last executing test programs: 4.811715714s ago: executing program 1 (id=2391): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf252100000008000300", @ANYRES32=r2], 0x28}}, 0x400c080) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7100f97bf53b7200000408000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) clone$auto(0x2, 0x20aa2890, 0x0, 0x0, 0xfffffffffffffe00) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) 4.665133503s ago: executing program 3 (id=2392): r0 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') r2 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x28400, 0x0) read$auto_dma_buf_debug_fops_(r2, &(0x7f00000003c0)=""/100, 0x64) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x14400, 0x0) ioctl$auto_XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={r3, 0x0, 0x7, 0x2a029dc7, 0x1fe, 0xf, [0x1, 0x2f, 0x9, 0x4, 0x7, 0xffffffffffffffff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_I2C_RDWR(r0, 0x707, &(0x7f0000000340)="ec523e6efbf2f666c9ee0c2dfb3d69081ea21da2ae10a55806b79dcc5916f762efa5cec38cf6bb010dfdf18fd7d4c63abd8cac66c8c25a14a2eaea2b9b902331fb87fc55aff599acc487c3e779f5024ac02be2e35252142433126da8a28bfe9f0a7e7b") sendmsg$auto_NL80211_CMD_SET_STATION(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c040) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000fc0), r4) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001040), r4) sendmsg$auto_NL80211_CMD_NEW_KEY(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000011c0)={0x18, r6, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x864) 4.37764313s ago: executing program 3 (id=2394): openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000080), 0x280902, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x200, 0xffffffffffffffff, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) read$auto(r0, 0x0, 0x2) 4.087928032s ago: executing program 1 (id=2395): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/vlan/config\x00', 0xc0000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101300, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x4079, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0xf, 0x4, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x540b, 0x0) 3.983614912s ago: executing program 3 (id=2397): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0xbc}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2057, 0x80}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020007, 0x5, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r2 = socket(0x10, 0x80002, 0x8) close_range$auto(r2, r2, 0x0) pipe$auto(0x0) splice$auto(r2, 0x0, r1, 0x0, 0x3fb, 0x9) write$auto(0x6, 0x0, 0x100000001) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x4201, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r3, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='\x00\x00\x00\x80\x00\x00\x00\x00io1\x00', 0xfffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x14, r5, 0x1b, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), 0xffffffffffffffff) 3.884131247s ago: executing program 1 (id=2399): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0xbc}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2057, 0x80}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020007, 0x5, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r2 = socket(0x10, 0x80002, 0x8) close_range$auto(r2, r2, 0x0) pipe$auto(0x0) splice$auto(r2, 0x0, r1, 0x0, 0x3fb, 0x9) write$auto(0x6, 0x0, 0x100000001) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x4201, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r3, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x80\x00\x00\x00\x00io1\x00', 0xfffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x14, r6, 0x1b, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), 0xffffffffffffffff) 3.554184329s ago: executing program 0 (id=2400): futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff) open(0x0, 0x1e7d43, 0xa6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x140082, 0x0) writev$auto(r1, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0340, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r2, 0x84, 0x75, 0x0, 0x0) 3.338637479s ago: executing program 2 (id=2401): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r0, 0x6e, &(0x7f00000002c0)={@_si_pad}, 0x4) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r1, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3d, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x43, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x10000, [0x1000000001, 0x0, 0x6, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 3.110484282s ago: executing program 0 (id=2402): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x42800, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fcdbdf250a00000018000180140002000000000000000000000000000000000018000180140002006261746164765f736c6176655f310000998d56c778bf49aa54321f8a032f4443f38613354ea49b0fd4295d6229becad35a83b12540bde9381e17ea8d493009abe13f6340e46a637f2fc7fea4ef9ae60ccba051141983ac1f781a5f16ab76a2e88446a38ab053c1dd6a01f11bf12f6f16844d241a5dd659a6209beab6378d58bec9fa2e3b013348c440fdc9ec4ea5e80819f091911adc7da3b5569d428cbb04b80af3ed84c1591f9b2e6166468b6e"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x40) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0xfffffff8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_DISCOVERY={0x20, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xa, 0x3, "ab986d053e4f"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 2.8872733s ago: executing program 3 (id=2403): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x2, 0x0) write$auto_proc_pid_set_comm_operations_base(r0, &(0x7f0000000000)="bcba", 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) 2.882478696s ago: executing program 2 (id=2404): rseq$auto(&(0x7f0000000340)={0x9, 0x8000400, 0x4, 0x4, 0xff7ffff3, 0xfffffff4, "fc03d8d81ec748dd10f94f39d3f6f858d4b4aa64d9741151835195c0c10e2b459894a22febf16410"}, 0x6, 0xfffffffd, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) set_mempolicy$auto(0x3, 0x0, 0x11) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0x123001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto(r1, 0x540a, r1) ioctl$auto_ECCGETSTATS(0xffffffffffffffff, 0x80104d12, &(0x7f0000000100)={0x8001, 0x8, 0x7ff, 0x44}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0x7, 0xfffffffffffffff9, 0x18, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f00000001c0)={0x8, 0x8, 0x1, 0xfffffff4, 0x80000000, 0xffffffff, "00f4d164874250f0151fdb32b558d870f48164cdcf41"}, 0x3, 0xfff, 0xa76) socket(0x2b, 0x1, 0x0) signalfd4$auto(r2, 0x0, 0x8, 0x11) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/conf/erspan0/forwarding\x00', 0x101202, 0x0) sendfile$auto(r3, 0x3, 0x0, 0xd) 2.699766678s ago: executing program 2 (id=2405): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0xbc}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2057, 0x80}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020007, 0x5, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r2 = socket(0x10, 0x80002, 0x8) close_range$auto(r2, r2, 0x0) pipe$auto(0x0) splice$auto(r2, 0x0, r1, 0x0, 0x3fb, 0x9) write$auto(0x6, 0x0, 0x100000001) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x4201, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r3, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x80\x00\x00\x00\x00io1\x00', 0xfffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x14, r6, 0x1b, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), 0xffffffffffffffff) 2.637653203s ago: executing program 1 (id=2406): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0xbc}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2057, 0x80}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020007, 0x5, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r2 = socket(0x10, 0x80002, 0x8) close_range$auto(r2, r2, 0x0) pipe$auto(0x0) splice$auto(r2, 0x0, r1, 0x0, 0x3fb, 0x9) write$auto(0x6, 0x0, 0x100000001) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x4201, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r3, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x80\x00\x00\x00\x00io1\x00', 0xfffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x14, r6, 0x1b, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), 0xffffffffffffffff) 2.514801931s ago: executing program 0 (id=2407): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0xbc}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2057, 0x80}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020007, 0x5, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r2 = socket(0x10, 0x80002, 0x8) close_range$auto(r2, r2, 0x0) pipe$auto(0x0) splice$auto(r2, 0x0, r1, 0x0, 0x3fb, 0x9) write$auto(0x6, 0x0, 0x100000001) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x4201, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r3, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x80\x00\x00\x00\x00io1\x00', 0xfffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x14, r6, 0x1b, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), 0xffffffffffffffff) 1.515788687s ago: executing program 3 (id=2408): mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b48, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000028c0), 0xa0001, 0x0) r2 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) ioctl$auto_USB_RAW_IOCTL_EP_READ(r1, 0xc0085508, 0x0) io_uring_setup$auto(0x20000000, &(0x7f0000000180)={0x58000000, 0x6, 0x200, 0x9, 0x5b662f24, 0x9, r2, [0x5, 0xb26b, 0x2], {0x3, 0x6, 0xe00000, 0xfffffff9, 0x401, 0x8, 0x7, 0x8, 0x6}, {0x6, 0x9, 0xea2, 0x9, 0x6, 0x8, 0x80000000, 0xff, 0x5}}) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r3, 0x8, 0x0) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r6, 0x0, 0x800003, 0x270) mlockall$auto(0x7) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x202, 0x0) ioctl$auto_SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x800, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) 1.471912616s ago: executing program 1 (id=2409): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(r1, 0xc1205531, r2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x22104, 0x9, 0x7, 0x7ff, 0x20010180, 0x4000000f}, 0x198) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x40010) socketpair$auto(0xd4, 0x7, 0x2, &(0x7f0000000380)=0x8) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0x10003, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x7}, 0x6, 0x0, 0x4, @raw=0x404, @integer64={0x20006, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) read$auto(0x3, 0x0, 0x8) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ec0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) 1.358455412s ago: executing program 0 (id=2410): socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/topology/die_cpus_list\x00', 0x40, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80000, 0x0) pread64$auto(r0, 0x0, 0x2, 0x3) ioctl$auto(0xffffffffffffffff, 0x541c, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2ab42, 0x0) getgroups$auto(0x1a1, 0xfffffffffffffffd) sendfile$auto(r2, r2, 0x0, 0x4f64a1d2) 1.295046096s ago: executing program 2 (id=2411): openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x642, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) pipe$auto(&(0x7f0000000280)) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x446b, 0x0, 0x106, 0x0, 0x1, 0x2003}, 0xed7138c}, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) 1.089345102s ago: executing program 2 (id=2412): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0xbc}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2057, 0x80}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020007, 0x5, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r2 = socket(0x10, 0x80002, 0x8) close_range$auto(r2, r2, 0x0) pipe$auto(0x0) splice$auto(r2, 0x0, r1, 0x0, 0x3fb, 0x9) write$auto(0x6, 0x0, 0x100000001) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x4201, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r3, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='\x00\x00\x00\x80\x00\x00\x00\x00io1\x00', 0xfffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x14, r5, 0x1b, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), 0xffffffffffffffff) 966.444372ms ago: executing program 0 (id=2413): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r0, 0x6e, &(0x7f00000002c0)={@_si_pad}, 0x4) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r1, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3d, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x43, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x10000, [0x1000000001, 0x0, 0x6, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 632.379573ms ago: executing program 0 (id=2414): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) fallocate$auto(r0, 0x1, 0x820, 0x7fff) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) memfd_secret$auto(0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) 388.002936ms ago: executing program 1 (id=2415): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0xbc}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2057, 0x80}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020007, 0x5, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r2 = socket(0x10, 0x80002, 0x8) close_range$auto(r2, r2, 0x0) pipe$auto(0x0) splice$auto(r2, 0x0, r1, 0x0, 0x3fb, 0x9) write$auto(0x6, 0x0, 0x100000001) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x4201, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r3, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00\x00\x80\x00\x00\x00\x00io1\x00', 0xfffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x14, r6, 0x1b, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000280), 0xffffffffffffffff) 376.55105ms ago: executing program 3 (id=2416): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x11, 0x3, 0x0) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) read$auto(0x3, 0x0, 0x8080) 0s ago: executing program 2 (id=2417): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/nbd6/trace/act_mask\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) readahead$auto(r3, 0x8000, 0x9) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_RESPONSE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c040}, 0x40004854) ioctl$auto(r3, 0x5600, r4) getcwd$auto(0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r2, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) kernel console output (not intermixed with test programs): 0x10 [ 511.405107][T13148] ? find_held_lock+0x2b/0x80 [ 511.405143][T13148] ? futex_private_hash_put+0x160/0x1b0 [ 511.405177][T13148] kernel_clone+0xfc/0x910 [ 511.405213][T13148] ? __pfx_futex_wake+0x10/0x10 [ 511.405245][T13148] ? __pfx_kernel_clone+0x10/0x10 [ 511.405301][T13148] __do_sys_clone+0xce/0x120 [ 511.405335][T13148] ? __pfx___do_sys_clone+0x10/0x10 [ 511.405387][T13148] ? xfd_validate_state+0x61/0x180 [ 511.405424][T13148] do_syscall_64+0xcd/0xf80 [ 511.405451][T13148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.405475][T13148] RIP: 0033:0x7f93eab8f7c9 [ 511.405496][T13148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.405519][T13148] RSP: 002b:00007f93eb98dfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 511.405543][T13148] RAX: ffffffffffffffda RBX: 00007f93eade6090 RCX: 00007f93eab8f7c9 [ 511.405560][T13148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 511.405573][T13148] RBP: 00007f93eac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 511.405588][T13148] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 511.405603][T13148] R13: 00007f93eade6128 R14: 00007f93eade6090 R15: 00007fffb5759398 [ 511.405639][T13148] [ 512.246916][T13160] [U] [ 512.249759][T13160] [U] [ 512.252466][T13160] [U] [ 512.255166][T13160] [U] [ 512.268125][T13160] [U] [ 512.270874][T13160] [U] [ 512.273600][T13160] [U] [ 512.276316][T13160] [U] [ 512.297353][T13160] [U] [ 512.300100][T13160] [U] [ 512.302797][T13160] [U] [ 512.305489][T13160] [U] [ 512.370314][T13160] [U] [ 512.373058][T13160] [U] Yd#!7x<7*\PJ }[⨓gXA [6#l)Pu+u&f|tyO]LWy\Sm8~És˖۠$'t [ 512.385395][T13160] [U] XT{ ЭDiY1@D{Zc]!NV': +Z1geT}1:2L*HHIEcm|3f)5X. [ 512.397635][T13160] [U] >(i@ )p%{a uἳ"S`8WHCsq#{C4Ku3x6 [ 512.444668][T13160] [U] w̫e[&4/Q1΢9wɃ\&X pixu5Ր|F)itFHKn-j1״6钿V'o8X~lZE + [ 512.457006][T13160] [U] :E$nX8ךWYVS6tEE=cwNi>o[,P4ʤK֤B몽dQCsE [ 512.467862][T13160] [U] ǚ* [ 512.470894][T13160] [U] ༦KQٓe|˯$+;F Tq_ cIv t|4.42VI YN'iVل8嚿74M r 9 Rɸ̄%ʹ4]3L`)4c.6S6en!2W(4*F"L}N(gUp [ 512.719449][T13160] [U] P%[G_;/'\v< jĦԤh%;k&a] nst[˪*h#ruuBGĔTTW9]eFJv0PdZȬ&\ݦ*7uʷ~C^<^ 霦 g*9}Xu\qO/B4Y/@JOR"5bj*҅;f2+/^d'zis- [ 512.745103][T13160] [U] m<ڭ [ 512.748481][T13160] [U] T@m=r _^@&m'pxpr*X,zuuwu-/kзL&~tHwB篌̣M [ 512.758816][T13160] [U] ׺b}ŝd\wQ&_j|uF(H? ϮbJiڱ/X>Q~++r!0KeCYCђ|yR4Xa]6K2kCzF63U|h߫MwZ,$#xC6y| [ 512.777910][T13160] [U] %aήkN}/ uץOv [ 512.783464][T13160] [U] q>}.33Dz_S7tWsecS4ˢ?$$CΉ_sgg,w*iɥN4Y47g9x{sx$|)MO'ONzT/`wrphKޠ$t^_# [ 512.799185][T13160] [U] -?S2o/E:BjX21V]l.{Ĩ q8bY/)ES]p2wr+Ew/ Gcu\J [ 512.825543][T13160] [U] x)$n&:L6wo!Q2k$N8P[f [ 512.831955][T13160] [U] G*C$&Qwdw^Ʌ!Vi}Eӆqpn a#&( ^]RL!А޺-{g4BA4jVC|娱Ȕd [ 512.854089][T13160] [U] =#klDe#6$W!Xw5\W \yH_ r;s\ #ٯ,hJĚa [ 512.863450][T13160] [U] jx 0WȽS@7f,Q:OSE)5nhq [ 512.870813][T13160] [U] vHK)NV#Z [ 512.875482][T13160] [U] x; [ 512.878414][T13160] [U] V8tQRA[8%G uGi#H [ 512.883340][T13160] [U] C=ϾH f +Bƕ+t [ 512.888450][T13160] [U] J [ 512.891385][T13160] [U] vZPpIJl~j쐷עrR/>!6o*M!lg;WDsaISW88Lz [ 512.900828][T13160] [U] ӴnW)? [ 513.046635][T13160] [U] 9&rL_ Y:_&3S mLTM^q\QWɉw1nx$V [ 513.054827][T13160] [U] `p>RR [ 513.059097][T13160] [U] ^x^&4 27l' [ 513.063863][T13160] [U]  Go z*ѥo1tD9 [ 513.068639][T13160] [U]  8DbtA8R/׶GD=H`4XeϴEN,!bґ>RC]oZt1=Qm;2^q">_4LihQ^^q^ [ 513.083830][T13160] [U] tt UӠWjp"+hƫy:萴ڣf?tQ=qDE*{.OkJf1PZu)$9'{( [ 513.419012][T13160] [U] }aफ़!'*1kV o5 [ 513.424842][T13160] [U] 4FtEtFȭA6aך;sR60xQ(w?"0a獑 [ 513.432747][T13160] [U] @6դYA?9v|Z [ 513.437976][T13160] [U] 59#M h=kzR|&NBJc͂ңH<:މ$0$op(0톎`/Q=,A!sg'P~ݵ\E 7W" ahi&8*㡪p juMƇgS! dԡ̾O+%Af2 [ 513.457619][T13160] [U] Chd#NЖ{_\18NR[V;)赵u.ܴ4Wbȿ [ 513.465526][T13160] [U] L'! O')I̊_R{,RWDs: [ 513.471958][T13160] [U] AG4iuKV@4EX"AxV:{񎫹s͢_A [ 513.480306][T13160] [U] 2ً_UcR0Րt.G))jޗ> 6h QkLq)sh [ 513.487088][T13160] [U] 9 ~GTau3cz$BSgcϙ4瀞VC\$SR0lRT:b%̡%U丠8n mu}Jw(F f^RW}x6 [ 513.502672][T13160] [U] ;FXV djFJo/DEahlw@>rXe˱|yq6 [ 513.510580][T13160] [U] :IL3@6y\ԄX [ 513.514926][T13160] [U] kKěb^ڹ* [ 513.518991][T13160] [U] ByXf!AmH:P.bKP?/A?%&Rﳴ [ 513.616698][T13160] [U] `:ǭ3S]S mRIh u!vHӊ(uK"*yD/ [ 514.166449][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 515.441129][T13229] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 0 with max blocks 1 with error 117 [ 515.525376][T13229] EXT4-fs (sda1): This should not happen!! Data will be lost [ 515.525376][T13229] [ 515.885831][T13241] FAULT_INJECTION: forcing a failure. [ 515.885831][T13241] name failslab, interval 1, probability 0, space 0, times 0 [ 515.899050][T13241] CPU: 0 UID: 0 PID: 13241 Comm: syz.1.1687 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.899090][T13241] Tainted: [L]=SOFTLOCKUP [ 515.899098][T13241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 515.899113][T13241] Call Trace: [ 515.899120][T13241] [ 515.899129][T13241] dump_stack_lvl+0x16c/0x1f0 [ 515.899175][T13241] should_fail_ex+0x512/0x640 [ 515.899202][T13241] ? __kmalloc_noprof+0xca/0x910 [ 515.899230][T13241] ? __pfx_page_owner_stack_open+0x10/0x10 [ 515.899264][T13241] should_failslab+0xc2/0x120 [ 515.899296][T13241] __kmalloc_noprof+0xeb/0x910 [ 515.899320][T13241] ? mutex_init_lockep+0x110/0x150 [ 515.899341][T13241] ? __seq_open_private+0x22/0xd0 [ 515.899373][T13241] ? __pfx_page_owner_stack_open+0x10/0x10 [ 515.899412][T13241] ? __seq_open_private+0x22/0xd0 [ 515.899441][T13241] __seq_open_private+0x22/0xd0 [ 515.899473][T13241] seq_open_private+0x24/0x40 [ 515.899504][T13241] page_owner_stack_open+0x27/0x100 [ 515.899539][T13241] full_proxy_open_regular+0x1b9/0x350 [ 515.899578][T13241] do_dentry_open+0x748/0x1590 [ 515.899608][T13241] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 515.899651][T13241] vfs_open+0x82/0x3f0 [ 515.899680][T13241] path_openat+0x2078/0x3140 [ 515.899726][T13241] ? __pfx_path_openat+0x10/0x10 [ 515.899773][T13241] do_filp_open+0x20b/0x470 [ 515.899806][T13241] ? __pfx_do_filp_open+0x10/0x10 [ 515.899866][T13241] ? alloc_fd+0x471/0x7d0 [ 515.899908][T13241] do_sys_openat2+0x121/0x290 [ 515.899935][T13241] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.899973][T13241] __x64_sys_openat+0x174/0x210 [ 515.899999][T13241] ? __pfx___x64_sys_openat+0x10/0x10 [ 515.900041][T13241] do_syscall_64+0xcd/0xf80 [ 515.900067][T13241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.900091][T13241] RIP: 0033:0x7f93eab8f7c9 [ 515.900112][T13241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.900134][T13241] RSP: 002b:00007f93eb9af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 515.900159][T13241] RAX: ffffffffffffffda RBX: 00007f93eade5fa0 RCX: 00007f93eab8f7c9 [ 515.900177][T13241] RDX: 0000000000000000 RSI: 0000200000001180 RDI: ffffffffffffff9c [ 515.900193][T13241] RBP: 00007f93eac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 515.900207][T13241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.900223][T13241] R13: 00007f93eade6038 R14: 00007f93eade5fa0 R15: 00007fffb5759398 [ 515.900259][T13241] [ 516.502478][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 516.527286][T13254] Invalid ELF header magic: != ELF [ 516.574910][T13253] FAULT_INJECTION: forcing a failure. [ 516.574910][T13253] name failslab, interval 1, probability 0, space 0, times 0 [ 516.601229][T13253] CPU: 0 UID: 0 PID: 13253 Comm: syz.3.1692 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.601266][T13253] Tainted: [L]=SOFTLOCKUP [ 516.601274][T13253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.601289][T13253] Call Trace: [ 516.601296][T13253] [ 516.601304][T13253] dump_stack_lvl+0x16c/0x1f0 [ 516.601353][T13253] should_fail_ex+0x512/0x640 [ 516.601382][T13253] ? __kmalloc_cache_noprof+0x5f/0x800 [ 516.601415][T13253] should_failslab+0xc2/0x120 [ 516.601450][T13253] __kmalloc_cache_noprof+0x80/0x800 [ 516.601478][T13253] ? snd_pcm_oss_change_params_locked+0x86d/0x3ad0 [ 516.601506][T13253] ? _snd_pcm_hw_param_min+0x259/0x630 [ 516.601533][T13253] ? snd_pcm_oss_change_params_locked+0x86d/0x3ad0 [ 516.601557][T13253] snd_pcm_oss_change_params_locked+0x86d/0x3ad0 [ 516.601583][T13253] ? __mutex_lock+0x27b/0x1ca0 [ 516.601615][T13253] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 516.601641][T13253] ? __pfx___mutex_lock+0x10/0x10 [ 516.601691][T13253] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 516.601721][T13253] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 516.601746][T13253] snd_pcm_oss_sync+0x1de/0x840 [ 516.601777][T13253] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 516.601804][T13253] snd_pcm_oss_release+0x28b/0x310 [ 516.601833][T13253] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 516.601859][T13253] __fput+0x402/0xb70 [ 516.601892][T13253] task_work_run+0x150/0x240 [ 516.601921][T13253] ? __pfx_task_work_run+0x10/0x10 [ 516.601946][T13253] ? __do_sys_close_range+0x278/0x730 [ 516.601995][T13253] exit_to_user_mode_loop+0xfb/0x540 [ 516.602030][T13253] do_syscall_64+0x4ee/0xf80 [ 516.602056][T13253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.602081][T13253] RIP: 0033:0x7f795ff8f7c9 [ 516.602101][T13253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.602124][T13253] RSP: 002b:00007f7960e17038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 516.602148][T13253] RAX: 0000000000000000 RBX: 00007f79601e5fa0 RCX: 00007f795ff8f7c9 [ 516.602164][T13253] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 516.602179][T13253] RBP: 00007f7960013f91 R08: 0000000000000000 R09: 0000000000000000 [ 516.602195][T13253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.602209][T13253] R13: 00007f79601e6038 R14: 00007f79601e5fa0 R15: 00007ffd8f095538 [ 516.602244][T13253] [ 518.433519][T13288] mkiss: ax0: crc mode is auto. [ 518.784439][T13295] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 0 with max blocks 1 with error 117 [ 518.811957][T13295] EXT4-fs (sda1): This should not happen!! Data will be lost [ 518.811957][T13295] [ 518.978419][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1705'. [ 520.196351][T13328] FAULT_INJECTION: forcing a failure. [ 520.196351][T13328] name failslab, interval 1, probability 0, space 0, times 0 [ 520.215920][T13328] CPU: 1 UID: 0 PID: 13328 Comm: syz.3.1712 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.215963][T13328] Tainted: [L]=SOFTLOCKUP [ 520.215973][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 520.215987][T13328] Call Trace: [ 520.215995][T13328] [ 520.216004][T13328] dump_stack_lvl+0x16c/0x1f0 [ 520.216052][T13328] should_fail_ex+0x512/0x640 [ 520.216082][T13328] ? __kmalloc_cache_noprof+0x5f/0x800 [ 520.216115][T13328] should_failslab+0xc2/0x120 [ 520.216151][T13328] __kmalloc_cache_noprof+0x80/0x800 [ 520.216180][T13328] ? snd_timer_instance_new+0x47/0x2e0 [ 520.216212][T13328] ? snd_timer_instance_new+0x47/0x2e0 [ 520.216237][T13328] snd_timer_instance_new+0x47/0x2e0 [ 520.216262][T13328] snd_seq_timer_open+0x1cc/0x600 [ 520.216295][T13328] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 520.216340][T13328] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 520.216374][T13328] ? lockdep_hardirqs_on+0x7c/0x110 [ 520.216397][T13328] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 520.216436][T13328] queue_use+0xe3/0x250 [ 520.216464][T13328] snd_seq_queue_alloc+0x2e5/0x5a0 [ 520.216497][T13328] snd_seq_ioctl_create_queue+0xa9/0x390 [ 520.216535][T13328] call_seq_client_ctl+0xa3/0x130 [ 520.216574][T13328] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 520.216607][T13328] alloc_seq_queue+0xda/0x180 [ 520.216630][T13328] ? __pfx_alloc_seq_queue+0x10/0x10 [ 520.216672][T13328] ? mark_held_locks+0x49/0x80 [ 520.216695][T13328] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.216729][T13328] ? lockdep_hardirqs_on+0x7c/0x110 [ 520.216765][T13328] snd_seq_oss_open+0x38c/0xa40 [ 520.216796][T13328] odev_open+0x79/0xc0 [ 520.216831][T13328] ? __pfx_odev_open+0x10/0x10 [ 520.216867][T13328] soundcore_open+0x40c/0x580 [ 520.216906][T13328] ? __pfx_soundcore_open+0x10/0x10 [ 520.216942][T13328] chrdev_open+0x234/0x6a0 [ 520.216976][T13328] ? __pfx_apparmor_file_open+0x10/0x10 [ 520.217003][T13328] ? __pfx_chrdev_open+0x10/0x10 [ 520.217043][T13328] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 520.217087][T13328] do_dentry_open+0x748/0x1590 [ 520.217120][T13328] ? __pfx_chrdev_open+0x10/0x10 [ 520.217165][T13328] vfs_open+0x82/0x3f0 [ 520.217196][T13328] path_openat+0x2078/0x3140 [ 520.217242][T13328] ? __pfx_path_openat+0x10/0x10 [ 520.217291][T13328] do_filp_open+0x20b/0x470 [ 520.217327][T13328] ? __pfx_do_filp_open+0x10/0x10 [ 520.217389][T13328] ? alloc_fd+0x471/0x7d0 [ 520.217433][T13328] do_sys_openat2+0x121/0x290 [ 520.217460][T13328] ? __pfx_do_sys_openat2+0x10/0x10 [ 520.217501][T13328] __x64_sys_openat+0x174/0x210 [ 520.217529][T13328] ? __pfx___x64_sys_openat+0x10/0x10 [ 520.217571][T13328] do_syscall_64+0xcd/0xf80 [ 520.217597][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.217622][T13328] RIP: 0033:0x7f795ff8f7c9 [ 520.217643][T13328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.217665][T13328] RSP: 002b:00007f7960df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 520.217689][T13328] RAX: ffffffffffffffda RBX: 00007f79601e6090 RCX: 00007f795ff8f7c9 [ 520.217705][T13328] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 520.217722][T13328] RBP: 00007f7960013f91 R08: 0000000000000000 R09: 0000000000000000 [ 520.217744][T13328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.217760][T13328] R13: 00007f79601e6128 R14: 00007f79601e6090 R15: 00007ffd8f095538 [ 520.217797][T13328] [ 520.835059][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1717'. [ 520.845184][T13337] unsupported nlmsg_type 40 [ 521.096487][T13344] bond0: invalid ARP target specified [ 521.710760][T13363] Invalid ELF header magic: != ELF [ 522.031654][T13369] random: crng reseeded on system resumption [ 522.381896][T13380] mkiss: ax0: crc mode is auto. [ 522.899220][T13391] Invalid ELF header magic: != ELF [ 524.427128][T13433] FAULT_INJECTION: forcing a failure. [ 524.427128][T13433] name failslab, interval 1, probability 0, space 0, times 0 [ 524.476452][T13433] CPU: 0 UID: 0 PID: 13433 Comm: syz.0.1743 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.476477][T13433] Tainted: [L]=SOFTLOCKUP [ 524.476482][T13433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 524.476491][T13433] Call Trace: [ 524.476496][T13433] [ 524.476502][T13433] dump_stack_lvl+0x16c/0x1f0 [ 524.476530][T13433] should_fail_ex+0x512/0x640 [ 524.476546][T13433] ? __kmalloc_cache_noprof+0x5f/0x800 [ 524.476567][T13433] should_failslab+0xc2/0x120 [ 524.476589][T13433] __kmalloc_cache_noprof+0x80/0x800 [ 524.476603][T13433] ? __pfx_find_ucounts+0x10/0x10 [ 524.476624][T13433] ? alloc_ucounts+0x13d/0x5c0 [ 524.476638][T13433] ? alloc_ucounts+0x13d/0x5c0 [ 524.476649][T13433] alloc_ucounts+0x13d/0x5c0 [ 524.476662][T13433] ? __pfx_alloc_ucounts+0x10/0x10 [ 524.476678][T13433] set_cred_ucounts+0xcd/0x200 [ 524.476696][T13433] __sys_setuid+0x2b6/0x440 [ 524.476714][T13433] do_syscall_64+0xcd/0xf80 [ 524.476728][T13433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.476742][T13433] RIP: 0033:0x7f94a5d8f7c9 [ 524.476754][T13433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.476767][T13433] RSP: 002b:00007f94a6c8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 524.476781][T13433] RAX: ffffffffffffffda RBX: 00007f94a5fe6090 RCX: 00007f94a5d8f7c9 [ 524.476790][T13433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 524.476797][T13433] RBP: 00007f94a5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 524.476805][T13433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.476813][T13433] R13: 00007f94a5fe6128 R14: 00007f94a5fe6090 R15: 00007ffdb6989408 [ 524.476830][T13433] [ 525.445346][T13443] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 0 with max blocks 1 with error 117 [ 525.471855][T13443] EXT4-fs (sda1): This should not happen!! Data will be lost [ 525.471855][T13443] [ 525.562373][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 525.578620][T13449] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1747'. [ 526.105584][T13460] sp0: Synchronizing with TNC [ 526.667413][T13475] kvm: user requested TSC rate below hardware speed [ 527.018155][T13481] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1758'. [ 527.502189][ T30] audit: type=1800 audit(4294967382.000:23): pid=13490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1761" name="discovery_nqn" dev="configfs" ino=57730 res=0 errno=0 [ 527.665987][T13490] zswap: compressor not available [ 529.310070][T13533] Invalid ELF header magic: != ELF [ 529.583362][T13537] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807840f780 pfn:0x7840f [ 529.601723][T13537] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 529.614817][T13537] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 529.625506][T13537] raw: ffff88807840f780 0000000000000000 00000001ffffffff 0000000000000000 [ 529.636688][T13537] page dumped because: unmovable page [ 529.642154][T13537] page_owner tracks the page as allocated [ 529.666834][T13537] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 5948, tgid 5946 (syz.3.4), ts 93090172645, free_ts 93067929151 [ 529.712823][T13537] post_alloc_hook+0x1af/0x220 [ 529.736882][T13537] get_page_from_freelist+0xd0b/0x31a0 [ 529.742409][T13537] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 529.771615][T13537] alloc_pages_mpol+0x1fb/0x550 [ 529.782703][T13537] alloc_pages_noprof+0x131/0x390 [ 529.795991][T13537] brd_submit_bio+0x11ce/0x2490 [ 529.825675][T13537] __submit_bio+0x304/0x690 [ 529.876678][T13537] submit_bio_noacct_nocheck+0x72f/0xbe0 [ 529.882652][T13537] submit_bio_noacct+0x5bd/0x1f40 [ 529.889155][T13537] __block_write_full_folio+0x735/0xe00 [ 529.894974][T13537] block_write_full_folio+0x31d/0x3e0 [ 529.905391][T13537] blkdev_writepages+0xb8/0x140 [ 529.935840][T13537] do_writepages+0x27a/0x600 [ 529.952701][T13537] filemap_writeback+0x225/0x2d0 [ 529.964465][T13537] filemap_write_and_wait_range+0xa6/0x130 [ 529.978862][T13537] bdev_release+0x4d3/0x6d0 [ 529.990406][T13537] page last free pid 15 tgid 15 stack trace: [ 529.996658][T13537] __free_frozen_pages+0x7df/0x1170 [ 530.042573][T13537] tlb_remove_table_rcu+0x2b2/0x390 [ 530.060683][T13537] rcu_core+0x79c/0x15f0 [ 530.082514][T13537] handle_softirqs+0x219/0x950 [ 530.099544][T13537] run_ksoftirqd+0x3a/0x60 [ 530.119581][T13537] smpboot_thread_fn+0x3f7/0xae0 [ 530.210919][T13537] kthread+0x3c5/0x780 [ 530.215164][T13537] ret_from_fork+0x983/0xb10 [ 530.219942][T13537] ret_from_fork_asm+0x1a/0x30 [ 531.817084][T13584] zswap: compressor not available [ 532.087604][T13593] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807840f780 pfn:0x7840f [ 532.116780][T13593] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 532.124670][T13593] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 532.135526][T13593] raw: ffff88807840f780 0000000000000000 00000001ffffffff 0000000000000000 [ 532.148515][T13593] page dumped because: unmovable page [ 532.154253][T13593] page_owner tracks the page as allocated [ 532.161278][T13593] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 5948, tgid 5946 (syz.3.4), ts 93090172645, free_ts 93067929151 [ 532.242019][T13593] post_alloc_hook+0x1af/0x220 [ 532.258661][T13593] get_page_from_freelist+0xd0b/0x31a0 [ 532.279895][T13593] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 532.295432][T13593] alloc_pages_mpol+0x1fb/0x550 [ 532.324363][T13593] alloc_pages_noprof+0x131/0x390 [ 532.329792][T13593] brd_submit_bio+0x11ce/0x2490 [ 532.334807][T13593] __submit_bio+0x304/0x690 [ 532.339495][T13593] submit_bio_noacct_nocheck+0x72f/0xbe0 [ 532.345322][T13593] submit_bio_noacct+0x5bd/0x1f40 [ 532.350503][T13593] __block_write_full_folio+0x735/0xe00 [ 532.356247][T13593] block_write_full_folio+0x31d/0x3e0 [ 532.361765][T13593] blkdev_writepages+0xb8/0x140 [ 532.366709][T13593] do_writepages+0x27a/0x600 [ 532.371356][T13593] filemap_writeback+0x225/0x2d0 [ 532.396634][T13593] filemap_write_and_wait_range+0xa6/0x130 [ 532.402521][T13593] bdev_release+0x4d3/0x6d0 [ 532.416612][T13593] page last free pid 15 tgid 15 stack trace: [ 532.422665][T13593] __free_frozen_pages+0x7df/0x1170 [ 532.435738][T13593] tlb_remove_table_rcu+0x2b2/0x390 [ 532.441036][T13593] rcu_core+0x79c/0x15f0 [ 532.445303][T13593] handle_softirqs+0x219/0x950 [ 532.466613][T13593] run_ksoftirqd+0x3a/0x60 [ 532.471134][T13593] smpboot_thread_fn+0x3f7/0xae0 [ 532.476110][T13593] kthread+0x3c5/0x780 [ 532.496691][T13593] ret_from_fork+0x983/0xb10 [ 532.501425][T13593] ret_from_fork_asm+0x1a/0x30 [ 532.933135][T13619] FAULT_INJECTION: forcing a failure. [ 532.933135][T13619] name failslab, interval 1, probability 0, space 0, times 0 [ 532.970552][T13619] CPU: 0 UID: 0 PID: 13619 Comm: syz.1.1792 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.970595][T13619] Tainted: [L]=SOFTLOCKUP [ 532.970604][T13619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.970620][T13619] Call Trace: [ 532.970628][T13619] [ 532.970638][T13619] dump_stack_lvl+0x16c/0x1f0 [ 532.970684][T13619] should_fail_ex+0x512/0x640 [ 532.970712][T13619] ? __kmalloc_cache_noprof+0x5f/0x800 [ 532.970745][T13619] should_failslab+0xc2/0x120 [ 532.970781][T13619] __kmalloc_cache_noprof+0x80/0x800 [ 532.970819][T13619] ? snd_timer_instance_new+0x47/0x2e0 [ 532.970851][T13619] ? snd_timer_instance_new+0x47/0x2e0 [ 532.970877][T13619] snd_timer_instance_new+0x47/0x2e0 [ 532.970905][T13619] snd_seq_timer_open+0x1cc/0x600 [ 532.970945][T13619] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 532.970989][T13619] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 532.971024][T13619] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.971047][T13619] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 532.971087][T13619] queue_use+0xe3/0x250 [ 532.971114][T13619] snd_seq_queue_alloc+0x2e5/0x5a0 [ 532.971147][T13619] snd_seq_ioctl_create_queue+0xa9/0x390 [ 532.971184][T13619] call_seq_client_ctl+0xa3/0x130 [ 532.971222][T13619] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 532.971257][T13619] alloc_seq_queue+0xda/0x180 [ 532.971280][T13619] ? __pfx_alloc_seq_queue+0x10/0x10 [ 532.971321][T13619] ? mark_held_locks+0x49/0x80 [ 532.971343][T13619] ? _raw_spin_unlock_irq+0x23/0x50 [ 532.971377][T13619] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.971404][T13619] snd_seq_oss_open+0x38c/0xa40 [ 532.971434][T13619] odev_open+0x79/0xc0 [ 532.971467][T13619] ? __pfx_odev_open+0x10/0x10 [ 532.971498][T13619] soundcore_open+0x40c/0x580 [ 532.971537][T13619] ? __pfx_soundcore_open+0x10/0x10 [ 532.971572][T13619] chrdev_open+0x234/0x6a0 [ 532.971605][T13619] ? __pfx_apparmor_file_open+0x10/0x10 [ 532.971631][T13619] ? __pfx_chrdev_open+0x10/0x10 [ 532.971666][T13619] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 532.971706][T13619] do_dentry_open+0x748/0x1590 [ 532.971738][T13619] ? __pfx_chrdev_open+0x10/0x10 [ 532.971781][T13619] vfs_open+0x82/0x3f0 [ 532.971820][T13619] path_openat+0x2078/0x3140 [ 532.971866][T13619] ? __pfx_path_openat+0x10/0x10 [ 532.971912][T13619] do_filp_open+0x20b/0x470 [ 532.971948][T13619] ? __pfx_do_filp_open+0x10/0x10 [ 532.972006][T13619] ? alloc_fd+0x471/0x7d0 [ 532.972048][T13619] do_sys_openat2+0x121/0x290 [ 532.972074][T13619] ? __pfx_do_sys_openat2+0x10/0x10 [ 532.972113][T13619] __x64_sys_openat+0x174/0x210 [ 532.972139][T13619] ? __pfx___x64_sys_openat+0x10/0x10 [ 532.972179][T13619] do_syscall_64+0xcd/0xf80 [ 532.972201][T13619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.972225][T13619] RIP: 0033:0x7f93eab8f7c9 [ 532.972246][T13619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.972269][T13619] RSP: 002b:00007f93eb98e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 532.972292][T13619] RAX: ffffffffffffffda RBX: 00007f93eade6090 RCX: 00007f93eab8f7c9 [ 532.972306][T13619] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 532.972319][T13619] RBP: 00007f93eac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.972333][T13619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.972347][T13619] R13: 00007f93eade6128 R14: 00007f93eade6090 R15: 00007fffb5759398 [ 532.972382][T13619] [ 534.013437][T13635] Invalid ELF header magic: != ELF [ 535.730432][T13674] sp0: Synchronizing with TNC [ 535.918502][T13675] sp0: Synchronizing with TNC [ 536.229451][ T8028] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1515 with max blocks 21 with error 117 [ 536.248669][ T8028] EXT4-fs (sda1): This should not happen!! Data will be lost [ 536.248669][ T8028] [ 536.268876][ T8028] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 0 with max blocks 2 with error 117 [ 536.312442][ T8028] EXT4-fs (sda1): This should not happen!! Data will be lost [ 536.312442][ T8028] [ 536.337347][ T8028] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 953 with max blocks 71 with error 117 [ 536.351812][ T8028] EXT4-fs (sda1): This should not happen!! Data will be lost [ 536.351812][ T8028] [ 537.387937][T13703] kvm: kvm [13700]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000000e) = 0x4 [ 537.786940][T13714] Invalid ELF header magic: != ELF [ 538.039644][T13723] FAULT_INJECTION: forcing a failure. [ 538.039644][T13723] name failslab, interval 1, probability 0, space 0, times 0 [ 538.175492][T13723] CPU: 1 UID: 0 PID: 13723 Comm: syz.0.1825 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.175535][T13723] Tainted: [L]=SOFTLOCKUP [ 538.175544][T13723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.175560][T13723] Call Trace: [ 538.175569][T13723] [ 538.175580][T13723] dump_stack_lvl+0x16c/0x1f0 [ 538.175626][T13723] should_fail_ex+0x512/0x640 [ 538.175655][T13723] ? __kmalloc_cache_noprof+0x5f/0x800 [ 538.175690][T13723] should_failslab+0xc2/0x120 [ 538.175727][T13723] __kmalloc_cache_noprof+0x80/0x800 [ 538.175757][T13723] ? drm_atomic_state_alloc+0xb8/0x120 [ 538.175793][T13723] ? drm_atomic_state_alloc+0xb8/0x120 [ 538.175821][T13723] drm_atomic_state_alloc+0xb8/0x120 [ 538.175851][T13723] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 538.175884][T13723] ? rcu_is_watching+0x12/0xc0 [ 538.175918][T13723] ? trace_contention_end+0xdd/0x110 [ 538.175944][T13723] ? __mutex_lock+0x27b/0x1ca0 [ 538.175969][T13723] ? __mutex_lock+0x27b/0x1ca0 [ 538.175994][T13723] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 538.176026][T13723] ? trace_contention_end+0xdd/0x110 [ 538.176100][T13723] drm_client_modeset_commit_locked+0x14d/0x580 [ 538.176140][T13723] drm_client_modeset_commit+0x4f/0x80 [ 538.176175][T13723] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 538.176214][T13723] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 538.176250][T13723] drm_fbdev_client_restore+0x1b/0x30 [ 538.176277][T13723] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 538.176300][T13723] drm_client_dev_restore+0x200/0x2a0 [ 538.176341][T13723] drm_release+0x2c6/0x360 [ 538.176373][T13723] ? __pfx_drm_release+0x10/0x10 [ 538.176400][T13723] __fput+0x402/0xb70 [ 538.176435][T13723] task_work_run+0x150/0x240 [ 538.176464][T13723] ? __pfx_task_work_run+0x10/0x10 [ 538.176488][T13723] ? __do_sys_close_range+0x278/0x730 [ 538.176536][T13723] exit_to_user_mode_loop+0xfb/0x540 [ 538.176572][T13723] do_syscall_64+0x4ee/0xf80 [ 538.176597][T13723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.176620][T13723] RIP: 0033:0x7f94a5d8f7c9 [ 538.176641][T13723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.176671][T13723] RSP: 002b:00007f94a6caf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 538.176695][T13723] RAX: 0000000000000000 RBX: 00007f94a5fe5fa0 RCX: 00007f94a5d8f7c9 [ 538.176712][T13723] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 538.176727][T13723] RBP: 00007f94a5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 538.176742][T13723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.176757][T13723] R13: 00007f94a5fe6038 R14: 00007f94a5fe5fa0 R15: 00007ffdb6989408 [ 538.176797][T13723] [ 539.426877][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 540.371911][T13756] syz.3.1834 uses obsolete (PF_INET,SOCK_PACKET) [ 541.584945][T13784] FAULT_INJECTION: forcing a failure. [ 541.584945][T13784] name failslab, interval 1, probability 0, space 0, times 0 [ 541.628838][T13784] CPU: 0 UID: 0 PID: 13784 Comm: syz.1.1842 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.628881][T13784] Tainted: [L]=SOFTLOCKUP [ 541.628891][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.628906][T13784] Call Trace: [ 541.628915][T13784] [ 541.628925][T13784] dump_stack_lvl+0x16c/0x1f0 [ 541.628976][T13784] should_fail_ex+0x512/0x640 [ 541.629003][T13784] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 541.629034][T13784] should_failslab+0xc2/0x120 [ 541.629068][T13784] kmem_cache_alloc_node_noprof+0x86/0x800 [ 541.629096][T13784] ? tcp_event_new_data_sent+0x2b6/0x3f0 [ 541.629124][T13784] ? __alloc_skb+0x156/0x410 [ 541.629158][T13784] ? __alloc_skb+0x156/0x410 [ 541.629181][T13784] __alloc_skb+0x156/0x410 [ 541.629209][T13784] ? __pfx___alloc_skb+0x10/0x10 [ 541.629246][T13784] tcp_stream_alloc_skb+0x34/0x670 [ 541.629276][T13784] tcp_sendmsg_locked+0x12d5/0x42a0 [ 541.629328][T13784] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 541.629360][T13784] ? do_raw_spin_lock+0x12c/0x2b0 [ 541.629384][T13784] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 541.629418][T13784] ? __local_bh_enable_ip+0xa4/0x120 [ 541.629450][T13784] tcp_sendmsg+0x2e/0x50 [ 541.629474][T13784] ? __pfx_tcp_sendmsg+0x10/0x10 [ 541.629499][T13784] inet_sendmsg+0xb9/0x140 [ 541.629529][T13784] sock_write_iter+0x509/0x610 [ 541.629554][T13784] ? __pfx_sock_write_iter+0x10/0x10 [ 541.629590][T13784] ? bpf_lsm_file_permission+0x9/0x10 [ 541.629617][T13784] ? security_file_permission+0x71/0x210 [ 541.629649][T13784] ? rw_verify_area+0xcf/0x6c0 [ 541.629683][T13784] vfs_write+0x7d3/0x11d0 [ 541.629714][T13784] ? __pfx_sock_write_iter+0x10/0x10 [ 541.629743][T13784] ? __pfx_vfs_write+0x10/0x10 [ 541.629775][T13784] ? find_held_lock+0x2b/0x80 [ 541.629821][T13784] ksys_write+0x1f8/0x250 [ 541.629849][T13784] ? __pfx_ksys_write+0x10/0x10 [ 541.629876][T13784] ? rcu_is_watching+0x12/0xc0 [ 541.629914][T13784] do_syscall_64+0xcd/0xf80 [ 541.629938][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.629973][T13784] RIP: 0033:0x7f93eab8f7c9 [ 541.629995][T13784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.630021][T13784] RSP: 002b:00007f93eb9af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 541.630045][T13784] RAX: ffffffffffffffda RBX: 00007f93eade5fa0 RCX: 00007f93eab8f7c9 [ 541.630062][T13784] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 541.630077][T13784] RBP: 00007f93eac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 541.630093][T13784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.630107][T13784] R13: 00007f93eade6038 R14: 00007f93eade5fa0 R15: 00007fffb5759398 [ 541.630143][T13784] [ 542.313129][T13789] FAULT_INJECTION: forcing a failure. [ 542.313129][T13789] name failslab, interval 1, probability 0, space 0, times 0 [ 542.354672][T13791] 0x000200000001-0xa29656a63616329 : "" [ 542.356986][T13789] CPU: 1 UID: 0 PID: 13789 Comm: syz.0.1843 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.357025][T13789] Tainted: [L]=SOFTLOCKUP [ 542.357034][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.357048][T13789] Call Trace: [ 542.357056][T13789] [ 542.357066][T13789] dump_stack_lvl+0x16c/0x1f0 [ 542.357109][T13789] should_fail_ex+0x512/0x640 [ 542.357136][T13789] ? __kmalloc_cache_noprof+0x5f/0x800 [ 542.357165][T13789] should_failslab+0xc2/0x120 [ 542.357200][T13789] __kmalloc_cache_noprof+0x80/0x800 [ 542.357227][T13789] ? percpu_ref_init+0xec/0x410 [ 542.357265][T13789] ? percpu_ref_init+0xec/0x410 [ 542.357296][T13789] ? __pfx_swap_users_ref_free+0x10/0x10 [ 542.357324][T13789] percpu_ref_init+0xec/0x410 [ 542.357362][T13789] __do_sys_swapon+0x11c/0x3b30 [ 542.357395][T13789] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 542.357427][T13789] ? count_memcg_events+0x122/0x290 [ 542.357463][T13789] ? __x64_sys_futex+0x1e0/0x4c0 [ 542.357487][T13789] ? __x64_sys_futex+0x1e9/0x4c0 [ 542.357514][T13789] ? exc_page_fault+0x64/0xc0 [ 542.357549][T13789] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 542.357588][T13789] ? __pfx___do_sys_swapon+0x10/0x10 [ 542.357617][T13789] ? syscall_user_dispatch+0x78/0x140 [ 542.357666][T13789] do_syscall_64+0xcd/0xf80 [ 542.357691][T13789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.357715][T13789] RIP: 0033:0x7f94a5d8f7c9 [ 542.357736][T13789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.357758][T13789] RSP: 002b:00007f94a6caf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 542.357780][T13789] RAX: ffffffffffffffda RBX: 00007f94a5fe5fa0 RCX: 00007f94a5d8f7c9 [ 542.357796][T13789] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 542.357810][T13789] RBP: 00007f94a5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 542.357824][T13789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.357838][T13789] R13: 00007f94a5fe6038 R14: 00007f94a5fe5fa0 R15: 00007ffdb6989408 [ 542.357871][T13789] [ 542.657010][T13791] mtd: partition "" is out of reach -- disabled [ 542.724327][T13791] ftl_cs: FTL header not found. [ 543.135754][T13805] sp0: Synchronizing with TNC [ 543.810837][T13828] FAULT_INJECTION: forcing a failure. [ 543.810837][T13828] name failslab, interval 1, probability 0, space 0, times 0 [ 543.834711][T13828] CPU: 1 UID: 0 PID: 13828 Comm: syz.0.1854 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.834753][T13828] Tainted: [L]=SOFTLOCKUP [ 543.834762][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 543.834778][T13828] Call Trace: [ 543.834786][T13828] [ 543.834796][T13828] dump_stack_lvl+0x16c/0x1f0 [ 543.834843][T13828] should_fail_ex+0x512/0x640 [ 543.834870][T13828] ? __kmalloc_noprof+0xca/0x910 [ 543.834899][T13828] should_failslab+0xc2/0x120 [ 543.834934][T13828] __kmalloc_noprof+0xeb/0x910 [ 543.834959][T13828] ? lsm_blob_alloc+0x68/0x90 [ 543.834998][T13828] ? lsm_blob_alloc+0x68/0x90 [ 543.835034][T13828] lsm_blob_alloc+0x68/0x90 [ 543.835071][T13828] security_prepare_creds+0x2f/0x270 [ 543.835107][T13828] prepare_creds+0x5d6/0x940 [ 543.835139][T13828] __sys_setresgid+0x4af/0x1150 [ 543.835175][T13828] do_syscall_64+0xcd/0xf80 [ 543.835201][T13828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.835226][T13828] RIP: 0033:0x7f94a5d8f7c9 [ 543.835247][T13828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.835269][T13828] RSP: 002b:00007f94a6caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 543.835292][T13828] RAX: ffffffffffffffda RBX: 00007f94a5fe5fa0 RCX: 00007f94a5d8f7c9 [ 543.835309][T13828] RDX: 0000000000000008 RSI: 00000000800000a0 RDI: 0000000000000081 [ 543.835324][T13828] RBP: 00007f94a5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 543.835338][T13828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.835353][T13828] R13: 00007f94a5fe6038 R14: 00007f94a5fe5fa0 R15: 00007ffdb6989408 [ 543.835388][T13828] [ 545.170301][T13853] netlink: 'syz.0.1861': attribute type 7 has an invalid length. [ 545.210498][T13853] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1861'. [ 546.801220][T13880] 0x000200000001-0xa29656a63616329 : "" [ 546.808286][T13880] mtd: partition "" is out of reach -- disabled [ 546.821163][T13880] ftl_cs: FTL header not found. [ 547.395862][T13899] Invalid ELF header magic: != ELF [ 549.419872][T13940] Invalid ELF header magic: != ELF [ 549.505985][T13939] mkiss: ax0: crc mode is auto. [ 552.677567][T14019] Invalid ELF header magic: != ELF [ 553.131596][T14031] FAULT_INJECTION: forcing a failure. [ 553.131596][T14031] name failslab, interval 1, probability 0, space 0, times 0 [ 553.145491][T14031] CPU: 0 UID: 0 PID: 14031 Comm: syz.2.1910 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.145516][T14031] Tainted: [L]=SOFTLOCKUP [ 553.145521][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.145531][T14031] Call Trace: [ 553.145537][T14031] [ 553.145544][T14031] dump_stack_lvl+0x16c/0x1f0 [ 553.145571][T14031] should_fail_ex+0x512/0x640 [ 553.145587][T14031] ? __kmalloc_cache_noprof+0x5f/0x800 [ 553.145606][T14031] should_failslab+0xc2/0x120 [ 553.145628][T14031] __kmalloc_cache_noprof+0x80/0x800 [ 553.145643][T14031] ? snd_info_text_entry_write+0x3d3/0x510 [ 553.145670][T14031] ? snd_info_text_entry_write+0x3d3/0x510 [ 553.145686][T14031] snd_info_text_entry_write+0x3d3/0x510 [ 553.145703][T14031] ? __pfx_snd_info_text_entry_write+0x10/0x10 [ 553.145719][T14031] proc_reg_write+0x240/0x330 [ 553.145738][T14031] ? __pfx_proc_reg_write+0x10/0x10 [ 553.145753][T14031] vfs_write+0x2a0/0x11d0 [ 553.145773][T14031] ? __pfx___mutex_lock+0x10/0x10 [ 553.145789][T14031] ? __pfx_vfs_write+0x10/0x10 [ 553.145813][T14031] ? __fget_files+0x20e/0x3c0 [ 553.145837][T14031] ksys_write+0x12a/0x250 [ 553.145855][T14031] ? __pfx_ksys_write+0x10/0x10 [ 553.145879][T14031] do_syscall_64+0xcd/0xf80 [ 553.145893][T14031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.145906][T14031] RIP: 0033:0x7f965838f7c9 [ 553.145917][T14031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.145930][T14031] RSP: 002b:00007f96591a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 553.145943][T14031] RAX: ffffffffffffffda RBX: 00007f96585e5fa0 RCX: 00007f965838f7c9 [ 553.145951][T14031] RDX: 000000000000200c RSI: 0000000000000000 RDI: 0000000000000003 [ 553.145959][T14031] RBP: 00007f9658413f91 R08: 0000000000000000 R09: 0000000000000000 [ 553.145967][T14031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.145974][T14031] R13: 00007f96585e6038 R14: 00007f96585e5fa0 R15: 00007ffcf5120298 [ 553.145993][T14031] [ 553.534001][T14035] netlink: 'syz.2.1911': attribute type 1 has an invalid length. [ 553.543302][T14035] netlink: 'syz.2.1911': attribute type 6 has an invalid length. [ 555.171466][T14073] Invalid ELF header magic: != ELF [ 556.176453][T14097] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1930'. [ 556.478723][T14103] FAULT_INJECTION: forcing a failure. [ 556.478723][T14103] name failslab, interval 1, probability 0, space 0, times 0 [ 556.539143][T14103] CPU: 1 UID: 0 PID: 14103 Comm: syz.0.1932 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.539186][T14103] Tainted: [L]=SOFTLOCKUP [ 556.539196][T14103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.539211][T14103] Call Trace: [ 556.539219][T14103] [ 556.539228][T14103] dump_stack_lvl+0x16c/0x1f0 [ 556.539273][T14103] should_fail_ex+0x512/0x640 [ 556.539301][T14103] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 556.539337][T14103] should_failslab+0xc2/0x120 [ 556.539375][T14103] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 556.539405][T14103] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 556.539432][T14103] ? ktime_get_coarse_real_ts64_mg+0x1d4/0x300 [ 556.539461][T14103] ? __d_alloc+0x35/0xa80 [ 556.539489][T14103] ? __d_alloc+0x35/0xa80 [ 556.539506][T14103] __d_alloc+0x35/0xa80 [ 556.539533][T14103] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 556.539578][T14103] d_alloc_pseudo+0x1c/0xc0 [ 556.539610][T14103] alloc_file_pseudo+0xcf/0x230 [ 556.539640][T14103] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 556.539668][T14103] ? security_inode_init_security_anon+0x79/0x240 [ 556.539706][T14103] __anon_inode_getfile+0xe8/0x280 [ 556.539732][T14103] ? _copy_to_user+0x48/0xd0 [ 556.539765][T14103] io_uring_setup+0x144c/0x1f80 [ 556.539802][T14103] ? __pfx_io_uring_setup+0x10/0x10 [ 556.539841][T14103] ? __pfx_do_futex+0x10/0x10 [ 556.539888][T14103] ? xfd_validate_state+0x61/0x180 [ 556.539921][T14103] __x64_sys_io_uring_setup+0xc2/0x170 [ 556.539956][T14103] do_syscall_64+0xcd/0xf80 [ 556.539983][T14103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.540008][T14103] RIP: 0033:0x7f94a5d8f7c9 [ 556.540029][T14103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.540053][T14103] RSP: 002b:00007f94a6caf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 556.540078][T14103] RAX: ffffffffffffffda RBX: 00007f94a5fe5fa0 RCX: 00007f94a5d8f7c9 [ 556.540095][T14103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 556.540110][T14103] RBP: 00007f94a5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 556.540127][T14103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.540142][T14103] R13: 00007f94a5fe6038 R14: 00007f94a5fe5fa0 R15: 00007ffdb6989408 [ 556.540178][T14103] [ 557.634608][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1938'. [ 557.751019][T14129] Invalid ELF header magic: != ELF [ 558.371013][T14137] zswap: compressor not available [ 559.501018][T14178] Invalid ELF header magic: != ELF [ 560.143082][T14186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1953'. [ 562.820398][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 562.867059][T14228] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1963'. [ 563.819042][T14253] sp0: Synchronizing with TNC [ 565.293222][T14284] FAULT_INJECTION: forcing a failure. [ 565.293222][T14284] name failslab, interval 1, probability 0, space 0, times 0 [ 565.330930][ T30] audit: type=1804 audit(4294967419.830:24): pid=14290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1981" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=39 res=1 errno=0 [ 565.384786][T14284] CPU: 0 UID: 0 PID: 14284 Comm: syz.2.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.384830][T14284] Tainted: [L]=SOFTLOCKUP [ 565.384840][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.384856][T14284] Call Trace: [ 565.384865][T14284] [ 565.384877][T14284] dump_stack_lvl+0x16c/0x1f0 [ 565.384923][T14284] should_fail_ex+0x512/0x640 [ 565.384953][T14284] ? kmem_cache_alloc_noprof+0x62/0x770 [ 565.384989][T14284] should_failslab+0xc2/0x120 [ 565.385026][T14284] kmem_cache_alloc_noprof+0x83/0x770 [ 565.385056][T14284] ? __kernfs_new_node+0xd2/0x9b0 [ 565.385093][T14284] ? __kernfs_new_node+0xd2/0x9b0 [ 565.385119][T14284] __kernfs_new_node+0xd2/0x9b0 [ 565.385153][T14284] ? __pfx___kernfs_new_node+0x10/0x10 [ 565.385192][T14284] ? find_held_lock+0x2b/0x80 [ 565.385224][T14284] ? kernfs_root+0xee/0x2a0 [ 565.385260][T14284] kernfs_new_node+0x13c/0x1e0 [ 565.385300][T14284] __kernfs_create_file+0x53/0x350 [ 565.385342][T14284] sysfs_add_file_mode_ns+0x207/0x3c0 [ 565.385376][T14284] sysfs_merge_group+0x1aa/0x340 [ 565.385408][T14284] ? __pfx_sysfs_merge_group+0x10/0x10 [ 565.385443][T14284] ? __pfx_dev_add_physical_location+0x10/0x10 [ 565.385493][T14284] ? bus_to_subsys+0x131/0x160 [ 565.385524][T14284] dpm_sysfs_add+0x237/0x280 [ 565.385562][T14284] device_add+0x9cc/0x1980 [ 565.385602][T14284] ? __pfx_device_add+0x10/0x10 [ 565.385649][T14284] nfc_register_device+0x41/0x410 [ 565.385691][T14284] nci_register_device+0x7f1/0xb80 [ 565.385724][T14284] ? __pfx_nci_register_device+0x10/0x10 [ 565.385761][T14284] ? lockdep_init_map_type+0x5c/0x270 [ 565.385792][T14284] virtual_ncidev_open+0x141/0x220 [ 565.385819][T14284] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 565.385844][T14284] misc_open+0x26d/0x450 [ 565.385874][T14284] ? __pfx_misc_open+0x10/0x10 [ 565.385903][T14284] chrdev_open+0x234/0x6a0 [ 565.385938][T14284] ? __pfx_apparmor_file_open+0x10/0x10 [ 565.385965][T14284] ? __pfx_chrdev_open+0x10/0x10 [ 565.386002][T14284] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 565.386047][T14284] do_dentry_open+0x748/0x1590 [ 565.386081][T14284] ? __pfx_chrdev_open+0x10/0x10 [ 565.386134][T14284] vfs_open+0x82/0x3f0 [ 565.386163][T14284] path_openat+0x2078/0x3140 [ 565.386202][T14284] ? __pfx_path_openat+0x10/0x10 [ 565.386244][T14284] do_filp_open+0x20b/0x470 [ 565.386276][T14284] ? __pfx_do_filp_open+0x10/0x10 [ 565.386333][T14284] ? alloc_fd+0x471/0x7d0 [ 565.386378][T14284] do_sys_openat2+0x121/0x290 [ 565.386406][T14284] ? __pfx_do_sys_openat2+0x10/0x10 [ 565.386433][T14284] ? find_held_lock+0x2b/0x80 [ 565.386483][T14284] __x64_sys_openat+0x174/0x210 [ 565.386514][T14284] ? __pfx___x64_sys_openat+0x10/0x10 [ 565.386559][T14284] do_syscall_64+0xcd/0xf80 [ 565.386583][T14284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.386609][T14284] RIP: 0033:0x7f965838f7c9 [ 565.386631][T14284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.386654][T14284] RSP: 002b:00007f96591a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 565.386678][T14284] RAX: ffffffffffffffda RBX: 00007f96585e5fa0 RCX: 00007f965838f7c9 [ 565.386696][T14284] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 565.386711][T14284] RBP: 00007f9658413f91 R08: 0000000000000000 R09: 0000000000000000 [ 565.386726][T14284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.386741][T14284] R13: 00007f96585e6038 R14: 00007f96585e5fa0 R15: 00007ffcf5120298 [ 565.386782][T14284] [ 566.571460][T14307] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1984'. [ 566.947286][ T60] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1515 with max blocks 21 with error 117 [ 566.971332][ T60] EXT4-fs (sda1): This should not happen!! Data will be lost [ 566.971332][ T60] [ 566.989102][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1989'. [ 567.005298][ T60] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 0 with max blocks 2 with error 117 [ 567.035238][ T60] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.035238][ T60] [ 567.049430][ T60] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 953 with max blocks 71 with error 117 [ 567.096614][ T60] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.096614][ T60] [ 568.081706][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.088108][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.390969][T14348] FAULT_INJECTION: forcing a failure. [ 568.390969][T14348] name failslab, interval 1, probability 0, space 0, times 0 [ 568.552627][T14348] CPU: 1 UID: 0 PID: 14348 Comm: syz.3.1994 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.552673][T14348] Tainted: [L]=SOFTLOCKUP [ 568.552683][T14348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.552699][T14348] Call Trace: [ 568.552707][T14348] [ 568.552718][T14348] dump_stack_lvl+0x16c/0x1f0 [ 568.552764][T14348] should_fail_ex+0x512/0x640 [ 568.552793][T14348] ? __kmalloc_cache_noprof+0x5f/0x800 [ 568.552825][T14348] should_failslab+0xc2/0x120 [ 568.552865][T14348] __kmalloc_cache_noprof+0x80/0x800 [ 568.552896][T14348] ? __pfx_get_mtd_device+0x10/0x10 [ 568.552930][T14348] ? kobject_get_unless_zero+0x156/0x1e0 [ 568.552957][T14348] ? mtdchar_open+0x1e5/0x340 [ 568.552992][T14348] ? mtdchar_open+0x1e5/0x340 [ 568.553019][T14348] mtdchar_open+0x1e5/0x340 [ 568.553048][T14348] ? __pfx_mtdchar_open+0x10/0x10 [ 568.553076][T14348] chrdev_open+0x234/0x6a0 [ 568.553112][T14348] ? __pfx_apparmor_file_open+0x10/0x10 [ 568.553140][T14348] ? __pfx_chrdev_open+0x10/0x10 [ 568.553180][T14348] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 568.553227][T14348] do_dentry_open+0x748/0x1590 [ 568.553260][T14348] ? __pfx_chrdev_open+0x10/0x10 [ 568.553303][T14348] vfs_open+0x82/0x3f0 [ 568.553336][T14348] path_openat+0x2078/0x3140 [ 568.553382][T14348] ? __pfx_path_openat+0x10/0x10 [ 568.553430][T14348] do_filp_open+0x20b/0x470 [ 568.553468][T14348] ? __pfx_do_filp_open+0x10/0x10 [ 568.553539][T14348] ? alloc_fd+0x471/0x7d0 [ 568.553587][T14348] do_sys_openat2+0x121/0x290 [ 568.553615][T14348] ? __pfx_do_sys_openat2+0x10/0x10 [ 568.553660][T14348] __x64_sys_openat+0x174/0x210 [ 568.553689][T14348] ? __pfx___x64_sys_openat+0x10/0x10 [ 568.553731][T14348] do_syscall_64+0xcd/0xf80 [ 568.553759][T14348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.553784][T14348] RIP: 0033:0x7f795ff8f7c9 [ 568.553806][T14348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.553831][T14348] RSP: 002b:00007f7960e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 568.553854][T14348] RAX: ffffffffffffffda RBX: 00007f79601e5fa0 RCX: 00007f795ff8f7c9 [ 568.553870][T14348] RDX: 0000000000048000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 568.553885][T14348] RBP: 00007f7960013f91 R08: 0000000000000000 R09: 0000000000000000 [ 568.553900][T14348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.553915][T14348] R13: 00007f79601e6038 R14: 00007f79601e5fa0 R15: 00007ffd8f095538 [ 568.553950][T14348] [ 570.085987][T14366] mkiss: ax0: crc mode is auto. [ 571.762036][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 573.559533][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2015'. [ 574.012101][T14436] FAULT_INJECTION: forcing a failure. [ 574.012101][T14436] name failslab, interval 1, probability 0, space 0, times 0 [ 574.029293][T14436] CPU: 1 UID: 0 PID: 14436 Comm: syz.1.2020 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.029336][T14436] Tainted: [L]=SOFTLOCKUP [ 574.029346][T14436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.029361][T14436] Call Trace: [ 574.029369][T14436] [ 574.029379][T14436] dump_stack_lvl+0x16c/0x1f0 [ 574.029423][T14436] should_fail_ex+0x512/0x640 [ 574.029449][T14436] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 574.029487][T14436] should_failslab+0xc2/0x120 [ 574.029522][T14436] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 574.029554][T14436] ? kstrdup_const+0x63/0x80 [ 574.029588][T14436] ? kstrdup+0x53/0x100 [ 574.029613][T14436] kstrdup+0x53/0x100 [ 574.029641][T14436] kstrdup_const+0x63/0x80 [ 574.029669][T14436] __kernfs_new_node+0x9b/0x9b0 [ 574.029714][T14436] ? __pfx___kernfs_new_node+0x10/0x10 [ 574.029752][T14436] ? find_held_lock+0x2b/0x80 [ 574.029784][T14436] ? kernfs_root+0xee/0x2a0 [ 574.029818][T14436] kernfs_new_node+0x13c/0x1e0 [ 574.029855][T14436] kernfs_create_link+0xcc/0x240 [ 574.029882][T14436] sysfs_do_create_link_sd+0x90/0x140 [ 574.029913][T14436] sysfs_create_link+0x61/0xc0 [ 574.029940][T14436] device_add+0x652/0x1980 [ 574.029977][T14436] ? __pfx_device_add+0x10/0x10 [ 574.030019][T14436] ? kfree_const+0x55/0x60 [ 574.030051][T14436] device_create_groups_vargs+0x1f8/0x270 [ 574.030087][T14436] device_create+0xed/0x130 [ 574.030122][T14436] ? __pfx_device_create+0x10/0x10 [ 574.030161][T14436] ? do_init_timer+0xc9/0x110 [ 574.030200][T14436] ? ieee80211_roc_setup+0x136/0x270 [ 574.030234][T14436] ? ieee80211_alloc_hw_nm+0x231/0x22b0 [ 574.030268][T14436] mac80211_hwsim_new_radio+0x36a/0x5150 [ 574.030313][T14436] ? __asan_memset+0x23/0x50 [ 574.030345][T14436] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 574.030388][T14436] hwsim_new_radio_nl+0xba2/0x1330 [ 574.030421][T14436] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 574.030463][T14436] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 574.030492][T14436] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 574.030527][T14436] genl_family_rcv_msg_doit+0x209/0x2f0 [ 574.030557][T14436] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 574.030585][T14436] ? genl_get_cmd+0x194/0x580 [ 574.030616][T14436] ? bpf_lsm_capable+0x9/0x10 [ 574.030646][T14436] ? security_capable+0x7e/0x260 [ 574.030674][T14436] ? ns_capable+0xd7/0x110 [ 574.030718][T14436] genl_rcv_msg+0x55c/0x800 [ 574.030750][T14436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.030776][T14436] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 574.030819][T14436] netlink_rcv_skb+0x158/0x420 [ 574.030856][T14436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.030883][T14436] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.030939][T14436] ? netlink_deliver_tap+0x1ae/0xd30 [ 574.030982][T14436] genl_rcv+0x28/0x40 [ 574.031005][T14436] netlink_unicast+0x5aa/0x870 [ 574.031047][T14436] ? __pfx_netlink_unicast+0x10/0x10 [ 574.031097][T14436] netlink_sendmsg+0x8c8/0xdd0 [ 574.031138][T14436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.031176][T14436] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 574.031208][T14436] ____sys_sendmsg+0xa5d/0xc30 [ 574.031234][T14436] ? copy_msghdr_from_user+0x10a/0x160 [ 574.031267][T14436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.031300][T14436] ? __pfx_futex_wake_mark+0x10/0x10 [ 574.031337][T14436] ___sys_sendmsg+0x134/0x1d0 [ 574.031372][T14436] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.031403][T14436] ? futex_private_hash_put+0x160/0x1b0 [ 574.031469][T14436] __sys_sendmsg+0x16d/0x220 [ 574.031503][T14436] ? __pfx___sys_sendmsg+0x10/0x10 [ 574.031532][T14436] ? __x64_sys_futex+0x1e0/0x4c0 [ 574.031579][T14436] do_syscall_64+0xcd/0xf80 [ 574.031604][T14436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.031628][T14436] RIP: 0033:0x7f93eab8f7c9 [ 574.031649][T14436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.031671][T14436] RSP: 002b:00007f93eb9af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.031705][T14436] RAX: ffffffffffffffda RBX: 00007f93eade5fa0 RCX: 00007f93eab8f7c9 [ 574.031722][T14436] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 574.031738][T14436] RBP: 00007f93eac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 574.031754][T14436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.031770][T14436] R13: 00007f93eade6038 R14: 00007f93eade5fa0 R15: 00007fffb5759398 [ 574.031803][T14436] [ 574.600251][T14440] netlink: 138 bytes leftover after parsing attributes in process `syz.0.2021'. [ 574.753516][T14445] FAULT_INJECTION: forcing a failure. [ 574.753516][T14445] name failslab, interval 1, probability 0, space 0, times 0 [ 574.783592][T14445] CPU: 0 UID: 0 PID: 14445 Comm: syz.0.2023 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.783632][T14445] Tainted: [L]=SOFTLOCKUP [ 574.783637][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.783647][T14445] Call Trace: [ 574.783653][T14445] [ 574.783660][T14445] dump_stack_lvl+0x16c/0x1f0 [ 574.783687][T14445] should_fail_ex+0x512/0x640 [ 574.783704][T14445] ? __kmalloc_cache_noprof+0x5f/0x800 [ 574.783723][T14445] should_failslab+0xc2/0x120 [ 574.783744][T14445] __kmalloc_cache_noprof+0x80/0x800 [ 574.783760][T14445] ? aa_label_sk_perm+0x194/0x5f0 [ 574.783775][T14445] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 574.783795][T14445] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 574.783810][T14445] ? sock_cmsg_send+0x1a0/0x280 [ 574.783825][T14445] tcp_sendmsg_fastopen+0x24d/0x750 [ 574.783845][T14445] tcp_sendmsg_locked+0x2407/0x42a0 [ 574.783873][T14445] ? __lock_acquire+0x436/0x2890 [ 574.783889][T14445] ? __lock_acquire+0x436/0x2890 [ 574.783902][T14445] ? __pfx___might_resched+0x10/0x10 [ 574.783921][T14445] ? rcu_is_watching+0x12/0xc0 [ 574.783942][T14445] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 574.783961][T14445] ? do_raw_spin_lock+0x12c/0x2b0 [ 574.783978][T14445] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 574.783997][T14445] ? __local_bh_enable_ip+0xa4/0x120 [ 574.784018][T14445] tcp_sendmsg+0x2e/0x50 [ 574.784033][T14445] ? __pfx_tcp_sendmsg+0x10/0x10 [ 574.784049][T14445] inet_sendmsg+0xb9/0x140 [ 574.784067][T14445] ____sys_sendmsg+0x973/0xc30 [ 574.784092][T14445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.784120][T14445] ? find_held_lock+0x2b/0x80 [ 574.784150][T14445] ? futex_unqueue+0x133/0x2c0 [ 574.784179][T14445] ___sys_sendmsg+0x134/0x1d0 [ 574.784215][T14445] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.784245][T14445] ? __pfx___futex_wait+0x10/0x10 [ 574.784289][T14445] ? find_held_lock+0x2b/0x80 [ 574.784343][T14445] __sys_sendmmsg+0x200/0x420 [ 574.784380][T14445] ? __pfx___sys_sendmmsg+0x10/0x10 [ 574.784424][T14445] ? __pfx_do_futex+0x10/0x10 [ 574.784466][T14445] ? fput+0x70/0xf0 [ 574.784492][T14445] ? xfd_validate_state+0x61/0x180 [ 574.784513][T14445] ? __pfx_ksys_write+0x10/0x10 [ 574.784554][T14445] __x64_sys_sendmmsg+0x9c/0x100 [ 574.784586][T14445] ? lockdep_hardirqs_on+0x7c/0x110 [ 574.784610][T14445] do_syscall_64+0xcd/0xf80 [ 574.784637][T14445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.784662][T14445] RIP: 0033:0x7f94a5d8f7c9 [ 574.784684][T14445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.784709][T14445] RSP: 002b:00007f94a6caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 574.784733][T14445] RAX: ffffffffffffffda RBX: 00007f94a5fe5fa0 RCX: 00007f94a5d8f7c9 [ 574.784748][T14445] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000005 [ 574.784763][T14445] RBP: 00007f94a5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 574.784776][T14445] R10: 0000000020020000 R11: 0000000000000246 R12: 0000000000000000 [ 574.784792][T14445] R13: 00007f94a5fe6038 R14: 00007f94a5fe5fa0 R15: 00007ffdb6989408 [ 574.784825][T14445] [ 575.270185][T14443] Invalid ELF header magic: != ELF [ 575.782295][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'. [ 575.988332][T14467] i2c i2c-0: Failed to register i2c client card: at 0x01 (-16) [ 577.532821][T14499] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2040'. [ 577.557549][T14499] netlink: 274 bytes leftover after parsing attributes in process `syz.3.2040'. [ 578.828245][T14524] netlink: 'syz.3.2045': attribute type 35 has an invalid length. [ 578.839509][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 579.196293][T14528] Invalid ELF header magic: != ELF [ 580.384937][T14560] FAULT_INJECTION: forcing a failure. [ 580.384937][T14560] name failslab, interval 1, probability 0, space 0, times 0 [ 580.400108][T14560] CPU: 1 UID: 0 PID: 14560 Comm: syz.0.2056 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.400152][T14560] Tainted: [L]=SOFTLOCKUP [ 580.400162][T14560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.400178][T14560] Call Trace: [ 580.400188][T14560] [ 580.400199][T14560] dump_stack_lvl+0x16c/0x1f0 [ 580.400245][T14560] should_fail_ex+0x512/0x640 [ 580.400274][T14560] ? __kmalloc_cache_noprof+0x5f/0x800 [ 580.400314][T14560] should_failslab+0xc2/0x120 [ 580.400353][T14560] __kmalloc_cache_noprof+0x80/0x800 [ 580.400384][T14560] ? copy_mount_options+0x55/0x190 [ 580.400426][T14560] ? copy_mount_options+0x55/0x190 [ 580.400454][T14560] copy_mount_options+0x55/0x190 [ 580.400486][T14560] __x64_sys_mount+0x1ab/0x310 [ 580.400513][T14560] ? __pfx___x64_sys_mount+0x10/0x10 [ 580.400550][T14560] do_syscall_64+0xcd/0xf80 [ 580.400577][T14560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.400614][T14560] RIP: 0033:0x7f94a5d8f7c9 [ 580.400634][T14560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.400660][T14560] RSP: 002b:00007f94a6caf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 580.400685][T14560] RAX: ffffffffffffffda RBX: 00007f94a5fe5fa0 RCX: 00007f94a5d8f7c9 [ 580.400703][T14560] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 580.400719][T14560] RBP: 00007f94a5e13f91 R08: 0000200000000280 R09: 0000000000000000 [ 580.400736][T14560] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 580.400751][T14560] R13: 00007f94a5fe6038 R14: 00007f94a5fe5fa0 R15: 00007ffdb6989408 [ 580.400788][T14560] [ 583.547987][ C1] sd 0:0:1:0: [sda] tag#1290 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 583.558506][ C1] sd 0:0:1:0: [sda] tag#1290 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 584.745995][T14664] FAULT_INJECTION: forcing a failure. [ 584.745995][T14664] name failslab, interval 1, probability 0, space 0, times 0 [ 584.814546][T14664] CPU: 0 UID: 0 PID: 14664 Comm: syz.1.2084 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.814577][T14664] Tainted: [L]=SOFTLOCKUP [ 584.814583][T14664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.814592][T14664] Call Trace: [ 584.814597][T14664] [ 584.814604][T14664] dump_stack_lvl+0x16c/0x1f0 [ 584.814635][T14664] should_fail_ex+0x512/0x640 [ 584.814652][T14664] ? __kmalloc_cache_noprof+0x5f/0x800 [ 584.814670][T14664] should_failslab+0xc2/0x120 [ 584.814692][T14664] __kmalloc_cache_noprof+0x80/0x800 [ 584.814708][T14664] ? nfc_allocate_device+0x15b/0x5e0 [ 584.814733][T14664] ? nfc_allocate_device+0x15b/0x5e0 [ 584.814758][T14664] nfc_allocate_device+0x15b/0x5e0 [ 584.814779][T14664] ? __init_swait_queue_head+0xca/0x150 [ 584.814799][T14664] nci_allocate_device+0x23b/0x460 [ 584.814818][T14664] virtual_ncidev_open+0x6f/0x220 [ 584.814835][T14664] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 584.814848][T14664] misc_open+0x26d/0x450 [ 584.814889][T14664] ? __pfx_misc_open+0x10/0x10 [ 584.814906][T14664] chrdev_open+0x234/0x6a0 [ 584.814928][T14664] ? __pfx_apparmor_file_open+0x10/0x10 [ 584.814944][T14664] ? __pfx_chrdev_open+0x10/0x10 [ 584.814966][T14664] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 584.814990][T14664] do_dentry_open+0x748/0x1590 [ 584.815009][T14664] ? __pfx_chrdev_open+0x10/0x10 [ 584.815033][T14664] vfs_open+0x82/0x3f0 [ 584.815050][T14664] path_openat+0x2078/0x3140 [ 584.815076][T14664] ? __pfx_path_openat+0x10/0x10 [ 584.815102][T14664] do_filp_open+0x20b/0x470 [ 584.815121][T14664] ? __pfx_do_filp_open+0x10/0x10 [ 584.815154][T14664] ? alloc_fd+0x471/0x7d0 [ 584.815179][T14664] do_sys_openat2+0x121/0x290 [ 584.815193][T14664] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.815215][T14664] __x64_sys_openat+0x174/0x210 [ 584.815231][T14664] ? __pfx___x64_sys_openat+0x10/0x10 [ 584.815254][T14664] do_syscall_64+0xcd/0xf80 [ 584.815268][T14664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.815283][T14664] RIP: 0033:0x7f93eab8f7c9 [ 584.815295][T14664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.815309][T14664] RSP: 002b:00007f93eb9af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.815322][T14664] RAX: ffffffffffffffda RBX: 00007f93eade5fa0 RCX: 00007f93eab8f7c9 [ 584.815332][T14664] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 584.815340][T14664] RBP: 00007f93eac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 584.815349][T14664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.815358][T14664] R13: 00007f93eade6038 R14: 00007f93eade5fa0 R15: 00007fffb5759398 [ 584.815377][T14664] [ 585.439173][T14676] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 586.289175][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2092'. [ 586.925597][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 587.777782][T14728] netlink: 'syz.1.2102': attribute type 2 has an invalid length. [ 589.254981][T14755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2108'. [ 589.556085][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2110'. [ 591.860247][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2123'. [ 593.110652][T14815] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 593.162017][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2127'. [ 593.189567][T14815] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2127'. [ 594.044593][T14827] zswap: compressor not available [ 594.142484][ T30] audit: type=1800 audit(4294967448.640:25): pid=14833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2132" name="features" dev="configfs" ino=66030 res=0 errno=0 [ 595.029264][T14851] Invalid ELF header magic: != ELF [ 596.161353][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 597.099961][T14898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2145'. [ 597.162653][T14901] FAULT_INJECTION: forcing a failure. [ 597.162653][T14901] name failslab, interval 1, probability 0, space 0, times 0 [ 597.190781][T14901] CPU: 0 UID: 0 PID: 14901 Comm: syz.2.2146 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.190806][T14901] Tainted: [L]=SOFTLOCKUP [ 597.190811][T14901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 597.190820][T14901] Call Trace: [ 597.190827][T14901] [ 597.190833][T14901] dump_stack_lvl+0x16c/0x1f0 [ 597.190860][T14901] should_fail_ex+0x512/0x640 [ 597.190877][T14901] ? __kmalloc_cache_noprof+0x5f/0x800 [ 597.190896][T14901] should_failslab+0xc2/0x120 [ 597.190917][T14901] __kmalloc_cache_noprof+0x80/0x800 [ 597.190935][T14901] ? lockdep_hardirqs_on+0x7c/0x110 [ 597.190947][T14901] ? kthread_create_worker_on_node+0xe2/0x220 [ 597.190972][T14901] ? kthread_create_worker_on_node+0xe2/0x220 [ 597.190991][T14901] ? __pfx___debug_object_init+0x10/0x10 [ 597.191012][T14901] kthread_create_worker_on_node+0xe2/0x220 [ 597.191034][T14901] ? __pfx_kthread_create_worker_on_node+0x10/0x10 [ 597.191056][T14901] ? rcu_is_watching+0x12/0xc0 [ 597.191075][T14901] ? lockdep_init_map_type+0x5c/0x270 [ 597.191090][T14901] ? lockdep_init_map_type+0x5c/0x270 [ 597.191106][T14901] ptp_clock_register+0x915/0x1820 [ 597.191125][T14901] ? __pfx_ptp_vclock_getcrosststamp+0x10/0x10 [ 597.191146][T14901] ? __pfx_ptp_clock_register+0x10/0x10 [ 597.191164][T14901] ? snprintf+0xc7/0x100 [ 597.191183][T14901] ? __pfx_snprintf+0x10/0x10 [ 597.191204][T14901] ? lockdep_init_map_type+0x5c/0x270 [ 597.191218][T14901] ? lockdep_init_map_type+0x5c/0x270 [ 597.191235][T14901] ptp_vclock_register+0x4c0/0xa00 [ 597.191259][T14901] n_vclocks_store+0x33f/0x6d0 [ 597.191293][T14901] ? __pfx_n_vclocks_store+0x10/0x10 [ 597.191328][T14901] ? find_held_lock+0x2b/0x80 [ 597.191362][T14901] ? __pfx_n_vclocks_store+0x10/0x10 [ 597.191380][T14901] dev_attr_store+0x58/0x80 [ 597.191399][T14901] ? __pfx_dev_attr_store+0x10/0x10 [ 597.191417][T14901] sysfs_kf_write+0xf2/0x150 [ 597.191433][T14901] kernfs_fop_write_iter+0x3af/0x570 [ 597.191451][T14901] ? __pfx_sysfs_kf_write+0x10/0x10 [ 597.191467][T14901] do_iter_readv_writev+0x662/0x9e0 [ 597.191487][T14901] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 597.191516][T14901] vfs_writev+0x35f/0xde0 [ 597.191535][T14901] ? rcu_is_watching+0x12/0xc0 [ 597.191557][T14901] ? __pfx_vfs_writev+0x10/0x10 [ 597.191574][T14901] ? fdget_pos+0x2a2/0x370 [ 597.191607][T14901] ? __fget_files+0x20e/0x3c0 [ 597.191630][T14901] ? do_writev+0x132/0x340 [ 597.191646][T14901] do_writev+0x132/0x340 [ 597.191663][T14901] ? __pfx_do_writev+0x10/0x10 [ 597.191686][T14901] do_syscall_64+0xcd/0xf80 [ 597.191700][T14901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.191715][T14901] RIP: 0033:0x7f965838f7c9 [ 597.191727][T14901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.191741][T14901] RSP: 002b:00007f96591a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 597.191755][T14901] RAX: ffffffffffffffda RBX: 00007f96585e5fa0 RCX: 00007f965838f7c9 [ 597.191770][T14901] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 597.191779][T14901] RBP: 00007f9658413f91 R08: 0000000000000000 R09: 0000000000000000 [ 597.191787][T14901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.191796][T14901] R13: 00007f96585e6038 R14: 00007f96585e5fa0 R15: 00007ffcf5120298 [ 597.191817][T14901] [ 597.191825][T14901] failed to create ptp aux_worker -12 [ 597.524443][ T50] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1515 with max blocks 21 with error 117 [ 597.604398][ T50] EXT4-fs (sda1): This should not happen!! Data will be lost [ 597.604398][ T50] [ 597.668665][ T50] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 0 with max blocks 1 with error 117 [ 597.733290][ T50] EXT4-fs (sda1): This should not happen!! Data will be lost [ 597.733290][ T50] [ 597.795060][ T50] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 953 with max blocks 71 with error 117 [ 597.818146][ T50] EXT4-fs (sda1): This should not happen!! Data will be lost [ 597.818146][ T50] [ 599.604605][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.614739][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.623367][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.633087][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.642243][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.121920][T14951] chnl_net:caif_netlink_parms(): no params data found [ 600.271737][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2154'. [ 600.408136][T14951] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.427339][T14951] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.443280][T14951] bridge_slave_0: entered allmulticast mode [ 600.460076][T14951] bridge_slave_0: entered promiscuous mode [ 600.478835][T14951] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.496513][T14951] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.511573][T14951] bridge_slave_1: entered allmulticast mode [ 600.519902][T14951] bridge_slave_1: entered promiscuous mode [ 600.573087][T14951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.590670][T14951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.646465][T14951] team0: Port device team_slave_0 added [ 600.668273][T14951] team0: Port device team_slave_1 added [ 600.746810][T14951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.753946][T14951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.785383][T14951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.811004][T14951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.818235][T14951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.844522][T14951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.913308][T14951] hsr_slave_0: entered promiscuous mode [ 600.924956][T14951] hsr_slave_1: entered promiscuous mode [ 600.934771][T14951] debugfs: 'hsr0' already exists in 'hsr' [ 600.943827][T14951] Cannot create hsr debugfs directory [ 601.747791][ T5835] Bluetooth: hci1: command tx timeout [ 601.788848][T14984] futex_wake_op: syz.1.2159 tries to shift op by -2048; fix this program [ 602.883870][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'. [ 603.431620][T14951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.826785][ T5835] Bluetooth: hci1: command tx timeout [ 603.933995][T14951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.846009][T14951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.079110][T14951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.916929][ T5835] Bluetooth: hci1: command tx timeout [ 606.150757][T14951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 606.224322][T14951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 606.427435][T14951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 606.475301][T14951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 606.909790][T14951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.022642][T14951] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.067304][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.074530][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.177924][ T30] audit: type=1800 audit(4294967461.680:26): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2174" name="discovery_nqn" dev="configfs" ino=66891 res=0 errno=0 [ 607.284411][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.291563][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.663994][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2177'. [ 607.863467][T14951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.966817][T14951] veth0_vlan: entered promiscuous mode [ 607.973061][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 607.996554][T14951] veth1_vlan: entered promiscuous mode [ 608.006663][ T5835] Bluetooth: hci1: command tx timeout [ 608.121639][T14951] veth0_macvtap: entered promiscuous mode [ 608.192026][T14951] veth1_macvtap: entered promiscuous mode [ 608.339706][T14951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.403771][T14951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.533426][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.589231][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.636782][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.667734][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.780272][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.807102][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.859970][T15066] netlink: 'syz.1.2179': attribute type 1 has an invalid length. [ 608.878508][T15066] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2179'. [ 608.891213][ T3730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.919577][ T3730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.089745][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 609.920187][T15090] syz.1.2185 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 611.782133][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2194'. [ 612.458408][T15106] kexec: Could not allocate control_code_buffer [ 613.919790][T15167] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[15167] [ 615.541546][T15183] Invalid ELF header magic: != ELF [ 616.507551][T15195] FAULT_INJECTION: forcing a failure. [ 616.507551][T15195] name failslab, interval 1, probability 0, space 0, times 0 [ 616.571713][T15195] CPU: 1 UID: 0 PID: 15195 Comm: syz.3.2213 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 616.571769][T15195] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 616.571783][T15195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.571797][T15195] Call Trace: [ 616.571805][T15195] [ 616.571817][T15195] dump_stack_lvl+0x16c/0x1f0 [ 616.571862][T15195] should_fail_ex+0x512/0x640 [ 616.571892][T15195] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 616.571941][T15195] should_failslab+0xc2/0x120 [ 616.571976][T15195] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 616.572008][T15195] ? append_filter_err+0x3d6/0x610 [ 616.572043][T15195] ? kmemdup_nul+0x49/0xf0 [ 616.572067][T15195] kmemdup_nul+0x49/0xf0 [ 616.572098][T15195] append_filter_err+0x3d6/0x610 [ 616.572136][T15195] apply_subsystem_event_filter+0x75a/0x17e0 [ 616.572177][T15195] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 616.572220][T15195] ? _copy_from_user+0x59/0xd0 [ 616.572263][T15195] subsystem_filter_write+0x95/0x120 [ 616.572299][T15195] ? __pfx_subsystem_filter_write+0x10/0x10 [ 616.572329][T15195] vfs_write+0x2a0/0x11d0 [ 616.572369][T15195] ? __pfx___mutex_lock+0x10/0x10 [ 616.572400][T15195] ? __pfx_vfs_write+0x10/0x10 [ 616.572442][T15195] ? __fget_files+0x20e/0x3c0 [ 616.572486][T15195] ksys_write+0x12a/0x250 [ 616.572518][T15195] ? __pfx_ksys_write+0x10/0x10 [ 616.572561][T15195] do_syscall_64+0xcd/0xf80 [ 616.572587][T15195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.572610][T15195] RIP: 0033:0x7f795ff8f7c9 [ 616.572631][T15195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.572655][T15195] RSP: 002b:00007f7960df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 616.572678][T15195] RAX: ffffffffffffffda RBX: 00007f79601e6090 RCX: 00007f795ff8f7c9 [ 616.572694][T15195] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 616.572706][T15195] RBP: 00007f7960013f91 R08: 0000000000000000 R09: 0000000000000000 [ 616.572718][T15195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.572732][T15195] R13: 00007f79601e6128 R14: 00007f79601e6090 R15: 00007ffd8f095538 [ 616.572768][T15195] [ 617.070637][T15198] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 618.426153][T15218] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2219'. [ 619.451169][T15245] FAULT_INJECTION: forcing a failure. [ 619.451169][T15245] name failslab, interval 1, probability 0, space 0, times 0 [ 619.492962][T15245] CPU: 0 UID: 0 PID: 15245 Comm: syz.0.2227 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 619.493020][T15245] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 619.493035][T15245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.493050][T15245] Call Trace: [ 619.493059][T15245] [ 619.493070][T15245] dump_stack_lvl+0x16c/0x1f0 [ 619.493118][T15245] should_fail_ex+0x512/0x640 [ 619.493148][T15245] ? __kmalloc_noprof+0xca/0x910 [ 619.493179][T15245] should_failslab+0xc2/0x120 [ 619.493217][T15245] __kmalloc_noprof+0xeb/0x910 [ 619.493245][T15245] ? lsm_blob_alloc+0x68/0x90 [ 619.493287][T15245] ? lsm_blob_alloc+0x68/0x90 [ 619.493320][T15245] lsm_blob_alloc+0x68/0x90 [ 619.493355][T15245] security_sk_alloc+0x2f/0x270 [ 619.493395][T15245] sk_prot_alloc+0x1c7/0x2a0 [ 619.493423][T15245] sk_alloc+0x36/0xe30 [ 619.493457][T15245] pppol2tp_create+0x32/0x250 [ 619.493487][T15245] pppox_create+0x15c/0x2c0 [ 619.493523][T15245] __sock_create+0x339/0x8a0 [ 619.493556][T15245] __sys_socket+0x14d/0x260 [ 619.493583][T15245] ? __pfx___sys_socket+0x10/0x10 [ 619.493612][T15245] ? xfd_validate_state+0x61/0x180 [ 619.493645][T15245] __x64_sys_socket+0x72/0xb0 [ 619.493671][T15245] ? lockdep_hardirqs_on+0x7c/0x110 [ 619.493694][T15245] do_syscall_64+0xcd/0xf80 [ 619.493720][T15245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.493746][T15245] RIP: 0033:0x7f94a5d8f7c9 [ 619.493767][T15245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.493791][T15245] RSP: 002b:00007f94a6caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 619.493815][T15245] RAX: ffffffffffffffda RBX: 00007f94a5fe5fa0 RCX: 00007f94a5d8f7c9 [ 619.493833][T15245] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000018 [ 619.493849][T15245] RBP: 00007f94a5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 619.493865][T15245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.493881][T15245] R13: 00007f94a5fe6038 R14: 00007f94a5fe5fa0 R15: 00007ffdb6989408 [ 619.493916][T15245] [ 623.768424][T15315] FAULT_INJECTION: forcing a failure. [ 623.768424][T15315] name failslab, interval 1, probability 0, space 0, times 0 [ 623.886796][T15315] CPU: 1 UID: 0 PID: 15315 Comm: syz.1.2247 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 623.886857][T15315] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 623.886872][T15315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 623.886888][T15315] Call Trace: [ 623.886898][T15315] [ 623.886909][T15315] dump_stack_lvl+0x16c/0x1f0 [ 623.886956][T15315] should_fail_ex+0x512/0x640 [ 623.886984][T15315] ? __kmalloc_cache_noprof+0x5f/0x800 [ 623.887017][T15315] should_failslab+0xc2/0x120 [ 623.887056][T15315] __kmalloc_cache_noprof+0x80/0x800 [ 623.887084][T15315] ? append_filter_err+0x435/0x610 [ 623.887115][T15315] ? apply_subsystem_event_filter+0x567/0x17e0 [ 623.887155][T15315] ? apply_subsystem_event_filter+0x567/0x17e0 [ 623.887189][T15315] apply_subsystem_event_filter+0x567/0x17e0 [ 623.887242][T15315] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 623.887286][T15315] ? _copy_from_user+0x59/0xd0 [ 623.887320][T15315] subsystem_filter_write+0x95/0x120 [ 623.887356][T15315] ? __pfx_subsystem_filter_write+0x10/0x10 [ 623.887387][T15315] vfs_write+0x2a0/0x11d0 [ 623.887424][T15315] ? __pfx___mutex_lock+0x10/0x10 [ 623.887452][T15315] ? __pfx_vfs_write+0x10/0x10 [ 623.887497][T15315] ? __fget_files+0x20e/0x3c0 [ 623.887542][T15315] ksys_write+0x12a/0x250 [ 623.887575][T15315] ? __pfx_ksys_write+0x10/0x10 [ 623.887620][T15315] do_syscall_64+0xcd/0xf80 [ 623.887646][T15315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.887672][T15315] RIP: 0033:0x7f93eab8f7c9 [ 623.887694][T15315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.887719][T15315] RSP: 002b:00007f93eb98e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 623.887743][T15315] RAX: ffffffffffffffda RBX: 00007f93eade6090 RCX: 00007f93eab8f7c9 [ 623.887760][T15315] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 623.887776][T15315] RBP: 00007f93eac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 623.887793][T15315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.887808][T15315] R13: 00007f93eade6128 R14: 00007f93eade6090 R15: 00007fffb5759398 [ 623.887849][T15315] [ 626.026255][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2259'. [ 626.037166][T15358] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2259'. [ 627.094998][T15373] Invalid ELF header magic: != ELF [ 627.147322][T15374] FAULT_INJECTION: forcing a failure. [ 627.147322][T15374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 627.245619][T15374] CPU: 1 UID: 0 PID: 15374 Comm: syz.0.2262 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 627.245676][T15374] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 627.245691][T15374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.245707][T15374] Call Trace: [ 627.245717][T15374] [ 627.245728][T15374] dump_stack_lvl+0x16c/0x1f0 [ 627.245773][T15374] should_fail_ex+0x512/0x640 [ 627.245807][T15374] should_fail_alloc_page+0xe7/0x130 [ 627.245848][T15374] prepare_alloc_pages+0x401/0x670 [ 627.245893][T15374] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 627.245939][T15374] ? stack_trace_save+0x8e/0xc0 [ 627.245977][T15374] ? __pfx_stack_trace_save+0x10/0x10 [ 627.246015][T15374] ? stack_depot_save_flags+0x29/0x9b0 [ 627.246051][T15374] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 627.246080][T15374] ? kasan_save_stack+0x33/0x60 [ 627.246111][T15374] ? __kasan_kmalloc+0xaa/0xb0 [ 627.246142][T15374] ? do_sys_poll+0x24a/0xdf0 [ 627.246172][T15374] ? __x64_sys_poll+0x1a6/0x450 [ 627.246203][T15374] ? do_syscall_64+0xcd/0xf80 [ 627.246226][T15374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.246257][T15374] ? __lock_acquire+0x436/0x2890 [ 627.246285][T15374] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 627.246329][T15374] ? policy_nodemask+0xea/0x4e0 [ 627.246371][T15374] alloc_pages_mpol+0x1fb/0x550 [ 627.246411][T15374] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 627.246461][T15374] alloc_pages_noprof+0x131/0x390 [ 627.246499][T15374] get_free_pages_noprof+0x10/0xb0 [ 627.246533][T15374] __pollwait+0x295/0x460 [ 627.246571][T15374] pipe_poll+0x23c/0x660 [ 627.246606][T15374] ? __pfx___pollwait+0x10/0x10 [ 627.246634][T15374] ? __pfx_pipe_poll+0x10/0x10 [ 627.246663][T15374] do_sys_poll+0x55c/0xdf0 [ 627.246702][T15374] ? __pfx_do_sys_poll+0x10/0x10 [ 627.246759][T15374] ? __futex_wait+0x24b/0x2f0 [ 627.246789][T15374] ? __pfx___pollwait+0x10/0x10 [ 627.246826][T15374] ? __pfx_pollwake+0x10/0x10 [ 627.246861][T15374] ? __pfx_pollwake+0x10/0x10 [ 627.246895][T15374] ? __pfx_pollwake+0x10/0x10 [ 627.246938][T15374] ? __pfx_pollwake+0x10/0x10 [ 627.246970][T15374] ? __pfx_pollwake+0x10/0x10 [ 627.247001][T15374] ? __pfx_pollwake+0x10/0x10 [ 627.247034][T15374] ? __pfx_pollwake+0x10/0x10 [ 627.247068][T15374] ? __pfx_pollwake+0x10/0x10 [ 627.247101][T15374] ? __pfx_pollwake+0x10/0x10 [ 627.247132][T15374] ? __pfx_timespec64_add_safe+0x10/0x10 [ 627.247159][T15374] ? ktime_get_ts64+0x2d2/0x400 [ 627.247185][T15374] ? read_tsc+0x9/0x20 [ 627.247215][T15374] ? ktime_get_ts64+0x256/0x400 [ 627.247249][T15374] __x64_sys_poll+0x1a6/0x450 [ 627.247283][T15374] ? __pfx___x64_sys_poll+0x10/0x10 [ 627.247327][T15374] do_syscall_64+0xcd/0xf80 [ 627.247353][T15374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.247377][T15374] RIP: 0033:0x7f94a5d8f7c9 [ 627.247397][T15374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.247422][T15374] RSP: 002b:00007f94a6caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 627.247448][T15374] RAX: ffffffffffffffda RBX: 00007f94a5fe5fa0 RCX: 00007f94a5d8f7c9 [ 627.247467][T15374] RDX: 00000000000ffffc RSI: 0000000000000040 RDI: 00002000000002c0 [ 627.247484][T15374] RBP: 00007f94a5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 627.247501][T15374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.247517][T15374] R13: 00007f94a5fe6038 R14: 00007f94a5fe5fa0 R15: 00007ffdb6989408 [ 627.247554][T15374] [ 627.981397][T15387] Invalid ELF header magic: != ELF [ 628.295734][T15392] FAULT_INJECTION: forcing a failure. [ 628.295734][T15392] name failslab, interval 1, probability 0, space 0, times 0 [ 628.378990][T15392] CPU: 1 UID: 0 PID: 15392 Comm: syz.3.2268 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 628.379043][T15392] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 628.379056][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.379072][T15392] Call Trace: [ 628.379081][T15392] [ 628.379091][T15392] dump_stack_lvl+0x16c/0x1f0 [ 628.379136][T15392] should_fail_ex+0x512/0x640 [ 628.379165][T15392] ? fs_reclaim_acquire+0xae/0x150 [ 628.379205][T15392] should_failslab+0xc2/0x120 [ 628.379240][T15392] __kmalloc_noprof+0xeb/0x910 [ 628.379268][T15392] ? tomoyo_encode2+0x100/0x3e0 [ 628.379303][T15392] ? tomoyo_encode2+0x100/0x3e0 [ 628.379334][T15392] tomoyo_encode2+0x100/0x3e0 [ 628.379373][T15392] tomoyo_encode+0x29/0x50 [ 628.379405][T15392] tomoyo_realpath_from_path+0x18f/0x6e0 [ 628.379451][T15392] tomoyo_path_number_perm+0x245/0x580 [ 628.379480][T15392] ? tomoyo_path_number_perm+0x237/0x580 [ 628.379513][T15392] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 628.379546][T15392] ? rcu_read_unlock+0x17/0x60 [ 628.379588][T15392] ? do_raw_spin_lock+0x12c/0x2b0 [ 628.379618][T15392] ? find_held_lock+0x2b/0x80 [ 628.379669][T15392] ? find_held_lock+0x2b/0x80 [ 628.379700][T15392] ? __pfx___d_add+0x10/0x10 [ 628.379721][T15392] ? d_alloc+0x176/0x1e0 [ 628.379738][T15392] ? current_check_access_path+0x33b/0x460 [ 628.379772][T15392] ? __pfx_current_check_access_path+0x10/0x10 [ 628.379807][T15392] ? simple_lookup+0x105/0x1d0 [ 628.379846][T15392] tomoyo_path_mknod+0x10c/0x190 [ 628.379869][T15392] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 628.379895][T15392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 628.379936][T15392] security_path_mknod+0x161/0x310 [ 628.379968][T15392] do_mknodat+0x24e/0x6f0 [ 628.380003][T15392] ? __pfx_do_mknodat+0x10/0x10 [ 628.380038][T15392] ? getname_flags.part.0+0x1c5/0x550 [ 628.380071][T15392] __x64_sys_mknod+0x87/0xb0 [ 628.380107][T15392] do_syscall_64+0xcd/0xf80 [ 628.380134][T15392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.380159][T15392] RIP: 0033:0x7f795ff8f7c9 [ 628.380181][T15392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.380205][T15392] RSP: 002b:00007f7960e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 628.380231][T15392] RAX: ffffffffffffffda RBX: 00007f79601e5fa0 RCX: 00007f795ff8f7c9 [ 628.380248][T15392] RDX: 0000000000000004 RSI: 0000000000001001 RDI: 0000200000000040 [ 628.380263][T15392] RBP: 00007f7960013f91 R08: 0000000000000000 R09: 0000000000000000 [ 628.380279][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.380293][T15392] R13: 00007f79601e6038 R14: 00007f79601e5fa0 R15: 00007ffd8f095538 [ 628.380330][T15392] [ 628.380355][T15392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 628.527338][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1515 with max blocks 21 with error 117 [ 628.780488][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 628.780488][ T12] [ 628.889227][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 0 with max blocks 1 with error 117 [ 628.924457][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 628.924457][ T12] [ 628.942085][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 953 with max blocks 71 with error 117 [ 629.017054][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 629.017054][ T12] [ 629.510202][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.517052][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.921508][ T6450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.164299][ T6450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.321151][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 630.333214][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 630.341556][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 630.351252][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 630.360435][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 630.671170][ T6450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.852670][ T6450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.913152][T15436] Invalid ELF header magic: != ELF [ 631.193291][T15425] chnl_net:caif_netlink_parms(): no params data found [ 631.415202][T15442] zswap: compressor 000 not available [ 631.580445][T15425] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.587969][T15425] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.595254][T15425] bridge_slave_0: entered allmulticast mode [ 631.663051][T15425] bridge_slave_0: entered promiscuous mode [ 631.701664][T15425] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.728954][T15425] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.740497][T15425] bridge_slave_1: entered allmulticast mode [ 631.770639][T15425] bridge_slave_1: entered promiscuous mode [ 631.873699][ T6450] bridge_slave_1: left allmulticast mode [ 631.896873][ T6450] bridge_slave_1: left promiscuous mode [ 631.905725][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.017995][ T6450] bridge_slave_0: left allmulticast mode [ 632.042527][ T6450] bridge_slave_0: left promiscuous mode [ 632.072051][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.389365][ T5843] Bluetooth: hci1: command tx timeout [ 634.269954][ T6450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.328905][ T6450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.352942][ T6450] bond0 (unregistering): Released all slaves [ 634.374736][T15425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.429411][T15425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.467275][ T5843] Bluetooth: hci1: command tx timeout [ 634.509136][T15495] Invalid ELF header magic: != ELF [ 634.576525][T15500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 634.768944][T15425] team0: Port device team_slave_0 added [ 634.853008][T15425] team0: Port device team_slave_1 added [ 635.279030][T15425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.305437][T15425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.382301][T15425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.501197][T15425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.530608][T15425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.596770][T15425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.707543][ T6450] hsr_slave_0: left promiscuous mode [ 635.720334][ T6450] hsr_slave_1: left promiscuous mode [ 635.735989][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.750350][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.762991][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.771426][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.850757][ T6450] veth1_macvtap: left promiscuous mode [ 635.863531][ T6450] veth0_macvtap: left promiscuous mode [ 635.884013][ T6450] veth1_vlan: left promiscuous mode [ 635.908150][ T6450] veth0_vlan: left promiscuous mode [ 636.057514][T15529] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2297'. [ 636.304395][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 636.552480][ T5835] Bluetooth: hci1: command tx timeout [ 636.952492][ T6450] team0 (unregistering): Port device team_slave_1 removed [ 636.991364][ T6450] team0 (unregistering): Port device team_slave_0 removed [ 637.486356][T15425] hsr_slave_0: entered promiscuous mode [ 637.492887][T15425] hsr_slave_1: entered promiscuous mode [ 637.502158][T15425] debugfs: 'hsr0' already exists in 'hsr' [ 637.509089][T15425] Cannot create hsr debugfs directory [ 638.631639][ T5835] Bluetooth: hci1: command tx timeout [ 638.633460][T15566] FAULT_INJECTION: forcing a failure. [ 638.633460][T15566] name failslab, interval 1, probability 0, space 0, times 0 [ 638.656570][T15566] CPU: 0 UID: 0 PID: 15566 Comm: syz.0.2304 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 638.656622][T15566] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 638.656638][T15566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 638.656650][T15566] Call Trace: [ 638.656659][T15566] [ 638.656668][T15566] dump_stack_lvl+0x16c/0x1f0 [ 638.656712][T15566] should_fail_ex+0x512/0x640 [ 638.656741][T15566] ? kmem_cache_alloc_noprof+0x62/0x770 [ 638.656773][T15566] should_failslab+0xc2/0x120 [ 638.656809][T15566] kmem_cache_alloc_noprof+0x83/0x770 [ 638.656838][T15566] ? locks_get_lock_context+0x219/0x3f0 [ 638.656885][T15566] ? locks_get_lock_context+0x219/0x3f0 [ 638.656912][T15566] locks_get_lock_context+0x219/0x3f0 [ 638.656943][T15566] posix_lock_inode+0xcc/0x2260 [ 638.656984][T15566] ? __pfx_posix_lock_inode+0x10/0x10 [ 638.657025][T15566] vfs_lock_file+0xfb/0x150 [ 638.657059][T15566] fcntl_setlk+0x3ff/0xdf0 [ 638.657094][T15566] ? __pfx_fcntl_setlk+0x10/0x10 [ 638.657144][T15566] ? rep_movs_alternative+0x30/0x90 [ 638.657180][T15566] do_fcntl+0x43d/0x1660 [ 638.657207][T15566] ? __pfx_do_fcntl+0x10/0x10 [ 638.657244][T15566] ? tomoyo_file_fcntl+0x6c/0xc0 [ 638.657273][T15566] __x64_sys_fcntl+0x163/0x200 [ 638.657305][T15566] do_syscall_64+0xcd/0xf80 [ 638.657331][T15566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.657356][T15566] RIP: 0033:0x7f94a5d8f7c9 [ 638.657379][T15566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.657402][T15566] RSP: 002b:00007f94a6caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 638.657428][T15566] RAX: ffffffffffffffda RBX: 00007f94a5fe5fa0 RCX: 00007f94a5d8f7c9 [ 638.657445][T15566] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 0000000000000004 [ 638.657461][T15566] RBP: 00007f94a5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 638.657475][T15566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.657490][T15566] R13: 00007f94a5fe6038 R14: 00007f94a5fe5fa0 R15: 00007ffdb6989408 [ 638.657524][T15566] [ 639.474108][T15425] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 639.524451][T15425] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 639.585310][T15425] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 639.986639][T15425] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 640.555974][T15425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.814841][T15425] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.853022][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.860170][ T7440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.916272][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.923477][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.942956][T15604] FAULT_INJECTION: forcing a failure. [ 640.942956][T15604] name failslab, interval 1, probability 0, space 0, times 0 [ 641.086652][T15604] CPU: 1 UID: 0 PID: 15604 Comm: syz.0.2309 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 641.086702][T15604] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 641.086716][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.086728][T15604] Call Trace: [ 641.086736][T15604] [ 641.086746][T15604] dump_stack_lvl+0x16c/0x1f0 [ 641.086788][T15604] should_fail_ex+0x512/0x640 [ 641.086815][T15604] ? __kmalloc_cache_noprof+0x5f/0x800 [ 641.086843][T15604] should_failslab+0xc2/0x120 [ 641.086876][T15604] __kmalloc_cache_noprof+0x80/0x800 [ 641.086899][T15604] ? mptcp_subflow_create_socket+0x34f/0xa50 [ 641.086922][T15604] ? subflow_create_ctx+0x9b/0x2e0 [ 641.086957][T15604] ? subflow_create_ctx+0x9b/0x2e0 [ 641.086987][T15604] subflow_create_ctx+0x9b/0x2e0 [ 641.087020][T15604] subflow_ulp_init+0xc3/0x500 [ 641.087051][T15604] tcp_set_ulp+0x329/0x7f0 [ 641.087079][T15604] mptcp_subflow_create_socket+0x385/0xa50 [ 641.087107][T15604] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 641.087142][T15604] __mptcp_nmpc_sk+0x182/0x880 [ 641.087168][T15604] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 641.087196][T15604] ? __local_bh_enable_ip+0xa4/0x120 [ 641.087230][T15604] mptcp_bind+0xa3/0x1e0 [ 641.087258][T15604] __sys_bind+0x1a7/0x260 [ 641.087284][T15604] ? __pfx___sys_bind+0x10/0x10 [ 641.087333][T15604] __x64_sys_bind+0x72/0xb0 [ 641.087356][T15604] ? lockdep_hardirqs_on+0x7c/0x110 [ 641.087389][T15604] do_syscall_64+0xcd/0xf80 [ 641.087415][T15604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.087443][T15604] RIP: 0033:0x7f94a5d8f7c9 [ 641.087466][T15604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.087496][T15604] RSP: 002b:00007f94a6caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 641.087519][T15604] RAX: ffffffffffffffda RBX: 00007f94a5fe5fa0 RCX: 00007f94a5d8f7c9 [ 641.087536][T15604] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000006 [ 641.087552][T15604] RBP: 00007f94a5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 641.087571][T15604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.087585][T15604] R13: 00007f94a5fe6038 R14: 00007f94a5fe5fa0 R15: 00007ffdb6989408 [ 641.087617][T15604] [ 641.402805][T15612] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2311'. [ 641.411738][T15616] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 641.413685][T15614] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2311'. [ 641.438101][T15614] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2311'. [ 641.460888][T15616] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 641.487998][T15614] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2311'. [ 641.498876][T15614] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2311'. [ 641.509997][T15614] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2311'. [ 641.518291][T15612] netlink: 306 bytes leftover after parsing attributes in process `syz.3.2311'. [ 641.620291][T15614] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2311'. [ 641.647624][T15614] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2311'. [ 641.991998][T15425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.170083][T15425] veth0_vlan: entered promiscuous mode [ 642.213138][T15425] veth1_vlan: entered promiscuous mode [ 642.321998][T15425] veth0_macvtap: entered promiscuous mode [ 642.423668][T15425] veth1_macvtap: entered promiscuous mode [ 642.520392][T15425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.610377][T15425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.691652][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.722497][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.772270][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.781382][T15657] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 642.878613][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.103869][ T6586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.138230][ T6586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.253890][T15202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.327168][T15202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.783886][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2321'. [ 645.616709][T15202] bridge_slave_1: left allmulticast mode [ 645.622439][T15202] bridge_slave_1: left promiscuous mode [ 645.640237][T15202] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.718443][T15714] FAULT_INJECTION: forcing a failure. [ 645.718443][T15714] name failslab, interval 1, probability 0, space 0, times 0 [ 645.736798][T15714] CPU: 1 UID: 0 PID: 15714 Comm: syz.0.2325 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 645.736853][T15714] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 645.736867][T15714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 645.736881][T15714] Call Trace: [ 645.736891][T15714] [ 645.736900][T15714] dump_stack_lvl+0x16c/0x1f0 [ 645.736944][T15714] should_fail_ex+0x512/0x640 [ 645.736973][T15714] ? kmem_cache_alloc_noprof+0x62/0x770 [ 645.737014][T15714] ? __pfx_dom_debug_open+0x10/0x10 [ 645.737039][T15714] should_failslab+0xc2/0x120 [ 645.737079][T15714] kmem_cache_alloc_noprof+0x83/0x770 [ 645.737109][T15714] ? seq_open+0x55/0x170 [ 645.737142][T15714] ? __pfx_dom_debug_open+0x10/0x10 [ 645.737164][T15714] ? __pfx_dom_debug_show+0x10/0x10 [ 645.737187][T15714] ? seq_open+0x55/0x170 [ 645.737213][T15714] seq_open+0x55/0x170 [ 645.737239][T15714] ? __pfx_dom_debug_show+0x10/0x10 [ 645.737263][T15714] single_open+0xfc/0x1f0 [ 645.737293][T15714] full_proxy_open_regular+0x1b9/0x350 [ 645.737334][T15714] do_dentry_open+0x748/0x1590 [ 645.737368][T15714] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 645.737414][T15714] vfs_open+0x82/0x3f0 [ 645.737446][T15714] path_openat+0x2078/0x3140 [ 645.737492][T15714] ? __pfx_path_openat+0x10/0x10 [ 645.737541][T15714] do_filp_open+0x20b/0x470 [ 645.737579][T15714] ? __pfx_do_filp_open+0x10/0x10 [ 645.737639][T15714] ? alloc_fd+0x471/0x7d0 [ 645.737683][T15714] do_sys_openat2+0x121/0x290 [ 645.737711][T15714] ? __pfx_do_sys_openat2+0x10/0x10 [ 645.737753][T15714] __x64_sys_openat+0x174/0x210 [ 645.737782][T15714] ? __pfx___x64_sys_openat+0x10/0x10 [ 645.737824][T15714] do_syscall_64+0xcd/0xf80 [ 645.737851][T15714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.737876][T15714] RIP: 0033:0x7f94a5d8f7c9 [ 645.737898][T15714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.737922][T15714] RSP: 002b:00007f94a6caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 645.737947][T15714] RAX: ffffffffffffffda RBX: 00007f94a5fe5fa0 RCX: 00007f94a5d8f7c9 [ 645.737964][T15714] RDX: 0000000000000100 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 645.737981][T15714] RBP: 00007f94a5e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 645.738003][T15714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.738019][T15714] R13: 00007f94a5fe6038 R14: 00007f94a5fe5fa0 R15: 00007ffdb6989408 [ 645.738056][T15714] [ 646.325920][T15202] bridge_slave_0: left allmulticast mode [ 646.333931][T15202] bridge_slave_0: left promiscuous mode [ 646.355832][T15202] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.690139][T15722] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2328'. [ 646.709790][T15722] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2328'. [ 647.708955][T15202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.731444][T15202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.756253][T15202] bond0 (unregistering): Released all slaves [ 647.931851][T15728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 647.963655][T15728] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 648.051992][T15728] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 648.077378][T15728] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 648.136522][T15728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 648.160438][T15728] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 648.176783][T15728] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 648.196853][T15728] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 648.239639][T15728] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 649.916633][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 649.979616][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 650.066782][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 650.146663][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 650.227093][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 650.265348][T15774] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 651.089950][T15202] hsr_slave_0: left promiscuous mode [ 651.136140][T15202] hsr_slave_1: left promiscuous mode [ 651.152783][T15202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.171772][T15202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.237764][T15202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.275852][T15202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.304580][T15797] nvme_fabrics: missing parameter 'transport=%s' [ 651.321435][T15797] nvme_fabrics: missing parameter 'nqn=%s' [ 651.399296][T15202] veth1_macvtap: left promiscuous mode [ 651.404891][T15202] veth0_macvtap: left promiscuous mode [ 651.428862][T15202] veth1_vlan: left promiscuous mode [ 651.435767][T15202] veth0_vlan: left promiscuous mode [ 651.987236][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 652.151104][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 652.229394][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 652.306644][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 652.621932][T15816] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2358'. [ 652.680958][T15202] team0 (unregistering): Port device team_slave_1 removed [ 652.794536][T15202] team0 (unregistering): Port device team_slave_0 removed [ 654.386756][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 654.462967][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 654.527446][ T30] audit: type=1800 audit(4294967509.030:27): pid=15846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2356" name="features" dev="configfs" ino=72698 res=0 errno=0 [ 655.082761][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2360'. [ 655.160509][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'. [ 655.299738][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'. [ 655.328708][T15864] netlink: 'syz.0.2361': attribute type 1 has an invalid length. [ 655.346980][T15864] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2361'. [ 655.357371][T15864] netlink: 'syz.0.2361': attribute type 1 has an invalid length. [ 655.938616][T15872] FAULT_INJECTION: forcing a failure. [ 655.938616][T15872] name fail_futex, interval 1, probability 0, space 0, times 0 [ 655.983720][T15875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2365'. [ 656.029480][T15875] veth1_macvtap: entered allmulticast mode [ 656.040818][T15874] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 0 with max blocks 1 with error 117 [ 656.055883][T15872] CPU: 1 UID: 0 PID: 15872 Comm: syz.3.2364 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 656.055942][T15872] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 656.055957][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.055973][T15872] Call Trace: [ 656.055981][T15872] [ 656.055992][T15872] dump_stack_lvl+0x16c/0x1f0 [ 656.056047][T15872] should_fail_ex+0x512/0x640 [ 656.056083][T15872] get_futex_key+0x1d0/0x15f0 [ 656.056116][T15872] ? __pfx_get_futex_key+0x10/0x10 [ 656.056148][T15872] ? lockdep_init_map_type+0x5c/0x270 [ 656.056180][T15872] futex_wake+0xea/0x530 [ 656.056216][T15872] ? __pfx_futex_wake+0x10/0x10 [ 656.056245][T15872] ? __lock_acquire+0x436/0x2890 [ 656.056272][T15872] ? alloc_file_pseudo+0x1b3/0x230 [ 656.056308][T15872] do_futex+0x1e3/0x350 [ 656.056336][T15872] ? __pfx_do_futex+0x10/0x10 [ 656.056363][T15872] ? fd_install+0x223/0x570 [ 656.056404][T15872] __x64_sys_futex+0x1e0/0x4c0 [ 656.056437][T15872] ? __pfx___x64_sys_futex+0x10/0x10 [ 656.056464][T15872] ? __x64_sys_signalfd+0x128/0x1a0 [ 656.056492][T15872] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 656.056535][T15872] do_syscall_64+0xcd/0xf80 [ 656.056565][T15872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.056586][T15872] RIP: 0033:0x7f795ff8f7c9 [ 656.056608][T15872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.056634][T15872] RSP: 002b:00007f7960e170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 656.056658][T15872] RAX: ffffffffffffffda RBX: 00007f79601e5fa8 RCX: 00007f795ff8f7c9 [ 656.056675][T15872] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f79601e5fac [ 656.056691][T15872] RBP: 00007f79601e5fa0 R08: 00007f7960e18000 R09: 0000000000000000 [ 656.056707][T15872] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 656.056722][T15872] R13: 00007f79601e6038 R14: 00007ffd8f095450 R15: 00007ffd8f095538 [ 656.056758][T15872] [ 656.260642][T15874] EXT4-fs (sda1): This should not happen!! Data will be lost [ 656.260642][T15874] [ 659.149232][T15913] FAULT_INJECTION: forcing a failure. [ 659.149232][T15913] name failslab, interval 1, probability 0, space 0, times 0 [ 659.211716][T15913] CPU: 1 UID: 0 PID: 15913 Comm: syz.2.2375 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 659.211775][T15913] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 659.211791][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 659.211806][T15913] Call Trace: [ 659.211816][T15913] [ 659.211826][T15913] dump_stack_lvl+0x16c/0x1f0 [ 659.211873][T15913] should_fail_ex+0x512/0x640 [ 659.211902][T15913] ? __kmalloc_cache_noprof+0x5f/0x800 [ 659.211933][T15913] should_failslab+0xc2/0x120 [ 659.211975][T15913] __kmalloc_cache_noprof+0x80/0x800 [ 659.212003][T15913] ? __might_fault+0xe3/0x190 [ 659.212031][T15913] ? __might_fault+0xe3/0x190 [ 659.212057][T15913] ? do_signalfd4+0x169/0x510 [ 659.212089][T15913] ? do_signalfd4+0x169/0x510 [ 659.212114][T15913] do_signalfd4+0x169/0x510 [ 659.212143][T15913] __x64_sys_signalfd+0x120/0x1a0 [ 659.212171][T15913] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 659.212209][T15913] do_syscall_64+0xcd/0xf80 [ 659.212236][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.212261][T15913] RIP: 0033:0x7fdeae18f7c9 [ 659.212283][T15913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.212309][T15913] RSP: 002b:00007fdeaf0ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 659.212334][T15913] RAX: ffffffffffffffda RBX: 00007fdeae3e5fa0 RCX: 00007fdeae18f7c9 [ 659.212351][T15913] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff [ 659.212367][T15913] RBP: 00007fdeae213f91 R08: 0000000000000000 R09: 0000000000000000 [ 659.212383][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.212398][T15913] R13: 00007fdeae3e6038 R14: 00007fdeae3e5fa0 R15: 00007fffa16c4748 [ 659.212434][T15913] [ 659.507733][ T2965] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1515 with max blocks 21 with error 117 [ 659.520550][ T2965] EXT4-fs (sda1): This should not happen!! Data will be lost [ 659.520550][ T2965] [ 659.532709][ T2965] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 0 with max blocks 1 with error 117 [ 659.545396][ T2965] EXT4-fs (sda1): This should not happen!! Data will be lost [ 659.545396][ T2965] [ 659.556069][ T2965] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 953 with max blocks 71 with error 117 [ 659.569047][ T2965] EXT4-fs (sda1): This should not happen!! Data will be lost [ 659.569047][ T2965] [ 660.156160][T15932] Dead loop on virtual device ip6_vti0, fix it urgently! [ 660.199084][T15932] Dead loop on virtual device ip6_vti0, fix it urgently! [ 660.228111][T15932] Dead loop on virtual device ip6_vti0, fix it urgently! [ 660.238283][T15932] Dead loop on virtual device ip6_vti0, fix it urgently! [ 660.283833][T15932] Dead loop on virtual device ip6_vti0, fix it urgently! [ 660.301553][T15932] Dead loop on virtual device ip6_vti0, fix it urgently! [ 663.201398][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2391'. [ 663.227400][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'. [ 664.710363][T16010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2401'. [ 664.738844][T16010] veth1_macvtap: entered allmulticast mode [ 664.829485][T16008] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 0 with max blocks 1 with error 117 [ 664.846810][T16008] EXT4-fs (sda1): This should not happen!! Data will be lost [ 664.846810][T16008] [ 666.803423][T16041] zswap: compressor not available [ 667.191855][T16054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2413'. [ 667.216846][T16054] veth1_macvtap: entered allmulticast mode [ 668.200124][ T5889] smpboot: CPU 1 is now offline [ 668.365019][T16073] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 668.398867][T16073] ------------[ cut here ]------------ [ 668.399681][T16073] [ 668.399687][T16073] ====================================================== [ 668.399692][T16073] WARNING: possible circular locking dependency detected [ 668.399700][T16073] syzkaller #0 Tainted: G U W L XTNJ [ 668.399708][T16073] ------------------------------------------------------ [ 668.399713][T16073] syz.2.2417/16073 is trying to acquire lock: [ 668.399720][T16073] ffffffff8e2d6ac0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 668.399757][T16073] [ 668.399757][T16073] but task is already holding lock: [ 668.399761][T16073] ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 668.399793][T16073] [ 668.399793][T16073] which lock already depends on the new lock. [ 668.399793][T16073] [ 668.399798][T16073] [ 668.399798][T16073] the existing dependency chain (in reverse order) is: [ 668.399802][T16073] [ 668.399802][T16073] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 668.399828][T16073] _raw_spin_lock_nested+0x31/0x40 [ 668.399849][T16073] raw_spin_rq_lock_nested+0x29/0x130 [ 668.399865][T16073] task_rq_lock+0xcf/0x490 [ 668.399882][T16073] cgroup_move_task+0x81/0x2a0 [ 668.399901][T16073] css_set_move_task+0x288/0x5f0 [ 668.399922][T16073] cgroup_post_fork+0x201/0x9e0 [ 668.399940][T16073] copy_process+0x56b6/0x7430 [ 668.399958][T16073] kernel_clone+0xfc/0x910 [ 668.399974][T16073] user_mode_thread+0xc8/0x110 [ 668.399992][T16073] rest_init+0x23/0x2b0 [ 668.400005][T16073] start_kernel+0x3ef/0x4d0 [ 668.400019][T16073] x86_64_start_reservations+0x18/0x30 [ 668.400033][T16073] x86_64_start_kernel+0x130/0x190 [ 668.400046][T16073] common_startup_64+0x13e/0x148 [ 668.400062][T16073] [ 668.400062][T16073] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 668.400079][T16073] _raw_spin_lock_irqsave+0x3a/0x60 [ 668.400097][T16073] try_to_wake_up+0xb7/0x1860 [ 668.400111][T16073] __wake_up_common+0x135/0x1f0 [ 668.400122][T16073] __wake_up+0x31/0x60 [ 668.400138][T16073] tty_port_default_wakeup+0x4d/0x60 [ 668.400158][T16073] serial8250_tx_chars+0x68e/0x860 [ 668.400176][T16073] serial8250_handle_irq+0x761/0xcb0 [ 668.400188][T16073] serial8250_default_handle_irq+0x9e/0x270 [ 668.400200][T16073] serial8250_interrupt+0xf8/0x1d0 [ 668.400214][T16073] __handle_irq_event_percpu+0x236/0x890 [ 668.400230][T16073] handle_irq_event+0xab/0x1e0 [ 668.400245][T16073] handle_edge_irq+0x3ca/0x9e0 [ 668.400259][T16073] __common_interrupt+0xd0/0x2f0 [ 668.400277][T16073] common_interrupt+0xba/0xe0 [ 668.400291][T16073] asm_common_interrupt+0x26/0x40 [ 668.400303][T16073] _raw_spin_unlock_irqrestore+0x31/0x80 [ 668.400321][T16073] sock_def_readable+0x15b/0x5d0 [ 668.400337][T16073] unix_dgram_sendmsg+0xcbd/0x1830 [ 668.400352][T16073] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 668.400366][T16073] sock_write_iter+0x566/0x610 [ 668.400377][T16073] do_iter_readv_writev+0x662/0x9e0 [ 668.400393][T16073] vfs_writev+0x35f/0xde0 [ 668.400408][T16073] do_writev+0x28c/0x340 [ 668.400423][T16073] do_syscall_64+0xcd/0xf80 [ 668.400433][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.400445][T16073] [ 668.400445][T16073] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 668.400461][T16073] _raw_spin_lock_irqsave+0x3a/0x60 [ 668.400478][T16073] __wake_up+0x1c/0x60 [ 668.400494][T16073] tty_port_default_wakeup+0x4d/0x60 [ 668.400512][T16073] serial8250_tx_chars+0x68e/0x860 [ 668.400530][T16073] serial8250_handle_irq+0x761/0xcb0 [ 668.400542][T16073] serial8250_default_handle_irq+0x9e/0x270 [ 668.400554][T16073] serial8250_interrupt+0xf8/0x1d0 [ 668.400567][T16073] __handle_irq_event_percpu+0x236/0x890 [ 668.400583][T16073] handle_irq_event+0xab/0x1e0 [ 668.400598][T16073] handle_edge_irq+0x3ca/0x9e0 [ 668.400611][T16073] __common_interrupt+0xd0/0x2f0 [ 668.400628][T16073] common_interrupt+0xba/0xe0 [ 668.400642][T16073] asm_common_interrupt+0x26/0x40 [ 668.400654][T16073] _raw_spin_unlock_irqrestore+0x31/0x80 [ 668.400671][T16073] uart_write+0x2a4/0xb30 [ 668.400688][T16073] n_tty_write+0x434/0x1280 [ 668.400700][T16073] file_tty_write.constprop.0+0x503/0x9b0 [ 668.400718][T16073] redirected_tty_write+0xd4/0x120 [ 668.400735][T16073] vfs_write+0x7d3/0x11d0 [ 668.400751][T16073] ksys_write+0x12a/0x250 [ 668.400767][T16073] do_syscall_64+0xcd/0xf80 [ 668.400777][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.400789][T16073] [ 668.400789][T16073] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 668.400805][T16073] _raw_spin_lock_irqsave+0x3a/0x60 [ 668.400831][T16073] serial8250_console_write+0x181/0x1890 [ 668.400844][T16073] console_flush_one_record+0x796/0xc60 [ 668.400861][T16073] console_unlock+0xef/0x240 [ 668.400877][T16073] vprintk_emit+0x407/0x6b0 [ 668.400893][T16073] _printk+0xc7/0x100 [ 668.400905][T16073] register_console+0x823/0x1210 [ 668.400922][T16073] univ8250_console_init+0x5f/0x90 [ 668.400943][T16073] console_init+0x152/0x600 [ 668.400958][T16073] start_kernel+0x298/0x4d0 [ 668.400973][T16073] x86_64_start_reservations+0x18/0x30 [ 668.400989][T16073] x86_64_start_kernel+0x130/0x190 [ 668.401003][T16073] common_startup_64+0x13e/0x148 [ 668.401018][T16073] [ 668.401018][T16073] -> #0 (console_owner){-.-.}-{0:0}: [ 668.401034][T16073] __lock_acquire+0x1669/0x2890 [ 668.401046][T16073] lock_acquire+0x179/0x330 [ 668.401056][T16073] console_lock_spinning_enable+0x72/0x80 [ 668.401073][T16073] console_flush_one_record+0x73f/0xc60 [ 668.401089][T16073] console_unlock+0xef/0x240 [ 668.401103][T16073] vprintk_emit+0x407/0x6b0 [ 668.401118][T16073] _printk+0xc7/0x100 [ 668.401130][T16073] __report_bug+0x3a6/0x520 [ 668.401146][T16073] report_bug+0xb2/0x220 [ 668.401162][T16073] handle_bug+0x127/0x260 [ 668.401173][T16073] exc_invalid_op+0x17/0x50 [ 668.401186][T16073] asm_exc_invalid_op+0x1a/0x20 [ 668.401197][T16073] update_rq_clock+0x34a/0xc70 [ 668.401214][T16073] __schedule+0x212d/0x6150 [ 668.401230][T16073] schedule+0xe7/0x3a0 [ 668.401246][T16073] schedule_timeout+0x257/0x290 [ 668.401261][T16073] __wait_for_common+0x2fc/0x4e0 [ 668.401271][T16073] cpuhp_bringup_ap+0xcb/0x1100 [ 668.401289][T16073] cpuhp_invoke_callback+0x3d5/0xa10 [ 668.401304][T16073] __cpuhp_invoke_callback_range+0x101/0x210 [ 668.401320][T16073] _cpu_up+0x3f5/0x960 [ 668.401336][T16073] cpu_up+0x1bf/0x240 [ 668.401352][T16073] cpu_subsys_online+0x84/0x190 [ 668.401367][T16073] device_online+0x114/0x1c0 [ 668.401384][T16073] online_store+0x145/0x180 [ 668.401402][T16073] dev_attr_store+0x58/0x80 [ 668.401418][T16073] sysfs_kf_write+0xf2/0x150 [ 668.401430][T16073] kernfs_fop_write_iter+0x3af/0x570 [ 668.401448][T16073] do_iter_readv_writev+0x662/0x9e0 [ 668.401462][T16073] vfs_writev+0x35f/0xde0 [ 668.401478][T16073] do_writev+0x132/0x340 [ 668.401493][T16073] do_syscall_64+0xcd/0xf80 [ 668.401503][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.401515][T16073] [ 668.401515][T16073] other info that might help us debug this: [ 668.401515][T16073] [ 668.401519][T16073] Chain exists of: [ 668.401519][T16073] console_owner --> &p->pi_lock --> &rq->__lock [ 668.401519][T16073] [ 668.401537][T16073] Possible unsafe locking scenario: [ 668.401537][T16073] [ 668.401541][T16073] CPU0 CPU1 [ 668.401545][T16073] ---- ---- [ 668.401549][T16073] lock(&rq->__lock); [ 668.401556][T16073] lock(&p->pi_lock); [ 668.401564][T16073] lock(&rq->__lock); [ 668.401573][T16073] lock(console_owner); [ 668.401581][T16073] [ 668.401581][T16073] *** DEADLOCK *** [ 668.401581][T16073] [ 668.401584][T16073] 12 locks held by syz.2.2417/16073: [ 668.401591][T16073] #0: ffff88803bc180f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 668.401627][T16073] #1: ffff888033584420 (sb_writers#7){.+.+}-{0:0}, at: do_writev+0x132/0x340 [ 668.401662][T16073] #2: ffff88805ad07888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 668.401696][T16073] #3: ffff888141ad1c38 (kn->active#192){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 668.401733][T16073] #4: ffffffff8f2ba828 (device_hotplug_lock){+.+.}-{4:4}, at: online_store+0x9a/0x180 [ 668.401768][T16073] #5: ffff8880b8537490 (&dev->mutex){....}-{4:4}, at: device_online+0x27/0x1c0 [ 668.401802][T16073] #6: ffffffff8e269f48 (cpu_add_remove_lock){+.+.}-{4:4}, at: cpu_up+0xbc/0x240 [ 668.401844][T16073] #7: ffffffff8e269e90 (cpu_hotplug_lock){++++}-{0:0}, at: _cpu_up+0x68/0x960 [ 668.401879][T16073] #8: ffffffff8e3bd868 (sparse_irq_lock){+.+.}-{4:4}, at: cpuhp_bringup_ap+0x63/0x1100 [ 668.401915][T16073] #9: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 668.401949][T16073] #10: ffffffff8e3b6f00 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 668.401977][T16073] #11: ffffffff8e3b6f78 (console_srcu){....}-{0:0}, at: console_flush_one_record+0x103/0xc60 [ 668.402009][T16073] [ 668.402009][T16073] stack backtrace: [ 668.402019][T16073] CPU: 0 UID: 0 PID: 16073 Comm: syz.2.2417 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 668.402046][T16073] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 668.402054][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 668.402064][T16073] Call Trace: [ 668.402070][T16073] [ 668.402075][T16073] dump_stack_lvl+0x116/0x1f0 [ 668.402097][T16073] print_circular_bug+0x275/0x340 [ 668.402120][T16073] check_noncircular+0x146/0x160 [ 668.402142][T16073] __lock_acquire+0x1669/0x2890 [ 668.402157][T16073] lock_acquire+0x179/0x330 [ 668.402168][T16073] ? console_lock_spinning_enable+0x61/0x80 [ 668.402185][T16073] ? console_lock_spinning_enable+0x4a/0x80 [ 668.402202][T16073] console_lock_spinning_enable+0x72/0x80 [ 668.402218][T16073] ? console_lock_spinning_enable+0x61/0x80 [ 668.402234][T16073] console_flush_one_record+0x73f/0xc60 [ 668.402253][T16073] ? __pfx_console_flush_one_record+0x10/0x10 [ 668.402270][T16073] ? __lock_acquire+0x436/0x2890 [ 668.402283][T16073] ? is_printk_cpu_sync_owner+0x32/0x40 [ 668.402302][T16073] console_unlock+0xef/0x240 [ 668.402318][T16073] ? __pfx_console_unlock+0x10/0x10 [ 668.402334][T16073] ? do_raw_spin_unlock+0x100/0x230 [ 668.402349][T16073] ? _printk+0xc7/0x100 [ 668.402361][T16073] ? __down_trylock_console_sem+0xb0/0x140 [ 668.402376][T16073] vprintk_emit+0x407/0x6b0 [ 668.402393][T16073] ? __pfx_vprintk_emit+0x10/0x10 [ 668.402410][T16073] ? check_irq_usage+0x1c6/0xbc0 [ 668.402431][T16073] _printk+0xc7/0x100 [ 668.402443][T16073] ? __pfx__printk+0x10/0x10 [ 668.402456][T16073] ? check_path.constprop.0+0x24/0x50 [ 668.402475][T16073] ? __report_bug+0x396/0x520 [ 668.402492][T16073] __report_bug+0x3a6/0x520 [ 668.402509][T16073] ? update_rq_clock+0x34a/0xc70 [ 668.402527][T16073] ? __pfx___report_bug+0x10/0x10 [ 668.402546][T16073] ? rcu_is_watching+0x12/0xc0 [ 668.402566][T16073] ? update_rq_clock+0x34a/0xc70 [ 668.402583][T16073] report_bug+0xb2/0x220 [ 668.402600][T16073] ? update_rq_clock+0x34a/0xc70 [ 668.402617][T16073] handle_bug+0x127/0x260 [ 668.402631][T16073] exc_invalid_op+0x17/0x50 [ 668.402645][T16073] asm_exc_invalid_op+0x1a/0x20 [ 668.402658][T16073] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 668.402676][T16073] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 668.402690][T16073] RSP: 0018:ffffc90003dc73c0 EFLAGS: 00010046 [ 668.402701][T16073] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 668.402710][T16073] RDX: 0000000000000000 RSI: ffffffff8daa5d23 RDI: ffffffff8bf2b780 [ 668.402718][T16073] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff211203a [ 668.402727][T16073] R10: ffffffff908901d7 R11: 0000000000000001 R12: ffffffff90893254 [ 668.402735][T16073] R13: ffffffff8dd668e0 R14: ffff88802f863d00 R15: ffff8880b853adc0 [ 668.402748][T16073] ? pick_task_fair+0x85/0x350 [ 668.402766][T16073] __schedule+0x212d/0x6150 [ 668.402788][T16073] ? __pfx___schedule+0x10/0x10 [ 668.402805][T16073] ? find_held_lock+0x2b/0x80 [ 668.402829][T16073] ? schedule+0x2d7/0x3a0 [ 668.402849][T16073] schedule+0xe7/0x3a0 [ 668.402868][T16073] schedule_timeout+0x257/0x290 [ 668.402886][T16073] ? __pfx_schedule_timeout+0x10/0x10 [ 668.402906][T16073] ? mark_held_locks+0x49/0x80 [ 668.402918][T16073] ? _raw_spin_unlock_irq+0x23/0x50 [ 668.402937][T16073] __wait_for_common+0x2fc/0x4e0 [ 668.402949][T16073] ? __pfx_schedule_timeout+0x10/0x10 [ 668.402966][T16073] ? __pfx___wait_for_common+0x10/0x10 [ 668.402979][T16073] ? mark_held_locks+0x49/0x80 [ 668.402990][T16073] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 668.403009][T16073] ? lockdep_hardirqs_on+0x7c/0x110 [ 668.403021][T16073] cpuhp_bringup_ap+0xcb/0x1100 [ 668.403039][T16073] ? __pfx_cpuhp_bringup_ap+0x10/0x10 [ 668.403057][T16073] ? rcu_is_watching+0x12/0xc0 [ 668.403076][T16073] ? __pfx_cpuhp_bringup_ap+0x10/0x10 [ 668.403095][T16073] ? __pfx_cpuhp_bringup_ap+0x10/0x10 [ 668.403112][T16073] cpuhp_invoke_callback+0x3d5/0xa10 [ 668.403129][T16073] ? __pfx_cpuhp_bringup_ap+0x10/0x10 [ 668.403148][T16073] __cpuhp_invoke_callback_range+0x101/0x210 [ 668.403167][T16073] ? __pfx___cpuhp_invoke_callback_range+0x10/0x10 [ 668.403187][T16073] _cpu_up+0x3f5/0x960 [ 668.403205][T16073] cpu_up+0x1bf/0x240 [ 668.403223][T16073] cpu_subsys_online+0x84/0x190 [ 668.403240][T16073] ? __pfx_cpu_subsys_online+0x10/0x10 [ 668.403255][T16073] device_online+0x114/0x1c0 [ 668.403274][T16073] ? __pfx_online_store+0x10/0x10 [ 668.403292][T16073] online_store+0x145/0x180 [ 668.403311][T16073] ? __pfx_online_store+0x10/0x10 [ 668.403331][T16073] ? __print_lock_name+0x31/0xe0 [ 668.403348][T16073] ? sysfs_file_kobj+0xe4/0x290 [ 668.403361][T16073] dev_attr_store+0x58/0x80 [ 668.403379][T16073] ? __pfx_dev_attr_store+0x10/0x10 [ 668.403397][T16073] sysfs_kf_write+0xf2/0x150 [ 668.403410][T16073] kernfs_fop_write_iter+0x3af/0x570 [ 668.403429][T16073] ? __pfx_sysfs_kf_write+0x10/0x10 [ 668.403442][T16073] do_iter_readv_writev+0x662/0x9e0 [ 668.403461][T16073] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 668.403481][T16073] vfs_writev+0x35f/0xde0 [ 668.403498][T16073] ? __mutex_lock+0x1291/0x1ca0 [ 668.403510][T16073] ? __mutex_lock+0x1291/0x1ca0 [ 668.403523][T16073] ? __pfx_vfs_writev+0x10/0x10 [ 668.403540][T16073] ? fdget_pos+0x2a2/0x370 [ 668.403565][T16073] ? __fget_files+0x20e/0x3c0 [ 668.403584][T16073] ? do_writev+0x132/0x340 [ 668.403600][T16073] do_writev+0x132/0x340 [ 668.403617][T16073] ? __pfx_do_writev+0x10/0x10 [ 668.403636][T16073] do_syscall_64+0xcd/0xf80 [ 668.403649][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.403662][T16073] RIP: 0033:0x7fdeae18f7c9 [ 668.403675][T16073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.403688][T16073] RSP: 002b:00007fdeaf0a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 668.403701][T16073] RAX: ffffffffffffffda RBX: 00007fdeae3e6090 RCX: 00007fdeae18f7c9 [ 668.403711][T16073] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 668.403719][T16073] RBP: 00007fdeae213f91 R08: 0000000000000000 R09: 0000000000000000 [ 668.403728][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.403736][T16073] R13: 00007fdeae3e6128 R14: 00007fdeae3e6090 R15: 00007fffa16c4748 [ 668.403748][T16073] [ 669.915336][T16073] WARNING: kernel/sched/sched.h:1549 at update_rq_clock+0x34a/0xc70, CPU#0: syz.2.2417/16073 [ 669.925587][T16073] Modules linked in: [ 669.929478][T16073] CPU: 0 UID: 0 PID: 16073 Comm: syz.2.2417 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 669.940399][T16073] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 669.950436][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 669.960473][T16073] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 669.966100][T16073] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 669.985717][T16073] RSP: 0018:ffffc90003dc73c0 EFLAGS: 00010046 [ 669.991765][T16073] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 669.999720][T16073] RDX: 0000000000000000 RSI: ffffffff8daa5d23 RDI: ffffffff8bf2b780 [ 670.007673][T16073] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff211203a [ 670.015628][T16073] R10: ffffffff908901d7 R11: 0000000000000001 R12: ffffffff90893254 [ 670.023580][T16073] R13: ffffffff8dd668e0 R14: ffff88802f863d00 R15: ffff8880b853adc0 [ 670.031531][T16073] FS: 00007fdeaf0a96c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 670.040440][T16073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 670.047003][T16073] CR2: 0000001b316f3ff8 CR3: 000000008009e000 CR4: 00000000003526f0 [ 670.054957][T16073] Call Trace: [ 670.058219][T16073] [ 670.061128][T16073] ? pick_task_fair+0x85/0x350 [ 670.065880][T16073] __schedule+0x212d/0x6150 [ 670.070374][T16073] ? __pfx___schedule+0x10/0x10 [ 670.075207][T16073] ? find_held_lock+0x2b/0x80 [ 670.079866][T16073] ? schedule+0x2d7/0x3a0 [ 670.084180][T16073] schedule+0xe7/0x3a0 [ 670.088235][T16073] schedule_timeout+0x257/0x290 [ 670.093068][T16073] ? __pfx_schedule_timeout+0x10/0x10 [ 670.098423][T16073] ? mark_held_locks+0x49/0x80 [ 670.103162][T16073] ? _raw_spin_unlock_irq+0x23/0x50 [ 670.108345][T16073] __wait_for_common+0x2fc/0x4e0 [ 670.113258][T16073] ? __pfx_schedule_timeout+0x10/0x10 [ 670.118612][T16073] ? __pfx___wait_for_common+0x10/0x10 [ 670.124052][T16073] ? mark_held_locks+0x49/0x80 [ 670.128797][T16073] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 670.134676][T16073] ? lockdep_hardirqs_on+0x7c/0x110 [ 670.139853][T16073] cpuhp_bringup_ap+0xcb/0x1100 [ 670.144690][T16073] ? __pfx_cpuhp_bringup_ap+0x10/0x10 [ 670.150145][T16073] ? rcu_is_watching+0x12/0xc0 [ 670.154892][T16073] ? __pfx_cpuhp_bringup_ap+0x10/0x10 [ 670.160257][T16073] ? __pfx_cpuhp_bringup_ap+0x10/0x10 [ 670.165613][T16073] cpuhp_invoke_callback+0x3d5/0xa10 [ 670.170887][T16073] ? __pfx_cpuhp_bringup_ap+0x10/0x10 [ 670.176245][T16073] __cpuhp_invoke_callback_range+0x101/0x210 [ 670.182221][T16073] ? __pfx___cpuhp_invoke_callback_range+0x10/0x10 [ 670.188727][T16073] _cpu_up+0x3f5/0x960 [ 670.192820][T16073] cpu_up+0x1bf/0x240 [ 670.196788][T16073] cpu_subsys_online+0x84/0x190 [ 670.201626][T16073] ? __pfx_cpu_subsys_online+0x10/0x10 [ 670.207073][T16073] device_online+0x114/0x1c0 [ 670.211662][T16073] ? __pfx_online_store+0x10/0x10 [ 670.216706][T16073] online_store+0x145/0x180 [ 670.221218][T16073] ? __pfx_online_store+0x10/0x10 [ 670.226238][T16073] ? __print_lock_name+0x31/0xe0 [ 670.231250][T16073] ? sysfs_file_kobj+0xe4/0x290 [ 670.236083][T16073] dev_attr_store+0x58/0x80 [ 670.240573][T16073] ? __pfx_dev_attr_store+0x10/0x10 [ 670.245765][T16073] sysfs_kf_write+0xf2/0x150 [ 670.250337][T16073] kernfs_fop_write_iter+0x3af/0x570 [ 670.255609][T16073] ? __pfx_sysfs_kf_write+0x10/0x10 [ 670.260992][T16073] do_iter_readv_writev+0x662/0x9e0 [ 670.266275][T16073] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 670.271983][T16073] vfs_writev+0x35f/0xde0 [ 670.276297][T16073] ? __mutex_lock+0x1291/0x1ca0 [ 670.281130][T16073] ? __mutex_lock+0x1291/0x1ca0 [ 670.285962][T16073] ? __pfx_vfs_writev+0x10/0x10 [ 670.290796][T16073] ? fdget_pos+0x2a2/0x370 [ 670.295204][T16073] ? __fget_files+0x20e/0x3c0 [ 670.299871][T16073] ? do_writev+0x132/0x340 [ 670.304272][T16073] do_writev+0x132/0x340 [ 670.308588][T16073] ? __pfx_do_writev+0x10/0x10 [ 670.313369][T16073] do_syscall_64+0xcd/0xf80 [ 670.317852][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.323736][T16073] RIP: 0033:0x7fdeae18f7c9 [ 670.328133][T16073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.347879][T16073] RSP: 002b:00007fdeaf0a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 670.356299][T16073] RAX: ffffffffffffffda RBX: 00007fdeae3e6090 RCX: 00007fdeae18f7c9 [ 670.364271][T16073] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 670.372233][T16073] RBP: 00007fdeae213f91 R08: 0000000000000000 R09: 0000000000000000 [ 670.380183][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.388136][T16073] R13: 00007fdeae3e6128 R14: 00007fdeae3e6090 R15: 00007fffa16c4748 [ 670.396112][T16073] [ 670.399124][T16073] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 670.406387][T16073] CPU: 0 UID: 0 PID: 16073 Comm: syz.2.2417 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 670.417317][T16073] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 670.427353][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 670.437395][T16073] Call Trace: [ 670.440681][T16073] [ 670.443596][T16073] dump_stack_lvl+0x3d/0x1f0 [ 670.448183][T16073] vpanic+0x640/0x6f0 [ 670.452150][T16073] ? update_rq_clock+0x34a/0xc70 [ 670.457076][T16073] panic+0xca/0xd0 [ 670.460780][T16073] ? __pfx_panic+0x10/0x10 [ 670.465180][T16073] check_panic_on_warn+0xab/0xb0 [ 670.470103][T16073] __warn+0x108/0x3c0 [ 670.474066][T16073] __report_bug+0x2a0/0x520 [ 670.478555][T16073] ? update_rq_clock+0x34a/0xc70 [ 670.483481][T16073] ? __pfx___report_bug+0x10/0x10 [ 670.488492][T16073] ? rcu_is_watching+0x12/0xc0 [ 670.493257][T16073] ? update_rq_clock+0x34a/0xc70 [ 670.498196][T16073] report_bug+0xb2/0x220 [ 670.502435][T16073] ? update_rq_clock+0x34a/0xc70 [ 670.507368][T16073] handle_bug+0x127/0x260 [ 670.511698][T16073] exc_invalid_op+0x17/0x50 [ 670.516189][T16073] asm_exc_invalid_op+0x1a/0x20 [ 670.521026][T16073] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 670.526564][T16073] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 670.546156][T16073] RSP: 0018:ffffc90003dc73c0 EFLAGS: 00010046 [ 670.552209][T16073] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 670.560179][T16073] RDX: 0000000000000000 RSI: ffffffff8daa5d23 RDI: ffffffff8bf2b780 [ 670.568134][T16073] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff211203a [ 670.576088][T16073] R10: ffffffff908901d7 R11: 0000000000000001 R12: ffffffff90893254 [ 670.584059][T16073] R13: ffffffff8dd668e0 R14: ffff88802f863d00 R15: ffff8880b853adc0 [ 670.592027][T16073] ? pick_task_fair+0x85/0x350 [ 670.596780][T16073] __schedule+0x212d/0x6150 [ 670.601276][T16073] ? __pfx___schedule+0x10/0x10 [ 670.606115][T16073] ? find_held_lock+0x2b/0x80 [ 670.610776][T16073] ? schedule+0x2d7/0x3a0 [ 670.615090][T16073] schedule+0xe7/0x3a0 [ 670.619155][T16073] schedule_timeout+0x257/0x290 [ 670.623988][T16073] ? __pfx_schedule_timeout+0x10/0x10 [ 670.629345][T16073] ? mark_held_locks+0x49/0x80 [ 670.634102][T16073] ? _raw_spin_unlock_irq+0x23/0x50 [ 670.639292][T16073] __wait_for_common+0x2fc/0x4e0 [ 670.644217][T16073] ? __pfx_schedule_timeout+0x10/0x10 [ 670.649597][T16073] ? __pfx___wait_for_common+0x10/0x10 [ 670.655053][T16073] ? mark_held_locks+0x49/0x80 [ 670.659801][T16073] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 670.665664][T16073] ? lockdep_hardirqs_on+0x7c/0x110 [ 670.670874][T16073] cpuhp_bringup_ap+0xcb/0x1100 [ 670.675851][T16073] ? __pfx_cpuhp_bringup_ap+0x10/0x10 [ 670.681315][T16073] ? rcu_is_watching+0x12/0xc0 [ 670.686084][T16073] ? __pfx_cpuhp_bringup_ap+0x10/0x10 [ 670.691493][T16073] ? __pfx_cpuhp_bringup_ap+0x10/0x10 [ 670.696858][T16073] cpuhp_invoke_callback+0x3d5/0xa10 [ 670.702137][T16073] ? __pfx_cpuhp_bringup_ap+0x10/0x10 [ 670.707500][T16073] __cpuhp_invoke_callback_range+0x101/0x210 [ 670.713500][T16073] ? __pfx___cpuhp_invoke_callback_range+0x10/0x10 [ 670.719992][T16073] _cpu_up+0x3f5/0x960 [ 670.724051][T16073] cpu_up+0x1bf/0x240 [ 670.728034][T16073] cpu_subsys_online+0x84/0x190 [ 670.732869][T16073] ? __pfx_cpu_subsys_online+0x10/0x10 [ 670.738307][T16073] device_online+0x114/0x1c0 [ 670.742881][T16073] ? __pfx_online_store+0x10/0x10 [ 670.747890][T16073] online_store+0x145/0x180 [ 670.752380][T16073] ? __pfx_online_store+0x10/0x10 [ 670.757475][T16073] ? __print_lock_name+0x31/0xe0 [ 670.762397][T16073] ? sysfs_file_kobj+0xe4/0x290 [ 670.767241][T16073] dev_attr_store+0x58/0x80 [ 670.771733][T16073] ? __pfx_dev_attr_store+0x10/0x10 [ 670.776916][T16073] sysfs_kf_write+0xf2/0x150 [ 670.781487][T16073] kernfs_fop_write_iter+0x3af/0x570 [ 670.786757][T16073] ? __pfx_sysfs_kf_write+0x10/0x10 [ 670.791935][T16073] do_iter_readv_writev+0x662/0x9e0 [ 670.797117][T16073] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 670.802824][T16073] vfs_writev+0x35f/0xde0 [ 670.807143][T16073] ? __mutex_lock+0x1291/0x1ca0 [ 670.811975][T16073] ? __mutex_lock+0x1291/0x1ca0 [ 670.816807][T16073] ? __pfx_vfs_writev+0x10/0x10 [ 670.821640][T16073] ? fdget_pos+0x2a2/0x370 [ 670.826050][T16073] ? __fget_files+0x20e/0x3c0 [ 670.830713][T16073] ? do_writev+0x132/0x340 [ 670.835116][T16073] do_writev+0x132/0x340 [ 670.839441][T16073] ? __pfx_do_writev+0x10/0x10 [ 670.844220][T16073] do_syscall_64+0xcd/0xf80 [ 670.848729][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.854628][T16073] RIP: 0033:0x7fdeae18f7c9 [ 670.859035][T16073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.878638][T16073] RSP: 002b:00007fdeaf0a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 670.887042][T16073] RAX: ffffffffffffffda RBX: 00007fdeae3e6090 RCX: 00007fdeae18f7c9 [ 670.895087][T16073] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 670.903048][T16073] RBP: 00007fdeae213f91 R08: 0000000000000000 R09: 0000000000000000 [ 670.911021][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.918986][T16073] R13: 00007fdeae3e6128 R14: 00007fdeae3e6090 R15: 00007fffa16c4748 [ 670.926955][T16073] [ 670.930002][T16073] Kernel Offset: disabled [ 670.934310][T16073] Rebooting in 86400 seconds..