) pipe2$auto(&(0x7f00000000c0)=r0, 0xfffffff7) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) set_tid_address$auto(0x0) (async) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="080226bd7000fedbdf2503000000040008000400038012000100898771f1c19f1779048590822ad9000070000380640044000552f6d3eda20877eaa488f35e11ba8a0f282980dbe3cbbc3ae8626202b952013306406fc8c07e75e2b9543cce22842b00bc15baf98d303611387eb632a3fd2a64bdcca4801999fa43f4b8b79a7274f6140a32756d90a14516d25c0cdc12a78308004900", @ANYRES32=0x0, @ANYBLOB="a48b741db3990256cc19e991767f5af75d26f798cef6613353fa225ab2b7c8193928ad6119"], 0xa0}, 0x1, 0x0, 0x0, 0x4040001}, 0x4800) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0x1) (async) close_range$auto(0x2, 0x8, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/105, 0x69) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) (rerun: 32) 3m32.313914019s ago: executing program 2 (id=2483): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x11, 0x80003, 0x300) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000000), 0x5a9, &(0x7f0000000100)={0x0, 0x200007}, 0x1, 0x0, 0x6, 0x1}, 0x5}, 0x2000004, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) 3m31.264280091s ago: executing program 2 (id=2486): mmap$auto(0x0, 0x2020009, 0x3, 0xebd, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) setfsuid$auto(0xee01) ioctl$auto(r1, 0x89f2, 0x24) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) sendmsg$auto_NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="ffff4ccb", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf251700000028003880240000801e0094007a450fc0c03f8e7b5826b5d627c084be296233ebd5170fd0f3b20000"], 0x3c}, 0x1, 0x0, 0x0, 0x4404}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/ip6gre0/proxy_ndp\x00', 0x80800, 0x0) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) 3m22.065458716s ago: executing program 1 (id=2523): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x2f42, 0x0) ioctl$auto(0x3, 0xc1485544, 0xb551) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) adjtimex$auto(&(0x7f0000000180)={0x5, 0x0, 0xee, 0x8, 0x1, 0xffffffff, 0xf, 0x0, 0x9, 0xa324b70, 0xffffffffffffffff, {0x80, 0x800}, 0x12b6, 0x0, 0x8, 0x52f68db0, 0x0, 0x6dbbf9bd, 0x9, 0x6, 0x4, 0x1, 0x25}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x5, 0x1800000feffffff, 0xe95) r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyd3\x00', 0x313400, 0x0) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f00000002c0)=""/190, 0xfffffe39) 3m20.240925553s ago: executing program 1 (id=2529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000000)={0x58, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x38, 0x4, 0x0, 0x1, [@typed={0x34, 0x46, 0x0, 0x0, @binary="b7a6b3a7be91b5b6400cffa339afecc6752c4a5f1f47f46b41ac32f1f999f499026e104f3e9594bd1b30548641e23c51"}]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x58}, 0x1, 0x0, 0x300000000000000, 0x48000}, 0x4000) 3m19.952952476s ago: executing program 1 (id=2530): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketcall$auto(0xffe, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0300, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) io_uring_setup$auto(0x4, 0x0) ioctl$auto(0x3, 0x4008ae61, r0) 3m19.570664298s ago: executing program 1 (id=2533): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = getpid() sched_setaffinity$auto(r0, 0x5, &(0x7f0000000000)=0x7) capset$auto(&(0x7f0000000080)={0x20080522, r0}, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ubifs/chk_lprops\x00', 0x101000, 0x0) connect$auto(r2, &(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0x7f}, 0xa) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) pselect6$auto(0x401, 0x0, 0x0, 0x0, 0x0, &(0x7f00000067c0)="36369dc69f2e") r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x5, 0x10000000000001, 0x4, 0xd6f, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x4, 0x8, 0x100000011, 0x40000000000a5, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) 3m18.055156585s ago: executing program 1 (id=2538): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x803, @broadcast}, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) mmap$auto(0x0, 0x200004, 0x804000000000df, 0x13, 0xd, 0x300000000000) read$auto(0xffffffffffffffff, 0x0, 0x1ff) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x710f}, 0x6) write$auto(r1, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x7) write$auto(0x3, 0x0, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r2 = socketpair$auto(0x2, 0x9, 0x8000000000000000, 0x0) statx$auto(r2, 0x0, 0x401006, 0x4015, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000800), r3) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf2501000000ed7632cb6cf7320a9dd68bd98285f362157a585a9073da85000000acd1e5017986a7b737002985d7277d5d9aa62a9ed6a2a8b5b11831f938ccd7924aaff38631c1d42b4558a00ac88bffff3c1a5c226c137e72e35c"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) write$auto(0x3, 0x0, 0xbfd8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) openat2$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x2, 0x2}, 0x7ff) 3m17.324476481s ago: executing program 1 (id=2543): r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/personality\x00', 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000040)=""/228, 0xe4) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000180), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x4c4, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_KEY={0x1b1, 0x2, 0x0, 0x1, [@generic="d0c219819f972fdc93678c66a966177289524d0d0de6be", @generic="e631b9c4ad14de2600a300cdd55a7b42ee79412d58280255ddca2d969dae1b61008701938815a854b4f2f94d4eb2c409ce099b8c12596596288456b4dcefbae1e5cc80b3f52d2d25f1a8a8345decc84db668fb1a088333a4f8e7ee8029fac5f1b812f7861422c8b842547b56bbcab28679b26b2981fe25581d880e674851d6aa6b62559b6ec5ce685032370f93bbd13de9e2cfe42c519c3c89b835f4ed59f944", @generic="01de41a2df7667da29ceaecdaccb09d1d1c7310b41f84fded5a5d57cf93e909fc7ee60c13eb9573adb106b9c47aef324ebb64c5e47ac6ad9d876ec1a7f694f9ecf36d11fe932df450ac8d4d6b228c539364ef4d5246966ddc15cd6b26075df5ea6003fb49148ce358dc4f143336a54ccaf6e15f2f708879b7b72dbfd72f120a4c9456a9c747bdbb3df12f8adc7af250564c6d32f864cacde6bd1d480561d5644d4920af3ad333711ae3ce3790f8373508f2cd88e81c8376bf39556f2eb9144105e38d002178fb95c37124b8659aff62354f6d8a76b2db85c5e9d3482dcf64f9d0b3698b8ed4a0ddf1e03edc920705904821e79c2e41d"]}, @OVS_PACKET_ATTR_KEY={0x2f9, 0x2, 0x0, 0x1, [@generic="b536a5726f50ee654ccff90c7d89c07409e9bdbbbf1727a93cbc15acd7218700c1901593e4fb9ed4e09388dc706101d9d1fd70b1366bceddb57a0ca2aa71849ea17cfc923857d53bfacd1f0d94da1b7e8e72fbde5eb2499f2b559ce6a4bf0d0d76e0281315b5ff141c0771db9bb6303dfa6ff5e96287773933f7508ad111834cedb0d65492b8d3603c2048beb9bf5d5358709119b0f24d5ff4e43ee3135c559c54184708b6304db97a24626bbe", @nested={0xc1, 0xec, 0x0, 0x1, [@generic="d495dedc39845bb3c570d8315884995ddc1737290565439f4f5d86120f1b49e856fd9fb0c5e58e5ee543d52965893f74f3435577b83990305085d746d07d9015df2ab727ba57806fbc64c485df1e3c6d82bac55300a91af492f3284f732c954accab033a60023cbae10bfff0236d14e64ee1dc5da5a2c8dd2d510665a1dc1c41ab1758c43b6ff71b13a3500984c7b5ab2463623b16924c065548db24c93352c8ca689f9bd4133cce17acf7457436a8d643953fe69f228186ac9ca52418"]}, @typed={0xbc, 0x105, 0x0, 0x0, @binary="2a70d5ea9f0d16b9c7f1ef570f9ba57749c6eea12c830afd16b50c0e799bb86c9c5017cd2330683e06e28038d658ddd1c415a9b77d26f06527294f5528d569380754d1bcc3b56002756a173fcc0ff4bf3ef13833ae3b1b4addee336ff29deb21186744917d8800bba089fca8e5c29c1ad660c2f8a17f5defbb3d83aa95e96f907f34f87a4f0ba650870fb0f55f6191979b976de8b16abbad9004cfcda1c9a968817ee3b908002fad3a483eeecd6b3557caa093fbb5c6a829"}, @nested={0xc8, 0x95, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="d94de2009ba7c8cf25af751b68a7f5075a05ae57830cc6360c43cad39d4672a507fc435e18fe309199881eae4a1184fd3c3a1c584109dc19ecd71503a5950d951e205fbd53a74d5c21c4a6d6cd0d53f8fd9a274107f6812880dd329226ca6d9af6aa67dd18e186f77ba505a3f7af312a871711747126fde8b27c5affac4e257e62334b1adef8f7ec718486ce9213873b3905f799479c0e8c57880789", @nested={0x4, 0xd2}, @nested={0x4, 0x2a}, @nested={0x4, 0xd4}, @typed={0xc, 0xea, 0x0, 0x0, @u64=0x5}]}]}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x44}, 0x10801) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) shmctl$auto_SHM_UNLOCK(0xfffffffc, 0xc, 0x0) unshare$auto(0x40000080) io_uring_setup$auto(0x1ff, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 3m2.143541114s ago: executing program 32 (id=2543): r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/personality\x00', 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000040)=""/228, 0xe4) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000180), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x4c4, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_KEY={0x1b1, 0x2, 0x0, 0x1, [@generic="d0c219819f972fdc93678c66a966177289524d0d0de6be", @generic="e631b9c4ad14de2600a300cdd55a7b42ee79412d58280255ddca2d969dae1b61008701938815a854b4f2f94d4eb2c409ce099b8c12596596288456b4dcefbae1e5cc80b3f52d2d25f1a8a8345decc84db668fb1a088333a4f8e7ee8029fac5f1b812f7861422c8b842547b56bbcab28679b26b2981fe25581d880e674851d6aa6b62559b6ec5ce685032370f93bbd13de9e2cfe42c519c3c89b835f4ed59f944", @generic="01de41a2df7667da29ceaecdaccb09d1d1c7310b41f84fded5a5d57cf93e909fc7ee60c13eb9573adb106b9c47aef324ebb64c5e47ac6ad9d876ec1a7f694f9ecf36d11fe932df450ac8d4d6b228c539364ef4d5246966ddc15cd6b26075df5ea6003fb49148ce358dc4f143336a54ccaf6e15f2f708879b7b72dbfd72f120a4c9456a9c747bdbb3df12f8adc7af250564c6d32f864cacde6bd1d480561d5644d4920af3ad333711ae3ce3790f8373508f2cd88e81c8376bf39556f2eb9144105e38d002178fb95c37124b8659aff62354f6d8a76b2db85c5e9d3482dcf64f9d0b3698b8ed4a0ddf1e03edc920705904821e79c2e41d"]}, @OVS_PACKET_ATTR_KEY={0x2f9, 0x2, 0x0, 0x1, [@generic="b536a5726f50ee654ccff90c7d89c07409e9bdbbbf1727a93cbc15acd7218700c1901593e4fb9ed4e09388dc706101d9d1fd70b1366bceddb57a0ca2aa71849ea17cfc923857d53bfacd1f0d94da1b7e8e72fbde5eb2499f2b559ce6a4bf0d0d76e0281315b5ff141c0771db9bb6303dfa6ff5e96287773933f7508ad111834cedb0d65492b8d3603c2048beb9bf5d5358709119b0f24d5ff4e43ee3135c559c54184708b6304db97a24626bbe", @nested={0xc1, 0xec, 0x0, 0x1, [@generic="d495dedc39845bb3c570d8315884995ddc1737290565439f4f5d86120f1b49e856fd9fb0c5e58e5ee543d52965893f74f3435577b83990305085d746d07d9015df2ab727ba57806fbc64c485df1e3c6d82bac55300a91af492f3284f732c954accab033a60023cbae10bfff0236d14e64ee1dc5da5a2c8dd2d510665a1dc1c41ab1758c43b6ff71b13a3500984c7b5ab2463623b16924c065548db24c93352c8ca689f9bd4133cce17acf7457436a8d643953fe69f228186ac9ca52418"]}, @typed={0xbc, 0x105, 0x0, 0x0, @binary="2a70d5ea9f0d16b9c7f1ef570f9ba57749c6eea12c830afd16b50c0e799bb86c9c5017cd2330683e06e28038d658ddd1c415a9b77d26f06527294f5528d569380754d1bcc3b56002756a173fcc0ff4bf3ef13833ae3b1b4addee336ff29deb21186744917d8800bba089fca8e5c29c1ad660c2f8a17f5defbb3d83aa95e96f907f34f87a4f0ba650870fb0f55f6191979b976de8b16abbad9004cfcda1c9a968817ee3b908002fad3a483eeecd6b3557caa093fbb5c6a829"}, @nested={0xc8, 0x95, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="d94de2009ba7c8cf25af751b68a7f5075a05ae57830cc6360c43cad39d4672a507fc435e18fe309199881eae4a1184fd3c3a1c584109dc19ecd71503a5950d951e205fbd53a74d5c21c4a6d6cd0d53f8fd9a274107f6812880dd329226ca6d9af6aa67dd18e186f77ba505a3f7af312a871711747126fde8b27c5affac4e257e62334b1adef8f7ec718486ce9213873b3905f799479c0e8c57880789", @nested={0x4, 0xd2}, @nested={0x4, 0x2a}, @nested={0x4, 0xd4}, @typed={0xc, 0xea, 0x0, 0x0, @u64=0x5}]}]}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x44}, 0x10801) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) shmctl$auto_SHM_UNLOCK(0xfffffffc, 0xc, 0x0) unshare$auto(0x40000080) io_uring_setup$auto(0x1ff, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 5.187915716s ago: executing program 3 (id=3020): r0 = open(0x0, 0x12ba7e, 0x45) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r1) mkdir$auto(&(0x7f0000000040)='./cgroup\x00', 0x6) r2 = setfsgid$auto(0xffffffffffffffff) lstat$auto(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8000000000000000, 0x5, 0x28, 0x6, 0x0, r2, 0x0, 0x0, 0x9, 0x10, 0xffffffffffffffff, 0x1167f2bf, 0x5, 0x3, 0x9, 0x800000000000ce, 0x3}) newfstatat$auto(r0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)={0x1, 0x1, 0x0, 0x1, 0xee01, r2, 0x0, 0x100000000, 0x2, 0x6, 0x6, 0x3a4, 0xe, 0x8, 0x5, 0x4, 0x7}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') write$auto(r1, &(0x7f00000001c0)='\x00', 0x40) close_range$auto(0x2, 0xa, 0x0) 4.849616532s ago: executing program 3 (id=3021): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) 4.552772433s ago: executing program 0 (id=3022): sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) setreuid$auto(0x0, 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) 4.231734569s ago: executing program 0 (id=3023): io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000000000)="66924abdf1db57d275b3cf8f31c7e044ef2db4aac518852ca9d21b5a279e9ffb53a6b0902412330ee4daaccc42e3e6edcbf11dc7e19970fdcaa856a5c0146b6182f6b8100dd03c1d5fa8804539e6885c81ff9cbe31b22f57892e872a7d58a676296d9c659d9ba017b17dde7547a677f1889626a3d712800847c729214c7c112f1f20f9f3644bad0cbc0e1161bdff162cf73b7d6de31a44e23c3fa4750afb13cae0d614b50c57076584a8fa9328c04d81b7b9db31d3b42796b0b02b7dbab940d24b6cf2566f586f5b6f77bddff5de6848d1f7177ce9a7c2a2a9666890a7c634fffc9b4c296dc2070f6d68ef1b8f6c2eb8e3717e1d446f02232c5602be95ad9a02dd4ab33823f9e8038626e6a34cdc322c53aff85817d8f163a59263b5f27634816c35898698eed656b27842b0ea6ac15d6733ffac58bd0f2696a633debe82934b1ffe832200ed474908c47ca470f92b48c644061d13ec5e64e02cefb2b7e155576063dc89a49250447388efea199ba583bb6c1c810b9ee569ace59865db6d544bd4ba68454fc978fffcbbee54d1387a5234cf4b3d17bf14952d892ec3e4413b97f1f1609e285bc91e04dfb44e1ba5e0e88cb90b78286517b86cd8edb234a2dd029996db5948426652fb2b178ca3d24184199d06abc383fc23843385122297df85f22ee183f384b914f1421cc2dcac3d2e8f49270411bd68ad2cedde59013b833e3d07f3bb6a64ab8d15363fc458c847ce90aea9eefdc021b15776ccb2a77449d95fc68eaa408c5be5b13fdda0046762b3cf089caaeed7a7eb25bd9cec164f9fd14c67cdffad1f34ef440f7b8da94155de7ddd547fd9f4b30dd24ede33fa5dcf92db1102f8f96bbfd417b0bb217998264484150ea2a229befa178ee31688b997f82a6bfc40933facca4458b2db49c15b1f3cf18149dec0c742a75261ae683d9afd49ece0580d53dd733daece67a96c9ebc978eaf915058b2534c8b0931a7c11c0a56291fa813c97cc8364a4e3558ac946599bf3ab36bc94aad1a254d6408b40261a413906af67190b8319595421239c4d7c16f9cc59d3866f65396b727beef761d05a4ff345b1922ec56268107194ebc3af71838c66f92fb5c3d41b4f97e999a923b830418476d1b90281455c19110bd1ad077427851032e044c19cf846638675e4f1b32096df5e6145414d82b5845088343cb85126faf42614647cd103b4443332931157778c1f83934b8f12a0f2c8a2241d46919d1eace64667b65ad97ad19937a0e9ba690788071725a3ece814a16ff2b291754fda26543707737705ddc0c7a1ebf148237260acf0724f7d1a794866141500af3456cb7be9f2d608549ffc4fe1f74175424a19d25dc3b7623cd4c45d77672aa2b47f83229aecfb029a3acf7682001048a7ce4c8476908791e9c82073631ef50a72a0b07bd415f597a844dd1b6c8210ec42067576bd507e5d3cd9fd803d7101c289973d28fc544d9b5a9f75055d0d3718108d5e5f68755cd58ccc01db42f412fc89c43919fc3ae2778597095b048b2fa36fc0a17204768dcab31a366f7a8761f43c6d6a31302336dda66dc83468b3786f0771b3c5898850c26d98213d4e2d31f1338997250b0006a999f5806eae8d07eaaa52cd07fa3431b6a14fa61e99b17b98a7e3864a52e0e46551d201c6367f929c4743292aa52ec05e0b2b3bb8a57723fed77eb34dc1de557f22f772761724348035e0541cf6e5a4fda1d704349132e16b97ee29cb5b3bf52fedc65456f4273b23e6af3c2768260abf9ebfecc3359a14be34a4427709acab7e25b3680512311485efb087e446b10c703e7220a684478b35e1dd2baa4f7df398d94e9a92e2cf6b930f1163c09da137931623d5dea150b86dd4b5383ff1bd4b9d50dce21c2c7c0ac263a2cfcc23559f139b21e47561fe477986e63006ab7fe909a9ba8c16c9ba7aa7b5de9c3f93a833b872823167a5ec4fdf68272777a9a4d7f8ac073154e57e6ec678053299b6506c1fba95d73d7612b48d0add4311c9973c882a27c59b004cd202780654cb9ba073a9f9a26a4602eec0b9973b794d8f220fd4024f6e6e5bb6deab7af6f2568940e10661eba996836dc5c19ee2d69a84ad407e7883703be57afd4a732fe530e0ff28dd349f364719859c8b0e0d03733eeb9d108d6f879eaf36e24820955132f94929c5f77e198c1a12e058ecbb3c61d72cc951002ab212adc5bccd700baf896e06d0306dadac020a0d72100292340ead98a3c1cde59a67deb199503c2139aec0895f35558140452b11868d63141e93e228ed3768783d410782da997ffc5ced6729dd25d3974ab987cb8cf44ee3078883e1339e57e7979e74ed04506cc6769ffcf67a54b4ade28458f87af88aa11f2ed498c7f1b6c3e0dbc895b6145dbc5f57885751efa25097302272411e7fd23784fed28e1a07b1e6c2f97b5dc82b4b0102c5dfe47d6c337cac8b8db80225121c0d568ffa7b0bf24a48239b5860246beac0dec653e1ce1e9209fd5103953df97a4811d5647abf46656cb6ac11e3ce2727b8a1ff39a83bc9282d05d335c9b6d3d313014eb84ccd69e430a04ea3264930c823478c1a6b38145f43458f3154aba9c6fac56326ce06b1f49039353158cf4eb9ac34b8484281bab8d001f36fddf47e98435b7c0784e8cd8662864fa7663dfaf86554ee991ba9991eb18882c8cc76ab96ac5b6ab2b6747e2a3d78f35e8c05b2a39539bb7459b23dc638ef2d5ae90594f6785d4883cb2196ba0f0053bade9b5a6d428473ac63139b3952da000f3d0a8db30ad77150fbaa2e7750fa9d29f6ed1c11db2d329af0ac49199cbf395ac5ff52c2aaa79dd88084ad88622afa44200757bbd25dc2afa510e32fb06ae828534d777db4580b5e7e0983b9a256df637b9b82c515e8957f5e2d198c784b8765b91f4764b6dab1d34be79a2773e3d47ea0b0b92a6c63f2552a286700779e661032091fdb4cc087fa82eea84034be32d9a48480dab7f9ee406b5d3d090e25d5c03f65d2b1f887c1d8d5a209496816e43b907355a1818c7531ff0302499085669884116a5cdf821e3fa9366babcc87454048d8162504a32b9b10541080244aeb13612e49b1513ddd8d423f5c9594fa887d870a4f43c701bc7de95c71ebe51086d12df2b9ee5f7b61bb14db50dc30e5b4a98f39676b2a24a4973492e4d80f2c779168e9f4a495bc60c0e2e833d79e79b399b78c75e2bfa111f28d2e6721d15a95f2ded12686906b15c4567901bee856210c760f9ccef61bb9faf0dea0c3dc1497ede35dd307b3f866af871003dc75f3a94f90f4204a3a96bf2f3f7f6446b3019be6a3c2ccc680ec5e7d511c72bf3402e6d644adf3e0ba132469c8a180a24d95c1d8079e0ec8fc9d5e68ffb1c299cfba47b99e669d9b63f7c16a149eda365f3b4cadf2745668b2d044c20f58e742e9ef288cd1c4e98da45b9c7967bd95aef14bb8a9ebe29f10fa77d9e991d248b0b9697c43d2afd7e5f61986201efcf83c97886a567205a282af43093166a6d2e47224c7ed0f28eb1f433e148d54adfa1264c3ae71102ad003c684d76b0ba2cd2250f27b03a72b8d89de5130ba8310ae7cb6bbc49c9f5c82fe4ff834ed1423e866223515648e294e790b041788e7e1a26498f8555e0703c2a7a6677cb5952f55f1be793e8edaff6fae34e683674bc039908bbf4e6f4ee3b6dae1c86f3fa3dd07c661ad45bbfdfb7eaf14539c038e444c332a1c2b4a23bc1bb848b56192735c5b23091cf94d739a5314b1820cbc86193e3ae5471ff0d8d5db446615cb0d51bec64e1a33b9fd6ebbaeb2cca5356efa76596ee1500f6a95f190265e3c562f68100dda6d34255d3e7cbd470ad8b83546cedb56d68f29bba9b561d07db7e25bc2183660538bb3fac9c7a7241f1475083478f07369d8cd4c0e7975ca91516dbdc3b049b699aa03f749365fe4a6e21ff7bf1c22e16d4c05dc21e0eceec7bbee72f9efb643773f395ba6eea059fffc661e49961fcd86b916435738179de47cbf2c5438cde34a4da1e4976e7eeccc5afea1488a07552e360aa778cfa4056aa5b7665f8f97c81a4f4905ebb4d6767c03bafc6e1b0ee920f790249d14821f1a3a27e27c8ff324894b189149c08b01c3f2b0627114103747910adcab46a2170d183193dc89f5b42e9e86a0f5092005db2544fa8cc5f5794fa61a5dc03b722faf2b12968b6d259d61d836440889d24a3972961ec0f8c25b603f0c3cfb3d45b9e46931b7e709689b111e48c8223740c5c83f21f6fa9c5e85ab9039b66f10306a0453e684512bbbea629265af00e8072a163ddad57b596f3b024243ffd9e8474a5c70dbb1ca07dcec5ae98fe88c09d6d2f84ddbfd6ff21c5dcbd195ab5149714f9d092ddcc51c7a81f24ea6256c42575acc08fa13da5e4b22b6f8ceb20f6772357193b60a5405ac68479949a1d2f65982569b504a870e0c5e83deebe8527ea3266eb0f0df204671311e466c2e4ddb9d9d1331b30fd42ee49c2cee992fa51c68317930a85581c715dea0862fd5dc0af4e70d808f7d54062a81637cfdd594abd411de4a64e8d7849c5726956208593eda86833b2ea0dac7a04fa99d125a0024421b0fab15196b2c2bcb68697c8fc75e51f74be125c7c125445de2311f219dfd7bb6eb833c83b5c0ea68b9559d98620dd2fd0f39c2d0faba8a9d3a61fcfb90a11e55566c6d32e58933cc7f27af727c973f521314b61280a55ea37b8495399dedda449aeaa9ae1596527fd98fcc6f73087d906412016245b59fe46acf9aa49ee20cf8ac39b6bdd41414d4dcbae017f85f4c2927919b652686f719b45d757b92bfd5213e450e4a2a3d41739dbd2a82c702c8a312d4cf3a75400407ea2489c36655698209d26e1738a2123ed9ced3308e1409248c77e1e0df892c3414ab3d98a570005f8cc4f6df0cfbce34c0ac72e98a7b2250159936c303d66dbd5ec6ba0f2ceb4de4b0ab2d9b20ddfc399ac22e6c1a9b26060dc00d963d8b53635c633617c669655f1f7d750251c6e962ec78e2042abe0356dc207dc959ab4a3a1ec3b35dc3d43d722821c04e3e2057ec6560b6058572fb57d7fc8b3e2ba7d4a3fb7b649abfc24113cb54ccad2be9407fc1b44cc760eeb3a273cce1a44a642bfe0003362b8fa36271e44a96628df19ff276d06e9b9c960c2336770f3217335f172720bab9f04f9998a9f343556cf36341f33435f1756992dd6f1a427e3c468b0d4523588bcc484265bc40a19456ffd206569049e605bda0258b03e6386573d4c9279880d29800497ac8327235f68bf163dd5e5d009f0ef266fadd0f7ddd094a5213bc84c5583d9181011668671975178bf3baf507daba78611663aaf1ca056a192823e1d37872cc9f36b6159f6d4369f3f97c490222cb4072efaefad9088c484cefea4e76bffecfd1914109554de60270cf80cc0c9c9e6ac0ad46c29b05de7ff17977cac629c78e0af2ed05f65a57634d0d780b2bf901c98d04f12c9dd2604722a0d0e5dab4ec959f25b040976524dcd553adaba83952a071abb71b812d188eda6473cc0f4caafb529f93b9f4cb5affce4ed6a337413f91bcbd5015c40acb96eec6987dc3ef5fbe2db818b858049eb6649d0192db8449d8b677cda2e749e6d43cc5e144e8c812b65c6f41c1ba4c7a58a18417a07921d429610c53a798cceda5a5b152c9efc0742030bbf92739bb2e7ce80f4e3f5bc820d0a455c040eda72d8d01b07d8e6b5d344c8233748ad3a3dc4433e7fb547fe771a7590728a6f51889877eaf2714fe82331acd37e68df7c4d6b118f95", 0xffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001000)='/dev/midi2\x00', 0x8021, 0x0) read$auto(r0, &(0x7f0000001040)='/dev/midi2\x00', 0x80000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000001080), r1) openat2$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x40000, 0x1, 0x9}, 0x18) r2 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x0, 0x0) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000001180)=0xffffffff) r4 = prctl$auto(0xffffffff, 0x8000000000000001, r3, 0xff, 0xe6c1) read$auto(r2, &(0x7f00000011c0)='\x11\x00', 0x0) read$auto_severities_coverage_fops_severity(r4, &(0x7f0000001200)=""/218, 0xda) prctl$auto_PR_SET_CHILD_SUBREAPER(0x24, 0xc3b, 0x10, 0x80, 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x50, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) fsconfig$auto_XFS_DAX_NEVER(r0, 0xe89b, &(0x7f0000001480)='*\x00', &(0x7f00000014c0)="28cd5d15087f5530bfaad08b31dd9f9950f68a9d4b2c8f8c78035202e7c7503980de737721f66070b3821767e7c05e0a319003305a055112c3d1fecfc7344df6a64b32f486e3e17efa2047dec4988ee14cb483227e23b212237991", 0x2) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000001580), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000015c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010804}, 0x404) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001700), r5) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xf8, r9, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x39d}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_FILS_NONCES={0xc3, 0xf3, "e06238892d9f7df9d30031664c8c59c29c251bc8cab8538196f2e9986dd0eb9e1cb6bd563d18684bed77f72f7ed49e7fbd3796650d24e5bff58483ab6018f3d75e042730fef22e8b393b7c86fb513c799a430bbe11f1b9bb20981366dc691396ba3551612bc8f1d028c00c0a2350139c22c8ad8c78867fcc32e41b861ffecbc3d379d20c1a50c2fec68552daacb3d6cf6587c37ae4baabf9995fbd6355b69bd00447644f145a540128fcd008e0ad3542cc074d49e5f7ee2d6f2882ec0fbf8a"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0xc}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x97}]}, 0xf8}, 0x1, 0x0, 0x0, 0x11}, 0x810) ioctl$auto_PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f00000018c0)=0xc) r10 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001940), r5) r11 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000001980)='/dev/bsg/1:0:0:0\x00', 0x200000, 0x0) sendmsg$auto_TIPC_NL_MON_PEER_GET(r5, &(0x7f00000030c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003080)={&(0x7f00000019c0)={0x1684, r10, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x102c, 0x6, 0x0, 0x1, [@generic="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", @nested={0x28, 0x66, 0x0, 0x1, [@nested={0x4, 0x33}, @typed={0x8, 0xcb, 0x0, 0x0, @binary="d8b521a0"}, @nested={0x4, 0xad}, @nested={0x4, 0x2e}, @nested={0x4, 0x43}, @typed={0x8, 0xaa, 0x0, 0x0, @fd=r11}, @nested={0x4, 0x69}]}]}, @TIPC_NLA_PUBL={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x144, 0x0, 0x0, @ipv6=@empty}]}, @TIPC_NLA_UNSPEC={0x8a, 0x0, "b4b8623c3fa3a6d6f0ad591cee5006814561ad2b90b2ba409345dc85ef18f62f76fc43e32ac625f24446c58b18a4158e95797a690b25ef5dff04bfb0a422fa454cc9285e493461a4509f0e978e01bac5a330cbedeab2f0dd9ab04260145d8fd9ea59dd77686fd24b92c21672657026a76773e8f9f3b699a9e49c88462b36b82190208221c211"}, @TIPC_NLA_NAME_TABLE={0x304, 0x8, 0x0, 0x1, [@nested={0xbd, 0xe4, 0x0, 0x1, [@generic="31a6f77619ffbf5c94a7e4c1c0886564ff4855d55580c383ae6f084252a8b8fc85130e66b768723fe267104e90891257511fe24547b31a6a93b7d488ea0ad5dd0a0b476c4f2e9419c2427760986d44b1de7b65a3872f553fda062c022c4fcd09862e688e1467a29dc822fba9a26d284834289c482a3d330d200a166e9289ce435109f1915a647fbb63", @typed={0x7, 0x55, 0x0, 0x0, @str='-\'\x00'}, @nested={0x4, 0x89}, @generic="99dc3fa9445db72f633204e33d3f4cd37258fedbf360e45b04a4ddc0", @nested={0x4, 0x1c}, @nested={0x4, 0x6c}]}, @nested={0x240, 0x149, 0x0, 0x1, [@typed={0xc, 0x35, 0x0, 0x0, @u64=0x10001}, @typed={0x8, 0x77, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x15d, 0x0, 0x0, @u64=0xfffffffffffffffc}, @nested={0x4, 0x24}, @generic="aa6ce86113e11208aab2a0e913ca4b1a219c34a9ee20697d3dc276d52b36fcd2953a7b384e8ee4b19ba8097b501e6855397e8f7287898a457d3265dde98a876eec370f05515c0a988ef73581fb2b61863ae34859f23596e7aacf41741cb1f98baa97b4c4b1555d7ca1d266c87fcc0bd45b92fff438ee4905e1292b9faf3e8179ff24f319a23bdb80fc874153e9e7bd45797ff0794949ab35104f356286e93f6d3989616afc8932ac847cb335173ad40df94f715add", @nested={0x4, 0x38}, @generic="1fcbdb4083c7f00595cb702afbbba2a64b889309989b1ee91d2c4b9fc659be382459357a7d3fe13f7726c07b16827ec9d680fab4963962e1c146dfe1dd3e127e389f3e41abf23defe0a31d8cd76c7d0ec31f0860bb89b64f60bf69fdaa35ee842f77521074b3db769588caa4b656fb039eb28e2d0670fe893ed3cdd85e7bd0372a830f9e53e3eacd4f296cee7e3bc89918a8ad2a7ad43fe99c65be185ac3ce522ed040a12f171e700936733b030a3021086334d9e1455a951ebea711005ebf4ec24175786e6f3d93", @generic="a474a9c76141", @nested={0x4, 0x4d}, @generic="9bb427a1a999e1424c19ad8144a5c95d1061d89b7dc73e2e0d24b7257c5ec423a87e4a67f18bb3ebc633881219ff07c80f38f7b32b23097808af76ce2efba4267cf4eef4a0c2c7dd3a444e7615b425f457c115bc27a518413be4274a6dd013611c34358fa3ebbfedd253e0b600de55b872620fb643bb95e23f8ffa1c13b502be20157eeae1406a3498d708f27d"]}]}, @TIPC_NLA_MON={0x37, 0x9, 0x0, 0x1, [@generic="27e4b3ade1e93b3cd66220c189ddf538b7173442098cd9e3e8d7a58aa2fdcb59de175b669cdb7b2ab158dc1bbd52b3e77fe0b5"]}, @TIPC_NLA_PUBL={0x264, 0x3, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @pid=r3}, @nested={0x54, 0x62, 0x0, 0x1, [@nested={0x4, 0xba}, @generic="83fefc52c7acaae97e42aca54104afdf7546846816c64adacdf7b06146f5fa26d9b1343f64fc93490268b7b61ab44c0e2889a87607a0ca3465c6587c2bbc3be3480cbf3907150ac7be822f67"]}, @nested={0xe2, 0x2, 0x0, 0x1, [@nested={0x4, 0x13c}, @generic="dfec4e343498a44b66a3b244865a9e9b091794c7d3047e20a930f8f62a00bcd886050c3b4b9cc25e3e96c8b9b09cd4fe6cb6d45f31c72ba1063ee111bd7465", @typed={0x8, 0xef, 0x0, 0x0, @u32=0x800}, @typed={0x14, 0xa4, 0x0, 0x0, @ipv6=@private2}, @typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@private2}, @generic="82d271aabf5f7181e1313e1b1c3f8074ff7d825f725c60c7fbcae8eb", @typed={0x6, 0x15d, 0x0, 0x0, @str='{\x00'}, @generic="64126902d9057af770d5ef80a45da3d81ffcbe16d002e0834f592e00bbf68ed582ba3b5b03c67604dcf5c28797f9e60949edd1d9da6f20dd6da7aa", @typed={0x8, 0xb3, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x71}]}, @typed={0x12, 0xc9, 0x0, 0x0, @binary="22fdab77e55187cf4b1cd9ed0486"}, @generic="23c6518fb583097a986685bb8ab7ae505f9bdba6fb23d6467c51955e00f7cde41a7d0a7882d687d4028919866a26fc3f6e6238f627fa4b562516fa9f7a344b0d9f0f65e178e0d2978e781e1c980957c2d3d553aaf4", @generic="501c02c8433ce78355f9b6fa565d6c415abd1e07a03bddc95e6937359a94b566eda0deb3bf916579936cf42fa113a0ca8098f273c3531a908eee4c924ab76872376b09226ce44a4bed7f2505c78c4f465e333c6efd82a6b7388909cf1ceb9396bddd287cb5326a460d2713a8c4b55e1f399bb92ba8e4b7191d63778b553bc0ac46906f7a2588ec44b3081336f0d05a3b0850d1", @nested={0x24, 0x158, 0x0, 0x1, [@nested={0x4, 0x29}, @typed={0xc, 0x59, 0x0, 0x0, @u64=0xb}, @nested={0x4, 0x71}, @typed={0x8, 0x11a, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x21}]}]}]}, 0x1684}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) r12 = ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000003100)=0x6) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r12, 0x40505412, &(0x7f0000003140)={0x8, 0x0, 0x6f, 0x1, 0xe, "a819b803478974defd3455dae525ec16297c1c7ee0a4e685afa00b31bc605b7b0e6b31b1e59d2466cec0f0d0c426fdd0278f71588a3d031bb7b60c69"}) fcntl$auto_F_OFD_SETLK(r0, 0x25, 0x2) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000031c0)="1d1b80f01e832cc564b0c62907f2b0dd8a627fd104f77d8d5e725fd4741c3fc0505b06ff2e92b17cfc04805fc705c4767251e952971899e24077401c2b7d27cbe1f7bcbb6576bb983ddf04c3200fdd2a61c70963afb3f94fee91e77c5e066766968e774fc9766865eb6147c5e897e703516088afe340fa59ce37b5cbf5253e15fb7b88999e859905c89de6864ae06c3199cab55bdba7e5cbca570a193dbf92916c124a5e35717b2de34c78654c1546008ca3b93238939713") ioctl$auto_SOUND_OLD_MIXER_INFO2(r4, 0x80304d65, &(0x7f0000003280)) 4.213295958s ago: executing program 3 (id=3024): r0 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x0, 0x0) preadv$auto(r1, &(0x7f00000002c0)={0x0, 0x8010000}, 0x5, 0xfb, 0x8100000001) write$auto_kernel_debug_fops_orangefs_debugfs(r0, &(0x7f0000000680)='/', 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r2, 0x0, 0x1) mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x20800, 0x0) ioctl$auto(r3, 0x4b45, r3) 3.86778386s ago: executing program 0 (id=3025): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x21bd40, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, 0x0, 0x93) 3.600272671s ago: executing program 0 (id=3026): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x10001) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='\x00', &(0x7f00000002c0)={0xa80, 0x2, 0xa}, 0x18) sendmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x696b}, 0x3}, 0x3, 0x9) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e1833fcba8fe800007003f00"}, 0x1c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_local_port\x00', 0xa001, 0x0) sendfile$auto(r0, r2, 0x0, 0xc) 3.199617505s ago: executing program 0 (id=3027): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x0, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20020000) pwrite64$auto(0xc8, 0x0, 0xfdf0, 0x39) mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x10, 0xd, 0xfffffffffffffffb, 0x100000000, 0x2c2, 0x800002017d, 0x4, 0x1000000040, 0x1d8, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r3, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x4004810) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) recvmmsg$auto(0x3, 0x0, 0x10000, 0x68, 0x0) madvise$auto(0x3, 0xffffffffffff0005, 0x19) setgid$auto(0x0) mmap$auto(0x3, 0x20009, 0x0, 0xeb1, r0, 0x9) sysinfo$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x82, 0x21, 0x0, 0x4417) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x19, 0x0, 0x9, 0x0, 0x1f, 0x3}, 0x4}, 0x7, 0x20020004) write$auto(0x3, 0x0, 0x7fffffff) 1.35599285s ago: executing program 3 (id=3028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, r1, 0x701, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0xf0ffffffffffff, 0x800}, 0x10) 1.198414764s ago: executing program 0 (id=3029): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x100) unshare$auto(0x40000080) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x8c2c0, 0x1b4) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r1, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r2, 0x311, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 1.039816504s ago: executing program 3 (id=3030): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000002f80)='/dev/fuse\x00', 0x60000, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/hw_queues\x00', 0x3d1001, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r1, &(0x7f0000000400)="51b0fb02584da40629104cdc24af4d0b48b6ffd95407ec7de1d2a89468c8dce58827d8bc019d897babae2695dba0dd43bddd1d60dcc80dc3ad898c715d91bbde2f22a45c8aa71bc33e077558084597f668919d3a40cf49b95530c134fc4ad3b2ecd126e2d4efc796044c48557668a74b2e1b66a7c27c38ce7c0512562737d0177a535125e46d2ceb38888debcea0044fc36aaca552ea0c77d39e3d77360a08d36bab5c4bbf44dba4df5ed9f482ba857dfee70c7fe394ae625f983365bfdcff18fe7b5c326541f89c9fdbf3b0ea1cdbc6ece966f6c5afec644d1e0e9c3ad20f", 0xdf) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0xa, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2000000006, 0x2) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) seccomp$auto(0xffff7fff, 0x8, &(0x7f0000000340)="ed5d8513ffd4e8d1725a628e7cdfc9b5109301698dbec791847b22f436569cea4f28bae85cff4ffb889fd114eb7ddbaceb2c1f71375f6dd134c0f7e958ac73d97647ed7a02697e2669aef63b4dc4bcb01c6d06a5ce7488ab6fc8540384a13a430bec4133e7cf3cd0cbf48ca04f8e7c134071064875efaefcfb2ca219a760bb00f02c025396ebd4084f7db2338a244f10c2df2df08740061f96b7b607") r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x4680, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) r4 = socket(0x2b, 0x1, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x80382, 0x0) ioctl$auto(r5, 0xc0045627, r4) 0s ago: executing program 3 (id=3031): mmap$auto(0x100000000, 0x2000d, 0x1, 0xeb1, 0xffffffffffffffff, 0x100000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, 0x0, 0x1000, 0x0, 0x840000000003, 0x7ffffffd}, 0x2000b}, 0x6, 0xfffffffd, 0x0) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat2$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x982, 0x6, 0x4}, 0x7f) sendmsg$auto_IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="18012abd70002b9ef47721000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x525a05df7b8ef63f) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) socket(0x1e, 0x80000, 0x49) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r3 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000340)=0x15) write$auto_dev_fops_plock(r3, &(0x7f0000000200)="ea579eafbef6a78ace20c66c3ed28a307811ba5a77e0d6f20eee070874ce267321ef2da8ccef77a2a57912658cfac38b23199ba898ef2c29ea039494e108e23fc3d3de801c6cdb8c585be1ec026d327ad05a0c7812805bb6d050f902f2e77e549ec276c282a2bb8c2847f2e7105018d493a4a1dc", 0x74) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) timerfd_settime$auto(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0xf, 0x4db9}, {0xffffffffffff660f, 0x100000000}}, &(0x7f0000000380)={{0x8, 0x3}, {0x5, 0x4}}) rseq$auto(&(0x7f0000000300)={0x12, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x20000000, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x16, 0x21, 0x6, 0xfffffffffffffffe, 0x5) sendfile$auto(r4, r2, 0x0, 0x1fff5) close_range$auto(0x2, 0x8, 0x0) semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4) r5 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x8602, 0x0) mmap$auto(0x10000, 0x2, 0xfffffffffffffe04, 0x8051, r5, 0x0) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000480)=@bpf_attr_4={0xc, r3, 0x9, r5}, 0x32) io_uring_setup$auto(0x4bf15e08, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) unshare$auto(0x40000080) socket(0x18, 0x2, 0x52b0) kernel console output (not intermixed with test programs): 157] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 583.881968][T15157] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 583.929560][T15157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 583.936766][T15157] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 584.016844][T15157] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 584.156447][T12411] Bluetooth: hci0: command 0x0c1a tx timeout [ 584.440438][T12411] Bluetooth: hci4: command 0x0c1a tx timeout [ 584.446572][T12411] Bluetooth: hci2: command 0x0c1a tx timeout [ 585.312861][T15189] vhci_hcd: not connected 4 [ 585.396597][T15193] netlink: 318 bytes leftover after parsing attributes in process `syz.3.2429'. [ 585.603861][T15196] FAULT_INJECTION: forcing a failure. [ 585.603861][T15196] name failslab, interval 1, probability 0, space 0, times 0 [ 585.686533][T15196] CPU: 0 UID: 0 PID: 15196 Comm: syz.0.2430 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.686559][T15196] Tainted: [L]=SOFTLOCKUP [ 585.686565][T15196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 585.686574][T15196] Call Trace: [ 585.686580][T15196] [ 585.686585][T15196] dump_stack_lvl+0x100/0x190 [ 585.686615][T15196] should_fail_ex.cold+0x5/0xa [ 585.686635][T15196] should_failslab+0xc2/0x120 [ 585.686652][T15196] __kmalloc_cache_noprof+0x7a/0x6f0 [ 585.686673][T15196] ? __io_uring_add_tctx_node+0x16f/0x3b0 [ 585.686691][T15196] ? alloc_file_pseudo+0x1a5/0x230 [ 585.686713][T15196] __io_uring_add_tctx_node+0x16f/0x3b0 [ 585.686731][T15196] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 585.686751][T15196] ? __anon_inode_getfile+0x17c/0x280 [ 585.686773][T15196] io_uring_setup.cold+0x1a83/0x1d79 [ 585.686799][T15196] ? __pfx_io_uring_setup+0x10/0x10 [ 585.686824][T15196] ? __pfx_do_futex+0x10/0x10 [ 585.686853][T15196] ? xfd_validate_state+0x129/0x190 [ 585.686879][T15196] __x64_sys_io_uring_setup+0xc2/0x170 [ 585.686903][T15196] do_syscall_64+0x106/0xf80 [ 585.686918][T15196] ? clear_bhb_loop+0x40/0x90 [ 585.686937][T15196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.686952][T15196] RIP: 0033:0x7f8a0f39c819 [ 585.686965][T15196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.686980][T15196] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 585.686995][T15196] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 585.687005][T15196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000084 [ 585.687013][T15196] RBP: 00007f8a0f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 585.687022][T15196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.687031][T15196] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 585.687050][T15196] [ 586.376766][T12411] Bluetooth: hci3: command 0x0c1a tx timeout [ 586.383028][T12411] Bluetooth: hci0: command 0x0c1a tx timeout [ 586.609964][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 586.616147][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 586.921630][T15211] FAULT_INJECTION: forcing a failure. [ 586.921630][T15211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.015902][T15211] CPU: 0 UID: 0 PID: 15211 Comm: syz.0.2434 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.015928][T15211] Tainted: [L]=SOFTLOCKUP [ 587.015933][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 587.015942][T15211] Call Trace: [ 587.015947][T15211] [ 587.015954][T15211] dump_stack_lvl+0x100/0x190 [ 587.015982][T15211] should_fail_ex.cold+0x5/0xa [ 587.016001][T15211] _copy_from_user+0x2e/0xd0 [ 587.016023][T15211] restore_altstack+0x98/0x170 [ 587.016044][T15211] ? __pfx_restore_altstack+0x10/0x10 [ 587.016065][T15211] ? _raw_spin_unlock_irq+0x23/0x50 [ 587.016089][T15211] ? lockdep_hardirqs_on+0x78/0x100 [ 587.016105][T15211] ? _raw_spin_unlock_irq+0x2e/0x50 [ 587.016130][T15211] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 587.016150][T15211] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 587.016175][T15211] do_syscall_64+0x106/0xf80 [ 587.016191][T15211] ? clear_bhb_loop+0x40/0x90 [ 587.016210][T15211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.016225][T15211] RIP: 0033:0x7f8a0f33db99 [ 587.016239][T15211] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 587.016253][T15211] RSP: 002b:00007f8a101eaa80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 587.016268][T15211] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f33db99 [ 587.016279][T15211] RDX: 00007f8a101eaa80 RSI: 00007f8a101eabb0 RDI: 0000000000000011 [ 587.016288][T15211] RBP: 00007f8a101eb090 R08: 0000000000000000 R09: 0000000000000000 [ 587.016299][T15211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.016308][T15211] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 587.016327][T15211] [ 588.421676][T12411] Bluetooth: hci3: command 0x0c1a tx timeout [ 588.664104][T12411] Bluetooth: hci4: command 0x0c1a tx timeout [ 590.047234][T15250] block nbd0: Unsupported socket: should be TCP or UNIX. [ 590.502057][T12411] Bluetooth: hci3: command 0x0c1a tx timeout [ 590.944383][T15262] blktrace: Concurrent blktraces are not allowed on sg0 [ 591.973818][T15281] FAULT_INJECTION: forcing a failure. [ 591.973818][T15281] name failslab, interval 1, probability 0, space 0, times 0 [ 592.082964][T15281] CPU: 0 UID: 0 PID: 15281 Comm: syz.3.2451 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.082995][T15281] Tainted: [L]=SOFTLOCKUP [ 592.083000][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 592.083009][T15281] Call Trace: [ 592.083015][T15281] [ 592.083021][T15281] dump_stack_lvl+0x100/0x190 [ 592.083048][T15281] should_fail_ex.cold+0x5/0xa [ 592.083067][T15281] should_failslab+0xc2/0x120 [ 592.083085][T15281] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 592.083110][T15281] ? __alloc_skb+0x140/0x710 [ 592.083137][T15281] __alloc_skb+0x140/0x710 [ 592.083158][T15281] ? __alloc_skb+0x5b7/0x710 [ 592.083180][T15281] ? __pfx___alloc_skb+0x10/0x10 [ 592.083208][T15281] netlink_alloc_large_skb+0x69/0x150 [ 592.083227][T15281] netlink_sendmsg+0x680/0xda0 [ 592.083246][T15281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.083262][T15281] ? __import_iovec+0x1d2/0x640 [ 592.083284][T15281] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 592.083303][T15281] ____sys_sendmsg+0x9e1/0xb70 [ 592.083321][T15281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.083339][T15281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.083366][T15281] ___sys_sendmsg+0x190/0x1e0 [ 592.083387][T15281] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.083428][T15281] __sys_sendmsg+0x170/0x220 [ 592.083444][T15281] ? __pfx___sys_sendmsg+0x10/0x10 [ 592.083470][T15281] do_syscall_64+0x106/0xf80 [ 592.083486][T15281] ? clear_bhb_loop+0x40/0x90 [ 592.083505][T15281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.083520][T15281] RIP: 0033:0x7fd42a59c819 [ 592.083534][T15281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.083548][T15281] RSP: 002b:00007fd42b4eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.083563][T15281] RAX: ffffffffffffffda RBX: 00007fd42a816090 RCX: 00007fd42a59c819 [ 592.083573][T15281] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000009 [ 592.083582][T15281] RBP: 00007fd42b4eb090 R08: 0000000000000000 R09: 0000000000000000 [ 592.083590][T15281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.083599][T15281] R13: 00007fd42a816128 R14: 00007fd42a816090 R15: 00007fff6d2ffdf8 [ 592.083618][T15281] [ 592.549620][T15292] MTRR 1 not used [ 592.595305][T15295] MTRR 1 not used [ 592.599768][T15297] FAULT_INJECTION: forcing a failure. [ 592.599768][T15297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.619104][T15297] CPU: 0 UID: 0 PID: 15297 Comm: syz.3.2457 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.619134][T15297] Tainted: [L]=SOFTLOCKUP [ 592.619139][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 592.619153][T15297] Call Trace: [ 592.619158][T15297] [ 592.619165][T15297] dump_stack_lvl+0x100/0x190 [ 592.619193][T15297] should_fail_ex.cold+0x5/0xa [ 592.619213][T15297] _copy_from_user+0x2e/0xd0 [ 592.619234][T15297] move_addr_to_kernel+0x65/0x170 [ 592.619256][T15297] __sys_bind+0x11d/0x260 [ 592.619277][T15297] ? __pfx___sys_bind+0x10/0x10 [ 592.619309][T15297] __x64_sys_bind+0x72/0xb0 [ 592.619329][T15297] ? lockdep_hardirqs_on+0x78/0x100 [ 592.619346][T15297] do_syscall_64+0x106/0xf80 [ 592.619361][T15297] ? clear_bhb_loop+0x40/0x90 [ 592.619380][T15297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.619395][T15297] RIP: 0033:0x7fd42a59c819 [ 592.619409][T15297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.619431][T15297] RSP: 002b:00007fd42b50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 592.619447][T15297] RAX: ffffffffffffffda RBX: 00007fd42a815fa0 RCX: 00007fd42a59c819 [ 592.619457][T15297] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000000 [ 592.619470][T15297] RBP: 00007fd42a632c91 R08: 0000000000000000 R09: 0000000000000000 [ 592.619479][T15297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.619488][T15297] R13: 00007fd42a816038 R14: 00007fd42a815fa0 R15: 00007fff6d2ffdf8 [ 592.619507][T15297] [ 592.856402][T15303] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2458'. [ 594.086029][T15339] blktrace: Concurrent blktraces are not allowed on sg0 [ 594.701092][T15329] kexec: Could not allocate control_code_buffer [ 594.946357][T15361] random: crng reseeded on system resumption [ 597.864887][T15420] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 597.969181][T15423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2490'. [ 599.408199][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.420418][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.428714][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.438798][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.447631][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.729776][T10347] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.885411][T15440] chnl_net:caif_netlink_parms(): no params data found [ 601.165703][T10347] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.398356][T15470] netlink: 'syz.3.2502': attribute type 2 has an invalid length. [ 601.482809][T15471] __vm_enough_memory: pid: 15471, comm: syz.0.2501, bytes: 4398046511104 not enough memory for the allocation [ 601.541927][ T51] Bluetooth: hci1: command tx timeout [ 601.620632][T10347] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.912717][T10347] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.107324][T10347] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.396132][T15440] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.449769][T15440] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.492990][T15440] bridge_slave_0: entered allmulticast mode [ 602.538346][T15440] bridge_slave_0: entered promiscuous mode [ 602.584885][T15440] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.646005][T15440] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.712090][T15440] bridge_slave_1: entered allmulticast mode [ 602.780729][T15440] bridge_slave_1: entered promiscuous mode [ 603.007554][T15440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.117775][T15440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.370288][T15440] team0: Port device team_slave_0 added [ 603.446100][T15440] team0: Port device team_slave_1 added [ 603.540208][T10347] bridge_slave_0: left allmulticast mode [ 603.581608][T10347] bridge_slave_0: left promiscuous mode [ 603.587369][T10347] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.626218][ T51] Bluetooth: hci1: command tx timeout [ 604.966555][T10347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.038219][T10347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.093927][T10347] bond0 (unregistering): Released all slaves [ 605.281714][T10347] ovs_: left promiscuous mode [ 605.365155][T15440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.425198][T15440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.587567][T15440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.703069][ T51] Bluetooth: hci1: command tx timeout [ 605.778111][T15440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.832802][T15440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.971314][T15440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.602997][T15440] hsr_slave_0: entered promiscuous mode [ 606.660383][T15440] hsr_slave_1: entered promiscuous mode [ 606.713784][T15440] debugfs: 'hsr0' already exists in 'hsr' [ 606.719555][T15440] Cannot create hsr debugfs directory [ 607.219188][T15579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2525'. [ 607.791618][ T51] Bluetooth: hci1: command tx timeout [ 608.192492][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2527'. [ 608.228617][T15580] Process accounting resumed [ 609.324386][T10347] hsr_slave_0: left promiscuous mode [ 609.374199][T10347] hsr_slave_1: left promiscuous mode [ 609.428828][T10347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.517141][T10347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.599430][T10347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.685409][T10347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.842345][T10347] veth0_macvtap: left promiscuous mode [ 610.731933][T15639] ptp ptp0: only physical clock in use now [ 610.843180][T15639] nbd: must specify at least one socket [ 610.975436][T10347] team0 (unregistering): Port device team_slave_1 removed [ 611.114069][T10347] team0 (unregistering): Port device team_slave_0 removed [ 611.347506][T15650] FAULT_INJECTION: forcing a failure. [ 611.347506][T15650] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 611.511951][T15650] CPU: 0 UID: 0 PID: 15650 Comm: syz.0.2541 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.511977][T15650] Tainted: [L]=SOFTLOCKUP [ 611.511982][T15650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 611.511992][T15650] Call Trace: [ 611.511997][T15650] [ 611.512004][T15650] dump_stack_lvl+0x100/0x190 [ 611.512032][T15650] should_fail_ex.cold+0x5/0xa [ 611.512047][T15650] ? prepare_alloc_pages+0x16d/0x5f0 [ 611.512067][T15650] should_fail_alloc_page+0xeb/0x140 [ 611.512086][T15650] prepare_alloc_pages+0x1f0/0x5f0 [ 611.512107][T15650] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 611.512133][T15650] ? stack_trace_save+0x8e/0xc0 [ 611.512149][T15650] ? __pfx_stack_trace_save+0x10/0x10 [ 611.512165][T15650] ? stack_depot_save_flags+0x27/0x9d0 [ 611.512190][T15650] ? kasan_save_stack+0x3f/0x50 [ 611.512204][T15650] ? kasan_save_stack+0x30/0x50 [ 611.512216][T15650] ? kasan_save_track+0x14/0x30 [ 611.512230][T15650] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 611.512253][T15650] ? __handle_mm_fault+0xa9e/0x2b60 [ 611.512273][T15650] ? handle_mm_fault+0x36d/0xa20 [ 611.512293][T15650] ? do_user_addr_fault+0x74c/0x12f0 [ 611.512308][T15650] ? asm_exc_page_fault+0x26/0x30 [ 611.512323][T15650] ? _copy_from_iter+0x355/0x1690 [ 611.512342][T15650] ? netlink_sendmsg+0x808/0xda0 [ 611.512357][T15650] ? ____sys_sendmsg+0x9e1/0xb70 [ 611.512375][T15650] ? ___sys_sendmsg+0x190/0x1e0 [ 611.512393][T15650] ? __sys_sendmmsg+0x205/0x430 [ 611.512406][T15650] ? __x64_sys_sendmmsg+0x9c/0x100 [ 611.512420][T15650] ? do_syscall_64+0x106/0xf80 [ 611.512436][T15650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.512459][T15650] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 611.512476][T15650] ? policy_nodemask+0xed/0x4f0 [ 611.512495][T15650] alloc_pages_mpol+0x1fb/0x550 [ 611.512513][T15650] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 611.512535][T15650] alloc_pages_noprof+0x136/0x390 [ 611.512559][T15650] pte_alloc_one+0x1c/0x3d0 [ 611.512577][T15650] do_fault+0x88e/0x18e0 [ 611.512594][T15650] ? __pmd_alloc+0x3fb/0x950 [ 611.512614][T15650] __handle_mm_fault+0x1815/0x2b60 [ 611.512639][T15650] ? mt_find+0x45e/0x8e0 [ 611.512657][T15650] ? __pfx___handle_mm_fault+0x10/0x10 [ 611.512678][T15650] ? __pfx_mt_find+0x10/0x10 [ 611.512705][T15650] ? find_vma+0xbf/0x140 [ 611.512720][T15650] ? __pfx_find_vma+0x10/0x10 [ 611.512737][T15650] handle_mm_fault+0x36d/0xa20 [ 611.512762][T15650] do_user_addr_fault+0x74c/0x12f0 [ 611.512782][T15650] exc_page_fault+0x6f/0xd0 [ 611.512799][T15650] asm_exc_page_fault+0x26/0x30 [ 611.512814][T15650] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 611.512836][T15650] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 611.512850][T15650] RSP: 0018:ffffc9000387f7b8 EFLAGS: 00050206 [ 611.512862][T15650] RAX: 0000000000000001 RBX: ffff88804b360680 RCX: 00000000000000c4 [ 611.512872][T15650] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88804b360680 [ 611.512881][T15650] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100966c0e8 [ 611.512889][T15650] R10: ffff88804b360743 R11: 0000000000000000 R12: ffffc9000387fd40 [ 611.512898][T15650] R13: 0000000000000000 R14: 00000000000000c4 R15: 0000000000000000 [ 611.512916][T15650] _copy_from_iter+0x355/0x1690 [ 611.512938][T15650] ? __asan_memset+0x23/0x50 [ 611.512964][T15650] ? __pfx__copy_from_iter+0x10/0x10 [ 611.512983][T15650] ? __pfx___alloc_skb+0x10/0x10 [ 611.513014][T15650] netlink_sendmsg+0x808/0xda0 [ 611.513034][T15650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.513049][T15650] ? __import_iovec+0x1d2/0x640 [ 611.513070][T15650] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 611.513089][T15650] ____sys_sendmsg+0x9e1/0xb70 [ 611.513107][T15650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.513125][T15650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.513147][T15650] ? __pfx__kstrtoull+0x10/0x10 [ 611.513174][T15650] ___sys_sendmsg+0x190/0x1e0 [ 611.513195][T15650] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.513223][T15650] ? find_held_lock+0x2b/0x80 [ 611.513250][T15650] __sys_sendmmsg+0x205/0x430 [ 611.513268][T15650] ? __pfx___sys_sendmmsg+0x10/0x10 [ 611.513289][T15650] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 611.513314][T15650] ? fput+0x79/0x100 [ 611.513333][T15650] ? ksys_write+0x1ac/0x250 [ 611.513347][T15650] ? __pfx_ksys_write+0x10/0x10 [ 611.513365][T15650] __x64_sys_sendmmsg+0x9c/0x100 [ 611.513380][T15650] ? lockdep_hardirqs_on+0x78/0x100 [ 611.513396][T15650] do_syscall_64+0x106/0xf80 [ 611.513411][T15650] ? clear_bhb_loop+0x40/0x90 [ 611.513433][T15650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.513456][T15650] RIP: 0033:0x7f8a0f39c819 [ 611.513472][T15650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.513486][T15650] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 611.513500][T15650] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 611.513510][T15650] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 611.513518][T15650] RBP: 00007f8a101eb090 R08: 0000000000000000 R09: 0000000000000000 [ 611.513527][T15650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.513536][T15650] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 611.513560][T15650] [ 612.627461][T15655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2543'. [ 614.762600][T15677] ptp ptp0: only physical clock in use now [ 614.856633][T15683] nbd: must specify at least one socket [ 614.986000][T15685] openvswitch: netlink: IP tunnel dst address not specified [ 615.566823][T15702] blktrace: Concurrent blktraces are not allowed on sg0 [ 621.159536][T15812] block nbd0: Unsupported socket: should be TCP or UNIX. [ 622.486249][T15822] FAULT_INJECTION: forcing a failure. [ 622.486249][T15822] name failslab, interval 1, probability 0, space 0, times 0 [ 622.546252][T15822] CPU: 0 UID: 0 PID: 15822 Comm: syz.0.2581 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.546278][T15822] Tainted: [L]=SOFTLOCKUP [ 622.546284][T15822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 622.546293][T15822] Call Trace: [ 622.546298][T15822] [ 622.546305][T15822] dump_stack_lvl+0x100/0x190 [ 622.546334][T15822] should_fail_ex.cold+0x5/0xa [ 622.546359][T15822] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 622.546376][T15822] should_failslab+0xc2/0x120 [ 622.546394][T15822] __kmalloc_noprof+0xe0/0x850 [ 622.546417][T15822] ? trace_kmalloc+0x101/0x130 [ 622.546436][T15822] kernfs_fop_write_iter+0x26a/0x5f0 [ 622.546456][T15822] iter_file_splice_write+0x830/0x10a0 [ 622.546483][T15822] ? __pfx_iter_file_splice_write+0x10/0x10 [ 622.546503][T15822] ? __pfx_copy_splice_read+0x10/0x10 [ 622.546528][T15822] ? __pfx_iter_file_splice_write+0x10/0x10 [ 622.546546][T15822] direct_splice_actor+0x192/0x6c0 [ 622.546563][T15822] splice_direct_to_actor+0x345/0xa30 [ 622.546581][T15822] ? __pfx_direct_splice_actor+0x10/0x10 [ 622.546600][T15822] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 622.546622][T15822] do_splice_direct+0x174/0x240 [ 622.546638][T15822] ? __pfx_do_splice_direct+0x10/0x10 [ 622.546655][T15822] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 622.546673][T15822] ? rw_verify_area+0xce/0x6d0 [ 622.546697][T15822] do_sendfile+0xadc/0xe20 [ 622.546715][T15822] ? __pfx_do_sendfile+0x10/0x10 [ 622.546739][T15822] ? __fget_files+0x21f/0x3d0 [ 622.546758][T15822] __x64_sys_sendfile64+0x1d8/0x220 [ 622.546776][T15822] ? ksys_write+0x1ac/0x250 [ 622.546790][T15822] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 622.546814][T15822] do_syscall_64+0x106/0xf80 [ 622.546831][T15822] ? clear_bhb_loop+0x40/0x90 [ 622.546850][T15822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.546865][T15822] RIP: 0033:0x7f8a0f39c819 [ 622.546878][T15822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.546893][T15822] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 622.546908][T15822] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 622.546918][T15822] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 622.546926][T15822] RBP: 00007f8a101eb090 R08: 0000000000000000 R09: 0000000000000000 [ 622.546935][T15822] R10: 0000000001000200 R11: 0000000000000246 R12: 0000000000000001 [ 622.546943][T15822] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 622.546963][T15822] [ 624.513521][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.519955][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.947040][T12411] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 626.956275][T12411] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 626.964449][T12411] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 626.972471][T12411] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 626.980451][T12411] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 627.678164][T15849] chnl_net:caif_netlink_parms(): no params data found [ 627.953579][T15869] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 628.043942][T15849] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.094712][T15849] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.142343][T15849] bridge_slave_0: entered allmulticast mode [ 628.171651][T15849] bridge_slave_0: entered promiscuous mode [ 628.210266][T15849] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.269335][T15849] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.311899][T15849] bridge_slave_1: entered allmulticast mode [ 628.344870][T15849] bridge_slave_1: entered promiscuous mode [ 628.484055][T15849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.536353][T15849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.683183][T15849] team0: Port device team_slave_0 added [ 628.726725][T15849] team0: Port device team_slave_1 added [ 628.959675][T15849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.007721][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.070721][T12411] Bluetooth: hci0: command tx timeout [ 629.146566][T15849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.205317][T15849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.249993][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.394412][T15849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.741976][T15849] hsr_slave_0: entered promiscuous mode [ 629.772324][T15849] hsr_slave_1: entered promiscuous mode [ 629.778507][T15849] debugfs: 'hsr0' already exists in 'hsr' [ 629.852994][T15849] Cannot create hsr debugfs directory [ 631.078121][T15914] FAULT_INJECTION: forcing a failure. [ 631.078121][T15914] name failslab, interval 1, probability 0, space 0, times 0 [ 631.144055][T12411] Bluetooth: hci0: command tx timeout [ 631.171859][T15914] CPU: 0 UID: 0 PID: 15914 Comm: syz.0.2606 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.171887][T15914] Tainted: [L]=SOFTLOCKUP [ 631.171892][T15914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 631.171901][T15914] Call Trace: [ 631.171906][T15914] [ 631.171913][T15914] dump_stack_lvl+0x100/0x190 [ 631.171942][T15914] should_fail_ex.cold+0x5/0xa [ 631.171960][T15914] ? tomoyo_realpath_from_path+0xb6/0x690 [ 631.171983][T15914] should_failslab+0xc2/0x120 [ 631.172000][T15914] __kmalloc_noprof+0xe0/0x850 [ 631.172028][T15914] tomoyo_realpath_from_path+0xb6/0x690 [ 631.172054][T15914] tomoyo_path_number_perm+0x23c/0x580 [ 631.172072][T15914] ? tomoyo_path_number_perm+0x22e/0x580 [ 631.172092][T15914] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 631.172129][T15914] ? find_held_lock+0x2b/0x80 [ 631.172144][T15914] ? __fget_files+0x215/0x3d0 [ 631.172158][T15914] ? hook_file_ioctl_common+0x146/0x410 [ 631.172181][T15914] ? __fget_files+0x21f/0x3d0 [ 631.172199][T15914] security_file_ioctl+0xd3/0x230 [ 631.172220][T15914] __x64_sys_ioctl+0xb7/0x210 [ 631.172244][T15914] do_syscall_64+0x106/0xf80 [ 631.172260][T15914] ? clear_bhb_loop+0x40/0x90 [ 631.172279][T15914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.172294][T15914] RIP: 0033:0x7f8a0f39c819 [ 631.172307][T15914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.172321][T15914] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 631.172336][T15914] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 631.172346][T15914] RDX: 0000200000000080 RSI: 000000004008ae89 RDI: 0000000000000004 [ 631.172355][T15914] RBP: 00007f8a101eb090 R08: 0000000000000000 R09: 0000000000000000 [ 631.172363][T15914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.172372][T15914] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 631.172391][T15914] [ 631.172398][T15914] ERROR: Out of memory at tomoyo_realpath_from_path. [ 632.544446][T15926] FAULT_INJECTION: forcing a failure. [ 632.544446][T15926] name failslab, interval 1, probability 0, space 0, times 0 [ 632.601155][T15926] CPU: 0 UID: 0 PID: 15926 Comm: syz.3.2611 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.601182][T15926] Tainted: [L]=SOFTLOCKUP [ 632.601187][T15926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 632.601196][T15926] Call Trace: [ 632.601203][T15926] [ 632.601210][T15926] dump_stack_lvl+0x100/0x190 [ 632.601246][T15926] should_fail_ex.cold+0x5/0xa [ 632.601266][T15926] should_failslab+0xc2/0x120 [ 632.601283][T15926] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 632.601308][T15926] ? __alloc_skb+0x140/0x710 [ 632.601335][T15926] __alloc_skb+0x140/0x710 [ 632.601358][T15926] ? __pfx___alloc_skb+0x10/0x10 [ 632.601380][T15926] ? kasan_save_track+0x14/0x30 [ 632.601395][T15926] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 632.601415][T15926] ? ____sys_sendmsg+0x569/0xb70 [ 632.601434][T15926] ? ___sys_sendmsg+0x190/0x1e0 [ 632.601451][T15926] ? __sys_sendmmsg+0x205/0x430 [ 632.601473][T15926] tcp_stream_alloc_skb+0x34/0x660 [ 632.601499][T15926] tcp_sendmsg_locked+0x1396/0x45e0 [ 632.601531][T15926] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 632.601552][T15926] ? do_raw_spin_lock+0x128/0x260 [ 632.601576][T15926] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 632.601603][T15926] ? __local_bh_enable_ip+0x9e/0x120 [ 632.601623][T15926] tcp_sendmsg+0x2e/0x50 [ 632.601640][T15926] ? __pfx_tcp_sendmsg+0x10/0x10 [ 632.601659][T15926] inet_sendmsg+0xb9/0x140 [ 632.601680][T15926] ____sys_sendmsg+0x98d/0xb70 [ 632.601697][T15926] ? __pfx_inet_sendmsg+0x10/0x10 [ 632.601718][T15926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.601740][T15926] ? __pfx__kstrtoull+0x10/0x10 [ 632.601767][T15926] ___sys_sendmsg+0x190/0x1e0 [ 632.601788][T15926] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.601817][T15926] ? find_held_lock+0x2b/0x80 [ 632.601844][T15926] __sys_sendmmsg+0x205/0x430 [ 632.601862][T15926] ? __pfx___sys_sendmmsg+0x10/0x10 [ 632.601883][T15926] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 632.601909][T15926] ? fput+0x79/0x100 [ 632.601927][T15926] ? ksys_write+0x1ac/0x250 [ 632.601942][T15926] ? __pfx_ksys_write+0x10/0x10 [ 632.601959][T15926] __x64_sys_sendmmsg+0x9c/0x100 [ 632.601974][T15926] ? lockdep_hardirqs_on+0x78/0x100 [ 632.601990][T15926] do_syscall_64+0x106/0xf80 [ 632.602006][T15926] ? clear_bhb_loop+0x40/0x90 [ 632.602025][T15926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.602040][T15926] RIP: 0033:0x7fd42a59c819 [ 632.602054][T15926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.602068][T15926] RSP: 002b:00007fd42b50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 632.602083][T15926] RAX: ffffffffffffffda RBX: 00007fd42a815fa0 RCX: 00007fd42a59c819 [ 632.602093][T15926] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 632.602103][T15926] RBP: 00007fd42b50c090 R08: 0000000000000000 R09: 0000000000000000 [ 632.602111][T15926] R10: 000000000f000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.602120][T15926] R13: 00007fd42a816038 R14: 00007fd42a815fa0 R15: 00007fff6d2ffdf8 [ 632.602139][T15926] [ 633.751720][T12411] Bluetooth: hci0: command tx timeout [ 633.982944][T15934] blktrace: Concurrent blktraces are not allowed on sg0 [ 635.274164][T15946] synth uevent: /devices/virtual/net/gretap0: unknown uevent action string [ 635.401916][T15946] net gretap0: uevent: failed to send synthetic uevent: -22 [ 635.781941][T12411] Bluetooth: hci0: command tx timeout [ 636.040519][T15955] Invalid ELF header magic: != ELF [ 637.558269][T15974] netlink: 218 bytes leftover after parsing attributes in process `syz.3.2624'. [ 637.833626][T15978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2626'. [ 637.908239][T15978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2626'. [ 640.735765][T16001] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 641.021284][T16003] netlink: 346 bytes leftover after parsing attributes in process `syz.3.2631'. [ 641.254640][T16005] FAULT_INJECTION: forcing a failure. [ 641.254640][T16005] name failslab, interval 1, probability 0, space 0, times 0 [ 641.307379][T16005] CPU: 0 UID: 0 PID: 16005 Comm: syz.3.2632 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.307405][T16005] Tainted: [L]=SOFTLOCKUP [ 641.307410][T16005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 641.307420][T16005] Call Trace: [ 641.307425][T16005] [ 641.307431][T16005] dump_stack_lvl+0x100/0x190 [ 641.307459][T16005] should_fail_ex.cold+0x5/0xa [ 641.307478][T16005] should_failslab+0xc2/0x120 [ 641.307496][T16005] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 641.307520][T16005] ? taskstats_exit+0x650/0xbd0 [ 641.307538][T16005] taskstats_exit+0x650/0xbd0 [ 641.307552][T16005] ? __pfx_acct_update_integrals+0x10/0x10 [ 641.307569][T16005] ? __pfx_taskstats_exit+0x10/0x10 [ 641.307584][T16005] ? rcu_read_lock_any_held+0x6a/0xa0 [ 641.307600][T16005] ? exit_signals+0x395/0xaf0 [ 641.307619][T16005] do_exit+0x659/0x2b60 [ 641.307642][T16005] ? __pfx_do_exit+0x10/0x10 [ 641.307662][T16005] ? do_raw_spin_lock+0x128/0x260 [ 641.307684][T16005] ? find_held_lock+0x2b/0x80 [ 641.307699][T16005] ? get_signal+0x7e0/0x21e0 [ 641.307716][T16005] do_group_exit+0xd5/0x2a0 [ 641.307738][T16005] get_signal+0x1ec7/0x21e0 [ 641.307759][T16005] ? do_sys_openat2+0x1b4/0x1e0 [ 641.307780][T16005] ? __pfx_get_signal+0x10/0x10 [ 641.307797][T16005] ? do_futex+0x192/0x350 [ 641.307820][T16005] arch_do_signal_or_restart+0x91/0x770 [ 641.307841][T16005] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 641.307865][T16005] ? __pfx___x64_sys_futex+0x10/0x10 [ 641.307889][T16005] exit_to_user_mode_loop+0x86/0x4a0 [ 641.307912][T16005] do_syscall_64+0x668/0xf80 [ 641.307929][T16005] ? clear_bhb_loop+0x40/0x90 [ 641.307947][T16005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.307963][T16005] RIP: 0033:0x7fd42a59c819 [ 641.307977][T16005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.307991][T16005] RSP: 002b:00007fd42b50c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 641.308005][T16005] RAX: fffffffffffffe00 RBX: 00007fd42a815fa8 RCX: 00007fd42a59c819 [ 641.308015][T16005] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd42a815fa8 [ 641.308024][T16005] RBP: 00007fd42a815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 641.308033][T16005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.308042][T16005] R13: 00007fd42a816038 R14: 00007fff6d2ffd10 R15: 00007fff6d2ffdf8 [ 641.308061][T16005] [ 641.309540][T15999] random: crng reseeded on system resumption [ 641.841964][T16009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2633'. [ 646.827851][T16049] FAULT_INJECTION: forcing a failure. [ 646.827851][T16049] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 646.903528][T16049] CPU: 0 UID: 0 PID: 16049 Comm: syz.3.2646 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.903556][T16049] Tainted: [L]=SOFTLOCKUP [ 646.903562][T16049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 646.903572][T16049] Call Trace: [ 646.903578][T16049] [ 646.903585][T16049] dump_stack_lvl+0x100/0x190 [ 646.903614][T16049] should_fail_ex.cold+0x5/0xa [ 646.903630][T16049] ? fs_reclaim_acquire+0x70/0x100 [ 646.903650][T16049] should_fail_alloc_page+0xeb/0x140 [ 646.903669][T16049] prepare_alloc_pages+0x1f0/0x5f0 [ 646.903690][T16049] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 646.903714][T16049] ? trace_kmem_cache_alloc+0xf3/0x120 [ 646.903740][T16049] ? __kasan_slab_alloc+0x89/0x90 [ 646.903757][T16049] ? kmem_cache_alloc_lru_noprof+0x297/0x6e0 [ 646.903781][T16049] ? xas_alloc+0x350/0x460 [ 646.903797][T16049] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 646.903819][T16049] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 646.903846][T16049] ? __lock_acquire+0x4a5/0x2630 [ 646.903870][T16049] ? __lock_acquire+0x4a5/0x2630 [ 646.903892][T16049] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 646.903909][T16049] ? policy_nodemask+0xed/0x4f0 [ 646.903928][T16049] alloc_pages_mpol+0x1fb/0x550 [ 646.903946][T16049] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 646.903964][T16049] ? find_held_lock+0x2b/0x80 [ 646.903981][T16049] alloc_pages_noprof+0x136/0x390 [ 646.903999][T16049] brd_submit_bio+0x116a/0x20d0 [ 646.904027][T16049] ? __pfx_brd_submit_bio+0x10/0x10 [ 646.904050][T16049] ? submit_bio_noacct_nocheck+0x74f/0xc10 [ 646.904074][T16049] ? submit_bio_noacct_nocheck+0x74f/0xc10 [ 646.904096][T16049] ? blk_try_enter_queue+0x1c5/0x4d0 [ 646.904118][T16049] __submit_bio+0x419/0x6c0 [ 646.904141][T16049] ? __pfx___submit_bio+0x10/0x10 [ 646.904170][T16049] ? submit_bio_noacct_nocheck+0x74f/0xc10 [ 646.904192][T16049] submit_bio_noacct_nocheck+0x74f/0xc10 [ 646.904217][T16049] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 646.904242][T16049] ? __pfx___might_resched+0x10/0x10 [ 646.904264][T16049] ? bio_alloc_bioset+0x309/0x850 [ 646.904284][T16049] submit_bio_noacct+0xd17/0x2010 [ 646.904310][T16049] submit_bh_wbc+0x59c/0x770 [ 646.904331][T16049] __block_write_full_folio+0x77f/0xee0 [ 646.904355][T16049] ? __pfx_blkdev_get_block+0x10/0x10 [ 646.904380][T16049] block_write_full_folio+0x3b5/0x4e0 [ 646.904403][T16049] ? __pfx_blkdev_get_block+0x10/0x10 [ 646.904426][T16049] blkdev_writepages+0xc7/0x150 [ 646.904449][T16049] ? __pfx_blkdev_writepages+0x10/0x10 [ 646.904476][T16049] ? do_writepages+0x4b5/0x600 [ 646.904496][T16049] ? __pfx_blkdev_writepages+0x10/0x10 [ 646.904519][T16049] do_writepages+0x278/0x600 [ 646.904540][T16049] ? __pfx_do_writepages+0x10/0x10 [ 646.904557][T16049] ? do_raw_spin_unlock+0x145/0x1e0 [ 646.904579][T16049] ? _raw_spin_unlock+0x28/0x50 [ 646.904604][T16049] filemap_writeback+0x22d/0x2e0 [ 646.904624][T16049] ? __pfx_filemap_writeback+0x10/0x10 [ 646.904643][T16049] ? task_work_run+0x150/0x240 [ 646.904664][T16049] ? exit_to_user_mode_loop+0x100/0x4a0 [ 646.904683][T16049] ? do_syscall_64+0x668/0xf80 [ 646.904718][T16049] ? locks_remove_file+0x42e/0x610 [ 646.904743][T16049] ? locks_remove_file+0x42e/0x610 [ 646.904764][T16049] ? do_raw_spin_unlock+0x145/0x1e0 [ 646.904789][T16049] filemap_write_and_wait_range+0xa6/0x130 [ 646.904813][T16049] bdev_release+0x4d3/0x6d0 [ 646.904837][T16049] ? __pfx_blkdev_release+0x10/0x10 [ 646.904860][T16049] blkdev_release+0x15/0x20 [ 646.904882][T16049] __fput+0x3ff/0xb40 [ 646.904904][T16049] task_work_run+0x150/0x240 [ 646.904927][T16049] ? __pfx_task_work_run+0x10/0x10 [ 646.904953][T16049] exit_to_user_mode_loop+0x100/0x4a0 [ 646.904975][T16049] do_syscall_64+0x668/0xf80 [ 646.904991][T16049] ? clear_bhb_loop+0x40/0x90 [ 646.905010][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.905026][T16049] RIP: 0033:0x7fd42a59c819 [ 646.905040][T16049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.905055][T16049] RSP: 002b:00007fd42b50c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 646.905069][T16049] RAX: 0000000000000000 RBX: 00007fd42a815fa0 RCX: 00007fd42a59c819 [ 646.905080][T16049] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 646.905089][T16049] RBP: 00007fd42a632c91 R08: 0000000000000000 R09: 0000000000000000 [ 646.905099][T16049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.905108][T16049] R13: 00007fd42a816038 R14: 00007fd42a815fa0 R15: 00007fff6d2ffdf8 [ 646.905128][T16049] [ 646.905317][T16049] Buffer I/O error on dev ram10, logical block 11, lost async page write [ 651.302903][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 651.400525][T16084] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2653'. [ 653.737529][T16094] ptp ptp0: new virtual clock ptp1 [ 653.766808][T16094] ptp ptp0: guarantee physical clock free running [ 653.802736][T16097] ptp ptp0: delete virtual clock ptp1 [ 653.838984][T16097] ptp ptp0: only physical clock in use now [ 653.890881][T16094] ptp ptp0: new virtual clock ptp1 [ 653.914990][T16094] ptp ptp0: guarantee physical clock free running [ 654.005055][T16097] nbd: must specify at least one socket [ 654.496039][T16105] QAT: Device 0 not found [ 655.874019][T16123] mmap: syz.3.2663 (16123): VmData 46010368 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 656.244808][T16127] __vm_enough_memory: pid: 16127, comm: syz.3.2665, bytes: 4398046511104 not enough memory for the allocation [ 657.394848][T16143] FAULT_INJECTION: forcing a failure. [ 657.394848][T16143] name failslab, interval 1, probability 0, space 0, times 0 [ 657.442178][T16143] CPU: 0 UID: 0 PID: 16143 Comm: syz.3.2669 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.442205][T16143] Tainted: [L]=SOFTLOCKUP [ 657.442211][T16143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 657.442220][T16143] Call Trace: [ 657.442227][T16143] [ 657.442234][T16143] dump_stack_lvl+0x100/0x190 [ 657.442263][T16143] should_fail_ex.cold+0x5/0xa [ 657.442284][T16143] should_failslab+0xc2/0x120 [ 657.442301][T16143] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 657.442324][T16143] ? __d_alloc+0x34/0xa80 [ 657.442342][T16143] ? __pfx_stack_trace_save+0x10/0x10 [ 657.442361][T16143] __d_alloc+0x34/0xa80 [ 657.442380][T16143] d_alloc_parallel+0x111/0x14e0 [ 657.442408][T16143] ? find_held_lock+0x2b/0x80 [ 657.442422][T16143] ? __d_lookup+0x25c/0x4a0 [ 657.442444][T16143] ? __pfx_d_alloc_parallel+0x10/0x10 [ 657.442468][T16143] ? __d_lookup+0x266/0x4a0 [ 657.442494][T16143] lookup_open.isra.0+0x57c/0x11b0 [ 657.442521][T16143] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 657.442565][T16143] ? lookup_fast+0x2da/0x600 [ 657.442590][T16143] path_openat+0xa98/0x31a0 [ 657.442613][T16143] ? __pfx_path_openat+0x10/0x10 [ 657.442638][T16143] do_file_open+0x20e/0x430 [ 657.442657][T16143] ? __pfx_do_file_open+0x10/0x10 [ 657.442687][T16143] ? alloc_fd+0x476/0x790 [ 657.442705][T16143] ? do_getname+0x191/0x390 [ 657.442726][T16143] do_sys_openat2+0x10d/0x1e0 [ 657.442747][T16143] ? __pfx_do_sys_openat2+0x10/0x10 [ 657.442774][T16143] __x64_sys_openat+0x12d/0x210 [ 657.442794][T16143] ? __pfx___x64_sys_openat+0x10/0x10 [ 657.442822][T16143] do_syscall_64+0x106/0xf80 [ 657.442839][T16143] ? clear_bhb_loop+0x40/0x90 [ 657.442858][T16143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.442873][T16143] RIP: 0033:0x7fd42a59c819 [ 657.442888][T16143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.442903][T16143] RSP: 002b:00007fd42b50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 657.442918][T16143] RAX: ffffffffffffffda RBX: 00007fd42a815fa0 RCX: 00007fd42a59c819 [ 657.442929][T16143] RDX: 0000000000004000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 657.442939][T16143] RBP: 00007fd42a632c91 R08: 0000000000000000 R09: 0000000000000000 [ 657.442948][T16143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.442958][T16143] R13: 00007fd42a816038 R14: 00007fd42a815fa0 R15: 00007fff6d2ffdf8 [ 657.442978][T16143] [ 659.655302][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 659.671954][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 659.680243][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 659.689340][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 659.697362][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 659.729241][T16156] random: crng reseeded on system resumption [ 661.044687][T16157] chnl_net:caif_netlink_parms(): no params data found [ 661.762364][T16157] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.770851][T16157] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.781893][ T51] Bluetooth: hci2: command tx timeout [ 661.831784][T16157] bridge_slave_0: entered allmulticast mode [ 661.857334][T16157] bridge_slave_0: entered promiscuous mode [ 661.882561][T16179] FAULT_INJECTION: forcing a failure. [ 661.882561][T16179] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 661.907486][T16157] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.944594][T16157] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.951876][T16179] CPU: 0 UID: 0 PID: 16179 Comm: syz.3.2676 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.951901][T16179] Tainted: [L]=SOFTLOCKUP [ 661.951907][T16179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 661.951917][T16179] Call Trace: [ 661.951922][T16179] [ 661.951929][T16179] dump_stack_lvl+0x100/0x190 [ 661.951958][T16179] should_fail_ex.cold+0x5/0xa [ 661.951974][T16179] ? prepare_alloc_pages+0x16d/0x5f0 [ 661.951995][T16179] should_fail_alloc_page+0xeb/0x140 [ 661.952013][T16179] prepare_alloc_pages+0x1f0/0x5f0 [ 661.952042][T16179] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 661.952068][T16179] ? lock_acquire+0x1cf/0x380 [ 661.952092][T16179] ? rcu_is_watching+0x12/0xc0 [ 661.952115][T16179] ? mod_memcg_lruvec_state+0x1a6/0x630 [ 661.952141][T16179] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 661.952165][T16179] ? rcu_read_unlock+0x17/0x60 [ 661.952182][T16179] ? rcu_read_unlock+0x17/0x60 [ 661.952202][T16179] ? __folio_mod_stat+0x1ce/0x250 [ 661.952226][T16179] ? split_huge_pmd_locked+0x3ba/0x3b50 [ 661.952248][T16179] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 661.952265][T16179] ? policy_nodemask+0xed/0x4f0 [ 661.952283][T16179] alloc_pages_mpol+0x1fb/0x550 [ 661.952301][T16179] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 661.952323][T16179] alloc_pages_noprof+0x136/0x390 [ 661.952341][T16179] pte_alloc_one+0x1c/0x3d0 [ 661.952359][T16179] __pte_alloc+0x6d/0x3e0 [ 661.952375][T16179] ? __pfx___pte_alloc+0x10/0x10 [ 661.952391][T16179] ? _raw_spin_unlock+0x28/0x50 [ 661.952414][T16179] ? __pmd_alloc+0x3fb/0x950 [ 661.952433][T16179] move_page_tables+0x257e/0x4500 [ 661.952457][T16179] ? __pfx_copy_vma+0x10/0x10 [ 661.952487][T16179] ? __pfx_move_page_tables+0x10/0x10 [ 661.952520][T16179] ? finish_task_switch.isra.0+0x200/0xb80 [ 661.952539][T16179] copy_vma_and_data+0x25c/0x7c0 [ 661.952564][T16179] ? __pfx_copy_vma_and_data+0x10/0x10 [ 661.952594][T16179] ? __vma_start_write+0x17f/0x280 [ 661.952614][T16179] ? __pfx___vma_start_write+0x10/0x10 [ 661.952639][T16179] move_vma+0x51b/0x1890 [ 661.952664][T16179] ? __pfx_move_vma+0x10/0x10 [ 661.952688][T16179] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 661.952707][T16179] ? cap_mmap_addr+0x4b/0x120 [ 661.952722][T16179] ? bpf_lsm_mmap_addr+0x9/0x30 [ 661.952736][T16179] ? security_mmap_addr+0x71/0x1e0 [ 661.952757][T16179] ? __get_unmapped_area+0x255/0x3e0 [ 661.952783][T16179] ? vrm_set_new_addr+0x204/0x290 [ 661.952809][T16179] mremap_to+0x1b7/0x450 [ 661.952832][T16179] do_mremap+0xb76/0x2130 [ 661.952867][T16179] ? __pfx_do_mremap+0x10/0x10 [ 661.952894][T16179] ? ksys_write+0x190/0x250 [ 661.952913][T16179] __do_sys_mremap+0x126/0x170 [ 661.952936][T16179] ? __pfx___do_sys_mremap+0x10/0x10 [ 661.952963][T16179] ? __x64_sys_futex+0x34f/0x4d0 [ 661.952994][T16179] do_syscall_64+0x106/0xf80 [ 661.953010][T16179] ? clear_bhb_loop+0x40/0x90 [ 661.953036][T16179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.953052][T16179] RIP: 0033:0x7fd42a59c819 [ 661.953067][T16179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.953082][T16179] RSP: 002b:00007fd42b50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 661.953097][T16179] RAX: ffffffffffffffda RBX: 00007fd42a815fa0 RCX: 00007fd42a59c819 [ 661.953107][T16179] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 661.953117][T16179] RBP: 00007fd42a632c91 R08: 0000000100000000 R09: 0000000000000000 [ 661.953126][T16179] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 661.953135][T16179] R13: 00007fd42a816038 R14: 00007fd42a815fa0 R15: 00007fff6d2ffdf8 [ 661.953156][T16179] [ 662.673467][T16157] bridge_slave_1: entered allmulticast mode [ 662.680491][T16157] bridge_slave_1: entered promiscuous mode [ 662.767941][T16157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.793754][T16157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.814062][ T51] Bluetooth: hci4: unexpected event 0x3e length: 505 > 260 [ 662.814087][ T51] Bluetooth: hci4: unexpected subevent 0x02 length: 504 > 260 [ 662.830470][ T51] Bluetooth: hci4: Dropping invalid advertising data [ 662.838789][ T51] Bluetooth: hci4: unknown advertising packet type: 0xe9 [ 662.838947][ T51] Bluetooth: hci4: unexpected event 0x3e length: 505 > 260 [ 662.846463][ T51] Bluetooth: hci4: unexpected subevent 0x02 length: 504 > 260 [ 662.862155][ T51] Bluetooth: hci4: Dropping invalid advertising data [ 662.868972][ T51] Bluetooth: hci4: unknown advertising packet type: 0xe9 [ 662.974360][T16157] team0: Port device team_slave_0 added [ 663.026241][T16157] team0: Port device team_slave_1 added [ 663.141241][T16157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.176240][T16157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.315179][T16157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.379330][T16157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.420484][T16157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.581379][T16157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.785876][T16157] hsr_slave_0: entered promiscuous mode [ 663.824546][T16157] hsr_slave_1: entered promiscuous mode [ 663.830668][T16157] debugfs: 'hsr0' already exists in 'hsr' [ 663.862934][ T51] Bluetooth: hci2: command tx timeout [ 663.907946][T16157] Cannot create hsr debugfs directory [ 664.579374][T16200] blktrace: Concurrent blktraces are not allowed on sg0 [ 665.941562][ T51] Bluetooth: hci2: command tx timeout [ 666.672953][T16211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2683'. [ 666.795993][T16211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.916052][T16211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.126497][T16211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.206297][T16211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.023171][ T51] Bluetooth: hci2: command tx timeout [ 674.858300][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'. [ 679.197553][ T29] audit: type=1800 audit(1775886225.584:15): pid=16302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2707" name="trace_pipe" dev="tracefs" ino=3622 res=0 errno=0 [ 679.392622][T16301] Process accounting resumed [ 679.630914][T16320] snd_virmidi snd_virmidi.0: control 65537:9:3:yª:0 is already present [ 680.500208][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2712'. [ 681.904097][T16339] vhci_hcd vhci_hcd.2: invalid port number 16 [ 681.947265][T16339] vhci_hcd vhci_hcd.2: invalid port number 16 [ 685.554550][T16370] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2726'. [ 685.950252][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.956784][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.969193][T12411] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 686.980069][T12411] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 686.988600][T12411] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 686.998473][T12411] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 687.007052][T12411] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 687.023871][T16395] FAULT_INJECTION: forcing a failure. [ 687.023871][T16395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.141993][T16395] CPU: 0 UID: 0 PID: 16395 Comm: syz.3.2733 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.142018][T16395] Tainted: [L]=SOFTLOCKUP [ 687.142023][T16395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 687.142033][T16395] Call Trace: [ 687.142038][T16395] [ 687.142044][T16395] dump_stack_lvl+0x100/0x190 [ 687.142072][T16395] should_fail_ex.cold+0x5/0xa [ 687.142091][T16395] _copy_to_user+0x32/0xd0 [ 687.142113][T16395] simple_read_from_buffer+0xcb/0x170 [ 687.142139][T16395] proc_fail_nth_read+0x1af/0x230 [ 687.142160][T16395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 687.142181][T16395] ? rw_verify_area+0xce/0x6d0 [ 687.142204][T16395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 687.142223][T16395] vfs_read+0x1e4/0xb30 [ 687.142240][T16395] ? __pfx_vfs_read+0x10/0x10 [ 687.142254][T16395] ? __fget_files+0x215/0x3d0 [ 687.142274][T16395] ? __fget_files+0x21f/0x3d0 [ 687.142294][T16395] ksys_read+0x12a/0x250 [ 687.142308][T16395] ? __pfx_ksys_read+0x10/0x10 [ 687.142328][T16395] do_syscall_64+0x106/0xf80 [ 687.142344][T16395] ? clear_bhb_loop+0x40/0x90 [ 687.142363][T16395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.142379][T16395] RIP: 0033:0x7fd42a55d04e [ 687.142391][T16395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 687.142405][T16395] RSP: 002b:00007fd42b50bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 687.142419][T16395] RAX: ffffffffffffffda RBX: 00007fd42b50c6c0 RCX: 00007fd42a55d04e [ 687.142429][T16395] RDX: 000000000000000f RSI: 00007fd42b50c0a0 RDI: 0000000000000007 [ 687.142438][T16395] RBP: 00007fd42b50c090 R08: 0000000000000000 R09: 0000000000000000 [ 687.142447][T16395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.142455][T16395] R13: 00007fd42a816038 R14: 00007fd42a815fa0 R15: 00007fff6d2ffdf8 [ 687.142475][T16395] [ 688.119020][T16394] chnl_net:caif_netlink_parms(): no params data found [ 688.343961][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2735'. [ 688.412892][T16405] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2735'. [ 688.674574][T16394] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.696036][T16394] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.729802][T16394] bridge_slave_0: entered allmulticast mode [ 688.778094][T16394] bridge_slave_0: entered promiscuous mode [ 688.818565][T16413] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2737'. [ 688.960175][T16394] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.005423][T16394] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.047096][T16419] FAULT_INJECTION: forcing a failure. [ 689.047096][T16419] name fail_futex, interval 1, probability 0, space 0, times 0 [ 689.062209][T12411] Bluetooth: hci5: command tx timeout [ 689.072472][T16394] bridge_slave_1: entered allmulticast mode [ 689.105768][T16394] bridge_slave_1: entered promiscuous mode [ 689.122011][T16419] CPU: 0 UID: 0 PID: 16419 Comm: syz.0.2738 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.122044][T16419] Tainted: [L]=SOFTLOCKUP [ 689.122049][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 689.122059][T16419] Call Trace: [ 689.122064][T16419] [ 689.122070][T16419] dump_stack_lvl+0x100/0x190 [ 689.122098][T16419] should_fail_ex.cold+0x5/0xa [ 689.122117][T16419] get_futex_key+0x107c/0x1620 [ 689.122139][T16419] ? __pfx_get_futex_key+0x10/0x10 [ 689.122156][T16419] ? lock_acquire+0x1cf/0x380 [ 689.122183][T16419] futex_wake+0xea/0x530 [ 689.122208][T16419] ? __pfx_futex_wake+0x10/0x10 [ 689.122231][T16419] ? exit_mm_release+0x19/0x30 [ 689.122255][T16419] do_futex+0x32b/0x350 [ 689.122276][T16419] ? __pfx_do_futex+0x10/0x10 [ 689.122294][T16419] ? __might_fault+0xc5/0x140 [ 689.122321][T16419] mm_release+0x24a/0x2f0 [ 689.122337][T16419] do_exit+0x704/0x2b60 [ 689.122360][T16419] ? __pfx_do_exit+0x10/0x10 [ 689.122380][T16419] ? do_raw_spin_lock+0x128/0x260 [ 689.122402][T16419] ? find_held_lock+0x2b/0x80 [ 689.122416][T16419] ? get_signal+0x7e0/0x21e0 [ 689.122434][T16419] do_group_exit+0xd5/0x2a0 [ 689.122456][T16419] get_signal+0x1ec7/0x21e0 [ 689.122477][T16419] ? ksys_write+0x190/0x250 [ 689.122493][T16419] ? __pfx_get_signal+0x10/0x10 [ 689.122510][T16419] ? do_futex+0x192/0x350 [ 689.122532][T16419] arch_do_signal_or_restart+0x91/0x770 [ 689.122553][T16419] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 689.122577][T16419] ? __pfx___x64_sys_futex+0x10/0x10 [ 689.122602][T16419] exit_to_user_mode_loop+0x86/0x4a0 [ 689.122625][T16419] do_syscall_64+0x668/0xf80 [ 689.122642][T16419] ? clear_bhb_loop+0x40/0x90 [ 689.122660][T16419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.122680][T16419] RIP: 0033:0x7f8a0f39c819 [ 689.122694][T16419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.122708][T16419] RSP: 002b:00007f8a101eb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 689.122723][T16419] RAX: fffffffffffffe00 RBX: 00007f8a0f615fa8 RCX: 00007f8a0f39c819 [ 689.122733][T16419] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a0f615fa8 [ 689.122742][T16419] RBP: 00007f8a0f615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 689.122751][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.122759][T16419] R13: 00007f8a0f616038 R14: 00007ffdf25514a0 R15: 00007ffdf2551588 [ 689.122778][T16419] [ 689.881190][T16394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.924239][T16394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.999911][T16394] team0: Port device team_slave_0 added [ 690.619757][T16394] team0: Port device team_slave_1 added [ 690.774384][T16394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.800956][T16394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.853491][T16425] vivid-007: ================= START STATUS ================= [ 690.902056][T16425] vivid-007: Generate PTS: true [ 690.918797][T16425] vivid-007: Generate SCR: true [ 690.938052][T16425] tpg source WxH: 320x240 (Y'CbCr) [ 690.948660][T16394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.978211][T16425] tpg field: 1 [ 690.992565][T16425] tpg crop: (0,0)/320x240 [ 691.009693][T16394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.022489][T16425] tpg compose: (0,0)/320x240 [ 691.027125][T16425] tpg colorspace: 8 [ 691.041319][T16394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.095646][T16425] tpg transfer function: 0/0 [ 691.100398][T16425] tpg Y'CbCr encoding: 0/0 [ 691.144312][T12411] Bluetooth: hci5: command tx timeout [ 691.173188][T16425] tpg quantization: 0/0 [ 691.182948][T16394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.241711][T16425] tpg RGB range: 0/2 [ 691.334957][T16425] vivid-007: ================== END STATUS ================== [ 691.432856][T16394] hsr_slave_0: entered promiscuous mode [ 691.466583][T16394] hsr_slave_1: entered promiscuous mode [ 691.489439][T16394] debugfs: 'hsr0' already exists in 'hsr' [ 691.535100][T16394] Cannot create hsr debugfs directory [ 692.153405][T16440] netlink: 'syz.3.2743': attribute type 11 has an invalid length. [ 692.187264][T16440] netlink: 'syz.3.2743': attribute type 11 has an invalid length. [ 692.236441][T16440] netlink: 'syz.3.2743': attribute type 11 has an invalid length. [ 692.274857][T16440] netlink: 'syz.3.2743': attribute type 11 has an invalid length. [ 692.315073][T16440] netlink: 'syz.3.2743': attribute type 11 has an invalid length. [ 693.091919][T16452] random: crng reseeded on system resumption [ 693.225050][T12411] Bluetooth: hci5: command tx timeout [ 694.628058][T16472] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 694.847918][T16479] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2754'. [ 694.992608][T16481] futex_wake_op: syz.3.2756 tries to shift op by -2048; fix this program [ 695.062893][T16481] ptp ptp0: delete virtual clock ptp1 [ 695.076049][T16481] ptp ptp0: only physical clock in use now [ 695.244408][T16483] blktrace: Concurrent blktraces are not allowed on sg0 [ 695.303666][T12411] Bluetooth: hci5: command tx timeout [ 697.900486][T16506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2764'. [ 697.993854][T16506] ipvlan1: entered promiscuous mode [ 697.999133][T16506] ipvlan1: entered allmulticast mode [ 698.116489][T16506] veth0_vlan: entered allmulticast mode [ 698.820013][T16515] ptp ptp0: only physical clock in use now [ 698.972127][T16517] nbd: must specify at least one socket [ 700.440960][T16543] block2mtd: error: cannot open device [ 701.497609][T16551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2774'. [ 701.874885][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'. [ 704.327450][T16589] snd_virmidi snd_virmidi.0: control 61678:131081:43:yª:1 is already present [ 704.512551][T16592] netlink: 440 bytes leftover after parsing attributes in process `syz.0.2787'. [ 704.615825][T16593] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2787'. [ 706.173262][T16602] FAULT_INJECTION: forcing a failure. [ 706.173262][T16602] name failslab, interval 1, probability 0, space 0, times 0 [ 706.401832][T16602] CPU: 0 UID: 0 PID: 16602 Comm: syz.3.2788 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.401861][T16602] Tainted: [L]=SOFTLOCKUP [ 706.401867][T16602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 706.401877][T16602] Call Trace: [ 706.401883][T16602] [ 706.401890][T16602] dump_stack_lvl+0x100/0x190 [ 706.401918][T16602] should_fail_ex.cold+0x5/0xa [ 706.401938][T16602] should_failslab+0xc2/0x120 [ 706.401955][T16602] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 706.401979][T16602] ? sk_prot_alloc+0x60/0x2a0 [ 706.401996][T16602] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 706.402018][T16602] ? security_inode_alloc+0x3b/0x2c0 [ 706.402039][T16602] sk_prot_alloc+0x60/0x2a0 [ 706.402059][T16602] sk_alloc+0x36/0xe80 [ 706.402081][T16602] unix_create1+0xa6/0x700 [ 706.402101][T16602] unix_create+0x145/0x270 [ 706.402141][T16602] __sock_create+0x339/0x860 [ 706.402171][T16602] __sys_socketpair+0x1e4/0x5b0 [ 706.402193][T16602] ? __pfx___sys_socketpair+0x10/0x10 [ 706.402214][T16602] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 706.402232][T16602] ? xfd_validate_state+0x129/0x190 [ 706.402255][T16602] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 706.402277][T16602] __x64_sys_socketpair+0x96/0x100 [ 706.402298][T16602] ? lockdep_hardirqs_on+0x78/0x100 [ 706.402314][T16602] do_syscall_64+0x106/0xf80 [ 706.402330][T16602] ? clear_bhb_loop+0x40/0x90 [ 706.402348][T16602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.402366][T16602] RIP: 0033:0x7fd42a59c819 [ 706.402380][T16602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.402394][T16602] RSP: 002b:00007fd42b4ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 706.402409][T16602] RAX: ffffffffffffffda RBX: 00007fd42a816180 RCX: 00007fd42a59c819 [ 706.402419][T16602] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 706.402428][T16602] RBP: 00007fd42a632c91 R08: 0000000000000000 R09: 0000000000000000 [ 706.402438][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.402446][T16602] R13: 00007fd42a816218 R14: 00007fd42a816180 R15: 00007fff6d2ffdf8 [ 706.402466][T16602] [ 707.866365][T16624] ubi0: attaching mtd0 [ 707.920724][T16624] ubi0: scanning is finished [ 707.982223][T16624] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 708.730671][T16624] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 709.144905][T16642] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2791'. [ 709.706630][T16647] Process accounting paused [ 710.333880][T16656] FAULT_INJECTION: forcing a failure. [ 710.333880][T16656] name failslab, interval 1, probability 0, space 0, times 0 [ 710.408971][T16656] CPU: 0 UID: 0 PID: 16656 Comm: syz.3.2794 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.408999][T16656] Tainted: [L]=SOFTLOCKUP [ 710.409005][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 710.409015][T16656] Call Trace: [ 710.409021][T16656] [ 710.409027][T16656] dump_stack_lvl+0x100/0x190 [ 710.409057][T16656] should_fail_ex.cold+0x5/0xa [ 710.409078][T16656] should_failslab+0xc2/0x120 [ 710.409095][T16656] __kmalloc_cache_noprof+0x7a/0x6f0 [ 710.409116][T16656] ? snd_virmidi_output_open+0xc4/0x670 [ 710.409142][T16656] snd_virmidi_output_open+0xc4/0x670 [ 710.409173][T16656] open_substream+0x480/0x9e0 [ 710.409197][T16656] rawmidi_open_priv+0x595/0x6f0 [ 710.409222][T16656] snd_rawmidi_open+0x4c9/0xba0 [ 710.409248][T16656] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 710.409272][T16656] ? __pfx_default_wake_function+0x10/0x10 [ 710.409291][T16656] ? kobject_get_unless_zero+0x156/0x200 [ 710.409313][T16656] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 710.409336][T16656] snd_open+0x22d/0x4c0 [ 710.409355][T16656] ? __pfx_snd_open+0x10/0x10 [ 710.409374][T16656] chrdev_open+0x234/0x6a0 [ 710.409390][T16656] ? __pfx_apparmor_file_open+0x10/0x10 [ 710.409408][T16656] ? __pfx_chrdev_open+0x10/0x10 [ 710.409425][T16656] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 710.409447][T16656] do_dentry_open+0x6d8/0x1660 [ 710.409464][T16656] ? __pfx_chrdev_open+0x10/0x10 [ 710.409485][T16656] vfs_open+0x82/0x3f0 [ 710.409508][T16656] path_openat+0x208c/0x31a0 [ 710.409531][T16656] ? __pfx_path_openat+0x10/0x10 [ 710.409554][T16656] do_file_open+0x20e/0x430 [ 710.409572][T16656] ? __pfx_do_file_open+0x10/0x10 [ 710.409602][T16656] ? alloc_fd+0x476/0x790 [ 710.409620][T16656] ? do_getname+0x191/0x390 [ 710.409649][T16656] do_sys_openat2+0x10d/0x1e0 [ 710.409678][T16656] ? __pfx_do_sys_openat2+0x10/0x10 [ 710.409700][T16656] ? __fget_files+0x21f/0x3d0 [ 710.409720][T16656] __x64_sys_openat+0x12d/0x210 [ 710.409742][T16656] ? __pfx___x64_sys_openat+0x10/0x10 [ 710.409771][T16656] do_syscall_64+0x106/0xf80 [ 710.409787][T16656] ? clear_bhb_loop+0x40/0x90 [ 710.409805][T16656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.409821][T16656] RIP: 0033:0x7fd42a59c819 [ 710.409834][T16656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.409849][T16656] RSP: 002b:00007fd42b50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 710.409870][T16656] RAX: ffffffffffffffda RBX: 00007fd42a815fa0 RCX: 00007fd42a59c819 [ 710.409881][T16656] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 710.409890][T16656] RBP: 00007fd42a632c91 R08: 0000000000000000 R09: 0000000000000000 [ 710.409900][T16656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.409909][T16656] R13: 00007fd42a816038 R14: 00007fd42a815fa0 R15: 00007fff6d2ffdf8 [ 710.409929][T16656] [ 718.350794][T16733] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2815'. [ 719.662916][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 719.674133][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 719.684734][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 719.692450][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 719.702753][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 720.014596][T16752] Invalid ELF header magic: != ELF [ 720.316237][T16746] chnl_net:caif_netlink_parms(): no params data found [ 720.682402][T16746] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.732152][T16746] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.739414][T16746] bridge_slave_0: entered allmulticast mode [ 720.812964][T16746] bridge_slave_0: entered promiscuous mode [ 720.852533][T16746] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.859698][T16746] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.918005][T16746] bridge_slave_1: entered allmulticast mode [ 720.962824][T16746] bridge_slave_1: entered promiscuous mode [ 721.094867][T16746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.155832][T16746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.294502][T16746] team0: Port device team_slave_0 added [ 721.332281][T16746] team0: Port device team_slave_1 added [ 721.436358][T16746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.475711][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.667216][T16746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.731383][T16746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.787235][ T51] Bluetooth: hci6: command tx timeout [ 721.795935][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.901634][T16774] ptp ptp0: only physical clock in use now [ 721.989421][T16746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.000537][T16774] ptp ptp0: new virtual clock ptp1 [ 722.050337][T16774] ptp ptp0: guarantee physical clock free running [ 722.133368][T16782] nbd: must specify at least one socket [ 722.403645][T16746] hsr_slave_0: entered promiscuous mode [ 722.441219][T16746] hsr_slave_1: entered promiscuous mode [ 722.476988][T16746] debugfs: 'hsr0' already exists in 'hsr' [ 722.504952][T16746] Cannot create hsr debugfs directory [ 723.866390][T16772] Bluetooth: hci1: command 0x0406 tx timeout [ 723.872981][T16772] Bluetooth: hci6: command tx timeout [ 724.532612][T16808] snd_virmidi snd_virmidi.0: control 65537:9:3:yª:0 is already present [ 725.589395][T16821] zswap: compressor û not available [ 725.828292][T16831] ptp ptp0: guarantee physical clock free running [ 725.874373][T16831] ptp ptp0: guarantee physical clock free running [ 725.903150][T16831] ptp ptp0: guarantee physical clock free running [ 725.943610][ T51] Bluetooth: hci6: command tx timeout [ 727.439889][T16855] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2848'. [ 727.832926][T16864] ptp ptp0: guarantee physical clock free running [ 727.847794][T16864] ptp ptp0: guarantee physical clock free running [ 727.886311][T16864] ptp ptp0: guarantee physical clock free running [ 728.024167][ T51] Bluetooth: hci6: command tx timeout [ 728.366160][T16877] loop6: detected capacity change from 0 to 8 [ 729.953805][T16896] ptp ptp0: guarantee physical clock free running [ 729.984895][T16896] ptp ptp0: guarantee physical clock free running [ 730.007798][T16896] ptp ptp0: guarantee physical clock free running [ 731.559440][T16906] FAULT_INJECTION: forcing a failure. [ 731.559440][T16906] name fail_futex, interval 1, probability 0, space 0, times 0 [ 731.746828][T16906] CPU: 0 UID: 0 PID: 16906 Comm: syz.3.2857 Tainted: G L syzkaller #0 PREEMPT(full) [ 731.746855][T16906] Tainted: [L]=SOFTLOCKUP [ 731.746860][T16906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 731.746868][T16906] Call Trace: [ 731.746873][T16906] [ 731.746879][T16906] dump_stack_lvl+0x100/0x190 [ 731.746907][T16906] should_fail_ex.cold+0x5/0xa [ 731.746926][T16906] get_futex_key+0x107c/0x1620 [ 731.746948][T16906] ? __pfx_get_futex_key+0x10/0x10 [ 731.746966][T16906] ? lock_acquire+0x1cf/0x380 [ 731.746993][T16906] futex_wake+0xea/0x530 [ 731.747018][T16906] ? __pfx_futex_wake+0x10/0x10 [ 731.747041][T16906] ? exit_mm_release+0x19/0x30 [ 731.747065][T16906] do_futex+0x32b/0x350 [ 731.747085][T16906] ? __pfx_do_futex+0x10/0x10 [ 731.747104][T16906] ? __might_fault+0xc5/0x140 [ 731.747131][T16906] mm_release+0x24a/0x2f0 [ 731.747147][T16906] do_exit+0x704/0x2b60 [ 731.747170][T16906] ? __pfx_do_exit+0x10/0x10 [ 731.747190][T16906] ? do_raw_spin_lock+0x128/0x260 [ 731.747212][T16906] ? find_held_lock+0x2b/0x80 [ 731.747226][T16906] ? get_signal+0x7e0/0x21e0 [ 731.747244][T16906] do_group_exit+0xd5/0x2a0 [ 731.747266][T16906] get_signal+0x1ec7/0x21e0 [ 731.747288][T16906] ? __pfx_get_signal+0x10/0x10 [ 731.747305][T16906] ? do_futex+0x192/0x350 [ 731.747327][T16906] arch_do_signal_or_restart+0x91/0x770 [ 731.747348][T16906] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 731.747372][T16906] ? __pfx___x64_sys_futex+0x10/0x10 [ 731.747396][T16906] exit_to_user_mode_loop+0x86/0x4a0 [ 731.747419][T16906] do_syscall_64+0x668/0xf80 [ 731.747435][T16906] ? clear_bhb_loop+0x40/0x90 [ 731.747453][T16906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.747468][T16906] RIP: 0033:0x7fd42a59c819 [ 731.747481][T16906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.747496][T16906] RSP: 002b:00007fd42b4a90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 731.747511][T16906] RAX: fffffffffffffe00 RBX: 00007fd42a816278 RCX: 00007fd42a59c819 [ 731.747520][T16906] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd42a816278 [ 731.747529][T16906] RBP: 00007fd42a816270 R08: 0000000000000000 R09: 0000000000000000 [ 731.747537][T16906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.747546][T16906] R13: 00007fd42a816308 R14: 00007fff6d2ffd10 R15: 00007fff6d2ffdf8 [ 731.747571][T16906] [ 734.870707][T16951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2865'. [ 734.938259][T16951] veth1_macvtap: left promiscuous mode [ 735.351663][T16953] blktrace: Concurrent blktraces are not allowed on sg0 [ 735.746310][T16957] FAULT_INJECTION: forcing a failure. [ 735.746310][T16957] name failslab, interval 1, probability 0, space 0, times 0 [ 735.832570][T16957] CPU: 0 UID: 0 PID: 16957 Comm: syz.0.2867 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.832598][T16957] Tainted: [L]=SOFTLOCKUP [ 735.832603][T16957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 735.832613][T16957] Call Trace: [ 735.832619][T16957] [ 735.832626][T16957] dump_stack_lvl+0x100/0x190 [ 735.832654][T16957] should_fail_ex.cold+0x5/0xa [ 735.832674][T16957] should_failslab+0xc2/0x120 [ 735.832691][T16957] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 735.832714][T16957] ? do_getname+0x35/0x390 [ 735.832737][T16957] do_getname+0x35/0x390 [ 735.832759][T16957] do_sys_openat2+0xc5/0x1e0 [ 735.832780][T16957] ? __pfx_do_sys_openat2+0x10/0x10 [ 735.832807][T16957] __x64_sys_openat+0x12d/0x210 [ 735.832827][T16957] ? __pfx___x64_sys_openat+0x10/0x10 [ 735.832855][T16957] do_syscall_64+0x106/0xf80 [ 735.832872][T16957] ? clear_bhb_loop+0x40/0x90 [ 735.832898][T16957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.832915][T16957] RIP: 0033:0x7f8a0f39c819 [ 735.832929][T16957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.832944][T16957] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 735.832960][T16957] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 735.832969][T16957] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 735.832979][T16957] RBP: 00007f8a0f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 735.832988][T16957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.832997][T16957] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 735.833017][T16957] [ 737.398841][T16985] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2873'. [ 738.043322][T16991] FAULT_INJECTION: forcing a failure. [ 738.043322][T16991] name failslab, interval 1, probability 0, space 0, times 0 [ 738.100963][T16991] CPU: 0 UID: 0 PID: 16991 Comm: syz.0.2875 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.100991][T16991] Tainted: [L]=SOFTLOCKUP [ 738.100997][T16991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 738.101007][T16991] Call Trace: [ 738.101012][T16991] [ 738.101019][T16991] dump_stack_lvl+0x100/0x190 [ 738.101048][T16991] should_fail_ex.cold+0x5/0xa [ 738.101067][T16991] should_failslab+0xc2/0x120 [ 738.101084][T16991] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 738.101112][T16991] ? prepare_creds+0x2c/0x950 [ 738.101134][T16991] ? __x64_sys_futex+0x34f/0x4d0 [ 738.101154][T16991] ? __x64_sys_futex+0x358/0x4d0 [ 738.101177][T16991] prepare_creds+0x2c/0x950 [ 738.101201][T16991] __sys_setresuid+0x458/0x1280 [ 738.101220][T16991] do_syscall_64+0x106/0xf80 [ 738.101236][T16991] ? clear_bhb_loop+0x40/0x90 [ 738.101255][T16991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.101271][T16991] RIP: 0033:0x7f8a0f39c819 [ 738.101285][T16991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.101300][T16991] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 738.101315][T16991] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 738.101324][T16991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 738.101333][T16991] RBP: 00007f8a0f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 738.101342][T16991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.101351][T16991] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 738.101370][T16991] [ 738.969382][T16998] usb usb15: usbfs: process 16998 (syz.0.2878) did not claim interface 0 before use [ 739.067860][T16996] FAULT_INJECTION: forcing a failure. [ 739.067860][T16996] name failslab, interval 1, probability 0, space 0, times 0 [ 739.124985][T16996] CPU: 0 UID: 0 PID: 16996 Comm: syz.3.2877 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.125013][T16996] Tainted: [L]=SOFTLOCKUP [ 739.125019][T16996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 739.125029][T16996] Call Trace: [ 739.125034][T16996] [ 739.125040][T16996] dump_stack_lvl+0x100/0x190 [ 739.125068][T16996] should_fail_ex.cold+0x5/0xa [ 739.125087][T16996] should_failslab+0xc2/0x120 [ 739.125104][T16996] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 739.125127][T16996] ? security_inode_alloc+0x3b/0x2c0 [ 739.125145][T16996] ? lockdep_init_map_type+0x5c/0x250 [ 739.125169][T16996] security_inode_alloc+0x3b/0x2c0 [ 739.125187][T16996] inode_init_always_gfp+0xced/0x1040 [ 739.125207][T16996] alloc_inode+0x8e/0x250 [ 739.125228][T16996] sock_alloc+0x44/0x280 [ 739.125245][T16996] ? security_socket_create+0x7f/0x250 [ 739.125261][T16996] __sock_create+0xc2/0x860 [ 739.125284][T16996] __sys_socketpair+0x1e4/0x5b0 [ 739.125306][T16996] ? __pfx___sys_socketpair+0x10/0x10 [ 739.125327][T16996] ? xfd_validate_state+0x129/0x190 [ 739.125353][T16996] __x64_sys_socketpair+0x96/0x100 [ 739.125373][T16996] ? lockdep_hardirqs_on+0x78/0x100 [ 739.125389][T16996] do_syscall_64+0x106/0xf80 [ 739.125405][T16996] ? clear_bhb_loop+0x40/0x90 [ 739.125423][T16996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.125438][T16996] RIP: 0033:0x7fd42a59c819 [ 739.125452][T16996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.125467][T16996] RSP: 002b:00007fd42b4eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 739.125482][T16996] RAX: ffffffffffffffda RBX: 00007fd42a816090 RCX: 00007fd42a59c819 [ 739.125491][T16996] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 739.125501][T16996] RBP: 00007fd42a632c91 R08: 0000000000000000 R09: 0000000000000000 [ 739.125509][T16996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.125518][T16996] R13: 00007fd42a816128 R14: 00007fd42a816090 R15: 00007fff6d2ffdf8 [ 739.125546][T16996] [ 739.125577][T16996] socket: no more sockets [ 740.208147][T17002] Process accounting resumed [ 740.829265][T17012] FAULT_INJECTION: forcing a failure. [ 740.829265][T17012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.888440][T17012] CPU: 0 UID: 0 PID: 17012 Comm: syz.0.2883 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.888467][T17012] Tainted: [L]=SOFTLOCKUP [ 740.888472][T17012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.888482][T17012] Call Trace: [ 740.888487][T17012] [ 740.888494][T17012] dump_stack_lvl+0x100/0x190 [ 740.888522][T17012] should_fail_ex.cold+0x5/0xa [ 740.888540][T17012] strncpy_from_user+0x3b/0x2d0 [ 740.888562][T17012] do_getname+0x78/0x390 [ 740.888584][T17012] do_sys_openat2+0xc5/0x1e0 [ 740.888605][T17012] ? __pfx_do_sys_openat2+0x10/0x10 [ 740.888624][T17012] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 740.888645][T17012] ? __fget_files+0x21f/0x3d0 [ 740.888663][T17012] __x64_sys_openat+0x12d/0x210 [ 740.888684][T17012] ? __pfx___x64_sys_openat+0x10/0x10 [ 740.888704][T17012] ? ksys_write+0x1ac/0x250 [ 740.888725][T17012] do_syscall_64+0x106/0xf80 [ 740.888741][T17012] ? clear_bhb_loop+0x40/0x90 [ 740.888759][T17012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.888775][T17012] RIP: 0033:0x7f8a0f39c819 [ 740.888788][T17012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.888802][T17012] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 740.888818][T17012] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 740.888828][T17012] RDX: 0000000000000002 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 740.888837][T17012] RBP: 00007f8a101eb090 R08: 0000000000000000 R09: 0000000000000000 [ 740.888846][T17012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.888855][T17012] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 740.888874][T17012] [ 741.462923][T17016] tipc: Started in network mode [ 741.468397][T17016] tipc: Node identity ee00, cluster identity 4711 [ 741.513165][T17016] tipc: Node number set to 60928 [ 741.687850][T17018] FAULT_INJECTION: forcing a failure. [ 741.687850][T17018] name failslab, interval 1, probability 0, space 0, times 0 [ 741.752689][T17018] CPU: 0 UID: 0 PID: 17018 Comm: syz.0.2886 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.752717][T17018] Tainted: [L]=SOFTLOCKUP [ 741.752722][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 741.752732][T17018] Call Trace: [ 741.752737][T17018] [ 741.752745][T17018] dump_stack_lvl+0x100/0x190 [ 741.752772][T17018] should_fail_ex.cold+0x5/0xa [ 741.752792][T17018] should_failslab+0xc2/0x120 [ 741.752810][T17018] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 741.752834][T17018] ? prepare_creds+0x2c/0x950 [ 741.752855][T17018] ? __x64_sys_futex+0x34f/0x4d0 [ 741.752874][T17018] ? __x64_sys_futex+0x358/0x4d0 [ 741.752897][T17018] prepare_creds+0x2c/0x950 [ 741.752921][T17018] __sys_setresuid+0x458/0x1280 [ 741.752940][T17018] do_syscall_64+0x106/0xf80 [ 741.752957][T17018] ? clear_bhb_loop+0x40/0x90 [ 741.752976][T17018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.752993][T17018] RIP: 0033:0x7f8a0f39c819 [ 741.753007][T17018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.753022][T17018] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 741.753037][T17018] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 741.753047][T17018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 741.753056][T17018] RBP: 00007f8a0f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 741.753064][T17018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.753074][T17018] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 741.753094][T17018] [ 744.662892][T17046] zswap: compressor û not available [ 745.238695][T17063] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2899'. [ 746.028282][T17065] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 746.990171][T16801] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 747.002986][T16801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 747.012018][T16801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 747.032283][T16801] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 747.042315][T16801] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 747.213029][T17078] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2904'. [ 747.389157][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.395757][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.681867][T17093] ptp ptp0: guarantee physical clock free running [ 747.754457][T17083] chnl_net:caif_netlink_parms(): no params data found [ 747.779899][T17096] ptp ptp0: guarantee physical clock free running [ 747.846292][T17093] ptp ptp0: guarantee physical clock free running [ 747.872307][T17097] snd_virmidi snd_virmidi.0: control 65537:9:3:yª:0 is already present [ 748.138669][T17083] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.203479][T17083] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.210877][T17083] bridge_slave_0: entered allmulticast mode [ 748.272761][T17083] bridge_slave_0: entered promiscuous mode [ 748.307228][T17083] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.359512][T17083] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.393222][T17083] bridge_slave_1: entered allmulticast mode [ 748.436035][T17083] bridge_slave_1: entered promiscuous mode [ 748.572919][T17083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.640932][T17083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.803543][T17083] team0: Port device team_slave_0 added [ 748.853243][T17083] team0: Port device team_slave_1 added [ 748.970403][T17083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.035749][T17083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.071677][T16801] Bluetooth: hci7: command tx timeout [ 749.176511][T17083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.251676][T17083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.289682][T17083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.429847][T17083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.464340][T16801] Bluetooth: hci0: command 0x0406 tx timeout [ 749.705603][T17083] hsr_slave_0: entered promiscuous mode [ 749.748448][T17083] hsr_slave_1: entered promiscuous mode [ 749.792241][T17083] debugfs: 'hsr0' already exists in 'hsr' [ 749.841560][T17083] Cannot create hsr debugfs directory [ 749.884604][T17123] snd_virmidi snd_virmidi.0: control 65537:9:3:yª:0 is already present [ 750.388683][T17127] blktrace: Concurrent blktraces are not allowed on sg0 [ 751.109659][T17124] FAULT_INJECTION: forcing a failure. [ 751.109659][T17124] name failslab, interval 1, probability 0, space 0, times 0 [ 751.141595][ T51] Bluetooth: hci7: command tx timeout [ 751.339247][T17124] CPU: 0 UID: 0 PID: 17124 Comm: syz.0.2916 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.339276][T17124] Tainted: [L]=SOFTLOCKUP [ 751.339281][T17124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 751.339290][T17124] Call Trace: [ 751.339296][T17124] [ 751.339302][T17124] dump_stack_lvl+0x100/0x190 [ 751.339331][T17124] should_fail_ex.cold+0x5/0xa [ 751.339350][T17124] should_failslab+0xc2/0x120 [ 751.339367][T17124] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 751.339391][T17124] ? sock_alloc_inode+0x25/0x1c0 [ 751.339410][T17124] ? __pfx_sock_alloc_inode+0x10/0x10 [ 751.339429][T17124] sock_alloc_inode+0x25/0x1c0 [ 751.339445][T17124] alloc_inode+0x68/0x250 [ 751.339465][T17124] sock_alloc+0x44/0x280 [ 751.339480][T17124] ? security_socket_create+0x7f/0x250 [ 751.339498][T17124] __sock_create+0xc2/0x860 [ 751.339520][T17124] __sys_socketpair+0x261/0x5b0 [ 751.339541][T17124] ? __pfx___sys_socketpair+0x10/0x10 [ 751.339562][T17124] ? xfd_validate_state+0x129/0x190 [ 751.339589][T17124] __x64_sys_socketpair+0x96/0x100 [ 751.339610][T17124] ? lockdep_hardirqs_on+0x78/0x100 [ 751.339627][T17124] do_syscall_64+0x106/0xf80 [ 751.339643][T17124] ? clear_bhb_loop+0x40/0x90 [ 751.339661][T17124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.339678][T17124] RIP: 0033:0x7f8a0f39c819 [ 751.339692][T17124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.339706][T17124] RSP: 002b:00007f8a101ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 751.339721][T17124] RAX: ffffffffffffffda RBX: 00007f8a0f616090 RCX: 00007f8a0f39c819 [ 751.339731][T17124] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 751.339740][T17124] RBP: 00007f8a0f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 751.339749][T17124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.339757][T17124] R13: 00007f8a0f616128 R14: 00007f8a0f616090 R15: 00007ffdf2551588 [ 751.339776][T17124] [ 751.339785][T17124] socket: no more sockets [ 753.223464][ T51] Bluetooth: hci7: command tx timeout [ 755.302555][ T51] Bluetooth: hci7: command tx timeout [ 756.112221][ T51] Bluetooth: hci3: Unexpected cc 0xffff with no status [ 756.751065][T17206] sd 0:0:1:0: device reset [ 757.153052][T17213] kAFS: No cell specified [ 760.095671][T17237] snd_virmidi snd_virmidi.0: control 65537:9:3:yª:0 is already present [ 760.814306][T17247] FAULT_INJECTION: forcing a failure. [ 760.814306][T17247] name failslab, interval 1, probability 0, space 0, times 0 [ 760.881390][T17247] CPU: 0 UID: 0 PID: 17247 Comm: syz.0.2942 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.881429][T17247] Tainted: [L]=SOFTLOCKUP [ 760.881435][T17247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 760.881445][T17247] Call Trace: [ 760.881450][T17247] [ 760.881456][T17247] dump_stack_lvl+0x100/0x190 [ 760.881487][T17247] should_fail_ex.cold+0x5/0xa [ 760.881507][T17247] ? tomoyo_encode2+0xfb/0x3c0 [ 760.881528][T17247] should_failslab+0xc2/0x120 [ 760.881545][T17247] __kmalloc_noprof+0xe0/0x850 [ 760.881568][T17247] ? d_absolute_path+0x136/0x1b0 [ 760.881592][T17247] tomoyo_encode2+0xfb/0x3c0 [ 760.881616][T17247] tomoyo_encode+0x29/0x50 [ 760.881636][T17247] tomoyo_realpath_from_path+0x18c/0x690 [ 760.881661][T17247] tomoyo_path_number_perm+0x23c/0x580 [ 760.881679][T17247] ? tomoyo_path_number_perm+0x22e/0x580 [ 760.881699][T17247] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 760.881724][T17247] ? do_raw_spin_lock+0x128/0x260 [ 760.881746][T17247] ? find_held_lock+0x2b/0x80 [ 760.881770][T17247] ? __pfx_d_add+0x10/0x10 [ 760.881795][T17247] ? d_alloc+0x176/0x1e0 [ 760.881812][T17247] ? current_check_access_path+0x281/0x460 [ 760.881836][T17247] ? __pfx_current_check_access_path+0x10/0x10 [ 760.881858][T17247] ? simple_lookup+0x105/0x1d0 [ 760.881875][T17247] ? lookup_one_qstr_excl+0xb3/0x250 [ 760.881898][T17247] tomoyo_path_mkdir+0x9b/0xe0 [ 760.881913][T17247] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 760.881932][T17247] security_path_mkdir+0x154/0x2e0 [ 760.881955][T17247] filename_mkdirat+0x168/0x5e0 [ 760.881975][T17247] ? __pfx_filename_mkdirat+0x10/0x10 [ 760.881993][T17247] ? strncpy_from_user+0x19d/0x2d0 [ 760.882014][T17247] ? do_getname+0x191/0x390 [ 760.882035][T17247] __x64_sys_mkdir+0x6b/0x90 [ 760.882053][T17247] do_syscall_64+0x106/0xf80 [ 760.882069][T17247] ? clear_bhb_loop+0x40/0x90 [ 760.882088][T17247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.882111][T17247] RIP: 0033:0x7f8a0f39c819 [ 760.882126][T17247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.882141][T17247] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 760.882156][T17247] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 760.882166][T17247] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000200000000100 [ 760.882175][T17247] RBP: 00007f8a0f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 760.882185][T17247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.882193][T17247] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 760.882215][T17247] [ 762.613869][T17247] ERROR: Out of memory at tomoyo_realpath_from_path. [ 762.903992][T17256] FAULT_INJECTION: forcing a failure. [ 762.903992][T17256] name failslab, interval 1, probability 0, space 0, times 0 [ 762.984013][T17256] CPU: 0 UID: 0 PID: 17256 Comm: syz.0.2945 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.984039][T17256] Tainted: [L]=SOFTLOCKUP [ 762.984045][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 762.984054][T17256] Call Trace: [ 762.984059][T17256] [ 762.984065][T17256] dump_stack_lvl+0x100/0x190 [ 762.984092][T17256] should_fail_ex.cold+0x5/0xa [ 762.984111][T17256] should_failslab+0xc2/0x120 [ 762.984129][T17256] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 762.984152][T17256] ? seq_open+0x55/0x170 [ 762.984180][T17256] ? __pfx_stats_fop_open+0x10/0x10 [ 762.984201][T17256] seq_open+0x55/0x170 [ 762.984222][T17256] __seq_open_private+0x3e/0xd0 [ 762.984244][T17256] sc_common_open+0x6b/0x200 [ 762.984266][T17256] full_proxy_open_regular+0x1b6/0x370 [ 762.984283][T17256] do_dentry_open+0x6d8/0x1660 [ 762.984299][T17256] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 762.984319][T17256] vfs_open+0x82/0x3f0 [ 762.984341][T17256] path_openat+0x208c/0x31a0 [ 762.984365][T17256] ? __pfx_path_openat+0x10/0x10 [ 762.984388][T17256] do_file_open+0x20e/0x430 [ 762.984406][T17256] ? __pfx_do_file_open+0x10/0x10 [ 762.984435][T17256] ? alloc_fd+0x476/0x790 [ 762.984453][T17256] ? do_getname+0x191/0x390 [ 762.984474][T17256] do_sys_openat2+0x10d/0x1e0 [ 762.984495][T17256] ? __pfx_do_sys_openat2+0x10/0x10 [ 762.984517][T17256] ? __fget_files+0x21f/0x3d0 [ 762.984535][T17256] __x64_sys_openat+0x12d/0x210 [ 762.984557][T17256] ? __pfx___x64_sys_openat+0x10/0x10 [ 762.984585][T17256] do_syscall_64+0x106/0xf80 [ 762.984602][T17256] ? clear_bhb_loop+0x40/0x90 [ 762.984620][T17256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.984635][T17256] RIP: 0033:0x7f8a0f39c819 [ 762.984647][T17256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.984662][T17256] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 762.984676][T17256] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 762.984686][T17256] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 762.984696][T17256] RBP: 00007f8a0f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 762.984705][T17256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.984713][T17256] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 762.984733][T17256] [ 763.349327][T17264] snd_virmidi snd_virmidi.0: control 65537:9:3:yª:0 is already present [ 763.732989][T17280] random: crng reseeded on system resumption [ 763.817897][T17280] hub 1-0:1.0: USB hub found [ 763.852530][T17280] hub 1-0:1.0: 1 port detected [ 763.964009][T17278] veth1_to_batadv: entered promiscuous mode [ 764.073459][T17283] snd_virmidi snd_virmidi.0: control 65537:9:3:yª:0 is already present [ 764.366806][T17287] random: crng reseeded on system resumption [ 764.416860][T17274] veth1_to_batadv: left promiscuous mode [ 764.587710][T17288] FAULT_INJECTION: forcing a failure. [ 764.587710][T17288] name fail_futex, interval 1, probability 0, space 0, times 0 [ 764.639319][T17288] CPU: 0 UID: 0 PID: 17288 Comm: syz.3.2957 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.639345][T17288] Tainted: [L]=SOFTLOCKUP [ 764.639350][T17288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 764.639359][T17288] Call Trace: [ 764.639365][T17288] [ 764.639371][T17288] dump_stack_lvl+0x100/0x190 [ 764.639399][T17288] should_fail_ex.cold+0x5/0xa [ 764.639418][T17288] should_fail_futex+0x4c/0x60 [ 764.639437][T17288] __x64_sys_futex+0x1f0/0x4d0 [ 764.639460][T17288] ? __pfx___x64_sys_futex+0x10/0x10 [ 764.639487][T17288] do_syscall_64+0x106/0xf80 [ 764.639504][T17288] ? clear_bhb_loop+0x40/0x90 [ 764.639523][T17288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.639539][T17288] RIP: 0033:0x7fd42a59c819 [ 764.639552][T17288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.639567][T17288] RSP: 002b:00007fff6d2fff58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 764.639582][T17288] RAX: ffffffffffffffda RBX: 00000000000baa82 RCX: 00007fd42a59c819 [ 764.639592][T17288] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd42a815fac [ 764.639601][T17288] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 764.639610][T17288] R10: 00007fff6d300060 R11: 0000000000000246 R12: 00007fff6d300080 [ 764.639619][T17288] R13: 00007fd42a815fac R14: 00000000000baab4 R15: 00007fff6d300060 [ 764.639638][T17288] [ 765.510959][T17292] FAULT_INJECTION: forcing a failure. [ 765.510959][T17292] name failslab, interval 1, probability 0, space 0, times 0 [ 765.568148][T17292] CPU: 0 UID: 0 PID: 17292 Comm: syz.0.2958 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.568176][T17292] Tainted: [L]=SOFTLOCKUP [ 765.568181][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 765.568190][T17292] Call Trace: [ 765.568196][T17292] [ 765.568203][T17292] dump_stack_lvl+0x100/0x190 [ 765.568233][T17292] should_fail_ex.cold+0x5/0xa [ 765.568253][T17292] ? tomoyo_realpath_from_path+0xb6/0x690 [ 765.568275][T17292] should_failslab+0xc2/0x120 [ 765.568292][T17292] __kmalloc_noprof+0xe0/0x850 [ 765.568321][T17292] tomoyo_realpath_from_path+0xb6/0x690 [ 765.568347][T17292] tomoyo_check_open_permission+0x2af/0x3c0 [ 765.568367][T17292] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 765.568404][T17292] ? do_raw_spin_lock+0x128/0x260 [ 765.568428][T17292] ? path_get+0x61/0x80 [ 765.568447][T17292] tomoyo_file_open+0x6b/0x90 [ 765.568463][T17292] security_file_open+0xb5/0x1e0 [ 765.568483][T17292] do_dentry_open+0x5aa/0x1660 [ 765.568502][T17292] ? security_inode_permission+0xbf/0x250 [ 765.568524][T17292] vfs_open+0x82/0x3f0 [ 765.568546][T17292] path_openat+0x208c/0x31a0 [ 765.568569][T17292] ? __pfx_path_openat+0x10/0x10 [ 765.568593][T17292] do_file_open+0x20e/0x430 [ 765.568611][T17292] ? __pfx_do_file_open+0x10/0x10 [ 765.568641][T17292] ? alloc_fd+0x476/0x790 [ 765.568669][T17292] ? do_getname+0x191/0x390 [ 765.568691][T17292] do_sys_openat2+0x10d/0x1e0 [ 765.568713][T17292] ? __pfx_do_sys_openat2+0x10/0x10 [ 765.568741][T17292] __x64_sys_openat+0x12d/0x210 [ 765.568763][T17292] ? __pfx___x64_sys_openat+0x10/0x10 [ 765.568792][T17292] do_syscall_64+0x106/0xf80 [ 765.568809][T17292] ? clear_bhb_loop+0x40/0x90 [ 765.568828][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.568844][T17292] RIP: 0033:0x7f8a0f39c819 [ 765.568859][T17292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.568874][T17292] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 765.568889][T17292] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 765.568899][T17292] RDX: 0000000000000100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 765.568910][T17292] RBP: 00007f8a0f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 765.568919][T17292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.568928][T17292] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 765.568949][T17292] [ 765.568957][T17292] ERROR: Out of memory at tomoyo_realpath_from_path. [ 766.599859][T17298] random: crng reseeded on system resumption [ 766.645109][T17298] FAULT_INJECTION: forcing a failure. [ 766.645109][T17298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 766.720460][T17298] CPU: 0 UID: 0 PID: 17298 Comm: syz.0.2958 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.720489][T17298] Tainted: [L]=SOFTLOCKUP [ 766.720495][T17298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 766.720505][T17298] Call Trace: [ 766.720512][T17298] [ 766.720519][T17298] dump_stack_lvl+0x100/0x190 [ 766.720548][T17298] should_fail_ex.cold+0x5/0xa [ 766.720565][T17298] ? prepare_alloc_pages+0x16d/0x5f0 [ 766.720585][T17298] should_fail_alloc_page+0xeb/0x140 [ 766.720605][T17298] prepare_alloc_pages+0x1f0/0x5f0 [ 766.720626][T17298] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 766.720652][T17298] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 766.720683][T17298] ? stack_trace_save+0x8e/0xc0 [ 766.720703][T17298] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 766.720727][T17298] ? stack_depot_save_flags+0x27/0x9d0 [ 766.720748][T17298] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 766.720775][T17298] ? kasan_save_stack+0x3f/0x50 [ 766.720788][T17298] ? kasan_save_stack+0x30/0x50 [ 766.720801][T17298] ? kasan_save_track+0x14/0x30 [ 766.720819][T17298] ? do_sys_openat2+0x10d/0x1e0 [ 766.720838][T17298] ? __x64_sys_openat+0x12d/0x210 [ 766.720858][T17298] ? do_syscall_64+0x106/0xf80 [ 766.720874][T17298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.720891][T17298] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 766.720909][T17298] ? policy_nodemask+0xed/0x4f0 [ 766.720928][T17298] alloc_pages_mpol+0x1fb/0x550 [ 766.720947][T17298] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 766.720965][T17298] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 766.720985][T17298] alloc_pages_noprof+0x136/0x390 [ 766.721004][T17298] get_zeroed_page_noprof+0x18/0xb0 [ 766.721022][T17298] get_image_page+0x18/0x1a0 [ 766.721038][T17298] alloc_rtree_node+0x3c/0xb0 [ 766.721053][T17298] memory_bm_create+0x65e/0xba0 [ 766.721077][T17298] create_basic_memory_bitmaps+0xbd/0x350 [ 766.721097][T17298] snapshot_open+0x230/0x2a0 [ 766.721115][T17298] ? __pfx_snapshot_open+0x10/0x10 [ 766.721134][T17298] misc_open+0x26d/0x450 [ 766.721153][T17298] ? __pfx_misc_open+0x10/0x10 [ 766.721172][T17298] chrdev_open+0x234/0x6a0 [ 766.721189][T17298] ? __pfx_apparmor_file_open+0x10/0x10 [ 766.721207][T17298] ? __pfx_chrdev_open+0x10/0x10 [ 766.721225][T17298] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 766.721247][T17298] do_dentry_open+0x6d8/0x1660 [ 766.721263][T17298] ? __pfx_chrdev_open+0x10/0x10 [ 766.721286][T17298] vfs_open+0x82/0x3f0 [ 766.721309][T17298] path_openat+0x208c/0x31a0 [ 766.721333][T17298] ? __pfx_path_openat+0x10/0x10 [ 766.721357][T17298] do_file_open+0x20e/0x430 [ 766.721376][T17298] ? __pfx_do_file_open+0x10/0x10 [ 766.721411][T17298] ? alloc_fd+0x476/0x790 [ 766.721431][T17298] ? do_getname+0x191/0x390 [ 766.721459][T17298] do_sys_openat2+0x10d/0x1e0 [ 766.721482][T17298] ? __pfx_do_sys_openat2+0x10/0x10 [ 766.721510][T17298] __x64_sys_openat+0x12d/0x210 [ 766.721532][T17298] ? __pfx___x64_sys_openat+0x10/0x10 [ 766.721561][T17298] do_syscall_64+0x106/0xf80 [ 766.721578][T17298] ? clear_bhb_loop+0x40/0x90 [ 766.721596][T17298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.721612][T17298] RIP: 0033:0x7f8a0f39c819 [ 766.721627][T17298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.721642][T17298] RSP: 002b:00007f8a101ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 766.721658][T17298] RAX: ffffffffffffffda RBX: 00007f8a0f616090 RCX: 00007f8a0f39c819 [ 766.721669][T17298] RDX: 0000000000000401 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 766.721679][T17298] RBP: 00007f8a0f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 766.721689][T17298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.721700][T17298] R13: 00007f8a0f616128 R14: 00007f8a0f616090 R15: 00007ffdf2551588 [ 766.721721][T17298] [ 768.778585][T17312] FAULT_INJECTION: forcing a failure. [ 768.778585][T17312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.851686][T17312] CPU: 0 UID: 0 PID: 17312 Comm: syz.3.2964 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.851718][T17312] Tainted: [L]=SOFTLOCKUP [ 768.851724][T17312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 768.851733][T17312] Call Trace: [ 768.851739][T17312] [ 768.851746][T17312] dump_stack_lvl+0x100/0x190 [ 768.851779][T17312] should_fail_ex.cold+0x5/0xa [ 768.851799][T17312] _copy_from_user+0x2e/0xd0 [ 768.851821][T17312] memdup_user_nul+0x6c/0x120 [ 768.851838][T17312] event_inject_write+0xcb/0x2190 [ 768.851861][T17312] ? __pfx_aa_file_perm+0x10/0x10 [ 768.851889][T17312] ? __pfx_event_inject_write+0x10/0x10 [ 768.851908][T17312] ? __pfx___might_resched+0x10/0x10 [ 768.851932][T17312] ? lock_acquire+0x1cf/0x380 [ 768.851964][T17312] vfs_write+0x2aa/0x1070 [ 768.851980][T17312] ? __pfx_event_inject_write+0x10/0x10 [ 768.852003][T17312] ? __pfx_vfs_write+0x10/0x10 [ 768.852018][T17312] ? __fget_files+0x215/0x3d0 [ 768.852038][T17312] ? __fget_files+0x21f/0x3d0 [ 768.852059][T17312] ksys_write+0x12a/0x250 [ 768.852074][T17312] ? __pfx_ksys_write+0x10/0x10 [ 768.852095][T17312] do_syscall_64+0x106/0xf80 [ 768.852111][T17312] ? clear_bhb_loop+0x40/0x90 [ 768.852130][T17312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.852146][T17312] RIP: 0033:0x7fd42a59c819 [ 768.852160][T17312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.852175][T17312] RSP: 002b:00007fd42b50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 768.852190][T17312] RAX: ffffffffffffffda RBX: 00007fd42a815fa0 RCX: 00007fd42a59c819 [ 768.852202][T17312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 768.852213][T17312] RBP: 00007fd42b50c090 R08: 0000000000000000 R09: 0000000000000000 [ 768.852223][T17312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.852232][T17312] R13: 00007fd42a816038 R14: 00007fd42a815fa0 R15: 00007fff6d2ffdf8 [ 768.852252][T17312] [ 770.484915][T17330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'. [ 770.566983][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 771.216101][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2968'. [ 771.252341][T17333] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2968'. [ 771.301076][T17313] Process accounting paused [ 771.307572][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2968'. [ 772.806635][T17353] blktrace: Concurrent blktraces are not allowed on sg0 [ 775.229516][T17376] FAULT_INJECTION: forcing a failure. [ 775.229516][T17376] name failslab, interval 1, probability 0, space 0, times 0 [ 775.295620][T17376] CPU: 0 UID: 0 PID: 17376 Comm: syz.0.2977 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.295648][T17376] Tainted: [L]=SOFTLOCKUP [ 775.295653][T17376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 775.295663][T17376] Call Trace: [ 775.295669][T17376] [ 775.295675][T17376] dump_stack_lvl+0x100/0x190 [ 775.295703][T17376] should_fail_ex.cold+0x5/0xa [ 775.295723][T17376] should_failslab+0xc2/0x120 [ 775.295741][T17376] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 775.295766][T17376] ? __alloc_skb+0x140/0x710 [ 775.295794][T17376] __alloc_skb+0x140/0x710 [ 775.295816][T17376] ? __alloc_skb+0x5b7/0x710 [ 775.295838][T17376] ? __pfx___alloc_skb+0x10/0x10 [ 775.295862][T17376] ? if_nlmsg_size+0x5f6/0xd20 [ 775.295881][T17376] rtmsg_ifinfo_build_skb+0x81/0x260 [ 775.295902][T17376] rtmsg_ifinfo+0xa4/0x1b0 [ 775.295923][T17376] netif_state_change+0x17f/0x380 [ 775.295942][T17376] ? __pfx_netif_state_change+0x10/0x10 [ 775.295967][T17376] netdev_state_change+0xaa/0x240 [ 775.295986][T17376] ifalias_store+0x180/0x1c0 [ 775.296009][T17376] ? __pfx_ifalias_store+0x10/0x10 [ 775.296029][T17376] dev_attr_store+0x58/0x80 [ 775.296050][T17376] ? __pfx_dev_attr_store+0x10/0x10 [ 775.296070][T17376] sysfs_kf_write+0xf2/0x150 [ 775.296092][T17376] kernfs_fop_write_iter+0x3e0/0x5f0 [ 775.296109][T17376] ? __pfx_sysfs_kf_write+0x10/0x10 [ 775.296132][T17376] vfs_write+0x6ac/0x1070 [ 775.296148][T17376] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 775.296168][T17376] ? __pfx_vfs_write+0x10/0x10 [ 775.296199][T17376] ksys_write+0x12a/0x250 [ 775.296214][T17376] ? __pfx_ksys_write+0x10/0x10 [ 775.296236][T17376] do_syscall_64+0x106/0xf80 [ 775.296253][T17376] ? clear_bhb_loop+0x40/0x90 [ 775.296272][T17376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.296287][T17376] RIP: 0033:0x7f8a0f39c819 [ 775.296301][T17376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.296315][T17376] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 775.296331][T17376] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 775.296342][T17376] RDX: 0000000000000007 RSI: 0000200000000500 RDI: 0000000000000003 [ 775.296351][T17376] RBP: 00007f8a101eb090 R08: 0000000000000000 R09: 0000000000000000 [ 775.296360][T17376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.296369][T17376] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 775.296390][T17376] [ 777.718778][T17393] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2980'. [ 778.679135][T17400] snd_virmidi snd_virmidi.0: control 65537:9:3:yª:0 is already present [ 778.773731][T17402] block nbd0: NBD_DISCONNECT [ 778.952664][T17405] snd_virmidi snd_virmidi.0: control 65537:9:3:yª:0 is already present [ 779.816879][T17420] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 779.925759][T16801] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 779.935591][T16801] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 779.944957][T16801] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 779.952682][T16801] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 779.960878][T16801] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 780.992015][T17421] chnl_net:caif_netlink_parms(): no params data found [ 781.421652][T17432] FAULT_INJECTION: forcing a failure. [ 781.421652][T17432] name fail_futex, interval 1, probability 0, space 0, times 0 [ 781.463466][T17421] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.470681][T17421] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.521730][T17421] bridge_slave_0: entered allmulticast mode [ 781.582059][T17421] bridge_slave_0: entered promiscuous mode [ 781.632439][T17421] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.639553][T17421] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.662622][T17432] CPU: 0 UID: 0 PID: 17432 Comm: syz.0.2989 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.662647][T17432] Tainted: [L]=SOFTLOCKUP [ 781.662652][T17432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 781.662662][T17432] Call Trace: [ 781.662668][T17432] [ 781.662675][T17432] dump_stack_lvl+0x100/0x190 [ 781.662703][T17432] should_fail_ex.cold+0x5/0xa [ 781.662723][T17432] get_futex_key+0x295/0x1620 [ 781.662745][T17432] ? __pfx_get_futex_key+0x10/0x10 [ 781.662763][T17432] ? lock_acquire+0x1cf/0x380 [ 781.662789][T17432] futex_wake+0xea/0x530 [ 781.662814][T17432] ? __pfx_futex_wake+0x10/0x10 [ 781.662838][T17432] ? exit_mm_release+0x19/0x30 [ 781.662874][T17432] do_futex+0x32b/0x350 [ 781.662895][T17432] ? __pfx_do_futex+0x10/0x10 [ 781.662914][T17432] ? __might_fault+0xc5/0x140 [ 781.662942][T17432] mm_release+0x24a/0x2f0 [ 781.662958][T17432] do_exit+0x704/0x2b60 [ 781.662981][T17432] ? __pfx_do_exit+0x10/0x10 [ 781.663001][T17432] ? do_raw_spin_lock+0x128/0x260 [ 781.663024][T17432] ? find_held_lock+0x2b/0x80 [ 781.663039][T17432] ? get_signal+0x7e0/0x21e0 [ 781.663058][T17432] do_group_exit+0xd5/0x2a0 [ 781.663080][T17432] get_signal+0x1ec7/0x21e0 [ 781.663101][T17432] ? ksys_write+0x190/0x250 [ 781.663118][T17432] ? __pfx_get_signal+0x10/0x10 [ 781.663136][T17432] ? do_futex+0x192/0x350 [ 781.663158][T17432] arch_do_signal_or_restart+0x91/0x770 [ 781.663180][T17432] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 781.663204][T17432] ? __pfx___x64_sys_futex+0x10/0x10 [ 781.663230][T17432] exit_to_user_mode_loop+0x86/0x4a0 [ 781.663253][T17432] do_syscall_64+0x668/0xf80 [ 781.663270][T17432] ? clear_bhb_loop+0x40/0x90 [ 781.663289][T17432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.663305][T17432] RIP: 0033:0x7f8a0f39c819 [ 781.663319][T17432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.663334][T17432] RSP: 002b:00007f8a101eb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 781.663350][T17432] RAX: fffffffffffffe00 RBX: 00007f8a0f615fa8 RCX: 00007f8a0f39c819 [ 781.663360][T17432] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a0f615fa8 [ 781.663370][T17432] RBP: 00007f8a0f615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 781.663379][T17432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.663388][T17432] R13: 00007f8a0f616038 R14: 00007ffdf25514a0 R15: 00007ffdf2551588 [ 781.663408][T17432] [ 782.201700][T17421] bridge_slave_1: entered allmulticast mode [ 782.208912][T17421] bridge_slave_1: entered promiscuous mode [ 782.331848][T16801] Bluetooth: hci8: command tx timeout [ 782.368527][T17421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.443842][T17421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.560506][T17421] team0: Port device team_slave_0 added [ 782.623727][T17421] team0: Port device team_slave_1 added [ 782.720334][T17421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.781492][T17421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.921553][T17421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.972994][T17421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.980260][T17421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.144819][T17421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.374974][T17421] hsr_slave_0: entered promiscuous mode [ 783.421955][T17421] hsr_slave_1: entered promiscuous mode [ 783.458002][T17421] debugfs: 'hsr0' already exists in 'hsr' [ 783.507619][T17421] Cannot create hsr debugfs directory [ 783.719502][T17447] snd_virmidi snd_virmidi.0: control 65537:9:3:yª:0 is already present [ 784.342820][ T51] Bluetooth: hci8: command tx timeout [ 785.307683][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 786.425133][T16801] Bluetooth: hci8: command tx timeout [ 786.586087][T17475] syz.3.2994 (17475): /proc/17463/oom_adj is deprecated, please use /proc/17463/oom_score_adj instead. [ 788.501782][T16801] Bluetooth: hci8: command tx timeout [ 789.274349][T17504] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2998'. [ 795.169996][T17557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 795.210706][T17557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 795.244250][T17557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 795.250227][T17557] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 795.308819][T17557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 795.332482][T17557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 795.354988][T17557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 795.369735][T17557] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 795.409933][T17557] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 795.433980][T17557] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 795.455381][T17557] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 795.478834][T17557] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 795.504870][T17557] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 795.538927][T17557] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 795.572975][T17557] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 795.596375][T17557] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 795.626484][T17557] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 795.663443][T17557] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 795.691584][T17557] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 795.715597][T17557] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 796.421783][T16801] Bluetooth: hci4: command 0x0c1a tx timeout [ 797.221626][T16801] Bluetooth: hci3: command 0x0c1a tx timeout [ 797.301776][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 797.382907][T16801] Bluetooth: hci2: command 0x0406 tx timeout [ 797.389007][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 797.464241][T16801] Bluetooth: hci5: command 0x0c1a tx timeout [ 797.543164][T16801] Bluetooth: hci6: command 0x0c1a tx timeout [ 797.621633][T16801] Bluetooth: hci7: command 0x0c1a tx timeout [ 797.702733][T16801] Bluetooth: hci8: command 0x0c1a tx timeout [ 799.382012][T16801] Bluetooth: hci1: command 0x0406 tx timeout [ 799.461579][T16801] Bluetooth: hci2: command 0x0406 tx timeout [ 799.468347][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 799.544477][T16801] Bluetooth: hci5: command 0x0c1a tx timeout [ 799.623267][T16801] Bluetooth: hci6: command 0x0c1a tx timeout [ 799.701544][T16801] Bluetooth: hci7: command 0x0c1a tx timeout [ 799.782124][T16801] Bluetooth: hci8: command 0x0c1a tx timeout [ 801.622621][T16801] Bluetooth: hci5: command 0x0c1a tx timeout [ 801.702944][T16801] Bluetooth: hci6: command 0x0c1a tx timeout [ 801.745513][T17585] Process accounting resumed [ 801.787735][T16801] Bluetooth: hci7: command 0x0c1a tx timeout [ 801.862713][T16801] Bluetooth: hci8: command 0x0c1a tx timeout [ 802.285522][T17621] FAULT_INJECTION: forcing a failure. [ 802.285522][T17621] name failslab, interval 1, probability 0, space 0, times 0 [ 802.362206][T17621] CPU: 0 UID: 0 PID: 17621 Comm: syz.0.3016 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.362234][T17621] Tainted: [L]=SOFTLOCKUP [ 802.362241][T17621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 802.362251][T17621] Call Trace: [ 802.362257][T17621] [ 802.362264][T17621] dump_stack_lvl+0x100/0x190 [ 802.362294][T17621] should_fail_ex.cold+0x5/0xa [ 802.362314][T17621] ? vhost_dev_set_owner+0x190/0xa30 [ 802.362329][T17621] should_failslab+0xc2/0x120 [ 802.362347][T17621] __kmalloc_noprof+0xe0/0x850 [ 802.362376][T17621] vhost_dev_set_owner+0x190/0xa30 [ 802.362399][T17621] vhost_net_ioctl+0xfa3/0x1910 [ 802.362414][T17621] ? do_vfs_ioctl+0x226/0x13e0 [ 802.362437][T17621] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 802.362459][T17621] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 802.362480][T17621] ? hook_file_ioctl_common+0x146/0x410 [ 802.362509][T17621] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 802.362526][T17621] __x64_sys_ioctl+0x18e/0x210 [ 802.362549][T17621] do_syscall_64+0x106/0xf80 [ 802.362566][T17621] ? clear_bhb_loop+0x40/0x90 [ 802.362585][T17621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.362601][T17621] RIP: 0033:0x7f8a0f39c819 [ 802.362615][T17621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.362630][T17621] RSP: 002b:00007f8a101eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 802.362645][T17621] RAX: ffffffffffffffda RBX: 00007f8a0f615fa0 RCX: 00007f8a0f39c819 [ 802.362656][T17621] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000005 [ 802.362664][T17621] RBP: 00007f8a0f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 802.362674][T17621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.362682][T17621] R13: 00007f8a0f616038 R14: 00007f8a0f615fa0 R15: 00007ffdf2551588 [ 802.362703][T17621] [ 804.063053][T12669] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:51: bg 2: bad block bitmap checksum [ 804.119369][T12669] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1359 with max blocks 10 with error 74 [ 804.202565][T12669] EXT4-fs (sda1): This should not happen!! Data will be lost [ 804.202565][T12669] [ 807.623254][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 807.633577][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 807.642091][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 807.650021][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 807.658940][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 808.826528][ T30] INFO: task syz-executor:15440 blocked for more than 184 seconds. [ 808.835454][ T30] Tainted: G L syzkaller #0 [ 808.851034][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.862703][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 808.869223][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 808.961542][ T30] task:syz-executor state:D stack:24280 pid:15440 tgid:15440 ppid:1 task_flags:0x480140 flags:0x00080002 [ 809.001577][T17683] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 809.001577][T17683] The task syz.3.3031 (17683) triggered the difference, watch for misbehavior. [ 809.109284][ T30] Call Trace: [ 809.192073][ T30] [ 809.195114][ T30] __schedule+0xfee/0x6120 [ 809.199532][ T30] ? __lock_acquire+0x4a5/0x2630 [ 809.351497][ T30] ? __pfx___schedule+0x10/0x10 [ 809.356393][ T30] ? find_held_lock+0x2b/0x80 [ 809.450296][ T30] ? schedule+0x2bf/0x390 [ 809.481481][ T30] schedule+0xdd/0x390 [ 809.485635][ T30] schedule_timeout+0x1b2/0x280 [ 809.490518][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 809.631569][ T30] ? mark_held_locks+0x40/0x70 [ 809.636381][ T30] __wait_for_common+0x2e7/0x4c0 [ 809.641344][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 809.711702][ T51] Bluetooth: hci9: command tx timeout [ 809.772218][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 809.777753][ T30] remove_one+0x312/0x420 [ 809.865503][ T30] ? find_next_child+0x18f/0x280 [ 809.908648][ T30] __simple_recursive_removal+0x148/0x5c0 [ 809.941813][ T30] ? __pfx_remove_one+0x10/0x10 [ 809.946711][ T30] debugfs_remove+0x5d/0x80 [ 809.951212][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 810.041739][ T30] nsim_dev_reload_destroy+0x144/0x4a0 [ 810.047286][ T30] nsim_drv_remove+0x52/0x1e0 [ 810.133138][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 810.138579][ T30] device_remove+0xcb/0x180 [ 810.201539][ T30] device_release_driver_internal+0x44e/0x620 [ 810.207807][ T30] bus_remove_device+0x2bc/0x560 [ 810.271524][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 810.277086][ T30] ? __pfx_device_remove_attrs+0x10/0x10 [ 810.342712][ T30] ? up_write+0x290/0x4f0 [ 810.347104][ T30] device_del+0x376/0x9b0 [ 810.401528][ T30] ? __pfx_device_del+0x10/0x10 [ 810.406438][ T30] ? __lock_acquire+0x4a5/0x2630 [ 810.473130][ T30] device_unregister+0x1d/0xe0 [ 810.478094][ T30] del_device_store+0x346/0x480 [ 810.531684][ T30] ? __pfx_del_device_store+0x10/0x10 [ 810.537102][ T30] ? find_held_lock+0x2b/0x80 [ 810.601482][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 810.606407][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 810.611313][ T30] ? __pfx_del_device_store+0x10/0x10 [ 810.714051][ T30] bus_attr_store+0x74/0xb0 [ 810.718660][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 810.781723][ T30] sysfs_kf_write+0xf2/0x150 [ 810.786378][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 810.861551][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 810.866812][ T30] vfs_write+0x6ac/0x1070 [ 810.871145][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 810.979440][ T30] ? __pfx_vfs_write+0x10/0x10 [ 811.007342][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 811.062816][ T30] ksys_write+0x12a/0x250 [ 811.067202][ T30] ? __pfx_ksys_write+0x10/0x10 [ 811.133181][ T30] do_syscall_64+0x106/0xf80 [ 811.172660][ T30] ? clear_bhb_loop+0x40/0x90 [ 811.177439][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.224217][ T30] RIP: 0033:0x7f0c3c55d04e [ 811.228683][ T30] RSP: 002b:00007ffcf679cc28 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 811.311584][ T30] RAX: ffffffffffffffda RBX: 000055557ca3b500 RCX: 00007f0c3c55d04e [ 811.319622][ T30] RDX: 0000000000000001 RSI: 00007ffcf679ccb0 RDI: 0000000000000005 [ 811.391651][ T30] RBP: 00007f0c3c633514 R08: 0000000000000000 R09: 0000000000000000 [ 811.399660][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.481689][ T30] R13: 00007ffcf679ccb0 R14: 00007f0c3d344620 R15: 0000000000000003 [ 811.489808][ T30] [ 811.535038][ T30] INFO: task syz.1.2543:15654 blocked for more than 187 seconds. [ 811.792710][ T51] Bluetooth: hci9: command tx timeout [ 811.806854][ T30] Tainted: G L syzkaller #0 [ 811.854228][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 811.906691][ T30] task:syz.1.2543 state:D stack:29000 pid:15654 tgid:15652 ppid:5822 task_flags:0x400040 flags:0x00080002 [ 811.971533][ T30] Call Trace: [ 811.974880][ T30] [ 811.977825][ T30] __schedule+0xfee/0x6120 [ 812.028070][ T30] ? __lock_acquire+0x4a5/0x2630 [ 812.061517][ T30] ? __pfx___schedule+0x10/0x10 [ 812.066416][ T30] ? find_held_lock+0x2b/0x80 [ 812.071177][ T30] ? schedule+0x2bf/0x390 [ 812.137354][ T30] schedule+0xdd/0x390 [ 812.162186][ T30] schedule_preempt_disabled+0x13/0x30 [ 812.167692][ T30] __mutex_lock+0xc9a/0x1b90 [ 812.196269][ T30] ? netlink_has_listeners+0x20f/0x430 [ 812.223387][ T30] ? devlink_health_report+0x681/0xb50 [ 812.251464][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 812.256666][ T30] ? devlink_recover_notify.constprop.0+0x200/0x670 [ 812.312505][ T30] ? __lock_acquire+0x401/0x2630 [ 812.317500][ T30] ? devlink_health_report+0x681/0xb50 [ 812.356271][ T30] devlink_health_report+0x681/0xb50 [ 812.367329][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 812.411712][ T30] ? _copy_from_user+0x59/0xd0 [ 812.416711][ T30] nsim_dev_health_break_write+0x166/0x210 [ 812.445787][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 812.476993][ T30] full_proxy_write+0x135/0x1a0 [ 812.491687][ T30] vfs_write+0x2aa/0x1070 [ 812.496070][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 812.520462][ T30] ? __pfx_vfs_write+0x10/0x10 [ 812.534860][ T30] ? __fget_files+0x215/0x3d0 [ 812.554769][ T30] ? __fget_files+0x21f/0x3d0 [ 812.559532][ T30] ksys_write+0x12a/0x250 [ 812.584853][ T30] ? __pfx_ksys_write+0x10/0x10 [ 812.589779][ T30] ? kcov_ioctl+0x16a/0x720 [ 812.611559][ T30] do_syscall_64+0x106/0xf80 [ 812.616217][ T30] ? clear_bhb_loop+0x40/0x90 [ 812.620890][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.665986][ T30] RIP: 0033:0x7f8cf439c819 [ 812.670443][ T30] RSP: 002b:00007f8cf25d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 812.711680][ T30] RAX: ffffffffffffffda RBX: 00007f8cf4616090 RCX: 00007f8cf439c819 [ 812.719702][ T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000008 [ 812.757710][ T30] RBP: 00007f8cf4432c91 R08: 0000000000000000 R09: 0000000000000000 [ 812.781728][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.789736][ T30] R13: 00007f8cf4616128 R14: 00007f8cf4616090 R15: 00007ffe61200ba8 [ 812.837037][ T30] [ 812.978919][ T30] INFO: task syz-executor:15849 blocked for more than 167 seconds. [ 813.008419][ T30] Tainted: G L syzkaller #0 [ 813.026728][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 813.052575][ T30] task:syz-executor state:D stack:24056 pid:15849 tgid:15849 ppid:1 task_flags:0x400140 flags:0x00080002 [ 813.108942][ T30] Call Trace: [ 813.121894][ T30] [ 813.124918][ T30] __schedule+0xfee/0x6120 [ 813.129354][ T30] ? __lock_acquire+0x4a5/0x2630 [ 813.155553][ T30] ? __pfx___schedule+0x10/0x10 [ 813.160515][ T30] ? find_held_lock+0x2b/0x80 [ 813.185405][ T30] ? schedule+0x2bf/0x390 [ 813.189811][ T30] schedule+0xdd/0x390 [ 813.214109][ T30] schedule_preempt_disabled+0x13/0x30 [ 813.219611][ T30] __mutex_lock+0xc9a/0x1b90 [ 813.247675][ T30] ? del_device_store+0xd1/0x480 [ 813.264783][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 813.269872][ T30] ? sscanf+0xc7/0x100 [ 813.309138][ T30] ? __pfx_sscanf+0x10/0x10 [ 813.331649][ T30] ? __lock_acquire+0x4a5/0x2630 [ 813.336689][ T30] ? __lock_acquire+0x4a5/0x2630 [ 813.358859][ T30] ? del_device_store+0xd1/0x480 [ 813.373243][ T30] del_device_store+0xd1/0x480 [ 813.378067][ T30] ? __pfx_del_device_store+0x10/0x10 [ 813.405783][ T30] ? find_held_lock+0x2b/0x80 [ 813.410655][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 813.434290][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 813.439210][ T30] ? __pfx_del_device_store+0x10/0x10 [ 813.466075][ T30] bus_attr_store+0x74/0xb0 [ 813.470729][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 813.495499][ T30] sysfs_kf_write+0xf2/0x150 [ 813.500244][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 813.526113][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 813.531363][ T30] vfs_write+0x6ac/0x1070 [ 813.548263][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 813.573196][ T30] ? __pfx_vfs_write+0x10/0x10 [ 813.578014][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 813.601903][ T30] ksys_write+0x12a/0x250 [ 813.606487][ T30] ? __pfx_ksys_write+0x10/0x10 [ 813.631523][ T30] do_syscall_64+0x106/0xf80 [ 813.636170][ T30] ? clear_bhb_loop+0x40/0x90 [ 813.640877][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.672602][ T30] RIP: 0033:0x7f198b95d04e [ 813.677084][ T30] RSP: 002b:00007ffc10f21068 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 813.709099][ T30] RAX: ffffffffffffffda RBX: 0000555561021500 RCX: 00007f198b95d04e [ 813.742138][ T30] RDX: 0000000000000001 RSI: 00007ffc10f210f0 RDI: 0000000000000005 [ 813.750169][ T30] RBP: 00007f198ba33514 R08: 0000000000000000 R09: 0000000000000000 [ 813.794778][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.817617][ T30] R13: 00007ffc10f210f0 R14: 00007f198c744620 R15: 0000000000000003 [ 813.852583][ T30] [ 813.905693][ T51] Bluetooth: hci9: command tx timeout [ 813.972018][ T30] INFO: task syz-executor:16157 blocked for more than 148 seconds. [ 813.980064][ T30] Tainted: G L syzkaller #0 [ 814.071560][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 814.141516][ T30] task:syz-executor state:D stack:24600 pid:16157 tgid:16157 ppid:1 task_flags:0x400140 flags:0x00080002 [ 814.231514][ T30] Call Trace: [ 814.234842][ T30] [ 814.237782][ T30] __schedule+0xfee/0x6120 [ 814.301546][ T30] ? __lock_acquire+0x4a5/0x2630 [ 814.306574][ T30] ? __pfx___schedule+0x10/0x10 [ 814.361547][ T30] ? find_held_lock+0x2b/0x80 [ 814.366300][ T30] ? schedule+0x2bf/0x390 [ 814.370630][ T30] schedule+0xdd/0x390 [ 814.426041][ T30] schedule_preempt_disabled+0x13/0x30 [ 814.471676][ T30] __mutex_lock+0xc9a/0x1b90 [ 814.476356][ T30] ? del_device_store+0xd1/0x480 [ 814.511860][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 814.531944][ T30] ? sscanf+0xc7/0x100 [ 814.536067][ T30] ? __pfx_sscanf+0x10/0x10 [ 814.583862][ T30] ? __lock_acquire+0x4a5/0x2630 [ 814.614357][ T30] ? __lock_acquire+0x4a5/0x2630 [ 814.641533][ T30] ? del_device_store+0xd1/0x480 [ 814.646514][ T30] del_device_store+0xd1/0x480 [ 814.651278][ T30] ? __pfx_del_device_store+0x10/0x10 [ 814.724176][ T30] ? find_held_lock+0x2b/0x80 [ 814.728927][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 814.759776][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 814.773775][ T30] ? __pfx_del_device_store+0x10/0x10 [ 814.779891][ T30] bus_attr_store+0x74/0xb0 [ 814.813122][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 814.818372][ T30] sysfs_kf_write+0xf2/0x150 [ 814.844971][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 814.850311][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 814.880101][ T30] vfs_write+0x6ac/0x1070 [ 814.894464][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 814.900327][ T30] ? __pfx_vfs_write+0x10/0x10 [ 814.927317][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 814.945830][ T30] ksys_write+0x12a/0x250 [ 814.950300][ T30] ? __pfx_ksys_write+0x10/0x10 [ 814.978902][ T30] do_syscall_64+0x106/0xf80 [ 815.002848][ T30] ? clear_bhb_loop+0x40/0x90 [ 815.007720][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.035632][ T30] RIP: 0033:0x7fdbb935d04e [ 815.050421][ T30] RSP: 002b:00007ffea2ef4068 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 815.074961][ T30] RAX: ffffffffffffffda RBX: 000055557f1c3500 RCX: 00007fdbb935d04e [ 815.098613][ T30] RDX: 0000000000000001 RSI: 00007ffea2ef40f0 RDI: 0000000000000005 [ 815.121662][ T30] RBP: 00007fdbb9433514 R08: 0000000000000000 R09: 0000000000000000 [ 815.129708][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.168148][ T30] R13: 00007ffea2ef40f0 R14: 00007fdbba144620 R15: 0000000000000003 [ 815.209915][ T30] [ 815.382081][ T30] [ 815.382081][ T30] Showing all locks held in the system: [ 815.389876][ T30] 1 lock held by khungtaskd/30: [ 815.441135][ T30] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 815.521826][ T30] 2 locks held by getty/5588: [ 815.526726][ T30] #0: ffff8880384790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 815.591522][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 815.631508][ T30] 4 locks held by kworker/u8:51/12669: [ 815.637003][ T30] 7 locks held by syz-executor/15440: [ 815.696298][ T30] #0: ffff88803761e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 815.741704][ T30] #1: ffff88805c7e2088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 815.774787][ T30] #2: ffff888029a6a2d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 815.824288][ T30] #3: ffffffff8fb6f208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 815.863146][ T30] #4: ffff88805c654130 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 815.911679][ T30] #5: ffff88805c653250 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 815.941773][ T51] Bluetooth: hci9: command tx timeout [ 815.961858][ T30] #6: ffff88803f50f8a0 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 816.009520][ T30] 3 locks held by syz.1.2543/15654: [ 816.033184][ T30] #0: ffff8880561e87f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 816.060048][ T30] #1: ffff88802028e420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 816.092242][ T30] #2: ffff88805c653250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_health_report+0x681/0xb50 [ 816.151521][ T30] 4 locks held by syz-executor/15849: [ 816.165627][ T30] #0: ffff88803761e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 816.201510][ T30] #1: ffff88805b817c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 816.263287][ T30] #2: ffff888029a6a2d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 816.301925][ T30] #3: ffffffff8fb6f208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 816.327406][ T30] 4 locks held by syz-executor/16157: [ 816.361067][ T30] #0: ffff88803761e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 816.396632][ T30] #1: ffff88807c55cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 816.443133][ T30] #2: ffff888029a6a2d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 816.483119][ T30] #3: ffffffff8fb6f208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 816.529361][ T30] 4 locks held by syz-executor/16394: [ 816.561894][ T30] #0: ffff88803761e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 816.601783][ T30] #1: ffff8880367de488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 816.641607][ T30] #2: ffff888029a6a2d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 816.691486][ T30] #3: ffffffff8fb6f208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 816.751601][ T30] 4 locks held by syz-executor/16746: [ 816.757082][ T30] #0: ffff88803761e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 816.807430][ T30] #1: ffff88805c531c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 816.847188][ T30] #2: ffff888029a6a2d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 816.905902][ T30] #3: ffffffff8fb6f208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 816.954885][ T30] 4 locks held by syz-executor/17083: [ 816.960331][ T30] #0: ffff88803761e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 817.021492][ T30] #1: ffff888078e7fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 817.031371][ T30] #2: ffff888029a6a2d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 817.103288][ T30] #3: ffffffff8fb6f208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 817.145404][ T30] 4 locks held by syz-executor/17421: [ 817.150805][ T30] #0: ffff88803761e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 817.213204][ T30] #1: ffff888021bab888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 817.252114][ T30] #2: ffff888029a6a2d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 817.291499][ T30] #3: ffffffff8fb6f208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 817.327588][ T30] 2 locks held by syz.0.3029/17665: [ 817.348525][ T30] #0: ffffffff905fead0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 817.392383][ T30] #1: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 817.433303][ T30] 5 locks held by syz-executor/17666: [ 817.438705][ T30] #0: ffff8880489ecec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 817.501514][ T30] #1: ffff8880489ec0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 817.511281][ T30] #2: ffffffff908b0808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 817.581570][ T30] #3: ffff88802a7eb300 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 817.626212][ T30] #4: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 817.664451][ T30] 2 locks held by killall/17725: [ 817.921702][ T30] [ 817.924095][ T30] ============================================= [ 817.924095][ T30] [ 818.003222][ T30] NMI backtrace for cpu 0 [ 818.003243][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 818.003264][ T30] Tainted: [L]=SOFTLOCKUP [ 818.003270][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 818.003279][ T30] Call Trace: [ 818.003285][ T30] [ 818.003291][ T30] dump_stack_lvl+0x100/0x190 [ 818.003319][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 818.003344][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 818.003368][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 818.003394][ T30] sys_info+0x141/0x190 [ 818.003412][ T30] watchdog+0xd25/0x1050 [ 818.003433][ T30] ? __pfx_watchdog+0x10/0x10 [ 818.003449][ T30] ? __kthread_parkme+0x18c/0x230 [ 818.003469][ T30] ? kthread+0x13a/0x450 [ 818.003487][ T30] ? __pfx_watchdog+0x10/0x10 [ 818.003502][ T30] kthread+0x370/0x450 [ 818.003521][ T30] ? __pfx_kthread+0x10/0x10 [ 818.003542][ T30] ret_from_fork+0x754/0xd80 [ 818.003566][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 818.003590][ T30] ? __switch_to+0x7b4/0x1120 [ 818.003609][ T30] ? __pfx_kthread+0x10/0x10 [ 818.003630][ T30] ret_from_fork_asm+0x1a/0x30 [ 818.003656][ T30]