last executing test programs: 9m27.873121255s ago: executing program 3 (id=899): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0xf7374674b920089e) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = socket(0x2b, 0x1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x29, 0x2, 0x0) setuid$auto(0xe) mmap$auto(0x20000000000, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) setsockopt$auto(r1, 0x29, 0x20, 0x0, 0x21) r3 = socket(0x29, 0x2, 0x0) ioctl$auto(r3, 0x89f0, 0x24) 9m27.615586603s ago: executing program 3 (id=900): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) shmget$auto(0x8, 0x14564, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x6a9, 0x70bd2a, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '\\\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x880) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) 9m25.726169896s ago: executing program 3 (id=907): r0 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) pwrite64$auto(r3, &(0x7f0000000040)='+\x00', 0xfdef, 0x1ff) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f0000000180)={r1, 0x0, 0x0, 0x8, 0x7ff, 0x7f0}) vmsplice$auto(r4, &(0x7f0000000240)={&(0x7f00000001c0)="ad0e97859b0c46128d6212e83ab9ffd101ffb6c07062b5b16de88427e4e25f9db60cb89889cf5bea8dca11bddaff137c821eab6c889fed8089341c52daed1e7f8e0ec39c6cc170a63f8a1dcc02da0f8b9ebc7108c39f0575861051132ddf9bdd457f9f49d082fc0122a9056144f0aa13c5789b400ad863c05cb5", 0x9}, 0x0, 0x1) openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) ppoll$auto(&(0x7f0000000080)={r0, 0x9, 0xf0}, 0x1000, &(0x7f0000000100)={0x5}, &(0x7f0000000140)={0x3}, 0x8) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x8a200, 0x0) mmap$auto(0x3, 0x2c7d, 0x1, 0x13, r3, 0x80) pread64$auto(r5, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x200000000003, 0x8) connect$auto(0x3, 0x0, 0x50) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvmmsg$auto(r2, 0x0, 0x10000, 0x2, 0x0) 9m24.364926794s ago: executing program 3 (id=915): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty12\x00', 0x800, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') clone3$auto(&(0x7f0000000000)={0x9, 0xd3d, 0xf, 0x10200000, 0x3, 0x200, 0x4000000050, 0x5, 0x3, 0xb, 0xd}, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x82000, 0x0) read$auto_bm_entry_operations_binfmt_misc(r0, 0x0, 0x0) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) chdir$auto(&(0x7f00000001c0)='}[,&*}\x00') pivot_root$auto(&(0x7f0000000040)='..\x00', 0x0) 9m24.185778263s ago: executing program 3 (id=916): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) shmget$auto(0x8, 0x14564, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x6a9, 0x70bd2a, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '\\\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x880) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) 9m21.916733518s ago: executing program 3 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) r4 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) read$auto(r3, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x2) ioperm$auto(0x7, 0x6, 0x80) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) wait4$auto(r2, 0x0, 0x80000000, 0x0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000076d3bea485bdd0f4d17ff8b18ac544e88cd75c4e5c3c6648aa48fa4793b20011992ad8593b6c2c0359b6d893fb8295e361a03b8946baaec5ab2740d4d0449307bc012af4ea8ee148b271892a1f8ddb842ffdfb7ec9e0ed8a15dbe34fef45fbaa0825284ab30f28fd2909234867fe67f533f32e62623b87de3bb6e479dd16703e3ddc9be1755eb687eb6df2ca5e790000", @ANYRES16=r1, @ANYBLOB="2bb22bbd7000fcdbdf250500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) sendfile$auto(r6, r6, 0x0, 0x6) 9m6.6076565s ago: executing program 32 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) r4 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) read$auto(r3, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x2) ioperm$auto(0x7, 0x6, 0x80) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) wait4$auto(r2, 0x0, 0x80000000, 0x0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000076d3bea485bdd0f4d17ff8b18ac544e88cd75c4e5c3c6648aa48fa4793b20011992ad8593b6c2c0359b6d893fb8295e361a03b8946baaec5ab2740d4d0449307bc012af4ea8ee148b271892a1f8ddb842ffdfb7ec9e0ed8a15dbe34fef45fbaa0825284ab30f28fd2909234867fe67f533f32e62623b87de3bb6e479dd16703e3ddc9be1755eb687eb6df2ca5e790000", @ANYRES16=r1, @ANYBLOB="2bb22bbd7000fcdbdf250500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) sendfile$auto(r6, r6, 0x0, 0x6) 29.780598988s ago: executing program 2 (id=3970): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x7, 0x400008, 0x5c, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/hugepages/hugepages-2048kB/free_hugepages\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/71, 0x47) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mlock$auto(0x1, 0x500) ioctl$auto_TIOCGDEV2(r2, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0x5, 0x10, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x7f) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x4, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r4 = getpgid(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{@inferred=0xffffffffffffffff, 0x4, 0x1, 0x0, "bfc956f7b829ea9bc64a831c54b927c5c84cdfcb6d840bf6034bbe162b339fcc0b9ad62f05f5e47256dc5c36", @raw=0x4}, 0x0, 0x5, 0xd77e, @inferred=r4, @integer={0x5, 0x2, 0x5}, "ff0931dc5a3fb879791acf380abcfd7f9f393a68114cc9d69244416e96525a166b971aae562cbc70472d48eb5f54d36edf407701d0d1c4e40409e86cafa60765"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x414041, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x800008000) getpid() socket(0xa, 0x2, 0x0) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) 27.83403706s ago: executing program 0 (id=3980): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x8000000, &(0x7f00000001c0)=@test={r1, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x6, 0x81, 0x68198}, 0x6) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) 27.630303066s ago: executing program 2 (id=3981): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = memfd_create$auto(0x0, 0x9) fcntl$auto(0xff80000000000000, 0x409, 0x13) fallocate$auto(r0, 0x3, 0x2, 0x4) madvise$auto(0x3c7, 0xffff, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x0, 0x2, &(0x7f0000000000)={@siginfo_0_0={0x8, 0x5, 0x3, @_rt={0x0, 0xffffffffffffffff, @sival_int=0x1}}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xb, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x6, 0x0, 0x84) socket(0x10, 0x2, 0xc) mmap$auto(0x100000000, 0x4, 0x4000000000dd, 0x12, 0x401, 0x2) socket(0xa, 0x3, 0x3b) mmap$auto(0xfffffffffffffffc, 0x20009, 0x7, 0x16, 0x8000000401, 0x2) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x7, 0x0, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) set_mempolicy$auto(0x6, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0x6a) 27.289777003s ago: executing program 0 (id=3983): mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) pread64$auto(r4, 0x0, 0x2, 0x3) prctl$auto(0x3e, 0x4a, r1, 0x6, 0x80000001) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r6, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="64174ac4e15abcef89fbb0200000", @ANYRES16=r6, @ANYBLOB="28102bbd7000fddbdf251f0000000800a4000400000004004100"], 0x20}, 0x1, 0x0, 0x0, 0x8855}, 0x10) write$auto(r3, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_FICLONERANGE(r5, 0x4020940d, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x1000000009, r0, 0x0) open(0x0, 0x0, 0x408) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f00000000c0), r9) 26.348833664s ago: executing program 2 (id=3985): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, 0x0, 0x1000000, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25030000000a0005000000000000000000060006", @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 26.163169189s ago: executing program 0 (id=3987): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000780)="906f319d493614e6834bb14c5d8ba668ea3fe49b929347b1a2f5cd2d8bbea5a6e4a616ae542f1291fe274b9b559d6f3f0108fbb2b68f1c04d38107f490c44e278f81cb231be4de752bb862cc", 0x100000000}, 0x6, 0x0) io_uring_setup$auto(0x1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x3, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, 0x0, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x8001, 0x6, 0x0, 0x9, [0xff, 0xf, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]}) setresuid$auto(0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000480)={{0xa, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}, 0x6ab, 0x6, 0x3, 0x8000000000000000, @inferred=0xffffffffffffffff, @raw=0xc1f, 0x3000, 0x0, &(0x7f0000000340)="de029906c9fdbd6e52a9b192e1eda36e11562662d39dee67e118a2ae1300895a41042fcbe1436712ed4619078cbcc52e729415a58d3bb3a460315665c395918e49917e3952f155b12c2e9a363f513d78f420ac395aa964d885d788a41099b7c17d9422cffce8a1ebf89ad42efddee1de0489e7e82fda0f", &(0x7f0000000400)}) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) ioctl$auto_EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000500)={0x6, 0x3, 0x4, 0x0, 0x1, 0x0, [{0xffffffffffff7a7e, 0x6, 0x80000000, '\x00', 0x8}, {0xf, 0x9, 0x5}, {0x7, 0x0, 0xf, '\x00', 0x7}, {0xc, 0xc66f, 0xa, '\x00', 0xa}, {0x2, 0x0, 0x3, '\x00', 0x4f}, {0x1, 0x3, 0x4, '\x00', 0x101}, {0x0, 0x6, 0x10, '\x00', 0x99eb}, {0x3, 0x5, 0x3, '\x00', 0x2}, {0xd14ef1, 0x7, 0x9, '\x00', 0x903}, {0xfffffffffffff01a, 0xba, 0x1}]}) kexec_load$auto(0x6, 0x2, 0x0, 0x4) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) r4 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) write$auto_ctl_device_fops_user(r4, &(0x7f00000000c0)="cd55e6559904f6699d615b0ad7297a1d6479873f1f2c3fd41c4b6c497c37747fb4130b7c72ddd96ef23afbb5bfea71023da7d55508b54b7f44d07f9a5584e98424639a884d8a801664a6863f7f4349a5b4e6d583cffe1683379deeffa3b5e3359792c07c83c135b9f3", 0x69) 25.434564012s ago: executing program 2 (id=3990): close_range$auto(0xffffffffffffffff, 0x8, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioprio_set$auto(0x2, 0x800000000, 0x8) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) ioctl$auto(r2, 0xab03, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) write$auto(r4, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) sendmsg$auto_SMC_PNETID_ADD(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_IBNAME={0xb, 0x3, '\'[\':]%\x00'}, @SMC_PNETID_NAME={0x7, 0x1, '\xf8/\x00'}, @SMC_PNETID_ETHNAME={0x6, 0x2, '$\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x801) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x40002, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual/thermal/cooling_device0/max_state\x00', 0x500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000005c0)=""/8, 0x8) ioctl$auto_CEC_DQEVENT(r5, 0xc0506107, 0x0) madvise$auto(0x6, 0xeff, 0x15) writev$auto(r5, &(0x7f00000001c0)={0x0, 0x1}, 0x7ff) sendfile$auto(0x1, 0x3, 0x0, 0x400000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 24.531352065s ago: executing program 0 (id=3992): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/pcm0p/sub3/status\x00', 0x1900, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x82, 0x0) socket(0xa, 0x801, 0x84) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000240), 0x5094c1, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999", @inferred=0xffffffffffffffff}) ppoll$auto(&(0x7f0000000100)={r2, 0x3ff, 0x4}, 0x6, 0x0, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x240382, 0x0) r4 = epoll_create$auto(0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x0, 0x7fff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) listen$auto(0x3, 0x81) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = getpgid(0xffffffffffffffff) sendmsg$auto_IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="68130000", @ANYRES16=r6, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=r7, @ANYBLOB="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"], 0x1368}, 0x1, 0x0, 0x0, 0x80}, 0x20040850) r8 = getpid() process_vm_readv$auto(r8, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0xffffffffffffffff, 0x29, 0xfffffffc, &(0x7f0000001a40)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff;\xf1\x94\x1cl\xc7\xbf1\x00\x00\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\x9c\x97\xcb\x97\x19V-\x1f\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2B\x00\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x04\xbe@aK\xe6g#2\xc1/\xb0\x0f\xaa\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\x85|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84\xda\xceKj_\f\x19\x9b\xd3\xe3\xee\x1e \'\xddTx\x15\x8fdq\a\x86\xb0\xe3[>P\xf1\f\xf5\xba|\xd1\xa5\x15 \xb2\x9b`\xf9\x9e\xd9Q\xd2\xe3\xe9\xf7\xcf\xbd\xba\x8a\xbb\x8b\xe3\xda\xa8\x06\xe0\x14\xcc*\xad{\xb2\xf8\xb6\xbb>\x1fO\x96k5\xd1M9\xf0\x9a\xda\xa1\xaa~X\xd7&\xde\xa3\rI\xad\xc4A\x12\xeae*/\x8f}\xb6\xe7\v\xaa\xe5c\x88\x03\xf9\xe8S\xd4\xe2<\x88\xc4+\xf4w\x0e\xfe\x13|\x05\xf0\xfc\xa4\xb4\xf5\xf8\xb1\xf2\x8dyE\xf4\xfc\xf4\x99\x00\xfb\xc9\x7f\x142d\x99UH\x90\x9b\x94e\xe5\xb3$^\xbc\xf6`\x9b=bC\xb4uME#\xc4\x99\x87\xb9~\x8cv\x84\xd6M/j>j\xd5j\xb2\xb1\xf7\xcbL\xfe\xd6\xce\n\x9d[!\xc6\xf7\x8d\x14\xf4\xad\xc4\xf0\xfd\x8f\xbc?\xf1\x80\x95J\nn|*\x81\x96\xe1M\xebS\'\x85\xcd\xc1\x95\n\x8a>\xd6\xf8\xf3\x11\xc6{\xba\x1f\xd7qK\x92\x95\x109\x80\x8c\x8f\x86j\xac\xdc\xb6\xe0\x88\xab}\xb3\xd6\xa3\x0f\xe4\xcc\xd2\xebn\xd7\xc89@f\xa6\xa2T8\xcbx8\x83\x83L', 0x402) sendmsg$auto_TIPC_NL_MON_PEER_GET(r5, &(0x7f0000001780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="20002bbd7000ffdbdf251300000036000000ada49ecd7ca6ca2dccbe7ffe7b80a57dc944d44632529b6da3bcf3a1f68b6cda9615941cab51095142c64d3aade15d381dde00001e000000d9b09818605829d4e8bc840e512734caab6b53de3ca64b05824e00001f1209800c00328008005600", @ANYRES32=r7, @ANYBLOB="2c00e2800400378014008300fe88000000000000000000018000000000000000", @ANYRES8=r3, @ANYBLOB="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", @ANYRES32=r0, @ANYRES32=r4], 0x1458}}, 0x8010) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) 23.857135315s ago: executing program 2 (id=3993): socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x29, 0xa, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="010425f1c20002dcdf0413ceb8b425030000000400080004000800080001d358a4ab1c7a12795396c8829e3bc87d27a10723f1b0a1067e6c8288bcefdd07e0cf0df2"], 0x24}, 0x1, 0x0, 0x0, 0x2c0d0}, 0x800) modify_ldt$auto(0x1, 0x0, 0x10) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r4, 0x0, 0x40000000f42c, 0x80202) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, r3, 0x0) io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0) close_range$auto(0x2, 0xa, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r6, 0x5408, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 22.322632224s ago: executing program 0 (id=3996): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) (async) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/workqueue/parameters/watchdog_thresh\x00', 0x1e2142, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/workqueue/parameters/watchdog_thresh\x00', 0x1e2142, 0x0) write$auto(r1, &(0x7f00000000c0)='.\\@\\/\xd5\xbe-]\x00', 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) (async) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) (async) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) (async) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r2, 0x80204d01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 22.154289006s ago: executing program 2 (id=3997): ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r0, 0x2, 0x0) getdents$auto(r0, 0x0, 0x62d4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='}[,&*}/file0\x00', &(0x7f0000000180)={0x189442, 0x30, 0x7}, 0x18) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd4\x00', 0x14f602, 0x0) readahead$auto(r1, 0x9, 0x7fffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setresuid$auto(0xd, 0x0, 0x221) setrlimit$auto(0x6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x50640, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xffffffff) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) connect$auto(0x3, 0x0, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 20.607285588s ago: executing program 0 (id=3999): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, 0x0, 0x1000000, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25030000000a0005000000000000000000060006", @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 19.28117457s ago: executing program 1 (id=4003): mmap$auto(0x0, 0xfffffffffffff800, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) write$auto(r0, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/ip_mr_vif\x00', 0x10800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x4008ae9c, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999", @raw=0xfffffff9}) ppoll$auto(&(0x7f0000000100)={0xffffffffffffffff, 0x3ff, 0x4}, 0x6, 0x0, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) 18.327351432s ago: executing program 1 (id=4006): socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x29, 0xa, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="010425f1c20002dcdf0413ceb8b425030000000400080004000800080001d358a4ab1c7a12795396c8829e3bc87d27a10723f1b0a1067e6c8288bcefdd07e0cf0df2"], 0x24}, 0x1, 0x0, 0x0, 0x2c0d0}, 0x800) modify_ldt$auto(0x1, 0x0, 0x10) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r4, 0x0, 0x40000000f42c, 0x80202) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, r3, 0x0) io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0) close_range$auto(0x2, 0xa, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r6, 0x5408, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 17.348940112s ago: executing program 1 (id=4007): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7}, 0x2) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/ns/cgroup\x00', 0xf81e09f4e322f53a, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xc0603d0f, 0x0) madvise$auto(0x9, 0xadf, 0xa) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2200, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) execveat$auto(r3, &(0x7f0000000080)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0x0, 0x0, 0x7) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x41}, 0x6, 0x0) write$auto(0x3, 0x0, 0x200ffd8) signalfd4$auto(0xffffffff, 0x0, 0x8, 0xffff) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0x9, 0x0, 0xfffffffffffffffe, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) read$auto(r2, 0x0, 0x10001) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x7}, 0x2) close_range$auto(0x2, 0xffffffffffffffff, 0xfffffffd) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyc7\x00', 0x3ed102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) 16.678701698s ago: executing program 1 (id=4010): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x8000000, &(0x7f00000001c0)=@test={r1, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x6, 0x81, 0x68198}, 0x6) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4, 0x1e}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x1b, 0x2, "d5ee63aea75a9d66346ce6fe2d5358bacb69eb3339afc4"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) 16.495837608s ago: executing program 1 (id=4012): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000780)="906f319d493614e6834bb14c5d8ba668ea3fe49b929347b1a2f5cd2d8bbea5a6e4a616ae542f1291fe274b9b559d6f3f0108fbb2b68f1c04d38107f490c44e278f81cb231be4de752bb862cc", 0x100000000}, 0x6, 0x0) io_uring_setup$auto(0x1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x3, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, 0x0, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x8001, 0x6, 0x0, 0x9, [0xff, 0xf, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]}) setresuid$auto(0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000480)={{0xa, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}, 0x6ab, 0x6, 0x3, 0x8000000000000000, @inferred=0xffffffffffffffff, @raw=0xc1f, 0x3000, 0x0, &(0x7f0000000340)="de029906c9fdbd6e52a9b192e1eda36e11562662d39dee67e118a2ae1300895a41042fcbe1436712ed4619078cbcc52e729415a58d3bb3a460315665c395918e49917e3952f155b12c2e9a363f513d78f420ac395aa964d885d788a41099b7c17d9422cffce8a1ebf89ad42efddee1de0489e7e82fda0f", &(0x7f0000000400)}) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) ioctl$auto_EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000500)={0x6, 0x3, 0x4, 0x0, 0x1, 0x0, [{0xffffffffffff7a7e, 0x6, 0x80000000, '\x00', 0x8}, {0xf, 0x9, 0x5}, {0x7, 0x0, 0xf, '\x00', 0x7}, {0xc, 0xc66f, 0xa, '\x00', 0xa}, {0x2, 0x0, 0x3, '\x00', 0x4f}, {0x1, 0x3, 0x4, '\x00', 0x101}, {0x0, 0x6, 0x10, '\x00', 0x99eb}, {0x3, 0x5, 0x3, '\x00', 0x2}, {0xd14ef1, 0x7, 0x9, '\x00', 0x903}, {0xfffffffffffff01a, 0xba, 0x1}]}) kexec_load$auto(0x6, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, 0x0, 0xb) r4 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) write$auto_ctl_device_fops_user(r4, &(0x7f00000000c0)="cd55e6559904f6699d615b0ad7297a1d6479873f1f2c3fd41c4b6c497c37747fb4130b7c72ddd96ef23afbb5bfea71023da7d55508b54b7f44d07f9a5584e98424639a884d8a801664a6863f7f4349a5b4e6d583cffe1683379deeffa3b5e3359792c07c83c135b9f3", 0x69) 15.829592993s ago: executing program 4 (id=4013): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x8000000, &(0x7f00000001c0)=@test={r1, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x6, 0x81, 0x68198}, 0x6) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) 15.574468957s ago: executing program 4 (id=4014): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) memfd_create$auto(0x0, 0xe) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) close_range$auto(0x2, 0x8, 0x0) socket(0x26, 0xa, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x3) bind$auto(0x3, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/tsx_async_abort\x00', 0xa000, 0x0) write$auto(r0, &(0x7f0000001200)='/sys/devices/virtual/block/ram9/diskseq\x00', 0xf04) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/4096, 0x1000) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) ioctl$auto_USBDEVFS_DISCSIGNAL32(r5, 0x8008550e, &(0x7f0000000040)={0x3, 0x2}) socketcall$auto(0xa, 0x0) 15.337402184s ago: executing program 1 (id=4015): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, 0x0, 0x1000000, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25030000000a00050000000000000000000600060003000000080002", @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 14.975504803s ago: executing program 4 (id=4016): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/midi2\x00', 0x519800, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000001d00)=0x800) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mmap$auto(0x3, 0x20009, 0xde, 0xeb1, r1, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x8) mincore$auto(0x0, 0xfffc, 0x0) (async) mincore$auto(0x0, 0xfffc, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) (async) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socketpair$auto(0x1e, 0x6, 0x8, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r2, 0x40095505, 0x0) r3 = socket(0xa, 0x3, 0x3c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x200000000008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240048d0}, 0x801) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240048d0}, 0x801) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/conex/uevent\x00', 0x464002, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) socket(0x5, 0x800, 0x0) (async) r5 = socket(0x5, 0x800, 0x0) setsockopt$auto(r5, 0x0, 0x40, 0x0, 0x6f7250c4) (async) setsockopt$auto(r5, 0x0, 0x40, 0x0, 0x6f7250c4) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000e7b8fd0875ffe79a39ec2702ac84b765ad401b35f7028e8ceb5a0b6d8aa45988dc9d8aa8ce50e7c8c7e3fed265d1aa7cba8db2ab9c046f86ce697898f2e135ab9a3a44220d9b44a01b3ef05a937eedf0527329902114891a6cc6f630340a31e819c749377e9ccb1c0e35fba3b91465b6930be8d4d88d38e0542925aab714d5616edb5f14b817c90214592d10213af1d721b06fb5bab1819d4c8389aa38069bb2fac479afdbc127f6d58822edcf", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000280002002f70726f632f7379732f6e65742f676f72652f7270735f646566617572c4422b9606c3a3"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48050) write$auto(r3, &(0x7f0000000080)='+&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7}, 0x6a) 13.178998821s ago: executing program 4 (id=4017): r0 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x60600, 0x0) r1 = io_uring_setup$auto(0x5, &(0x7f0000000040)={0x8, 0x5, 0x47579c3a, 0x9, 0x3, 0x3, r0, [0x1, 0x1, 0x56b], {0x9, 0x8001, 0x4, 0x401, 0x100, 0x0, 0xfffffffa, 0xb, 0x1}, {0x0, 0x2, 0x2, 0xfff, 0x0, 0x5, 0x33, 0x724d, 0xff}}) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x105400, 0x0) futex$auto(&(0x7f0000000140)=0x8, 0xbf33, 0x8, &(0x7f0000000180)={0x50, 0x6}, &(0x7f00000001c0)=0x9, 0x33) ioctl$auto_BTRFS_IOC_ENCODED_READ_32(r1, 0x80789440, &(0x7f0000000200)={0x8000, 0xd5, 0x100000000, 0x101, 0x1, 0xff, 0x2, 0xc6a, 0x87, "9b423b25467036c5ee86cbbc12d0413b4b3298f4faf392f8abe18b6136204012e51a54dbd596ee6b19f5455d2642a2453341365acb9a9bb8c5a207429fe6dfdc"}) r3 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy14/hwsim/group\x00', 0x2040, 0x0) setsockopt$auto_SO_BUSY_POLL_BUDGET(r3, 0x7a7d, 0x46, &(0x7f00000002c0)='\x00', 0x3) sendmsg$auto_SMC_NETLINK_DUMP_SEID(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, "dd7a3d426dd550cc8504818d6a80c1e912e5710e1b5a084b03"}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) read$auto(r1, &(0x7f0000000400)='/proc/thread-self/setgroups\x00', 0x1ff) getdents64$auto(r1, &(0x7f0000000440)={0x2, 0x2, 0x7, 0x4, "b0c710f62cd9c8e28b5f43f5ad705d4fbc5d9e8dfa70cb4c1213f3037b76abeef562acc09adeb53b4bd35c82793ae421ff9eaae08a7001ec1be7e6084c26a869ed4bb595926e1590321bbbea29d758c1a5c1cc1359705209d18c6db766a4be21ae6f33b67cacf5ce83b1452a06d29b509c5818360dedcda811accdf39cb6cf8a1ffd6a64acb2575f058abf72d7ea9704a6b424f3f9c6a903278061a2215ed1b7ee83da2a56bc"}, 0xfffffff7) bind$auto(r1, &(0x7f0000000500)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x9) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)=@bpf_attr_4={0xc, r1, 0x1, r1}, 0x41) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000600)=""/69, 0x45) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000680), r2) fcntl$auto_F_CREATED_QUERY(r5, 0x404, 0x2) setsockopt$auto_SO_PASSSEC(r2, 0x8, 0x22, &(0x7f00000006c0)='{#/\x00', 0x1) capset$auto(&(0x7f0000000740)={0xc990, 0xffffffffffffffff}, &(0x7f0000000780)={0x1, 0x6, 0x3}) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0xa}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xfe6e}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7ec8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xfd}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) clock_settime$auto(0x9, &(0x7f00000008c0)={0x3, 0x2}) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000009c0)={'ip6_vti0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r5, &(0x7f0000002d40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002d00)={&(0x7f0000000a00)={0x22f0, r8, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0x2251, 0x2, 0x0, 0x1, [@nested={0x1141, 0x11b, 0x0, 0x1, [@nested={0x4, 0xed}, @typed={0x8, 0xfd, 0x0, 0x0, @pid=r7}, @generic="842be0ee83cb7fae5b", @typed={0x4, 0x5a}, @generic="b9b4cad5731e43a7f8475e8db2ebb5c09490c56fd0565fc9649dca1a9208ba9dbfaf3cc90af1ee65f4db09c3bced664f8c72a4775600ce20bb1fdcf4a3afd84311030cd6e1d31129410dab7b01964fdf642426b9097883fa2379352efcff50bee222d1612c10f5cb24acd5d96d0e82ac42ac25f18ff0fa1f7a5f57730c07cd531f56896a672e4845ba615c9a8261c8a78f4089ed4beeb3e85f16699d09613f2c70edf9598cd8e29228f292e3fe1eec93c9914eeca381da4977de02077e", @generic="cdaee0fe285d4f948e00322efc0947287bf38c6f3f61f9be871c58f920281cbc8eb1d5c7c768aa4aa46a5e65551fca7aaf2ac9de5f8dd09fa04b0c9af86a6cb4cbe9d7df78fc069cbedcd323ab1a511d2933fadd480f00c2baa2330aa616cce1f58b43", @nested={0x4, 0xb9}, @generic="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"]}, @generic="169584eedbafd5e1769c8dbd1f1ac8ec45574da96e1dd773888f91945d7fe02ec0e3a2b184c7b1b68a437a59ef6d167ccc18", @generic="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", @generic="fac3e654820c0acbf7871b81457373627a562b563a306dd7fcf2759d062542a381fa538fca314d645ea5e25b0260e3370eb509acc43ee749f8e2ad3e882478718773116495428a873473e46f6a27575236bbae611a05a6468ac2ee0098a18fbd00a0330eb91d4f23ae906e47bbf81cd01a644b7c22e4c57d21b6bc7dd08def541be41c68b7ca7f0d61500b52ec727ae6261f323eefe29e8985306872b4b3305ee6582ea9d79523f0fbcf524371a51caf0e86424c4aa41d1bf969902df11f73be34465d6b43d1a0ec2f89f4afd0e1bb", @typed={0x8, 0x6c, 0x0, 0x0, @pid=r7}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3b}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x22f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r5, &(0x7f0000002f40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002dc0)={0x108, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_TSCONFIG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd77}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffd}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2c}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f}]}, @ETHTOOL_A_TSCONFIG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4040) read$auto(r2, &(0x7f0000002f80)='ipvlan0\x00', 0x3) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f0000002fc0)="22d99a585d0f14bc4b45679d0a46dcaeea1142f5b4a48a9ccee6cf5c6cbc0688c8f103589738dbf9d276a18186dc969a3c033353f5eaf880efc05ed485d524a8d183ad15f2d1cce961ba9281cb4499abef81378829f5f334fc3be53a0a6d2681255ab5f989046ea6d9e5186c222d579c53066f23a1185c263ed4b0bc007724eb374dd1beda5206fe0ab090", 0x401) setsockopt$auto_SO_TIMESTAMP_OLD(r4, 0x200, 0x1d, &(0x7f0000003080)='\x00', 0x6) setsockopt$auto_SO_PRIORITY(r4, 0x0, 0xc, &(0x7f00000030c0)='^\\))\'\x00', 0xe000) write$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000003100)="f0", 0x1) close_range$auto(r4, r0, 0xfffffff8) 12.828067832s ago: executing program 4 (id=4018): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7}, 0x2) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/ns/cgroup\x00', 0xf81e09f4e322f53a, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xc0603d0f, 0x0) madvise$auto(0x9, 0xadf, 0xa) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2200, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) execveat$auto(r3, &(0x7f0000000080)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', 0x0, 0x0, 0x7) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x41}, 0x6, 0x0) write$auto(0x3, 0x0, 0x200ffd8) signalfd4$auto(0xffffffff, 0x0, 0x8, 0xffff) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0x9, 0x0, 0xfffffffffffffffe, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) read$auto(r2, 0x0, 0x10001) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x7}, 0x2) close_range$auto(0x2, 0xffffffffffffffff, 0xfffffffd) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyc7\x00', 0x3ed102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) 12.687371037s ago: executing program 4 (id=4019): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x8000000, &(0x7f00000001c0)=@test={r1, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x6, 0x81, 0x68198}, 0x6) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4, 0x1e}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x1b, 0x2, "d5ee63aea75a9d66346ce6fe2d5358bacb69eb3339afc4"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) 5.506553621s ago: executing program 33 (id=3999): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, 0x0, 0x1000000, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25030000000a0005000000000000000000060006", @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 0s ago: executing program 34 (id=4015): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, 0x0, 0x1000000, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25030000000a00050000000000000000000600060003000000080002", @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) kernel console output (not intermixed with test programs): =1048576kB [ 693.235066][T18320] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 693.308877][T18320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 693.379364][T18379] CPU: 0 UID: 0 PID: 18379 Comm: syz.2.3293 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.379392][T18379] Tainted: [L]=SOFTLOCKUP [ 693.379397][T18379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 693.379407][T18379] Call Trace: [ 693.379412][T18379] [ 693.379419][T18379] dump_stack_lvl+0x100/0x190 [ 693.379440][T18379] should_fail_ex.cold+0x5/0xa [ 693.379461][T18379] should_failslab+0xc2/0x120 [ 693.379480][T18379] __kmalloc_cache_noprof+0x7a/0x6f0 [ 693.379501][T18379] ? seg6_net_init+0xac/0x1c0 [ 693.379516][T18379] ? lockdep_init_map_type+0x5c/0x250 [ 693.379541][T18379] ? __pfx_seg6_net_init+0x10/0x10 [ 693.379557][T18379] seg6_net_init+0xac/0x1c0 [ 693.379574][T18379] ops_init+0x1e2/0x5f0 [ 693.379593][T18379] setup_net+0x118/0x3a0 [ 693.379609][T18379] ? __pfx_setup_net+0x10/0x10 [ 693.379625][T18379] ? mutex_init_lockdep+0xf1/0x120 [ 693.379646][T18379] copy_net_ns+0x46f/0x7c0 [ 693.379665][T18379] create_new_namespaces+0x3ea/0xac0 [ 693.379688][T18379] unshare_nsproxy_namespaces+0xf2/0x220 [ 693.379708][T18379] ksys_unshare+0x438/0xab0 [ 693.379730][T18379] ? __pfx_ksys_unshare+0x10/0x10 [ 693.379749][T18379] ? xfd_validate_state+0x129/0x190 [ 693.379770][T18379] __x64_sys_unshare+0x31/0x40 [ 693.379790][T18379] do_syscall_64+0x115/0x840 [ 693.379810][T18379] ? clear_bhb_loop+0x40/0x90 [ 693.379828][T18379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.379843][T18379] RIP: 0033:0x7f6acc99ce59 [ 693.379856][T18379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.379871][T18379] RSP: 002b:00007f6acd839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 693.379886][T18379] RAX: ffffffffffffffda RBX: 00007f6accc15fa0 RCX: 00007f6acc99ce59 [ 693.379896][T18379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 693.379905][T18379] RBP: 00007f6acca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 693.379914][T18379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.379922][T18379] R13: 00007f6accc16038 R14: 00007f6accc15fa0 R15: 00007ffdecf67578 [ 693.379942][T18379] [ 693.620880][T18320] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 693.630854][T18320] 61935 total pagecache pages [ 693.636118][T18320] 0 pages in swap cache [ 693.640689][T18320] Free swap = 124996kB [ 693.645404][T18320] Total swap = 124996kB [ 693.649650][T18320] 2097051 pages RAM [ 693.653553][T18320] 0 pages HighMem/MovableOnly [ 693.658331][T18320] 430784 pages reserved [ 693.662835][T18320] 0 pages cma reserved [ 694.084850][T18406] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3307'. [ 694.118966][T13204] Bluetooth: hci1: command tx timeout [ 694.165694][T18409] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3307'. [ 694.258501][T18409] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3307'. [ 694.362088][T18409] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3307'. [ 694.432982][T18409] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3307'. [ 694.621854][T13187] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.986549][T13187] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.845499][T18445] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 696.087897][T18445] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 696.174714][T13204] Bluetooth: hci1: command tx timeout [ 696.564853][T18457] smpboot: CPU 1 is now offline [ 696.708608][T13187] bridge_slave_1: left allmulticast mode [ 696.741033][T13187] bridge_slave_1: left promiscuous mode [ 696.778288][T13187] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.838956][T13187] bridge_slave_0: left allmulticast mode [ 696.871525][T13187] bridge_slave_0: left promiscuous mode [ 696.909841][T13187] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.716042][T13187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.766971][T13187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.810398][T13187] bond0 (unregistering): Released all slaves [ 697.930730][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 698.253571][T13204] Bluetooth: hci1: command tx timeout [ 698.988410][T13187] hsr_slave_0: left promiscuous mode [ 699.040765][T13187] hsr_slave_1: left promiscuous mode [ 699.092244][T13187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.141542][T13187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.196211][T13187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.241996][T13187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.339373][T13187] veth1_macvtap: left promiscuous mode [ 699.374851][T13187] veth0_macvtap: left promiscuous mode [ 699.408970][T13187] veth1_vlan: left promiscuous mode [ 699.431115][T13187] veth0_vlan: left promiscuous mode [ 700.568700][T13187] team0 (unregistering): Port device team_slave_1 removed [ 700.619851][T13187] team0 (unregistering): Port device team_slave_0 removed [ 701.022694][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 701.070579][T18316] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.160118][T18316] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.216844][T18316] bridge_slave_0: entered allmulticast mode [ 701.267665][T18316] bridge_slave_0: entered promiscuous mode [ 701.322161][T18316] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.366668][T18316] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.406629][T18589] nbd: socks must be embedded in a SOCK_ITEM attr [ 701.420439][T18316] bridge_slave_1: entered allmulticast mode [ 701.466564][T18316] bridge_slave_1: entered promiscuous mode [ 701.480061][T18592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3412'. [ 701.562301][T18589] block nbd0: shutting down sockets [ 701.711797][T18316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.845352][T18316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.931199][T18586] bond0: invalid ARP target specified [ 702.139082][T18316] team0: Port device team_slave_0 added [ 702.234139][T18316] team0: Port device team_slave_1 added [ 702.441375][T18316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.501482][T18316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.697415][T18316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.780030][T18316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.825497][T18316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.987548][T18316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.392375][T18316] hsr_slave_0: entered promiscuous mode [ 703.435697][T18316] hsr_slave_1: entered promiscuous mode [ 703.479072][T18316] debugfs: 'hsr0' already exists in 'hsr' [ 703.518342][T18316] Cannot create hsr debugfs directory [ 704.130725][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 704.847397][T13204] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 705.427847][T18698] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 705.632705][T18698] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 705.990071][T18713] smpboot: CPU 1 is now offline [ 706.900646][T15740] Bluetooth: hci3: command 0x2016 tx timeout [ 707.434960][T18764] netlink: 326 bytes leftover after parsing attributes in process `syz.1.3490'. [ 707.970524][T18764] mac80211_hwsim hwsim34 : renamed from wlan0 (while UP) [ 708.506400][T18797] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3503'. [ 708.593780][T18800] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3503'. [ 708.667318][T18797] FAULT_INJECTION: forcing a failure. [ 708.667318][T18797] name failslab, interval 1, probability 0, space 0, times 0 [ 708.781143][T18797] CPU: 0 UID: 0 PID: 18797 Comm: syz.1.3503 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.781172][T18797] Tainted: [L]=SOFTLOCKUP [ 708.781177][T18797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 708.781187][T18797] Call Trace: [ 708.781193][T18797] [ 708.781199][T18797] dump_stack_lvl+0x100/0x190 [ 708.781220][T18797] should_fail_ex.cold+0x5/0xa [ 708.781244][T18797] should_failslab+0xc2/0x120 [ 708.781263][T18797] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 708.781288][T18797] ? __d_alloc+0x34/0xa40 [ 708.781308][T18797] ? lockdep_init_map_type+0x5c/0x250 [ 708.781334][T18797] __d_alloc+0x34/0xa40 [ 708.781355][T18797] d_alloc_pseudo+0x1c/0xc0 [ 708.781369][T18797] alloc_file_pseudo+0xcf/0x230 [ 708.781393][T18797] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 708.781415][T18797] ? alloc_fd+0x476/0x790 [ 708.781435][T18797] sock_alloc_file+0x50/0x210 [ 708.781454][T18797] __sys_socket+0x1c0/0x260 [ 708.781474][T18797] ? __pfx___sys_socket+0x10/0x10 [ 708.781493][T18797] ? ksys_write+0x1ac/0x250 [ 708.781519][T18797] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 708.781546][T18797] __x64_sys_socket+0x72/0xb0 [ 708.781565][T18797] ? lockdep_hardirqs_on+0x78/0x100 [ 708.781587][T18797] do_syscall_64+0x115/0x840 [ 708.781607][T18797] ? clear_bhb_loop+0x40/0x90 [ 708.781624][T18797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.781640][T18797] RIP: 0033:0x7f329b39ce59 [ 708.781654][T18797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.781668][T18797] RSP: 002b:00007f329c2e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 708.781683][T18797] RAX: ffffffffffffffda RBX: 00007f329b616090 RCX: 00007f329b39ce59 [ 708.781693][T18797] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 708.781702][T18797] RBP: 00007f329b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 708.781711][T18797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.781721][T18797] R13: 00007f329b616128 R14: 00007f329b616090 R15: 00007ffcad365af8 [ 708.781741][T18797] [ 709.245380][T15740] Bluetooth: hci3: command 0x2016 tx timeout [ 709.276330][T18316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 709.706412][T18316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 709.896021][T18316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 709.959706][T18316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 710.069855][T18316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 710.167946][T18316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 710.292988][T18316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 710.378689][T18316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 711.150664][T18316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.294224][T18316] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.387822][T14565] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.395117][T14565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.548412][T13179] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.557019][T13179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.640564][T18904] nbd: socks must be embedded in a SOCK_ITEM attr [ 711.805541][T18904] block nbd0: shutting down sockets [ 711.867956][T18899] bond0: invalid ARP target specified [ 712.227411][T13204] Bluetooth: hci0: unexpected event 0x33 length: 124 > 10 [ 714.129995][T18988] can: request_module (can-proto-0) failed. [ 714.200408][T18316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.970919][T18316] veth0_vlan: entered promiscuous mode [ 716.050217][T18316] veth1_vlan: entered promiscuous mode [ 716.360887][T19066] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 716.544073][T19066] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 716.741635][T19071] smpboot: CPU 1 is now offline [ 716.882195][T19071] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 717.336492][T18316] veth0_macvtap: entered promiscuous mode [ 717.466572][T18316] veth1_macvtap: entered promiscuous mode [ 717.584499][T18316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.646638][T18316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.739455][T13179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.814384][T13179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.889081][T13179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.993206][T13179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.291534][T13339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.352848][T13339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.564160][T13191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.564209][T13191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.583596][T13204] Bluetooth: hci2: command 0x0406 tx timeout [ 718.651757][T19106] sctp: [Deprecated]: syz.2.3634 (pid 19106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 718.651757][T19106] Use struct sctp_sack_info instead [ 719.071384][T19105] Process accounting paused [ 719.672584][T13204] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 719.679882][T13204] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 719.689464][T13204] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 719.697133][T13204] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 719.737044][T13204] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 719.977218][T19151] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 719.977264][T19151] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 720.091079][T19153] smpboot: CPU 1 is now offline [ 720.091099][T19153] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 720.550415][T13191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.990264][T13191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.292740][T13191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.502716][T19178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3653'. [ 721.704794][T13191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.774345][T13180] Bluetooth: hci4: command tx timeout [ 723.176521][T13191] bridge_slave_1: left allmulticast mode [ 723.198880][T13191] bridge_slave_1: left promiscuous mode [ 723.229271][T13191] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.271010][T13191] bridge_slave_0: left allmulticast mode [ 723.300824][T13191] bridge_slave_0: left promiscuous mode [ 723.334326][T13191] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.856343][T13180] Bluetooth: hci4: command tx timeout [ 724.040820][T13191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.080183][T13191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.113549][T13191] bond0 (unregistering): Released all slaves [ 724.278464][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 724.685983][T19146] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.723613][T19146] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.754331][T19146] bridge_slave_0: entered allmulticast mode [ 724.788901][T19146] bridge_slave_0: entered promiscuous mode [ 725.001223][T19146] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.032667][T19146] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.072844][T19146] bridge_slave_1: entered allmulticast mode [ 725.106849][T19146] bridge_slave_1: entered promiscuous mode [ 725.236687][T13191] hsr_slave_0: left promiscuous mode [ 725.267734][T13204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 725.284527][T13204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 725.298840][T13204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 725.311173][T13204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 725.320376][T13191] hsr_slave_1: left promiscuous mode [ 725.331840][T13204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.392199][T13191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.430561][T13191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.476501][T13191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.512546][T13191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.580006][T13191] veth1_macvtap: left promiscuous mode [ 725.615085][T13191] veth0_macvtap: left promiscuous mode [ 725.645812][T13191] veth1_vlan: left promiscuous mode [ 725.671589][T13191] veth0_vlan: left promiscuous mode [ 725.935299][T13204] Bluetooth: hci4: command tx timeout [ 726.219833][T13191] team0 (unregistering): Port device team_slave_1 removed [ 726.272380][T13191] team0 (unregistering): Port device team_slave_0 removed [ 726.536189][T19146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.558914][T19265] FAULT_INJECTION: forcing a failure. [ 726.558914][T19265] name failslab, interval 1, probability 0, space 0, times 0 [ 726.580120][T19146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.600495][T19265] CPU: 0 UID: 0 PID: 19265 Comm: syz.2.3664 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.600523][T19265] Tainted: [L]=SOFTLOCKUP [ 726.600528][T19265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.600538][T19265] Call Trace: [ 726.600543][T19265] [ 726.600550][T19265] dump_stack_lvl+0x100/0x190 [ 726.600572][T19265] should_fail_ex.cold+0x5/0xa [ 726.600593][T19265] should_failslab+0xc2/0x120 [ 726.600611][T19265] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 726.600628][T19265] ? register_pidns_sysctls+0x48/0x1c0 [ 726.600651][T19265] ? rcu_is_watching+0x12/0xc0 [ 726.600671][T19265] kmemdup_noprof+0x29/0x60 [ 726.600687][T19265] register_pidns_sysctls+0x48/0x1c0 [ 726.600709][T19265] ? __ns_common_init+0x299/0x4b0 [ 726.600729][T19265] copy_pid_ns+0x680/0x10a0 [ 726.600753][T19265] ? __pfx_copy_pid_ns+0x10/0x10 [ 726.600776][T19265] ? __pfx_copy_mnt_ns+0x10/0x10 [ 726.600799][T19265] ? create_new_namespaces+0x30/0xac0 [ 726.600820][T19265] create_new_namespaces+0x2aa/0xac0 [ 726.600842][T19265] unshare_nsproxy_namespaces+0xf2/0x220 [ 726.600862][T19265] ksys_unshare+0x438/0xab0 [ 726.600883][T19265] ? __pfx_ksys_unshare+0x10/0x10 [ 726.600902][T19265] ? xfd_validate_state+0x129/0x190 [ 726.600916][T19265] ? ksys_write+0x1ac/0x250 [ 726.600939][T19265] __x64_sys_unshare+0x31/0x40 [ 726.600959][T19265] do_syscall_64+0x115/0x840 [ 726.600979][T19265] ? clear_bhb_loop+0x40/0x90 [ 726.600997][T19265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.601012][T19265] RIP: 0033:0x7f6acc99ce59 [ 726.601026][T19265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.601040][T19265] RSP: 002b:00007f6acd839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 726.601055][T19265] RAX: ffffffffffffffda RBX: 00007f6accc15fa0 RCX: 00007f6acc99ce59 [ 726.601065][T19265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 726.601074][T19265] RBP: 00007f6acca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 726.601088][T19265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.601099][T19265] R13: 00007f6accc16038 R14: 00007f6accc15fa0 R15: 00007ffdecf67578 [ 726.601118][T19265] [ 726.855382][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 727.147374][T19146] team0: Port device team_slave_0 added [ 727.198278][T19146] team0: Port device team_slave_1 added [ 727.336646][T19146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.383353][T13204] Bluetooth: hci1: command tx timeout [ 727.418914][T19146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.591820][T19146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.708215][T19146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.708232][T19146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.708251][T19146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.015548][T13204] Bluetooth: hci4: command tx timeout [ 728.410658][T13191] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.649377][T19146] hsr_slave_0: entered promiscuous mode [ 728.678673][T19146] hsr_slave_1: entered promiscuous mode [ 728.698788][T19146] debugfs: 'hsr0' already exists in 'hsr' [ 728.718945][T19146] Cannot create hsr debugfs directory [ 728.752470][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 728.812814][T13191] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.109947][T13191] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.421210][T13191] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.455375][T13204] Bluetooth: hci1: command tx timeout [ 730.373841][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 731.019454][T13191] bridge_slave_1: left allmulticast mode [ 731.049991][T13191] bridge_slave_1: left promiscuous mode [ 731.083334][T13191] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.158757][T13191] bridge_slave_0: left allmulticast mode [ 731.203231][T13191] bridge_slave_0: left promiscuous mode [ 731.230379][T13191] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.533911][T13204] Bluetooth: hci1: command tx timeout [ 732.047753][T13191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.125417][T13191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.171408][T13191] bond0 (unregistering): Released all slaves [ 732.582182][T19362] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 732.644000][T19362] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 732.719958][T19363] smpboot: CPU 1 is now offline [ 732.743666][T19363] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 732.809757][ T5296] 8021q: adding VLAN 0 to HW filter on device eth9 [ 732.830551][T19241] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.848211][T19241] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.863898][T19241] bridge_slave_0: entered allmulticast mode [ 732.879492][T19241] bridge_slave_0: entered promiscuous mode [ 732.971105][T19241] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.018934][T19241] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.044876][T19241] bridge_slave_1: entered allmulticast mode [ 733.068662][T19241] bridge_slave_1: entered promiscuous mode [ 733.319332][T19241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.387933][T19241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.463021][T13191] hsr_slave_0: left promiscuous mode [ 733.500396][T13191] hsr_slave_1: left promiscuous mode [ 733.520693][T13191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.536134][T13191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.554462][T13191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.565870][T13191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.596640][T13191] veth1_macvtap: left promiscuous mode [ 733.609203][T13191] veth0_macvtap: left promiscuous mode [ 733.615086][T13204] Bluetooth: hci1: command tx timeout [ 733.633335][T13191] veth1_vlan: left promiscuous mode [ 733.646491][T13191] veth0_vlan: left promiscuous mode [ 734.071378][T13191] team0 (unregistering): Port device team_slave_1 removed [ 734.101179][T13191] team0 (unregistering): Port device team_slave_0 removed [ 734.313780][ T5296] 8021q: adding VLAN 0 to HW filter on device eth10 [ 734.332251][T19241] team0: Port device team_slave_0 added [ 734.365548][T19241] team0: Port device team_slave_1 added [ 734.472381][T19241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.511222][T19241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.596446][T19241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.712694][T19241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.762662][T19241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.829464][T19241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.240451][T19394] nbd: socks must be embedded in a SOCK_ITEM attr [ 735.267487][T19241] hsr_slave_0: entered promiscuous mode [ 735.305471][T19241] hsr_slave_1: entered promiscuous mode [ 735.327919][T19241] debugfs: 'hsr0' already exists in 'hsr' [ 735.360756][T19394] block nbd0: shutting down sockets [ 735.371811][T19241] Cannot create hsr debugfs directory [ 735.462685][T19392] bond0: invalid ARP target specified [ 735.478575][T19146] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 735.544775][T19146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 735.588602][T19146] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 735.656863][T19146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.770294][T19146] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 735.817165][T19146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 735.848870][T19146] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 735.856569][T19406] kernel profiling enabled (shift: 7) [ 735.876465][T19411] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 735.904048][T19146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 736.285506][ T5296] 8021q: adding VLAN 0 to HW filter on device eth11 [ 737.139200][T19146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.379914][T19446] FAULT_INJECTION: forcing a failure. [ 737.379914][T19446] name failslab, interval 1, probability 0, space 0, times 0 [ 737.393345][T19146] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.420127][T13204] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 737.469684][T19446] CPU: 0 UID: 0 PID: 19446 Comm: syz.1.3681 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.469712][T19446] Tainted: [L]=SOFTLOCKUP [ 737.469717][T19446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 737.469727][T19446] Call Trace: [ 737.469732][T19446] [ 737.469738][T19446] dump_stack_lvl+0x100/0x190 [ 737.469759][T19446] should_fail_ex.cold+0x5/0xa [ 737.469779][T19446] should_failslab+0xc2/0x120 [ 737.469797][T19446] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 737.469820][T19446] ? security_file_alloc+0x34/0x2c0 [ 737.469839][T19446] ? trace_kmem_cache_alloc+0xd5/0x100 [ 737.469860][T19446] security_file_alloc+0x34/0x2c0 [ 737.469879][T19446] init_file+0x95/0x480 [ 737.469900][T19446] alloc_empty_file+0x79/0x1c0 [ 737.469922][T19446] alloc_file_pseudo+0x13a/0x230 [ 737.469944][T19446] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 737.469966][T19446] ? hugetlbfs_get_inode+0x3f5/0x700 [ 737.469989][T19446] hugetlb_file_setup+0x2a8/0x5b0 [ 737.470013][T19446] ksys_mmap_pgoff+0x242/0x610 [ 737.470032][T19446] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 737.470049][T19446] ? xfd_validate_state+0x129/0x190 [ 737.470068][T19446] __x64_sys_mmap+0x125/0x190 [ 737.470085][T19446] do_syscall_64+0x115/0x840 [ 737.470105][T19446] ? clear_bhb_loop+0x40/0x90 [ 737.470125][T19446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.470141][T19446] RIP: 0033:0x7f329b39ce59 [ 737.470154][T19446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.470168][T19446] RSP: 002b:00007f329c30a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 737.470183][T19446] RAX: ffffffffffffffda RBX: 00007f329b615fa0 RCX: 00007f329b39ce59 [ 737.470197][T19446] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000000 [ 737.470206][T19446] RBP: 00007f329b432d6f R08: ffffffffffffffff R09: 0000308000000000 [ 737.470216][T19446] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 737.470225][T19446] R13: 00007f329b616038 R14: 00007f329b615fa0 R15: 00007ffcad365af8 [ 737.470244][T19446] [ 738.180962][T13187] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.188515][T13187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.478197][T13191] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.485393][T13191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.122171][T19482] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 739.189211][T19482] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 739.352204][T19486] smpboot: CPU 1 is now offline [ 739.369383][T19486] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 739.453846][T13180] Bluetooth: hci3: command 0x2016 tx timeout [ 740.105730][T19241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 740.127284][T19241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 740.156871][T19241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 740.176443][T19241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 740.208346][T19241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 740.251374][T19241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 740.270171][T19241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 740.292404][T19241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 740.659603][T13204] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 740.671387][T13204] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 741.150836][T19241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.226840][T19146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.325580][T19241] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.361435][T13179] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.369228][T13179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.426665][T13179] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.434055][T13179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.534392][T13204] Bluetooth: hci3: command 0x2016 tx timeout [ 741.632482][T19146] veth0_vlan: entered promiscuous mode [ 741.679930][T19146] veth1_vlan: entered promiscuous mode [ 741.805916][T19146] veth0_macvtap: entered promiscuous mode [ 741.848161][T19146] veth1_macvtap: entered promiscuous mode [ 741.941265][ T809] Process accounting resumed [ 741.948682][T19146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.108990][T19146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.212249][T13190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.259156][T13190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.324021][T13190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.360514][T13190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.558875][T19515] Process accounting resumed [ 742.747228][T13339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.778457][T19560] FAULT_INJECTION: forcing a failure. [ 742.778457][T19560] name failslab, interval 1, probability 0, space 0, times 0 [ 742.805407][T13339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.862638][T19560] CPU: 0 UID: 0 PID: 19560 Comm: syz.1.3689 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.862667][T19560] Tainted: [L]=SOFTLOCKUP [ 742.862673][T19560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 742.862682][T19560] Call Trace: [ 742.862688][T19560] [ 742.862694][T19560] dump_stack_lvl+0x100/0x190 [ 742.862715][T19560] should_fail_ex.cold+0x5/0xa [ 742.862735][T19560] should_failslab+0xc2/0x120 [ 742.862754][T19560] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 742.862771][T19560] ? register_pidns_sysctls+0x48/0x1c0 [ 742.862794][T19560] ? rcu_is_watching+0x12/0xc0 [ 742.862815][T19560] kmemdup_noprof+0x29/0x60 [ 742.862831][T19560] register_pidns_sysctls+0x48/0x1c0 [ 742.862852][T19560] ? __ns_common_init+0x299/0x4b0 [ 742.862873][T19560] copy_pid_ns+0x680/0x10a0 [ 742.862897][T19560] ? __pfx_copy_pid_ns+0x10/0x10 [ 742.862919][T19560] ? __pfx_copy_mnt_ns+0x10/0x10 [ 742.862942][T19560] ? create_new_namespaces+0x30/0xac0 [ 742.862963][T19560] create_new_namespaces+0x2aa/0xac0 [ 742.862986][T19560] unshare_nsproxy_namespaces+0xf2/0x220 [ 742.863005][T19560] ksys_unshare+0x438/0xab0 [ 742.863026][T19560] ? __pfx_ksys_unshare+0x10/0x10 [ 742.863045][T19560] ? xfd_validate_state+0x129/0x190 [ 742.863062][T19560] ? ksys_write+0x1ac/0x250 [ 742.863090][T19560] __x64_sys_unshare+0x31/0x40 [ 742.863111][T19560] do_syscall_64+0x115/0x840 [ 742.863131][T19560] ? clear_bhb_loop+0x40/0x90 [ 742.863150][T19560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.863166][T19560] RIP: 0033:0x7f329b39ce59 [ 742.863179][T19560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.863193][T19560] RSP: 002b:00007f329c30a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 742.863208][T19560] RAX: ffffffffffffffda RBX: 00007f329b615fa0 RCX: 00007f329b39ce59 [ 742.863218][T19560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 742.863227][T19560] RBP: 00007f329b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 742.863235][T19560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.863244][T19560] R13: 00007f329b616038 R14: 00007f329b615fa0 R15: 00007ffcad365af8 [ 742.863263][T19560] [ 743.155730][T13187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.163973][T13187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.284104][T19569] bond0: invalid ARP target specified [ 743.338547][T19569] nbd: socks must be embedded in a SOCK_ITEM attr [ 743.345396][T19569] block nbd0: shutting down sockets [ 743.769497][T19241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.349104][ T29] audit: type=1800 audit(4294967589.508:18): pid=19619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3695" name="dbroot" dev="configfs" ino=91088 res=0 errno=0 [ 745.807472][T19241] veth0_vlan: entered promiscuous mode [ 746.242482][T19241] veth1_vlan: entered promiscuous mode [ 746.409228][T19241] veth0_macvtap: entered promiscuous mode [ 746.539308][T19241] veth1_macvtap: entered promiscuous mode [ 746.680975][T19241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.782424][T19241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.898259][T13191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.957071][T13191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.037649][T13191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.091793][T13191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.215635][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.222102][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.418687][T19641] FAULT_INJECTION: forcing a failure. [ 747.418687][T19641] name fail_futex, interval 1, probability 0, space 0, times 0 [ 747.477223][T13187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.520607][T13187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.566408][T19641] CPU: 0 UID: 0 PID: 19641 Comm: syz.2.3697 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.566435][T19641] Tainted: [L]=SOFTLOCKUP [ 747.566440][T19641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 747.566449][T19641] Call Trace: [ 747.566455][T19641] [ 747.566461][T19641] dump_stack_lvl+0x100/0x190 [ 747.566482][T19641] should_fail_ex.cold+0x5/0xa [ 747.566501][T19641] get_futex_key+0x295/0x1510 [ 747.566527][T19641] ? __pfx_get_futex_key+0x10/0x10 [ 747.566561][T19641] ? __pfx_clockevents_program_event+0x10/0x10 [ 747.566579][T19641] ? find_held_lock+0x2b/0x80 [ 747.566602][T19641] futex_wake+0xea/0x530 [ 747.566622][T19641] ? __pfx_futex_wake+0x10/0x10 [ 747.566639][T19641] ? exit_mm_release+0x19/0x30 [ 747.566665][T19641] do_futex+0x32b/0x350 [ 747.566680][T19641] ? __pfx_do_futex+0x10/0x10 [ 747.566694][T19641] ? __might_fault+0xc5/0x140 [ 747.566721][T19641] mm_release+0x24a/0x2f0 [ 747.566738][T19641] do_exit+0x707/0x2af0 [ 747.566762][T19641] ? __pfx_do_exit+0x10/0x10 [ 747.566783][T19641] ? do_raw_spin_lock+0x128/0x260 [ 747.566798][T19641] ? find_held_lock+0x2b/0x80 [ 747.566815][T19641] ? get_signal+0x7e5/0x2210 [ 747.566835][T19641] do_group_exit+0xd5/0x2a0 [ 747.566857][T19641] get_signal+0x20ff/0x2210 [ 747.566879][T19641] ? __lock_acquire+0x4a5/0x2630 [ 747.566902][T19641] ? __pfx_get_signal+0x10/0x10 [ 747.566921][T19641] ? do_futex+0x192/0x350 [ 747.566938][T19641] arch_do_signal_or_restart+0x91/0x7a0 [ 747.566961][T19641] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 747.566989][T19641] ? rcu_is_watching+0x12/0xc0 [ 747.567009][T19641] exit_to_user_mode_loop+0x98/0x670 [ 747.567031][T19641] ? rcu_is_watching+0x12/0xc0 [ 747.567053][T19641] do_syscall_64+0x652/0x840 [ 747.567074][T19641] ? clear_bhb_loop+0x40/0x90 [ 747.567092][T19641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.567107][T19641] RIP: 0033:0x7f6acc99ce59 [ 747.567121][T19641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.567136][T19641] RSP: 002b:00007f6acd7f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 747.567155][T19641] RAX: fffffffffffffe00 RBX: 00007f6accc16188 RCX: 00007f6acc99ce59 [ 747.567165][T19641] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6accc16188 [ 747.567174][T19641] RBP: 00007f6accc16180 R08: 0000000000000000 R09: 0000000000000000 [ 747.567183][T19641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.567191][T19641] R13: 00007f6accc16218 R14: 00007ffdecf67490 R15: 00007ffdecf67578 [ 747.567210][T19641] [ 747.882972][T13180] Bluetooth: hci0: unexpected event 0x3e length: 358 > 260 [ 747.883009][T13180] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 747.883025][T13180] Bluetooth: hci0: Malformed LE Event: 0x1b [ 748.088196][T14565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.088217][T14565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.726982][T19690] kvm: user requested TSC rate below hardware speed [ 749.296507][T19684] FAULT_INJECTION: forcing a failure. [ 749.296507][T19684] name fail_futex, interval 1, probability 0, space 0, times 0 [ 749.296539][T19684] CPU: 0 UID: 0 PID: 19684 Comm: syz.1.3701 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.296561][T19684] Tainted: [L]=SOFTLOCKUP [ 749.296566][T19684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 749.296575][T19684] Call Trace: [ 749.296580][T19684] [ 749.296585][T19684] dump_stack_lvl+0x100/0x190 [ 749.296605][T19684] should_fail_ex.cold+0x5/0xa [ 749.296627][T19684] get_futex_key+0xf78/0x1510 [ 749.296657][T19684] ? __pfx_get_futex_key+0x10/0x10 [ 749.296679][T19684] ? lock_acquire+0x1b1/0x370 [ 749.296707][T19684] futex_wake+0xea/0x530 [ 749.296727][T19684] ? __pfx_futex_wake+0x10/0x10 [ 749.296744][T19684] ? exit_mm_release+0x19/0x30 [ 749.296772][T19684] do_futex+0x32b/0x350 [ 749.296787][T19684] ? __pfx_do_futex+0x10/0x10 [ 749.296800][T19684] ? __might_fault+0xc5/0x140 [ 749.296830][T19684] mm_release+0x24a/0x2f0 [ 749.296850][T19684] do_exit+0x707/0x2af0 [ 749.296874][T19684] ? __pfx_do_exit+0x10/0x10 [ 749.296895][T19684] ? do_raw_spin_lock+0x128/0x260 [ 749.296910][T19684] ? find_held_lock+0x2b/0x80 [ 749.296928][T19684] ? get_signal+0x7e5/0x2210 [ 749.296948][T19684] do_group_exit+0xd5/0x2a0 [ 749.296971][T19684] get_signal+0x20ff/0x2210 [ 749.296992][T19684] ? __fget_files+0x215/0x3d0 [ 749.297012][T19684] ? __pfx_get_signal+0x10/0x10 [ 749.297035][T19684] ? do_futex+0x192/0x350 [ 749.297051][T19684] arch_do_signal_or_restart+0x91/0x7a0 [ 749.297072][T19684] ? fdget+0x18b/0x210 [ 749.297103][T19684] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 749.297140][T19684] ? rcu_is_watching+0x12/0xc0 [ 749.297161][T19684] exit_to_user_mode_loop+0x98/0x670 [ 749.297187][T19684] ? rcu_is_watching+0x12/0xc0 [ 749.297206][T19684] do_syscall_64+0x652/0x840 [ 749.297228][T19684] ? clear_bhb_loop+0x40/0x90 [ 749.297247][T19684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.297262][T19684] RIP: 0033:0x7f329b39ce59 [ 749.297276][T19684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.297290][T19684] RSP: 002b:00007f329c2650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 749.297305][T19684] RAX: fffffffffffffe00 RBX: 00007f329b616458 RCX: 00007f329b39ce59 [ 749.297315][T19684] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f329b616458 [ 749.297324][T19684] RBP: 00007f329b616450 R08: 0000000000000000 R09: 0000000000000000 [ 749.297333][T19684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.297342][T19684] R13: 00007f329b6164e8 R14: 00007ffcad365a10 R15: 00007ffcad365af8 [ 749.297362][T19684] [ 750.621640][T13180] Bluetooth: hci0: unexpected event 0x05 length: 47 > 4 [ 751.074558][T19666] Process accounting resumed [ 751.438107][T19748] bond0: invalid ARP target specified [ 751.470326][T19750] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 751.553474][T19748] nbd: socks must be embedded in a SOCK_ITEM attr [ 751.566337][T19753] random: crng reseeded on system resumption [ 751.577886][T19750] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 751.601569][T19755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3708'. [ 751.642132][T19748] block nbd0: shutting down sockets [ 752.074916][T19765] bond0: invalid ARP target specified [ 752.123613][T19765] nbd: socks must be embedded in a SOCK_ITEM attr [ 752.144363][T19765] block nbd0: shutting down sockets [ 752.190115][T19768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3712'. [ 752.838955][T19773] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 754.946677][T19825] bond0: invalid ARP target specified [ 755.013914][T19825] nbd: socks must be embedded in a SOCK_ITEM attr [ 755.063636][T19825] block nbd0: shutting down sockets [ 755.095001][T19830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3725'. [ 757.361096][T19854] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[16918] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[19854] [ 757.929914][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3731'. [ 758.654538][T19887] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 758.694974][T19887] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 758.828952][T19888] smpboot: CPU 1 is now offline [ 758.848161][T19888] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 759.213789][T19897] nbd: socks must be embedded in a SOCK_ITEM attr [ 759.317277][T19898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3737'. [ 759.366253][T19897] block nbd0: shutting down sockets [ 759.393819][T19895] bond0: invalid ARP target specified [ 760.251107][T13180] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5 [ 760.334019][T19918] random: crng reseeded on system resumption [ 760.363942][T19919] FAULT_INJECTION: forcing a failure. [ 760.363942][T19919] name fail_futex, interval 1, probability 0, space 0, times 0 [ 760.496781][T19919] CPU: 0 UID: 0 PID: 19919 Comm: syz.0.3742 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.496809][T19919] Tainted: [L]=SOFTLOCKUP [ 760.496814][T19919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 760.496832][T19919] Call Trace: [ 760.496837][T19919] [ 760.496844][T19919] dump_stack_lvl+0x100/0x190 [ 760.496868][T19919] should_fail_ex.cold+0x5/0xa [ 760.496889][T19919] get_futex_key+0x1d2/0x1510 [ 760.496916][T19919] ? __pfx_get_futex_key+0x10/0x10 [ 760.496945][T19919] futex_wake+0xea/0x530 [ 760.496964][T19919] ? rcu_is_watching+0x12/0xc0 [ 760.496981][T19919] ? __pfx_futex_wake+0x10/0x10 [ 760.497001][T19919] ? putname+0xb1/0x110 [ 760.497018][T19919] ? kmem_cache_free+0x127/0x6c0 [ 760.497044][T19919] do_futex+0x32b/0x350 [ 760.497060][T19919] ? __pfx_do_futex+0x10/0x10 [ 760.497073][T19919] ? __pfx_do_sys_openat2+0x10/0x10 [ 760.497100][T19919] __x64_sys_futex+0x34f/0x4d0 [ 760.497116][T19919] ? __x64_sys_openat+0x12d/0x210 [ 760.497138][T19919] ? __pfx___x64_sys_futex+0x10/0x10 [ 760.497157][T19919] ? rcu_is_watching+0x12/0xc0 [ 760.497175][T19919] do_syscall_64+0x115/0x840 [ 760.497196][T19919] ? clear_bhb_loop+0x40/0x90 [ 760.497214][T19919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.497229][T19919] RIP: 0033:0x7fed61b9ce59 [ 760.497243][T19919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.497258][T19919] RSP: 002b:00007fed5fdf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 760.497274][T19919] RAX: ffffffffffffffda RBX: 00007fed61e16098 RCX: 00007fed61b9ce59 [ 760.497284][T19919] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fed61e1609c [ 760.497293][T19919] RBP: 00007fed61e16090 R08: 0000000000000001 R09: 0000000000000000 [ 760.497302][T19919] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 760.497310][T19919] R13: 00007fed61e16128 R14: 00007ffe4ee99750 R15: 00007ffe4ee99838 [ 760.497330][T19919] [ 761.882795][T19941] bond0: invalid ARP target specified [ 761.968694][T19941] nbd: socks must be embedded in a SOCK_ITEM attr [ 762.017603][T19942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3748'. [ 762.095201][T19941] block nbd0: shutting down sockets [ 762.369225][T19948] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3750'. [ 762.713794][T19956] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 762.856836][T19956] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 763.029767][T19961] smpboot: CPU 1 is now offline [ 763.099770][T19961] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 764.630542][T19990] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 764.765923][T19992] bond0: invalid ARP target specified [ 764.782715][T19990] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 764.825040][T19992] nbd: socks must be embedded in a SOCK_ITEM attr [ 764.852203][T19992] block nbd0: shutting down sockets [ 764.901497][T19992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3759'. [ 765.056666][T19995] smpboot: CPU 1 is now offline [ 765.126604][T19995] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 765.213004][T20003] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 765.280654][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 767.209717][T20042] FAULT_INJECTION: forcing a failure. [ 767.209717][T20042] name failslab, interval 1, probability 0, space 0, times 0 [ 767.328626][T20042] CPU: 0 UID: 0 PID: 20042 Comm: syz.0.3769 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.328655][T20042] Tainted: [L]=SOFTLOCKUP [ 767.328661][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 767.328671][T20042] Call Trace: [ 767.328677][T20042] [ 767.328683][T20042] dump_stack_lvl+0x100/0x190 [ 767.328704][T20042] should_fail_ex.cold+0x5/0xa [ 767.328725][T20042] ? lsm_blob_alloc+0x68/0x90 [ 767.328747][T20042] should_failslab+0xc2/0x120 [ 767.328766][T20042] __kmalloc_noprof+0xe0/0x850 [ 767.328781][T20042] ? trace_kmem_cache_alloc+0xd5/0x100 [ 767.328802][T20042] lsm_blob_alloc+0x68/0x90 [ 767.328824][T20042] security_sk_alloc+0x2d/0x290 [ 767.328849][T20042] sk_prot_alloc+0x1d1/0x2a0 [ 767.328871][T20042] sk_alloc+0x36/0xe80 [ 767.328885][T20042] inet6_create+0x385/0x12b0 [ 767.328905][T20042] ? inet6_create+0x7f/0x12b0 [ 767.328925][T20042] __sock_create+0x339/0x860 [ 767.328948][T20042] udp_sock_create6+0xc7/0x6a0 [ 767.328965][T20042] ? __pfx_udp_sock_create6+0x10/0x10 [ 767.328984][T20042] ? crng_make_state+0x477/0x6c0 [ 767.329006][T20042] ? lockdep_hardirqs_on+0x78/0x100 [ 767.329027][T20042] ? crng_make_state+0x2b0/0x6c0 [ 767.329051][T20042] rxrpc_open_socket+0x206/0x6b0 [ 767.329068][T20042] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 767.329094][T20042] ? rcu_is_watching+0x12/0xc0 [ 767.329111][T20042] ? trace_rxrpc_local+0x80/0x250 [ 767.329129][T20042] rxrpc_lookup_local+0xac7/0x1220 [ 767.329149][T20042] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 767.329172][T20042] ? __local_bh_enable_ip+0x9e/0x120 [ 767.329192][T20042] rxrpc_sendmsg+0x34a/0x680 [ 767.329213][T20042] sock_write_iter+0x524/0x5a0 [ 767.329232][T20042] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 767.329249][T20042] ? __pfx_sock_write_iter+0x10/0x10 [ 767.329275][T20042] ? bpf_lsm_file_permission+0x9/0x10 [ 767.329289][T20042] ? security_file_permission+0x76/0x210 [ 767.329308][T20042] ? rw_verify_area+0xce/0x6d0 [ 767.329325][T20042] vfs_write+0x6ac/0x1070 [ 767.329342][T20042] ? __pfx_sock_write_iter+0x10/0x10 [ 767.329362][T20042] ? __pfx_vfs_write+0x10/0x10 [ 767.329376][T20042] ? find_held_lock+0x2b/0x80 [ 767.329406][T20042] ksys_write+0x1f8/0x250 [ 767.329423][T20042] ? __pfx_ksys_write+0x10/0x10 [ 767.329441][T20042] ? rcu_is_watching+0x12/0xc0 [ 767.329460][T20042] do_syscall_64+0x115/0x840 [ 767.329479][T20042] ? clear_bhb_loop+0x40/0x90 [ 767.329498][T20042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.329513][T20042] RIP: 0033:0x7fed61b9ce59 [ 767.329527][T20042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.329542][T20042] RSP: 002b:00007fed62974028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 767.329557][T20042] RAX: ffffffffffffffda RBX: 00007fed61e15fa0 RCX: 00007fed61b9ce59 [ 767.329568][T20042] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 767.329577][T20042] RBP: 00007fed61c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 767.329586][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.329595][T20042] R13: 00007fed61e16038 R14: 00007fed61e15fa0 R15: 00007ffe4ee99838 [ 767.329615][T20042] [ 767.659636][T20050] bond0: invalid ARP target specified [ 768.096951][T20049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3771'. [ 768.153634][T20050] nbd: socks must be embedded in a SOCK_ITEM attr [ 768.198431][T20050] block nbd0: shutting down sockets [ 768.810939][T20064] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 768.913411][T20064] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 769.185889][T20068] smpboot: CPU 1 is now offline [ 769.255348][T20068] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 771.403899][T20110] FAULT_INJECTION: forcing a failure. [ 771.403899][T20110] name failslab, interval 1, probability 0, space 0, times 0 [ 771.495354][T20110] CPU: 0 UID: 0 PID: 20110 Comm: syz.2.3781 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.495384][T20110] Tainted: [L]=SOFTLOCKUP [ 771.495389][T20110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.495399][T20110] Call Trace: [ 771.495404][T20110] [ 771.495411][T20110] dump_stack_lvl+0x100/0x190 [ 771.495432][T20110] should_fail_ex.cold+0x5/0xa [ 771.495453][T20110] ? udpv6_init_sock+0x24e/0x450 [ 771.495468][T20110] should_failslab+0xc2/0x120 [ 771.495486][T20110] __kmalloc_noprof+0xe0/0x850 [ 771.495501][T20110] ? lockdep_init_map_type+0x5c/0x250 [ 771.495534][T20110] udpv6_init_sock+0x24e/0x450 [ 771.495549][T20110] ? __pfx_udpv6_init_sock+0x10/0x10 [ 771.495566][T20110] inet6_create+0xb21/0x12b0 [ 771.495586][T20110] ? inet6_create+0x7f/0x12b0 [ 771.495607][T20110] __sock_create+0x339/0x860 [ 771.495632][T20110] udp_sock_create6+0xc7/0x6a0 [ 771.495649][T20110] ? __pfx_udp_sock_create6+0x10/0x10 [ 771.495669][T20110] ? crng_make_state+0x2ab/0x6c0 [ 771.495692][T20110] ? crng_make_state+0x2b0/0x6c0 [ 771.495717][T20110] rxrpc_open_socket+0x206/0x6b0 [ 771.495736][T20110] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 771.495762][T20110] ? rcu_is_watching+0x12/0xc0 [ 771.495778][T20110] ? trace_rxrpc_local+0x80/0x250 [ 771.495796][T20110] rxrpc_lookup_local+0xac7/0x1220 [ 771.495816][T20110] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 771.495835][T20110] ? __local_bh_enable_ip+0x9e/0x120 [ 771.495856][T20110] rxrpc_sendmsg+0x34a/0x680 [ 771.495877][T20110] sock_write_iter+0x524/0x5a0 [ 771.495895][T20110] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 771.495913][T20110] ? __pfx_sock_write_iter+0x10/0x10 [ 771.495939][T20110] ? bpf_lsm_file_permission+0x9/0x10 [ 771.495952][T20110] ? security_file_permission+0x76/0x210 [ 771.495973][T20110] ? rw_verify_area+0xce/0x6d0 [ 771.495990][T20110] vfs_write+0x6ac/0x1070 [ 771.496007][T20110] ? __pfx_sock_write_iter+0x10/0x10 [ 771.496027][T20110] ? __pfx_vfs_write+0x10/0x10 [ 771.496042][T20110] ? find_held_lock+0x2b/0x80 [ 771.496072][T20110] ksys_write+0x1f8/0x250 [ 771.496088][T20110] ? __pfx_ksys_write+0x10/0x10 [ 771.496106][T20110] ? rcu_is_watching+0x12/0xc0 [ 771.496125][T20110] do_syscall_64+0x115/0x840 [ 771.496145][T20110] ? clear_bhb_loop+0x40/0x90 [ 771.496163][T20110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.496179][T20110] RIP: 0033:0x7f6acc99ce59 [ 771.496193][T20110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.496207][T20110] RSP: 002b:00007f6acd839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 771.496223][T20110] RAX: ffffffffffffffda RBX: 00007f6accc15fa0 RCX: 00007f6acc99ce59 [ 771.496233][T20110] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 771.496243][T20110] RBP: 00007f6acca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 771.496252][T20110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.496261][T20110] R13: 00007f6accc16038 R14: 00007f6accc15fa0 R15: 00007ffdecf67578 [ 771.496281][T20110] [ 772.848612][T19989] Process accounting paused [ 774.005768][T20136] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 774.124268][T20136] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 774.398934][T20144] smpboot: CPU 1 is now offline [ 774.492146][T20144] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 774.729884][T20146] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 774.807483][T20146] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 774.905779][T13204] Bluetooth: hci3: command 0x2016 tx timeout [ 775.028813][T20150] smpboot: CPU 1 is now offline [ 775.038995][T20150] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 775.120391][T20163] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 775.217707][T20163] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 775.356218][T20168] nbd: socks must be embedded in a SOCK_ITEM attr [ 775.400199][T20168] block nbd0: shutting down sockets [ 775.426618][T20169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3791'. [ 775.530026][T20166] bond0: invalid ARP target specified [ 776.309218][T20180] FAULT_INJECTION: forcing a failure. [ 776.309218][T20180] name failslab, interval 1, probability 0, space 0, times 0 [ 776.359667][T20180] CPU: 0 UID: 0 PID: 20180 Comm: syz.4.3794 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.359715][T20180] Tainted: [L]=SOFTLOCKUP [ 776.359725][T20180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 776.359738][T20180] Call Trace: [ 776.359747][T20180] [ 776.359757][T20180] dump_stack_lvl+0x100/0x190 [ 776.359792][T20180] should_fail_ex.cold+0x5/0xa [ 776.359826][T20180] ? lsm_blob_alloc+0x68/0x90 [ 776.359864][T20180] should_failslab+0xc2/0x120 [ 776.359899][T20180] __kmalloc_noprof+0xe0/0x850 [ 776.359924][T20180] ? trace_kmem_cache_alloc+0xd5/0x100 [ 776.359961][T20180] lsm_blob_alloc+0x68/0x90 [ 776.360012][T20180] security_sk_alloc+0x2d/0x290 [ 776.360045][T20180] sk_prot_alloc+0x1d1/0x2a0 [ 776.360085][T20180] sk_alloc+0x36/0xe80 [ 776.360110][T20180] inet6_create+0x385/0x12b0 [ 776.360148][T20180] ? inet6_create+0x7f/0x12b0 [ 776.360185][T20180] __sock_create+0x339/0x860 [ 776.360226][T20180] udp_sock_create6+0xc7/0x6a0 [ 776.360258][T20180] ? __pfx_udp_sock_create6+0x10/0x10 [ 776.360293][T20180] ? crng_make_state+0x477/0x6c0 [ 776.360336][T20180] ? lockdep_hardirqs_on+0x78/0x100 [ 776.360380][T20180] ? crng_make_state+0x2b0/0x6c0 [ 776.360429][T20180] rxrpc_open_socket+0x206/0x6b0 [ 776.360466][T20180] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 776.360517][T20180] ? rcu_is_watching+0x12/0xc0 [ 776.360550][T20180] ? trace_rxrpc_local+0x80/0x250 [ 776.360585][T20180] rxrpc_lookup_local+0xac7/0x1220 [ 776.360624][T20180] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 776.360663][T20180] ? __local_bh_enable_ip+0x9e/0x120 [ 776.360704][T20180] rxrpc_sendmsg+0x34a/0x680 [ 776.360743][T20180] sock_write_iter+0x524/0x5a0 [ 776.360780][T20180] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 776.360816][T20180] ? __pfx_sock_write_iter+0x10/0x10 [ 776.360869][T20180] ? bpf_lsm_file_permission+0x9/0x10 [ 776.360896][T20180] ? security_file_permission+0x76/0x210 [ 776.360936][T20180] ? rw_verify_area+0xce/0x6d0 [ 776.360970][T20180] vfs_write+0x6ac/0x1070 [ 776.361012][T20180] ? __pfx_sock_write_iter+0x10/0x10 [ 776.361055][T20180] ? __pfx_vfs_write+0x10/0x10 [ 776.361086][T20180] ? find_held_lock+0x2b/0x80 [ 776.361149][T20180] ksys_write+0x1f8/0x250 [ 776.361183][T20180] ? __pfx_ksys_write+0x10/0x10 [ 776.361221][T20180] ? rcu_is_watching+0x12/0xc0 [ 776.361259][T20180] do_syscall_64+0x115/0x840 [ 776.361299][T20180] ? clear_bhb_loop+0x40/0x90 [ 776.361336][T20180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.361366][T20180] RIP: 0033:0x7f331bf9ce59 [ 776.361391][T20180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.361420][T20180] RSP: 002b:00007f331ce06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 776.361450][T20180] RAX: ffffffffffffffda RBX: 00007f331c215fa0 RCX: 00007f331bf9ce59 [ 776.361472][T20180] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 776.361490][T20180] RBP: 00007f331c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 776.361509][T20180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.361527][T20180] R13: 00007f331c216038 R14: 00007f331c215fa0 R15: 00007ffd38d90048 [ 776.361566][T20180] [ 778.240434][ T22] IRQ fixup: irq 33 move in progress, old vector 47 [ 778.250785][T20218] smpboot: CPU 1 is now offline [ 778.350343][T20218] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 778.726898][T20237] nbd: socks must be embedded in a SOCK_ITEM attr [ 778.818849][T20242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3804'. [ 778.930926][T20237] block nbd0: shutting down sockets [ 779.168855][T20236] bond0: invalid ARP target specified [ 780.001340][T20260] NFSD: Failed to start, no listeners configured. [ 780.641253][T20268] NFSD: Failed to start, no listeners configured. [ 781.101968][T20296] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0e02a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 781.118647][T20296] Call Trace: [ 781.121936][T20296] [ 781.124946][T20296] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 781.132524][T20296] mce_cpu_restart+0xd5/0x1f0 [ 781.137897][T20296] ? __pfx_mce_cpu_restart+0x10/0x10 [ 781.143279][T20296] smp_call_function_many_cond+0x13d4/0x1700 [ 781.149302][T20296] ? __pfx_mce_cpu_restart+0x10/0x10 [ 781.154598][T20296] ? mark_held_locks+0x40/0x70 [ 781.159855][T20296] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 781.165678][T20296] ? lockdep_hardirqs_on+0x78/0x100 [ 781.170869][T20296] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 781.176668][T20296] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 781.183003][T20296] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 781.188991][T20296] ? __timer_delete_sync+0x151/0x1c0 [ 781.194347][T20296] ? __pfx_mce_cpu_restart+0x10/0x10 [ 781.199814][T20296] on_each_cpu_cond_mask+0x40/0x90 [ 781.204943][T20296] set_bank+0x240/0x3a0 [ 781.209098][T20296] ? __pfx_set_bank+0x10/0x10 [ 781.213781][T20296] ? find_held_lock+0x2b/0x80 [ 781.218451][T20296] ? sysfs_file_kobj+0xe4/0x290 [ 781.223301][T20296] ? sysfs_file_kobj+0xe4/0x290 [ 781.228291][T20296] ? __pfx_set_bank+0x10/0x10 [ 781.233142][T20296] dev_attr_store+0x58/0x80 [ 781.237673][T20296] ? __pfx_dev_attr_store+0x10/0x10 [ 781.242895][T20296] sysfs_kf_write+0xf2/0x150 [ 781.248023][T20296] kernfs_fop_write_iter+0x3e0/0x5f0 [ 781.253308][T20296] ? __pfx_sysfs_kf_write+0x10/0x10 [ 781.258512][T20296] vfs_write+0x6ac/0x1070 [ 781.262940][T20296] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 781.268756][T20296] ? __pfx_vfs_write+0x10/0x10 [ 781.273998][T20296] ksys_write+0x12a/0x250 [ 781.278341][T20296] ? __pfx_ksys_write+0x10/0x10 [ 781.283187][T20296] ? rcu_is_watching+0x12/0xc0 [ 781.288119][T20296] do_syscall_64+0x115/0x840 [ 781.293062][T20296] ? clear_bhb_loop+0x40/0x90 [ 781.297907][T20296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.303881][T20296] RIP: 0033:0x7f331bf9ce59 [ 781.308299][T20296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.330716][T20296] RSP: 002b:00007f331ce06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 781.341723][T20296] RAX: ffffffffffffffda RBX: 00007f331c215fa0 RCX: 00007f331bf9ce59 [ 781.349745][T20296] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 781.357990][T20296] RBP: 00007f331c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 781.366134][T20296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.374503][T20296] R13: 00007f331c216038 R14: 00007f331c215fa0 R15: 00007ffd38d90048 [ 781.384845][T20296] [ 781.750308][T20309] nbd: socks must be embedded in a SOCK_ITEM attr [ 781.783035][T20311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3816'. [ 781.870223][T20309] block nbd0: shutting down sockets [ 781.962342][T20313] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 782.100706][T20307] bond0: invalid ARP target specified [ 782.109630][T20313] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 782.571247][T20314] smpboot: CPU 1 is now offline [ 782.662306][T20314] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 783.380243][T20347] FAULT_INJECTION: forcing a failure. [ 783.380243][T20347] name failslab, interval 1, probability 0, space 0, times 0 [ 783.551175][T20347] CPU: 0 UID: 0 PID: 20347 Comm: syz.4.3821 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.551202][T20347] Tainted: [L]=SOFTLOCKUP [ 783.551208][T20347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 783.551217][T20347] Call Trace: [ 783.551223][T20347] [ 783.551230][T20347] dump_stack_lvl+0x100/0x190 [ 783.551252][T20347] should_fail_ex.cold+0x5/0xa [ 783.551272][T20347] ? tomoyo_realpath_from_path+0xb6/0x690 [ 783.551294][T20347] should_failslab+0xc2/0x120 [ 783.551313][T20347] __kmalloc_noprof+0xe0/0x850 [ 783.551327][T20347] ? kfree+0x1dd/0x6c0 [ 783.551351][T20347] tomoyo_realpath_from_path+0xb6/0x690 [ 783.551377][T20347] tomoyo_path_number_perm+0x23c/0x580 [ 783.551395][T20347] ? tomoyo_path_number_perm+0x22e/0x580 [ 783.551414][T20347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 783.551451][T20347] ? find_held_lock+0x2b/0x80 [ 783.551470][T20347] ? __fget_files+0x215/0x3d0 [ 783.551487][T20347] ? hook_file_ioctl_common+0x149/0x410 [ 783.551505][T20347] ? __fget_files+0x215/0x3d0 [ 783.551525][T20347] ? __fget_files+0x21f/0x3d0 [ 783.551546][T20347] security_file_ioctl+0xd3/0x230 [ 783.551565][T20347] __x64_sys_ioctl+0xb7/0x210 [ 783.551582][T20347] do_syscall_64+0x115/0x840 [ 783.551603][T20347] ? clear_bhb_loop+0x40/0x90 [ 783.551622][T20347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.551638][T20347] RIP: 0033:0x7f331bf9ce59 [ 783.551651][T20347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.551666][T20347] RSP: 002b:00007f331ce06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.551681][T20347] RAX: ffffffffffffffda RBX: 00007f331c215fa0 RCX: 00007f331bf9ce59 [ 783.551691][T20347] RDX: 0000200000000080 RSI: 0000000080045518 RDI: 0000000000000003 [ 783.551700][T20347] RBP: 00007f331ce06090 R08: 0000000000000000 R09: 0000000000000000 [ 783.551710][T20347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.551719][T20347] R13: 00007f331c216038 R14: 00007f331c215fa0 R15: 00007ffd38d90048 [ 783.551738][T20347] [ 783.551745][T20347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 783.937318][T20351] bond0: invalid ARP target specified [ 783.951140][T20297] Process accounting paused [ 784.037490][T20351] nbd: socks must be embedded in a SOCK_ITEM attr [ 784.165606][T20351] block nbd0: shutting down sockets [ 784.174147][T13180] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 784.201019][T20359] futex_wake_op: syz.1.3824 tries to shift op by -2048; fix this program [ 784.217478][T20357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3823'. [ 784.335103][T20359] futex_wake_op: syz.1.3824 tries to shift op by -2048; fix this program [ 785.392500][T20373] bond0: invalid ARP target specified [ 785.486563][T20373] nbd: socks must be embedded in a SOCK_ITEM attr [ 785.505857][T20373] block nbd0: shutting down sockets [ 785.547995][T20373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3827'. [ 787.020107][T20400] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 787.163730][T20400] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 787.404617][T20403] smpboot: CPU 1 is now offline [ 787.498553][T20403] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 788.417176][T20426] bond0: invalid ARP target specified [ 788.514411][T20426] nbd: socks must be embedded in a SOCK_ITEM attr [ 788.560623][T20433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3837'. [ 788.636098][T20434] udc dummy_udc.0: soft-connect without a gadget driver [ 788.736423][T20426] block nbd0: shutting down sockets [ 788.770958][T13204] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 790.262352][T19149] Bluetooth: hci0: command 0x0406 tx timeout [ 790.541050][T20435] futex_wake_op: syz.4.3838 tries to shift op by -2048; fix this program [ 790.638370][T20435] futex_wake_op: syz.4.3838 tries to shift op by -2048; fix this program [ 791.912007][T20471] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 792.038699][T20471] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 792.205854][T20472] smpboot: CPU 1 is now offline [ 792.287660][T20472] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 792.331980][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'. [ 793.601316][T20501] bond0: invalid ARP target specified [ 793.653552][T20504] nbd: socks must be embedded in a SOCK_ITEM attr [ 793.680121][T20504] block nbd0: shutting down sockets [ 793.714085][T20501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3851'. [ 794.532445][T20513] udc dummy_udc.0: soft-connect without a gadget driver [ 795.496480][T20527] bond0: invalid ARP target specified [ 795.583787][T20527] nbd: socks must be embedded in a SOCK_ITEM attr [ 795.623564][T20527] block nbd0: shutting down sockets [ 795.682101][T20538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3860'. [ 795.726821][T20526] FAULT_INJECTION: forcing a failure. [ 795.726821][T20526] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 795.974342][T20541] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 795.987988][T20526] CPU: 0 UID: 0 PID: 20526 Comm: syz.1.3859 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.988016][T20526] Tainted: [L]=SOFTLOCKUP [ 795.988022][T20526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 795.988032][T20526] Call Trace: [ 795.988037][T20526] [ 795.988046][T20526] dump_stack_lvl+0x100/0x190 [ 795.988067][T20526] should_fail_ex.cold+0x5/0xa [ 795.988085][T20526] ? prepare_alloc_pages+0x16d/0x5f0 [ 795.988107][T20526] should_fail_alloc_page+0xeb/0x140 [ 795.988127][T20526] prepare_alloc_pages+0x1f0/0x5f0 [ 795.988150][T20526] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 795.988178][T20526] ? lock_acquire+0x1b1/0x370 [ 795.988203][T20526] ? __lock_acquire+0x4a5/0x2630 [ 795.988227][T20526] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 795.988251][T20526] ? page_table_check_set+0x486/0x920 [ 795.988281][T20526] ? do_raw_spin_lock+0x128/0x260 [ 795.988301][T20526] ? mark_held_locks+0x40/0x70 [ 795.988324][T20526] ? find_held_lock+0x2b/0x80 [ 795.988342][T20526] ? find_held_lock+0x2b/0x80 [ 795.988360][T20526] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 795.988383][T20526] ? policy_nodemask+0xed/0x4f0 [ 795.988402][T20526] alloc_pages_mpol+0x1fb/0x540 [ 795.988421][T20526] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 795.988440][T20526] ? __lock_acquire+0x4a5/0x2630 [ 795.988464][T20526] folio_alloc_mpol_noprof+0x36/0x260 [ 795.988485][T20526] vma_alloc_folio_noprof+0xed/0x1d0 [ 795.988505][T20526] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 795.988531][T20526] do_anonymous_page+0xb46/0x2050 [ 795.988553][T20526] ? rcu_read_unlock+0x2d/0xb0 [ 795.988580][T20526] __handle_mm_fault+0x1d2c/0x2a00 [ 795.988605][T20526] ? reacquire_held_locks+0xce/0x1e0 [ 795.988629][T20526] ? __pfx___handle_mm_fault+0x10/0x10 [ 795.988653][T20526] ? lock_vma_under_rcu+0x17c/0x590 [ 795.988685][T20526] handle_mm_fault+0x37b/0xa30 [ 795.988710][T20526] do_user_addr_fault+0x5a3/0x12f0 [ 795.988734][T20526] exc_page_fault+0x6f/0xd0 [ 795.988755][T20526] asm_exc_page_fault+0x26/0x30 [ 795.988771][T20526] RIP: 0033:0x7f329b25e60b [ 795.988786][T20526] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 795.988800][T20526] RSP: 002b:00007f329c308fa0 EFLAGS: 00010206 [ 795.988813][T20526] RAX: 0000000000000000 RBX: 00007f329b615fa0 RCX: 0000000000000000 [ 795.988823][T20526] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000240 [ 795.988832][T20526] RBP: 00007f329b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 795.988842][T20526] R10: 0000200000000240 R11: 0000000000000000 R12: 0000000000000000 [ 795.988851][T20526] R13: 00007f329b616038 R14: 00007f329b615fa0 R15: 00007ffcad365af8 [ 795.988872][T20526] [ 795.989080][T20526] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 796.317275][T20541] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 796.870896][T20545] smpboot: CPU 1 is now offline [ 797.872470][T13180] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 798.040428][T20568] futex_wake_op: syz.2.3868 tries to shift op by -2048; fix this program [ 798.236227][T20568] futex_wake_op: syz.2.3868 tries to shift op by -2048; fix this program [ 798.259906][T20582] udc dummy_udc.0: soft-connect without a gadget driver [ 798.928984][T20587] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 799.965961][T20603] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 800.064659][T20603] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 800.200791][T20604] smpboot: CPU 1 is now offline [ 800.223908][T20604] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 800.475350][T20607] bond0: invalid ARP target specified [ 800.574716][T20607] nbd: socks must be embedded in a SOCK_ITEM attr [ 800.620774][T20608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3883'. [ 800.666187][T20607] block nbd0: shutting down sockets [ 801.762474][T20635] bond0: invalid ARP target specified [ 801.843463][T20635] nbd: socks must be embedded in a SOCK_ITEM attr [ 801.880355][T20637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3881'. [ 801.925679][T20635] block nbd0: shutting down sockets [ 802.337521][T20648] udc dummy_udc.0: soft-connect without a gadget driver [ 802.955167][T20662] FAULT_INJECTION: forcing a failure. [ 802.955167][T20662] name failslab, interval 1, probability 0, space 0, times 0 [ 803.015703][T20662] CPU: 0 UID: 0 PID: 20662 Comm: syz.2.3887 Tainted: G L syzkaller #0 PREEMPT(full) [ 803.015730][T20662] Tainted: [L]=SOFTLOCKUP [ 803.015736][T20662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.015747][T20662] Call Trace: [ 803.015753][T20662] [ 803.015759][T20662] dump_stack_lvl+0x100/0x190 [ 803.015786][T20662] should_fail_ex.cold+0x5/0xa [ 803.015807][T20662] should_failslab+0xc2/0x120 [ 803.015826][T20662] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 803.015850][T20662] ? zswap_store+0xc6d/0x2e70 [ 803.015874][T20662] zswap_store+0xc6d/0x2e70 [ 803.015898][T20662] ? rmap_walk_anon+0x561/0x870 [ 803.015920][T20662] ? __pfx_zswap_store+0x10/0x10 [ 803.015940][T20662] ? find_held_lock+0x2b/0x80 [ 803.015958][T20662] ? folio_free_swap+0x60a/0x9f0 [ 803.015975][T20662] ? folio_free_swap+0x60a/0x9f0 [ 803.015995][T20662] ? folio_free_swap+0x3f/0x9f0 [ 803.016016][T20662] swap_writeout+0x47e/0x14f0 [ 803.016042][T20662] shrink_folio_list+0x51c5/0x60c0 [ 803.016072][T20662] ? __pfx_shrink_folio_list+0x10/0x10 [ 803.016095][T20662] ? __lock_acquire+0x4a5/0x2630 [ 803.016129][T20662] ? __lock_acquire+0x4a5/0x2630 [ 803.016165][T20662] ? __lock_acquire+0x4a5/0x2630 [ 803.016186][T20662] ? __css_rstat_updated+0x1ce/0x5a0 [ 803.016208][T20662] ? __kfree_rcu_sheaf+0x19a/0x710 [ 803.016224][T20662] ? __pfx___css_rstat_updated+0x10/0x10 [ 803.016248][T20662] reclaim_folio_list+0xdc/0x5e0 [ 803.016272][T20662] ? __pfx_reclaim_folio_list+0x10/0x10 [ 803.016293][T20662] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 803.016324][T20662] ? lru_gen_update_size+0x431/0xe20 [ 803.016351][T20662] ? lru_gen_del_folio+0x382/0x5f0 [ 803.016373][T20662] reclaim_pages+0x428/0x5e0 [ 803.016397][T20662] ? __pfx_reclaim_pages+0x10/0x10 [ 803.016417][T20662] ? find_held_lock+0x2b/0x80 [ 803.016436][T20662] ? madvise_cold_or_pageout_pte_range+0xb49/0x2620 [ 803.016460][T20662] madvise_cold_or_pageout_pte_range+0x155c/0x2620 [ 803.016487][T20662] ? mas_store_prealloc+0x8ad/0x1090 [ 803.016510][T20662] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 803.016536][T20662] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 803.016569][T20662] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 803.016591][T20662] walk_pgd_range+0xc1a/0x1dd0 [ 803.016620][T20662] ? __pfx_walk_pgd_range+0x10/0x10 [ 803.016636][T20662] ? lock_acquire+0x1b1/0x370 [ 803.016662][T20662] __walk_page_range+0x171/0x850 [ 803.016681][T20662] ? ktime_get+0x1a4/0x320 [ 803.016707][T20662] walk_page_range_vma_unsafe+0x209/0x8f0 [ 803.016725][T20662] ? __pfx_clockevents_program_event+0x10/0x10 [ 803.016742][T20662] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 803.016763][T20662] ? find_held_lock+0x2b/0x80 [ 803.016802][T20662] ? mlock_drain_local+0x254/0x4e0 [ 803.016817][T20662] ? mlock_drain_local+0x254/0x4e0 [ 803.016834][T20662] walk_page_range_vma+0x63/0x90 [ 803.016853][T20662] madvise_pageout+0x259/0x540 [ 803.016873][T20662] ? __pfx_madvise_pageout+0x10/0x10 [ 803.016892][T20662] ? rcu_is_watching+0x12/0xc0 [ 803.016917][T20662] ? find_held_lock+0x2b/0x80 [ 803.016934][T20662] ? mt_find+0x687/0x8e0 [ 803.016957][T20662] madvise_vma_behavior+0x452/0x2240 [ 803.016978][T20662] ? mt_find+0x45e/0x8e0 [ 803.016998][T20662] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 803.017018][T20662] ? __pfx_mt_find+0x10/0x10 [ 803.017043][T20662] ? find_vma_prev+0xd8/0x150 [ 803.017060][T20662] ? futex_unqueue+0x133/0x2c0 [ 803.017078][T20662] ? find_vma+0xbf/0x140 [ 803.017094][T20662] ? __pfx_find_vma+0x10/0x10 [ 803.017109][T20662] ? __futex_wait+0x256/0x300 [ 803.017131][T20662] madvise_walk_vmas+0x2fe/0xa90 [ 803.017154][T20662] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 803.017179][T20662] madvise_do_behavior+0x1ea/0x510 [ 803.017200][T20662] ? __pfx_madvise_do_behavior+0x10/0x10 [ 803.017220][T20662] ? down_read+0x13b/0x450 [ 803.017243][T20662] do_madvise+0x195/0x240 [ 803.017262][T20662] ? __pfx_do_madvise+0x10/0x10 [ 803.017281][T20662] ? do_futex+0x192/0x350 [ 803.017307][T20662] ? ksys_write+0x1ac/0x250 [ 803.017329][T20662] __x64_sys_madvise+0xa9/0x110 [ 803.017348][T20662] ? lockdep_hardirqs_on+0x78/0x100 [ 803.017368][T20662] do_syscall_64+0x115/0x840 [ 803.017388][T20662] ? clear_bhb_loop+0x40/0x90 [ 803.017406][T20662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.017422][T20662] RIP: 0033:0x7f6acc99ce59 [ 803.017436][T20662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.017450][T20662] RSP: 002b:00007f6acd839028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 803.017466][T20662] RAX: ffffffffffffffda RBX: 00007f6accc15fa0 RCX: 00007f6acc99ce59 [ 803.017476][T20662] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 803.017486][T20662] RBP: 00007f6acca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 803.017496][T20662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.017505][T20662] R13: 00007f6accc16038 R14: 00007f6accc15fa0 R15: 00007ffdecf67578 [ 803.017526][T20662] [ 805.312796][T20679] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 805.410070][T20679] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 805.538530][T20680] smpboot: CPU 1 is now offline [ 805.595433][T20680] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 806.085482][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3890'. [ 806.143169][T20690] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3890'. [ 806.193425][T20688] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3890'. [ 807.463574][T20707] bond0: invalid ARP target specified [ 807.535005][T20708] nbd: socks must be embedded in a SOCK_ITEM attr [ 807.569282][T20708] block nbd0: shutting down sockets [ 807.621924][T20707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3893'. [ 807.950108][T20639] Process accounting resumed [ 807.981697][T20720] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 808.130135][T20720] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 808.301807][T20727] smpboot: CPU 1 is now offline [ 808.335806][T20727] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 808.661137][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.667818][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.883893][T20735] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3900'. [ 809.135216][T20746] FAULT_INJECTION: forcing a failure. [ 809.135216][T20746] name failslab, interval 1, probability 0, space 0, times 0 [ 809.242066][T20746] CPU: 0 UID: 0 PID: 20746 Comm: syz.2.3901 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.242094][T20746] Tainted: [L]=SOFTLOCKUP [ 809.242099][T20746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 809.242109][T20746] Call Trace: [ 809.242114][T20746] [ 809.242120][T20746] dump_stack_lvl+0x100/0x190 [ 809.242142][T20746] should_fail_ex.cold+0x5/0xa [ 809.242163][T20746] should_failslab+0xc2/0x120 [ 809.242181][T20746] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 809.242204][T20746] ? __proc_create+0x2cb/0x8c0 [ 809.242227][T20746] __proc_create+0x2cb/0x8c0 [ 809.242247][T20746] ? __pfx___proc_create+0x10/0x10 [ 809.242269][T20746] ? mark_held_locks+0x40/0x70 [ 809.242294][T20746] _proc_mkdir+0xb9/0x210 [ 809.242314][T20746] ? __pfx__proc_mkdir+0x10/0x10 [ 809.242341][T20746] ? sctp_defaults_init+0x720/0xd90 [ 809.242362][T20746] sctp_proc_init+0x59/0x270 [ 809.242378][T20746] ? __pfx_sctp_defaults_init+0x10/0x10 [ 809.242392][T20746] sctp_defaults_init+0x758/0xd90 [ 809.242409][T20746] ? __pfx_sctp_defaults_init+0x10/0x10 [ 809.242424][T20746] ops_init+0x1e2/0x5f0 [ 809.242444][T20746] setup_net+0x118/0x3a0 [ 809.242460][T20746] ? __pfx_setup_net+0x10/0x10 [ 809.242477][T20746] ? mutex_init_lockdep+0xf1/0x120 [ 809.242494][T20746] copy_net_ns+0x46f/0x7c0 [ 809.242514][T20746] create_new_namespaces+0x3ea/0xac0 [ 809.242538][T20746] unshare_nsproxy_namespaces+0xf2/0x220 [ 809.242558][T20746] ksys_unshare+0x438/0xab0 [ 809.242581][T20746] ? __pfx_ksys_unshare+0x10/0x10 [ 809.242601][T20746] ? xfd_validate_state+0x129/0x190 [ 809.242622][T20746] __x64_sys_unshare+0x31/0x40 [ 809.242643][T20746] do_syscall_64+0x115/0x840 [ 809.242663][T20746] ? clear_bhb_loop+0x40/0x90 [ 809.242682][T20746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.242697][T20746] RIP: 0033:0x7f6acc99ce59 [ 809.242710][T20746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.242725][T20746] RSP: 002b:00007f6acd7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 809.242740][T20746] RAX: ffffffffffffffda RBX: 00007f6accc16180 RCX: 00007f6acc99ce59 [ 809.242750][T20746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 809.242759][T20746] RBP: 00007f6acca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 809.242769][T20746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.242777][T20746] R13: 00007f6accc16218 R14: 00007f6accc16180 R15: 00007ffdecf67578 [ 809.242797][T20746] [ 809.620304][T20756] bond0: invalid ARP target specified [ 809.803942][T20756] nbd: socks must be embedded in a SOCK_ITEM attr [ 809.825356][T20756] block nbd0: shutting down sockets [ 809.838389][T20767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3906'. [ 810.313364][T20777] FAULT_INJECTION: forcing a failure. [ 810.313364][T20777] name failslab, interval 1, probability 0, space 0, times 0 [ 810.368993][T20777] CPU: 0 UID: 0 PID: 20777 Comm: syz.1.3911 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.369020][T20777] Tainted: [L]=SOFTLOCKUP [ 810.369026][T20777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 810.369036][T20777] Call Trace: [ 810.369042][T20777] [ 810.369049][T20777] dump_stack_lvl+0x100/0x190 [ 810.369070][T20777] should_fail_ex.cold+0x5/0xa [ 810.369092][T20777] should_failslab+0xc2/0x120 [ 810.369111][T20777] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 810.369137][T20777] ? zswap_store+0xc6d/0x2e70 [ 810.369165][T20777] zswap_store+0xc6d/0x2e70 [ 810.369189][T20777] ? rmap_walk_anon+0x561/0x870 [ 810.369214][T20777] ? __pfx_zswap_store+0x10/0x10 [ 810.369234][T20777] ? find_held_lock+0x2b/0x80 [ 810.369252][T20777] ? folio_free_swap+0x60a/0x9f0 [ 810.369269][T20777] ? folio_free_swap+0x60a/0x9f0 [ 810.369289][T20777] ? folio_free_swap+0x3f/0x9f0 [ 810.369310][T20777] swap_writeout+0x47e/0x14f0 [ 810.369337][T20777] shrink_folio_list+0x51c5/0x60c0 [ 810.369367][T20777] ? __pfx_shrink_folio_list+0x10/0x10 [ 810.369390][T20777] ? __lock_acquire+0x4a5/0x2630 [ 810.369423][T20777] ? __lock_acquire+0x4a5/0x2630 [ 810.369459][T20777] ? __lock_acquire+0x4a5/0x2630 [ 810.369480][T20777] ? __css_rstat_updated+0x1ce/0x5a0 [ 810.369502][T20777] ? __kfree_rcu_sheaf+0x19a/0x710 [ 810.369519][T20777] ? __pfx___css_rstat_updated+0x10/0x10 [ 810.369543][T20777] reclaim_folio_list+0xdc/0x5e0 [ 810.369567][T20777] ? __pfx_reclaim_folio_list+0x10/0x10 [ 810.369587][T20777] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 810.369618][T20777] ? lru_gen_update_size+0x431/0xe20 [ 810.369643][T20777] ? lru_gen_del_folio+0x382/0x5f0 [ 810.369664][T20777] reclaim_pages+0x428/0x5e0 [ 810.369689][T20777] ? __pfx_reclaim_pages+0x10/0x10 [ 810.369709][T20777] ? find_held_lock+0x2b/0x80 [ 810.369728][T20777] ? madvise_cold_or_pageout_pte_range+0xb49/0x2620 [ 810.369759][T20777] madvise_cold_or_pageout_pte_range+0x155c/0x2620 [ 810.369789][T20777] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 810.369812][T20777] ? __lock_acquire+0x4a5/0x2630 [ 810.369834][T20777] ? __css_rstat_updated+0x1ce/0x5a0 [ 810.369859][T20777] ? __lock_acquire+0x4a5/0x2630 [ 810.369881][T20777] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 810.369903][T20777] walk_pgd_range+0xc1a/0x1dd0 [ 810.369922][T20777] ? lock_acquire+0x1b1/0x370 [ 810.369951][T20777] ? __pfx_walk_pgd_range+0x10/0x10 [ 810.369967][T20777] ? lapic_next_event+0x10/0x20 [ 810.369982][T20777] ? clockevents_program_event+0x1ef/0x820 [ 810.370002][T20777] __walk_page_range+0x171/0x850 [ 810.370017][T20777] ? __pfx_clockevents_program_event+0x10/0x10 [ 810.370042][T20777] walk_page_range_vma_unsafe+0x209/0x8f0 [ 810.370060][T20777] ? lockdep_hardirqs_on+0x78/0x100 [ 810.370081][T20777] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 810.370100][T20777] ? find_held_lock+0x2b/0x80 [ 810.370118][T20777] ? mlock_drain_local+0x254/0x4e0 [ 810.370131][T20777] ? mlock_drain_local+0x254/0x4e0 [ 810.370149][T20777] walk_page_range_vma+0x63/0x90 [ 810.370167][T20777] madvise_pageout+0x259/0x540 [ 810.370187][T20777] ? __pfx_madvise_pageout+0x10/0x10 [ 810.370206][T20777] ? rcu_is_watching+0x12/0xc0 [ 810.370231][T20777] ? find_held_lock+0x2b/0x80 [ 810.370248][T20777] ? mt_find+0x687/0x8e0 [ 810.370271][T20777] madvise_vma_behavior+0x452/0x2240 [ 810.370292][T20777] ? mt_find+0x45e/0x8e0 [ 810.370313][T20777] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 810.370332][T20777] ? __pfx_mt_find+0x10/0x10 [ 810.370357][T20777] ? find_vma_prev+0xd8/0x150 [ 810.370374][T20777] ? futex_unqueue+0x133/0x2c0 [ 810.370392][T20777] ? find_vma+0xbf/0x140 [ 810.370408][T20777] ? __pfx_find_vma+0x10/0x10 [ 810.370423][T20777] ? __futex_wait+0x256/0x300 [ 810.370445][T20777] madvise_walk_vmas+0x2fe/0xa90 [ 810.370467][T20777] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 810.370493][T20777] madvise_do_behavior+0x1ea/0x510 [ 810.370514][T20777] ? __pfx_madvise_do_behavior+0x10/0x10 [ 810.370535][T20777] ? down_read+0x13b/0x450 [ 810.370557][T20777] do_madvise+0x195/0x240 [ 810.370576][T20777] ? __pfx_do_madvise+0x10/0x10 [ 810.370595][T20777] ? do_futex+0x192/0x350 [ 810.370622][T20777] ? ksys_write+0x1ac/0x250 [ 810.370644][T20777] __x64_sys_madvise+0xa9/0x110 [ 810.370663][T20777] ? lockdep_hardirqs_on+0x78/0x100 [ 810.370683][T20777] do_syscall_64+0x115/0x840 [ 810.370703][T20777] ? clear_bhb_loop+0x40/0x90 [ 810.370722][T20777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.370745][T20777] RIP: 0033:0x7f329b39ce59 [ 810.370760][T20777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.370775][T20777] RSP: 002b:00007f329c30a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 810.370792][T20777] RAX: ffffffffffffffda RBX: 00007f329b615fa0 RCX: 00007f329b39ce59 [ 810.370803][T20777] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 810.370813][T20777] RBP: 00007f329b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 810.370823][T20777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.370832][T20777] R13: 00007f329b616038 R14: 00007f329b615fa0 R15: 00007ffcad365af8 [ 810.370853][T20777] [ 810.426156][T20778] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 810.426197][T20778] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 810.569826][T20781] smpboot: CPU 1 is now offline [ 810.569847][T20781] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 810.571096][T20782] netlink: 146 bytes leftover after parsing attributes in process `syz.0.3904'. [ 812.461276][T20818] sysfs_service_op_store: Client not running :-5: [ 812.462883][T20813] zswap: compressor not available [ 812.850271][T20823] bond0: invalid ARP target specified [ 812.903306][T20823] nbd: socks must be embedded in a SOCK_ITEM attr [ 812.903491][T20823] block nbd0: shutting down sockets [ 812.912262][T20823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3919'. [ 814.172989][T20832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3920'. [ 814.320306][T20832] batadv0: entered promiscuous mode [ 814.417787][T20832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3920'. [ 814.744514][T20852] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 814.912248][T20853] NFSD: Failed to start, no listeners configured. [ 815.286941][T20828] Process accounting resumed [ 816.829025][T20867] net_ratelimit: 47 callbacks suppressed [ 816.829044][T20867] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 817.051830][T20891] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 817.269150][T20891] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 817.488307][T20895] smpboot: CPU 1 is now offline [ 817.570832][T20895] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 820.704386][T20942] vhci_hcd vhci_hcd.2: invalid port number 194 [ 820.740643][T20942] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 820.913522][T20952] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 820.992885][T20952] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 821.064471][ T29] audit: type=1804 audit(4294967665.228:19): pid=20948 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3942" name="/newroot/55/file0" dev="tmpfs" ino=312 res=1 errno=0 [ 821.229207][T20958] smpboot: CPU 1 is now offline [ 821.296234][T20958] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 822.367147][T20988] netlink: zone id is out of range [ 822.405376][T20987] netlink: zone id is out of range [ 822.447059][T20987] netlink: zone id is out of range [ 822.480359][T20988] netlink: zone id is out of range [ 822.527060][T20987] netlink: zone id is out of range [ 822.563890][T20988] netlink: zone id is out of range [ 822.620821][T20987] netlink: zone id is out of range [ 822.635555][T20995] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 822.676145][T20988] netlink: zone id is out of range [ 822.740870][T20987] netlink: zone id is out of range [ 822.755976][T20995] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 822.764570][T20988] netlink: zone id is out of range [ 822.960719][T20999] smpboot: CPU 1 is now offline [ 823.059565][T20999] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 823.428617][ T29] audit: type=1800 audit(4294967667.588:20): pid=21019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3952" name="dbroot" dev="configfs" ino=98467 res=0 errno=0 [ 824.840881][T21035] bond0: invalid ARP target specified [ 824.925119][T21036] nbd: socks must be embedded in a SOCK_ITEM attr [ 824.961008][T21037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3953'. [ 825.055912][T21036] block nbd0: shutting down sockets [ 827.485432][ T29] audit: type=1804 audit(4294967671.638:21): pid=21080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3964" name="/newroot/64/file0" dev="tmpfs" ino=360 res=1 errno=0 [ 827.606350][T21084] bond0: invalid ARP target specified [ 827.630961][ T29] audit: type=1804 audit(4294967671.678:22): pid=21081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3964" name="/newroot/64/file0" dev="tmpfs" ino=360 res=1 errno=0 [ 827.718067][T21084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3965'. [ 827.762430][ T29] audit: type=1800 audit(4294967671.688:23): pid=21080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3964" name="file0" dev="tmpfs" ino=360 res=0 errno=0 [ 828.260409][T21094] nvme_fabrics: missing parameter 'transport=%s' [ 828.309166][T21094] nvme_fabrics: missing parameter 'nqn=%s' [ 829.001944][T21111] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 829.071995][T21113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3973'. [ 829.091603][T21111] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 829.267411][T21116] smpboot: CPU 1 is now offline [ 829.324867][T21116] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 829.412232][T21122] cifs: Unknown parameter '/dev/admmidi2' [ 829.819614][T21137] bond0: invalid ARP target specified [ 829.880182][T21110] kexec: Could not allocate control_code_buffer [ 829.909341][T21137] nbd: socks must be embedded in a SOCK_ITEM attr [ 829.949029][T21139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3977'. [ 830.005279][T21137] block nbd0: shutting down sockets [ 832.124886][T21182] nbd: socks must be embedded in a SOCK_ITEM attr [ 832.219248][T21188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3985'. [ 832.263676][T21182] block nbd0: shutting down sockets [ 832.476347][T21179] bond0: invalid ARP target specified [ 832.552878][T21193] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 832.632414][T21195] bond0: invalid ARP target specified [ 832.693380][T21193] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 832.709908][T21195] nbd: socks must be embedded in a SOCK_ITEM attr [ 832.728117][T21195] block nbd0: shutting down sockets [ 832.786747][T21195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3989'. [ 832.886671][T21197] smpboot: CPU 1 is now offline [ 832.906251][ T29] audit: type=1800 audit(4294967677.068:24): pid=21201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3990" name="dbroot" dev="configfs" ino=99736 res=0 errno=0 [ 832.971855][T21197] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 833.480984][T21187] kexec: Could not allocate control_code_buffer [ 834.859813][T21229] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 834.938608][T21229] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 835.066806][T21233] smpboot: CPU 1 is now offline [ 835.109417][T21233] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 836.082423][T21254] futex_wake_op: syz.0.3996 tries to shift op by -2048; fix this program [ 836.156706][T21253] futex_wake_op: syz.0.3996 tries to shift op by -2048; fix this program [ 836.216663][T21252] 0x000000000001-0x000000020000 : "" [ 836.337773][T21252] ftl_cs: FTL header corrupt! [ 837.792167][T13187] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.849680][T21289] nbd: socks must be embedded in a SOCK_ITEM attr [ 837.942332][ T29] audit: type=1800 audit(4294967682.098:25): pid=21291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4002" name="dbroot" dev="configfs" ino=100175 res=0 errno=0 [ 837.973355][T21289] block nbd0: shutting down sockets [ 838.026885][T21292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3999'. [ 838.047384][T19149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 838.062955][T19149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 838.071923][T19149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 838.079869][T19149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 838.089772][T19149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 838.157339][T21284] bond0: invalid ARP target specified [ 838.639015][T13187] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.667120][T21258] Process accounting paused [ 838.858470][T13187] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.084591][T13187] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.767287][T21293] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.787493][T21293] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.802729][T21293] bridge_slave_0: entered allmulticast mode [ 839.827388][T21293] bridge_slave_0: entered promiscuous mode [ 839.859834][T21293] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.895967][T21293] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.917989][T21293] bridge_slave_1: entered allmulticast mode [ 839.936961][T21293] bridge_slave_1: entered promiscuous mode [ 840.026908][T21293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.067065][T21293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.173370][T19149] Bluetooth: hci2: command tx timeout [ 840.216099][T21293] team0: Port device team_slave_0 added [ 840.279701][T21293] team0: Port device team_slave_1 added [ 840.428284][T21293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.455980][T21293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.537322][T21293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.595272][T21293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.619981][T21293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.707539][T21293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.880209][T21293] hsr_slave_0: entered promiscuous mode [ 840.902645][T21293] hsr_slave_1: entered promiscuous mode [ 840.924223][T21293] debugfs: 'hsr0' already exists in 'hsr' [ 840.935182][T21293] Cannot create hsr debugfs directory [ 842.122058][T21363] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 842.199684][T21363] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 842.255528][T19149] Bluetooth: hci2: command tx timeout [ 842.950467][T21383] FAULT_INJECTION: forcing a failure. [ 842.950467][T21383] name failslab, interval 1, probability 0, space 0, times 0 [ 842.967392][T21383] CPU: 1 UID: 0 PID: 21383 Comm: syz.4.4014 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.967439][T21383] Tainted: [L]=SOFTLOCKUP [ 842.967451][T21383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 842.967469][T21383] Call Trace: [ 842.967479][T21383] [ 842.967491][T21383] dump_stack_lvl+0x100/0x190 [ 842.967527][T21383] should_fail_ex.cold+0x5/0xa [ 842.967566][T21383] should_failslab+0xc2/0x120 [ 842.967602][T21383] __kmalloc_cache_noprof+0x7a/0x6f0 [ 842.967644][T21383] ? kobject_uevent_env+0x263/0x18b0 [ 842.967685][T21383] kobject_uevent_env+0x263/0x18b0 [ 842.967726][T21383] ? bus_to_subsys+0x114/0x150 [ 842.967769][T21383] device_del+0x605/0x9b0 [ 842.967818][T21383] ? __pfx_device_del+0x10/0x10 [ 842.967874][T21383] rfkill_unregister+0xde/0x2c0 [ 842.967917][T21383] nfc_unregister_rfkill+0xd0/0x2b0 [ 842.967958][T21383] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 842.967988][T21383] nci_unregister_device+0x3e/0x330 [ 842.968017][T21383] ? ima_file_free+0xc6/0x340 [ 842.968046][T21383] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 842.968078][T21383] virtual_ncidev_close+0x4b/0xa0 [ 842.968107][T21383] __fput+0x3ff/0xb50 [ 842.968160][T21383] task_work_run+0x150/0x240 [ 842.968191][T21383] ? __pfx_task_work_run+0x10/0x10 [ 842.968223][T21383] ? rcu_is_watching+0x12/0xc0 [ 842.968262][T21383] exit_to_user_mode_loop+0x157/0x670 [ 842.968304][T21383] ? rcu_is_watching+0x12/0xc0 [ 842.968341][T21383] do_syscall_64+0x652/0x840 [ 842.968380][T21383] ? clear_bhb_loop+0x40/0x90 [ 842.968413][T21383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.968442][T21383] RIP: 0033:0x7f331bf9ce59 [ 842.968465][T21383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.968495][T21383] RSP: 002b:00007f331cde5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 842.968524][T21383] RAX: 0000000000000000 RBX: 00007f331c216090 RCX: 00007f331bf9ce59 [ 842.968543][T21383] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 842.968561][T21383] RBP: 00007f331c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 842.968579][T21383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.968597][T21383] R13: 00007f331c216128 R14: 00007f331c216090 R15: 00007ffd38d90048 [ 842.968636][T21383] [ 843.044247][T21389] bond0: invalid ARP target specified [ 843.226535][T21391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4015'. [ 843.274099][T21390] nbd: socks must be embedded in a SOCK_ITEM attr [ 843.293997][T21390] block nbd0: shutting down sockets [ 844.333767][T19149] Bluetooth: hci2: command tx timeout [ 846.413632][T19149] Bluetooth: hci2: command tx timeout [ 846.591061][T19149] Bluetooth: hci4: command 0x0406 tx timeout [ 851.700596][T13180] Bluetooth: hci1: command 0x0406 tx timeout [ 852.768967][T13180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 852.785734][T13180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 852.794832][T13180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 852.804453][T13180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 852.812636][T13180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 853.279917][T21407] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.287137][T21407] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.299998][T21407] bridge_slave_0: entered allmulticast mode [ 853.307192][T21407] bridge_slave_0: entered promiscuous mode [ 853.315232][T21407] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.322843][T21407] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.330141][T21407] bridge_slave_1: entered allmulticast mode [ 853.337548][T21407] bridge_slave_1: entered promiscuous mode [ 853.367858][T21407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.381483][T21407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.411494][T21407] team0: Port device team_slave_0 added [ 853.419572][T21407] team0: Port device team_slave_1 added [ 853.442690][T21407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.451435][T21407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.479785][T21407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.492819][T21407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.502201][T21407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.529711][T21407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.571078][T21407] hsr_slave_0: entered promiscuous mode [ 853.579370][T21407] hsr_slave_1: entered promiscuous mode [ 853.586793][T21407] debugfs: 'hsr0' already exists in 'hsr' [ 853.595105][T21407] Cannot create hsr debugfs directory [ 854.893422][T13180] Bluetooth: hci3: command tx timeout [ 856.973301][T13180] Bluetooth: hci3: command tx timeout [ 858.299937][T19149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 858.313693][T19149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 858.332142][T19149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 858.344186][T19149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 858.355819][T19149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 858.810789][T21426] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.819075][T21426] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.826886][T21426] bridge_slave_0: entered allmulticast mode [ 858.834546][T21426] bridge_slave_0: entered promiscuous mode [ 858.843577][T21426] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.851030][T21426] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.858349][T21426] bridge_slave_1: entered allmulticast mode [ 858.865538][T21426] bridge_slave_1: entered promiscuous mode [ 858.896678][T21426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.908373][T21426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.938387][T21426] team0: Port device team_slave_0 added [ 858.946231][T21426] team0: Port device team_slave_1 added [ 858.968942][T21426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.975962][T21426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.001930][T21426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.014342][T21426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.021292][T21426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.047608][T21426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.058195][T19149] Bluetooth: hci3: command tx timeout [ 859.091535][T21426] hsr_slave_0: entered promiscuous mode [ 859.098231][T21426] hsr_slave_1: entered promiscuous mode [ 859.104660][T21426] debugfs: 'hsr0' already exists in 'hsr' [ 859.110458][T21426] Cannot create hsr debugfs directory [ 860.413526][T19149] Bluetooth: hci5: command tx timeout [ 861.133346][T19149] Bluetooth: hci3: command tx timeout [ 862.493605][T19149] Bluetooth: hci5: command tx timeout [ 864.573502][T19149] Bluetooth: hci5: command tx timeout [ 866.653521][T19149] Bluetooth: hci5: command tx timeout [ 870.097068][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.103663][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 898.304038][T13180] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 898.321988][T13180] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 898.332932][T13180] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 898.342183][T13180] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 898.350278][T13180] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 898.796628][T21452] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.803960][T21452] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.811301][T21452] bridge_slave_0: entered allmulticast mode [ 898.818685][T21452] bridge_slave_0: entered promiscuous mode [ 898.826465][T21452] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.834117][T21452] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.841457][T21452] bridge_slave_1: entered allmulticast mode [ 898.848821][T21452] bridge_slave_1: entered promiscuous mode [ 898.875406][T21452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.887014][T21452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.915231][T21452] team0: Port device team_slave_0 added [ 898.922876][T21452] team0: Port device team_slave_1 added [ 898.947014][T21452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.954011][T21452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.979948][T21452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.992298][T21452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.999317][T21452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.025229][T21452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.070315][T21452] hsr_slave_0: entered promiscuous mode [ 899.076891][T21452] hsr_slave_1: entered promiscuous mode [ 899.082928][T21452] debugfs: 'hsr0' already exists in 'hsr' [ 899.088711][T21452] Cannot create hsr debugfs directory [ 900.413407][T13180] Bluetooth: hci6: command tx timeout [ 902.493464][T13180] Bluetooth: hci6: command tx timeout [ 904.573372][T13180] Bluetooth: hci6: command tx timeout [ 906.653423][T13180] Bluetooth: hci6: command tx timeout [ 912.826932][T19149] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 912.844487][T19149] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 912.856365][T19149] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 912.866079][T19149] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 912.877253][T19149] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 913.310272][T21472] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.317478][T21472] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.325002][T21472] bridge_slave_0: entered allmulticast mode [ 913.332122][T21472] bridge_slave_0: entered promiscuous mode [ 913.340042][T21472] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.347324][T21472] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.355128][T21472] bridge_slave_1: entered allmulticast mode [ 913.362455][T21472] bridge_slave_1: entered promiscuous mode [ 913.389069][T21472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.400637][T21472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.429687][T21472] team0: Port device team_slave_0 added [ 913.437523][T21472] team0: Port device team_slave_1 added [ 913.462981][T21472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.470047][T21472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.496452][T21472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.508821][T21472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.516025][T21472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.541996][T21472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.582706][T21472] hsr_slave_0: entered promiscuous mode [ 913.589124][T21472] hsr_slave_1: entered promiscuous mode [ 913.595435][T21472] debugfs: 'hsr0' already exists in 'hsr' [ 913.601189][T21472] Cannot create hsr debugfs directory [ 914.973449][T19149] Bluetooth: hci7: command tx timeout [ 917.053407][T19149] Bluetooth: hci7: command tx timeout [ 918.833376][T13180] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 918.857531][T13180] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 918.865925][T13180] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 918.875959][T13180] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 918.887302][T13180] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 919.138822][T13180] Bluetooth: hci7: command tx timeout [ 919.337674][T21492] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.345085][T21492] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.352303][T21492] bridge_slave_0: entered allmulticast mode [ 919.360013][T21492] bridge_slave_0: entered promiscuous mode [ 919.367968][T21492] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.375240][T21492] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.382622][T21492] bridge_slave_1: entered allmulticast mode [ 919.389950][T21492] bridge_slave_1: entered promiscuous mode [ 919.416366][T21492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.428155][T21492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.456477][T21492] team0: Port device team_slave_0 added [ 919.464468][T21492] team0: Port device team_slave_1 added [ 919.488010][T21492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.495040][T21492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.520995][T21492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.533227][T21492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.540328][T21492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.567079][T21492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.608766][T21492] hsr_slave_0: entered promiscuous mode [ 919.616309][T21492] hsr_slave_1: entered promiscuous mode [ 919.622449][T21492] debugfs: 'hsr0' already exists in 'hsr' [ 919.628300][T21492] Cannot create hsr debugfs directory [ 920.973641][T13180] Bluetooth: hci8: command tx timeout [ 921.213415][T13180] Bluetooth: hci7: command tx timeout [ 923.053619][T13180] Bluetooth: hci8: command tx timeout [ 925.133637][T19149] Bluetooth: hci8: command tx timeout [ 927.213741][T13180] Bluetooth: hci8: command tx timeout [ 931.534674][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.541029][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 958.881315][T19149] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 958.902301][T19149] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 958.915562][T19149] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 958.926513][T19149] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 958.934800][T19149] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 959.416065][T21517] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.423550][T21517] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.431728][T21517] bridge_slave_0: entered allmulticast mode [ 959.439084][T21517] bridge_slave_0: entered promiscuous mode [ 959.447138][T21517] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.456310][T21517] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.463705][T21517] bridge_slave_1: entered allmulticast mode [ 959.470961][T21517] bridge_slave_1: entered promiscuous mode [ 959.500266][T21517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.512851][T21517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.548348][T21517] team0: Port device team_slave_0 added [ 959.556520][T21517] team0: Port device team_slave_1 added [ 959.580164][T21517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.587547][T21517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.614784][T21517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.627319][T21517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.637811][T21517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.665239][T21517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.707381][T21517] hsr_slave_0: entered promiscuous mode [ 959.714230][T21517] hsr_slave_1: entered promiscuous mode [ 959.720402][T21517] debugfs: 'hsr0' already exists in 'hsr' [ 959.726186][T21517] Cannot create hsr debugfs directory [ 960.973612][T19149] Bluetooth: hci9: command tx timeout [ 963.053332][T19149] Bluetooth: hci9: command tx timeout [ 964.342036][T19149] Bluetooth: hci2: command 0x0406 tx timeout [ 965.133479][T13180] Bluetooth: hci9: command tx timeout [ 967.213269][T13180] Bluetooth: hci9: command tx timeout [ 972.895091][T19149] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 972.913462][T19149] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 972.925382][T19149] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 972.935324][T19149] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 972.949058][T19149] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 973.405378][T21539] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.412585][T21539] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.420195][T21539] bridge_slave_0: entered allmulticast mode [ 973.427417][T21539] bridge_slave_0: entered promiscuous mode [ 973.435433][T21539] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.442675][T21539] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.450061][T21539] bridge_slave_1: entered allmulticast mode [ 973.459874][T21539] bridge_slave_1: entered promiscuous mode [ 973.487016][T21539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.498936][T21539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.527519][T21539] team0: Port device team_slave_0 added [ 973.536472][T21539] team0: Port device team_slave_1 added [ 973.562206][T21539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.569555][T21539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.597082][T21539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.609993][T21539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.617820][T21539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.644245][T21539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.687767][T21539] hsr_slave_0: entered promiscuous mode [ 973.694635][T21539] hsr_slave_1: entered promiscuous mode [ 973.701050][T21539] debugfs: 'hsr0' already exists in 'hsr' [ 973.706890][T21539] Cannot create hsr debugfs directory [ 975.053835][T13180] Bluetooth: hci10: command tx timeout [ 977.133785][T13180] Bluetooth: hci10: command tx timeout [ 978.910516][T13204] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 978.926999][T13204] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 978.938191][T13204] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 978.947714][T13204] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 978.955597][T13204] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 979.214318][T13204] Bluetooth: hci10: command tx timeout [ 979.693621][T13204] Bluetooth: hci3: command 0x0406 tx timeout [ 979.788378][T21558] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.797086][T21558] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.805720][T21558] bridge_slave_0: entered allmulticast mode [ 979.814358][T21558] bridge_slave_0: entered promiscuous mode [ 979.824420][T21558] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.831694][T21558] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.839483][T21558] bridge_slave_1: entered allmulticast mode [ 979.847903][T21558] bridge_slave_1: entered promiscuous mode [ 979.890446][T21558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.904712][T21558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.948460][T21558] team0: Port device team_slave_0 added [ 979.957721][T21558] team0: Port device team_slave_1 added [ 979.995697][T21558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.002694][T21558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.030903][T21558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.048490][T21558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.055875][T21558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.082688][T21558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.165095][T21558] hsr_slave_0: entered promiscuous mode [ 980.172089][T21558] hsr_slave_1: entered promiscuous mode [ 980.181154][T21558] debugfs: 'hsr0' already exists in 'hsr' [ 980.187047][T21558] Cannot create hsr debugfs directory [ 981.053609][T19149] Bluetooth: hci11: command tx timeout [ 981.293716][T19149] Bluetooth: hci10: command tx timeout [ 983.133622][T19149] Bluetooth: hci11: command tx timeout [ 984.817203][T19149] Bluetooth: hci5: command 0x0406 tx timeout [ 985.213722][T19149] Bluetooth: hci11: command tx timeout [ 987.293584][T19149] Bluetooth: hci11: command tx timeout [ 992.974481][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.980931][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.453498][ T30] INFO: task kworker/u10:1:13187 blocked for more than 143 seconds. [ 997.461556][ T30] Tainted: G L syzkaller #0 [ 997.468206][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 997.476938][ T30] task:kworker/u10:1 state:D stack:23496 pid:13187 tgid:13187 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 997.489066][ T30] Workqueue: netns cleanup_net [ 997.493903][ T30] Call Trace: [ 997.497194][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 997.500136][ T30] __schedule+0x1295/0x67a0 [ 997.504837][ T30] ? __pfx___schedule+0x10/0x10 [ 997.510167][ T30] ? find_held_lock+0x2b/0x80 [ 997.514981][ T30] ? schedule+0x2bf/0x390 [ 997.519349][ T30] schedule+0xdd/0x390 [ 997.527076][ T30] schedule_timeout+0x1b2/0x280 [ 997.532000][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 997.539671][ T30] ? mark_held_locks+0x40/0x70 [ 997.544924][ T30] __wait_for_common+0x2e7/0x4c0 [ 997.549923][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 997.555705][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 997.561220][ T30] remove_one+0x312/0x420 [ 997.565734][ T30] ? find_next_child+0x18f/0x280 [ 997.570725][ T30] __simple_recursive_removal+0x148/0x5c0 [ 997.576591][ T30] ? __pfx_remove_one+0x10/0x10 [ 997.581469][ T30] debugfs_remove+0x5d/0x80 [ 997.586240][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 997.591327][ T30] nsim_dev_reload_destroy+0x144/0x4a0 [ 997.597938][ T30] nsim_dev_reload_down+0x66/0xd0 [ 997.603027][ T30] devlink_reload+0x1ae/0x7a0 [ 997.609007][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 997.615557][ T30] devlink_pernet_pre_exit+0x247/0x370 [ 997.621086][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 997.636559][ T30] ? __local_bh_enable_ip+0x9e/0x120 [ 997.654621][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 997.659910][ T30] ? xfrm_policy_flush+0x3a4/0x450 [ 997.671053][ T30] ? xfrm_policy_flush+0x3a4/0x450 [ 997.677745][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 997.684122][ T30] ops_undo_list+0x187/0xab0 [ 997.688779][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 997.704305][ T30] ? cleanup_net+0x332/0x920 [ 997.712023][ T30] ? cleanup_net+0x332/0x920 [ 997.718007][ T30] ? idr_destroy+0x62/0x2e0 [ 997.722875][ T30] cleanup_net+0x499/0x920 [ 997.731153][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 997.736294][ T30] ? rcu_is_watching+0x12/0xc0 [ 997.741100][ T30] process_one_work+0xa0e/0x1980 [ 997.746330][ T30] ? __pfx_process_one_work+0x10/0x10 [ 997.751752][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 997.756813][ T30] worker_thread+0x5ef/0xe50 [ 997.761441][ T30] ? __pfx_worker_thread+0x10/0x10 [ 997.766589][ T30] ? kthread+0x13a/0x450 [ 997.770860][ T30] ? __pfx_worker_thread+0x10/0x10 [ 997.776139][ T30] kthread+0x370/0x450 [ 997.780263][ T30] ? __pfx_kthread+0x10/0x10 [ 997.785064][ T30] ret_from_fork+0x72b/0xd50 [ 997.789693][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 997.794893][ T30] ? rcu_is_watching+0x12/0xc0 [ 997.799689][ T30] ? __switch_to+0x800/0x1100 [ 997.804389][ T30] ? __switch_to_asm+0x39/0x70 [ 997.809175][ T30] ? __pfx_kthread+0x10/0x10 [ 997.813908][ T30] ret_from_fork_asm+0x1a/0x30 [ 997.818725][ T30] [ 997.821851][ T30] INFO: task syz.0.3999:21288 blocked for more than 143 seconds. [ 997.829685][ T30] Tainted: G L syzkaller #0 [ 997.836233][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 997.844954][ T30] task:syz.0.3999 state:D stack:29032 pid:21288 tgid:21282 ppid:19146 task_flags:0x400040 flags:0x00080002 [ 997.857220][ T30] Call Trace: [ 997.860605][ T30] [ 997.863950][ T30] __schedule+0x1295/0x67a0 [ 997.868537][ T30] ? __pfx___schedule+0x10/0x10 [ 997.873842][ T30] ? find_held_lock+0x2b/0x80 [ 997.878580][ T30] ? schedule+0x2bf/0x390 [ 997.882970][ T30] schedule+0xdd/0x390 [ 997.887594][ T30] schedule_preempt_disabled+0x13/0x30 [ 997.893363][ T30] __mutex_lock+0xced/0x1b10 [ 997.898009][ T30] ? devlink_health_report+0x66c/0xb20 [ 997.903910][ T30] ? __pfx_devlink_nl_notify_filter+0x10/0x10 [ 997.910033][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 997.915486][ T30] ? devlink_recover_notify.constprop.0+0x443/0x550 [ 997.922142][ T30] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 997.929227][ T30] ? devlink_health_report+0x66c/0xb20 [ 997.935106][ T30] devlink_health_report+0x66c/0xb20 [ 997.940463][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 997.946738][ T30] ? _copy_from_user+0x59/0xd0 [ 997.951574][ T30] nsim_dev_health_break_write+0x166/0x210 [ 997.957886][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 997.964904][ T30] full_proxy_write+0x135/0x1a0 [ 997.969909][ T30] vfs_write+0x2aa/0x1070 [ 997.974848][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 997.980294][ T30] ? __pfx_vfs_write+0x10/0x10 [ 997.985520][ T30] ? __fget_files+0x215/0x3d0 [ 997.990274][ T30] ? __fget_files+0x21f/0x3d0 [ 997.995417][ T30] ksys_write+0x12a/0x250 [ 997.999805][ T30] ? __pfx_ksys_write+0x10/0x10 [ 998.005121][ T30] ? kcov_ioctl+0x16a/0x720 [ 998.009938][ T30] ? rcu_is_watching+0x12/0xc0 [ 998.015165][ T30] do_syscall_64+0x115/0x840 [ 998.019901][ T30] ? clear_bhb_loop+0x40/0x90 [ 998.025006][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.030957][ T30] RIP: 0033:0x7fed61b9ce59 [ 998.035681][ T30] RSP: 002b:00007fed5fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 998.044521][ T30] RAX: ffffffffffffffda RBX: 00007fed61e16090 RCX: 00007fed61b9ce59 [ 998.052537][ T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000005 [ 998.060640][ T30] RBP: 00007fed61c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 998.068687][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 998.076709][ T30] R13: 00007fed61e16128 R14: 00007fed61e16090 R15: 00007ffe4ee99838 [ 998.084735][ T30] [ 998.087780][ T30] INFO: task syz-executor:21293 blocked for more than 143 seconds. [ 998.097667][ T30] Tainted: G L syzkaller #0 [ 998.105146][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 998.113896][ T30] task:syz-executor state:D stack:23560 pid:21293 tgid:21293 ppid:1 task_flags:0x400140 flags:0x00080002 [ 998.126284][ T30] Call Trace: [ 998.129784][ T30] [ 998.132754][ T30] __schedule+0x1295/0x67a0 [ 998.139187][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 998.144880][ T30] ? __pfx___schedule+0x10/0x10 [ 998.149901][ T30] ? find_held_lock+0x2b/0x80 [ 998.154709][ T30] ? schedule+0x2bf/0x390 [ 998.159086][ T30] schedule+0xdd/0x390 [ 998.163244][ T30] schedule_preempt_disabled+0x13/0x30 [ 998.168733][ T30] __mutex_lock+0xced/0x1b10 [ 998.173840][ T30] ? device_del+0xa0/0x9b0 [ 998.178320][ T30] ? xas_create+0x1f4/0x14e0 [ 998.182909][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 998.188007][ T30] ? mark_held_locks+0x40/0x70 [ 998.192805][ T30] ? device_del+0xa0/0x9b0 [ 998.197288][ T30] device_del+0xa0/0x9b0 [ 998.201557][ T30] ? __pfx_ida_free+0x10/0x10 [ 998.206289][ T30] ? __pfx_device_del+0x10/0x10 [ 998.211169][ T30] ? __lock_acquire+0x4a5/0x2630 [ 998.216159][ T30] device_unregister+0x1d/0xe0 [ 998.220951][ T30] del_device_store+0x346/0x480 [ 998.225850][ T30] ? __pfx_del_device_store+0x10/0x10 [ 998.231283][ T30] ? find_held_lock+0x2b/0x80 [ 998.236037][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 998.240928][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 998.245861][ T30] ? __pfx_del_device_store+0x10/0x10 [ 998.251252][ T30] bus_attr_store+0x74/0xb0 [ 998.255912][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 998.261158][ T30] sysfs_kf_write+0xf2/0x150 [ 998.265806][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 998.271121][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 998.276496][ T30] vfs_write+0x6ac/0x1070 [ 998.280859][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 998.286728][ T30] ? __pfx_vfs_write+0x10/0x10 [ 998.291522][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 998.296812][ T30] ksys_write+0x12a/0x250 [ 998.301161][ T30] ? __pfx_ksys_write+0x10/0x10 [ 998.306079][ T30] ? rcu_is_watching+0x12/0xc0 [ 998.310892][ T30] do_syscall_64+0x115/0x840 [ 998.315567][ T30] ? clear_bhb_loop+0x40/0x90 [ 998.320266][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.326219][ T30] RIP: 0033:0x7fe6e655d68e [ 998.330645][ T30] RSP: 002b:00007ffd0954a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 998.339124][ T30] RAX: ffffffffffffffda RBX: 0000555570e4d500 RCX: 00007fe6e655d68e [ 998.347162][ T30] RDX: 0000000000000001 RSI: 00007ffd0954a0d0 RDI: 0000000000000005 [ 998.355206][ T30] RBP: 00007fe6e66335f2 R08: 0000000000000000 R09: 0000000000000000 [ 998.363227][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.371230][ T30] R13: 00007ffd0954a0d0 R14: 00007fe6e7344620 R15: 0000000000000003 [ 998.379320][ T30] [ 998.382397][ T30] INFO: task syz.1.4015:21386 blocked for more than 144 seconds. [ 998.395025][ T30] Tainted: G L syzkaller #0 [ 998.404416][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 998.413452][ T30] task:syz.1.4015 state:D stack:26952 pid:21386 tgid:21384 ppid:17394 task_flags:0x400140 flags:0x00080002 [ 998.425567][ T30] Call Trace: [ 998.428871][ T30] [ 998.431794][ T30] __schedule+0x1295/0x67a0 [ 998.436382][ T30] ? __pfx___schedule+0x10/0x10 [ 998.441251][ T30] ? find_held_lock+0x2b/0x80 [ 998.445997][ T30] ? schedule+0x2bf/0x390 [ 998.450351][ T30] schedule+0xdd/0x390 [ 998.454465][ T30] schedule_preempt_disabled+0x13/0x30 [ 998.459943][ T30] rwsem_down_read_slowpath+0x5af/0xb40 [ 998.465536][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 998.471652][ T30] ? __pfx___might_resched+0x10/0x10 [ 998.477008][ T30] down_read+0xed/0x450 [ 998.481181][ T30] ? __pfx_down_read+0x10/0x10 [ 998.485999][ T30] ? mnt_get_write_access+0x1e9/0x2f0 [ 998.491399][ T30] path_openat+0xa16/0x31a0 [ 998.495978][ T30] ? __pfx_path_openat+0x10/0x10 [ 998.500959][ T30] do_file_open+0x20e/0x430 [ 998.505570][ T30] ? __pfx_do_file_open+0x10/0x10 [ 998.510649][ T30] ? alloc_fd+0x476/0x790 [ 998.515041][ T30] ? do_getname+0x191/0x390 [ 998.519573][ T30] do_sys_openat2+0x10d/0x1e0 [ 998.524309][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 998.529626][ T30] __x64_sys_openat+0x12d/0x210 [ 998.534555][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 998.539953][ T30] ? ksys_write+0x1ac/0x250 [ 998.544491][ T30] ? rcu_is_watching+0x12/0xc0 [ 998.549284][ T30] do_syscall_64+0x115/0x840 [ 998.553934][ T30] ? clear_bhb_loop+0x40/0x90 [ 998.558646][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.564706][ T30] RIP: 0033:0x7f329b39ce59 [ 998.569744][ T30] RSP: 002b:00007f329c30a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 998.578340][ T30] RAX: ffffffffffffffda RBX: 00007f329b615fa0 RCX: 00007f329b39ce59 [ 998.586362][ T30] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 998.594638][ T30] RBP: 00007f329b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 998.602624][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 998.610630][ T30] R13: 00007f329b616038 R14: 00007f329b615fa0 R15: 00007ffcad365af8 [ 998.618809][ T30] [ 998.621878][ T30] INFO: task syz-executor:21407 blocked for more than 144 seconds. [ 998.629872][ T30] Tainted: G L syzkaller #0 [ 998.636416][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 998.645221][ T30] task:syz-executor state:D stack:24424 pid:21407 tgid:21407 ppid:1 task_flags:0x400140 flags:0x00080002 [ 998.657206][ T30] Call Trace: [ 998.660475][ T30] [ 998.663447][ T30] __schedule+0x1295/0x67a0 [ 998.667984][ T30] ? __pfx___schedule+0x10/0x10 [ 998.672828][ T30] ? find_held_lock+0x2b/0x80 [ 998.677578][ T30] ? schedule+0x2bf/0x390 [ 998.681942][ T30] schedule+0xdd/0x390 [ 998.686074][ T30] schedule_preempt_disabled+0x13/0x30 [ 998.691553][ T30] __mutex_lock+0xced/0x1b10 [ 998.696189][ T30] ? del_device_store+0xd1/0x480 [ 998.701157][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 998.706225][ T30] ? sscanf+0xc7/0x100 [ 998.710308][ T30] ? __pfx_sscanf+0x10/0x10 [ 998.714860][ T30] ? __lock_acquire+0x4a5/0x2630 [ 998.719824][ T30] ? __lock_acquire+0x4a5/0x2630 [ 998.724820][ T30] ? del_device_store+0xd1/0x480 [ 998.729775][ T30] del_device_store+0xd1/0x480 [ 998.734649][ T30] ? __pfx_del_device_store+0x10/0x10 [ 998.740057][ T30] ? find_held_lock+0x2b/0x80 [ 998.744839][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 998.749718][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 998.754652][ T30] ? __pfx_del_device_store+0x10/0x10 [ 998.760068][ T30] bus_attr_store+0x74/0xb0 [ 998.764653][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 998.769871][ T30] sysfs_kf_write+0xf2/0x150 [ 998.774519][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 998.779833][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 998.785095][ T30] vfs_write+0x6ac/0x1070 [ 998.789445][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 998.795327][ T30] ? __pfx_vfs_write+0x10/0x10 [ 998.800112][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 998.805384][ T30] ksys_write+0x12a/0x250 [ 998.809734][ T30] ? __pfx_ksys_write+0x10/0x10 [ 998.814765][ T30] ? rcu_is_watching+0x12/0xc0 [ 998.819623][ T30] do_syscall_64+0x115/0x840 [ 998.824328][ T30] ? clear_bhb_loop+0x40/0x90 [ 998.829036][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.834982][ T30] RIP: 0033:0x7f254c15d68e [ 998.839411][ T30] RSP: 002b:00007fffdc503c88 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 998.847866][ T30] RAX: ffffffffffffffda RBX: 0000555561620500 RCX: 00007f254c15d68e [ 998.855895][ T30] RDX: 0000000000000001 RSI: 00007fffdc503d10 RDI: 0000000000000005 [ 998.863921][ T30] RBP: 00007f254c2335f2 R08: 0000000000000000 R09: 0000000000000000 [ 998.871914][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.879963][ T30] R13: 00007fffdc503d10 R14: 00007f254cf44620 R15: 0000000000000003 [ 998.888019][ T30] [ 998.891153][ T30] [ 998.891153][ T30] Showing all locks held in the system: [ 998.911962][ T30] 1 lock held by khungtaskd/30: [ 998.922079][ T30] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 998.932146][ T30] 6 locks held by kworker/u10:1/13187: [ 998.937729][ T30] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 998.948417][ T30] #1: ffffc900040d7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 998.960458][ T30] #2: ffffffff905ed6c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 998.969968][ T30] #3: ffff88802fe86128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 998.983192][ T30] #4: ffff88802fe84258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 998.994126][ T30] #5: ffff88805c683160 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 999.005949][ T30] 2 locks held by kworker/u10:3/13191: [ 999.011427][ T30] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 999.022609][ T30] #1: ffffc900040e7d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 999.034796][ T30] 3 locks held by kworker/u10:7/14565: [ 999.040271][ T30] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 999.051514][ T30] #1: ffffc90003567d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 999.061956][ T30] #2: ffffffff90606420 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 999.071093][ T30] 2 locks held by syz-executor/19241: [ 999.076515][ T30] #0: ffffffff90606420 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 999.085562][ T30] #1: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 999.095670][ T30] 3 locks held by syz.0.3999/21288: [ 999.100857][ T30] #0: ffff888020b8db30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 999.109985][ T30] #1: ffff88801fecc410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 999.119035][ T30] #2: ffff88802fe84258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_health_report+0x66c/0xb20 [ 999.129829][ T30] 5 locks held by syz-executor/21293: [ 999.135342][ T30] #0: ffff888035b14410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 999.144404][ T30] #1: ffff88805c030480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 999.154700][ T30] #2: ffff88802a4ce698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 999.164847][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 999.175229][ T30] #4: ffff88802fe86128 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9b0 [ 999.184142][ T30] 2 locks held by syz.1.4015/21386: [ 999.189352][ T30] #0: ffff88801fecc410 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 999.198575][ T30] #1: ffff88805c683160 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 999.209096][ T30] 4 locks held by syz-executor/21407: [ 999.214596][ T30] #0: ffff888035b14410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 999.223677][ T30] #1: ffff88807ffebc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 999.233491][ T30] #2: ffff88802a4ce698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 999.243589][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 999.253933][ T30] 4 locks held by syz-executor/21426: [ 999.259312][ T30] #0: ffff888035b14410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 999.268353][ T30] #1: ffff8880329c5480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 999.278184][ T30] #2: ffff88802a4ce698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 999.288372][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 999.298746][ T30] 4 locks held by syz-executor/21452: [ 999.304194][ T30] #0: ffff888035b14410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 999.313392][ T30] #1: ffff88805b8ffc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 999.323275][ T30] #2: ffff88802a4ce698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 999.333485][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 999.343890][ T30] 4 locks held by syz-executor/21472: [ 999.349275][ T30] #0: ffff888035b14410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 999.358386][ T30] #1: ffff888033493080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 999.368214][ T30] #2: ffff88802a4ce698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 999.379587][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 999.390212][ T30] 4 locks held by syz-executor/21492: [ 999.395664][ T30] #0: ffff888035b14410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 999.404740][ T30] #1: ffff888021783480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 999.414628][ T30] #2: ffff88802a4ce698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 999.424750][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 999.435077][ T30] 4 locks held by syz-executor/21517: [ 999.440468][ T30] #0: ffff888035b14410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 999.449643][ T30] #1: ffff88805a647080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 999.459513][ T30] #2: ffff88802a4ce698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 999.469975][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 999.480381][ T30] 4 locks held by syz-executor/21539: [ 999.485810][ T30] #0: ffff888035b14410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 999.494868][ T30] #1: ffff8880481ad480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 999.504862][ T30] #2: ffff88802a4ce698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 999.514930][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 999.525270][ T30] 4 locks held by syz-executor/21558: [ 999.530631][ T30] #0: ffff888035b14410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 999.539664][ T30] #1: ffff88805aca7080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 999.549500][ T30] #2: ffff88802a4ce698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 999.559576][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 999.569977][ T30] [ 999.572315][ T30] ============================================= [ 999.572315][ T30] [ 999.580896][ T30] NMI backtrace for cpu 1 [ 999.580924][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 999.580961][ T30] Tainted: [L]=SOFTLOCKUP [ 999.580970][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 999.580986][ T30] Call Trace: [ 999.580994][ T30] [ 999.581004][ T30] dump_stack_lvl+0x100/0x190 [ 999.581036][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 999.581066][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 999.581093][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 999.581134][ T30] sys_info+0x141/0x190 [ 999.581157][ T30] watchdog+0xcb1/0x1030 [ 999.581200][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 999.581238][ T30] ? __pfx_watchdog+0x10/0x10 [ 999.581277][ T30] ? __kthread_parkme+0x18c/0x230 [ 999.581316][ T30] ? kthread+0x13a/0x450 [ 999.581353][ T30] ? __pfx_watchdog+0x10/0x10 [ 999.581389][ T30] kthread+0x370/0x450 [ 999.581428][ T30] ? __pfx_kthread+0x10/0x10 [ 999.581470][ T30] ret_from_fork+0x72b/0xd50 [ 999.581501][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 999.581532][ T30] ? __switch_to+0x800/0x1100 [ 999.581568][ T30] ? __switch_to_asm+0x39/0x70 [ 999.581602][ T30] ? __pfx_kthread+0x10/0x10 [ 999.581641][ T30] ret_from_fork_asm+0x1a/0x30 [ 999.581690][ T30] [ 999.581701][ T30] Sending NMI from CPU 1 to CPUs 0: [ 999.721683][ C0] NMI backtrace for cpu 0 [ 999.721739][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.721776][ C0] Tainted: [L]=SOFTLOCKUP [ 999.721785][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 999.721802][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 999.721846][ C0] Code: d6 95 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 b0 24 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 999.721872][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 999.721893][ C0] RAX: 000000000024d391 RBX: ffffffff8e4955c0 RCX: ffffffff8b86e225 [ 999.721911][ C0] RDX: 0000000000000000 RSI: ffffffff8df1a757 RDI: ffffffff8c1c4380 [ 999.721928][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 999.721945][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 999.721962][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d73c50 [ 999.721979][ C0] FS: 0000000000000000(0000) GS:ffff88812438a000(0000) knlGS:0000000000000000 [ 999.722003][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 999.722020][ C0] CR2: 0000563d88fca620 CR3: 00000000375d4000 CR4: 00000000003526f0 [ 999.722037][ C0] Call Trace: [ 999.722094][ C0] [ 999.722102][ C0] default_idle+0x9/0x10 [ 999.722127][ C0] default_idle_call+0x6c/0xb0 [ 999.722151][ C0] do_idle+0x464/0x590 [ 999.722182][ C0] ? __pfx_do_idle+0x10/0x10 [ 999.722216][ C0] cpu_startup_entry+0x4f/0x60 [ 999.722245][ C0] rest_init+0x251/0x260 [ 999.722269][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 999.722297][ C0] start_kernel+0x484/0x490 [ 999.722336][ C0] x86_64_start_reservations+0x24/0x30 [ 999.722362][ C0] x86_64_start_kernel+0x12b/0x130 [ 999.722388][ C0] common_startup_64+0x13e/0x148 [ 999.722441][ C0] [ 999.908932][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 999.915815][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 999.926518][ T30] Tainted: [L]=SOFTLOCKUP [ 999.930840][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 999.940884][ T30] Call Trace: [ 999.944165][ T30] [ 999.947108][ T30] dump_stack_lvl+0x100/0x190 [ 999.951782][ T30] vpanic+0x552/0x970 [ 999.955750][ T30] ? __pfx_vpanic+0x10/0x10 [ 999.960236][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 999.966378][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 999.972530][ T30] panic+0xd1/0xe0 [ 999.976237][ T30] ? __pfx_panic+0x10/0x10 [ 999.980663][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 999.986855][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 999.993020][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 999.999201][ T30] ? watchdog.cold+0x1ec/0x234 [ 1000.003965][ T30] ? watchdog+0xcc1/0x1030 [ 1000.008381][ T30] watchdog.cold+0x1fd/0x234 [ 1000.012966][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1000.018777][ T30] ? __pfx_watchdog+0x10/0x10 [ 1000.023479][ T30] ? __kthread_parkme+0x18c/0x230 [ 1000.028532][ T30] ? kthread+0x13a/0x450 [ 1000.032793][ T30] ? __pfx_watchdog+0x10/0x10 [ 1000.037485][ T30] kthread+0x370/0x450 [ 1000.041568][ T30] ? __pfx_kthread+0x10/0x10 [ 1000.046192][ T30] ret_from_fork+0x72b/0xd50 [ 1000.050807][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1000.055940][ T30] ? __switch_to+0x800/0x1100 [ 1000.060658][ T30] ? __switch_to_asm+0x39/0x70 [ 1000.065459][ T30] ? __pfx_kthread+0x10/0x10 [ 1000.070098][ T30] ret_from_fork_asm+0x1a/0x30 [ 1000.074898][ T30] [ 1000.078173][ T30] Kernel Offset: disabled [ 1000.082577][ T30] Rebooting in 86400 seconds..