last executing test programs: 37.874099773s ago: executing program 2 (id=2212): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) unshare$auto(0x40000080) readv$auto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x7fffffffffffffff}, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x12200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x8, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) pwrite64$auto(r1, 0x0, 0x1, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/netfilter/nfnetlink_log\x00', 0x101000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000280)='\adev/audio\x921\r$D\xa8g\xe8$n\xeep\xd9\xdbU\x87M\xe3}\x1a\xdf\xec\x94Y\xc3\xcf\xb0\xa4\x90\xdat\x16\x03\xf16\x16W\xff\x03\xd2^\x00p\xb3\xfc\x9e&FZ\x1b\aFr\xc6\x92', 0x2) write$auto(0x3, 0x0, 0xffd8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/ueagle_atm/parameters/sync_wait\x00', 0x1e4362, 0x0) mmap$auto(0x1, 0xb, 0xb, 0x12, r2, 0xc6) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x402f, 0x8, 0xfff, r2, 0x200000002e, 0x7ff}, 0x6f5) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3a, 0x1, r3, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgctl$auto_IPC_INFO(0xa94, 0x3, &(0x7f0000000080)={{0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x400, 0x37c5, 0xc}, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x1, 0x6, 0x3, 0x3, 0x9, 0x9, 0x4, 0xfc, 0x45c, @raw=0x3}) io_uring_setup$auto(0x6, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x40000, 0x1a8, 0x18}, 0x18) ioctl$auto_RTC_EPOCH_SET(r0, 0x4008700e, &(0x7f0000000240)=0xd39) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x0) 37.04714692s ago: executing program 2 (id=2216): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xb, 0x4, "ef20bbf0b6e731"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x7, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x8) socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000100)=0x3) 34.626549202s ago: executing program 2 (id=2220): mmap$auto(0x0, 0xe, 0xdf, 0x40000eb1, 0x401, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) read$auto(r0, 0x0, 0x7c4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x2b, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE_OLD(r0, 0x5422, 0x0) 34.38525969s ago: executing program 2 (id=2222): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x7, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r0, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r1, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x40000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa502}, 0x800}, 0x2, 0x4008) 33.952670357s ago: executing program 2 (id=2223): getgroups$auto(0x6, &(0x7f0000000000)=0x2) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x16f280, 0x0) ioctl$auto_FIFREEZE(r0, 0xc0045878, 0x6) unshare$auto(0x200) unshare$auto(0x40000080) keyctl$auto(0x1f, 0x0, 0x0, 0x3, 0x0) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) msgctl$auto_MSG_INFO(0xfe0, 0xc, 0x0) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x40, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(r2, &(0x7f0000000380)='1Eer/aud\xe9oy\x00/\xa66\x10\xabVI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec@\xd3\x9ce\xffGP\x97)\xcf\a\xfb\xdf\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x01\x00\x00\x00\x00\x00\x00\x003.O\xab\"4\x8a\xbbY8@Z\xa6!\xe8 \xf6$7\xa0\xdcF\xb95`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xd4\a\x18n\x8d\xf0\xfe\xceL\xbe8\xdc\xb9\xb6\'\xc4~\x18\xc4\x9e\x05=4\xdc\x96\x0e\xb1\x9bL\x918\x8f\x1by\x94C\x933`\x1a\x17\xe9', 0xa) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x3, 0x0, 0x100000000) mmap$auto(0xfffffffffffffffd, 0x10000000000000a, 0xa3, 0x8000008b71, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x28, 0x2, 0xffffffff) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22902, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$auto(0x0, &(0x7f0000000400)=@test={r1, 0x1, 0x67, 0xfffffff9, 0x4, 0x8000, 0x1, 0x6, 0x9, 0xfffffff7, 0x8000000000000000, 0xc3f, 0x6, 0x1, 0x2}, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x402c542b, &(0x7f0000000180)="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") socket(0x2, 0x2, 0x106) preadv$auto(r3, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x8, 0x7fffffff, 0x1) 33.075812422s ago: executing program 2 (id=2228): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xb, 0x4, "ef20bbf0b6e731"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x7, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x8) socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000100)=0x3) 31.917596805s ago: executing program 3 (id=2236): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) r1 = socket(0xa, 0x2, 0x3a) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100253d7000fddbdf250100000c0001800800018000000000040089800c0002000600"/46], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) fchdir$auto(r1) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) setsockopt$auto(r1, 0x29, 0x43, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 29.808163388s ago: executing program 3 (id=2243): openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, 0x0, 0x183400, 0x0) (async) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x1) unshare$auto(0x40000080) (async) semctl$auto(0xa, 0x2, 0x13, 0xde) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/dummy0/proto_down\x00', 0x60282, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) (async) bind$auto(0xffffffffffffffff, 0x0, 0x9) (async) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 26.146101537s ago: executing program 3 (id=2247): mmap$auto(0x0, 0x400006, 0xdf, 0xf38, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) mseal$auto(0x0, 0x7dda, 0x0) ioctl$auto(r0, 0x89a0, 0x4) 25.996813578s ago: executing program 3 (id=2248): mlockall$auto(0x3) mlockall$auto(0x0) r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) mlockall$auto(0x7) setpriority$auto_PRIO_PGRP(0x1, 0x0, 0x1) 25.589983544s ago: executing program 3 (id=2250): socket(0x15, 0x5, 0x0) setreuid$auto(0x3, 0x7) ioctl$auto(0x3, 0x8b2b, 0x91) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x202, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x2) shmget$auto(0x8, 0x14561, 0x7ff) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000380)) shmctl$auto_SHM_LOCK(0x0, 0xb, 0x0) shmctl$auto_IPC_RMID(0xe00, 0x0, &(0x7f0000000340)={{0x0, 0xee00, 0xee00, 0x0, 0x8, 0xed11, 0x80}, 0x7f, 0x1, 0x7, 0x3, @raw=0xc, @inferred, 0x5, 0x0, 0x0, 0x0}) 25.422026252s ago: executing program 3 (id=2251): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) r1 = socket(0xa, 0x2, 0x3a) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100253d7000fddbdf250100000c0001800800018000000000040089800c0002000600"/46], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) fchdir$auto(r1) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) setsockopt$auto(r1, 0x29, 0x43, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21.468529817s ago: executing program 0 (id=2258): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/psched\x00', 0x40102, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x100) syz_clone(0x0, &(0x7f0000000100)="44d4073785cf780102119e80034805240d58619edfa9dfabd27f826b5355713a4156f615071e78a7c6", 0x29, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="054d13ca14447b45411e73883a5cbb31c448488123749388a7bd692abd50a669497d55fbf24300c8b563ecb0ca4804a0e910173a39bb99f833c68af840b05dbd32192add3950ceb7400c7014bad0c2f5e961b61944584f025954380ec03ff2714d938744f5b8a78b43367a90f7d78c85faedba4c1bfee3083ff4e22b2b8cef0d46692df670caff525ee3fa5c44292060e492ee7eb220eadc02167474adfaff9125cae1dba370ed914bf94052c6b3c775cfa061974df7c502d63eee06084775079f4676094323a04ae88d3427eb9e2775886ccc5029e1801e0b") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x84) sendfile$auto(r1, r2, 0x0, 0x1000000000000e) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4) read$auto(r4, &(0x7f0000000000)='\x00', 0x91e2) r5 = socket(0x10, 0x2, 0x4) bind$auto(r5, 0x0, 0xe) bind$auto(0x3, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40}, 0x68) socket(0x2, 0x3, 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) chroot$auto(0x0) r8 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r8, @ANYBLOB="18000000", @ANYRES8=r6], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r7, &(0x7f0000000000)='\xde\x00', 0xfded) waitid$auto_P_ALL(0x0, 0x6eb7, 0x0, 0x0, &(0x7f0000000480)={{0x97b, 0xfe}, {0x200000000, 0x1}, 0x5, 0xc, 0xa, 0x1, 0xbd, 0x1, 0x4, 0x5, 0x6, 0xffffffffffffff1e, 0x2, 0xfffffffffffffa31, 0x800000000, 0x2}) wait4$auto(0x0, 0x0, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r3, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="a4010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x20004090}, 0x11) gettid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 21.332766689s ago: executing program 1 (id=2259): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000000000)='veth1\x00', 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sysfs$auto(0x2, 0x100000000000036, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x400000) 20.557119453s ago: executing program 0 (id=2260): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_FIGETBSZ(r0, 0x2, 0x68a) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) socket(0x10, 0x2, 0x14) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x4) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r1, 0x40047459, 0x0) 20.42403282s ago: executing program 1 (id=2261): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xb, 0x4, "ef20bbf0b6e731"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x7, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x8) socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000100)=0x3) 20.382440914s ago: executing program 0 (id=2262): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r0, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) lsetxattr$auto(0x0, &(0x7f00000008c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0xf4e9, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x20000000000, 0xffff, 0x4, 0xeb1, 0x401, 0x7ffe) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x20, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r2, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x5, 0xeb4, 0xffffffffffffffff, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x1c04, &(0x7f0000000280)={0x0, 0xc5}, 0x6, 0x0, 0x0, 0x504}, 0x6448}, 0x5, 0x5072) getegid() 19.765813185s ago: executing program 0 (id=2263): sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r0, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f00000004c0)={0xcac, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0xc97, 0xa, 0x0, 0x1, [@nested={0x17c, 0xd8, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@loopback}, @generic="8c5e7904b62ded848c5a778ccb9fcd960d5745f5cea399f1393201d03ff61c8faad2714a3f3cb433cf059ecaabcadab9b937fa6270f5834c8977b164f51f8a5010c2391b321a51ed2e59e62b82050afea490c39f241c0bccc4eca2a23856a7463f5922c1e87d7c003922ae40afeb062934923dd36f2ebb228b936966e22c6ef66079c2fc3021977473b17d917d82c4b34eb65f", @generic="20bd151f080442ea1e9e9145df1e2826836b038d77a91cf3bc1c8e336491d9e593c9de15e694a026b12d4b60593ccff1177b10e75c4ddc060f10dd75faa446540cd4d2789346397d7ec6ef83a74728f306d8a679df003a270e6bbe6d9d34a5c5bff4578c2b78df5f7a0108d105b44a38f769e5a4266a314301bc9d1f94d274645b0c1e5912937fa615ad900e00f090e3c8983552b54cea92f0821b21b88777ffb0b5bf967a7fb3d02a41fdbbbb8516b63c42db43e832d8619d2907d24873200a68c154338a239ec64a", @nested={0x4, 0x3ff8}, @nested={0x4, 0xe5}]}, @generic="cea3b1eb5035f2ada7a6b369d9cae80acbce4557f0a5750e99a779e2b15337c19c29137b5f3c8b42c22922d5fc413ad50eac5db9d9600a977494ac571a4cc04d4ef62f297b19171852125f670e0986874ebd14c9069aa95a53648686fd3687a6e1b112d0f14449ee614bc9253faa00f7e2cb1278c5cb429df67247106ca668", @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@broadcast}, @generic="a2e51c731e48c1c636ffffe1588d1951c13ab2c929acd0618de874f0", @nested={0xa5f, 0x4b, 0x0, 0x1, [@nested={0x4, 0x74}, @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x146}, @generic="a00d8ff41cccbf55c36b5d5793b6ad42435e2cc5368e1f7460d84ab4104519e965f9ddc2952e5c7833887d56fbf664f0c427fe74c8e656a2c630037a9b04033ce61f32864a8ca1909fb177864116d7e5b835df404cde2e7b18d069155563fbbe8c295df3fb0e4b465f9ad68cac8994bd7cb152b40f837efa7f8155c887cc82b77054893cb8183bd7d5283ad5b395492caad2d0e6114d4d314b6968b6858a1e20094f7e7c5243ebbaea2f639e9f0bf971a18f68326f7844933654971c4f0156eb94fd978405a40ea23d0e0fbfcd88be971646", @generic="5ff77e4ad21dd42b1392491d534b63fb1aae4e2e5f3ffcd818ed6693a63d260bf76118ebdb0907505a66d6c8cd91e916af9c590fad10485dca7b11b67b7aa70069d9b8b1192e04635a0b4ce37724474ee086", @generic="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", @generic="ade57f643a14595b914c973a369390e6bfb2fe25a488f8967b8d2912c14299b8b4f9d6d8a46c6c6bd54c6c937a45a412bc7311a20162a1ee859a7ec087e3c4895833e0323c4837d09ce4f000672e1fa0ebeb59fb041bcf4d6d46fc508712950a58514d6151b7675cbf7ba9eaaf23cd9e9bf56ab078b56d0ed50b1839e3db54d3420c1b4042dddd7867fcb86f3abed33f49040326091e384f124cc9d0afeceefa55525b630647420f1fb7764ba6909c52d36d58e188e5aa204bc9aa96081303a5d8b8bf603147f0617a", @typed={0x8, 0x5b, 0x0, 0x0, @pid}, @nested={0x4, 0x12b}, @generic="adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac571a354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc72"]}, @typed={0x14, 0x11c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0xcac}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r3, r3, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fd, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xf90, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x2000000008000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x4bd, 0x0, 0x1000, &(0x7f0000000040)=0x2) write$auto(0xffffffffffffffff, 0x0, 0xfdef) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) write$auto(r4, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 19.554958638s ago: executing program 1 (id=2264): r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_VHOST_SET_VRING_BUSYLOOP_TIMEOUT2(r0, 0x4008af23, &(0x7f0000000080)={0x4, 0x7}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) preadv$auto(0x3, 0x0, 0x3, 0x2, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x0, 0xeb2, 0xffffffffffffffff, 0x7f) madvise$auto(0x0, 0x2003f0, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, 0x0, 0x0) epoll_pwait2$auto(r1, &(0x7f0000000040)={0xfffffe00, 0xffffffffffffffff}, 0x10, &(0x7f0000000100)={0x10, 0x2000000000000005}, &(0x7f0000000140), 0x8) close_range$auto(0x2, 0x8, 0x0) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mbind$auto(0x10, 0x136, 0x80, &(0x7f0000000280)=0x6, 0x5c, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$auto_SNDCTL_SEQ_RESET(r3, 0x5100, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_TUNGETIFF2(r2, 0x800454d2, &(0x7f0000000180)=0x80) mmap$auto(0x0, 0x4, 0xe3, 0x16, 0x401, 0xffcf) 18.172035855s ago: executing program 1 (id=2265): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xb, 0x4, "ef20bbf0b6e731"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x7, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x8) socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000100)=0x3) 16.567917227s ago: executing program 0 (id=2266): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) (async) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) (async) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) (async) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) (async) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) (async) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 15.921627595s ago: executing program 1 (id=2267): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r2 = socketcall$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r5) sendmsg$auto_TIPC_NL_BEARER_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010627a0702963dcdfeec1250500"], 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x200008d0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) socket(0x1d, 0x3, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0x9, 0x1009b72, 0x2, 0x8000) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x141702, 0x0) write$auto(r7, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x1, 0x20100000810003, 0xff8, 0xfffffffffffffffb, r0, 0x4) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) msync$auto(0x0, 0xe0, 0x6) ioctl$auto_BLKZEROOUT(r4, 0x127f, 0x0) 15.639408789s ago: executing program 1 (id=2268): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) r1 = socket(0xa, 0x2, 0x3a) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100253d7000fddbdf250100000c0001800800018000000000040089800c0002000600"/46], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) fchdir$auto(r1) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) setsockopt$auto(r1, 0x29, 0x43, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15.117604134s ago: executing program 0 (id=2269): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) r1 = socket(0xa, 0x2, 0x3a) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100253d7000fddbdf250100000c0001800800018000000000040089800c0002000600"/46], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) fchdir$auto(r1) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) setsockopt$auto(r1, 0x29, 0x43, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.517248021s ago: executing program 32 (id=2251): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) r1 = socket(0xa, 0x2, 0x3a) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100253d7000fddbdf250100000c0001800800018000000000040089800c0002000600"/46], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) fchdir$auto(r1) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) setsockopt$auto(r1, 0x29, 0x43, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 511.999699ms ago: executing program 33 (id=2268): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) r1 = socket(0xa, 0x2, 0x3a) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100253d7000fddbdf250100000c0001800800018000000000040089800c0002000600"/46], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) fchdir$auto(r1) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) setsockopt$auto(r1, 0x29, 0x43, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 34 (id=2269): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) r1 = socket(0xa, 0x2, 0x3a) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) write$auto(r3, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100253d7000fddbdf250100000c0001800800018000000000040089800c0002000600"/46], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) fchdir$auto(r1) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) setsockopt$auto(r1, 0x29, 0x43, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 291][T13934] R13: 00007f9551016038 R14: 00007f9551015fa0 R15: 00007fff53fbb1f8 [ 559.391310][T13934] [ 560.275006][T13931] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 560.343088][T13931] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 560.412269][T13931] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 561.180607][T13958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1767'. [ 562.140832][T13975] FAULT_INJECTION: forcing a failure. [ 562.140832][T13975] name failslab, interval 1, probability 0, space 0, times 0 [ 562.186775][T13975] CPU: 0 UID: 0 PID: 13975 Comm: syz.0.1770 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.186800][T13975] Tainted: [L]=SOFTLOCKUP [ 562.186806][T13975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 562.186815][T13975] Call Trace: [ 562.186821][T13975] [ 562.186827][T13975] dump_stack_lvl+0x100/0x190 [ 562.186857][T13975] should_fail_ex.cold+0x5/0xa [ 562.186877][T13975] ? group_cpus_evenly+0x195/0x660 [ 562.186896][T13975] should_failslab+0xc2/0x120 [ 562.186915][T13975] __kmalloc_noprof+0xe0/0x850 [ 562.186949][T13975] group_cpus_evenly+0x195/0x660 [ 562.186971][T13975] ? __pfx_group_cpus_evenly+0x10/0x10 [ 562.186998][T13975] blk_mq_map_queues+0x9d/0x430 [ 562.187021][T13975] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 562.187040][T13975] ? rcu_is_watching+0x12/0xc0 [ 562.187057][T13975] ? trace_kmalloc+0xe3/0x110 [ 562.187074][T13975] ? __kasan_kmalloc+0xaa/0xb0 [ 562.187091][T13975] blk_mq_update_queue_map+0x305/0x3a0 [ 562.187111][T13975] blk_mq_alloc_tag_set+0x660/0x1330 [ 562.187126][T13975] ? idr_alloc+0x37/0x130 [ 562.187153][T13975] loop_add+0x3b7/0xb60 [ 562.187173][T13975] ? __pfx_loop_add+0x10/0x10 [ 562.187203][T13975] ? find_held_lock+0x2b/0x80 [ 562.187223][T13975] ? __fget_files+0x215/0x3d0 [ 562.187243][T13975] loop_control_ioctl+0xae/0x620 [ 562.187263][T13975] ? __pfx_loop_control_ioctl+0x10/0x10 [ 562.187286][T13975] ? __pfx_loop_control_ioctl+0x10/0x10 [ 562.187307][T13975] __x64_sys_ioctl+0x18e/0x210 [ 562.187323][T13975] do_syscall_64+0x115/0x840 [ 562.187343][T13975] ? clear_bhb_loop+0x40/0x90 [ 562.187360][T13975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.187375][T13975] RIP: 0033:0x7f8d3b39ce59 [ 562.187389][T13975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.187404][T13975] RSP: 002b:00007f8d3c187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.187419][T13975] RAX: ffffffffffffffda RBX: 00007f8d3b615fa0 RCX: 00007f8d3b39ce59 [ 562.187430][T13975] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 562.187440][T13975] RBP: 00007f8d3b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 562.187449][T13975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.187459][T13975] R13: 00007f8d3b616038 R14: 00007f8d3b615fa0 R15: 00007ffff2079f48 [ 562.187478][T13975] [ 562.785767][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.856863][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.462187][T14010] FAULT_INJECTION: forcing a failure. [ 567.462187][T14010] name failslab, interval 1, probability 0, space 0, times 0 [ 567.532903][T13983] Process accounting resumed [ 567.540249][T14010] CPU: 0 UID: 0 PID: 14010 Comm: syz.3.1777 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.540272][T14010] Tainted: [L]=SOFTLOCKUP [ 567.540279][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 567.540288][T14010] Call Trace: [ 567.540294][T14010] [ 567.540300][T14010] dump_stack_lvl+0x100/0x190 [ 567.540331][T14010] should_fail_ex.cold+0x5/0xa [ 567.540352][T14010] should_failslab+0xc2/0x120 [ 567.540370][T14010] __kmalloc_cache_node_noprof+0x7d/0x770 [ 567.540386][T14010] ? blk_mq_init_tags+0x8c/0x300 [ 567.540408][T14010] blk_mq_init_tags+0x8c/0x300 [ 567.540436][T14010] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 567.540456][T14010] ? blk_mq_update_queue_map+0x227/0x3a0 [ 567.540477][T14010] blk_mq_alloc_tag_set+0x848/0x1330 [ 567.540501][T14010] loop_add+0x3b7/0xb60 [ 567.540521][T14010] ? __pfx_loop_add+0x10/0x10 [ 567.540551][T14010] ? find_held_lock+0x2b/0x80 [ 567.540569][T14010] ? __fget_files+0x215/0x3d0 [ 567.540590][T14010] loop_control_ioctl+0xae/0x620 [ 567.540610][T14010] ? __pfx_loop_control_ioctl+0x10/0x10 [ 567.540633][T14010] ? __pfx_loop_control_ioctl+0x10/0x10 [ 567.540655][T14010] __x64_sys_ioctl+0x18e/0x210 [ 567.540671][T14010] do_syscall_64+0x115/0x840 [ 567.540691][T14010] ? clear_bhb_loop+0x40/0x90 [ 567.540710][T14010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.540726][T14010] RIP: 0033:0x7f06ec39ce59 [ 567.540739][T14010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.540754][T14010] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.540769][T14010] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 567.540779][T14010] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 567.540789][T14010] RBP: 00007f06ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 567.540798][T14010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.540807][T14010] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 567.540827][T14010] [ 567.540911][T14010] blk-mq: reduced tag depth (128 -> 64) [ 568.373787][T14019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1779'. [ 569.964838][T14035] Process accounting paused [ 579.708784][T14096] Process accounting resumed [ 585.415475][T14189] FAULT_INJECTION: forcing a failure. [ 585.415475][T14189] name failslab, interval 1, probability 0, space 0, times 0 [ 585.486083][T14189] CPU: 0 UID: 0 PID: 14189 Comm: syz.0.1808 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.486110][T14189] Tainted: [L]=SOFTLOCKUP [ 585.486116][T14189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 585.486125][T14189] Call Trace: [ 585.486132][T14189] [ 585.486138][T14189] dump_stack_lvl+0x100/0x190 [ 585.486168][T14189] should_fail_ex.cold+0x5/0xa [ 585.486188][T14189] should_failslab+0xc2/0x120 [ 585.486210][T14189] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 585.486234][T14189] ? __d_alloc+0x34/0xa40 [ 585.486257][T14189] __d_alloc+0x34/0xa40 [ 585.486279][T14189] d_alloc+0x4a/0x1e0 [ 585.486300][T14189] lookup_one_qstr_excl+0x171/0x250 [ 585.486324][T14189] start_dirop+0x59/0xb0 [ 585.486342][T14189] simple_start_creating+0xf9/0x110 [ 585.486360][T14189] ? __pfx_simple_start_creating+0x10/0x10 [ 585.486382][T14189] nfsd_mkdir+0xf6/0x460 [ 585.486407][T14189] nfsd_fill_super+0x3f9/0x560 [ 585.486430][T14189] ? __pfx_nfsd_fill_super+0x10/0x10 [ 585.486452][T14189] get_tree_keyed+0x10e/0x1d0 [ 585.486470][T14189] vfs_get_tree+0x92/0x320 [ 585.486485][T14189] path_mount+0x7d0/0x23d0 [ 585.486508][T14189] ? __pfx_path_mount+0x10/0x10 [ 585.486527][T14189] ? lockdep_hardirqs_on+0x78/0x100 [ 585.486549][T14189] ? putname+0xb1/0x110 [ 585.486567][T14189] ? kmem_cache_free+0x127/0x6c0 [ 585.486594][T14189] ? __x64_sys_mount+0x293/0x310 [ 585.486613][T14189] __x64_sys_mount+0x293/0x310 [ 585.486633][T14189] ? __pfx___x64_sys_mount+0x10/0x10 [ 585.486656][T14189] ? rcu_is_watching+0x12/0xc0 [ 585.486675][T14189] do_syscall_64+0x115/0x840 [ 585.486694][T14189] ? clear_bhb_loop+0x40/0x90 [ 585.486712][T14189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.486728][T14189] RIP: 0033:0x7f8d3b39ce59 [ 585.486741][T14189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.486763][T14189] RSP: 002b:00007f8d3c187028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 585.486778][T14189] RAX: ffffffffffffffda RBX: 00007f8d3b615fa0 RCX: 00007f8d3b39ce59 [ 585.486789][T14189] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000000000000000 [ 585.486799][T14189] RBP: 00007f8d3b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 585.486809][T14189] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 585.486819][T14189] R13: 00007f8d3b616038 R14: 00007f8d3b615fa0 R15: 00007ffff2079f48 [ 585.486840][T14189] [ 592.022368][T14233] ima: policy update failed [ 592.051819][ T29] audit: type=1802 audit(1780867315.995:89): pid=14233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1815" res=0 errno=0 [ 593.592463][ T29] audit: type=1800 audit(1780867317.535:90): pid=14260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1822" name="lu_gp_id" dev="configfs" ino=59238 res=0 errno=0 [ 593.892029][T14269] FAULT_INJECTION: forcing a failure. [ 593.892029][T14269] name failslab, interval 1, probability 0, space 0, times 0 [ 593.971295][T14269] CPU: 0 UID: 0 PID: 14269 Comm: syz.3.1825 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.971320][T14269] Tainted: [L]=SOFTLOCKUP [ 593.971326][T14269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 593.971336][T14269] Call Trace: [ 593.971342][T14269] [ 593.971348][T14269] dump_stack_lvl+0x100/0x190 [ 593.971378][T14269] should_fail_ex.cold+0x5/0xa [ 593.971399][T14269] ? group_cpus_evenly+0x195/0x660 [ 593.971418][T14269] should_failslab+0xc2/0x120 [ 593.971437][T14269] __kmalloc_noprof+0xe0/0x850 [ 593.971463][T14269] group_cpus_evenly+0x195/0x660 [ 593.971484][T14269] ? __pfx_group_cpus_evenly+0x10/0x10 [ 593.971511][T14269] blk_mq_map_queues+0x9d/0x430 [ 593.971533][T14269] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 593.971553][T14269] ? rcu_is_watching+0x12/0xc0 [ 593.971569][T14269] ? trace_kmalloc+0xe3/0x110 [ 593.971586][T14269] ? __kasan_kmalloc+0xaa/0xb0 [ 593.971603][T14269] blk_mq_update_queue_map+0x305/0x3a0 [ 593.971624][T14269] blk_mq_alloc_tag_set+0x660/0x1330 [ 593.971639][T14269] ? idr_alloc+0x37/0x130 [ 593.971666][T14269] loop_add+0x3b7/0xb60 [ 593.971686][T14269] ? __pfx_loop_add+0x10/0x10 [ 593.971716][T14269] ? find_held_lock+0x2b/0x80 [ 593.971734][T14269] ? __fget_files+0x215/0x3d0 [ 593.971754][T14269] loop_control_ioctl+0xae/0x620 [ 593.971774][T14269] ? __pfx_loop_control_ioctl+0x10/0x10 [ 593.971797][T14269] ? __pfx_loop_control_ioctl+0x10/0x10 [ 593.971818][T14269] __x64_sys_ioctl+0x18e/0x210 [ 593.971835][T14269] do_syscall_64+0x115/0x840 [ 593.971855][T14269] ? clear_bhb_loop+0x40/0x90 [ 593.971873][T14269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.971889][T14269] RIP: 0033:0x7f06ec39ce59 [ 593.971902][T14269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.971917][T14269] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.971933][T14269] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 593.971943][T14269] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 593.971960][T14269] RBP: 00007f06ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 593.971970][T14269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.971979][T14269] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 593.971999][T14269] [ 600.006458][T14302] Process accounting resumed [ 600.022520][T14286] Process accounting paused [ 605.392887][T14349] FAULT_INJECTION: forcing a failure. [ 605.392887][T14349] name failslab, interval 1, probability 0, space 0, times 0 [ 605.471967][T14349] CPU: 0 UID: 0 PID: 14349 Comm: syz.1.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.471992][T14349] Tainted: [L]=SOFTLOCKUP [ 605.471998][T14349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 605.472007][T14349] Call Trace: [ 605.472013][T14349] [ 605.472019][T14349] dump_stack_lvl+0x100/0x190 [ 605.472049][T14349] should_fail_ex.cold+0x5/0xa [ 605.472069][T14349] ? group_cpus_evenly+0x195/0x660 [ 605.472088][T14349] should_failslab+0xc2/0x120 [ 605.472106][T14349] __kmalloc_noprof+0xe0/0x850 [ 605.472134][T14349] group_cpus_evenly+0x195/0x660 [ 605.472154][T14349] ? __pfx_group_cpus_evenly+0x10/0x10 [ 605.472180][T14349] blk_mq_map_queues+0x9d/0x430 [ 605.472205][T14349] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 605.472223][T14349] ? rcu_is_watching+0x12/0xc0 [ 605.472240][T14349] ? trace_kmalloc+0xe3/0x110 [ 605.472257][T14349] ? __kasan_kmalloc+0xaa/0xb0 [ 605.472276][T14349] blk_mq_update_queue_map+0x305/0x3a0 [ 605.472297][T14349] blk_mq_alloc_tag_set+0x660/0x1330 [ 605.472312][T14349] ? idr_alloc+0x37/0x130 [ 605.472338][T14349] loop_add+0x3b7/0xb60 [ 605.472358][T14349] ? __pfx_loop_add+0x10/0x10 [ 605.472389][T14349] ? find_held_lock+0x2b/0x80 [ 605.472406][T14349] ? __fget_files+0x215/0x3d0 [ 605.472425][T14349] loop_control_ioctl+0xae/0x620 [ 605.472446][T14349] ? __pfx_loop_control_ioctl+0x10/0x10 [ 605.472468][T14349] ? __pfx_loop_control_ioctl+0x10/0x10 [ 605.472489][T14349] __x64_sys_ioctl+0x18e/0x210 [ 605.472506][T14349] do_syscall_64+0x115/0x840 [ 605.472526][T14349] ? clear_bhb_loop+0x40/0x90 [ 605.472544][T14349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.472559][T14349] RIP: 0033:0x7f9550d9ce59 [ 605.472572][T14349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.472586][T14349] RSP: 002b:00007f9551c19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.472601][T14349] RAX: ffffffffffffffda RBX: 00007f9551015fa0 RCX: 00007f9550d9ce59 [ 605.472612][T14349] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 605.472621][T14349] RBP: 00007f9550e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 605.472630][T14349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.472639][T14349] R13: 00007f9551016038 R14: 00007f9551015fa0 R15: 00007fff53fbb1f8 [ 605.472659][T14349] [ 607.057483][T14374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1844'. [ 610.200740][ T29] audit: type=1800 audit(1780867334.145:91): pid=14397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1848" name="lu_gp_id" dev="configfs" ino=60212 res=0 errno=0 [ 610.323541][T14401] Process accounting paused [ 611.815027][ T29] audit: type=1800 audit(1780867335.755:92): pid=14412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1851" name="lu_gp_id" dev="configfs" ino=60244 res=0 errno=0 [ 612.059233][ T29] audit: type=1800 audit(1780867335.995:93): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1852" name="lu_gp_id" dev="configfs" ino=60272 res=0 errno=0 [ 612.469478][T14426] FAULT_INJECTION: forcing a failure. [ 612.469478][T14426] name failslab, interval 1, probability 0, space 0, times 0 [ 612.673732][T14426] CPU: 0 UID: 0 PID: 14426 Comm: syz.3.1855 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.673758][T14426] Tainted: [L]=SOFTLOCKUP [ 612.673764][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 612.673774][T14426] Call Trace: [ 612.673780][T14426] [ 612.673787][T14426] dump_stack_lvl+0x100/0x190 [ 612.673817][T14426] should_fail_ex.cold+0x5/0xa [ 612.673837][T14426] should_failslab+0xc2/0x120 [ 612.673855][T14426] __kmalloc_node_noprof+0xe6/0x850 [ 612.673878][T14426] ? blk_mq_alloc_tag_set+0x57a/0x1330 [ 612.673894][T14426] ? rt_mutex_debug_task_free+0x160/0x1e0 [ 612.673914][T14426] blk_mq_alloc_tag_set+0x57a/0x1330 [ 612.673929][T14426] ? idr_alloc+0x37/0x130 [ 612.673956][T14426] loop_add+0x3b7/0xb60 [ 612.673976][T14426] ? __pfx_loop_add+0x10/0x10 [ 612.674007][T14426] ? find_held_lock+0x2b/0x80 [ 612.674026][T14426] ? __fget_files+0x215/0x3d0 [ 612.674047][T14426] loop_control_ioctl+0xae/0x620 [ 612.674067][T14426] ? __pfx_loop_control_ioctl+0x10/0x10 [ 612.674090][T14426] ? __pfx_loop_control_ioctl+0x10/0x10 [ 612.674111][T14426] __x64_sys_ioctl+0x18e/0x210 [ 612.674128][T14426] do_syscall_64+0x115/0x840 [ 612.674147][T14426] ? clear_bhb_loop+0x40/0x90 [ 612.674165][T14426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.674181][T14426] RIP: 0033:0x7f06ec39ce59 [ 612.674206][T14426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.674222][T14426] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.674237][T14426] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 612.674248][T14426] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 612.674258][T14426] RBP: 00007f06ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 612.674267][T14426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.674277][T14426] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 612.674296][T14426] [ 613.755669][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 614.122519][T14444] FAULT_INJECTION: forcing a failure. [ 614.122519][T14444] name failslab, interval 1, probability 0, space 0, times 0 [ 614.194286][T14444] CPU: 0 UID: 0 PID: 14444 Comm: syz.1.1858 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.194312][T14444] Tainted: [L]=SOFTLOCKUP [ 614.194318][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 614.194328][T14444] Call Trace: [ 614.194333][T14444] [ 614.194340][T14444] dump_stack_lvl+0x100/0x190 [ 614.194370][T14444] should_fail_ex.cold+0x5/0xa [ 614.194390][T14444] should_failslab+0xc2/0x120 [ 614.194408][T14444] __kmalloc_cache_noprof+0x7a/0x6f0 [ 614.194430][T14444] ? init_srcu_struct_fields+0xa69/0xfa0 [ 614.194457][T14444] init_srcu_struct_fields+0xa69/0xfa0 [ 614.194481][T14444] blk_mq_alloc_tag_set+0x3cc/0x1330 [ 614.194497][T14444] ? idr_alloc+0xdd/0x130 [ 614.194518][T14444] ? __pfx_idr_alloc+0x10/0x10 [ 614.194544][T14444] loop_add+0x3b7/0xb60 [ 614.194565][T14444] ? __pfx_loop_add+0x10/0x10 [ 614.194595][T14444] ? find_held_lock+0x2b/0x80 [ 614.194613][T14444] ? __fget_files+0x215/0x3d0 [ 614.194633][T14444] loop_control_ioctl+0xae/0x620 [ 614.194653][T14444] ? __pfx_loop_control_ioctl+0x10/0x10 [ 614.194676][T14444] ? __pfx_loop_control_ioctl+0x10/0x10 [ 614.194698][T14444] __x64_sys_ioctl+0x18e/0x210 [ 614.194714][T14444] do_syscall_64+0x115/0x840 [ 614.194734][T14444] ? clear_bhb_loop+0x40/0x90 [ 614.194752][T14444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.194767][T14444] RIP: 0033:0x7f9550d9ce59 [ 614.194781][T14444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.194796][T14444] RSP: 002b:00007f9551c19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.194811][T14444] RAX: ffffffffffffffda RBX: 00007f9551015fa0 RCX: 00007f9550d9ce59 [ 614.194821][T14444] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 614.194830][T14444] RBP: 00007f9550e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 614.194840][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.194848][T14444] R13: 00007f9551016038 R14: 00007f9551015fa0 R15: 00007fff53fbb1f8 [ 614.194868][T14444] [ 614.611925][T14447] FAULT_INJECTION: forcing a failure. [ 614.611925][T14447] name failslab, interval 1, probability 0, space 0, times 0 [ 614.628827][T14447] CPU: 0 UID: 0 PID: 14447 Comm: syz.0.1859 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.628852][T14447] Tainted: [L]=SOFTLOCKUP [ 614.628858][T14447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 614.628868][T14447] Call Trace: [ 614.628873][T14447] [ 614.628879][T14447] dump_stack_lvl+0x100/0x190 [ 614.628911][T14447] should_fail_ex.cold+0x5/0xa [ 614.628931][T14447] ? group_cpus_evenly+0xec/0x660 [ 614.628950][T14447] should_failslab+0xc2/0x120 [ 614.628968][T14447] __kmalloc_noprof+0xe0/0x850 [ 614.628995][T14447] group_cpus_evenly+0xec/0x660 [ 614.629015][T14447] ? __pfx_group_cpus_evenly+0x10/0x10 [ 614.629047][T14447] blk_mq_map_queues+0x9d/0x430 [ 614.629071][T14447] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 614.629091][T14447] ? rcu_is_watching+0x12/0xc0 [ 614.629108][T14447] ? trace_kmalloc+0xe3/0x110 [ 614.629125][T14447] ? __kasan_kmalloc+0xaa/0xb0 [ 614.629143][T14447] blk_mq_update_queue_map+0x305/0x3a0 [ 614.629163][T14447] blk_mq_alloc_tag_set+0x660/0x1330 [ 614.629179][T14447] ? idr_alloc+0x37/0x130 [ 614.629206][T14447] loop_add+0x3b7/0xb60 [ 614.629226][T14447] ? __pfx_loop_add+0x10/0x10 [ 614.629257][T14447] ? find_held_lock+0x2b/0x80 [ 614.629275][T14447] ? __fget_files+0x215/0x3d0 [ 614.629294][T14447] loop_control_ioctl+0xae/0x620 [ 614.629315][T14447] ? __pfx_loop_control_ioctl+0x10/0x10 [ 614.629337][T14447] ? __pfx_loop_control_ioctl+0x10/0x10 [ 614.629358][T14447] __x64_sys_ioctl+0x18e/0x210 [ 614.629375][T14447] do_syscall_64+0x115/0x840 [ 614.629395][T14447] ? clear_bhb_loop+0x40/0x90 [ 614.629413][T14447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.629428][T14447] RIP: 0033:0x7f8d3b39ce59 [ 614.629441][T14447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.629457][T14447] RSP: 002b:00007f8d3c187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.629472][T14447] RAX: ffffffffffffffda RBX: 00007f8d3b615fa0 RCX: 00007f8d3b39ce59 [ 614.629482][T14447] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 614.629491][T14447] RBP: 00007f8d3b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 614.629500][T14447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.629508][T14447] R13: 00007f8d3b616038 R14: 00007f8d3b615fa0 R15: 00007ffff2079f48 [ 614.629528][T14447] [ 617.067539][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1864'. [ 619.396553][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1866'. [ 619.665093][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1868'. [ 620.560821][T14508] FAULT_INJECTION: forcing a failure. [ 620.560821][T14508] name failslab, interval 1, probability 0, space 0, times 0 [ 620.622929][T14508] CPU: 0 UID: 0 PID: 14508 Comm: syz.1.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.622954][T14508] Tainted: [L]=SOFTLOCKUP [ 620.622960][T14508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 620.622973][T14508] Call Trace: [ 620.622979][T14508] [ 620.622985][T14508] dump_stack_lvl+0x100/0x190 [ 620.623015][T14508] should_fail_ex.cold+0x5/0xa [ 620.623036][T14508] ? group_cpus_evenly+0xec/0x660 [ 620.623055][T14508] should_failslab+0xc2/0x120 [ 620.623074][T14508] __kmalloc_noprof+0xe0/0x850 [ 620.623101][T14508] group_cpus_evenly+0xec/0x660 [ 620.623122][T14508] ? __pfx_group_cpus_evenly+0x10/0x10 [ 620.623148][T14508] blk_mq_map_queues+0x9d/0x430 [ 620.623170][T14508] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 620.623189][T14508] ? rcu_is_watching+0x12/0xc0 [ 620.623206][T14508] ? trace_kmalloc+0xe3/0x110 [ 620.623222][T14508] ? __kasan_kmalloc+0xaa/0xb0 [ 620.623240][T14508] blk_mq_update_queue_map+0x305/0x3a0 [ 620.623261][T14508] blk_mq_alloc_tag_set+0x660/0x1330 [ 620.623276][T14508] ? idr_alloc+0x37/0x130 [ 620.623302][T14508] loop_add+0x3b7/0xb60 [ 620.623322][T14508] ? __pfx_loop_add+0x10/0x10 [ 620.623353][T14508] ? find_held_lock+0x2b/0x80 [ 620.623371][T14508] ? __fget_files+0x215/0x3d0 [ 620.623391][T14508] loop_control_ioctl+0xae/0x620 [ 620.623412][T14508] ? __pfx_loop_control_ioctl+0x10/0x10 [ 620.623435][T14508] ? __pfx_loop_control_ioctl+0x10/0x10 [ 620.623456][T14508] __x64_sys_ioctl+0x18e/0x210 [ 620.623473][T14508] do_syscall_64+0x115/0x840 [ 620.623492][T14508] ? clear_bhb_loop+0x40/0x90 [ 620.623510][T14508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.623533][T14508] RIP: 0033:0x7f9550d9ce59 [ 620.623546][T14508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.623562][T14508] RSP: 002b:00007f9551c19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.623578][T14508] RAX: ffffffffffffffda RBX: 00007f9551015fa0 RCX: 00007f9550d9ce59 [ 620.623588][T14508] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 620.623598][T14508] RBP: 00007f9550e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 620.623607][T14508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.623616][T14508] R13: 00007f9551016038 R14: 00007f9551015fa0 R15: 00007fff53fbb1f8 [ 620.623636][T14508] [ 624.080736][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.087164][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.512292][T14545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1880'. [ 627.347775][T14571] FAULT_INJECTION: forcing a failure. [ 627.347775][T14571] name failslab, interval 1, probability 0, space 0, times 0 [ 627.428841][T14571] CPU: 0 UID: 0 PID: 14571 Comm: syz.0.1885 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.428868][T14571] Tainted: [L]=SOFTLOCKUP [ 627.428874][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 627.428883][T14571] Call Trace: [ 627.428890][T14571] [ 627.428896][T14571] dump_stack_lvl+0x100/0x190 [ 627.428925][T14571] should_fail_ex.cold+0x5/0xa [ 627.428945][T14571] ? group_cpus_evenly+0x195/0x660 [ 627.428964][T14571] should_failslab+0xc2/0x120 [ 627.428982][T14571] __kmalloc_noprof+0xe0/0x850 [ 627.429009][T14571] group_cpus_evenly+0x195/0x660 [ 627.429029][T14571] ? __pfx_group_cpus_evenly+0x10/0x10 [ 627.429055][T14571] blk_mq_map_queues+0x9d/0x430 [ 627.429077][T14571] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 627.429096][T14571] ? rcu_is_watching+0x12/0xc0 [ 627.429113][T14571] ? trace_kmalloc+0xe3/0x110 [ 627.429129][T14571] ? __kasan_kmalloc+0xaa/0xb0 [ 627.429146][T14571] blk_mq_update_queue_map+0x305/0x3a0 [ 627.429167][T14571] blk_mq_alloc_tag_set+0x660/0x1330 [ 627.429181][T14571] ? idr_alloc+0x37/0x130 [ 627.429208][T14571] loop_add+0x3b7/0xb60 [ 627.429228][T14571] ? __pfx_loop_add+0x10/0x10 [ 627.429259][T14571] ? find_held_lock+0x2b/0x80 [ 627.429277][T14571] ? __fget_files+0x215/0x3d0 [ 627.429296][T14571] loop_control_ioctl+0xae/0x620 [ 627.429317][T14571] ? __pfx_loop_control_ioctl+0x10/0x10 [ 627.429339][T14571] ? __pfx_loop_control_ioctl+0x10/0x10 [ 627.429360][T14571] __x64_sys_ioctl+0x18e/0x210 [ 627.429377][T14571] do_syscall_64+0x115/0x840 [ 627.429396][T14571] ? clear_bhb_loop+0x40/0x90 [ 627.429414][T14571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.429429][T14571] RIP: 0033:0x7f8d3b39ce59 [ 627.429442][T14571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.429456][T14571] RSP: 002b:00007f8d3c187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.429472][T14571] RAX: ffffffffffffffda RBX: 00007f8d3b615fa0 RCX: 00007f8d3b39ce59 [ 627.429482][T14571] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 627.429491][T14571] RBP: 00007f8d3b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 627.429501][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.429509][T14571] R13: 00007f8d3b616038 R14: 00007f8d3b615fa0 R15: 00007ffff2079f48 [ 627.429529][T14571] [ 628.958922][ T29] audit: type=1800 audit(1780867352.895:94): pid=14589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1889" name="lu_gp_id" dev="configfs" ino=61537 res=0 errno=0 [ 629.026610][T14590] device-mapper: ioctl: Unable to rename non-existent device, to [ 629.806590][T14606] FAULT_INJECTION: forcing a failure. [ 629.806590][T14606] name failslab, interval 1, probability 0, space 0, times 0 [ 629.869789][T14606] CPU: 0 UID: 0 PID: 14606 Comm: syz.0.1892 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.869816][T14606] Tainted: [L]=SOFTLOCKUP [ 629.869822][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 629.869833][T14606] Call Trace: [ 629.869839][T14606] [ 629.869845][T14606] dump_stack_lvl+0x100/0x190 [ 629.869874][T14606] should_fail_ex.cold+0x5/0xa [ 629.869895][T14606] should_failslab+0xc2/0x120 [ 629.869913][T14606] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 629.869930][T14606] ? register_pidns_sysctls+0x48/0x1c0 [ 629.869952][T14606] ? rcu_is_watching+0x12/0xc0 [ 629.869973][T14606] kmemdup_noprof+0x29/0x60 [ 629.869989][T14606] register_pidns_sysctls+0x48/0x1c0 [ 629.870011][T14606] ? __ns_common_init+0x299/0x4b0 [ 629.870032][T14606] copy_pid_ns+0x680/0x10a0 [ 629.870055][T14606] ? __pfx_copy_pid_ns+0x10/0x10 [ 629.870079][T14606] ? __pfx_copy_mnt_ns+0x10/0x10 [ 629.870101][T14606] ? create_new_namespaces+0x30/0xac0 [ 629.870123][T14606] create_new_namespaces+0x2aa/0xac0 [ 629.870145][T14606] unshare_nsproxy_namespaces+0xf2/0x220 [ 629.870165][T14606] ksys_unshare+0x438/0xab0 [ 629.870189][T14606] ? __pfx_ksys_unshare+0x10/0x10 [ 629.870208][T14606] ? xfd_validate_state+0x129/0x190 [ 629.870222][T14606] ? ksys_write+0x1ac/0x250 [ 629.870245][T14606] __x64_sys_unshare+0x31/0x40 [ 629.870266][T14606] do_syscall_64+0x115/0x840 [ 629.870286][T14606] ? clear_bhb_loop+0x40/0x90 [ 629.870304][T14606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.870320][T14606] RIP: 0033:0x7f8d3b39ce59 [ 629.870333][T14606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.870348][T14606] RSP: 002b:00007f8d3c187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 629.870363][T14606] RAX: ffffffffffffffda RBX: 00007f8d3b615fa0 RCX: 00007f8d3b39ce59 [ 629.870373][T14606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 629.870382][T14606] RBP: 00007f8d3b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 629.870391][T14606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.870401][T14606] R13: 00007f8d3b616038 R14: 00007f8d3b615fa0 R15: 00007ffff2079f48 [ 629.870421][T14606] [ 631.404262][T14585] Process accounting paused [ 633.323317][T14606] Process accounting resumed [ 635.529235][T14652] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 636.753172][T14672] kAFS: No cell specified [ 637.207565][T14679] FAULT_INJECTION: forcing a failure. [ 637.207565][T14679] name failslab, interval 1, probability 0, space 0, times 0 [ 637.506268][T14679] CPU: 0 UID: 0 PID: 14679 Comm: syz.0.1907 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.506295][T14679] Tainted: [L]=SOFTLOCKUP [ 637.506301][T14679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 637.506310][T14679] Call Trace: [ 637.506317][T14679] [ 637.506323][T14679] dump_stack_lvl+0x100/0x190 [ 637.506352][T14679] should_fail_ex.cold+0x5/0xa [ 637.506373][T14679] ? group_cpus_evenly+0x195/0x660 [ 637.506393][T14679] should_failslab+0xc2/0x120 [ 637.506412][T14679] __kmalloc_noprof+0xe0/0x850 [ 637.506439][T14679] group_cpus_evenly+0x195/0x660 [ 637.506461][T14679] ? __pfx_group_cpus_evenly+0x10/0x10 [ 637.506487][T14679] blk_mq_map_queues+0x9d/0x430 [ 637.506509][T14679] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 637.506528][T14679] ? rcu_is_watching+0x12/0xc0 [ 637.506545][T14679] ? trace_kmalloc+0xe3/0x110 [ 637.506561][T14679] ? __kasan_kmalloc+0xaa/0xb0 [ 637.506579][T14679] blk_mq_update_queue_map+0x305/0x3a0 [ 637.506600][T14679] blk_mq_alloc_tag_set+0x660/0x1330 [ 637.506615][T14679] ? idr_alloc+0x37/0x130 [ 637.506641][T14679] loop_add+0x3b7/0xb60 [ 637.506661][T14679] ? __pfx_loop_add+0x10/0x10 [ 637.506691][T14679] ? find_held_lock+0x2b/0x80 [ 637.506709][T14679] ? __fget_files+0x215/0x3d0 [ 637.506729][T14679] loop_control_ioctl+0xae/0x620 [ 637.506750][T14679] ? __pfx_loop_control_ioctl+0x10/0x10 [ 637.506772][T14679] ? __pfx_loop_control_ioctl+0x10/0x10 [ 637.506793][T14679] __x64_sys_ioctl+0x18e/0x210 [ 637.506810][T14679] do_syscall_64+0x115/0x840 [ 637.506829][T14679] ? clear_bhb_loop+0x40/0x90 [ 637.506847][T14679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.506863][T14679] RIP: 0033:0x7f8d3b39ce59 [ 637.506884][T14679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.506901][T14679] RSP: 002b:00007f8d3c187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.506917][T14679] RAX: ffffffffffffffda RBX: 00007f8d3b615fa0 RCX: 00007f8d3b39ce59 [ 637.506928][T14679] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 637.506937][T14679] RBP: 00007f8d3b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 637.506948][T14679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.506957][T14679] R13: 00007f8d3b616038 R14: 00007f8d3b615fa0 R15: 00007ffff2079f48 [ 637.506977][T14679] [ 637.881927][T14683] random: crng reseeded on system resumption [ 642.414417][T14695] Process accounting resumed [ 643.318639][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1914'. [ 644.334641][T14719] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 644.603872][T14719] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 644.785294][T14719] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 646.968297][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 647.077635][ T29] audit: type=1804 audit(1780867371.015:95): pid=14764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1923" name="file0" dev="tmpfs" ino=2698 res=1 errno=0 [ 648.227739][T14780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'. [ 648.512505][ T29] audit: type=1800 audit(1780867372.455:96): pid=14785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1927" name="lu_gp_id" dev="configfs" ino=62714 res=0 errno=0 [ 648.794064][T14793] netlink: 202 bytes leftover after parsing attributes in process `syz.2.1928'. [ 649.185863][T14806] FAULT_INJECTION: forcing a failure. [ 649.185863][T14806] name failslab, interval 1, probability 0, space 0, times 0 [ 649.534624][T14806] CPU: 0 UID: 0 PID: 14806 Comm: syz.3.1932 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.534651][T14806] Tainted: [L]=SOFTLOCKUP [ 649.534656][T14806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 649.534666][T14806] Call Trace: [ 649.534671][T14806] [ 649.534678][T14806] dump_stack_lvl+0x100/0x190 [ 649.534707][T14806] should_fail_ex.cold+0x5/0xa [ 649.534727][T14806] ? snd_seq_oss_readq_new+0x9b/0x290 [ 649.534763][T14806] should_failslab+0xc2/0x120 [ 649.534782][T14806] __kmalloc_noprof+0xe0/0x850 [ 649.534810][T14806] snd_seq_oss_readq_new+0x9b/0x290 [ 649.534835][T14806] snd_seq_oss_open+0x476/0xa10 [ 649.534857][T14806] odev_open+0x6f/0x90 [ 649.534873][T14806] ? __pfx_odev_open+0x10/0x10 [ 649.534890][T14806] soundcore_open+0x2e3/0x5a0 [ 649.534909][T14806] ? __pfx_soundcore_open+0x10/0x10 [ 649.534927][T14806] chrdev_open+0x234/0x6a0 [ 649.534945][T14806] ? __pfx_apparmor_file_open+0x10/0x10 [ 649.534962][T14806] ? __pfx_chrdev_open+0x10/0x10 [ 649.534980][T14806] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 649.535004][T14806] do_dentry_open+0x6ab/0x14d0 [ 649.535022][T14806] ? __pfx_chrdev_open+0x10/0x10 [ 649.535045][T14806] vfs_open+0x82/0x3f0 [ 649.535068][T14806] path_openat+0x208c/0x31a0 [ 649.535093][T14806] ? __pfx_path_openat+0x10/0x10 [ 649.535118][T14806] do_file_open+0x20e/0x430 [ 649.535138][T14806] ? __pfx_do_file_open+0x10/0x10 [ 649.535170][T14806] ? alloc_fd+0x476/0x790 [ 649.535192][T14806] ? do_getname+0x191/0x390 [ 649.535215][T14806] do_sys_openat2+0x10d/0x1e0 [ 649.535237][T14806] ? __pfx_do_sys_openat2+0x10/0x10 [ 649.535266][T14806] __x64_sys_openat+0x12d/0x210 [ 649.535288][T14806] ? __pfx___x64_sys_openat+0x10/0x10 [ 649.535310][T14806] ? exit_to_user_mode_loop+0xf3/0x670 [ 649.535336][T14806] ? rcu_is_watching+0x12/0xc0 [ 649.535356][T14806] do_syscall_64+0x115/0x840 [ 649.535376][T14806] ? clear_bhb_loop+0x40/0x90 [ 649.535394][T14806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.535409][T14806] RIP: 0033:0x7f06ec39ce59 [ 649.535423][T14806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.535438][T14806] RSP: 002b:00007f06ed183028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 649.535454][T14806] RAX: ffffffffffffffda RBX: 00007f06ec616180 RCX: 00007f06ec39ce59 [ 649.535464][T14806] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 649.535474][T14806] RBP: 00007f06ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 649.535483][T14806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.535492][T14806] R13: 00007f06ec616218 R14: 00007f06ec616180 R15: 00007ffd1f9b71c8 [ 649.535513][T14806] [ 651.078047][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1936'. [ 651.452428][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1940'. [ 651.788581][T14846] netlink: 202 bytes leftover after parsing attributes in process `syz.1.1942'. [ 655.024359][ T29] audit: type=1800 audit(1780867378.965:97): pid=14864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1945" name="lu_gp_id" dev="configfs" ino=63285 res=0 errno=0 [ 655.309700][T14857] capability: warning: `syz.2.1944' uses 32-bit capabilities (legacy support in use) [ 655.325388][T14867] FAULT_INJECTION: forcing a failure. [ 655.325388][T14867] name failslab, interval 1, probability 0, space 0, times 0 [ 655.414557][T14867] CPU: 0 UID: 0 PID: 14867 Comm: syz.3.1946 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.414580][T14867] Tainted: [L]=SOFTLOCKUP [ 655.414586][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.414595][T14867] Call Trace: [ 655.414600][T14867] [ 655.414606][T14867] dump_stack_lvl+0x100/0x190 [ 655.414633][T14867] should_fail_ex.cold+0x5/0xa [ 655.414653][T14867] should_failslab+0xc2/0x120 [ 655.414671][T14867] __kmalloc_cache_noprof+0x7a/0x6f0 [ 655.414691][T14867] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 655.414711][T14867] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 655.414733][T14867] snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 655.414762][T14867] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 655.414784][T14867] ? __pfx___mutex_lock+0x10/0x10 [ 655.414815][T14867] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 655.414836][T14867] snd_pcm_oss_read+0x3d4/0x730 [ 655.414858][T14867] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 655.414878][T14867] vfs_read+0x1e4/0xb30 [ 655.414896][T14867] ? __pfx_vfs_read+0x10/0x10 [ 655.414911][T14867] ? find_held_lock+0x2b/0x80 [ 655.414928][T14867] ? __fget_files+0x215/0x3d0 [ 655.414944][T14867] ? __fget_files+0x215/0x3d0 [ 655.414963][T14867] ? __fget_files+0x21f/0x3d0 [ 655.414984][T14867] ksys_read+0x12a/0x250 [ 655.414999][T14867] ? __pfx_ksys_read+0x10/0x10 [ 655.415016][T14867] ? rcu_is_watching+0x12/0xc0 [ 655.415035][T14867] do_syscall_64+0x115/0x840 [ 655.415054][T14867] ? clear_bhb_loop+0x40/0x90 [ 655.415071][T14867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.415085][T14867] RIP: 0033:0x7f06ec39ce59 [ 655.415098][T14867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.415112][T14867] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 655.415126][T14867] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 655.415137][T14867] RDX: 0000000000008080 RSI: 0000000000000000 RDI: 0000000000000003 [ 655.415145][T14867] RBP: 00007f06ed1c5090 R08: 0000000000000000 R09: 0000000000000000 [ 655.415153][T14867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.415162][T14867] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 655.415184][T14867] [ 656.207976][T14879] netlink: 337 bytes leftover after parsing attributes in process `syz.3.1946'. [ 661.235007][ T29] audit: type=1800 audit(1780867385.175:98): pid=14923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1955" name="lu_gp_id" dev="configfs" ino=63611 res=0 errno=0 [ 661.330622][T14929] random: crng reseeded on system resumption [ 661.481952][T14933] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5631] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[14933] [ 661.559453][T14933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1958'. [ 662.002174][T14925] Process accounting resumed [ 662.171983][T14949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'. [ 663.608658][T14958] Process accounting paused [ 665.344384][T14995] FAULT_INJECTION: forcing a failure. [ 665.344384][T14995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.414217][T14995] CPU: 0 UID: 0 PID: 14995 Comm: syz.3.1972 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.414244][T14995] Tainted: [L]=SOFTLOCKUP [ 665.414250][T14995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 665.414265][T14995] Call Trace: [ 665.414271][T14995] [ 665.414277][T14995] dump_stack_lvl+0x100/0x190 [ 665.414304][T14995] should_fail_ex.cold+0x5/0xa [ 665.414324][T14995] _copy_from_user+0x2e/0xd0 [ 665.414345][T14995] copy_msghdr_from_user+0x9f/0x4f0 [ 665.414365][T14995] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 665.414393][T14995] ___sys_sendmsg+0x106/0x1e0 [ 665.414413][T14995] ? __pfx____sys_sendmsg+0x10/0x10 [ 665.414453][T14995] __sys_sendmsg+0x170/0x220 [ 665.414468][T14995] ? __pfx___sys_sendmsg+0x10/0x10 [ 665.414490][T14995] ? rcu_is_watching+0x12/0xc0 [ 665.414509][T14995] do_syscall_64+0x115/0x840 [ 665.414528][T14995] ? clear_bhb_loop+0x40/0x90 [ 665.414545][T14995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.414560][T14995] RIP: 0033:0x7f06ec39ce59 [ 665.414573][T14995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.414587][T14995] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.414602][T14995] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 665.414612][T14995] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 665.414621][T14995] RBP: 00007f06ed1c5090 R08: 0000000000000000 R09: 0000000000000000 [ 665.414629][T14995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.414638][T14995] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 665.414657][T14995] [ 667.308040][T15017] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5628] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[15017] [ 667.958851][T15020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1975'. [ 668.818496][T15026] FAULT_INJECTION: forcing a failure. [ 668.818496][T15026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.930300][T15026] CPU: 0 UID: 0 PID: 15026 Comm: syz.1.1981 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.930325][T15026] Tainted: [L]=SOFTLOCKUP [ 668.930331][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 668.930341][T15026] Call Trace: [ 668.930347][T15026] [ 668.930353][T15026] dump_stack_lvl+0x100/0x190 [ 668.930383][T15026] should_fail_ex.cold+0x5/0xa [ 668.930403][T15026] _copy_from_user+0x2e/0xd0 [ 668.930424][T15026] memdup_user+0x6b/0xe0 [ 668.930441][T15026] strndup_user+0x78/0xe0 [ 668.930459][T15026] __x64_sys_fsopen+0x9e/0x220 [ 668.930487][T15026] do_syscall_64+0x115/0x840 [ 668.930508][T15026] ? clear_bhb_loop+0x40/0x90 [ 668.930527][T15026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.930543][T15026] RIP: 0033:0x7f9550d9ce59 [ 668.930556][T15026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.930571][T15026] RSP: 002b:00007f9551c19028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 668.930586][T15026] RAX: ffffffffffffffda RBX: 00007f9551015fa0 RCX: 00007f9550d9ce59 [ 668.930597][T15026] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 668.930605][T15026] RBP: 00007f9550e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 668.930615][T15026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.930623][T15026] R13: 00007f9551016038 R14: 00007f9551015fa0 R15: 00007fff53fbb1f8 [ 668.930643][T15026] [ 672.082087][T15051] &#$@\]\-: entered promiscuous mode [ 672.811848][T15068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1988'. [ 673.184652][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1993'. [ 673.238781][T15080] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1992'. [ 673.506817][ T29] audit: type=1800 audit(1780867397.461:99): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1994" name="lu_gp_id" dev="configfs" ino=64532 res=0 errno=0 [ 673.587292][T15065] Process accounting paused [ 677.285695][T15130] FAULT_INJECTION: forcing a failure. [ 677.285695][T15130] name failslab, interval 1, probability 0, space 0, times 0 [ 677.358848][T15130] CPU: 0 UID: 0 PID: 15130 Comm: syz.3.2000 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.358873][T15130] Tainted: [L]=SOFTLOCKUP [ 677.358879][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 677.358893][T15130] Call Trace: [ 677.358898][T15130] [ 677.358904][T15130] dump_stack_lvl+0x100/0x190 [ 677.358934][T15130] should_fail_ex.cold+0x5/0xa [ 677.358955][T15130] should_failslab+0xc2/0x120 [ 677.358974][T15130] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 677.358996][T15130] ? seq_open+0x55/0x170 [ 677.359020][T15130] ? __pfx_snd_info_seq_show+0x10/0x10 [ 677.359041][T15130] seq_open+0x55/0x170 [ 677.359062][T15130] ? __pfx_snd_info_seq_show+0x10/0x10 [ 677.359081][T15130] single_open+0xfc/0x1d0 [ 677.359100][T15130] snd_info_text_entry_open+0x258/0x2d0 [ 677.359119][T15130] ? trace_kmem_cache_alloc+0xd5/0x100 [ 677.359137][T15130] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 677.359167][T15130] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 677.359190][T15130] ? proc_reg_open+0x23f/0x5f0 [ 677.359211][T15130] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 677.359232][T15130] proc_reg_open+0x2ab/0x5f0 [ 677.359252][T15130] do_dentry_open+0x6ab/0x14d0 [ 677.359269][T15130] ? __pfx_proc_reg_open+0x10/0x10 [ 677.359291][T15130] vfs_open+0x82/0x3f0 [ 677.359315][T15130] path_openat+0x208c/0x31a0 [ 677.359340][T15130] ? __pfx_path_openat+0x10/0x10 [ 677.359365][T15130] do_file_open+0x20e/0x430 [ 677.359385][T15130] ? __pfx_do_file_open+0x10/0x10 [ 677.359417][T15130] ? alloc_fd+0x476/0x790 [ 677.359437][T15130] ? do_getname+0x191/0x390 [ 677.359459][T15130] do_sys_openat2+0x10d/0x1e0 [ 677.359481][T15130] ? __pfx_do_sys_openat2+0x10/0x10 [ 677.359504][T15130] ? find_held_lock+0x2b/0x80 [ 677.359527][T15130] __x64_sys_openat+0x12d/0x210 [ 677.359550][T15130] ? __pfx___x64_sys_openat+0x10/0x10 [ 677.359576][T15130] ? rcu_is_watching+0x12/0xc0 [ 677.359595][T15130] do_syscall_64+0x115/0x840 [ 677.359616][T15130] ? clear_bhb_loop+0x40/0x90 [ 677.359634][T15130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.359651][T15130] RIP: 0033:0x7f06ec39ce59 [ 677.359664][T15130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.359679][T15130] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 677.359694][T15130] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 677.359704][T15130] RDX: 0000000000189280 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 677.359714][T15130] RBP: 00007f06ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 677.359724][T15130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.359733][T15130] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 677.359753][T15130] [ 677.756596][T15140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2003'. [ 678.284002][ T29] audit: type=1800 audit(1780867402.234:100): pid=15144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2005" name="lu_gp_id" dev="configfs" ino=64765 res=0 errno=0 [ 678.634295][T15151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2006'. [ 683.848576][ T29] audit: type=1800 audit(1780867407.807:101): pid=15184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2014" name="lu_gp_id" dev="configfs" ino=64979 res=0 errno=0 [ 685.325350][T15203] futex_wake_op: syz.1.2018 tries to shift op by -2048; fix this program [ 685.517083][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.547142][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.701300][T15203] futex_wake_op: syz.1.2018 tries to shift op by -2048; fix this program [ 686.303466][T15198] 0x000000000001-0x000000020000 : "" [ 686.941073][T15198] ftl_cs: FTL header corrupt! [ 689.363810][T15219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2020'. [ 689.602229][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2023'. [ 689.672608][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2020'. [ 691.180230][T15276] blk-mq: reduced tag depth (128 -> 64) [ 692.574895][T15287] Process accounting paused [ 694.049686][T15331] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.2041: bg 1: bad block bitmap checksum [ 694.064671][T15331] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6679: Filesystem failed CRC [ 694.192631][T15327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2042'. [ 694.234340][T15340] hub 1-0:1.0: USB hub found [ 694.267289][T15340] hub 1-0:1.0: 1 port detected [ 694.359381][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2042'. [ 694.457939][T15325] Process accounting resumed [ 696.071183][T15380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 696.125203][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 696.866881][T15394] NFSD: Failed to start, no listeners configured. [ 697.221558][ T29] audit: type=1800 audit(8277292046.606:102): pid=15402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2055" name="lu_gp_id" dev="configfs" ino=66064 res=0 errno=0 [ 697.767195][T15412] FAULT_INJECTION: forcing a failure. [ 697.767195][T15412] name failslab, interval 1, probability 0, space 0, times 0 [ 697.828106][T15412] CPU: 0 UID: 0 PID: 15412 Comm: syz.1.2058 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.828132][T15412] Tainted: [L]=SOFTLOCKUP [ 697.828139][T15412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 697.828148][T15412] Call Trace: [ 697.828154][T15412] [ 697.828161][T15412] dump_stack_lvl+0x100/0x190 [ 697.828190][T15412] should_fail_ex.cold+0x5/0xa [ 697.828210][T15412] should_failslab+0xc2/0x120 [ 697.828237][T15412] __kmalloc_cache_noprof+0x7a/0x6f0 [ 697.828259][T15412] ? snd_timer_instance_new+0x47/0x350 [ 697.828284][T15412] snd_timer_instance_new+0x47/0x350 [ 697.828304][T15412] snd_seq_timer_open+0x1d4/0x5d0 [ 697.828322][T15412] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 697.828339][T15412] ? find_held_lock+0x2b/0x80 [ 697.828361][T15412] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 697.828380][T15412] ? lockdep_hardirqs_on+0x78/0x100 [ 697.828400][T15412] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 697.828422][T15412] queue_use+0xdc/0x1f0 [ 697.828443][T15412] snd_seq_queue_alloc+0x2e5/0x540 [ 697.828468][T15412] snd_seq_ioctl_create_queue+0xa9/0x370 [ 697.828487][T15412] call_seq_client_ctl+0xa3/0x130 [ 697.828506][T15412] snd_seq_kernel_client_ctl+0x77/0xd0 [ 697.828525][T15412] alloc_seq_queue+0xdb/0x180 [ 697.828543][T15412] ? __pfx_alloc_seq_queue+0x10/0x10 [ 697.828569][T15412] ? find_held_lock+0x2b/0x80 [ 697.828588][T15412] ? mark_held_locks+0x40/0x70 [ 697.828612][T15412] snd_seq_oss_open+0x2b2/0xa10 [ 697.828634][T15412] odev_open+0x6f/0x90 [ 697.828650][T15412] ? __pfx_odev_open+0x10/0x10 [ 697.828667][T15412] soundcore_open+0x2e3/0x5a0 [ 697.828686][T15412] ? __pfx_soundcore_open+0x10/0x10 [ 697.828704][T15412] chrdev_open+0x234/0x6a0 [ 697.828722][T15412] ? __pfx_apparmor_file_open+0x10/0x10 [ 697.828739][T15412] ? __pfx_chrdev_open+0x10/0x10 [ 697.828758][T15412] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 697.828781][T15412] do_dentry_open+0x6ab/0x14d0 [ 697.828798][T15412] ? __pfx_chrdev_open+0x10/0x10 [ 697.828822][T15412] vfs_open+0x82/0x3f0 [ 697.828845][T15412] path_openat+0x208c/0x31a0 [ 697.828870][T15412] ? __pfx_path_openat+0x10/0x10 [ 697.828895][T15412] do_file_open+0x20e/0x430 [ 697.828915][T15412] ? __pfx_do_file_open+0x10/0x10 [ 697.828947][T15412] ? alloc_fd+0x476/0x790 [ 697.828967][T15412] ? do_getname+0x191/0x390 [ 697.828989][T15412] do_sys_openat2+0x10d/0x1e0 [ 697.829012][T15412] ? __pfx_do_sys_openat2+0x10/0x10 [ 697.829043][T15412] __x64_sys_openat+0x12d/0x210 [ 697.829066][T15412] ? __pfx___x64_sys_openat+0x10/0x10 [ 697.829087][T15412] ? exit_to_user_mode_loop+0xf3/0x670 [ 697.829113][T15412] ? rcu_is_watching+0x12/0xc0 [ 697.829133][T15412] do_syscall_64+0x115/0x840 [ 697.829152][T15412] ? clear_bhb_loop+0x40/0x90 [ 697.829171][T15412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.829187][T15412] RIP: 0033:0x7f9550d9ce59 [ 697.829200][T15412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.829221][T15412] RSP: 002b:00007f9551c19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 697.829237][T15412] RAX: ffffffffffffffda RBX: 00007f9551015fa0 RCX: 00007f9550d9ce59 [ 697.829248][T15412] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 697.829258][T15412] RBP: 00007f9550e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 697.829268][T15412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.829278][T15412] R13: 00007f9551016038 R14: 00007f9551015fa0 R15: 00007fff53fbb1f8 [ 697.829298][T15412] [ 699.270485][T15431] FAULT_INJECTION: forcing a failure. [ 699.270485][T15431] name failslab, interval 1, probability 0, space 0, times 0 [ 699.314219][T15431] CPU: 0 UID: 0 PID: 15431 Comm: syz.0.2064 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.314246][T15431] Tainted: [L]=SOFTLOCKUP [ 699.314251][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 699.314261][T15431] Call Trace: [ 699.314267][T15431] [ 699.314273][T15431] dump_stack_lvl+0x100/0x190 [ 699.314305][T15431] should_fail_ex.cold+0x5/0xa [ 699.314326][T15431] should_failslab+0xc2/0x120 [ 699.314344][T15431] __kmalloc_cache_noprof+0x7a/0x6f0 [ 699.314365][T15431] ? snd_virmidi_output_open+0xc4/0x670 [ 699.314396][T15431] snd_virmidi_output_open+0xc4/0x670 [ 699.314419][T15431] open_substream+0x480/0x9b0 [ 699.314443][T15431] rawmidi_open_priv+0x595/0x6f0 [ 699.314468][T15431] snd_rawmidi_open+0x4c9/0xba0 [ 699.314495][T15431] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 699.314519][T15431] ? __pfx_default_wake_function+0x10/0x10 [ 699.314540][T15431] ? kobject_get_unless_zero+0x156/0x200 [ 699.314566][T15431] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 699.314588][T15431] snd_open+0x201/0x450 [ 699.314609][T15431] ? __pfx_snd_open+0x10/0x10 [ 699.314628][T15431] chrdev_open+0x234/0x6a0 [ 699.314646][T15431] ? __pfx_apparmor_file_open+0x10/0x10 [ 699.314663][T15431] ? __pfx_chrdev_open+0x10/0x10 [ 699.314682][T15431] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 699.314706][T15431] do_dentry_open+0x6ab/0x14d0 [ 699.314723][T15431] ? __pfx_chrdev_open+0x10/0x10 [ 699.314746][T15431] vfs_open+0x82/0x3f0 [ 699.314770][T15431] path_openat+0x208c/0x31a0 [ 699.314795][T15431] ? __pfx_path_openat+0x10/0x10 [ 699.314820][T15431] do_file_open+0x20e/0x430 [ 699.314840][T15431] ? __pfx_do_file_open+0x10/0x10 [ 699.314872][T15431] ? alloc_fd+0x476/0x790 [ 699.314892][T15431] ? do_getname+0x191/0x390 [ 699.314915][T15431] do_sys_openat2+0x10d/0x1e0 [ 699.314937][T15431] ? __pfx_do_sys_openat2+0x10/0x10 [ 699.314966][T15431] __x64_sys_openat+0x12d/0x210 [ 699.314988][T15431] ? __pfx___x64_sys_openat+0x10/0x10 [ 699.315009][T15431] ? ksys_write+0x1ac/0x250 [ 699.315029][T15431] ? rcu_is_watching+0x12/0xc0 [ 699.315048][T15431] do_syscall_64+0x115/0x840 [ 699.315068][T15431] ? clear_bhb_loop+0x40/0x90 [ 699.315097][T15431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.315113][T15431] RIP: 0033:0x7f8d3b39ce59 [ 699.315127][T15431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.315142][T15431] RSP: 002b:00007f8d3c187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 699.315157][T15431] RAX: ffffffffffffffda RBX: 00007f8d3b615fa0 RCX: 00007f8d3b39ce59 [ 699.315167][T15431] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 699.315176][T15431] RBP: 00007f8d3b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 699.315185][T15431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.315195][T15431] R13: 00007f8d3b616038 R14: 00007f8d3b615fa0 R15: 00007ffff2079f48 [ 699.315215][T15431] [ 699.876976][ T29] audit: type=1800 audit(8277292049.217:103): pid=15436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2065" name="lu_gp_id" dev="configfs" ino=66306 res=0 errno=0 [ 702.788559][ T29] audit: type=1800 audit(8277292052.178:104): pid=15472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2075" name="lu_gp_id" dev="configfs" ino=66513 res=0 errno=0 [ 706.663495][T15477] Process accounting resumed [ 707.840356][T15510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2082'. [ 707.926851][T15508] bond0: invalid ARP target specified [ 708.031419][T15510] nbd: must specify at least one socket [ 708.350179][T15508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2082'. [ 711.886407][T15561] FAULT_INJECTION: forcing a failure. [ 711.886407][T15561] name failslab, interval 1, probability 0, space 0, times 0 [ 711.951477][T15561] CPU: 0 UID: 0 PID: 15561 Comm: syz.0.2093 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.951503][T15561] Tainted: [L]=SOFTLOCKUP [ 711.951509][T15561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 711.951519][T15561] Call Trace: [ 711.951525][T15561] [ 711.951531][T15561] dump_stack_lvl+0x100/0x190 [ 711.951560][T15561] should_fail_ex.cold+0x5/0xa [ 711.951580][T15561] should_failslab+0xc2/0x120 [ 711.951598][T15561] __kmalloc_node_noprof+0xe6/0x850 [ 711.951621][T15561] ? mempool_init_node+0x11b/0x6e0 [ 711.951638][T15561] ? lockdep_init_map_type+0x5c/0x250 [ 711.951663][T15561] ? __pfx_mempool_free_slab+0x10/0x10 [ 711.951678][T15561] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 711.951696][T15561] mempool_init_node+0x11b/0x6e0 [ 711.951712][T15561] ? __pfx_xa_load+0x10/0x10 [ 711.951737][T15561] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 711.951752][T15561] ? __pfx_mempool_free_slab+0x10/0x10 [ 711.951769][T15561] mempool_init_noprof+0x3a/0x50 [ 711.951788][T15561] bioset_init+0x37e/0x8a0 [ 711.951807][T15561] ? __pfx_bioset_init+0x10/0x10 [ 711.951832][T15561] __alloc_disk_node+0x83/0x6b0 [ 711.951852][T15561] __blk_mq_alloc_disk+0x89/0x120 [ 711.951870][T15561] loop_add+0x498/0xb60 [ 711.951890][T15561] ? __pfx_loop_add+0x10/0x10 [ 711.951931][T15561] ? find_held_lock+0x2b/0x80 [ 711.951948][T15561] ? __fget_files+0x215/0x3d0 [ 711.951971][T15561] loop_control_ioctl+0xae/0x620 [ 711.951992][T15561] ? __pfx_loop_control_ioctl+0x10/0x10 [ 711.952016][T15561] ? __pfx_loop_control_ioctl+0x10/0x10 [ 711.952038][T15561] __x64_sys_ioctl+0x18e/0x210 [ 711.952055][T15561] do_syscall_64+0x115/0x840 [ 711.952074][T15561] ? clear_bhb_loop+0x40/0x90 [ 711.952092][T15561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.952108][T15561] RIP: 0033:0x7f8d3b39ce59 [ 711.952121][T15561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.952136][T15561] RSP: 002b:00007f8d3c187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 711.952151][T15561] RAX: ffffffffffffffda RBX: 00007f8d3b615fa0 RCX: 00007f8d3b39ce59 [ 711.952162][T15561] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 711.952171][T15561] RBP: 00007f8d3b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 711.952181][T15561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.952191][T15561] R13: 00007f8d3b616038 R14: 00007f8d3b615fa0 R15: 00007ffff2079f48 [ 711.952211][T15561] [ 712.318722][T15560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 713.282858][T15572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 714.472423][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2105'. [ 717.649506][T15640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2111'. [ 718.316468][T15658] FAULT_INJECTION: forcing a failure. [ 718.316468][T15658] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 718.383087][T15658] CPU: 0 UID: 0 PID: 15658 Comm: syz.3.2114 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.383111][T15658] Tainted: [L]=SOFTLOCKUP [ 718.383116][T15658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 718.383125][T15658] Call Trace: [ 718.383130][T15658] [ 718.383136][T15658] dump_stack_lvl+0x100/0x190 [ 718.383164][T15658] should_fail_ex.cold+0x5/0xa [ 718.383180][T15658] ? prepare_alloc_pages+0x16d/0x5f0 [ 718.383200][T15658] should_fail_alloc_page+0xeb/0x140 [ 718.383219][T15658] prepare_alloc_pages+0x1f0/0x5f0 [ 718.383240][T15658] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 718.383263][T15658] ? __pfx_stack_trace_save+0x10/0x10 [ 718.383282][T15658] ? stack_depot_save_flags+0x27/0x9d0 [ 718.383310][T15658] ? kasan_save_stack+0x3f/0x50 [ 718.383324][T15658] ? kasan_save_stack+0x30/0x50 [ 718.383337][T15658] ? kasan_save_track+0x14/0x30 [ 718.383353][T15658] ? kasan_save_stack+0x3f/0x50 [ 718.383369][T15658] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 718.383394][T15658] ? __lock_acquire+0x4a5/0x2630 [ 718.383415][T15658] ? __lock_acquire+0x4a5/0x2630 [ 718.383434][T15658] ? __css_rstat_updated+0x1ce/0x5a0 [ 718.383460][T15658] ? lock_acquire+0x1b1/0x370 [ 718.383480][T15658] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 718.383501][T15658] ? policy_nodemask+0xed/0x4f0 [ 718.383519][T15658] alloc_pages_mpol+0x1fb/0x540 [ 718.383536][T15658] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 718.383555][T15658] ? __lock_acquire+0x4a5/0x2630 [ 718.383578][T15658] folio_alloc_mpol_noprof+0x36/0x260 [ 718.383598][T15658] vma_alloc_folio_noprof+0xed/0x1d0 [ 718.383617][T15658] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 718.383641][T15658] do_anonymous_page+0xb46/0x2050 [ 718.383663][T15658] ? rcu_read_unlock+0x2d/0xb0 [ 718.383687][T15658] __handle_mm_fault+0x1d2c/0x2a00 [ 718.383710][T15658] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 718.383728][T15658] ? __pfx___handle_mm_fault+0x10/0x10 [ 718.383752][T15658] ? pte_offset_map_lock+0x174/0x320 [ 718.383768][T15658] ? find_held_lock+0x2b/0x80 [ 718.383791][T15658] ? follow_page_pte+0x4d0/0x13f0 [ 718.383811][T15658] handle_mm_fault+0x37b/0xa30 [ 718.383835][T15658] __get_user_pages+0x1178/0x32a0 [ 718.383859][T15658] ? __pfx___get_user_pages+0x10/0x10 [ 718.383882][T15658] populate_vma_page_range+0x267/0x3f0 [ 718.383901][T15658] ? __pfx_populate_vma_page_range+0x10/0x10 [ 718.383919][T15658] ? __pfx_find_vma_intersection+0x10/0x10 [ 718.383936][T15658] ? do_mmap+0x93f/0x12f0 [ 718.383955][T15658] __mm_populate+0x107/0x3a0 [ 718.383974][T15658] ? __pfx___mm_populate+0x10/0x10 [ 718.383993][T15658] ? up_write+0x28c/0x4f0 [ 718.384010][T15658] vm_mmap_pgoff+0x37f/0x470 [ 718.384030][T15658] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 718.384048][T15658] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 718.384069][T15658] ? __fget_files+0x215/0x3d0 [ 718.384087][T15658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 718.384110][T15658] ksys_mmap_pgoff+0xe4/0x610 [ 718.384128][T15658] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 718.384143][T15658] ? fput+0x79/0x100 [ 718.384162][T15658] ? ksys_write+0x1ac/0x250 [ 718.384178][T15658] ? __pfx_ksys_write+0x10/0x10 [ 718.384195][T15658] __x64_sys_mmap+0x125/0x190 [ 718.384213][T15658] do_syscall_64+0x115/0x840 [ 718.384231][T15658] ? clear_bhb_loop+0x40/0x90 [ 718.384249][T15658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.384264][T15658] RIP: 0033:0x7f06ec39ce59 [ 718.384276][T15658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.384290][T15658] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 718.384309][T15658] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 718.384319][T15658] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 718.384327][T15658] RBP: 00007f06ed1c5090 R08: 0000000000000002 R09: 0000000000008000 [ 718.384336][T15658] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000002 [ 718.384344][T15658] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 718.384364][T15658] [ 719.169528][T15670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2115'. [ 719.186443][T15671] netlink: 337 bytes leftover after parsing attributes in process `syz.0.2113'. [ 719.384261][T15673] FAULT_INJECTION: forcing a failure. [ 719.384261][T15673] name failslab, interval 1, probability 0, space 0, times 0 [ 719.400106][T15673] CPU: 0 UID: 0 PID: 15673 Comm: syz.3.2116 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.400131][T15673] Tainted: [L]=SOFTLOCKUP [ 719.400137][T15673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 719.400146][T15673] Call Trace: [ 719.400152][T15673] [ 719.400158][T15673] dump_stack_lvl+0x100/0x190 [ 719.400186][T15673] should_fail_ex.cold+0x5/0xa [ 719.400212][T15673] should_failslab+0xc2/0x120 [ 719.400234][T15673] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 719.400257][T15673] ? security_file_alloc+0x34/0x2c0 [ 719.400277][T15673] ? trace_kmem_cache_alloc+0xd5/0x100 [ 719.400297][T15673] security_file_alloc+0x34/0x2c0 [ 719.400316][T15673] init_file+0x95/0x480 [ 719.400337][T15673] alloc_empty_file+0x79/0x1c0 [ 719.400359][T15673] alloc_file_pseudo+0x13a/0x230 [ 719.400381][T15673] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 719.400402][T15673] ? security_inode_init_security_anon+0x7b/0x230 [ 719.400424][T15673] __anon_inode_getfile+0xe8/0x280 [ 719.400447][T15673] new_userfaultfd+0x255/0x400 [ 719.400465][T15673] __x64_sys_userfaultfd+0x4b/0xb0 [ 719.400483][T15673] do_syscall_64+0x115/0x840 [ 719.400502][T15673] ? clear_bhb_loop+0x40/0x90 [ 719.400521][T15673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.400536][T15673] RIP: 0033:0x7f06ec39ce59 [ 719.400549][T15673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.400564][T15673] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 719.400579][T15673] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 719.400589][T15673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 719.400598][T15673] RBP: 00007f06ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 719.400607][T15673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.400616][T15673] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 719.400636][T15673] [ 722.864884][T15716] Process accounting resumed [ 726.575584][T15707] Process accounting paused [ 726.716482][T15777] FAULT_INJECTION: forcing a failure. [ 726.716482][T15777] name failslab, interval 1, probability 0, space 0, times 0 [ 726.742332][T15777] CPU: 0 UID: 0 PID: 15777 Comm: syz.0.2139 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.742356][T15777] Tainted: [L]=SOFTLOCKUP [ 726.742362][T15777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 726.742372][T15777] Call Trace: [ 726.742378][T15777] [ 726.742384][T15777] dump_stack_lvl+0x100/0x190 [ 726.742412][T15777] should_fail_ex.cold+0x5/0xa [ 726.742433][T15777] should_failslab+0xc2/0x120 [ 726.742451][T15777] __kvmalloc_node_noprof+0xfa/0xa00 [ 726.742466][T15777] ? sbitmap_init_node+0x1cc/0x720 [ 726.742489][T15777] sbitmap_init_node+0x1cc/0x720 [ 726.742510][T15777] sbitmap_queue_init_node+0x40/0x4a0 [ 726.742536][T15777] blk_mq_init_tags+0x184/0x300 [ 726.742559][T15777] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 726.742579][T15777] ? blk_mq_update_queue_map+0x227/0x3a0 [ 726.742599][T15777] blk_mq_alloc_tag_set+0x848/0x1330 [ 726.742622][T15777] loop_add+0x3b7/0xb60 [ 726.742642][T15777] ? __pfx_loop_add+0x10/0x10 [ 726.742672][T15777] ? find_held_lock+0x2b/0x80 [ 726.742691][T15777] ? __fget_files+0x215/0x3d0 [ 726.742710][T15777] loop_control_ioctl+0xae/0x620 [ 726.742731][T15777] ? __pfx_loop_control_ioctl+0x10/0x10 [ 726.742753][T15777] ? __pfx_loop_control_ioctl+0x10/0x10 [ 726.742774][T15777] __x64_sys_ioctl+0x18e/0x210 [ 726.742791][T15777] do_syscall_64+0x115/0x840 [ 726.742810][T15777] ? clear_bhb_loop+0x40/0x90 [ 726.742829][T15777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.742844][T15777] RIP: 0033:0x7f8d3b39ce59 [ 726.742858][T15777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.742873][T15777] RSP: 002b:00007f8d3c187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.742887][T15777] RAX: ffffffffffffffda RBX: 00007f8d3b615fa0 RCX: 00007f8d3b39ce59 [ 726.742897][T15777] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 726.742906][T15777] RBP: 00007f8d3b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 726.742915][T15777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.742924][T15777] R13: 00007f8d3b616038 R14: 00007f8d3b615fa0 R15: 00007ffff2079f48 [ 726.742944][T15777] [ 727.890060][T15777] blk-mq: reduced tag depth (128 -> 64) [ 728.282515][T15792] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 728.466656][T15795] FAULT_INJECTION: forcing a failure. [ 728.466656][T15795] name failslab, interval 1, probability 0, space 0, times 0 [ 728.523753][T15795] CPU: 0 UID: 0 PID: 15795 Comm: syz.3.2142 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.523778][T15795] Tainted: [L]=SOFTLOCKUP [ 728.523784][T15795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.523794][T15795] Call Trace: [ 728.523800][T15795] [ 728.523807][T15795] dump_stack_lvl+0x100/0x190 [ 728.523836][T15795] should_fail_ex.cold+0x5/0xa [ 728.523857][T15795] ? snd_midi_event_new+0xa1/0x210 [ 728.523874][T15795] should_failslab+0xc2/0x120 [ 728.523892][T15795] __kmalloc_noprof+0xe0/0x850 [ 728.523919][T15795] snd_midi_event_new+0xa1/0x210 [ 728.523938][T15795] snd_virmidi_output_open+0x106/0x670 [ 728.523959][T15795] open_substream+0x480/0x9b0 [ 728.523983][T15795] rawmidi_open_priv+0x595/0x6f0 [ 728.524008][T15795] snd_rawmidi_open+0x4c9/0xba0 [ 728.524034][T15795] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 728.524057][T15795] ? __pfx_default_wake_function+0x10/0x10 [ 728.524079][T15795] ? kobject_get_unless_zero+0x156/0x200 [ 728.524105][T15795] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 728.524127][T15795] snd_open+0x201/0x450 [ 728.524146][T15795] ? __pfx_snd_open+0x10/0x10 [ 728.524165][T15795] chrdev_open+0x234/0x6a0 [ 728.524182][T15795] ? __pfx_apparmor_file_open+0x10/0x10 [ 728.524200][T15795] ? __pfx_chrdev_open+0x10/0x10 [ 728.524219][T15795] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 728.524243][T15795] do_dentry_open+0x6ab/0x14d0 [ 728.524260][T15795] ? __pfx_chrdev_open+0x10/0x10 [ 728.524283][T15795] vfs_open+0x82/0x3f0 [ 728.524306][T15795] path_openat+0x208c/0x31a0 [ 728.524331][T15795] ? __pfx_path_openat+0x10/0x10 [ 728.524364][T15795] do_file_open+0x20e/0x430 [ 728.524385][T15795] ? __pfx_do_file_open+0x10/0x10 [ 728.524417][T15795] ? alloc_fd+0x476/0x790 [ 728.524438][T15795] ? do_getname+0x191/0x390 [ 728.524461][T15795] do_sys_openat2+0x10d/0x1e0 [ 728.524483][T15795] ? __pfx_do_sys_openat2+0x10/0x10 [ 728.524512][T15795] __x64_sys_openat+0x12d/0x210 [ 728.524534][T15795] ? __pfx___x64_sys_openat+0x10/0x10 [ 728.524555][T15795] ? ksys_write+0x1ac/0x250 [ 728.524575][T15795] ? rcu_is_watching+0x12/0xc0 [ 728.524594][T15795] do_syscall_64+0x115/0x840 [ 728.524614][T15795] ? clear_bhb_loop+0x40/0x90 [ 728.524632][T15795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.524648][T15795] RIP: 0033:0x7f06ec39ce59 [ 728.524665][T15795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.524681][T15795] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 728.524696][T15795] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 728.524707][T15795] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 728.524717][T15795] RBP: 00007f06ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 728.524727][T15795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.524736][T15795] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 728.524757][T15795] [ 729.403468][T15804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2143'. [ 730.162138][T15822] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2148'. [ 731.055755][ T50] Bluetooth: hci2: unexpected event 0x18 length: 726 > 23 [ 731.892229][T15847] FAULT_INJECTION: forcing a failure. [ 731.892229][T15847] name failslab, interval 1, probability 0, space 0, times 0 [ 731.990486][T15847] CPU: 0 UID: 0 PID: 15847 Comm: syz.3.2153 Tainted: G L syzkaller #0 PREEMPT(full) [ 731.990512][T15847] Tainted: [L]=SOFTLOCKUP [ 731.990518][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 731.990529][T15847] Call Trace: [ 731.990535][T15847] [ 731.990541][T15847] dump_stack_lvl+0x100/0x190 [ 731.990571][T15847] should_fail_ex.cold+0x5/0xa [ 731.990591][T15847] should_failslab+0xc2/0x120 [ 731.990609][T15847] __kvmalloc_node_noprof+0xfa/0xa00 [ 731.990625][T15847] ? sbitmap_init_node+0x1cc/0x720 [ 731.990647][T15847] sbitmap_init_node+0x1cc/0x720 [ 731.990668][T15847] sbitmap_queue_init_node+0x40/0x4a0 [ 731.990688][T15847] blk_mq_init_tags+0x184/0x300 [ 731.990709][T15847] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 731.990728][T15847] ? blk_mq_update_queue_map+0x227/0x3a0 [ 731.990748][T15847] blk_mq_alloc_tag_set+0x848/0x1330 [ 731.990771][T15847] loop_add+0x3b7/0xb60 [ 731.990791][T15847] ? __pfx_loop_add+0x10/0x10 [ 731.990822][T15847] ? find_held_lock+0x2b/0x80 [ 731.990840][T15847] ? __fget_files+0x215/0x3d0 [ 731.990859][T15847] loop_control_ioctl+0xae/0x620 [ 731.990880][T15847] ? __pfx_loop_control_ioctl+0x10/0x10 [ 731.990902][T15847] ? __pfx_loop_control_ioctl+0x10/0x10 [ 731.990926][T15847] __x64_sys_ioctl+0x18e/0x210 [ 731.990943][T15847] do_syscall_64+0x115/0x840 [ 731.990963][T15847] ? clear_bhb_loop+0x40/0x90 [ 731.990982][T15847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.990998][T15847] RIP: 0033:0x7f06ec39ce59 [ 731.991012][T15847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.991034][T15847] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.991049][T15847] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 731.991060][T15847] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 731.991070][T15847] RBP: 00007f06ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 731.991080][T15847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.991090][T15847] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 731.991110][T15847] [ 731.991218][T15847] blk-mq: reduced tag depth (128 -> 64) [ 735.201432][T15908] FAULT_INJECTION: forcing a failure. [ 735.201432][T15908] name failslab, interval 1, probability 0, space 0, times 0 [ 735.274609][T15908] CPU: 0 UID: 0 PID: 15908 Comm: syz.3.2167 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.274633][T15908] Tainted: [L]=SOFTLOCKUP [ 735.274639][T15908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 735.274649][T15908] Call Trace: [ 735.274654][T15908] [ 735.274660][T15908] dump_stack_lvl+0x100/0x190 [ 735.274693][T15908] should_fail_ex.cold+0x5/0xa [ 735.274712][T15908] should_failslab+0xc2/0x120 [ 735.274736][T15908] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 735.274761][T15908] ? bdev_alloc_inode+0x26/0x90 [ 735.274784][T15908] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 735.274803][T15908] bdev_alloc_inode+0x26/0x90 [ 735.274821][T15908] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 735.274839][T15908] alloc_inode+0x68/0x250 [ 735.274861][T15908] new_inode+0x22/0x1c0 [ 735.274884][T15908] bdev_alloc+0x2b/0x420 [ 735.274902][T15908] ? bdi_init+0x3f4/0x5b0 [ 735.274918][T15908] ? bdi_init+0x49f/0x5b0 [ 735.274936][T15908] __alloc_disk_node+0x116/0x6b0 [ 735.274959][T15908] __blk_mq_alloc_disk+0x89/0x120 [ 735.274982][T15908] loop_add+0x498/0xb60 [ 735.275003][T15908] ? __pfx_loop_add+0x10/0x10 [ 735.275034][T15908] ? find_held_lock+0x2b/0x80 [ 735.275052][T15908] ? __fget_files+0x215/0x3d0 [ 735.275071][T15908] loop_control_ioctl+0xae/0x620 [ 735.275091][T15908] ? __pfx_loop_control_ioctl+0x10/0x10 [ 735.275114][T15908] ? __pfx_loop_control_ioctl+0x10/0x10 [ 735.275135][T15908] __x64_sys_ioctl+0x18e/0x210 [ 735.275152][T15908] do_syscall_64+0x115/0x840 [ 735.275172][T15908] ? clear_bhb_loop+0x40/0x90 [ 735.275191][T15908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.275207][T15908] RIP: 0033:0x7f06ec39ce59 [ 735.275220][T15908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.275235][T15908] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.275250][T15908] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 735.275261][T15908] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 735.275271][T15908] RBP: 00007f06ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 735.275281][T15908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.275290][T15908] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 735.275310][T15908] [ 736.746624][T15931] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2172'. [ 737.410056][T15942] Process accounting paused [ 737.665616][ T29] audit: type=1804 audit(8277292087.066:105): pid=15958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2178" name="/newroot/531/file0" dev="tmpfs" ino=2826 res=1 errno=0 [ 737.998240][T15964] FAULT_INJECTION: forcing a failure. [ 737.998240][T15964] name failslab, interval 1, probability 0, space 0, times 0 [ 738.088352][T15964] CPU: 0 UID: 0 PID: 15964 Comm: syz.0.2182 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.088377][T15964] Tainted: [L]=SOFTLOCKUP [ 738.088383][T15964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 738.088393][T15964] Call Trace: [ 738.088399][T15964] [ 738.088406][T15964] dump_stack_lvl+0x100/0x190 [ 738.088436][T15964] should_fail_ex.cold+0x5/0xa [ 738.088463][T15964] should_failslab+0xc2/0x120 [ 738.088482][T15964] __kmalloc_cache_noprof+0x7a/0x6f0 [ 738.088503][T15964] ? percpu_ref_init+0xec/0x3f0 [ 738.088522][T15964] ? __pfx_blkg_release+0x10/0x10 [ 738.088541][T15964] percpu_ref_init+0xec/0x3f0 [ 738.088556][T15964] ? kasan_save_track+0x14/0x30 [ 738.088574][T15964] blkg_alloc+0xf0/0xae0 [ 738.088595][T15964] ? xas_load+0x44/0x5c0 [ 738.088618][T15964] blkcg_init_disk+0x183/0x700 [ 738.088641][T15964] ? __pfx_blkcg_init_disk+0x10/0x10 [ 738.088664][T15964] ? find_held_lock+0x2b/0x80 [ 738.088683][T15964] ? __alloc_disk_node+0x2d4/0x6b0 [ 738.088700][T15964] ? __alloc_disk_node+0x2d4/0x6b0 [ 738.088721][T15964] __alloc_disk_node+0x2f6/0x6b0 [ 738.088741][T15964] __blk_mq_alloc_disk+0x89/0x120 [ 738.088757][T15964] loop_add+0x498/0xb60 [ 738.088777][T15964] ? __pfx_loop_add+0x10/0x10 [ 738.088807][T15964] ? find_held_lock+0x2b/0x80 [ 738.088825][T15964] ? __fget_files+0x215/0x3d0 [ 738.088845][T15964] loop_control_ioctl+0xae/0x620 [ 738.088865][T15964] ? __pfx_loop_control_ioctl+0x10/0x10 [ 738.088891][T15964] ? __pfx_loop_control_ioctl+0x10/0x10 [ 738.088912][T15964] __x64_sys_ioctl+0x18e/0x210 [ 738.088928][T15964] do_syscall_64+0x115/0x840 [ 738.088948][T15964] ? clear_bhb_loop+0x40/0x90 [ 738.088966][T15964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.088981][T15964] RIP: 0033:0x7f8d3b39ce59 [ 738.088994][T15964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.089009][T15964] RSP: 002b:00007f8d3c187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.089023][T15964] RAX: ffffffffffffffda RBX: 00007f8d3b615fa0 RCX: 00007f8d3b39ce59 [ 738.089034][T15964] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 738.089043][T15964] RBP: 00007f8d3b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 738.089052][T15964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.089061][T15964] R13: 00007f8d3b616038 R14: 00007f8d3b615fa0 R15: 00007ffff2079f48 [ 738.089080][T15964] [ 739.051975][T15981] netlink: 412 bytes leftover after parsing attributes in process `syz.2.2185'. [ 739.093741][T15981] netlink: 412 bytes leftover after parsing attributes in process `syz.2.2185'. [ 739.357710][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 739.600688][T15998] binder: 15992:15998 ioctl 40086602 e20 returned -22 [ 740.436518][ T50] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 741.426523][T16025] usb usb22: usbfs: process 16025 (syz.3.2193) did not claim interface 1 before use [ 741.996366][T16042] random: crng reseeded on system resumption [ 742.185929][T16044] hub 1-0:1.0: USB hub found [ 742.236404][T16044] hub 1-0:1.0: 1 port detected [ 743.166929][ T29] audit: type=1800 audit(8277292092.569:106): pid=16070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2203" name="lu_gp_id" dev="configfs" ino=69795 res=0 errno=0 [ 744.415308][ T50] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 746.920263][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.958316][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.788371][T16144] futex_wake_op: syz.2.2220 tries to shift op by -2048; fix this program [ 747.816202][T16144] futex_wake_op: syz.2.2220 tries to shift op by -2048; fix this program [ 747.996225][T16148] vivid-007: ================= START STATUS ================= [ 748.031002][T16148] vivid-007: Generate PTS: true [ 748.052916][T16148] vivid-007: Generate SCR: true [ 748.071580][T16148] tpg source WxH: 320x240 (Y'CbCr) [ 748.097913][T16148] tpg field: 1 [ 748.113360][T16148] tpg crop: (0,0)/320x240 [ 748.132963][T16148] tpg compose: (0,0)/320x240 [ 748.188457][T16148] tpg colorspace: 8 [ 748.204685][T16148] tpg transfer function: 0/0 [ 748.227059][T16148] tpg Y'CbCr encoding: 0/0 [ 748.257010][T16148] tpg quantization: 0/0 [ 748.274857][T16148] tpg RGB range: 0/2 [ 748.323918][T16148] vivid-007: ================== END STATUS ================== [ 748.754300][T16160] FAULT_INJECTION: forcing a failure. [ 748.754300][T16160] name failslab, interval 1, probability 0, space 0, times 0 [ 748.852781][T16160] CPU: 0 UID: 0 PID: 16160 Comm: syz.3.2224 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.852808][T16160] Tainted: [L]=SOFTLOCKUP [ 748.852814][T16160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 748.852824][T16160] Call Trace: [ 748.852830][T16160] [ 748.852837][T16160] dump_stack_lvl+0x100/0x190 [ 748.852868][T16160] should_fail_ex.cold+0x5/0xa [ 748.852888][T16160] should_failslab+0xc2/0x120 [ 748.852907][T16160] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 748.852930][T16160] ? alloc_empty_file+0x5b/0x1c0 [ 748.852955][T16160] alloc_empty_file+0x5b/0x1c0 [ 748.852976][T16160] alloc_file_pseudo+0x13a/0x230 [ 748.852998][T16160] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 748.853020][T16160] ? security_inode_init_security_anon+0x7b/0x230 [ 748.853043][T16160] __anon_inode_getfile+0xe8/0x280 [ 748.853067][T16160] new_userfaultfd+0x255/0x400 [ 748.853085][T16160] __x64_sys_userfaultfd+0x4b/0xb0 [ 748.853104][T16160] do_syscall_64+0x115/0x840 [ 748.853124][T16160] ? clear_bhb_loop+0x40/0x90 [ 748.853142][T16160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.853158][T16160] RIP: 0033:0x7f06ec39ce59 [ 748.853171][T16160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.853187][T16160] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 748.853202][T16160] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 748.853213][T16160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 748.853222][T16160] RBP: 00007f06ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 748.853231][T16160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.853240][T16160] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 748.853259][T16160] [ 749.842596][T16188] FAULT_INJECTION: forcing a failure. [ 749.842596][T16188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.931874][T16188] CPU: 0 UID: 0 PID: 16188 Comm: syz.3.2230 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.931900][T16188] Tainted: [L]=SOFTLOCKUP [ 749.931906][T16188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 749.931916][T16188] Call Trace: [ 749.931921][T16188] [ 749.931927][T16188] dump_stack_lvl+0x100/0x190 [ 749.931960][T16188] should_fail_ex.cold+0x5/0xa [ 749.931979][T16188] _copy_from_user+0x2e/0xd0 [ 749.932001][T16188] copy_msghdr_from_user+0x9f/0x4f0 [ 749.932023][T16188] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 749.932047][T16188] ? __lock_acquire+0x4a5/0x2630 [ 749.932074][T16188] ___sys_recvmsg+0xdd/0x1a0 [ 749.932094][T16188] ? __pfx____sys_recvmsg+0x10/0x10 [ 749.932116][T16188] ? find_held_lock+0x2b/0x80 [ 749.932145][T16188] do_recvmmsg+0x301/0x760 [ 749.932167][T16188] ? __pfx_do_recvmmsg+0x10/0x10 [ 749.932186][T16188] ? ksys_write+0x190/0x250 [ 749.932207][T16188] ? do_futex+0x192/0x350 [ 749.932230][T16188] ? __x64_sys_futex+0x34f/0x4d0 [ 749.932247][T16188] __x64_sys_recvmmsg+0x22a/0x280 [ 749.932264][T16188] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 749.932283][T16188] ? rcu_is_watching+0x12/0xc0 [ 749.932302][T16188] do_syscall_64+0x115/0x840 [ 749.932321][T16188] ? clear_bhb_loop+0x40/0x90 [ 749.932350][T16188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.932367][T16188] RIP: 0033:0x7f06ec39ce59 [ 749.932380][T16188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.932396][T16188] RSP: 002b:00007f06ed1c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 749.932411][T16188] RAX: ffffffffffffffda RBX: 00007f06ec615fa0 RCX: 00007f06ec39ce59 [ 749.932421][T16188] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 749.932431][T16188] RBP: 00007f06ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 749.932440][T16188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.932449][T16188] R13: 00007f06ec616038 R14: 00007f06ec615fa0 R15: 00007ffd1f9b71c8 [ 749.932469][T16188] [ 750.635449][ T29] audit: type=1804 audit(8277292099.992:107): pid=16208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2235" name="/newroot/544/file0" dev="tmpfs" ino=2897 res=1 errno=0 [ 750.658459][T16210] bond0: invalid ARP target specified [ 750.887370][T16210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2236'. [ 751.166174][ T29] audit: type=1800 audit(8277292100.573:108): pid=16219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2238" name="lu_gp_id" dev="configfs" ino=70745 res=0 errno=0 [ 752.499076][T16234] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 752.597731][T16234] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 752.923639][T16237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2242'. [ 753.138383][T16234] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 755.613627][T16250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 755.626219][T16250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 755.634742][T16250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 755.642661][T16250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 755.651767][T16250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 755.800807][T16254] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2245'. [ 756.121406][T16242] Process accounting paused [ 756.635337][ T7762] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.679535][T16253] Process accounting resumed [ 756.909922][T16281] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 756.993975][ T7762] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.221279][ T7762] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.446958][ T7762] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.461346][T16296] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5631] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[16296] [ 757.543210][T16296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2252'. [ 757.571313][T16297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2251'. [ 757.680714][T16291] bond0: invalid ARP target specified [ 757.710796][T16250] Bluetooth: hci4: command tx timeout [ 758.393590][T16249] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.421286][T16249] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.457980][T16249] bridge_slave_0: entered allmulticast mode [ 758.489320][T16249] bridge_slave_0: entered promiscuous mode [ 758.520850][T16249] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.547217][T16249] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.577194][T16249] bridge_slave_1: entered allmulticast mode [ 758.603572][T16249] bridge_slave_1: entered promiscuous mode [ 758.716288][T16249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.760988][T16249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.870953][T16249] team0: Port device team_slave_0 added [ 758.896495][T16249] team0: Port device team_slave_1 added [ 758.973389][T16249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.998012][T16249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.096054][T16249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.137274][T16249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.162729][T16249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.247951][T16249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.380729][T16249] hsr_slave_0: entered promiscuous mode [ 759.401684][T16249] hsr_slave_1: entered promiscuous mode [ 759.421875][T16249] debugfs: 'hsr0' already exists in 'hsr' [ 759.440857][T16249] Cannot create hsr debugfs directory [ 759.789434][T16250] Bluetooth: hci4: command tx timeout [ 761.051565][T16334] netlink: 202 bytes leftover after parsing attributes in process `syz.0.2258'. [ 761.869114][T16250] Bluetooth: hci4: command tx timeout [ 763.659663][T16360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2264'. [ 763.947405][T16250] Bluetooth: hci4: command tx timeout [ 766.959065][T16394] bond0: invalid ARP target specified [ 767.069161][T16396] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2268'. [ 767.120799][T16396] nbd: must specify at least one socket [ 767.162702][T16394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2268'. [ 767.450855][T16401] bond0: invalid ARP target specified [ 767.637082][T16401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2269'. [ 767.655819][T16401] nbd: must specify at least one socket [ 767.675883][T16401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2269'. [ 773.037162][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 773.048677][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 773.059596][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 773.067974][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 773.076084][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 773.497935][T16404] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.505208][T16404] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.512787][T16404] bridge_slave_0: entered allmulticast mode [ 773.519740][T16404] bridge_slave_0: entered promiscuous mode [ 773.527756][T16404] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.536254][T16404] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.544806][T16404] bridge_slave_1: entered allmulticast mode [ 773.551807][T16404] bridge_slave_1: entered promiscuous mode [ 773.578916][T16404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.590258][T16404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.629573][T16404] team0: Port device team_slave_0 added [ 773.638293][T16404] team0: Port device team_slave_1 added [ 773.663049][T16404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.671108][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.697628][T16404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.710979][T16404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.718883][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.745358][T16404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.785530][T16404] hsr_slave_0: entered promiscuous mode [ 773.791744][T16404] hsr_slave_1: entered promiscuous mode [ 773.798208][T16404] debugfs: 'hsr0' already exists in 'hsr' [ 773.804209][T16404] Cannot create hsr debugfs directory [ 775.141594][T16250] Bluetooth: hci5: command tx timeout [ 777.220567][T16250] Bluetooth: hci5: command tx timeout [ 779.299574][T16250] Bluetooth: hci5: command tx timeout [ 781.378569][T16250] Bluetooth: hci5: command tx timeout [ 781.869228][ T5628] Process accounting resumed [ 782.015589][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 782.033482][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 782.042525][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 782.052390][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 782.061295][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 782.612213][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 782.625418][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 782.636803][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 782.645100][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 782.652548][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 783.178583][T16424] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.197205][T16424] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.204901][T16424] bridge_slave_0: entered allmulticast mode [ 783.215294][T16424] bridge_slave_0: entered promiscuous mode [ 783.231093][T16424] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.239352][T16424] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.246611][T16424] bridge_slave_1: entered allmulticast mode [ 783.254228][T16424] bridge_slave_1: entered promiscuous mode [ 783.302705][T16424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.317199][T16424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.358050][T16424] team0: Port device team_slave_0 added [ 783.368848][T16424] team0: Port device team_slave_1 added [ 783.403727][T16424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.411364][T16424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.439490][T16424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.456408][T16424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.463711][T16424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.491435][T16424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.547047][T16424] hsr_slave_0: entered promiscuous mode [ 783.554372][T16424] hsr_slave_1: entered promiscuous mode [ 783.560863][T16424] debugfs: 'hsr0' already exists in 'hsr' [ 783.566590][T16424] Cannot create hsr debugfs directory [ 783.772553][T16438] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.783494][T16438] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.791043][T16438] bridge_slave_0: entered allmulticast mode [ 783.799316][T16438] bridge_slave_0: entered promiscuous mode [ 783.807017][T16438] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.814432][T16438] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.822172][T16438] bridge_slave_1: entered allmulticast mode [ 783.829304][T16438] bridge_slave_1: entered promiscuous mode [ 783.855735][T16438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.868251][T16438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.895779][T16438] team0: Port device team_slave_0 added [ 783.904929][T16438] team0: Port device team_slave_1 added [ 783.928136][T16438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.935080][T16438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.962472][T16438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.979170][T16438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.986107][T16438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.015558][T16438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.055531][T16438] hsr_slave_0: entered promiscuous mode [ 784.061793][T16438] hsr_slave_1: entered promiscuous mode [ 784.068598][T16438] debugfs: 'hsr0' already exists in 'hsr' [ 784.074337][T16438] Cannot create hsr debugfs directory [ 784.097322][ T50] Bluetooth: hci6: command tx timeout [ 784.736824][ T50] Bluetooth: hci7: command tx timeout [ 786.176361][ T50] Bluetooth: hci6: command tx timeout [ 786.815818][ T50] Bluetooth: hci7: command tx timeout [ 788.255038][ T50] Bluetooth: hci6: command tx timeout [ 788.894724][ T50] Bluetooth: hci7: command tx timeout [ 790.334022][ T50] Bluetooth: hci6: command tx timeout [ 790.973697][ T50] Bluetooth: hci7: command tx timeout [ 808.328223][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.335319][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.461474][T16250] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 814.471966][T16250] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 814.485381][T16250] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 814.497427][T16250] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 814.506069][T16250] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 814.930167][T16468] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.937533][T16468] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.944992][T16468] bridge_slave_0: entered allmulticast mode [ 814.952179][T16468] bridge_slave_0: entered promiscuous mode [ 814.959838][T16468] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.971301][T16468] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.979042][T16468] bridge_slave_1: entered allmulticast mode [ 814.988778][T16468] bridge_slave_1: entered promiscuous mode [ 815.028784][T16468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.040043][T16468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.068012][T16468] team0: Port device team_slave_0 added [ 815.076205][T16468] team0: Port device team_slave_1 added [ 815.098677][T16468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.105852][T16468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.134682][T16468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.146725][T16468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.154028][T16468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.180298][T16468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.224877][T16468] hsr_slave_0: entered promiscuous mode [ 815.231082][T16468] hsr_slave_1: entered promiscuous mode [ 815.237596][T16468] debugfs: 'hsr0' already exists in 'hsr' [ 815.244671][T16468] Cannot create hsr debugfs directory [ 816.560973][ T50] Bluetooth: hci8: command tx timeout [ 818.639762][ T50] Bluetooth: hci8: command tx timeout [ 820.718803][ T50] Bluetooth: hci8: command tx timeout [ 822.797688][ T50] Bluetooth: hci8: command tx timeout [ 832.988289][T16250] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 833.002005][T16250] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 833.011249][T16250] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 833.026330][T16250] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 833.033975][T16250] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 833.466356][T16491] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.473723][T16491] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.480968][T16491] bridge_slave_0: entered allmulticast mode [ 833.488469][T16491] bridge_slave_0: entered promiscuous mode [ 833.497301][T16491] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.504685][T16491] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.511924][T16491] bridge_slave_1: entered allmulticast mode [ 833.520070][T16491] bridge_slave_1: entered promiscuous mode [ 833.549361][T16491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.560616][T16491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.589315][T16491] team0: Port device team_slave_0 added [ 833.596967][T16491] team0: Port device team_slave_1 added [ 833.620102][T16491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.627190][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.655052][T16491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.667159][T16491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.678180][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.704769][T16491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.744960][T16491] hsr_slave_0: entered promiscuous mode [ 833.751399][T16491] hsr_slave_1: entered promiscuous mode [ 833.759534][T16491] debugfs: 'hsr0' already exists in 'hsr' [ 833.765964][T16491] Cannot create hsr debugfs directory [ 835.111691][T16250] Bluetooth: hci9: command tx timeout [ 837.190550][T16250] Bluetooth: hci9: command tx timeout [ 839.270054][T16250] Bluetooth: hci9: command tx timeout [ 841.348540][T16250] Bluetooth: hci9: command tx timeout [ 842.000640][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 842.017698][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 842.030012][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 842.042524][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 842.050448][ T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 842.545945][T16512] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.567889][T16512] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.576496][T16512] bridge_slave_0: entered allmulticast mode [ 842.592236][T16512] bridge_slave_0: entered promiscuous mode [ 842.605435][T16250] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 842.621110][T16250] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 842.628917][T16250] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 842.642689][T16250] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 842.651387][T16250] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 842.683059][T16512] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.698672][T16512] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.718042][T16512] bridge_slave_1: entered allmulticast mode [ 842.732263][T16512] bridge_slave_1: entered promiscuous mode [ 842.784547][T16512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.810779][T16512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.865797][T16512] team0: Port device team_slave_0 added [ 842.882055][T16512] team0: Port device team_slave_1 added [ 842.931638][T16512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.949236][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.984374][T16512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.008962][T16512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.032108][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.083159][T16512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.159844][T16512] hsr_slave_0: entered promiscuous mode [ 843.166109][T16512] hsr_slave_1: entered promiscuous mode [ 843.172600][T16512] debugfs: 'hsr0' already exists in 'hsr' [ 843.179659][T16512] Cannot create hsr debugfs directory [ 843.435365][T16533] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.443379][T16533] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.450944][T16533] bridge_slave_0: entered allmulticast mode [ 843.458624][T16533] bridge_slave_0: entered promiscuous mode [ 843.468298][T16533] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.475428][T16533] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.483140][T16533] bridge_slave_1: entered allmulticast mode [ 843.490463][T16533] bridge_slave_1: entered promiscuous mode [ 843.520633][T16533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.531989][T16533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.559767][T16533] team0: Port device team_slave_0 added [ 843.567175][T16533] team0: Port device team_slave_1 added [ 843.590727][T16533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.597760][T16533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.625295][T16533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.637434][T16533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.644411][T16533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.672562][T16533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.710449][T16533] hsr_slave_0: entered promiscuous mode [ 843.716678][T16533] hsr_slave_1: entered promiscuous mode [ 843.723065][T16533] debugfs: 'hsr0' already exists in 'hsr' [ 843.730495][T16533] Cannot create hsr debugfs directory [ 844.147231][T16250] Bluetooth: hci10: command tx timeout [ 844.706820][T16250] Bluetooth: hci11: command tx timeout [ 846.226135][T16250] Bluetooth: hci10: command tx timeout [ 846.785802][T16250] Bluetooth: hci11: command tx timeout [ 848.305040][T16250] Bluetooth: hci10: command tx timeout [ 848.864761][T16250] Bluetooth: hci11: command tx timeout [ 850.384052][T16250] Bluetooth: hci10: command tx timeout [ 850.943714][T16250] Bluetooth: hci11: command tx timeout [ 869.736632][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.742936][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.030539][ T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 875.042179][ T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 875.052012][ T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 875.064605][ T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 875.073570][ T50] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 875.512595][T16551] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.519730][T16551] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.527390][T16551] bridge_slave_0: entered allmulticast mode [ 875.534825][T16551] bridge_slave_0: entered promiscuous mode [ 875.542568][T16551] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.549707][T16551] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.557977][T16551] bridge_slave_1: entered allmulticast mode [ 875.565315][T16551] bridge_slave_1: entered promiscuous mode [ 875.594487][T16551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.606885][T16551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.634908][T16551] team0: Port device team_slave_0 added [ 875.643251][T16551] team0: Port device team_slave_1 added [ 875.666960][T16551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.674005][T16551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.700324][T16551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.713839][T16551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.720780][T16551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.748599][T16551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.787275][T16551] hsr_slave_0: entered promiscuous mode [ 875.793761][T16551] hsr_slave_1: entered promiscuous mode [ 875.799809][T16551] debugfs: 'hsr0' already exists in 'hsr' [ 875.806031][T16551] Cannot create hsr debugfs directory [ 877.090674][ T50] Bluetooth: hci12: command tx timeout [ 879.169538][ T50] Bluetooth: hci12: command tx timeout [ 881.248572][ T50] Bluetooth: hci12: command tx timeout [ 882.054574][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 883.327530][T16250] Bluetooth: hci12: command tx timeout [ 893.554628][ T50] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 893.572579][ T50] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 893.584187][ T50] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 893.593322][ T50] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 893.601031][ T50] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 894.034334][T16578] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.041507][T16578] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.050669][T16578] bridge_slave_0: entered allmulticast mode [ 894.057972][T16578] bridge_slave_0: entered promiscuous mode [ 894.066046][T16578] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.073343][T16578] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.080605][T16578] bridge_slave_1: entered allmulticast mode [ 894.087921][T16578] bridge_slave_1: entered promiscuous mode [ 894.116837][T16578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.130533][T16578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.157899][T16578] team0: Port device team_slave_0 added [ 894.165470][T16578] team0: Port device team_slave_1 added [ 894.188134][T16578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.195235][T16578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.225746][T16578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.238749][T16578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.246389][T16578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.272734][T16578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.312221][T16578] hsr_slave_0: entered promiscuous mode [ 894.318626][T16578] hsr_slave_1: entered promiscuous mode [ 894.325032][T16578] debugfs: 'hsr0' already exists in 'hsr' [ 894.330763][T16578] Cannot create hsr debugfs directory [ 895.641353][ T50] Bluetooth: hci13: command tx timeout [ 897.400625][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 897.720306][T16250] Bluetooth: hci13: command tx timeout [ 899.799268][T16250] Bluetooth: hci13: command tx timeout [ 901.878192][T16250] Bluetooth: hci13: command tx timeout [ 902.076471][ T50] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 902.088336][ T50] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 902.099249][ T50] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 902.109468][ T50] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 902.120515][ T50] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 902.614431][T16600] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.635295][T16600] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.653467][ T50] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 902.667265][ T50] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 902.677414][ T50] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 902.687123][T16600] bridge_slave_0: entered allmulticast mode [ 902.693862][ T50] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 902.703735][ T50] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 902.745632][T16600] bridge_slave_0: entered promiscuous mode [ 902.761853][T16600] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.777975][T16600] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.799753][T16600] bridge_slave_1: entered allmulticast mode [ 902.809177][T16600] bridge_slave_1: entered promiscuous mode [ 902.862632][T16600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.886556][T16600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.954696][T16600] team0: Port device team_slave_0 added [ 902.970460][T16600] team0: Port device team_slave_1 added [ 903.030201][T16600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.047698][T16600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.089134][T16600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.133436][T16600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.143402][T16600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.171071][T16600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.220512][T16600] hsr_slave_0: entered promiscuous mode [ 903.226766][T16600] hsr_slave_1: entered promiscuous mode [ 903.233307][T16600] debugfs: 'hsr0' already exists in 'hsr' [ 903.241808][T16600] Cannot create hsr debugfs directory [ 903.505783][T16620] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.513237][T16620] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.520867][T16620] bridge_slave_0: entered allmulticast mode [ 903.528171][T16620] bridge_slave_0: entered promiscuous mode [ 903.535899][T16620] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.543275][T16620] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.551954][T16620] bridge_slave_1: entered allmulticast mode [ 903.560247][T16620] bridge_slave_1: entered promiscuous mode [ 903.590015][T16620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.601671][T16620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.629317][T16620] team0: Port device team_slave_0 added [ 903.636993][T16620] team0: Port device team_slave_1 added [ 903.664652][T16620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.671701][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.699121][T16620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.711039][T16620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.719293][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.745591][T16620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.784968][T16620] hsr_slave_0: entered promiscuous mode [ 903.791303][T16620] hsr_slave_1: entered promiscuous mode [ 903.799703][T16620] debugfs: 'hsr0' already exists in 'hsr' [ 903.805434][T16620] Cannot create hsr debugfs directory [ 904.197160][T16250] Bluetooth: hci14: command tx timeout [ 904.756766][T16250] Bluetooth: hci15: command tx timeout [ 906.276104][ T4949] Bluetooth: hci14: command tx timeout [ 906.835823][ T4949] Bluetooth: hci15: command tx timeout [ 907.637352][ T4949] Bluetooth: hci7: command 0x0406 tx timeout [ 907.651098][ T4949] Bluetooth: hci6: command 0x0406 tx timeout [ 908.355286][T16638] Bluetooth: hci14: command tx timeout [ 908.914720][T16638] Bluetooth: hci15: command tx timeout [ 910.434011][T16638] Bluetooth: hci14: command tx timeout [ 910.674018][ T30] INFO: task kworker/u8:29:7762 blocked for more than 143 seconds. [ 910.683137][ T30] Tainted: G L syzkaller #0 [ 910.690084][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 910.699043][ T30] task:kworker/u8:29 state:D stack:23496 pid:7762 tgid:7762 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 910.715766][ T30] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 910.728238][ T30] Call Trace: [ 910.731537][ T30] [ 910.743663][ T30] __schedule+0x1295/0x67a0 [ 910.748199][ T30] ? __pfx___schedule+0x10/0x10 [ 910.753052][ T30] ? find_held_lock+0x2b/0x80 [ 910.775491][ T30] ? schedule+0x2bf/0x390 [ 910.779847][ T30] schedule+0xdd/0x390 [ 910.793671][ T30] schedule_timeout+0x1b2/0x280 [ 910.798561][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 910.811717][ T30] ? mark_held_locks+0x40/0x70 [ 910.818553][ T30] __wait_for_common+0x2e7/0x4c0 [ 910.835477][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 910.842103][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 910.853663][ T30] remove_one+0x312/0x420 [ 910.863727][ T30] ? find_next_child+0x18f/0x280 [ 910.873816][ T30] __simple_recursive_removal+0x148/0x5c0 [ 910.885574][ T30] ? __pfx_remove_one+0x10/0x10 [ 910.895188][ T30] debugfs_remove+0x5d/0x80 [ 910.905116][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 910.918466][ T30] nsim_dev_reload_destroy+0x144/0x4a0 [ 910.933623][ T30] nsim_dev_reload_down+0x66/0xd0 [ 910.940138][ T30] devlink_reload+0x1ae/0x7a0 [ 910.953639][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 910.960258][ T30] devlink_pernet_pre_exit+0x247/0x370 [ 910.970318][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 910.983523][ T30] ? __local_bh_enable_ip+0x9e/0x120 [ 910.994271][T16638] Bluetooth: hci15: command tx timeout [ 911.002327][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 911.013686][ T30] ? xfrm_policy_flush+0x3a4/0x450 [ 911.033554][ T30] ? xfrm_policy_flush+0x3a4/0x450 [ 911.038727][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 911.053609][ T30] ops_undo_list+0x187/0xab0 [ 911.058214][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 911.063319][ T30] ? cleanup_net+0x332/0x920 [ 911.083492][ T30] ? cleanup_net+0x332/0x920 [ 911.088111][ T30] ? idr_destroy+0x62/0x2e0 [ 911.092601][ T30] cleanup_net+0x499/0x920 [ 911.113572][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 911.119507][ T30] ? rcu_is_watching+0x12/0xc0 [ 911.133622][ T30] process_one_work+0xa0e/0x1980 [ 911.138589][ T30] ? __pfx_process_one_work+0x10/0x10 [ 911.155211][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 911.184329][ T30] worker_thread+0x5ef/0xe50 [ 911.211264][ T30] ? kthread+0x13a/0x450 [ 911.237064][ T30] ? __pfx_worker_thread+0x10/0x10 [ 911.242592][ T30] kthread+0x370/0x450 [ 911.246951][ T30] ? __pfx_kthread+0x10/0x10 [ 911.251556][ T30] ret_from_fork+0x72b/0xd50 [ 911.256699][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 911.261818][ T30] ? __switch_to+0x800/0x1100 [ 911.266836][ T30] ? __switch_to_asm+0x39/0x70 [ 911.271613][ T30] ? __pfx_kthread+0x10/0x10 [ 911.276485][ T30] ret_from_fork_asm+0x1a/0x30 [ 911.281265][ T30] [ 911.284540][ T30] INFO: task syz-executor:16249 blocked for more than 143 seconds. [ 911.292434][ T30] Tainted: G L syzkaller #0 [ 911.310752][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 911.322158][ T30] task:syz-executor state:D stack:24088 pid:16249 tgid:16249 ppid:1 task_flags:0x400140 flags:0x00080002 [ 911.337356][ T30] Call Trace: [ 911.340640][ T30] [ 911.343946][ T30] __schedule+0x1295/0x67a0 [ 911.348469][ T30] ? __pfx___schedule+0x10/0x10 [ 911.353626][ T30] ? find_held_lock+0x2b/0x80 [ 911.358313][ T30] ? schedule+0x2bf/0x390 [ 911.362635][ T30] schedule+0xdd/0x390 [ 911.367059][ T30] schedule_preempt_disabled+0x13/0x30 [ 911.372533][ T30] __mutex_lock+0xced/0x1b10 [ 911.377415][ T30] ? device_del+0xa0/0x9b0 [ 911.381846][ T30] ? xas_create+0x1f4/0x14e0 [ 911.386671][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 911.391707][ T30] ? mark_held_locks+0x40/0x70 [ 911.397166][ T30] ? device_del+0xa0/0x9b0 [ 911.401603][ T30] device_del+0xa0/0x9b0 [ 911.406058][ T30] ? __pfx_ida_free+0x10/0x10 [ 911.410739][ T30] ? __pfx_device_del+0x10/0x10 [ 911.415867][ T30] ? __lock_acquire+0x4a5/0x2630 [ 911.420824][ T30] device_unregister+0x1d/0xe0 [ 911.426813][ T30] del_device_store+0x346/0x480 [ 911.431684][ T30] ? __pfx_del_device_store+0x10/0x10 [ 911.437416][ T30] ? find_held_lock+0x2b/0x80 [ 911.442099][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 911.448942][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 911.454089][ T30] ? __pfx_del_device_store+0x10/0x10 [ 911.459473][ T30] bus_attr_store+0x74/0xb0 [ 911.464244][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 911.469453][ T30] sysfs_kf_write+0xf2/0x150 [ 911.474928][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 911.480227][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 911.485707][ T30] vfs_write+0x6ac/0x1070 [ 911.490044][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 911.496134][ T30] ? __pfx_vfs_write+0x10/0x10 [ 911.500925][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 911.506397][ T30] ksys_write+0x12a/0x250 [ 911.510853][ T30] ? __pfx_ksys_write+0x10/0x10 [ 911.516005][ T30] ? rcu_is_watching+0x12/0xc0 [ 911.520785][ T30] do_syscall_64+0x115/0x840 [ 911.525650][ T30] ? clear_bhb_loop+0x40/0x90 [ 911.531321][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.537534][ T30] RIP: 0033:0x7fe42c15d68e [ 911.541953][ T30] RSP: 002b:00007ffd00747ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 911.550644][ T30] RAX: ffffffffffffffda RBX: 000055556dfad500 RCX: 00007fe42c15d68e [ 911.560690][ T30] RDX: 0000000000000001 RSI: 00007ffd00747b50 RDI: 0000000000000005 [ 911.568832][ T30] RBP: 00007fe42c2335f2 R08: 0000000000000000 R09: 0000000000000000 [ 911.577080][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.585248][ T30] R13: 00007ffd00747b50 R14: 00007fe42cf44620 R15: 0000000000000003 [ 911.593441][ T30] [ 911.596498][ T30] INFO: task syz.3.2251:16292 blocked for more than 144 seconds. [ 911.605361][ T30] Tainted: G L syzkaller #0 [ 911.611858][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 911.620824][ T30] task:syz.3.2251 state:D stack:29032 pid:16292 tgid:16287 ppid:5630 task_flags:0x400040 flags:0x00080002 [ 911.638498][ T30] Call Trace: [ 911.641788][ T30] [ 911.645111][ T30] __schedule+0x1295/0x67a0 [ 911.649637][ T30] ? __pfx___schedule+0x10/0x10 [ 911.654782][ T30] ? find_held_lock+0x2b/0x80 [ 911.659466][ T30] ? schedule+0x2bf/0x390 [ 911.665809][ T30] schedule+0xdd/0x390 [ 911.669896][ T30] schedule_preempt_disabled+0x13/0x30 [ 911.675666][ T30] __mutex_lock+0xced/0x1b10 [ 911.680265][ T30] ? devlink_health_report+0x66c/0xb20 [ 911.686031][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 911.691062][ T30] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 911.697936][ T30] ? devlink_health_report+0x66c/0xb20 [ 911.703771][ T30] devlink_health_report+0x66c/0xb20 [ 911.709063][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 911.716381][ T30] ? _copy_from_user+0x59/0xd0 [ 911.721167][ T30] nsim_dev_health_break_write+0x166/0x210 [ 911.727253][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 911.734773][ T30] full_proxy_write+0x135/0x1a0 [ 911.739644][ T30] vfs_write+0x2aa/0x1070 [ 911.744217][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 911.749605][ T30] ? __pfx_vfs_write+0x10/0x10 [ 911.754701][ T30] ? __fget_files+0x215/0x3d0 [ 911.759389][ T30] ? __fget_files+0x21f/0x3d0 [ 911.764326][ T30] ksys_write+0x12a/0x250 [ 911.768666][ T30] ? __pfx_ksys_write+0x10/0x10 [ 911.775606][ T30] ? kcov_ioctl+0x16a/0x720 [ 911.780124][ T30] ? rcu_is_watching+0x12/0xc0 [ 911.785159][ T30] do_syscall_64+0x115/0x840 [ 911.789766][ T30] ? clear_bhb_loop+0x40/0x90 [ 911.794731][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.800625][ T30] RIP: 0033:0x7f06ec39ce59 [ 911.805295][ T30] RSP: 002b:00007f06ea1f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 911.813910][ T30] RAX: ffffffffffffffda RBX: 00007f06ec616270 RCX: 00007f06ec39ce59 [ 911.821889][ T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000008 [ 911.830100][ T30] RBP: 00007f06ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 911.839736][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.847920][ T30] R13: 00007f06ec616308 R14: 00007f06ec616270 R15: 00007ffd1f9b71c8 [ 911.856287][ T30] [ 911.859346][ T30] INFO: task syz.1.2268:16393 blocked for more than 144 seconds. [ 911.867375][ T30] Tainted: G L syzkaller #0 [ 911.875748][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 911.886357][ T30] task:syz.1.2268 state:D stack:27640 pid:16393 tgid:16390 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 911.898470][ T30] Call Trace: [ 911.901767][ T30] [ 911.904951][ T30] __schedule+0x1295/0x67a0 [ 911.909472][ T30] ? __pfx___schedule+0x10/0x10 [ 911.914608][ T30] ? find_held_lock+0x2b/0x80 [ 911.919299][ T30] ? schedule+0x2bf/0x390 [ 911.923852][ T30] schedule+0xdd/0x390 [ 911.927925][ T30] schedule_preempt_disabled+0x13/0x30 [ 911.933634][ T30] rwsem_down_read_slowpath+0x5af/0xb40 [ 911.940151][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 911.946476][ T30] ? __pfx___might_resched+0x10/0x10 [ 911.951773][ T30] down_read+0xed/0x450 [ 911.959842][ T30] ? __pfx_down_read+0x10/0x10 [ 911.965234][ T30] ? mnt_get_write_access+0x1e9/0x2f0 [ 911.970735][ T30] path_openat+0xa16/0x31a0 [ 911.975680][ T30] ? __pfx_path_openat+0x10/0x10 [ 911.980634][ T30] do_file_open+0x20e/0x430 [ 911.985403][ T30] ? __pfx_do_file_open+0x10/0x10 [ 911.990446][ T30] ? alloc_fd+0x476/0x790 [ 911.996812][ T30] ? do_getname+0x191/0x390 [ 912.001339][ T30] do_sys_openat2+0x10d/0x1e0 [ 912.006249][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 912.011466][ T30] __x64_sys_openat+0x12d/0x210 [ 912.016601][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 912.022011][ T30] ? ksys_write+0x1ac/0x250 [ 912.026745][ T30] ? rcu_is_watching+0x12/0xc0 [ 912.031725][ T30] do_syscall_64+0x115/0x840 [ 912.037884][ T30] ? clear_bhb_loop+0x40/0x90 [ 912.043729][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.049631][ T30] RIP: 0033:0x7f9550d9ce59 [ 912.054347][ T30] RSP: 002b:00007f9551bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 912.062767][ T30] RAX: ffffffffffffffda RBX: 00007f9551016180 RCX: 00007f9550d9ce59 [ 912.071675][ T30] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 912.079941][ T30] RBP: 00007f9550e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 912.088233][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.096409][ T30] R13: 00007f9551016218 R14: 00007f9551016180 R15: 00007fff53fbb1f8 [ 912.106454][ T30] [ 912.109516][ T30] INFO: task syz.0.2269:16400 blocked for more than 144 seconds. [ 912.119601][ T30] Tainted: G L syzkaller #0 [ 912.126225][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 912.135093][ T30] task:syz.0.2269 state:D stack:28264 pid:16400 tgid:16397 ppid:5631 task_flags:0x400040 flags:0x00080002 [ 912.148232][ T30] Call Trace: [ 912.151525][ T30] [ 912.154796][ T30] __schedule+0x1295/0x67a0 [ 912.159320][ T30] ? __pfx___schedule+0x10/0x10 [ 912.164401][ T30] ? find_held_lock+0x2b/0x80 [ 912.169094][ T30] ? schedule+0x2bf/0x390 [ 912.173702][ T30] schedule+0xdd/0x390 [ 912.177775][ T30] schedule_preempt_disabled+0x13/0x30 [ 912.183452][ T30] rwsem_down_read_slowpath+0x5af/0xb40 [ 912.189018][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 912.195412][ T30] ? __pfx___might_resched+0x10/0x10 [ 912.200710][ T30] down_read+0xed/0x450 [ 912.205168][ T30] ? __pfx_down_read+0x10/0x10 [ 912.209943][ T30] ? mnt_get_write_access+0x1e9/0x2f0 [ 912.217830][ T30] path_openat+0xa16/0x31a0 [ 912.222357][ T30] ? __pfx_path_openat+0x10/0x10 [ 912.227539][ T30] do_file_open+0x20e/0x430 [ 912.233877][ T30] ? __pfx_do_file_open+0x10/0x10 [ 912.238940][ T30] ? alloc_fd+0x476/0x790 [ 912.244547][ T30] ? do_getname+0x191/0x390 [ 912.249066][ T30] do_sys_openat2+0x10d/0x1e0 [ 912.254031][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 912.259798][ T30] __x64_sys_openat+0x12d/0x210 [ 912.264846][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 912.270233][ T30] ? ksys_write+0x1ac/0x250 [ 912.275444][ T30] ? rcu_is_watching+0x12/0xc0 [ 912.280223][ T30] do_syscall_64+0x115/0x840 [ 912.285206][ T30] ? clear_bhb_loop+0x40/0x90 [ 912.289891][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.296072][ T30] RIP: 0033:0x7f8d3b39ce59 [ 912.300493][ T30] RSP: 002b:00007f8d395d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 912.309142][ T30] RAX: ffffffffffffffda RBX: 00007f8d3b616180 RCX: 00007f8d3b39ce59 [ 912.317318][ T30] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 912.327929][ T30] RBP: 00007f8d3b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 912.336138][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.344260][ T30] R13: 00007f8d3b616218 R14: 00007f8d3b616180 R15: 00007ffff2079f48 [ 912.355542][ T30] [ 912.358638][ T30] [ 912.358638][ T30] Showing all locks held in the system: [ 912.367403][ T30] 1 lock held by khungtaskd/30: [ 912.372259][ T30] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 912.382532][ T30] 6 locks held by kworker/u8:29/7762: [ 912.388118][ T30] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 912.398663][ T30] #1: ffffc90004d07d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 912.408745][ T30] #2: ffffffff905edec8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 912.418263][ T30] #3: ffff88807c496128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 912.428404][ T30] #4: ffff888079719258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 912.441581][ T30] #5: ffff88807df34140 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 912.454469][ T30] 2 locks held by getty/10455: [ 912.459235][ T30] #0: ffff88823bed48a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 912.469252][ T30] #1: ffffc90004f7d2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 912.479603][ T30] 5 locks held by syz-executor/16249: [ 912.485221][ T30] #0: ffff888036d86410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 912.494402][ T30] #1: ffff888075222080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 912.504346][ T30] #2: ffff88802a285f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 912.515298][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 912.525741][ T30] #4: ffff88807c496128 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9b0 [ 912.534736][ T30] 3 locks held by syz.3.2251/16292: [ 912.539929][ T30] #0: ffff888021b700f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 912.552774][ T30] #1: ffff8880202d8410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 912.561751][ T30] #2: ffff888079719258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_health_report+0x66c/0xb20 [ 912.572619][ T30] 2 locks held by syz.1.2268/16393: [ 912.578030][ T30] #0: ffff8880202d8410 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 912.587351][ T30] #1: ffff88807df34140 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 912.599570][ T30] 2 locks held by syz.0.2269/16400: [ 912.604934][ T30] #0: ffff8880202d8410 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 912.614276][ T30] #1: ffff88807df34140 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 912.624960][ T30] 4 locks held by syz-executor/16404: [ 912.630323][ T30] #0: ffff888036d86410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 912.639611][ T30] #1: ffff888069859880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 912.649508][ T30] #2: ffff88802a285f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 912.662461][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 912.677546][ T30] 4 locks held by syz-executor/16424: [ 912.683094][ T30] #0: ffff888036d86410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 912.692075][ T30] #1: ffff88807ad39080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 912.702219][ T30] #2: ffff88802a285f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 912.712458][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 912.723162][ T30] 4 locks held by syz-executor/16438: [ 912.728531][ T30] #0: ffff888036d86410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 912.737765][ T30] #1: ffff888077d3e080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 912.747740][ T30] #2: ffff88802a285f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 912.760139][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 912.772897][ T30] 4 locks held by syz-executor/16468: [ 912.778269][ T30] #0: ffff888036d86410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 912.787524][ T30] #1: ffff888078073080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 912.797535][ T30] #2: ffff88802a285f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 912.807746][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 912.818216][ T30] 4 locks held by syz-executor/16491: [ 912.823788][ T30] #0: ffff888036d86410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 912.832913][ T30] #1: ffff888044a0e480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 912.842850][ T30] #2: ffff88802a285f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 912.853021][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 912.865061][ T30] 4 locks held by syz-executor/16512: [ 912.870446][ T30] #0: ffff888036d86410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 912.881524][ T30] #1: ffff88806872b880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 912.891496][ T30] #2: ffff88802a285f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 912.901677][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 912.912235][ T30] 4 locks held by syz-executor/16533: [ 912.919440][ T30] #0: ffff888036d86410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 912.928618][ T30] #1: ffff888074d2b480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 912.938573][ T30] #2: ffff88802a285f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 912.948780][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 912.959226][ T30] 4 locks held by syz-executor/16551: [ 912.965729][ T30] #0: ffff888036d86410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 912.974870][ T30] #1: ffff888057d4ac80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 912.986852][ T30] #2: ffff88802a285f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 913.001544][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 913.012061][ T30] 4 locks held by syz-executor/16578: [ 913.017593][ T30] #0: ffff888036d86410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 913.026735][ T30] #1: ffff8880503e0c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 913.036641][ T30] #2: ffff88802a285f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 913.046845][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 913.057359][ T30] 4 locks held by syz-executor/16600: [ 913.063891][ T30] #0: ffff888036d86410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 913.074511][ T30] #1: ffff888056d11080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 913.084458][ T30] #2: ffff88802a285f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 913.096390][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 913.106932][ T30] 4 locks held by syz-executor/16620: [ 913.112301][ T30] #0: ffff888036d86410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 913.121636][ T30] #1: ffff888035b72480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 913.131579][ T30] #2: ffff88802a285f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 913.141881][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 913.153618][ T30] [ 913.155947][ T30] ============================================= [ 913.155947][ T30] [ 913.165978][ T30] NMI backtrace for cpu 0 [ 913.165995][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 913.166015][ T30] Tainted: [L]=SOFTLOCKUP [ 913.166020][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 913.166029][ T30] Call Trace: [ 913.166034][ T30] [ 913.166040][ T30] dump_stack_lvl+0x100/0x190 [ 913.166071][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 913.166088][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 913.166103][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 913.166122][ T30] sys_info+0x141/0x190 [ 913.166142][ T30] watchdog+0xcb1/0x1030 [ 913.166165][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 913.166183][ T30] ? __pfx_watchdog+0x10/0x10 [ 913.166203][ T30] ? __kthread_parkme+0x18c/0x230 [ 913.166223][ T30] ? kthread+0x13a/0x450 [ 913.166241][ T30] ? __pfx_watchdog+0x10/0x10 [ 913.166258][ T30] kthread+0x370/0x450 [ 913.166277][ T30] ? __pfx_kthread+0x10/0x10 [ 913.166298][ T30] ret_from_fork+0x72b/0xd50 [ 913.166314][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 913.166330][ T30] ? __switch_to+0x800/0x1100 [ 913.166348][ T30] ? __switch_to_asm+0x39/0x70 [ 913.166365][ T30] ? __pfx_kthread+0x10/0x10 [ 913.166386][ T30] ret_from_fork_asm+0x1a/0x30 [ 913.166411][ T30] [ 913.301678][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 913.308517][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 913.319169][ T30] Tainted: [L]=SOFTLOCKUP [ 913.323469][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 913.333501][ T30] Call Trace: [ 913.336758][ T30] [ 913.339667][ T30] dump_stack_lvl+0x100/0x190 [ 913.344336][ T30] vpanic+0x552/0x970 [ 913.348297][ T30] ? __pfx_vpanic+0x10/0x10 [ 913.352777][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 913.358914][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 913.365053][ T30] panic+0xd1/0xe0 [ 913.368753][ T30] ? __pfx_panic+0x10/0x10 [ 913.373151][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 913.379281][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 913.385412][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 913.391543][ T30] ? watchdog.cold+0x1ec/0x234 [ 913.396287][ T30] ? watchdog+0xcc1/0x1030 [ 913.400689][ T30] watchdog.cold+0x1fd/0x234 [ 913.405265][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 913.411059][ T30] ? __pfx_watchdog+0x10/0x10 [ 913.415720][ T30] ? __kthread_parkme+0x18c/0x230 [ 913.420742][ T30] ? kthread+0x13a/0x450 [ 913.424984][ T30] ? __pfx_watchdog+0x10/0x10 [ 913.429658][ T30] kthread+0x370/0x450 [ 913.433712][ T30] ? __pfx_kthread+0x10/0x10 [ 913.438293][ T30] ret_from_fork+0x72b/0xd50 [ 913.442867][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 913.447959][ T30] ? __switch_to+0x800/0x1100 [ 913.452618][ T30] ? __switch_to_asm+0x39/0x70 [ 913.457364][ T30] ? __pfx_kthread+0x10/0x10 [ 913.461942][ T30] ret_from_fork_asm+0x1a/0x30 [ 913.466695][ T30] [ 913.469746][ T30] Kernel Offset: disabled [ 913.474053][ T30] Rebooting in 86400 seconds..