last executing test programs: 2m38.765013011s ago: executing program 1 (id=1356): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) socket(0xf, 0x2, 0x2) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) r1 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/fields\x00', 0x2, 0x0) write$auto(r1, &(0x7f00000005c0)='1\x81=\x1b\x96\xf3\xcc\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xa4\xbc^Zo\xf4\xaf:\x00\x00\x00\x00\x00\x00*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d\xbcc!\x01\xff\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xf7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85HC /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\x9bA\xac\x9c\x8e\r(\x1d\x98\x84\x98\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6=9\x91\xb6\xf7\xa1=\x96\x11\xf11\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\x86\xa8\x84u\x80\xd1d\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xc9e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbds\x11\x98}\x8d\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2Ln\xafQ~L\xac', 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x301, 0x0) sysfs$auto(0x2, 0x100000000000035, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4008af83, 0x0) 2m38.317388408s ago: executing program 1 (id=1357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x3f00000000000000, 0x0, 0x4002000}, 0x40010) 2m37.727435756s ago: executing program 1 (id=1358): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000300"/17, 0x11) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0xfffffc96) r2 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0) write$auto(r2, 0x0, 0xff) fcntl$auto_F_SETLEASE(r0, 0x400, 0x8) timer_create$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x7) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) socket(0x11, 0xa, 0x300) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x44c0) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/arp_interval\x00', 0x20b42, 0x0) r3 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) write$auto(r3, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x40) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(r4, r5, 0x0, 0x1000000000001) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x6, 0x1, 0x5, 0x5, 0x77}) set_mempolicy$auto(0x1, &(0x7f0000000080)=0x3, 0x21) 2m34.226458085s ago: executing program 0 (id=1369): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x4, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0) pread64$auto(r2, 0x0, 0x8, 0x10000000000) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x98) r4 = open_by_handle_at$auto(r3, &(0x7f0000000140)={0x8, 0x20002, "0100000000000000"}, 0xc) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) io_uring_enter$auto(0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x0, 0x6) getsockopt$auto_SO_NO_CHECK(r4, 0x8, 0xb, &(0x7f0000000000)='\x00', &(0x7f0000000180)=0xff) madvise$auto(0x4000000000000003, 0x800, 0x15) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x10000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20443, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x181881, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000004c0)={r0, &(0x7f0000000680), 0xfffffffd, &(0x7f0000000300)="ea3bafcf2dd456cf910f0ba1f953f0bb4aae9f9278a6a08a72e0d143a79db047c8ae8e37afb3d08dd39b118a18c451132a63bce6c9ee83f170efaf57bb6d5dade71072d45d6a6a9fe1e6fba3c750ae6a851061d7e4e1a073cec70d10280e07d56b34ba8f0215713d9328940358cea3ffcbeafc0573050b3985ab123ebc16dec0b20da532d3841f330388ffa36713f1c26ec063", 0x9, &(0x7f00000003c0)="2f7a0ffc98dfacf338f3f02276f398216db9a8a12e51c01eeab37f6145f6480dbb5d50ec57ac2ff19343522b4af243db86a33c9f2f2c7f4e2a43d9194d7163943d579409e94b2eaed238ea87e745ad27e7cbe6c159c97937f88d3e28bdd962c2fd64fd30b0f31a7e8bb9d222283ad773b9596c6d447060ee26fa1e8da359d8996db0fa35bddd54c0104001aebf0e2b6ddde2733756cca10b92ab1ab488db305e7274cdc3239326a63926f77b55192d3095bb7f9273d0e7a01a", &(0x7f0000000480)=0x1}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x22002, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x181502, 0x0) r5 = socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(r5, &(0x7f0000000040)=@generic={0x8, "00010100"}, 0x5c) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x7f, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x20, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1fe, 0x81) 2m33.954666135s ago: executing program 1 (id=1370): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) futex$auto(&(0x7f0000000080)=0x2948, 0x9, 0x2948, 0x0, 0x0, 0x5) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) setuid$auto(0x800000000008) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x2020009, 0xb, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x4, 0xfffffffe) socket(0xa, 0x801, 0x84) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) mincore$auto(0x1000, 0x8001, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b33285ac", @ANYRES16=r2, @ANYBLOB="10002cbd7000fbdbdf250a00000c"], 0x14}}, 0x10004010) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 2m33.734605977s ago: executing program 0 (id=1371): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x4, 0x0, 0x100082) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy11/hwsim/rx_rssi\x00', 0xc00e40, 0x0) read$auto(r0, 0x0, 0x800000001f) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x84) connect$auto(0x3, 0x0, 0x54) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfs\x00', 0xc0100, 0x0) read$auto(r2, 0x0, 0x85) 2m33.088692032s ago: executing program 0 (id=1373): mmap$auto(0x0, 0x400008, 0x9, 0x100000009b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x8) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x123040, 0x0) ioctl$auto(r0, 0x80004524, 0xffffffffffffffff) r1 = socket(0x2, 0x1, 0x0) r2 = getsockopt$auto(r1, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x18) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) read$auto(r4, 0x0, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x1b) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000003) getsockopt$auto_SO_PREFER_BUSY_POLL(0xffffffffffffffff, 0xeb47, 0x45, 0x0, 0x0) socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, 0x0, 0x48070) read$auto(0xffffffffffffffff, 0x0, 0x7f) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, 0x0) writev$auto(r3, &(0x7f0000000180)={&(0x7f0000000100)="f35f776bc052ae4a7d774455733660e606ad80e2d8eb77f277fbfe1db64fb1c6cfe455a192df114d34d820e5acc6fa1cecf9af24671e2745ef9575c061", 0x8}, 0x6) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) stat$auto(0x0, &(0x7f0000000680)={0x1, 0xf5, 0xe44, 0x80000000, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, 0x38, 0x0, 0x2, 0x5, 0x4e0, 0x8, 0x2, 0x400, 0x4}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x4800, 0x0) ioctl$auto_BLKPG(0xffffffffffffffff, 0x1269, 0x300) timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x801) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x2401, 0x0) 2m32.48185576s ago: executing program 1 (id=1374): mmap$auto(0x0, 0x2, 0x3, 0x6b1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f0000001180)='.\x00', 0x0, 0xdec, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) mmap$auto(0x0, 0x9, 0xdf, 0x8000009b72, 0x0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_SOCK_GET(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="8d0003"], 0x14}}, 0x8cc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x52, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRES16=r3], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff050006000100", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) setresuid$auto(0x0, 0x8, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f00000003c0)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x100007}, 0x6, 0xa6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) 2m31.449120839s ago: executing program 0 (id=1375): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)="f0497a0e00000000000000f6f30300175c0d6eb1b003fc4ef523d2519eb890b731866b573f69846f4113f7dc8adb58ea779ab38420d13d00ac3582d51b695994680fec8243015a3f9073a9d1fbcf38887da0d1381235caca795ed7e2600f3d4419931a49355c53db231c5207ad9251e40558c875e0cae3f0253bfccf81631c94adbccb8a3531e9e6c95f9151fd583f14a36334e289d5a349d8") 2m31.339718099s ago: executing program 0 (id=1376): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c0") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)='1', 0x1) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x5}, 0xffffffffffffffff) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x1ff) r2 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) read$auto_ctl_device_fops_user(r2, &(0x7f0000001c80)=""/12, 0xc) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop7\x00', 0x400, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x9) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) read$auto(0x3, 0x0, 0x8080) mmap$auto(0xfffffffffffffffd, 0x5, 0x5, 0x80000000010, 0x2, 0x8002) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x3, 0x2) sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 2m30.703272646s ago: executing program 1 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x4000000000000000, 0x0, 0x4002000}, 0x40010) 2m30.285096581s ago: executing program 0 (id=1379): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, 0x0, 0x50) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x3) sysfs$auto(0x2, 0x10000000000002f, 0x0) fsopen$auto(0x0, 0x1) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0xf5, 0x4002000}, 0x40010) 2m15.530557791s ago: executing program 32 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x4000000000000000, 0x0, 0x4002000}, 0x40010) 2m14.964103776s ago: executing program 33 (id=1379): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, 0x0, 0x50) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x3) sysfs$auto(0x2, 0x10000000000002f, 0x0) fsopen$auto(0x0, 0x1) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0xf5, 0x4002000}, 0x40010) 1m21.404162126s ago: executing program 5 (id=1561): mmap$auto(0x0, 0x2020408, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) getcwd$auto(0x0, 0xffffffffffffffff) r1 = socket(0x2, 0x3, 0xa) getsockopt$auto(r1, 0x0, 0x29, 0x0, &(0x7f0000000040)=0xdbb) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mprotect$auto(0x0, 0x8000000000000001, 0x8) 1m20.347457556s ago: executing program 5 (id=1565): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mlock$auto(0x81, 0xffff) lseek$auto(0x3, 0x8, 0x3) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xfffffd67, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="ececb47408163356d3dec6dcd80d0b49151de5014e44edcd809d32a112658446e17b52694ee3b8e8f0020bb154c104105984f6d31dd30c9cd3d52a41cdde392fc2672d7daeb00b250f51f97e9a5a23136a64a7b57df1983467241798fb7beb608f9c2a17a82e14bac57486bcba4820d199b5b44bade272079ec0e7c75fb17ae3654ee5e490657788193bf6168d4862e2779522db430fed9b955d8a628b832a227209eebe21333eaa6cdf0e933f8c2f1163d3e311cffebdc8e0e2b5137779a11b724cd0a7b94cbde1b9ba0253039e794745e09564e510f0435ec9f5205b625ef8eab59c060c195978e0cebe88ab8d3395f7f1af", @ANYRES16=0x0, @ANYBLOB="080027bd7000fedbdf259700000008009f00900c00000400e200"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x845) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000640)={"3452c9167ff3d0872024f68642430ce4d9698f931790649516c1b0923883b0c3", 0xd, 0x3, 0x547e, 0xe098, 0x3fe00000000000, 0xffffffffffffffff}) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x22, 0x0, 0x10) utimes$auto(&(0x7f00000000c0)=':,\x00', 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r1) mprotect$auto(0x0, 0x8000000000000001, 0x8) epoll_ctl$auto(r0, 0xffff, r0, &(0x7f0000000740)={0x0, 0xffffffffffffffe0}) ioctl$auto_USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000280)={0x5, 0x488cf785, "b127c01102fb3e49fca2fd9c293fdd0edd0f44cf68cba3d54174e116c7af2d0dc6bd92e1ec24b7a88743d96abfccc0162a96c072d8b790a6933d7be30f337a75b59631ba6a0c6b612307e01817a69f420f53d2891a9e64162532fee68c17fbf0a99f7a141c968bf0277fff2ac299a1fa51e9d21348f4ed82d976b1f86990113e4b79363045acfc63c82e214081826cd8c9f8518c6f3c1758526b7b599f90d1b5c9d654acfd8b44beb6af63c12df2c39eb57b7e22b2a31f699678ad7381ed4350395511693565f751ad19a59c3eb2bbe7641c783fc275f39fb864c5c30ea884e36334000d1519d5c34d36dbb2ba513b8c3887493e"}) 1m19.221498799s ago: executing program 5 (id=1570): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x2000) 1m18.92545758s ago: executing program 5 (id=1571): mmap$auto(0x0, 0x4020009, 0x7ff, 0x1000000000ebe, 0x401, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/auth.unix.ip/flush\x00', 0x521202, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zram0\x00', 0x6e642, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r2, &(0x7f00000001c0)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/92, 0x5c) write$auto(0x3, 0x0, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80161, 0x0) sysfs$auto(0x2, 0x3c, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) read$auto(0x3, 0x0, 0x80) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x200104, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8900, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xc048ae65, r4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 1m17.677839076s ago: executing program 5 (id=1575): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) r0 = socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x400840, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_udc.7/udc/dummy_udc.7/soft_connect\x00', 0x2062, 0x0) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x3) sysfs$auto(0x2, 0x100000000000027, 0x0) r2 = fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0x11, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x6, 0x7, 0x6, 0x7, 0x0, 0xdfffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x80, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000, 0x80000000000000f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x27, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000014) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r4, r3, 0x0, 0x40002000000a) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), r2) fchmod$auto(r2, 0x8) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) 1m15.093219447s ago: executing program 5 (id=1581): mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x0, 0x486, 0x0, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x69, 0x0, 0x400, 0x3, 0x3fe0, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sysfs$auto(0x2, 0x23, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8005}, 0x8804) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 59.9133506s ago: executing program 34 (id=1581): mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x0, 0x486, 0x0, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x69, 0x0, 0x400, 0x3, 0x3fe0, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sysfs$auto(0x2, 0x23, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8005}, 0x8804) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 41.383696469s ago: executing program 6 (id=1679): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000280)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xe) close_range$auto(0x2, 0x8, 0x300) 41.117167954s ago: executing program 6 (id=1680): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40d1}, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) mmap$auto(0x0, 0x4, 0x7ffffffd, 0x7b9, 0xffffffffffffffff, 0x200000800) r0 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x1, 0x84) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x2207c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x2) waitid$auto(0x1ff, r0, &(0x7f0000000100)={@_si_pad}, 0x5, &(0x7f00000002c0)={{0x4, 0x5}, {0xceca, 0xc}, 0xffffffff, 0x5ef, 0x5, 0x1, 0x1, 0x8, 0x4, 0x200, 0x0, 0x6, 0xaf25, 0x0, 0x64, 0x2000000006d7}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r1, 0x84, 0x6d, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptybf\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r3, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) r4 = socketpair$auto(0x10001e, 0x8004, 0x100000, 0x0) setsockopt$auto_SO_REUSEPORT(r0, 0x15d1, 0xf, 0x0, 0x3) setsockopt$auto(0xffffffffffffffff, 0x5, 0x43, 0x0, 0x4) ioctl$auto_TCSBRKP(r4, 0x5425, 0x0) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(r3, 0xffffffffffffffff, 0x7) socket(0x11, 0x3, 0x9) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x2800, 0x0) mmap$auto(0x0, 0x2000d, 0x386, 0x16, 0xffffffffffffffff, 0x598) 40.354081163s ago: executing program 6 (id=1683): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0xe2, 0x38, &(0x7f00000001c0)='\x00', &(0x7f0000000280)=0x80) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) sendmsg$auto_NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = prctl$auto(0xbb, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x9, 0x20006, 0x4000000000df, 0x14, r4, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(r1, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 38.339314402s ago: executing program 6 (id=1689): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/bus/pci/drivers/net2272/new_id\x00', 0x20000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xff80}, 0x1, 0x0, 0x0, 0x4004810}, 0x884) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80200, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) r3 = mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u50x0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="0800030001000100"], 0xf4}, 0x1, 0x0, 0x0, 0x10000884}, 0x4840) r9 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r9, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r6) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES8=r8], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r5, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'nr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'pimreg0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c010000", @ANYBLOB="88", @ANYRES32=0x0, @ANYRES64=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="14000200766c616e3000000000000000000000001400020076657468315f766c616e00000000000005000200000000002800018008000300ae38ffff08000100", @ANYRES32=r11, @ANYBLOB="1400020070696d72656700000000000000000000360002002f7379732f646576696365732f73797374656d2f6d656d6f72792f6d656d6f727931322f706f7765722f636f6e74726f6c000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) ioctl$auto_KVM_CREATE_VM(r5, 0xae80, 0x0) ioctl$auto(r1, 0x4048aec9, r2) madvise$auto(0x0, 0x2003f2, 0x15) 36.564656995s ago: executing program 2 (id=1697): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, 0x0, 0xb01, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r0, 0xc0884123, &(0x7f0000000280)={0x5, 0x0, @status={0x7fff, 0x0, {}, 0x9, {}, {0x0, 0x3}, 0x2, 0x0, {0x38e9, 0x3}}, @reserved="80d3cdf2171a668a2c93c8e678b2aa56aea79e146f5e1a8a4d584f7dbea6a00b7688fd50494441ddac155ae43ee62b0f811573284c7a8036e5614e1cd3e18ba8"}) io_uring_setup$auto(0x1, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0x2, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x28641, 0x0) write$auto(r1, 0x0, 0x101) ioctl$auto_SG_GET_NUM_WAITING(r1, 0x227d, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sched_get_priority_min$auto_SCHED_DEADLINE(0x6) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x80101, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) io_uring_setup$auto(0x7ff, &(0x7f00000000c0)={0x30ba, 0x401, 0x2, 0x1, 0x2, 0x9e5, 0xffffffffffffffff, [0x56e74681, 0x7f, 0x81], {0x7, 0x4, 0x7, 0x8001, 0x200, 0x9, 0xffffffbb, 0x54, 0x7fff}, {0x6, 0x40, 0x5, 0x8, 0x0, 0x6, 0x1, 0x1, 0x4}}) mmap$auto(0x8b09, 0x4000000002020009, 0x3, 0x40000eb3, r3, 0x8000) read$auto(0x3, 0x0, 0x87f) ioctl$auto(r2, 0xc0b45545, 0xffffffffffffffff) 36.158056142s ago: executing program 6 (id=1698): openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x59, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x480, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r2, 0x101) r3 = getsid$auto(0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @inferred=r3}, 0x4, 0x966, 0x3, @inferred, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x18, 0x3, 0x2) accept$auto(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) r9 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05082dbd7000fbdbdf257e0000000800", @ANYRES32=r9, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x200400c0}, 0xc004) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xf7}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008015}, 0x4) socket(0x10, 0x2, 0xc) socket(0xa, 0x3, 0x3a) 35.297890012s ago: executing program 2 (id=1701): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x2000) (fail_nth: 6) 35.121034389s ago: executing program 6 (id=1702): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x100000000000000) 33.631126861s ago: executing program 2 (id=1704): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810008, 0xffa, 0x8000000008011, r0, 0x8000) sysfs$auto(0x2, 0x100000000000035, 0x0) mmap$auto(0x0, 0x8020009, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) r1 = socket(0x2, 0x80002, 0x73) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x482900, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@link_update={r1, @new_map_fd=r1, 0x3, @old_map_fd}, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x45, 0x0) fsopen$auto(0x0, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.12/usb33/33-0:1.0/usb33-port7/state\x00', 0x8e42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001080)=""/4076, 0xfec) socket(0x7, 0x4, 0x9) sysfs$auto(0x2, 0x100000000000036, 0x0) r3 = fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0xa, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) sysfs$auto(0x2, 0x48, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x6, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) r5 = socket(0x2, 0x3, 0xa) ioctl$auto(r5, 0x8be1, r5) fsconfig$auto(r3, 0x7, 0x0, 0x0, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r6, 0x4008af83, 0x0) 19.638046299s ago: executing program 35 (id=1702): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x100000000000000) 18.115246587s ago: executing program 36 (id=1704): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810008, 0xffa, 0x8000000008011, r0, 0x8000) sysfs$auto(0x2, 0x100000000000035, 0x0) mmap$auto(0x0, 0x8020009, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) r1 = socket(0x2, 0x80002, 0x73) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x482900, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@link_update={r1, @new_map_fd=r1, 0x3, @old_map_fd}, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x45, 0x0) fsopen$auto(0x0, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.12/usb33/33-0:1.0/usb33-port7/state\x00', 0x8e42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001080)=""/4076, 0xfec) socket(0x7, 0x4, 0x9) sysfs$auto(0x2, 0x100000000000036, 0x0) r3 = fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0xa, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) sysfs$auto(0x2, 0x48, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x6, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) r5 = socket(0x2, 0x3, 0xa) ioctl$auto(r5, 0x8be1, r5) fsconfig$auto(r3, 0x7, 0x0, 0x0, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r6, 0x4008af83, 0x0) 7.800873086s ago: executing program 4 (id=1740): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) socket(0x1d, 0x2, 0x7) r0 = socket(0x10, 0x2, 0x16) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0xe2, 0x38, &(0x7f00000001c0)='\x00', &(0x7f0000000280)=0x80) r1 = syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r2, 0x0, r2, &(0x7f0000000080)=0x8800000, 0x2, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) syz_clone(0xc9253a7d26a4c6ef, &(0x7f0000000380)="eae110ba7dcc9480df91990035a0c06ee7c21de58a3d4f41a2a6cfe0301555aaf49d112343b570b29ff227609a01f81765deab035467f15911bca0d676165c6560bdaaf4f2ca8f50", 0x48, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000540)="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") sendmsg$auto_NL80211_CMD_GET_KEY(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r6 = prctl$auto(0xbb, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x9, 0x20006, 0x4000000000df, 0x14, r6, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405514, &(0x7f0000000340)={@inferred=r1, 0x3, 0x81, 0x4, "471b1c87586c247df8d2730a662c47b505ba91c7de57c4bda97473732739d3f614e089bb646820c62ba29b48", @raw}) sendmsg$auto_GTP_CMD_NEWPDP(r3, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7.270524168s ago: executing program 4 (id=1742): openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x1940, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nbd10\x00', 0x80, 0x0) flock$auto(r0, 0x8) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/178, 0xb2) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, 0x0, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r4, 0x7fffffffffffffff, 0x400000040000005, 0x4) mmap$auto(0x0, 0xc685, 0x3e, 0x1200000010, r1, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram7/integrity/write_generate\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) 4.284796289s ago: executing program 4 (id=1744): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/system/machinecheck/machinecheck0/uevent\x00', 0x220c1, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socketcall$auto(0x9, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x200, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="000025bd7000fbdbdf25110000003800018008000100", @ANYRESOCT=r3, @ANYBLOB="1400020076657468315f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="08000300060000000800030008000000180001801400020074756e6c30000000000000000000000044000180080003000400000008000100", @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="0800030001000100"], 0xf4}, 0x1, 0x0, 0x0, 0x10000884}, 0x4840) r9 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r9, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0xfffffffffffffffd}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r6) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES8=r8], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$auto_KVM_GET_MSRS(r5, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'nr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'pimreg0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c010000", @ANYBLOB="88", @ANYRES32=0x0, @ANYRES64=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="14000200766c616e3000000000000000000000001400020076657468315f766c616e00000000000005000200000000002800018008000300ae38ffff08000100", @ANYRES32=r11, @ANYBLOB="1400020070696d72656700000000000000000000360002002f7379732f646576696365732f73797374656d2f6d656d6f72792f6d656d6f727931322f706f7765722f636f6e74726f6c000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) ioctl$auto_KVM_CREATE_VM(r5, 0xae80, 0x0) ioctl$auto(r1, 0x4048aec9, r2) madvise$auto(0x0, 0x2003f2, 0x15) 3.377925325s ago: executing program 4 (id=1746): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)="5f90542ea80bbf790498d37a29f68fcf386eb0e0a1deb07933a278aa21cd012e564ad43385d14c4184285dbdc55d1424a25b3a7079c45e52af1ef52524ebe980a4664656ec18bb818d17cc0e14689deacc81637edfbd426f062e78c0907bef66e8fc68f5ebc27ef43ebde69049cc236c372e5b82aa2d491ab130a0f664d5b5dba8192355dc5c4c6a398390aed6ec74b54a0b3a2195e36fab04cb5f47cdb37ca4d97937038272b41e0cdffe1b2bddef5b5fe0bb8960c407ed14a11523e132a0e0a398d363c24dbe", 0xc7) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, r1, [0x5], {0xd74c, 0x10000, 0x3ff, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0x2, 0x1, 0x6, 0x7, 0x1, 0x40, 0x176c7, 0x1, 0x100000005}}) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0xb5ea, 0x6}, 0x9}, 0x7, 0x6, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 3.221329409s ago: executing program 3 (id=1747): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)="5f90542ea80bbf790498d37a29f68fcf386eb0e0a1deb07933a278aa21cd012e564ad43385d14c4184285dbdc55d1424a25b3a7079c45e52af1ef52524ebe980a4664656ec18bb818d17cc0e14689deacc81637edfbd426f062e78c0907bef66e8fc68f5ebc27ef43ebde69049cc236c372e5b82aa2d491ab130a0f664d5b5dba8192355dc5c4c6a398390aed6ec74b54a0b3a2195e36fab04cb5f47cdb37ca4d97937038272b41e0cdffe1b2bddef5b5fe0bb8960c407ed14a11523e132a0e0a398d363c24dbe", 0xc7) io_uring_setup$auto(0x5b, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0xb5ea, 0x6}, 0x9}, 0x7, 0x6, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r2, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000001c0)={0x20, r4, 0x1, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 1.868918208s ago: executing program 4 (id=1748): mmap$auto(0x0, 0x4020009, 0x7ff, 0x1000000000ebe, 0x401, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/auth.unix.ip/flush\x00', 0x521202, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zram0\x00', 0x6e642, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) write$auto(r2, &(0x7f00000001c0)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/92, 0x5c) write$auto(0x3, 0x0, 0x1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x1cfa42, 0x0) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80161, 0x0) sysfs$auto(0x2, 0x3c, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) read$auto(0x3, 0x0, 0x80) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{@inferred=0x0, 0x1000, 0x202000b, 0x3, "790eaa00ffeeb0b053030001ffff000e000000000100000000000000000000deffffffffffffbf00"}, 0x4, 0x963, 0x8, @raw=0xffffffff, @integer64={0x800400000009, 0x1007, 0xfffd}, "6cc1294d63a4f1b44b5854c5368de438f8cc142ef6df12bf3372a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c700000100c78e6947a99807b4c1"}) unshare$auto(0x40000080) mmap$auto(0x0, 0x200104, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8900, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xc048ae65, r5) prctl$auto(0x3e, 0x1, r4, 0x1, 0x0) 1.653316038s ago: executing program 3 (id=1749): mmap$auto(0x1, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = socket(0x23, 0x5, 0x0) bind$auto(r1, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x78, 0xa3}, 0x7c) getsockopt$auto(r0, 0x84, 0xb, 0x0, &(0x7f0000000080)=0x2) 1.305707374s ago: executing program 3 (id=1750): mmap$auto(0x0, 0x3, 0x10000000000df, 0xeb1, 0x403, 0xfffffffffffffe00) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x80101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, 0x0, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x48, 0x1ff, 0x7, 0x5) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) pwrite64$auto(0xc8, 0x0, 0x28, 0x100000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r1, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x400000}) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x28, 0x1, 0x0) setsockopt$auto(r2, 0x28, 0x2, 0x0, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/default_smp_affinity\x00', 0xaa102, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) clock_nanosleep$auto(0x400000, 0x1, 0x0, &(0x7f0000000040)={0x7fff, 0x2}) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000040)) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x0, 0x4000000000df, 0x16, 0x401, 0x300000000001) 638.804583ms ago: executing program 3 (id=1751): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xfffffd67, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="ececb47408163356d3dec6dcd80d0b49151de5014e44edcd809d32a112658446e17b52694ee3b8e8f0020bb154c104105984f6d31dd30c9cd3d52a41cdde392fc2672d7daeb00b250f51f97e9a5a23136a64a7b57df1983467241798fb7beb608f9c2a17a82e14bac57486bcba4820d199b5b44bade272079ec0e7c75fb17ae3654ee5e490657788193bf6168d4862e2779522db430fed9b955d8a628b832a227209eebe21333eaa6cdf0e933f8c2f1163d3e311cffebdc8e0e2b5137779a11b724cd0a7b94cbde1b9ba0253039e794745e09564e510f0435ec9f5205b625ef8eab59c060c195978e0cebe88ab8d3395f7f1af", @ANYRES16=0x0, @ANYBLOB="080027bd7000fedbdf259700000008009f00900c00000400e200"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x845) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000009f8f3ff749b9989b355f0ce429331db0142d1c", @ANYRES16, @ANYBLOB="000826bd702078dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="11000100c2000000000000000a39acce0000000008000200", @ANYRES32=0x9, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x448c5}, 0x80) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mknod$auto(&(0x7f0000000040)='&&\x00', 0xcb, 0x6862) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x22, 0x0, 0x10) utimes$auto(&(0x7f00000000c0)=':,\x00', 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r1) mprotect$auto(0x0, 0x8000000000000001, 0x8) epoll_ctl$auto(r0, 0xffff, r0, &(0x7f0000000740)={0x0, 0xffffffffffffffe0}) ioctl$auto_USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000280)={0x5, 0x488cf785, "b127c01102fb3e49fca2fd9c293fdd0edd0f44cf68cba3d54174e116c7af2d0dc6bd92e1ec24b7a88743d96abfccc0162a96c072d8b790a6933d7be30f337a75b59631ba6a0c6b612307e01817a69f420f53d2891a9e64162532fee68c17fbf0a99f7a141c968bf0277fff2ac299a1fa51e9d21348f4ed82d976b1f86990113e4b79363045acfc63c82e214081826cd8c9f8518c6f3c1758526b7b599f90d1b5c9d654acfd8b44beb6af63c12df2c39eb57b7e22b2a31f699678ad7381ed4350395511693565f751ad19a59c3eb2bbe7641c783fc275f39fb864c5c30ea884e36334000d1519d5c34d36dbb2ba513b8c3887493e"}) 520.416763ms ago: executing program 4 (id=1752): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x810) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000100), r0) sendmsg$auto_KSMBD_EVENT_TREE_DISCONNECT_REQUEST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x40, 0xe}, 0x18) fremovexattr$auto(r5, &(0x7f0000000000)='system.posix_acl_access\x00') r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/id/id\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000001100)=""/4088, 0xff8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r7 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r7, 0xf58, &(0x7f0000000300)="d2d8a92bc6e5fea794d12c195b49c294aed0ce4e6fbd57da273725dd2bca992bbebc5307b62c9af3cea64055ea0c0686d3d0e9509b67ccca5059bec61d9bc38007f8e75b18dd3a482344080e89ae2a01ef2dc1c9084388c5b70171e0f4eb1e8b") r8 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000100)=0x2) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x8e051, r8, 0x41e) 241.896494ms ago: executing program 3 (id=1753): acct$auto(0x0) getsockopt$auto_SO_SNDTIMEO_OLD(0xffffffffffffffff, 0xfffffff2, 0x15, 0x0, 0x0) ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x24048084) 0s ago: executing program 3 (id=1754): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x4, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0) pread64$auto(r2, 0x0, 0x8, 0x10000000000) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x98) r4 = open_by_handle_at$auto(r3, 0x0, 0xc) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) io_uring_enter$auto(0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x0, 0x6) getsockopt$auto_SO_NO_CHECK(r4, 0x8, 0xb, &(0x7f0000000000)='\x00', &(0x7f0000000180)=0xff) madvise$auto(0x4000000000000003, 0x800, 0x15) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x10000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20443, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x181881, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000004c0)={r0, &(0x7f0000000680), 0xfffffffd, &(0x7f0000000300)="ea3bafcf2dd456cf910f0ba1f953f0bb4aae9f9278a6a08a72e0d143a79db047c8ae8e37afb3d08dd39b118a18c451132a63bce6c9ee83f170efaf57bb6d5dade71072d45d6a6a9fe1e6fba3c750ae6a851061d7e4e1a073cec70d10280e07d56b34ba8f0215713d9328940358cea3ffcbeafc0573050b3985ab123ebc16dec0b20da532d3841f330388ffa36713f1c26ec063", 0x9, &(0x7f00000003c0)="2f7a0ffc98dfacf338f3f02276f398216db9a8a12e51c01eeab37f6145f6480dbb5d50ec57ac2ff19343522b4af243db86a33c9f2f2c7f4e2a43d9194d7163943d579409e94b2eaed238ea87e745ad27e7cbe6c159c97937f88d3e28bdd962c2fd64fd30b0f31a7e8bb9d222283ad773b9596c6d447060ee26fa1e8da359d8996db0fa35bddd54c0104001aebf0e2b6ddde2733756cca10b92ab1ab488db305e7274cdc3239326a63926f77b55192d3095bb7f9273d0e7a01a", &(0x7f0000000480)=0x1}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x22002, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x181502, 0x0) r5 = socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(r5, &(0x7f0000000040)=@generic={0x8, "00010100"}, 0x5c) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x7f, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x20, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, 0x1fe, 0x81) kernel console output (not intermixed with test programs): ne+0x1c/0x3d0 [ 566.494315][T12347] __pte_alloc+0x6d/0x3e0 [ 566.494350][T12347] ? __pfx___pte_alloc+0x10/0x10 [ 566.494384][T12347] do_anonymous_page+0x13ae/0x2080 [ 566.494424][T12347] ? __pfx_pgd_none+0x10/0x10 [ 566.494468][T12347] __handle_mm_fault+0x1d2c/0x2a00 [ 566.494511][T12347] ? reacquire_held_locks+0xce/0x1e0 [ 566.494547][T12347] ? __pfx___handle_mm_fault+0x10/0x10 [ 566.494589][T12347] ? lock_vma_under_rcu+0x17c/0x590 [ 566.494641][T12347] handle_mm_fault+0x37b/0xa30 [ 566.494682][T12347] do_user_addr_fault+0x5a3/0x12f0 [ 566.494720][T12347] exc_page_fault+0x6f/0xd0 [ 566.494758][T12347] asm_exc_page_fault+0x26/0x30 [ 566.494781][T12347] RIP: 0033:0x7ff45bf5fd82 [ 566.494801][T12347] Code: 8d 15 c6 09 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 10 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 566.494824][T12347] RSP: 002b:00007ff45ce42d20 EFLAGS: 00010286 [ 566.494842][T12347] RAX: ffffffffffffffff RBX: 00007ff450000000 RCX: 00007ff45bf9dc57 [ 566.494858][T12347] RDX: 00007ff45c050724 RSI: 0000000000021000 RDI: 00007ff450000000 [ 566.494873][T12347] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 566.494887][T12347] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 566.494901][T12347] R13: 0000000000001000 R14: 0000000000000022 R15: 00007ff45c0513fe [ 566.494930][T12347] [ 567.054462][T12347] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 567.635432][T12375] block2mtd: illegal erase size [ 567.762758][T12378] __vm_enough_memory: pid: 12378, comm: syz.1.1295, bytes: 4398046511104 not enough memory for the allocation [ 567.879235][T12378] nbd: must specify a size in bytes for the device [ 568.332367][T12381] FAULT_INJECTION: forcing a failure. [ 568.332367][T12381] name failslab, interval 1, probability 0, space 0, times 0 [ 568.481460][T12381] CPU: 0 UID: 0 PID: 12381 Comm: syz.2.1297 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.481498][T12381] Tainted: [L]=SOFTLOCKUP [ 568.481506][T12381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 568.481520][T12381] Call Trace: [ 568.481527][T12381] [ 568.481536][T12381] dump_stack_lvl+0x100/0x190 [ 568.481567][T12381] should_fail_ex.cold+0x5/0xa [ 568.481594][T12381] should_failslab+0xc2/0x120 [ 568.481624][T12381] kmem_cache_alloc_noprof+0x91/0x6a0 [ 568.481652][T12381] ? __anon_vma_prepare+0xae/0x5e0 [ 568.481693][T12381] __anon_vma_prepare+0xae/0x5e0 [ 568.481733][T12381] madvise_guard_install+0x610/0x790 [ 568.481764][T12381] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 568.481801][T12381] ? __pfx_madvise_guard_install+0x10/0x10 [ 568.481833][T12381] ? rcu_is_watching+0x12/0xc0 [ 568.481860][T12381] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 568.481891][T12381] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 568.481922][T12381] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 568.481958][T12381] ? __pfx_guard_install_set_pte+0x10/0x10 [ 568.481991][T12381] ? mtree_range_walk+0x72b/0xb70 [ 568.482032][T12381] madvise_vma_behavior+0xb9b/0x2240 [ 568.482070][T12381] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 568.482113][T12381] ? find_vma_prev+0xd8/0x150 [ 568.482141][T12381] ? lock_vma_under_rcu+0x1f9/0x590 [ 568.482190][T12381] ? __pfx_find_vma_prev+0x10/0x10 [ 568.482224][T12381] ? find_held_lock+0x2b/0x80 [ 568.482256][T12381] ? madvise_do_behavior+0x1ea/0x510 [ 568.482289][T12381] ? madvise_do_behavior+0x1ea/0x510 [ 568.482324][T12381] madvise_walk_vmas+0x2fe/0xa90 [ 568.482360][T12381] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 568.482392][T12381] ? __pfx_futex_hash+0x10/0x10 [ 568.482424][T12381] ? userfaultfd_unmap_complete+0x267/0x380 [ 568.482464][T12381] madvise_do_behavior+0x1ea/0x510 [ 568.482498][T12381] ? __pfx_madvise_do_behavior+0x10/0x10 [ 568.482531][T12381] ? __pfx_futex_wait+0x10/0x10 [ 568.482562][T12381] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 568.482596][T12381] do_madvise+0x238/0x290 [ 568.482636][T12381] ? __pfx_do_madvise+0x10/0x10 [ 568.482664][T12381] ? do_futex+0x190/0x440 [ 568.482725][T12381] __x64_sys_madvise+0xa9/0x110 [ 568.482756][T12381] ? lockdep_hardirqs_on+0x78/0x100 [ 568.482791][T12381] do_syscall_64+0x115/0x840 [ 568.482809][T12381] ? clear_bhb_loop+0x40/0x90 [ 568.482836][T12381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.482868][T12381] RIP: 0033:0x7ff45bf9de59 [ 568.482885][T12381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.482905][T12381] RSP: 002b:00007ff45ce44028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 568.482925][T12381] RAX: ffffffffffffffda RBX: 00007ff45c225fa0 RCX: 00007ff45bf9de59 [ 568.482939][T12381] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 568.482969][T12381] RBP: 00007ff45c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 568.482983][T12381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.482996][T12381] R13: 00007ff45c226038 R14: 00007ff45c225fa0 R15: 00007ffdee25bbd8 [ 568.483024][T12381] [ 569.267017][T12392] NFSD: Failed to start, no listeners configured. [ 569.720359][T12400] zswap: compressor û not available [ 569.726131][T12404] block2mtd: illegal erase size [ 569.749004][T12407] NFSD: Failed to start, no listeners configured. [ 570.126666][T12418] __vm_enough_memory: pid: 12418, comm: syz.1.1305, bytes: 4398046511104 not enough memory for the allocation [ 570.229207][T12418] nbd: must specify a size in bytes for the device [ 570.365437][T12412] zswap: compressor û not available [ 570.393267][T12419] block2mtd: illegal erase size [ 570.472505][T12429] overlayfs: "check_copy_up" module option is obsolete [ 572.365732][T12441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.543902][T12440] random: crng reseeded on system resumption [ 572.862737][T12466] NFSD: Failed to start, no listeners configured. [ 573.012023][T12468] NFSD: Failed to start, no listeners configured. [ 573.661244][T12489] __vm_enough_memory: pid: 12489, comm: syz.0.1320, bytes: 4398046511104 not enough memory for the allocation [ 573.729050][T12489] nbd: must specify a size in bytes for the device [ 573.802480][ T30] audit: type=1804 audit(825700992.280:19): pid=12492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1319" name="/newroot/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger" dev="tracefs" ino=19680823 res=1 errno=0 [ 574.075506][T12497] __vm_enough_memory: pid: 12497, comm: syz.3.1321, bytes: 4398046511104 not enough memory for the allocation [ 574.151077][T12497] nbd: must specify a size in bytes for the device [ 574.822008][T12499] FAULT_INJECTION: forcing a failure. [ 574.822008][T12499] name failslab, interval 1, probability 0, space 0, times 0 [ 575.007424][T12499] CPU: 0 UID: 0 PID: 12499 Comm: syz.1.1318 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.007462][T12499] Tainted: [L]=SOFTLOCKUP [ 575.007471][T12499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 575.007485][T12499] Call Trace: [ 575.007493][T12499] [ 575.007501][T12499] dump_stack_lvl+0x100/0x190 [ 575.007537][T12499] should_fail_ex.cold+0x5/0xa [ 575.007563][T12499] should_failslab+0xc2/0x120 [ 575.007594][T12499] __kmalloc_cache_noprof+0x91/0x6c0 [ 575.007633][T12499] ? do_raw_spin_lock+0x128/0x260 [ 575.007655][T12499] ? alloc_fdtable+0xbd/0x2d0 [ 575.007694][T12499] alloc_fdtable+0xbd/0x2d0 [ 575.007729][T12499] dup_fd+0x995/0xd10 [ 575.007768][T12499] ? apparmor_task_alloc+0x2c1/0x3b0 [ 575.007809][T12499] copy_process+0x2c94/0x8030 [ 575.007849][T12499] ? __pfx_copy_process+0x10/0x10 [ 575.007876][T12499] ? futex_wake+0x4ea/0x5e0 [ 575.007913][T12499] kernel_clone+0x176/0x9d0 [ 575.007941][T12499] ? __pfx_kernel_clone+0x10/0x10 [ 575.007982][T12499] __do_sys_clone+0xd9/0x120 [ 575.008007][T12499] ? __pfx___do_sys_clone+0x10/0x10 [ 575.008033][T12499] ? do_raw_spin_lock+0x128/0x260 [ 575.008077][T12499] do_syscall_64+0x115/0x840 [ 575.008098][T12499] ? clear_bhb_loop+0x40/0x90 [ 575.008126][T12499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.008150][T12499] RIP: 0033:0x7fd35c99de59 [ 575.008168][T12499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.008191][T12499] RSP: 002b:00007fd35abb3fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 575.008213][T12499] RAX: ffffffffffffffda RBX: 00007fd35cc26180 RCX: 00007fd35c99de59 [ 575.008228][T12499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.008242][T12499] RBP: 00007fd35ca33e6f R08: 0000000000000000 R09: 0000000000000000 [ 575.008256][T12499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.008269][T12499] R13: 00007fd35cc26218 R14: 00007fd35cc26180 R15: 00007fff86487668 [ 575.008310][T12499] [ 575.453751][T12490] random: crng reseeded on system resumption [ 575.613286][T12506] FAULT_INJECTION: forcing a failure. [ 575.613286][T12506] name failslab, interval 1, probability 0, space 0, times 0 [ 575.627849][T12506] CPU: 0 UID: 0 PID: 12506 Comm: syz.2.1322 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.627881][T12506] Tainted: [L]=SOFTLOCKUP [ 575.627889][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 575.627901][T12506] Call Trace: [ 575.627908][T12506] [ 575.627915][T12506] dump_stack_lvl+0x100/0x190 [ 575.627942][T12506] should_fail_ex.cold+0x5/0xa [ 575.627966][T12506] should_failslab+0xc2/0x120 [ 575.627993][T12506] kmem_cache_alloc_noprof+0x91/0x6a0 [ 575.628018][T12506] ? __anon_vma_prepare+0xae/0x5e0 [ 575.628080][T12506] __anon_vma_prepare+0xae/0x5e0 [ 575.628113][T12506] ? do_raw_spin_lock+0x128/0x260 [ 575.628138][T12506] __vmf_anon_prepare+0x11f/0x250 [ 575.628169][T12506] do_huge_pmd_anonymous_page+0x160/0x1530 [ 575.628193][T12506] ? _raw_spin_unlock+0x28/0x50 [ 575.628223][T12506] ? __pmd_alloc+0x3fb/0x950 [ 575.628254][T12506] __handle_mm_fault+0x239e/0x2a00 [ 575.628314][T12506] ? mt_find+0x45e/0x8e0 [ 575.628405][T12506] ? __pfx___handle_mm_fault+0x10/0x10 [ 575.628449][T12506] ? __pfx_mt_find+0x10/0x10 [ 575.628497][T12506] handle_mm_fault+0x37b/0xa30 [ 575.628539][T12506] __get_user_pages+0x1178/0x32a0 [ 575.628581][T12506] ? __pfx___get_user_pages+0x10/0x10 [ 575.628619][T12506] populate_vma_page_range+0x267/0x3f0 [ 575.628654][T12506] ? __pfx_populate_vma_page_range+0x10/0x10 [ 575.628686][T12506] ? __pfx_find_vma_intersection+0x10/0x10 [ 575.628717][T12506] ? do_mmap+0x93f/0x12f0 [ 575.628755][T12506] __mm_populate+0x107/0x3a0 [ 575.628788][T12506] ? __pfx___mm_populate+0x10/0x10 [ 575.628825][T12506] ? up_write+0x2e5/0x5c0 [ 575.628849][T12506] vm_mmap_pgoff+0x37f/0x470 [ 575.628882][T12506] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 575.628916][T12506] ? __pfx_do_futex+0x10/0x10 [ 575.628937][T12506] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.628971][T12506] ksys_mmap_pgoff+0xe4/0x610 [ 575.629000][T12506] ? __x64_sys_futex+0x358/0x4d0 [ 575.629025][T12506] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 575.629054][T12506] ? xfd_validate_state+0x129/0x190 [ 575.629091][T12506] __x64_sys_mmap+0x125/0x190 [ 575.629122][T12506] do_syscall_64+0x115/0x840 [ 575.629142][T12506] ? clear_bhb_loop+0x40/0x90 [ 575.629170][T12506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.629195][T12506] RIP: 0033:0x7ff45bf9de59 [ 575.629215][T12506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.629237][T12506] RSP: 002b:00007ff45ce02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 575.629260][T12506] RAX: ffffffffffffffda RBX: 00007ff45c226180 RCX: 00007ff45bf9de59 [ 575.629276][T12506] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 575.629290][T12506] RBP: 00007ff45c033e6f R08: 0000000000000002 R09: 8000000000008000 [ 575.629305][T12506] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 575.629318][T12506] R13: 00007ff45c226218 R14: 00007ff45c226180 R15: 00007ffdee25bbd8 [ 575.629348][T12506] [ 576.671661][T12515] FAULT_INJECTION: forcing a failure. [ 576.671661][T12515] name fail_futex, interval 1, probability 0, space 0, times 0 [ 576.797158][T12515] CPU: 0 UID: 0 PID: 12515 Comm: syz.0.1324 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.797205][T12515] Tainted: [L]=SOFTLOCKUP [ 576.797218][T12515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 576.797232][T12515] Call Trace: [ 576.797240][T12515] [ 576.797249][T12515] dump_stack_lvl+0x100/0x190 [ 576.797279][T12515] should_fail_ex.cold+0x5/0xa [ 576.797305][T12515] get_futex_key+0x1d2/0x14f0 [ 576.797352][T12515] ? __pfx_get_futex_key+0x10/0x10 [ 576.797388][T12515] ? look_up_lock_class+0x64/0x120 [ 576.797429][T12515] ? register_lock_class+0x40/0x560 [ 576.797470][T12515] futex_wake+0xf4/0x5e0 [ 576.797501][T12515] ? __pfx_futex_wake+0x10/0x10 [ 576.797529][T12515] ? rcu_is_watching+0x12/0xc0 [ 576.797559][T12515] ? do_raw_spin_lock+0x128/0x260 [ 576.797588][T12515] do_futex+0x2b2/0x440 [ 576.797612][T12515] ? __pfx_do_futex+0x10/0x10 [ 576.797634][T12515] ? _raw_spin_unlock+0x28/0x50 [ 576.797666][T12515] ? do_set_mempolicy+0x217/0x3d0 [ 576.797697][T12515] ? __pfx_do_set_mempolicy+0x10/0x10 [ 576.797731][T12515] __x64_sys_futex+0x34f/0x4d0 [ 576.797758][T12515] ? __pfx___x64_sys_futex+0x10/0x10 [ 576.797782][T12515] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 576.797822][T12515] do_syscall_64+0x115/0x840 [ 576.797843][T12515] ? clear_bhb_loop+0x40/0x90 [ 576.797871][T12515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.797895][T12515] RIP: 0033:0x7fddba99de59 [ 576.797914][T12515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.797937][T12515] RSP: 002b:00007fddbb91e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 576.797959][T12515] RAX: ffffffffffffffda RBX: 00007fddbac26098 RCX: 00007fddba99de59 [ 576.797974][T12515] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fddbac2609c [ 576.797988][T12515] RBP: 00007fddbac26090 R08: 0000000000000001 R09: 0000000000000000 [ 576.798002][T12515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.798016][T12515] R13: 00007fddbac26128 R14: 00007ffef3fcfd50 R15: 00007ffef3fcfe38 [ 576.798044][T12515] [ 577.505885][T12514] random: crng reseeded on system resumption [ 577.528814][T12524] openvswitch: netlink: Multiple metadata blocks provided [ 577.678986][T12503] random: crng reseeded on system resumption [ 578.863776][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 581.827217][T12580] __vm_enough_memory: pid: 12580, comm: syz.0.1338, bytes: 4398046511104 not enough memory for the allocation [ 581.902336][T12580] nbd: must specify a size in bytes for the device [ 582.189702][T12582] zswap: compressor û not available [ 582.215391][T12585] block2mtd: illegal erase size [ 582.464640][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'. [ 582.688475][ T5940] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 582.895417][T12598] input: f¬ as /devices/virtual/input/input38 [ 584.160288][ T30] audit: type=1326 audit(825701002.645:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12610 comm="syz.1.1345" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd35c99de59 code=0x0 [ 584.606857][T12602] Process accounting paused [ 585.222508][T12633] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1349'. [ 585.386620][T12627] can: request_module (can-proto-5) failed. [ 586.091200][T12642] zswap: compressor û not available [ 586.111373][T12646] block2mtd: illegal erase size [ 588.167529][T12625] random: crng reseeded on system resumption [ 588.612611][T12681] NFSD: Failed to start, no listeners configured. [ 589.391626][T12692] __vm_enough_memory: pid: 12692, comm: syz.3.1359, bytes: 4398046511104 not enough memory for the allocation [ 589.664452][T12692] nbd: must specify a size in bytes for the device [ 589.763739][T12699] NFSD: Failed to start, no listeners configured. [ 590.227945][T12707] __vm_enough_memory: pid: 12707, comm: syz.0.1363, bytes: 4398046511104 not enough memory for the allocation [ 590.256683][T12704] NFSD: Failed to start, no listeners configured. [ 590.298644][T12707] nbd: must specify a size in bytes for the device [ 591.629263][T12727] random: crng reseeded on system resumption [ 592.524180][ T5940] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 593.081524][T12749] random: crng reseeded on system resumption [ 594.097029][T12751] Process accounting resumed [ 594.297104][T12768] FAULT_INJECTION: forcing a failure. [ 594.297104][T12768] name failslab, interval 1, probability 0, space 0, times 0 [ 594.351975][T12768] CPU: 0 UID: 0 PID: 12768 Comm: syz.1.1374 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.352018][T12768] Tainted: [L]=SOFTLOCKUP [ 594.352025][T12768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 594.352039][T12768] Call Trace: [ 594.352045][T12768] [ 594.352053][T12768] dump_stack_lvl+0x100/0x190 [ 594.352083][T12768] should_fail_ex.cold+0x5/0xa [ 594.352108][T12768] should_failslab+0xc2/0x120 [ 594.352136][T12768] kmem_cache_alloc_noprof+0x91/0x6a0 [ 594.352163][T12768] ? __pmd_alloc+0xbf/0x950 [ 594.352196][T12768] __pmd_alloc+0xbf/0x950 [ 594.352228][T12768] __handle_mm_fault+0xa9c/0x2a00 [ 594.352266][T12768] ? mt_find+0x45e/0x8e0 [ 594.352291][T12768] ? __pfx___handle_mm_fault+0x10/0x10 [ 594.352324][T12768] ? __pfx_mt_find+0x10/0x10 [ 594.352368][T12768] handle_mm_fault+0x37b/0xa30 [ 594.352408][T12768] __get_user_pages+0x1178/0x32a0 [ 594.352447][T12768] ? __pfx___get_user_pages+0x10/0x10 [ 594.352482][T12768] populate_vma_page_range+0x267/0x3f0 [ 594.352515][T12768] ? __pfx_populate_vma_page_range+0x10/0x10 [ 594.352545][T12768] ? __pfx_find_vma_intersection+0x10/0x10 [ 594.352574][T12768] ? do_mmap+0x93f/0x12f0 [ 594.352604][T12768] __mm_populate+0x107/0x3a0 [ 594.352636][T12768] ? __pfx___mm_populate+0x10/0x10 [ 594.352668][T12768] ? up_write+0x2e5/0x5c0 [ 594.352691][T12768] vm_mmap_pgoff+0x37f/0x470 [ 594.352722][T12768] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 594.352754][T12768] ? __pfx_do_futex+0x10/0x10 [ 594.352781][T12768] ksys_mmap_pgoff+0xe4/0x610 [ 594.352809][T12768] ? __x64_sys_futex+0x358/0x4d0 [ 594.352831][T12768] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 594.352859][T12768] ? xfd_validate_state+0x129/0x190 [ 594.352887][T12768] __x64_sys_mmap+0x125/0x190 [ 594.352914][T12768] do_syscall_64+0x115/0x840 [ 594.352942][T12768] ? clear_bhb_loop+0x40/0x90 [ 594.352969][T12768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.352991][T12768] RIP: 0033:0x7fd35c99de59 [ 594.353009][T12768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.353048][T12768] RSP: 002b:00007fd35abf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 594.353069][T12768] RAX: ffffffffffffffda RBX: 00007fd35cc25fa0 RCX: 00007fd35c99de59 [ 594.353085][T12768] RDX: 00000000000000df RSI: 0000000000000009 RDI: 0000000000000000 [ 594.353112][T12768] RBP: 00007fd35ca33e6f R08: 0000000000000000 R09: 0000000000008000 [ 594.353125][T12768] R10: 0000008000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 594.353139][T12768] R13: 00007fd35cc26038 R14: 00007fd35cc25fa0 R15: 00007fff86487668 [ 594.353166][T12768] [ 595.530562][T12768] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1374'. [ 596.203268][ T5940] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 596.406895][T12753] Process accounting resumed [ 597.008181][T12789] KVM: debugfs: duplicate directory 12789-3 [ 599.515999][T12822] FAULT_INJECTION: forcing a failure. [ 599.515999][T12822] name failslab, interval 1, probability 0, space 0, times 0 [ 599.579762][T12822] CPU: 0 UID: 0 PID: 12822 Comm: syz.2.1385 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.579802][T12822] Tainted: [L]=SOFTLOCKUP [ 599.579810][T12822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 599.579826][T12822] Call Trace: [ 599.579835][T12822] [ 599.579845][T12822] dump_stack_lvl+0x100/0x190 [ 599.579889][T12822] should_fail_ex.cold+0x5/0xa [ 599.579919][T12822] should_failslab+0xc2/0x120 [ 599.579950][T12822] __kmalloc_cache_noprof+0x91/0x6c0 [ 599.579990][T12822] ? proc_self_get_link+0x189/0x1f0 [ 599.580092][T12822] proc_self_get_link+0x189/0x1f0 [ 599.580126][T12822] pick_link+0xac2/0x13c0 [ 599.580157][T12822] ? __pfx_proc_self_get_link+0x10/0x10 [ 599.580195][T12822] step_into_slowpath+0x9ba/0xf90 [ 599.580233][T12822] ? __pfx_step_into_slowpath+0x10/0x10 [ 599.580270][T12822] ? lookup_fast+0x2da/0x600 [ 599.580298][T12822] ? inode_permission+0x374/0x620 [ 599.580329][T12822] link_path_walk+0xf28/0x1cc0 [ 599.580374][T12822] path_openat+0x1c9/0x4280 [ 599.580409][T12822] ? __kasan_slab_alloc+0x89/0x90 [ 599.580443][T12822] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 599.580468][T12822] ? do_getname+0x35/0x390 [ 599.580493][T12822] ? __x64_sys_openat+0x12d/0x210 [ 599.580532][T12822] ? __pfx_path_openat+0x10/0x10 [ 599.580577][T12822] do_file_open+0x20e/0x430 [ 599.580616][T12822] ? __pfx_do_file_open+0x10/0x10 [ 599.580672][T12822] ? alloc_fd+0x471/0x7a0 [ 599.580711][T12822] ? do_getname+0x191/0x390 [ 599.580739][T12822] do_sys_openat2+0x10f/0x1e0 [ 599.580767][T12822] ? __pfx_do_sys_openat2+0x10/0x10 [ 599.580797][T12822] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 599.580846][T12822] __x64_sys_openat+0x12d/0x210 [ 599.580875][T12822] ? __pfx___x64_sys_openat+0x10/0x10 [ 599.580915][T12822] do_syscall_64+0x115/0x840 [ 599.580936][T12822] ? clear_bhb_loop+0x40/0x90 [ 599.580964][T12822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.580988][T12822] RIP: 0033:0x7ff45bf9de59 [ 599.581007][T12822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.581030][T12822] RSP: 002b:00007ff45ce23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 599.581053][T12822] RAX: ffffffffffffffda RBX: 00007ff45c226090 RCX: 00007ff45bf9de59 [ 599.581069][T12822] RDX: 0000000000000401 RSI: 0000200000001640 RDI: ffffffffffffff9c [ 599.581084][T12822] RBP: 00007ff45c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 599.581098][T12822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.581112][T12822] R13: 00007ff45c226128 R14: 00007ff45c226090 R15: 00007ffdee25bbd8 [ 599.581143][T12822] [ 600.217031][T12824] random: crng reseeded on system resumption [ 600.544482][T12821] random: crng reseeded on system resumption [ 600.735004][T12836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1387'. [ 600.864306][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'. [ 601.124003][T12844] zswap: compressor û not available [ 601.758847][T12852] random: crng reseeded on system resumption [ 602.682252][T12869] input: f¬ as /devices/virtual/input/input39 [ 603.669833][T12879] FAULT_INJECTION: forcing a failure. [ 603.669833][T12879] name failslab, interval 1, probability 0, space 0, times 0 [ 603.748662][T12879] CPU: 0 UID: 0 PID: 12879 Comm: syz.3.1396 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.748700][T12879] Tainted: [L]=SOFTLOCKUP [ 603.748709][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 603.748723][T12879] Call Trace: [ 603.748730][T12879] [ 603.748739][T12879] dump_stack_lvl+0x100/0x190 [ 603.748771][T12879] should_fail_ex.cold+0x5/0xa [ 603.748797][T12879] should_failslab+0xc2/0x120 [ 603.748828][T12879] __kmalloc_cache_noprof+0x91/0x6c0 [ 603.748868][T12879] ? proc_self_get_link+0x189/0x1f0 [ 603.748912][T12879] proc_self_get_link+0x189/0x1f0 [ 603.748947][T12879] pick_link+0xac2/0x13c0 [ 603.748978][T12879] ? __pfx_proc_self_get_link+0x10/0x10 [ 603.749015][T12879] step_into_slowpath+0x9ba/0xf90 [ 603.749053][T12879] ? __pfx_step_into_slowpath+0x10/0x10 [ 603.749090][T12879] ? lookup_fast+0x2da/0x600 [ 603.749118][T12879] ? inode_permission+0x374/0x620 [ 603.749149][T12879] link_path_walk+0xf28/0x1cc0 [ 603.749192][T12879] path_openat+0x1c9/0x4280 [ 603.749227][T12879] ? __kasan_slab_alloc+0x89/0x90 [ 603.749257][T12879] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 603.749282][T12879] ? do_getname+0x35/0x390 [ 603.749308][T12879] ? __x64_sys_openat+0x12d/0x210 [ 603.749345][T12879] ? __pfx_path_openat+0x10/0x10 [ 603.749398][T12879] do_file_open+0x20e/0x430 [ 603.749438][T12879] ? __pfx_do_file_open+0x10/0x10 [ 603.749496][T12879] ? alloc_fd+0x471/0x7a0 [ 603.749535][T12879] ? do_getname+0x191/0x390 [ 603.749565][T12879] do_sys_openat2+0x10f/0x1e0 [ 603.749593][T12879] ? __pfx_do_sys_openat2+0x10/0x10 [ 603.749623][T12879] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 603.749671][T12879] __x64_sys_openat+0x12d/0x210 [ 603.749701][T12879] ? __pfx___x64_sys_openat+0x10/0x10 [ 603.749741][T12879] do_syscall_64+0x115/0x840 [ 603.749761][T12879] ? clear_bhb_loop+0x40/0x90 [ 603.749790][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.749814][T12879] RIP: 0033:0x7f570ab9de59 [ 603.749833][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.749856][T12879] RSP: 002b:00007f570ba9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 603.749879][T12879] RAX: ffffffffffffffda RBX: 00007f570ae26090 RCX: 00007f570ab9de59 [ 603.749895][T12879] RDX: 0000000000000401 RSI: 0000200000001640 RDI: ffffffffffffff9c [ 603.749916][T12879] RBP: 00007f570ac33e6f R08: 0000000000000000 R09: 0000000000000000 [ 603.749931][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.749945][T12879] R13: 00007f570ae26128 R14: 00007f570ae26090 R15: 00007fff51d36628 [ 603.749975][T12879] [ 604.445395][T12879] random: crng reseeded on system resumption [ 605.249987][T12894] zswap: compressor û not available [ 605.259900][T12898] block2mtd: illegal erase size [ 605.820996][T12910] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1402'. [ 606.982022][T12926] Invalid ELF header magic: != ELF [ 608.427862][T12940] vivid-008: ================= START STATUS ================= [ 608.463197][T12940] vivid-008: ================== END STATUS ================== [ 608.924501][T12951] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 609.505475][T12956] random: crng reseeded on system resumption [ 611.675102][T11647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 611.690545][T11647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 611.698669][T11647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 611.710171][T11647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 611.721910][T11647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 612.335520][ T5940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 612.348267][ T5940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 612.360321][ T5940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 612.368677][ T5940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 612.389653][ T5940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 613.798601][T11647] Bluetooth: hci4: command tx timeout [ 614.103993][T13021] FAULT_INJECTION: forcing a failure. [ 614.103993][T13021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 614.279892][T13015] random: crng reseeded on system resumption [ 614.305327][T13021] CPU: 0 UID: 0 PID: 13021 Comm: syz.3.1419 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.305365][T13021] Tainted: [L]=SOFTLOCKUP [ 614.305374][T13021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 614.305388][T13021] Call Trace: [ 614.305396][T13021] [ 614.305405][T13021] dump_stack_lvl+0x100/0x190 [ 614.305435][T13021] should_fail_ex.cold+0x5/0xa [ 614.305457][T13021] ? prepare_alloc_pages+0x16d/0x5f0 [ 614.305491][T13021] should_fail_alloc_page+0xeb/0x140 [ 614.305523][T13021] prepare_alloc_pages+0x1f0/0x5f0 [ 614.305559][T13021] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 614.305594][T13021] ? rcu_is_watching+0x12/0xc0 [ 614.305620][T13021] ? trace_mm_page_alloc+0x164/0x1c0 [ 614.305672][T13021] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 614.305701][T13021] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 614.305729][T13021] ? stack_trace_save+0x8e/0xc0 [ 614.305761][T13021] ? __pfx_stack_trace_save+0x10/0x10 [ 614.305792][T13021] ? stack_depot_save_flags+0x27/0x9d0 [ 614.305827][T13021] ? is_bpf_text_address+0x94/0x1a0 [ 614.305860][T13021] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 614.305890][T13021] ? __kasan_slab_alloc+0x89/0x90 [ 614.305918][T13021] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 614.305944][T13021] ? alloc_vmap_area+0x182f/0x2bb0 [ 614.305978][T13021] ? __get_vm_area_node+0x1ca/0x330 [ 614.306008][T13021] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 614.306042][T13021] ? __vmalloc_node_noprof+0xad/0xf0 [ 614.306074][T13021] ? copy_process+0x7fb/0x8030 [ 614.306099][T13021] ? kernel_clone+0x176/0x9d0 [ 614.306123][T13021] ? __do_sys_clone+0xd9/0x120 [ 614.306147][T13021] ? do_syscall_64+0x115/0x840 [ 614.306168][T13021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.306202][T13021] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 614.306233][T13021] ? policy_nodemask+0xed/0x4f0 [ 614.306267][T13021] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 614.306309][T13021] __kasan_populate_vmalloc+0xf0/0x210 [ 614.306341][T13021] alloc_vmap_area+0x95d/0x2bb0 [ 614.306378][T13021] ? kasan_save_track+0x14/0x30 [ 614.306405][T13021] ? __kasan_kmalloc+0xaa/0xb0 [ 614.306431][T13021] ? __pfx_alloc_vmap_area+0x10/0x10 [ 614.306462][T13021] ? __get_vm_area_node+0x101/0x330 [ 614.306497][T13021] __get_vm_area_node+0x1ca/0x330 [ 614.306534][T13021] __vmalloc_node_range_noprof+0x228/0x1630 [ 614.306570][T13021] ? kernel_clone+0x176/0x9d0 [ 614.306594][T13021] ? find_held_lock+0x2b/0x80 [ 614.306629][T13021] ? kernel_clone+0x176/0x9d0 [ 614.306660][T13021] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 614.306697][T13021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 614.306747][T13021] ? trace_kmem_cache_alloc+0xdd/0x100 [ 614.306782][T13021] ? kernel_clone+0x176/0x9d0 [ 614.306807][T13021] __vmalloc_node_noprof+0xad/0xf0 [ 614.306853][T13021] ? kernel_clone+0x176/0x9d0 [ 614.306881][T13021] copy_process+0x7fb/0x8030 [ 614.306909][T13021] ? __pfx___futex_wait+0x10/0x10 [ 614.306935][T13021] ? __pfx_try_to_wake_up+0x10/0x10 [ 614.306962][T13021] ? futex_hash+0x311/0x400 [ 614.307006][T13021] ? __pfx_copy_process+0x10/0x10 [ 614.307032][T13021] ? futex_wake+0x4ea/0x5e0 [ 614.307069][T13021] kernel_clone+0x176/0x9d0 [ 614.307097][T13021] ? __pfx_kernel_clone+0x10/0x10 [ 614.307137][T13021] __do_sys_clone+0xd9/0x120 [ 614.307163][T13021] ? __pfx___do_sys_clone+0x10/0x10 [ 614.307188][T13021] ? do_raw_spin_lock+0x128/0x260 [ 614.307232][T13021] do_syscall_64+0x115/0x840 [ 614.307252][T13021] ? clear_bhb_loop+0x40/0x90 [ 614.307280][T13021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.307304][T13021] RIP: 0033:0x7f570ab9de59 [ 614.307324][T13021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.307346][T13021] RSP: 002b:00007f570ba7afd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 614.307368][T13021] RAX: ffffffffffffffda RBX: 00007f570ae26180 RCX: 00007f570ab9de59 [ 614.307384][T13021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 614.307397][T13021] RBP: 00007f570ac33e6f R08: 0000000000000000 R09: 0000000000000000 [ 614.307411][T13021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.307425][T13021] R13: 00007f570ae26218 R14: 00007f570ae26180 R15: 00007fff51d36628 [ 614.307454][T13021] [ 614.962099][T11647] Bluetooth: hci5: command tx timeout [ 615.163929][T13024] Process accounting resumed [ 615.333356][T12986] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.346439][T12986] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.372618][T12986] bridge_slave_0: entered allmulticast mode [ 615.459492][T12986] bridge_slave_0: entered promiscuous mode [ 615.780541][T13021] syz.3.1419: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 615.796484][T13021] CPU: 0 UID: 0 PID: 13021 Comm: syz.3.1419 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.796520][T13021] Tainted: [L]=SOFTLOCKUP [ 615.796529][T13021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 615.796543][T13021] Call Trace: [ 615.796551][T13021] [ 615.796559][T13021] dump_stack_lvl+0x100/0x190 [ 615.796591][T13021] warn_alloc.cold+0x94/0xa8 [ 615.796616][T13021] ? __pfx_warn_alloc+0x10/0x10 [ 615.796638][T13021] ? lockdep_hardirqs_on+0x78/0x100 [ 615.796681][T13021] ? __get_vm_area_node+0x2cd/0x330 [ 615.796719][T13021] ? __get_vm_area_node+0x208/0x330 [ 615.796756][T13021] __vmalloc_node_range_noprof+0xccd/0x1630 [ 615.796790][T13021] ? find_held_lock+0x2b/0x80 [ 615.796837][T13021] ? kernel_clone+0x176/0x9d0 [ 615.796880][T13021] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 615.796913][T13021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 615.796951][T13021] ? trace_kmem_cache_alloc+0xdd/0x100 [ 615.796993][T13021] ? kernel_clone+0x176/0x9d0 [ 615.797016][T13021] __vmalloc_node_noprof+0xad/0xf0 [ 615.797047][T13021] ? kernel_clone+0x176/0x9d0 [ 615.797079][T13021] copy_process+0x7fb/0x8030 [ 615.797124][T13021] ? __pfx___futex_wait+0x10/0x10 [ 615.797152][T13021] ? __pfx_try_to_wake_up+0x10/0x10 [ 615.797173][T13021] ? futex_hash+0x311/0x400 [ 615.797218][T13021] ? __pfx_copy_process+0x10/0x10 [ 615.797250][T13021] ? futex_wake+0x4ea/0x5e0 [ 615.797288][T13021] kernel_clone+0x176/0x9d0 [ 615.797315][T13021] ? __pfx_kernel_clone+0x10/0x10 [ 615.797357][T13021] __do_sys_clone+0xd9/0x120 [ 615.797384][T13021] ? __pfx___do_sys_clone+0x10/0x10 [ 615.797410][T13021] ? do_raw_spin_lock+0x128/0x260 [ 615.797455][T13021] do_syscall_64+0x115/0x840 [ 615.797476][T13021] ? clear_bhb_loop+0x40/0x90 [ 615.797505][T13021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.797529][T13021] RIP: 0033:0x7f570ab9de59 [ 615.797549][T13021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.797572][T13021] RSP: 002b:00007f570ba7afd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 615.797594][T13021] RAX: ffffffffffffffda RBX: 00007f570ae26180 RCX: 00007f570ab9de59 [ 615.797610][T13021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 615.797624][T13021] RBP: 00007f570ac33e6f R08: 0000000000000000 R09: 0000000000000000 [ 615.797638][T13021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.797652][T13021] R13: 00007f570ae26218 R14: 00007f570ae26180 R15: 00007fff51d36628 [ 615.797682][T13021] [ 616.059809][T11647] Bluetooth: hci4: command tx timeout [ 616.086487][T12986] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.093880][T12986] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.101454][T12986] bridge_slave_1: entered allmulticast mode [ 616.108998][T12986] bridge_slave_1: entered promiscuous mode [ 616.144682][T12986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.156596][T12986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.194772][T12986] team0: Port device team_slave_0 added [ 616.204593][T12986] team0: Port device team_slave_1 added [ 616.231353][T12986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.238648][T12986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.266119][T12986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.279815][T12986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.286835][T12986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.316120][T12986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.350838][T13021] Mem-Info: [ 616.371558][T13021] active_anon:20337 inactive_anon:9 isolated_anon:0 [ 616.371558][T13021] active_file:54 inactive_file:59742 isolated_file:0 [ 616.371558][T13021] unevictable:768 dirty:757 writeback:0 [ 616.371558][T13021] slab_reclaimable:12052 slab_unreclaimable:93612 [ 616.371558][T13021] mapped:36847 shmem:1288 pagetables:1264 [ 616.371558][T13021] sec_pagetables:0 bounce:0 [ 616.371558][T13021] kernel_misc_reclaimable:0 [ 616.371558][T13021] free:1016114 free_pcp:8758 free_cma:0 [ 616.544442][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1423'. [ 616.627549][T13021] Node 0 active_anon:83360kB inactive_anon:36kB active_file:216kB inactive_file:237736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147388kB dirty:3020kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:57344kB kernel_stack:12480kB pagetables:4904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 616.814369][T13021] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 616.851989][T12986] hsr_slave_0: entered promiscuous mode [ 616.875707][T12986] hsr_slave_1: entered promiscuous mode [ 616.906273][T12986] debugfs: 'hsr0' already exists in 'hsr' [ 616.930608][T12986] Cannot create hsr debugfs directory [ 616.957690][T12997] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.975181][T13021] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 617.009757][T12997] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.019719][T11647] Bluetooth: hci5: command tx timeout [ 617.039174][T12997] bridge_slave_0: entered allmulticast mode [ 617.067844][T12997] bridge_slave_0: entered promiscuous mode [ 617.106878][T13021] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 617.129433][T13021] Node 0 DMA32 free:1160344kB boost:0kB min:34268kB low:42832kB high:51396kB reserved_highatomic:0KB free_highatomic:0KB active_anon:83944kB inactive_anon:20kB active_file:216kB inactive_file:237736kB unevictable:1536kB writepending:3024kB zspages:0kB present:3129332kB managed:2532568kB mlocked:0kB bounce:0kB free_pcp:30900kB local_pcp:30900kB free_cma:0kB [ 617.186252][T12997] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.223975][T12997] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.255816][T12997] bridge_slave_1: entered allmulticast mode [ 617.288659][T12997] bridge_slave_1: entered promiscuous mode [ 617.296721][T13021] lowmem_reserve[]: 0 0 0 0 0 [ 617.323090][T13021] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:396kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 617.429921][T13021] lowmem_reserve[]: 0 0 0 0 0 [ 617.445872][T13021] Node 1 Normal free:2888576kB boost:0kB min:55628kB low:69532kB high:83436kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:1232kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4584kB local_pcp:4584kB free_cma:0kB [ 617.489075][T12997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.519840][T12997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.542361][T13021] lowmem_reserve[]: 0 0 0 0 0 [ 617.552368][T13021] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 617.576894][T13021] Node 0 DMA32: 554*4kB (ME) 283*8kB (UM) 589*16kB (UME) 981*32kB (UME) 657*64kB (UME) 385*128kB (UME) 227*256kB (UM) 143*512kB (UME) 67*1024kB (UM) 4*2048kB (UM) 199*4096kB (UM) = 1159856kB [ 617.629965][T13021] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 617.658075][T12997] team0: Port device team_slave_0 added [ 617.663845][T13021] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 3*1024kB (UM) 2*2048kB (U) 703*4096kB (UM) = 2888620kB [ 617.683647][T12997] team0: Port device team_slave_1 added [ 617.718045][T13021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 617.754203][T13021] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 617.816240][T13021] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 617.848818][T13021] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 617.878442][T13021] 61092 total pagecache pages [ 617.897608][T13021] 12 pages in swap cache [ 617.911386][T12997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.924536][T13021] Free swap = 124948kB [ 617.947578][T12997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.975596][T13021] Total swap = 124996kB [ 617.986814][T13021] 2097051 pages RAM [ 618.001012][T13021] 0 pages HighMem/MovableOnly [ 618.015671][T13021] 432195 pages reserved [ 618.028468][T13021] 0 pages cma reserved [ 618.041746][T12997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.115864][T12997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.127378][T11647] Bluetooth: hci4: command tx timeout [ 618.159426][T12997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.264048][T12997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.640276][T12997] hsr_slave_0: entered promiscuous mode [ 618.648954][T12997] hsr_slave_1: entered promiscuous mode [ 618.656228][T12997] debugfs: 'hsr0' already exists in 'hsr' [ 618.663305][T12997] Cannot create hsr debugfs directory [ 618.911632][T12986] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 619.008767][T12986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 619.061622][T12986] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 619.077649][T11647] Bluetooth: hci5: command tx timeout [ 619.102677][T12986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 619.152790][T12986] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 619.187230][T12986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 619.264854][T12986] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 619.317004][T12986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.528438][T13071] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 619.911587][T13070] [U] ^\ [ 620.197841][T11647] Bluetooth: hci4: command tx timeout [ 620.236512][T12986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.253146][T12997] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 620.292272][T12997] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 620.316584][T12997] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 620.347033][T12997] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 620.383815][T12997] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 620.448323][T12997] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 620.515350][T13094] FAULT_INJECTION: forcing a failure. [ 620.515350][T13094] name failslab, interval 1, probability 0, space 0, times 0 [ 620.570838][T13094] CPU: 0 UID: 0 PID: 13094 Comm: syz.2.1432 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.570877][T13094] Tainted: [L]=SOFTLOCKUP [ 620.570886][T13094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 620.570900][T13094] Call Trace: [ 620.570908][T13094] [ 620.570918][T13094] dump_stack_lvl+0x100/0x190 [ 620.570952][T13094] should_fail_ex.cold+0x5/0xa [ 620.570980][T13094] should_failslab+0xc2/0x120 [ 620.571013][T13094] kmem_cache_alloc_noprof+0x91/0x6a0 [ 620.571043][T13094] ? __kernfs_new_node+0xd2/0xa10 [ 620.571087][T13094] __kernfs_new_node+0xd2/0xa10 [ 620.571124][T13094] ? kernfs_add_one+0x611/0xaa0 [ 620.571163][T13094] ? __pfx___kernfs_new_node+0x10/0x10 [ 620.571207][T13094] ? find_held_lock+0x2b/0x80 [ 620.571235][T13094] ? kernfs_root+0xee/0x2a0 [ 620.571267][T13094] ? kernfs_root+0xee/0x2a0 [ 620.571306][T13094] kernfs_new_node+0x117/0x150 [ 620.571349][T13094] __kernfs_create_file+0x53/0x350 [ 620.571387][T13094] sysfs_add_file_mode_ns+0x207/0x3c0 [ 620.571429][T13094] sysfs_create_file_ns+0x145/0x1e0 [ 620.571459][T13094] ? rcu_is_watching+0x12/0xc0 [ 620.571486][T13094] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 620.571519][T13094] ? __pfx___up_read+0x10/0x10 [ 620.571542][T13094] ? acpi_device_notify+0x464/0x500 [ 620.571578][T13094] ? kobject_put+0xb9/0x640 [ 620.571611][T13094] device_create_file+0xf2/0x1d0 [ 620.571655][T13094] device_add+0x2cb/0x1970 [ 620.571689][T13094] ? __pfx_dev_set_name+0x10/0x10 [ 620.571726][T13094] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 620.571760][T13094] ? __pfx_device_add+0x10/0x10 [ 620.571794][T13094] ? lockdep_init_map_type+0x5c/0x250 [ 620.571832][T13094] ? __init_waitqueue_head+0xca/0x150 [ 620.571861][T13094] netdev_register_kobject+0x1a9/0x3d0 [ 620.571905][T13094] register_netdevice+0x15b6/0x25a0 [ 620.571941][T13094] ? __pfx_register_netdevice+0x10/0x10 [ 620.571970][T13094] ? net_generic+0xea/0x2a0 [ 620.572017][T13094] ppp_dev_configure+0x986/0xcb0 [ 620.572090][T13094] ppp_ioctl+0x9d7/0x27c0 [ 620.572133][T13094] ? find_held_lock+0x2b/0x80 [ 620.572161][T13094] ? __pfx_ppp_ioctl+0x10/0x10 [ 620.572190][T13094] ? __fget_files+0x21f/0x3d0 [ 620.572232][T13094] ? __pfx_ppp_ioctl+0x10/0x10 [ 620.572257][T13094] __x64_sys_ioctl+0x18e/0x210 [ 620.572290][T13094] do_syscall_64+0x115/0x840 [ 620.572311][T13094] ? clear_bhb_loop+0x40/0x90 [ 620.572340][T13094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.572371][T13094] RIP: 0033:0x7ff45bf9de59 [ 620.572391][T13094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.572415][T13094] RSP: 002b:00007ff45ce02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.572437][T13094] RAX: ffffffffffffffda RBX: 00007ff45c226180 RCX: 00007ff45bf9de59 [ 620.572454][T13094] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 620.572468][T13094] RBP: 00007ff45c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 620.572483][T13094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.572497][T13094] R13: 00007ff45c226218 R14: 00007ff45c226180 R15: 00007ffdee25bbd8 [ 620.572528][T13094] [ 621.363172][T11647] Bluetooth: hci5: command tx timeout [ 621.453067][T12986] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.496344][T12997] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 621.625070][T12997] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 621.765904][ T9697] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.773112][ T9697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.797101][ T9697] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.804315][ T9697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.611829][T12997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.708548][T12997] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.768520][ T9698] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.775715][ T9698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.847163][ T9697] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.854433][ T9697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.945370][T13109] FAULT_INJECTION: forcing a failure. [ 622.945370][T13109] name failslab, interval 1, probability 0, space 0, times 0 [ 623.146904][T13105] random: crng reseeded on system resumption [ 623.168797][T13109] CPU: 0 UID: 0 PID: 13109 Comm: syz.2.1433 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.168835][T13109] Tainted: [L]=SOFTLOCKUP [ 623.168843][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 623.168857][T13109] Call Trace: [ 623.168865][T13109] [ 623.168874][T13109] dump_stack_lvl+0x100/0x190 [ 623.168904][T13109] should_fail_ex.cold+0x5/0xa [ 623.168930][T13109] should_failslab+0xc2/0x120 [ 623.168961][T13109] __kmalloc_cache_noprof+0x91/0x6c0 [ 623.168999][T13109] ? do_raw_spin_lock+0x128/0x260 [ 623.169022][T13109] ? alloc_fdtable+0xbd/0x2d0 [ 623.169061][T13109] alloc_fdtable+0xbd/0x2d0 [ 623.169095][T13109] dup_fd+0x995/0xd10 [ 623.169135][T13109] ? apparmor_task_alloc+0x2c1/0x3b0 [ 623.169185][T13109] copy_process+0x2c94/0x8030 [ 623.169227][T13109] ? __pfx_copy_process+0x10/0x10 [ 623.169253][T13109] ? futex_wake+0x4ea/0x5e0 [ 623.169294][T13109] kernel_clone+0x176/0x9d0 [ 623.169322][T13109] ? __pfx_kernel_clone+0x10/0x10 [ 623.169363][T13109] __do_sys_clone+0xd9/0x120 [ 623.169389][T13109] ? __pfx___do_sys_clone+0x10/0x10 [ 623.169414][T13109] ? do_raw_spin_lock+0x128/0x260 [ 623.169458][T13109] do_syscall_64+0x115/0x840 [ 623.169479][T13109] ? clear_bhb_loop+0x40/0x90 [ 623.169508][T13109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.169532][T13109] RIP: 0033:0x7ff45bf9de59 [ 623.169550][T13109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.169573][T13109] RSP: 002b:00007ff45ce01fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 623.169595][T13109] RAX: ffffffffffffffda RBX: 00007ff45c226180 RCX: 00007ff45bf9de59 [ 623.169611][T13109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 623.169625][T13109] RBP: 00007ff45c033e6f R08: 0000000000000000 R09: 0000000000000000 [ 623.169639][T13109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.169653][T13109] R13: 00007ff45c226218 R14: 00007ff45c226180 R15: 00007ffdee25bbd8 [ 623.169682][T13109] [ 623.569956][T11647] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 624.071541][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1435'. [ 624.442736][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.450757][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.680344][T12986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.852856][T12997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.246416][T12986] veth0_vlan: entered promiscuous mode [ 626.263965][T13170] __vm_enough_memory: pid: 13170, comm: syz.2.1441, bytes: 4398046511104 not enough memory for the allocation [ 626.378273][T13170] nbd: must specify a size in bytes for the device [ 626.463946][T12986] veth1_vlan: entered promiscuous mode [ 626.574495][T12997] veth0_vlan: entered promiscuous mode [ 626.732033][T12997] veth1_vlan: entered promiscuous mode [ 626.843536][T12986] veth0_macvtap: entered promiscuous mode [ 626.895843][T12986] veth1_macvtap: entered promiscuous mode [ 626.969424][T12997] veth0_macvtap: entered promiscuous mode [ 626.991695][T13168] Process accounting paused [ 627.012865][T12986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.058589][T12997] veth1_macvtap: entered promiscuous mode [ 627.106752][T12986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.172451][ T7689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.205481][ T7689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.257132][ T7689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.299000][T12997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.334200][ T7689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.387125][T12997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.501694][ T9694] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.599403][ T9694] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.675021][ T9694] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.707803][ T9694] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.929416][ T9695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.015153][ T9695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.237877][ T9694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.288862][ T9694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.400046][ T8712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.445472][ T8712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.528958][ T8712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.582908][ T8712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.427122][T13200] random: crng reseeded on system resumption [ 630.921459][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 631.301315][T13218] zswap: compressor û not available [ 631.350427][T13226] block2mtd: illegal erase size [ 632.241227][T13251] FAULT_INJECTION: forcing a failure. [ 632.241227][T13251] name failslab, interval 1, probability 0, space 0, times 0 [ 632.405110][T13251] CPU: 0 UID: 0 PID: 13251 Comm: syz.4.1456 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.405148][T13251] Tainted: [L]=SOFTLOCKUP [ 632.405157][T13251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 632.405170][T13251] Call Trace: [ 632.405178][T13251] [ 632.405186][T13251] dump_stack_lvl+0x100/0x190 [ 632.405217][T13251] should_fail_ex.cold+0x5/0xa [ 632.405244][T13251] should_failslab+0xc2/0x120 [ 632.405274][T13251] kmem_cache_alloc_noprof+0x91/0x6a0 [ 632.405311][T13251] ? __kernfs_new_node+0xd2/0xa10 [ 632.405352][T13251] __kernfs_new_node+0xd2/0xa10 [ 632.405388][T13251] ? kernfs_add_one+0x611/0xaa0 [ 632.405426][T13251] ? __pfx___kernfs_new_node+0x10/0x10 [ 632.405469][T13251] ? find_held_lock+0x2b/0x80 [ 632.405496][T13251] ? kernfs_root+0xee/0x2a0 [ 632.405527][T13251] ? kernfs_root+0xee/0x2a0 [ 632.405564][T13251] kernfs_new_node+0x117/0x150 [ 632.405608][T13251] __kernfs_create_file+0x53/0x350 [ 632.405657][T13251] sysfs_add_file_mode_ns+0x207/0x3c0 [ 632.405699][T13251] sysfs_create_file_ns+0x145/0x1e0 [ 632.405728][T13251] ? rcu_is_watching+0x12/0xc0 [ 632.405754][T13251] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 632.405786][T13251] ? __pfx___up_read+0x10/0x10 [ 632.405808][T13251] ? acpi_device_notify+0x464/0x500 [ 632.405843][T13251] ? kobject_put+0xb9/0x640 [ 632.405874][T13251] device_create_file+0xf2/0x1d0 [ 632.405916][T13251] device_add+0x2cb/0x1970 [ 632.405950][T13251] ? __pfx_dev_set_name+0x10/0x10 [ 632.405986][T13251] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 632.406019][T13251] ? __pfx_device_add+0x10/0x10 [ 632.406052][T13251] ? lockdep_init_map_type+0x5c/0x250 [ 632.406090][T13251] ? __init_waitqueue_head+0xca/0x150 [ 632.406118][T13251] netdev_register_kobject+0x1a9/0x3d0 [ 632.406160][T13251] register_netdevice+0x15b6/0x25a0 [ 632.406197][T13251] ? __pfx_register_netdevice+0x10/0x10 [ 632.406225][T13251] ? net_generic+0xea/0x2a0 [ 632.406271][T13251] ppp_dev_configure+0x986/0xcb0 [ 632.406323][T13251] ppp_ioctl+0x9d7/0x27c0 [ 632.406349][T13251] ? find_held_lock+0x2b/0x80 [ 632.406376][T13251] ? __pfx_ppp_ioctl+0x10/0x10 [ 632.406405][T13251] ? __fget_files+0x21f/0x3d0 [ 632.406445][T13251] ? __pfx_ppp_ioctl+0x10/0x10 [ 632.406470][T13251] __x64_sys_ioctl+0x18e/0x210 [ 632.406504][T13251] do_syscall_64+0x115/0x840 [ 632.406525][T13251] ? clear_bhb_loop+0x40/0x90 [ 632.406554][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.406579][T13251] RIP: 0033:0x7f814e59de59 [ 632.406599][T13251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.406623][T13251] RSP: 002b:00007f814f4f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.406647][T13251] RAX: ffffffffffffffda RBX: 00007f814e826180 RCX: 00007f814e59de59 [ 632.406663][T13251] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000005 [ 632.406678][T13251] RBP: 00007f814e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 632.406693][T13251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.406708][T13251] R13: 00007f814e826218 R14: 00007f814e826180 R15: 00007ffdee354f08 [ 632.406739][T13251] [ 636.528547][T13269] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 636.734770][T13296] zswap: compressor û not available [ 636.800900][T13301] block2mtd: illegal erase size [ 638.732841][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1475'. [ 639.163279][T13355] FAULT_INJECTION: forcing a failure. [ 639.163279][T13355] name failslab, interval 1, probability 0, space 0, times 0 [ 639.360174][T13355] CPU: 0 UID: 0 PID: 13355 Comm: syz.3.1477 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.360214][T13355] Tainted: [L]=SOFTLOCKUP [ 639.360223][T13355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 639.360238][T13355] Call Trace: [ 639.360246][T13355] [ 639.360255][T13355] dump_stack_lvl+0x100/0x190 [ 639.360286][T13355] should_fail_ex.cold+0x5/0xa [ 639.360313][T13355] should_failslab+0xc2/0x120 [ 639.360344][T13355] kmem_cache_alloc_noprof+0x91/0x6a0 [ 639.360373][T13355] ? __kernfs_new_node+0xd2/0xa10 [ 639.360415][T13355] __kernfs_new_node+0xd2/0xa10 [ 639.360452][T13355] ? kernfs_add_one+0x611/0xaa0 [ 639.360491][T13355] ? __pfx___kernfs_new_node+0x10/0x10 [ 639.360536][T13355] ? find_held_lock+0x2b/0x80 [ 639.360564][T13355] ? kernfs_root+0xee/0x2a0 [ 639.360595][T13355] ? kernfs_root+0xee/0x2a0 [ 639.360634][T13355] kernfs_new_node+0x117/0x150 [ 639.360685][T13355] __kernfs_create_file+0x53/0x350 [ 639.360720][T13355] sysfs_add_file_mode_ns+0x207/0x3c0 [ 639.360759][T13355] sysfs_create_file_ns+0x145/0x1e0 [ 639.360789][T13355] ? rcu_is_watching+0x12/0xc0 [ 639.360816][T13355] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 639.360848][T13355] ? __pfx___up_read+0x10/0x10 [ 639.360871][T13355] ? acpi_device_notify+0x464/0x500 [ 639.360906][T13355] ? kobject_put+0xb9/0x640 [ 639.360938][T13355] device_create_file+0xf2/0x1d0 [ 639.360979][T13355] device_add+0x2cb/0x1970 [ 639.361014][T13355] ? __pfx_dev_set_name+0x10/0x10 [ 639.361050][T13355] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 639.361083][T13355] ? __pfx_device_add+0x10/0x10 [ 639.361117][T13355] ? lockdep_init_map_type+0x5c/0x250 [ 639.361155][T13355] ? __init_waitqueue_head+0xca/0x150 [ 639.361184][T13355] netdev_register_kobject+0x1a9/0x3d0 [ 639.361226][T13355] register_netdevice+0x15b6/0x25a0 [ 639.361263][T13355] ? __pfx_register_netdevice+0x10/0x10 [ 639.361292][T13355] ? net_generic+0xea/0x2a0 [ 639.361338][T13355] ppp_dev_configure+0x986/0xcb0 [ 639.361385][T13355] ppp_ioctl+0x9d7/0x27c0 [ 639.361411][T13355] ? find_held_lock+0x2b/0x80 [ 639.361438][T13355] ? __pfx_ppp_ioctl+0x10/0x10 [ 639.361467][T13355] ? __fget_files+0x21f/0x3d0 [ 639.361521][T13355] ? __pfx_ppp_ioctl+0x10/0x10 [ 639.361544][T13355] __x64_sys_ioctl+0x18e/0x210 [ 639.361578][T13355] do_syscall_64+0x115/0x840 [ 639.361598][T13355] ? clear_bhb_loop+0x40/0x90 [ 639.361626][T13355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.361657][T13355] RIP: 0033:0x7f570ab9de59 [ 639.361676][T13355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.361700][T13355] RSP: 002b:00007f570ba7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.361722][T13355] RAX: ffffffffffffffda RBX: 00007f570ae26180 RCX: 00007f570ab9de59 [ 639.361739][T13355] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 639.361753][T13355] RBP: 00007f570ac33e6f R08: 0000000000000000 R09: 0000000000000000 [ 639.361767][T13355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.361782][T13355] R13: 00007f570ae26218 R14: 00007f570ae26180 R15: 00007fff51d36628 [ 639.361812][T13355] [ 641.135024][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'. [ 641.445556][T13360] zswap: compressor û not available [ 641.476784][T13364] block2mtd: illegal erase size [ 643.962292][T13422] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 644.722734][T13431] zswap: compressor û not available [ 644.736192][T13434] block2mtd: illegal erase size [ 646.561460][T13446] Process accounting paused [ 646.757665][T11647] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 647.425907][T13474] zswap: compressor û not available [ 647.448023][T13477] block2mtd: illegal erase size [ 648.091714][T13487] FAULT_INJECTION: forcing a failure. [ 648.091714][T13487] name failslab, interval 1, probability 0, space 0, times 0 [ 648.336077][T13487] CPU: 0 UID: 0 PID: 13487 Comm: syz.3.1500 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.336115][T13487] Tainted: [L]=SOFTLOCKUP [ 648.336124][T13487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 648.336139][T13487] Call Trace: [ 648.336147][T13487] [ 648.336156][T13487] dump_stack_lvl+0x100/0x190 [ 648.336187][T13487] should_fail_ex.cold+0x5/0xa [ 648.336214][T13487] should_failslab+0xc2/0x120 [ 648.336246][T13487] __kmalloc_cache_noprof+0x91/0x6c0 [ 648.336285][T13487] ? do_raw_spin_lock+0x128/0x260 [ 648.336309][T13487] ? alloc_fdtable+0xbd/0x2d0 [ 648.336348][T13487] alloc_fdtable+0xbd/0x2d0 [ 648.336384][T13487] dup_fd+0x995/0xd10 [ 648.336426][T13487] ? apparmor_task_alloc+0x2c1/0x3b0 [ 648.336469][T13487] copy_process+0x2c94/0x8030 [ 648.336521][T13487] ? __pfx_copy_process+0x10/0x10 [ 648.336548][T13487] ? futex_wake+0x4ea/0x5e0 [ 648.336581][T13487] ? __lock_acquire+0x49f/0x1a40 [ 648.336622][T13487] kernel_clone+0x176/0x9d0 [ 648.336650][T13487] ? __pfx_kernel_clone+0x10/0x10 [ 648.336692][T13487] __do_sys_clone+0xd9/0x120 [ 648.336719][T13487] ? __pfx___do_sys_clone+0x10/0x10 [ 648.336761][T13487] ? do_raw_spin_unlock+0x145/0x1e0 [ 648.336791][T13487] do_syscall_64+0x115/0x840 [ 648.336813][T13487] ? clear_bhb_loop+0x40/0x90 [ 648.336854][T13487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.336878][T13487] RIP: 0033:0x7f570ab9de59 [ 648.336898][T13487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.336921][T13487] RSP: 002b:00007f570ba7afd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 648.336943][T13487] RAX: ffffffffffffffda RBX: 00007f570ae26180 RCX: 00007f570ab9de59 [ 648.336958][T13487] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.336972][T13487] RBP: 00007f570ac33e6f R08: 0000000000000000 R09: 0000000000000000 [ 648.336986][T13487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.337000][T13487] R13: 00007f570ae26218 R14: 00007f570ae26180 R15: 00007fff51d36628 [ 648.337028][T13487] [ 648.562605][T13468] random: crng reseeded on system resumption [ 650.911833][T13537] FAULT_INJECTION: forcing a failure. [ 650.911833][T13537] name failslab, interval 1, probability 0, space 0, times 0 [ 651.036878][T13528] random: crng reseeded on system resumption [ 651.098742][T13537] CPU: 0 UID: 0 PID: 13537 Comm: syz.4.1515 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.098787][T13537] Tainted: [L]=SOFTLOCKUP [ 651.098795][T13537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 651.098809][T13537] Call Trace: [ 651.098817][T13537] [ 651.098825][T13537] dump_stack_lvl+0x100/0x190 [ 651.098855][T13537] should_fail_ex.cold+0x5/0xa [ 651.098881][T13537] should_failslab+0xc2/0x120 [ 651.098912][T13537] __kmalloc_cache_noprof+0x91/0x6c0 [ 651.098950][T13537] ? do_raw_spin_lock+0x128/0x260 [ 651.098973][T13537] ? alloc_fdtable+0xbd/0x2d0 [ 651.099011][T13537] alloc_fdtable+0xbd/0x2d0 [ 651.099046][T13537] dup_fd+0x995/0xd10 [ 651.099086][T13537] ? apparmor_task_alloc+0x2c1/0x3b0 [ 651.099130][T13537] copy_process+0x2c94/0x8030 [ 651.099172][T13537] ? __pfx_copy_process+0x10/0x10 [ 651.099198][T13537] ? futex_wake+0x4ea/0x5e0 [ 651.099235][T13537] kernel_clone+0x176/0x9d0 [ 651.099262][T13537] ? __pfx_kernel_clone+0x10/0x10 [ 651.099302][T13537] __do_sys_clone+0xd9/0x120 [ 651.099327][T13537] ? __pfx___do_sys_clone+0x10/0x10 [ 651.099352][T13537] ? do_raw_spin_lock+0x128/0x260 [ 651.099396][T13537] do_syscall_64+0x115/0x840 [ 651.099416][T13537] ? clear_bhb_loop+0x40/0x90 [ 651.099445][T13537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.099468][T13537] RIP: 0033:0x7f814e59de59 [ 651.099487][T13537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.099509][T13537] RSP: 002b:00007f814f511fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 651.099532][T13537] RAX: ffffffffffffffda RBX: 00007f814e826090 RCX: 00007f814e59de59 [ 651.099547][T13537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 651.099561][T13537] RBP: 00007f814e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 651.099575][T13537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.099589][T13537] R13: 00007f814e826128 R14: 00007f814e826090 R15: 00007ffdee354f08 [ 651.099617][T13537] [ 653.603020][T13584] __vm_enough_memory: pid: 13584, comm: syz.5.1528, bytes: 4398046511104 not enough memory for the allocation [ 655.324614][T13601] WARNING! power/level is deprecated; use power/control instead [ 656.334461][T13622] FAULT_INJECTION: forcing a failure. [ 656.334461][T13622] name fail_futex, interval 1, probability 0, space 0, times 0 [ 656.334501][T13622] CPU: 0 UID: 0 PID: 13622 Comm: syz.5.1536 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.334535][T13622] Tainted: [L]=SOFTLOCKUP [ 656.334543][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 656.334556][T13622] Call Trace: [ 656.334566][T13622] [ 656.334575][T13622] dump_stack_lvl+0x100/0x190 [ 656.334605][T13622] should_fail_ex.cold+0x5/0xa [ 656.334631][T13622] get_futex_key+0x1d2/0x14f0 [ 656.334672][T13622] ? __pfx_get_futex_key+0x10/0x10 [ 656.334708][T13622] ? __pfx_futex_hash+0x10/0x10 [ 656.334751][T13622] futex_wake+0xf4/0x5e0 [ 656.334777][T13622] ? futex_wait+0x11e/0x370 [ 656.334807][T13622] ? __pfx_futex_wake+0x10/0x10 [ 656.334840][T13622] ? find_held_lock+0x2b/0x80 [ 656.334866][T13622] ? __fget_files+0x215/0x3d0 [ 656.334900][T13622] ? __fget_files+0x215/0x3d0 [ 656.334938][T13622] do_futex+0x2b2/0x440 [ 656.334962][T13622] ? __pfx_do_futex+0x10/0x10 [ 656.334987][T13622] ? fdget+0x18b/0x210 [ 656.335023][T13622] __x64_sys_futex+0x34f/0x4d0 [ 656.335051][T13622] ? __pfx___x64_sys_futex+0x10/0x10 [ 656.335109][T13622] do_syscall_64+0x115/0x840 [ 656.335131][T13622] ? clear_bhb_loop+0x40/0x90 [ 656.335160][T13622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.335184][T13622] RIP: 0033:0x7f39de19de59 [ 656.335203][T13622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.335226][T13622] RSP: 002b:00007f39df0b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 656.335247][T13622] RAX: ffffffffffffffda RBX: 00007f39de425fa8 RCX: 00007f39de19de59 [ 656.335263][T13622] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f39de425fac [ 656.335278][T13622] RBP: 00007f39de425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 656.335292][T13622] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 656.335306][T13622] R13: 00007f39de426038 R14: 00007ffeac4e95f0 R15: 00007ffeac4e96d8 [ 656.335336][T13622] [ 657.255036][T13618] Process accounting resumed [ 657.534376][T13641] random: crng reseeded on system resumption [ 657.954293][T13646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1540'. [ 658.016814][T13646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.156502][T13646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.217331][T13653] FAULT_INJECTION: forcing a failure. [ 658.217331][T13653] name failslab, interval 1, probability 0, space 0, times 0 [ 658.316815][T13653] CPU: 0 UID: 0 PID: 13653 Comm: syz.5.1541 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.316853][T13653] Tainted: [L]=SOFTLOCKUP [ 658.316861][T13653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 658.316876][T13653] Call Trace: [ 658.316883][T13653] [ 658.316893][T13653] dump_stack_lvl+0x100/0x190 [ 658.316925][T13653] should_fail_ex.cold+0x5/0xa [ 658.316950][T13653] should_failslab+0xc2/0x120 [ 658.316981][T13653] __kmalloc_noprof+0xfc/0x820 [ 658.317007][T13653] ? trace_kmem_cache_alloc+0xdd/0x100 [ 658.317037][T13653] ? lsm_blob_alloc+0x68/0x90 [ 658.317152][T13653] lsm_blob_alloc+0x68/0x90 [ 658.317186][T13653] security_prepare_creds+0x2d/0x290 [ 658.317244][T13653] prepare_creds+0x5d6/0x950 [ 658.317280][T13653] __sys_setresuid+0x458/0x1280 [ 658.317304][T13653] do_syscall_64+0x115/0x840 [ 658.317324][T13653] ? clear_bhb_loop+0x40/0x90 [ 658.317350][T13653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.317372][T13653] RIP: 0033:0x7f39de19de59 [ 658.317393][T13653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.317414][T13653] RSP: 002b:00007f39df0b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 658.317435][T13653] RAX: ffffffffffffffda RBX: 00007f39de425fa0 RCX: 00007f39de19de59 [ 658.317450][T13653] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 658.317463][T13653] RBP: 00007f39de233e6f R08: 0000000000000000 R09: 0000000000000000 [ 658.317483][T13653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.317495][T13653] R13: 00007f39de426038 R14: 00007f39de425fa0 R15: 00007ffeac4e96d8 [ 658.317523][T13653] [ 658.566980][T13652] ptp ptp0: only physical clock in use now [ 659.570603][T13675] zswap: compressor û not available [ 661.288492][T13706] zswap: compressor û not available [ 661.359511][T13710] block2mtd: illegal erase size [ 661.784926][T13720] FAULT_INJECTION: forcing a failure. [ 661.784926][T13720] name failslab, interval 1, probability 0, space 0, times 0 [ 661.955012][T13720] CPU: 0 UID: 0 PID: 13720 Comm: syz.5.1553 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.955048][T13720] Tainted: [L]=SOFTLOCKUP [ 661.955056][T13720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 661.955069][T13720] Call Trace: [ 661.955076][T13720] [ 661.955084][T13720] dump_stack_lvl+0x100/0x190 [ 661.955113][T13720] should_fail_ex.cold+0x5/0xa [ 661.955137][T13720] should_failslab+0xc2/0x120 [ 661.955166][T13720] kmem_cache_alloc_noprof+0x91/0x6a0 [ 661.955192][T13720] ? __kernfs_new_node+0xd2/0xa10 [ 661.955230][T13720] __kernfs_new_node+0xd2/0xa10 [ 661.955263][T13720] ? kernfs_add_one+0x611/0xaa0 [ 661.955299][T13720] ? __pfx___kernfs_new_node+0x10/0x10 [ 661.955338][T13720] ? find_held_lock+0x2b/0x80 [ 661.955363][T13720] ? kernfs_root+0xee/0x2a0 [ 661.955393][T13720] ? kernfs_root+0xee/0x2a0 [ 661.955428][T13720] kernfs_new_node+0x117/0x150 [ 661.955466][T13720] __kernfs_create_file+0x53/0x350 [ 661.955494][T13720] sysfs_add_file_mode_ns+0x207/0x3c0 [ 661.955530][T13720] sysfs_create_file_ns+0x145/0x1e0 [ 661.955556][T13720] ? rcu_is_watching+0x12/0xc0 [ 661.955580][T13720] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 661.955613][T13720] ? __pfx___up_read+0x10/0x10 [ 661.955660][T13720] ? acpi_device_notify+0x464/0x500 [ 661.955695][T13720] ? kobject_put+0xb9/0x640 [ 661.955727][T13720] device_create_file+0xf2/0x1d0 [ 661.955769][T13720] device_add+0x2cb/0x1970 [ 661.955802][T13720] ? __pfx_dev_set_name+0x10/0x10 [ 661.955838][T13720] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 661.955872][T13720] ? __pfx_device_add+0x10/0x10 [ 661.955906][T13720] ? lockdep_init_map_type+0x5c/0x250 [ 661.955944][T13720] ? __init_waitqueue_head+0xca/0x150 [ 661.955973][T13720] netdev_register_kobject+0x1a9/0x3d0 [ 661.956014][T13720] register_netdevice+0x15b6/0x25a0 [ 661.956054][T13720] ? __pfx_register_netdevice+0x10/0x10 [ 661.956083][T13720] ? net_generic+0xea/0x2a0 [ 661.956128][T13720] ppp_dev_configure+0x986/0xcb0 [ 661.956174][T13720] ppp_ioctl+0x9d7/0x27c0 [ 661.956199][T13720] ? find_held_lock+0x2b/0x80 [ 661.956226][T13720] ? __pfx_ppp_ioctl+0x10/0x10 [ 661.956255][T13720] ? __fget_files+0x21f/0x3d0 [ 661.956296][T13720] ? __pfx_ppp_ioctl+0x10/0x10 [ 661.956320][T13720] __x64_sys_ioctl+0x18e/0x210 [ 661.956354][T13720] do_syscall_64+0x115/0x840 [ 661.956375][T13720] ? clear_bhb_loop+0x40/0x90 [ 661.956404][T13720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.956429][T13720] RIP: 0033:0x7f39de19de59 [ 661.956449][T13720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.956474][T13720] RSP: 002b:00007f39df074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.956497][T13720] RAX: ffffffffffffffda RBX: 00007f39de426180 RCX: 00007f39de19de59 [ 661.956514][T13720] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 661.956528][T13720] RBP: 00007f39de233e6f R08: 0000000000000000 R09: 0000000000000000 [ 661.956542][T13720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.956557][T13720] R13: 00007f39de426218 R14: 00007f39de426180 R15: 00007ffeac4e96d8 [ 661.956587][T13720] [ 662.699769][T13725] zswap: compressor û not available [ 664.204233][T13743] nbd: must specify a size in bytes for the device [ 665.382357][T13740] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 666.777299][T13774] zswap: compressor û not available [ 667.359973][T13792] random: crng reseeded on system resumption [ 668.769936][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 669.518054][T13823] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1575'. [ 669.781907][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 669.862104][T13822] zswap: compressor û not available [ 670.309434][T13839] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 670.769580][ T996] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 671.459394][T13847] random: crng reseeded on system resumption [ 671.770485][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 672.467059][T13865] nbd: must specify a size in bytes for the device [ 672.769490][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 672.823468][T13867] zswap: compressor û not available [ 673.769450][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 674.769580][ T996] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 674.786316][T13898] dlm: non-version read from control device 0 [ 675.769470][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 675.913429][T13913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1594'. [ 676.118106][T11647] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 676.664531][T13922] zswap: compressor û not available [ 676.757294][T13914] Process accounting resumed [ 676.770537][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 676.887253][T13928] __vm_enough_memory: pid: 13928, comm: syz.3.1597, bytes: 4398046511104 not enough memory for the allocation [ 676.950887][T13928] nbd: must specify a size in bytes for the device [ 677.769427][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 678.663925][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 678.771277][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 679.769404][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 679.845738][T13983] random: crng reseeded on system resumption [ 680.237994][T13987] netlink: 346 bytes leftover after parsing attributes in process `syz.4.1608'. [ 680.872712][T13994] zswap: compressor û not available [ 680.958210][T13999] block2mtd: illegal erase size [ 681.769459][ T996] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 682.769475][ T996] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 683.769560][ T996] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 684.757664][T11647] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 684.770418][ T996] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 684.787113][T14048] random: crng reseeded on system resumption [ 685.223017][T14068] random: crng reseeded on system resumption [ 685.261166][T14060] zswap: compressor û not available [ 685.274803][T14063] FAULT_INJECTION: forcing a failure. [ 685.274803][T14063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.329730][T14063] CPU: 0 UID: 0 PID: 14063 Comm: syz.2.1620 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.329766][T14063] Tainted: [L]=SOFTLOCKUP [ 685.329774][T14063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 685.329788][T14063] Call Trace: [ 685.329795][T14063] [ 685.329804][T14063] dump_stack_lvl+0x100/0x190 [ 685.329835][T14063] should_fail_ex.cold+0x5/0xa [ 685.329861][T14063] _copy_to_iter+0x1f3/0x1720 [ 685.329897][T14063] ? __mutex_unlock_slowpath+0x35d/0x930 [ 685.329939][T14063] ? __pfx__copy_to_iter+0x10/0x10 [ 685.329970][T14063] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 685.330015][T14063] ? kernfs_put_active+0x93/0xe0 [ 685.330055][T14063] seq_read_iter+0xdab/0x1270 [ 685.330101][T14063] kernfs_fop_read_iter+0x46c/0x610 [ 685.330127][T14063] ? rw_verify_area+0xce/0x6d0 [ 685.330158][T14063] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 685.330186][T14063] vfs_read+0x82e/0xb40 [ 685.330224][T14063] ? __pfx_vfs_read+0x10/0x10 [ 685.330276][T14063] ksys_read+0x12a/0x250 [ 685.330310][T14063] ? __pfx_ksys_read+0x10/0x10 [ 685.330352][T14063] do_syscall_64+0x115/0x840 [ 685.330373][T14063] ? clear_bhb_loop+0x40/0x90 [ 685.330402][T14063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.330425][T14063] RIP: 0033:0x7ff45bf9de59 [ 685.330445][T14063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.330468][T14063] RSP: 002b:00007ff45ce23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 685.330497][T14063] RAX: ffffffffffffffda RBX: 00007ff45c226090 RCX: 00007ff45bf9de59 [ 685.330513][T14063] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000004 [ 685.330527][T14063] RBP: 00007ff45ce23090 R08: 0000000000000000 R09: 0000000000000000 [ 685.330543][T14063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.330557][T14063] R13: 00007ff45c226128 R14: 00007ff45c226090 R15: 00007ffdee25bbd8 [ 685.330587][T14063] [ 685.793297][ T996] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 685.924183][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.935817][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.769479][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 687.254241][ T5940] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 687.278272][ T5940] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 687.288051][ T5940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 687.295851][ T5940] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 687.310672][ T5940] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 687.770748][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 688.204422][T14084] Process accounting paused [ 688.769475][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 689.399007][ T5940] Bluetooth: hci6: command tx timeout [ 689.770210][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 690.770279][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 690.785488][ T5940] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 691.477564][ T5940] Bluetooth: hci6: command tx timeout [ 691.769450][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 691.811289][T14170] random: crng reseeded on system resumption [ 692.185618][T14182] FAULT_INJECTION: forcing a failure. [ 692.185618][T14182] name failslab, interval 1, probability 0, space 0, times 0 [ 692.211075][T14103] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.228325][T14103] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.237160][T14182] CPU: 0 UID: 0 PID: 14182 Comm: syz.4.1642 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.237200][T14182] Tainted: [L]=SOFTLOCKUP [ 692.237208][T14182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 692.237224][T14182] Call Trace: [ 692.237231][T14182] [ 692.237240][T14182] dump_stack_lvl+0x100/0x190 [ 692.237273][T14182] should_fail_ex.cold+0x5/0xa [ 692.237300][T14182] should_failslab+0xc2/0x120 [ 692.237332][T14182] kmem_cache_alloc_noprof+0x91/0x6a0 [ 692.237365][T14182] ? ptlock_alloc+0x1f/0x70 [ 692.237408][T14182] ptlock_alloc+0x1f/0x70 [ 692.237444][T14182] pte_alloc_one+0x82/0x3d0 [ 692.237481][T14182] __pte_alloc+0x6d/0x3e0 [ 692.237509][T14182] ? __pfx___pte_alloc+0x10/0x10 [ 692.237538][T14182] ? find_held_lock+0x2b/0x80 [ 692.237565][T14182] ? find_held_lock+0x2b/0x80 [ 692.237591][T14182] ? walk_to_pmd+0x302/0x4c0 [ 692.237626][T14182] get_locked_pte+0xa1/0xc0 [ 692.237661][T14182] insert_page+0xcc/0x220 [ 692.237695][T14182] ? __pfx_insert_page+0x10/0x10 [ 692.237737][T14182] vm_insert_page+0x2c0/0x400 [ 692.237773][T14182] kcov_mmap+0xca/0x130 [ 692.237806][T14182] __mmap_region+0x13c7/0x2db0 [ 692.237851][T14182] ? __pfx___mmap_region+0x10/0x10 [ 692.237895][T14182] ? __lock_acquire+0x49f/0x1a40 [ 692.237945][T14182] ? find_held_lock+0x2b/0x80 [ 692.237972][T14182] ? ima_match_policy+0x8c4/0x2350 [ 692.238097][T14182] ? ima_match_policy+0x8c4/0x2350 [ 692.238155][T14182] ? process_measurement+0x4c8/0x2350 [ 692.238178][T14182] ? process_measurement+0x4c8/0x2350 [ 692.238202][T14182] ? down_write+0x146/0x1f0 [ 692.238272][T14182] mmap_region+0x527/0x620 [ 692.238298][T14182] ? __pfx_mmap_region+0x10/0x10 [ 692.238323][T14182] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 692.238356][T14182] ? cap_mmap_addr+0x4b/0x120 [ 692.238409][T14182] ? bpf_lsm_mmap_addr+0x9/0x30 [ 692.238447][T14182] ? security_mmap_addr+0x71/0x1e0 [ 692.238477][T14182] ? __get_unmapped_area+0x255/0x3e0 [ 692.238511][T14182] do_mmap+0xc63/0x12f0 [ 692.238547][T14182] ? __pfx_do_mmap+0x10/0x10 [ 692.238579][T14182] ? __pfx_down_write_killable+0x10/0x10 [ 692.238610][T14182] vm_mmap_pgoff+0x29e/0x470 [ 692.238646][T14182] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 692.238674][T14182] ? __fget_files+0x215/0x3d0 [ 692.238716][T14182] ? __fget_files+0x21f/0x3d0 [ 692.238756][T14182] ksys_mmap_pgoff+0x3cb/0x610 [ 692.238787][T14182] ? __x64_sys_futex+0x358/0x4d0 [ 692.238812][T14182] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 692.238843][T14182] ? xfd_validate_state+0x129/0x190 [ 692.238874][T14182] __x64_sys_mmap+0x125/0x190 [ 692.238903][T14182] do_syscall_64+0x115/0x840 [ 692.238924][T14182] ? clear_bhb_loop+0x40/0x90 [ 692.238953][T14182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.238978][T14182] RIP: 0033:0x7f814e59de59 [ 692.239005][T14182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.239030][T14182] RSP: 002b:00007f814f533028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 692.239054][T14182] RAX: ffffffffffffffda RBX: 00007f814e825fa0 RCX: 00007f814e59de59 [ 692.239076][T14182] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000007000000 [ 692.239092][T14182] RBP: 00007f814e633e6f R08: 00000000000000dd R09: 0000000000000000 [ 692.239107][T14182] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 692.239121][T14182] R13: 00007f814e826038 R14: 00007f814e825fa0 R15: 00007ffdee354f08 [ 692.239151][T14182] [ 692.679697][T14103] bridge_slave_0: entered allmulticast mode [ 692.687248][T14103] bridge_slave_0: entered promiscuous mode [ 692.786901][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 692.836476][T14103] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.843698][T14103] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.851063][T14103] bridge_slave_1: entered allmulticast mode [ 692.858462][T14103] bridge_slave_1: entered promiscuous mode [ 692.892283][T14103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.904448][T14103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.938981][T14103] team0: Port device team_slave_0 added [ 692.947165][T14103] team0: Port device team_slave_1 added [ 692.977676][T14184] zswap: compressor û not available [ 693.001955][T11647] Bluetooth: hci0: command 0x0c1a tx timeout [ 693.017822][T14188] block2mtd: illegal erase size [ 693.036346][T14103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.053563][T14103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.132324][T14103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.201002][T14103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.225652][T14103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.326423][T14103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.373354][T14182] kcov: kcov: vm_insert_page() failed [ 693.560139][ T5940] Bluetooth: hci6: command tx timeout [ 693.616208][T14103] hsr_slave_0: entered promiscuous mode [ 693.670509][T14103] hsr_slave_1: entered promiscuous mode [ 693.708300][T14103] debugfs: 'hsr0' already exists in 'hsr' [ 693.733967][T14103] Cannot create hsr debugfs directory [ 693.769453][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 693.985540][T14209] __vm_enough_memory: pid: 14209, comm: syz.3.1649, bytes: 4398046511104 not enough memory for the allocation [ 694.071339][T14209] nbd: must specify a size in bytes for the device [ 694.769448][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 695.037164][T14103] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 695.083738][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout [ 695.163085][T14103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 695.203240][T14103] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 695.290529][T14103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 695.342202][T14103] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 695.387880][T14103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 695.479852][T14103] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 695.539433][T14103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 695.640392][T11647] Bluetooth: hci6: command tx timeout [ 695.769467][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 696.424020][T14103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.769446][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 696.983433][T14103] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.192080][ T7387] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.199302][ T7387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.293386][ T7387] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.300705][ T7387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.772076][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 698.051421][T11647] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 698.779039][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 699.769929][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 699.794785][T14300] random: crng reseeded on system resumption [ 700.701606][T14103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.769561][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 701.792250][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 702.149341][T14103] veth0_vlan: entered promiscuous mode [ 702.196006][T14103] veth1_vlan: entered promiscuous mode [ 702.500553][T14103] veth0_macvtap: entered promiscuous mode [ 702.592035][T14103] veth1_macvtap: entered promiscuous mode [ 702.758780][T14103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.769835][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 702.928893][T14353] FAULT_INJECTION: forcing a failure. [ 702.928893][T14353] name failslab, interval 1, probability 0, space 0, times 0 [ 702.996848][T14353] CPU: 0 UID: 0 PID: 14353 Comm: syz.4.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.996885][T14353] Tainted: [L]=SOFTLOCKUP [ 702.996894][T14353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 702.996908][T14353] Call Trace: [ 702.996915][T14353] [ 702.996924][T14353] dump_stack_lvl+0x100/0x190 [ 702.996956][T14353] should_fail_ex.cold+0x5/0xa [ 702.996982][T14353] should_failslab+0xc2/0x120 [ 702.997013][T14353] kmem_cache_alloc_noprof+0x91/0x6a0 [ 702.997041][T14353] ? vm_area_alloc+0x1f/0x160 [ 702.997081][T14353] vm_area_alloc+0x1f/0x160 [ 702.997117][T14353] __mmap_region+0x1033/0x2db0 [ 702.997160][T14353] ? __pfx___mmap_region+0x10/0x10 [ 702.997196][T14353] ? __pfx___might_resched+0x10/0x10 [ 702.997237][T14353] ? down_write+0x146/0x1f0 [ 702.997270][T14353] ? process_measurement+0x1f4/0x2350 [ 702.997301][T14353] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 702.997413][T14353] ? __lock_acquire+0x49f/0x1a40 [ 702.997461][T14353] ? find_held_lock+0x2b/0x80 [ 702.997487][T14353] ? is_bpf_text_address+0x8a/0x1a0 [ 702.997568][T14353] mmap_region+0x35d/0x620 [ 702.997595][T14353] ? __pfx_mmap_region+0x10/0x10 [ 702.997624][T14353] ? bpf_lsm_capable+0x9/0x10 [ 702.997647][T14353] ? security_capable+0x80/0x260 [ 702.997687][T14353] do_mmap+0xc63/0x12f0 [ 702.997723][T14353] ? __pfx_do_mmap+0x10/0x10 [ 702.997752][T14353] ? __pfx_down_write_killable+0x10/0x10 [ 702.997783][T14353] vm_mmap_pgoff+0x29e/0x470 [ 702.997817][T14353] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 702.997851][T14353] ? __fget_files+0x215/0x3d0 [ 702.997891][T14353] ? __fget_files+0x21f/0x3d0 [ 702.997930][T14353] ksys_mmap_pgoff+0x3cb/0x610 [ 702.997962][T14353] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 702.997989][T14353] ? fput+0x79/0x100 [ 702.998013][T14353] ? ksys_write+0x1ac/0x250 [ 702.998047][T14353] ? __pfx_ksys_write+0x10/0x10 [ 702.998084][T14353] __x64_sys_mmap+0x125/0x190 [ 702.998114][T14353] do_syscall_64+0x115/0x840 [ 702.998133][T14353] ? clear_bhb_loop+0x40/0x90 [ 702.998161][T14353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.998185][T14353] RIP: 0033:0x7f814e59de59 [ 702.998204][T14353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.998227][T14353] RSP: 002b:00007f814f533028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 702.998249][T14353] RAX: ffffffffffffffda RBX: 00007f814e825fa0 RCX: 00007f814e59de59 [ 702.998265][T14353] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 702.998279][T14353] RBP: 00007f814f533090 R08: 0000000000000003 R09: 0000000000002000 [ 702.998294][T14353] R10: 000000000008e051 R11: 0000000000000246 R12: 0000000000000001 [ 702.998308][T14353] R13: 00007f814e826038 R14: 00007f814e825fa0 R15: 00007ffdee354f08 [ 702.998338][T14353] [ 703.352754][T14354] FAULT_INJECTION: forcing a failure. [ 703.352754][T14354] name failslab, interval 1, probability 0, space 0, times 0 [ 703.365509][T14354] CPU: 0 UID: 0 PID: 14354 Comm: syz.3.1673 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.365547][T14354] Tainted: [L]=SOFTLOCKUP [ 703.365556][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 703.365570][T14354] Call Trace: [ 703.365579][T14354] [ 703.365588][T14354] dump_stack_lvl+0x100/0x190 [ 703.365622][T14354] should_fail_ex.cold+0x5/0xa [ 703.365649][T14354] should_failslab+0xc2/0x120 [ 703.365681][T14354] __kmalloc_cache_noprof+0x91/0x6c0 [ 703.365722][T14354] ? proc_self_get_link+0x189/0x1f0 [ 703.365762][T14354] proc_self_get_link+0x189/0x1f0 [ 703.365802][T14354] pick_link+0xac2/0x13c0 [ 703.365834][T14354] ? __pfx_proc_self_get_link+0x10/0x10 [ 703.365871][T14354] step_into_slowpath+0x9ba/0xf90 [ 703.365911][T14354] ? __pfx_step_into_slowpath+0x10/0x10 [ 703.365949][T14354] ? lookup_fast+0x2da/0x600 [ 703.365978][T14354] ? inode_permission+0x374/0x620 [ 703.366011][T14354] link_path_walk+0xf28/0x1cc0 [ 703.366054][T14354] path_openat+0x1c9/0x4280 [ 703.366091][T14354] ? __kasan_slab_alloc+0x89/0x90 [ 703.366119][T14354] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 703.366145][T14354] ? do_getname+0x35/0x390 [ 703.366170][T14354] ? __x64_sys_openat+0x12d/0x210 [ 703.366212][T14354] ? __pfx_path_openat+0x10/0x10 [ 703.366259][T14354] do_file_open+0x20e/0x430 [ 703.366301][T14354] ? __pfx_do_file_open+0x10/0x10 [ 703.366362][T14354] ? alloc_fd+0x471/0x7a0 [ 703.366402][T14354] ? do_getname+0x191/0x390 [ 703.366432][T14354] do_sys_openat2+0x10f/0x1e0 [ 703.366461][T14354] ? __pfx_do_sys_openat2+0x10/0x10 [ 703.366492][T14354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 703.366542][T14354] __x64_sys_openat+0x12d/0x210 [ 703.366572][T14354] ? __pfx___x64_sys_openat+0x10/0x10 [ 703.366614][T14354] do_syscall_64+0x115/0x840 [ 703.366635][T14354] ? clear_bhb_loop+0x40/0x90 [ 703.366664][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.366689][T14354] RIP: 0033:0x7f570ab9de59 [ 703.366709][T14354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.366733][T14354] RSP: 002b:00007f570ba9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 703.366755][T14354] RAX: ffffffffffffffda RBX: 00007f570ae26090 RCX: 00007f570ab9de59 [ 703.366771][T14354] RDX: 0000000000000401 RSI: 0000200000001640 RDI: ffffffffffffff9c [ 703.366786][T14354] RBP: 00007f570ac33e6f R08: 0000000000000000 R09: 0000000000000000 [ 703.366807][T14354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.366822][T14354] R13: 00007f570ae26128 R14: 00007f570ae26090 R15: 00007fff51d36628 [ 703.366852][T14354] [ 703.651614][T14356] random: crng reseeded on system resumption [ 703.878398][T14103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.989385][ T8712] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.007167][ T8712] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.151555][T14294] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.179157][T14294] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.223339][T14352] random: crng reseeded on system resumption [ 704.410744][ T7689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.460979][ T7689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.557118][ T7689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.578682][ T7689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.784933][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 705.772515][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 705.990855][T14385] __vm_enough_memory: pid: 14385, comm: syz.3.1681, bytes: 4398046511104 not enough memory for the allocation [ 706.023008][T14385] nbd: must specify a size in bytes for the device [ 706.111834][T14388] random: crng reseeded on system resumption [ 706.309234][T14374] Process accounting resumed [ 706.769716][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 707.770879][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 707.811312][T14420] FAULT_INJECTION: forcing a failure. [ 707.811312][T14420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 707.851817][T14412] nvme_fabrics: missing parameter 'transport=%s' [ 707.876878][T14412] nvme_fabrics: missing parameter 'nqn=%s' [ 707.894822][T14420] CPU: 0 UID: 0 PID: 14420 Comm: syz.2.1687 Tainted: G L syzkaller #0 PREEMPT(full) [ 707.894864][T14420] Tainted: [L]=SOFTLOCKUP [ 707.894874][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 707.894891][T14420] Call Trace: [ 707.894898][T14420] [ 707.894907][T14420] dump_stack_lvl+0x100/0x190 [ 707.894937][T14420] should_fail_ex.cold+0x5/0xa [ 707.894958][T14420] ? prepare_alloc_pages+0x16d/0x5f0 [ 707.894997][T14420] should_fail_alloc_page+0xeb/0x140 [ 707.895029][T14420] prepare_alloc_pages+0x1f0/0x5f0 [ 707.895068][T14420] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 707.895117][T14420] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 707.895144][T14420] ? arch_stack_walk+0xa6/0xf0 [ 707.895181][T14420] ? __lock_acquire+0x49f/0x1a40 [ 707.895215][T14420] ? stack_trace_save+0x8e/0xc0 [ 707.895243][T14420] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 707.895273][T14420] ? lock_acquire+0x1b9/0x370 [ 707.895315][T14420] ? __mutex_lock+0x26d/0x1bd0 [ 707.895337][T14420] ? ring_buffer_map+0x17c/0xc80 [ 707.895369][T14420] ? mas_wr_walk_descend+0x506/0xac0 [ 707.895401][T14420] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 707.895434][T14420] ? policy_nodemask+0xed/0x4f0 [ 707.895465][T14420] alloc_pages_mpol+0x1fb/0x540 [ 707.895496][T14420] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 707.895528][T14420] ? mas_preallocate+0x521/0x14a0 [ 707.895558][T14420] alloc_pages_noprof+0x1a/0x160 [ 707.895592][T14420] ring_buffer_map+0x832/0xc80 [ 707.895632][T14420] ? vm_area_alloc+0x1f/0x160 [ 707.895688][T14420] tracing_buffers_mmap+0x117/0x1b0 [ 707.895714][T14420] __mmap_region+0x13c7/0x2db0 [ 707.895758][T14420] ? __pfx___mmap_region+0x10/0x10 [ 707.895795][T14420] ? __pfx___might_resched+0x10/0x10 [ 707.895836][T14420] ? down_write+0x146/0x1f0 [ 707.895869][T14420] ? process_measurement+0x1f4/0x2350 [ 707.895900][T14420] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 707.895943][T14420] ? __lock_acquire+0x49f/0x1a40 [ 707.895991][T14420] ? find_held_lock+0x2b/0x80 [ 707.896017][T14420] ? is_bpf_text_address+0x8a/0x1a0 [ 707.896109][T14420] mmap_region+0x35d/0x620 [ 707.896136][T14420] ? __pfx_mmap_region+0x10/0x10 [ 707.896165][T14420] ? bpf_lsm_capable+0x9/0x10 [ 707.896187][T14420] ? security_capable+0x80/0x260 [ 707.896226][T14420] do_mmap+0xc63/0x12f0 [ 707.896261][T14420] ? __pfx_do_mmap+0x10/0x10 [ 707.896290][T14420] ? __pfx_down_write_killable+0x10/0x10 [ 707.896321][T14420] vm_mmap_pgoff+0x29e/0x470 [ 707.896355][T14420] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 707.896382][T14420] ? __fget_files+0x215/0x3d0 [ 707.896422][T14420] ? __fget_files+0x21f/0x3d0 [ 707.896461][T14420] ksys_mmap_pgoff+0x3cb/0x610 [ 707.896493][T14420] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 707.896520][T14420] ? fput+0x79/0x100 [ 707.896544][T14420] ? ksys_write+0x1ac/0x250 [ 707.896578][T14420] ? __pfx_ksys_write+0x10/0x10 [ 707.896615][T14420] __x64_sys_mmap+0x125/0x190 [ 707.896644][T14420] do_syscall_64+0x115/0x840 [ 707.896664][T14420] ? clear_bhb_loop+0x40/0x90 [ 707.896692][T14420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.896716][T14420] RIP: 0033:0x7ff45bf9de59 [ 707.896735][T14420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.896758][T14420] RSP: 002b:00007ff45ce44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 707.896781][T14420] RAX: ffffffffffffffda RBX: 00007ff45c225fa0 RCX: 00007ff45bf9de59 [ 707.896796][T14420] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 707.896811][T14420] RBP: 00007ff45ce44090 R08: 0000000000000003 R09: 0000000000002000 [ 707.896825][T14420] R10: 000000000008e051 R11: 0000000000000246 R12: 0000000000000001 [ 707.896839][T14420] R13: 00007ff45c226038 R14: 00007ff45c225fa0 R15: 00007ffdee25bbd8 [ 707.896870][T14420] [ 708.781114][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 709.769396][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 710.587071][T14463] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 710.772840][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 710.808606][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1698'. [ 711.444399][T14471] FAULT_INJECTION: forcing a failure. [ 711.444399][T14471] name failslab, interval 1, probability 0, space 0, times 0 [ 711.540015][T14471] CPU: 0 UID: 0 PID: 14471 Comm: syz.2.1701 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.540071][T14471] Tainted: [L]=SOFTLOCKUP [ 711.540079][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 711.540092][T14471] Call Trace: [ 711.540099][T14471] [ 711.540108][T14471] dump_stack_lvl+0x100/0x190 [ 711.540138][T14471] should_fail_ex.cold+0x5/0xa [ 711.540163][T14471] should_failslab+0xc2/0x120 [ 711.540193][T14471] __kmalloc_noprof+0xfc/0x820 [ 711.540219][T14471] ? ring_buffer_map+0x219/0xc80 [ 711.540255][T14471] ring_buffer_map+0x219/0xc80 [ 711.540292][T14471] ? vm_area_alloc+0x1f/0x160 [ 711.540330][T14471] tracing_buffers_mmap+0x117/0x1b0 [ 711.540356][T14471] __mmap_region+0x13c7/0x2db0 [ 711.540399][T14471] ? __pfx___mmap_region+0x10/0x10 [ 711.540433][T14471] ? __pfx___might_resched+0x10/0x10 [ 711.540473][T14471] ? down_write+0x146/0x1f0 [ 711.540505][T14471] ? process_measurement+0x1f4/0x2350 [ 711.540534][T14471] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 711.540576][T14471] ? __lock_acquire+0x49f/0x1a40 [ 711.540623][T14471] ? find_held_lock+0x2b/0x80 [ 711.540666][T14471] ? is_bpf_text_address+0x8a/0x1a0 [ 711.540742][T14471] mmap_region+0x35d/0x620 [ 711.540768][T14471] ? __pfx_mmap_region+0x10/0x10 [ 711.540797][T14471] ? bpf_lsm_capable+0x9/0x10 [ 711.540819][T14471] ? security_capable+0x80/0x260 [ 711.540859][T14471] do_mmap+0xc63/0x12f0 [ 711.540895][T14471] ? __pfx_do_mmap+0x10/0x10 [ 711.540924][T14471] ? __pfx_down_write_killable+0x10/0x10 [ 711.540955][T14471] vm_mmap_pgoff+0x29e/0x470 [ 711.540989][T14471] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 711.541016][T14471] ? __fget_files+0x215/0x3d0 [ 711.541064][T14471] ? __fget_files+0x21f/0x3d0 [ 711.541104][T14471] ksys_mmap_pgoff+0x3cb/0x610 [ 711.541137][T14471] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 711.541165][T14471] ? fput+0x79/0x100 [ 711.541188][T14471] ? ksys_write+0x1ac/0x250 [ 711.541222][T14471] ? __pfx_ksys_write+0x10/0x10 [ 711.541259][T14471] __x64_sys_mmap+0x125/0x190 [ 711.541289][T14471] do_syscall_64+0x115/0x840 [ 711.541310][T14471] ? clear_bhb_loop+0x40/0x90 [ 711.541338][T14471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.541363][T14471] RIP: 0033:0x7ff45bf9de59 [ 711.541381][T14471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.541404][T14471] RSP: 002b:00007ff45ce44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 711.541426][T14471] RAX: ffffffffffffffda RBX: 00007ff45c225fa0 RCX: 00007ff45bf9de59 [ 711.541441][T14471] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 711.541455][T14471] RBP: 00007ff45ce44090 R08: 0000000000000003 R09: 0000000000002000 [ 711.541469][T14471] R10: 000000000008e051 R11: 0000000000000246 R12: 0000000000000001 [ 711.541483][T14471] R13: 00007ff45c226038 R14: 00007ff45c225fa0 R15: 00007ffdee25bbd8 [ 711.541513][T14471] [ 712.008571][T14475] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1700'. [ 712.770077][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 713.010730][T14481] syz.3.1703 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 713.769570][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 714.769560][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 715.112987][T14476] Invalid ELF header magic: != ELF [ 715.770034][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 716.769458][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 717.557563][T11647] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 717.769379][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 718.770925][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 719.363594][T14519] FAULT_INJECTION: forcing a failure. [ 719.363594][T14519] name failslab, interval 1, probability 0, space 0, times 0 [ 719.410435][T14519] CPU: 0 UID: 0 PID: 14519 Comm: syz.4.1710 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.410474][T14519] Tainted: [L]=SOFTLOCKUP [ 719.410482][T14519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 719.410496][T14519] Call Trace: [ 719.410504][T14519] [ 719.410513][T14519] dump_stack_lvl+0x100/0x190 [ 719.410544][T14519] should_fail_ex.cold+0x5/0xa [ 719.410571][T14519] should_failslab+0xc2/0x120 [ 719.410601][T14519] __kvmalloc_node_noprof+0x116/0x970 [ 719.410631][T14519] ? do_raw_spin_lock+0x128/0x260 [ 719.410654][T14519] ? alloc_fdtable+0x110/0x2d0 [ 719.410693][T14519] alloc_fdtable+0x110/0x2d0 [ 719.410728][T14519] dup_fd+0x995/0xd10 [ 719.410767][T14519] ? __fget_files+0x21f/0x3d0 [ 719.410805][T14519] ksys_unshare+0x802/0xab0 [ 719.410854][T14519] ? __pfx_ksys_unshare+0x10/0x10 [ 719.410893][T14519] __x64_sys_unshare+0x31/0x40 [ 719.410921][T14519] do_syscall_64+0x115/0x840 [ 719.410945][T14519] ? clear_bhb_loop+0x40/0x90 [ 719.410974][T14519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.410998][T14519] RIP: 0033:0x7f814e59de59 [ 719.411018][T14519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.411042][T14519] RSP: 002b:00007f814f533028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 719.411066][T14519] RAX: ffffffffffffffda RBX: 00007f814e825fa0 RCX: 00007f814e59de59 [ 719.411094][T14519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 719.411108][T14519] RBP: 00007f814e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 719.411122][T14519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.411136][T14519] R13: 00007f814e826038 R14: 00007f814e825fa0 R15: 00007ffdee354f08 [ 719.411165][T14519] [ 720.770341][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 721.158837][T11647] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 721.408423][T14534] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 721.769465][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 721.793319][T14532] [U] ^\ [ 722.769764][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 722.826463][T14543] random: crng reseeded on system resumption [ 723.769502][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 724.769472][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 725.572177][T14568] zswap: compressor û not available [ 725.769434][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 725.916475][T14575] block2mtd: illegal erase size [ 726.503400][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 726.769496][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 726.846586][T14583] FAULT_INJECTION: forcing a failure. [ 726.846586][T14583] name failslab, interval 1, probability 0, space 0, times 0 [ 727.058369][T14583] CPU: 0 UID: 0 PID: 14583 Comm: syz.4.1723 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.058408][T14583] Tainted: [L]=SOFTLOCKUP [ 727.058417][T14583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 727.058431][T14583] Call Trace: [ 727.058439][T14583] [ 727.058448][T14583] dump_stack_lvl+0x100/0x190 [ 727.058481][T14583] should_fail_ex.cold+0x5/0xa [ 727.058508][T14583] should_failslab+0xc2/0x120 [ 727.058539][T14583] __kmalloc_cache_noprof+0x91/0x6c0 [ 727.058579][T14583] ? do_raw_spin_lock+0x128/0x260 [ 727.058603][T14583] ? alloc_fdtable+0xbd/0x2d0 [ 727.058644][T14583] alloc_fdtable+0xbd/0x2d0 [ 727.058680][T14583] dup_fd+0x995/0xd10 [ 727.058721][T14583] ? apparmor_task_alloc+0x2c1/0x3b0 [ 727.058763][T14583] copy_process+0x2c94/0x8030 [ 727.058806][T14583] ? __pfx_copy_process+0x10/0x10 [ 727.058834][T14583] ? futex_wake+0x4ea/0x5e0 [ 727.058873][T14583] kernel_clone+0x176/0x9d0 [ 727.058902][T14583] ? __pfx_kernel_clone+0x10/0x10 [ 727.058944][T14583] __do_sys_clone+0xd9/0x120 [ 727.058971][T14583] ? __pfx___do_sys_clone+0x10/0x10 [ 727.058997][T14583] ? do_raw_spin_lock+0x128/0x260 [ 727.059043][T14583] do_syscall_64+0x115/0x840 [ 727.059065][T14583] ? clear_bhb_loop+0x40/0x90 [ 727.059095][T14583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.059120][T14583] RIP: 0033:0x7f814e59de59 [ 727.059140][T14583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.059165][T14583] RSP: 002b:00007f814f4f0fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 727.059196][T14583] RAX: ffffffffffffffda RBX: 00007f814e826180 RCX: 00007f814e59de59 [ 727.059212][T14583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 727.059226][T14583] RBP: 00007f814e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 727.059241][T14583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.059256][T14583] R13: 00007f814e826218 R14: 00007f814e826180 R15: 00007ffdee354f08 [ 727.059286][T14583] [ 727.539826][T14577] random: crng reseeded on system resumption [ 727.677646][ T5940] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 727.770652][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 727.782713][ T5940] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 727.836188][ T5940] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 727.924267][ T5940] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 727.932361][ T5940] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 728.769428][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 729.110065][T11647] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 729.135329][T14615] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 729.150206][T14615] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 729.158340][T14615] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 729.170732][T14615] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 729.770949][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 730.042928][T14615] Bluetooth: hci7: command tx timeout [ 730.769468][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 731.237456][T14615] Bluetooth: hci8: command tx timeout [ 731.364496][T14588] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.393727][T14588] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.425905][T14588] bridge_slave_0: entered allmulticast mode [ 731.469126][T14588] bridge_slave_0: entered promiscuous mode [ 731.511010][T14588] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.546469][T14588] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.615705][T14588] bridge_slave_1: entered allmulticast mode [ 731.653312][T14588] bridge_slave_1: entered promiscuous mode [ 731.770503][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 731.953282][T14588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.024627][T14588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.117442][T14615] Bluetooth: hci7: command tx timeout [ 732.421029][T14588] team0: Port device team_slave_0 added [ 732.469702][T14588] team0: Port device team_slave_1 added [ 732.680690][T14588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.716394][T14588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.771623][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 732.875404][T14588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.986683][T14588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.025050][T14588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.177652][T14588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.317851][T14615] Bluetooth: hci8: command tx timeout [ 733.511571][T14588] hsr_slave_0: entered promiscuous mode [ 733.543468][T14588] hsr_slave_1: entered promiscuous mode [ 733.575132][T14588] debugfs: 'hsr0' already exists in 'hsr' [ 733.602516][T14588] Cannot create hsr debugfs directory [ 733.769598][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 734.044733][T14615] Bluetooth: hci4: command 0x0406 tx timeout [ 734.197508][ T5940] Bluetooth: hci7: command tx timeout [ 734.769463][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 735.398013][ T5940] Bluetooth: hci8: command tx timeout [ 735.455326][T14611] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.499740][T14611] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.536076][T14611] bridge_slave_0: entered allmulticast mode [ 735.574730][T14611] bridge_slave_0: entered promiscuous mode [ 735.679612][T14611] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.701852][T14611] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.734132][T14611] bridge_slave_1: entered allmulticast mode [ 735.764234][T14611] bridge_slave_1: entered promiscuous mode [ 735.779981][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 736.109023][T14611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.154427][T14611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.278993][ T5940] Bluetooth: hci7: command tx timeout [ 736.480427][T14611] team0: Port device team_slave_0 added [ 736.523682][T14611] team0: Port device team_slave_1 added [ 736.769412][ T10] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 736.803594][T14611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.831333][T14611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.953897][T14611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.053453][T14611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.126267][T14611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.248328][T14611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.297229][T14588] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 737.342350][T14588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 737.416625][T14588] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 737.469365][T14588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 737.477586][ T5940] Bluetooth: hci8: command tx timeout [ 737.590144][T14588] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 737.670355][T14588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 737.739372][T14588] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 737.769561][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 737.818515][T14588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.965503][T14611] hsr_slave_0: entered promiscuous mode [ 737.994527][T14611] hsr_slave_1: entered promiscuous mode [ 738.029272][T14611] debugfs: 'hsr0' already exists in 'hsr' [ 738.076507][T14611] Cannot create hsr debugfs directory [ 738.769694][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 738.979666][T14588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.134868][T14588] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.169454][ T5940] Bluetooth: hci5: command 0x0406 tx timeout [ 739.770663][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 739.837047][ T9695] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.844297][ T9695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.991773][ T9695] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.999022][ T9695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.655009][T14611] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 740.696786][T14611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 740.722734][T14611] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 740.765818][T14611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 740.773991][ T5716] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 740.819630][T14611] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 740.844570][T14704] FAULT_INJECTION: forcing a failure. [ 740.844570][T14704] name failslab, interval 1, probability 0, space 0, times 0 [ 740.880749][T14611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 740.933966][T14611] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 741.009658][T14611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 741.046224][T14704] CPU: 0 UID: 0 PID: 14704 Comm: syz.4.1742 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.046265][T14704] Tainted: [L]=SOFTLOCKUP [ 741.046274][T14704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 741.046289][T14704] Call Trace: [ 741.046296][T14704] [ 741.046305][T14704] dump_stack_lvl+0x100/0x190 [ 741.046341][T14704] should_fail_ex.cold+0x5/0xa [ 741.046369][T14704] should_failslab+0xc2/0x120 [ 741.046402][T14704] __kmalloc_cache_noprof+0x91/0x6c0 [ 741.046442][T14704] ? do_raw_spin_lock+0x128/0x260 [ 741.046467][T14704] ? alloc_fdtable+0xbd/0x2d0 [ 741.046508][T14704] alloc_fdtable+0xbd/0x2d0 [ 741.046544][T14704] dup_fd+0x995/0xd10 [ 741.046594][T14704] ? apparmor_task_alloc+0x2c1/0x3b0 [ 741.046638][T14704] copy_process+0x2c94/0x8030 [ 741.046681][T14704] ? __pfx_copy_process+0x10/0x10 [ 741.046708][T14704] ? futex_wake+0x4ea/0x5e0 [ 741.046748][T14704] kernel_clone+0x176/0x9d0 [ 741.046777][T14704] ? __pfx_kernel_clone+0x10/0x10 [ 741.046819][T14704] __do_sys_clone+0xd9/0x120 [ 741.046846][T14704] ? __pfx___do_sys_clone+0x10/0x10 [ 741.046872][T14704] ? do_raw_spin_lock+0x128/0x260 [ 741.046917][T14704] do_syscall_64+0x115/0x840 [ 741.046940][T14704] ? clear_bhb_loop+0x40/0x90 [ 741.046969][T14704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.046994][T14704] RIP: 0033:0x7f814e59de59 [ 741.047014][T14704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.047042][T14704] RSP: 002b:00007f814f4f0fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 741.047066][T14704] RAX: ffffffffffffffda RBX: 00007f814e826180 RCX: 00007f814e59de59 [ 741.047082][T14704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 741.047097][T14704] RBP: 00007f814e633e6f R08: 0000000000000000 R09: 0000000000000000 [ 741.047112][T14704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.047126][T14704] R13: 00007f814e826218 R14: 00007f814e826180 R15: 00007ffdee354f08 [ 741.047156][T14704] [ 741.579704][T14703] random: crng reseeded on system resumption [ 741.778012][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 742.422300][T14611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.522625][T14611] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.580853][ T9694] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.588195][ T9694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.730548][ T9694] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.737795][ T9694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.769813][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 743.769547][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 744.411453][T14588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.770282][ T5729] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 745.776026][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 745.940079][T14611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.357077][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1752'. [ 746.599052][T14781] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1752'. [ 746.678084][ T31] INFO: task syz.0.1379:12791 blocked for more than 143 seconds. [ 746.705640][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 746.737257][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 746.780190][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 746.797894][ T31] task:syz.0.1379 state:D stack:27528 pid:12791 tgid:12790 ppid:5632 task_flags:0x400140 flags:0x00080002 [ 746.855988][ T31] Call Trace: [ 746.872622][ T31] [ 746.888999][ T31] __schedule+0x125c/0x6730 [ 746.909470][ T31] ? do_raw_spin_lock+0x128/0x260 [ 746.945080][ T31] ? __pfx___schedule+0x10/0x10 [ 747.005640][ T31] ? find_held_lock+0x2b/0x80 [ 747.054246][ T31] ? schedule+0x225/0x2c0 [ 747.090117][ T31] schedule+0xdd/0x2c0 [ 747.115764][ T31] schedule_preempt_disabled+0x13/0x30 [ 747.152983][ T31] __mutex_lock+0xccc/0x1bd0 [ 747.178740][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 747.207062][ T31] ? __lock_acquire+0x49f/0x1a40 [ 747.230065][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 747.252741][ T31] ? net_generic+0xea/0x2a0 [ 747.266622][ T31] ? net_generic+0xea/0x2a0 [ 747.285470][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 747.304863][ T31] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 747.326696][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.333206][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.349177][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 747.367419][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 747.386381][ T31] ? genl_get_cmd+0x3e7/0x760 [ 747.412042][ T31] ? bpf_lsm_capable+0x9/0x10 [ 747.428899][ T31] ? security_capable+0x80/0x260 [ 747.439193][ T31] genl_rcv_msg+0x560/0x800 [ 747.467088][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 747.487504][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 747.493841][ T31] netlink_rcv_skb+0x159/0x420 [ 747.507763][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 747.519153][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 747.537418][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 747.542809][ T31] genl_rcv+0x28/0x40 [ 747.546860][ T31] netlink_unicast+0x585/0x850 [ 747.568782][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 747.575780][ T31] netlink_sendmsg+0x8b0/0xda0 [ 747.588943][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.599114][ T31] ? apparmor_socket_sendmsg+0x15b/0x270 [ 747.617410][ T31] ____sys_sendmsg+0xa4d/0xbe0 [ 747.623745][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.637421][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.647712][ T31] ? plist_check_list+0x1b8/0x280 [ 747.667485][ T31] ? plist_del+0x308/0x510 [ 747.672037][ T31] ___sys_sendmsg+0x190/0x1e0 [ 747.688826][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.694123][ T31] ? __lock_acquire+0x49f/0x1a40 [ 747.707483][ T31] ? futex_wake+0x220/0x5e0 [ 747.720726][ T31] __sys_sendmsg+0x160/0x210 [ 747.726260][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 747.738705][ T31] do_syscall_64+0x115/0x840 [ 747.749131][ T31] ? clear_bhb_loop+0x40/0x90 [ 747.767483][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.774176][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 747.785622][ T31] RIP: 0033:0x7fddba99de59 [ 747.802165][ T31] RSP: 002b:00007fddbb93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.829656][ T31] RAX: ffffffffffffffda RBX: 00007fddbac25fa0 RCX: 00007fddba99de59 [ 747.849290][ T31] RDX: 000000000000c840 RSI: 0000200000000480 RDI: 0000000000000003 [ 747.867438][ T31] RBP: 00007fddbaa33e6f R08: 0000000000000000 R09: 0000000000000000 [ 747.887572][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.907523][ T31] R13: 00007fddbac26038 R14: 00007fddbac25fa0 R15: 00007ffef3fcfe38 [ 747.918632][ T31] [ 747.936865][ T31] [ 747.936865][ T31] Showing all locks held in the system: [ 748.021536][ T31] 1 lock held by khungtaskd/31: [ 748.040457][ T31] #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 748.098413][ T31] 2 locks held by getty/5379: [ 748.121782][ T31] #0: ffff88802a8160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 748.147416][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 748.170041][ T31] 3 locks held by kworker/0:4/5729: [ 748.187462][ T31] #0: ffff88801bc07140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 748.210098][ T31] #1: ffffc90004457d08 (netdev_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 748.238871][ T31] #2: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x71/0x880 [ 748.257439][ T31] 3 locks held by kworker/u10:34/9694: [ 748.267044][ T31] #0: ffff88801bc4c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 748.297813][ T31] #1: ffffc90003d57d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 748.318842][ T31] #2: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 748.340283][ T31] 3 locks held by kworker/u10:35/9695: [ 748.358551][ T31] #0: ffff88802c595940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 748.387428][ T31] #1: ffffc90003d47d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 748.407412][ T31] #2: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 748.430246][ T31] 3 locks held by kworker/u10:38/9699: [ 748.440494][ T31] #0: ffff88801dbdd140 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 748.467424][ T31] #1: ffffc90003cf7d08 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 748.497455][ T31] #2: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xb9/0x640 [ 748.529279][ T31] 2 locks held by syz.1.1377/12782: [ 748.534894][ T31] #0: ffffffff90b4d948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 748.557440][ T31] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 748.587405][ T31] 2 locks held by syz.0.1379/12791: [ 748.592701][ T31] #0: ffffffff90b4d948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 748.617432][ T31] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 748.629468][ T31] 3 locks held by syz-executor/12986: [ 748.648627][ T31] #0: ffff888057138ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 748.667449][ T31] #1: ffff8880571380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 748.697394][ T31] #2: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 748.717410][ T31] 2 locks held by syz-executor/12997: [ 748.722835][ T31] #0: ffff888034f060d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 748.749754][ T31] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 748.769451][ T5787] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 748.782747][ T31] 2 locks held by syz-executor/14103: [ 748.796231][ T31] #0: ffff8880770e40d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 748.819672][ T31] #1: ffffffff8f06f2a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 748.844528][ T31] 4 locks held by kworker/u10:0/14294: [ 748.861734][ T31] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 748.887401][ T31] #1: ffffc900054cfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 748.919340][ T31] #2: ffffffff90a86148 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 748.937452][ T31] #3: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_notifier_net+0x1c/0xf0 [ 748.957448][ T31] 1 lock held by syz.2.1704/14483: [ 748.964088][ T31] 1 lock held by syz-executor/14588: [ 748.978548][ T31] #0: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x49c/0x1bb0 [ 749.010292][ T31] 1 lock held by syz-executor/14611: [ 749.027399][ T31] #0: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 749.047441][ T31] 4 locks held by syz.4.1752/14779: [ 749.052889][ T31] #0: ffffffff90b4d948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 749.069149][ T31] #1: ffffffff90a9ed40 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xae0 [ 749.097440][ T31] #2: ffff8880133d07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0x10a/0x1a0 [ 749.122174][ T31] #3: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 749.147418][ T31] 1 lock held by syz.3.1754/14784: [ 749.154091][ T31] #0: ffffffff8ebf1a28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 749.180629][ T31] [ 749.199224][ T31] ============================================= [ 749.199224][ T31] [ 749.238035][ T31] NMI backtrace for cpu 0 [ 749.238058][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 749.238091][ T31] Tainted: [L]=SOFTLOCKUP [ 749.238099][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 749.238113][ T31] Call Trace: [ 749.238123][ T31] [ 749.238131][ T31] dump_stack_lvl+0x100/0x190 [ 749.238162][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 749.238190][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 749.238219][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 749.238255][ T31] sys_info+0x141/0x190 [ 749.238281][ T31] watchdog+0xcb1/0x1030 [ 749.238319][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 749.238354][ T31] ? __pfx_watchdog+0x10/0x10 [ 749.238386][ T31] ? __kthread_parkme+0x18c/0x230 [ 749.238413][ T31] ? kthread+0x13a/0x450 [ 749.238440][ T31] ? __pfx_watchdog+0x10/0x10 [ 749.238469][ T31] kthread+0x370/0x450 [ 749.238496][ T31] ? __pfx_kthread+0x10/0x10 [ 749.238526][ T31] ret_from_fork+0x72b/0xd50 [ 749.238553][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 749.238581][ T31] ? __switch_to+0x800/0x10f0 [ 749.238614][ T31] ? __switch_to_asm+0x39/0x70 [ 749.238646][ T31] ? __pfx_kthread+0x10/0x10 [ 749.238682][ T31] ret_from_fork_asm+0x1a/0x30 [ 749.238726][ T31] [ 749.769419][T13180] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 750.076862][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 750.083772][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 750.094474][ T31] Tainted: [L]=SOFTLOCKUP [ 750.098799][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 750.108884][ T31] Call Trace: [ 750.112187][ T31] [ 750.115146][ T31] dump_stack_lvl+0x100/0x190 [ 750.119864][ T31] vpanic+0x552/0x970 [ 750.123886][ T31] ? __pfx_vpanic+0x10/0x10 [ 750.128414][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 750.134603][ T31] panic+0xd1/0xe0 [ 750.138353][ T31] ? __pfx_panic+0x10/0x10 [ 750.142785][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 750.148961][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 750.155135][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 750.161312][ T31] ? watchdog.cold+0x1ec/0x234 [ 750.166091][ T31] ? watchdog+0xcc1/0x1030 [ 750.170534][ T31] watchdog.cold+0x1fd/0x234 [ 750.175162][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 750.181020][ T31] ? __pfx_watchdog+0x10/0x10 [ 750.185738][ T31] ? __kthread_parkme+0x18c/0x230 [ 750.190944][ T31] ? kthread+0x13a/0x450 [ 750.195222][ T31] ? __pfx_watchdog+0x10/0x10 [ 750.199928][ T31] kthread+0x370/0x450 [ 750.204032][ T31] ? __pfx_kthread+0x10/0x10 [ 750.208667][ T31] ret_from_fork+0x72b/0xd50 [ 750.213289][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 750.218416][ T31] ? __switch_to+0x800/0x10f0 [ 750.223123][ T31] ? __switch_to_asm+0x39/0x70 [ 750.227916][ T31] ? __pfx_kthread+0x10/0x10 [ 750.232549][ T31] ret_from_fork_asm+0x1a/0x30 [ 750.237541][ T31] [ 750.240652][ T31] Kernel Offset: disabled [ 750.244989][ T31] Rebooting in 86400 seconds..