last executing test programs: 9m40.192846674s ago: executing program 3 (id=87): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) (async) timer_create$auto(0x803, 0x0, 0x0) (async) semctl$auto(0x0, 0x0, 0x2, 0xf) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) rmdir$auto(&(0x7f0000000080)='}[,&*}\x00') fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) (async) unshare$auto(0x8000000000000001) (async) preadv2$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x5) (async) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r2) write$auto(0x3, 0x0, 0xfffffdef) 9m39.195032867s ago: executing program 3 (id=89): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_udc.3/driver_override\x00', 0xe2685, 0x0) kexec_load$auto(0x2000000005, 0x2, &(0x7f0000000040)={@buf=0x0, 0x800c000, 0x40000000, 0x800c000}, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd70941214f9274fcdb10000000000000002ff070004"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) socket(0xa, 0x3, 0xff) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x81018101}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) r8 = epoll_create$auto(0x8001) ioctl$auto_CEC_RECEIVE(r8, 0xc0386106, &(0x7f0000000180)={0x7fffffffffffffff, 0x2, 0x7ff, 0xe0, 0x9, 0xa31d, "abda54a2806bb50ede3f354348b5df5c", 0xf4, 0x4, 0x7e, 0x9, 0x5, 0x2, 0x1}) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r2) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x12c, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0xfe, 0x129, "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"}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x1}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/nr15/queues/tx-0/tx_maxrate\x00', 0x10b942, 0x0) r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r11, r10, 0x0, 0x7) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/4105, 0x1009) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x7, 0x4, 0x9, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x3}, 0x3, 0x5, 0x4, @raw=0x1ff, @reserved="b1ea6985ff9d79893916e465a933fe72ea1338383d75362878f1bca9026785465be30df39b4799c73ed765d9349a3573eb6595b7cdebe133e32693cdf6875da1356401ea8f174ce6bce5f9fe2ab87c639541d632d23bee248101b2953407195cbb85bb1cfd7bea80a8c4891c77a8965fe9c23d4100", "7a9fc190334fdd7334022bd212b67212f0bcab84b1007ce8cbce0bb32777702b8d7c2d000f00040000001000"}) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000340)='\n', 0x6}, 0x1) 9m36.550963018s ago: executing program 3 (id=97): r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (rerun: 32) r1 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) (async, rerun: 32) mlock$auto(0xfbea, 0x10004) (async, rerun: 32) madvise$auto(0x8000, 0x87fff, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto_EXT4_IOC_GETVERSION_OLD(0xffffffffffffffff, 0x80087601, &(0x7f00000000c0)="28aa740c20baa35ae66652b9a2b4a030b0629c4598722aea14f0b9986e02b619ae36afc3cc8b235677a43c398c72987e4669e29bb003c187ce56c03308f15223fd9b37806cc059cecec38aab5bc3cd4e395a4c2655a8a6a66ebeaab3735a3741c98ac882975c8802d0ba048ec06fd893bb2e0d09bb85ac819bef8b9f39b2632506986e0b3f0cd5c198822cc1862dda6ef739d4ea45eb9de090c0f114a0e5df27aff12791f3205d03d2062aba5291d5f0322ff88913025c6fc8181fadc8695913b500b2bbb1b70169d147e8fb5fe7176b238ee2609f9bb9001fe50f3cf0717f607c84057755cd33f5d5fc6c") syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f0000000040)='/dev/kvm\x00', 0xfffffffc) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) (async, rerun: 64) r2 = setfsuid$auto(0x0) (rerun: 64) setuid$auto(r2) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) kcmp$auto(0x0, 0x0, 0x7, 0xffffffffffffffff, r3) (async) sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80c0) (async) mkdir$auto(0x0, 0x0) mmap$auto(0xff, 0x4020009, 0xdf, 0xeb1, 0x401, 0x2) (async, rerun: 64) connect$auto(r0, 0x0, 0x8) (rerun: 64) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x3b70, 0x0) (async) ioctl$auto_IMADDTIMER(r0, 0x80044940, 0x0) (async) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x2080, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13002cbd70c38a3d5f0e76bda70008000300", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) (async) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000002980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002940)={&(0x7f00000017c0)={0x1144, r5, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "793f99b67ffe2d5e8872ea2421ed08765e378ac82e78fa7f"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x4}, @NL80211_ATTR_TX_RATES={0x1020, 0x5a, 0x0, 0x1, [@typed={0x4, 0xf7}, @generic="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", @typed={0xf, 0x19, 0x0, 0x0, @str='/dev/iommu\x00'}, @typed={0x8, 0x21, 0x0, 0x0, @pid=r1}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xbf, 0xbb, "8784556efa45987aa738fa742b4ae0ba21350896e1b50fcbfc57edb9a2141e752eee285d23c38daec1979f75357397df2e1c94f2984e8064698de15435f0973172c4b3758a4cb5980a77c51a56f461a458ac645ed12eabcb4c894140c77654f41a935b05d8d7843f01a0861bf0e50d71842cb9a65e99f0899a793efc5ea22ad08e8fe6bef1feb439790f9a496271f00f0b9eca1c4059845f490adcd977cce52656d4c2d38b47324b06fc3909cbeb19a3b77223b87fc2fcb936dc27"}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x800000}]}, 0x1144}, 0x1, 0x0, 0x0, 0x1}, 0x4008050) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 9m35.329264674s ago: executing program 3 (id=101): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0xe00}, 0x40000) 9m32.604815568s ago: executing program 3 (id=110): mmap$auto(0x0, 0x20009, 0x4000000000cf, 0xeb1, 0xffffffffffffffff, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000600fe8000"}, 0x1f) 9m27.363894125s ago: executing program 3 (id=131): socket(0xa, 0x801, 0x84) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x1) setfsuid$auto(0xee00) set_tid_address$auto(0x0) r1 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$auto(0x3, 0x0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = socket(0xa, 0x3, 0x3b) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, 0x0, 0x24040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x68, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x24, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x18, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) r6 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000200), r4) sendmsg$auto_NET_DM_CMD_STOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0xffff}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x9}, @NET_DM_ATTR_SW_DROPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x8040) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x71}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x884) sendmsg$auto_NET_DM_CMD_CONFIG_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_UNSPEC={0xa8, 0x0, "5623adcaad55032742e6b1b420053c75432bb7e2d9549e249056004235c572c8771f9225c6c36d8a6ad20895a2bc3558bd33b4006bab12488e4e4f8d1c72a25faa8f816642b247ffe5ae37920cea5070be33e32e9e54a6985e0d5ebf940080152b6e07ee5f6deec85db7e21cf764b317e4e4b86e4684d1c735debb45063dd0d532561a8b8e947328eaa00d0d33fb5a3da569af0ae549b3c6a9333187874e859097d4f3ac"}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x10001}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x20004001) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r0, 0x4004ae8b, 0x0) r7 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$auto_component_list_fops_(r7, &(0x7f0000000100)=""/78, 0x4e) 9m10.793513595s ago: executing program 32 (id=131): socket(0xa, 0x801, 0x84) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x1) setfsuid$auto(0xee00) set_tid_address$auto(0x0) r1 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$auto(0x3, 0x0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = socket(0xa, 0x3, 0x3b) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, 0x0, 0x24040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x68, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x24, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x18, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) r6 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000200), r4) sendmsg$auto_NET_DM_CMD_STOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0xffff}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x9}, @NET_DM_ATTR_SW_DROPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x8040) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x71}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x884) sendmsg$auto_NET_DM_CMD_CONFIG_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_UNSPEC={0xa8, 0x0, "5623adcaad55032742e6b1b420053c75432bb7e2d9549e249056004235c572c8771f9225c6c36d8a6ad20895a2bc3558bd33b4006bab12488e4e4f8d1c72a25faa8f816642b247ffe5ae37920cea5070be33e32e9e54a6985e0d5ebf940080152b6e07ee5f6deec85db7e21cf764b317e4e4b86e4684d1c735debb45063dd0d532561a8b8e947328eaa00d0d33fb5a3da569af0ae549b3c6a9333187874e859097d4f3ac"}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x10001}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x20004001) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r0, 0x4004ae8b, 0x0) r7 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$auto_component_list_fops_(r7, &(0x7f0000000100)=""/78, 0x4e) 1m48.823806863s ago: executing program 1 (id=1915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create$auto(0x4) epoll_ctl$auto(r1, 0x40008, r0, 0x0) ioctl$auto_IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x545c, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x118, r3, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0xfc, 0x3, 0x0, 0x1, [@nested={0xf8, 0x1, 0x0, 0x1, [@nested={0xc, 0x106, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @fd}]}, @typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0xe0, 0x30, 0x0, 0x1, [@nested={0xb5, 0x140, 0x0, 0x1, [@generic="403ea46c19c89f83d25bd65b71150d4d8de4b2a49dcb57899cb256269401b3157f2dfaee2a67f38af8095ece6be265551e58b47d8982718dd766200195a1aafe4cbcf7b4007f7a34a7df06f4f0488fc4acb758cf8d5aeb1ce5fa2d3ec0d76372f730fe0f5d799cd1e618a7ec42926bdb3c9d6c952dad25f944f3968faef3fb030d1bde168c61d88ea2b53e52af655df3df88d03ba0f6d3426493b8a9c375c2d0e0d5b4fd9e2c79e113d89785a32f3628c5"]}, @typed={0xe, 0xd4, 0x0, 0x0, @str='\x9f+\x95^-\'}\\[\x00'}, @typed={0xe, 0xff, 0x0, 0x0, @str='\x9f+\x95^-\'}\xf9B\xb3'}, @typed={0x4, 0x14a}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)) readv$auto(r4, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) 1m48.478228568s ago: executing program 1 (id=1917): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) fanotify_init$auto(0x1f53, 0x2000000000002) open(0x0, 0x4242, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = epoll_create$auto(0x8800001) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) epoll_ctl$auto(r1, 0x1, r0, 0x0) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) fcntl$auto_F_GETPIPE_SZ(r2, 0x408, 0x4) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop4\x00', 0x141100, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sysfs$auto(0x2, 0x4a, 0x0) r3 = fsopen$auto(0x0, 0x1) read$auto_stats_fops_2(r3, &(0x7f0000000280)=""/167, 0xa7) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x180, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_VIF_RADIO_MASK={0x8}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xff}, @NL80211_ATTR_FILS_DISCOVERY={0xe8, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_TMPL={0xc3, 0x3, "3b46c91561a05a106688654d9678aabb1b055405552d15e6cad59e361ea6724b8eabc6e85a3abf88dae634c8a9ff4ee317f656dc465d5151c0f61da1399ae69297852aea3d75c563138a06e3de252037af6b0cf23a1b796595c45a0ff6f524969504de123547bff26d195913a96b053c39e98f8ab2ecbcda799448d20cec7ee09adc76627c1ee4212c3a20e733ed88eb6c6000024717e6038f253a950271c29c4d024b574180bf0c63e6674160493c75a7334a4ab49dd37159b98e79a40099"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0xb45}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x1}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0xffffffff}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0xa}]}, @NL80211_ATTR_MBSSID_ELEMS={0x55, 0x133, 0x0, 0x1, [@typed={0x8, 0x142, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}}, @generic="5724710430665511008c105dc48ac3eb72fbdf3dc6ad4a0b1c37ddfa67d2f0f306e68a93d739e0e411687decafdaeb94ef341a2ce67636a8ed994b9c4f9018ee90dccfd32effcea8e2"]}, @NL80211_ATTR_FTM_RESPONDER={0x1c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x16, 0x3, "b78442bae3b81dfb353a0544254c8f529092"}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4008081}, 0x4000) close_range$auto(0x2, 0x8, 0x0) 1m48.3281062s ago: executing program 1 (id=1919): r0 = socket(0x15, 0x5, 0x3) r1 = pidfd_open$auto(0x1, 0x0) socket(0x1d, 0x3, 0x1) setns(r1, 0x60020000) socket(0x1d, 0x3, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000380)={0x57c, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_MASK={0x63, 0xd7, "88971e5cf4917e0c8538bac323512c70c1456c6d605429dd8cf1375ca1cad439cc6d7c755f0290d467e5587aa6ed7f709d672af5ccfdccc57065469b9006edeb0c94c1fdb06476b05b104000a568608f7b53017aa57d158edf2124d3513fce"}, @NL80211_ATTR_AUTH_DATA={0xdd, 0x9c, "2c26b515091231a7204afaec6918826a4daeaf0e22052923cdd758793c5d0b2f76c0e1c6ac985af349143be51c29f99c92a6b9d2d213f6fbb7ce9faf4256826840176f3b6c36fec5553c3fb3fee17662196086bb5677214ba9e9727b65c25a8f7aabeb0e573a2bbab5342c221d7c1f34c8584b382cf24eb2c48860fd06b5ee1bffa99212937e5c6eb1d6b85b2345aa0deec5dcd818cd68762c29ca670412d6fffabfca1025e13dc40583b55d0d39c29c31aeeb7e7495da7e7c29f0fb8e7f78e40038052ffab4322f7b546ed862135a0af5f351cad87b55b833"}, @NL80211_ATTR_TX_RATES={0x159, 0x5a, 0x0, 0x1, [@generic="f9cf4ff3231959e98f5d6102fb59e2ac8b4be1fe9af733670223a2d7055019e9b60f45bcdbc69badbe77b07dffea94301059fd476f2e70ab33e17f6374688add379ded6dd6bc56887fe91e68c0a9436f149605990e81524c3a9a9f5381d11e4bb63a93cc4d37a2c2205f645511a4b921ef", @generic="9fb320d170c6609007078d1e5504cad94fb3676adb006d8ad0f3491bb668f48325498d628d1e3ad43acc131fb835977a12a94d611ccf1831b5a135e289f19c096dd682a903cd56b311bf9e4d68508f5ec1988a2a53712e768a1751f6fa3ed4bec7f2c1f45878a3863918395fc0eaa6f9569363dd72b95b1000462274a4d52fa036ef67205acc334da2362726d1b4dfaa53795b320d827ffc64f23766ef2cfefdd732075d4818f4805eefea60b810849bc2bd485fd8c3680f4466a443c642007d197d9070e78ae52df25eed2504783e55c2151bf01cd149a959416657a2a803340866c243"]}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb7, 0xac, "eab3dcb6eea1cd264e33d9955cb89f9f77717e3245191aead0e0d6040b6f1646d36acc5c30781272553cce6327cf0373813ec3553ccb9600690afd7c158cde1992a29e733b64ced65fbad98b07aa700d611b01cb126fb31de24d51c45dd307322bbfe9b7cb382973d9ffd323a6077f0d41739dcfd6f1d01991fce109950eea81a7f6207a961fa66ee192aaf81799470958ec3e70bf11fe1c45cc06b668adfca5a03dd8b5f079f7af24ec02aaccad13c9a685fc"}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0xa}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x67a}, @NL80211_ATTR_VHT_CAPABILITY={0x1d, 0x9d, "764039714fd352e7872966dd49f63db5b049f8e5dec0edf987"}, @NL80211_ATTR_FILS_ERP_REALM={0xea, 0xfa, "ab7a491130b067f412bdb26026f19b264d624f52a1d68e7939481c9905026e413ecc1becd67f8df3f1e71004421f52377e3a4d35e92eaf4504ae1be139d34b7a9d87f1064c4bc0a4e19d4f8cd9bbd1fe8c59fc0028e2bdfd75d9707ea00316230e3066cd3d3dc6bc35ec2215f56d5855e213cf817b652123136d3ed150aea9fd8628039c854947d340b7922e049efcf6bae6771c730b5aa7e41a354765d58cba5877e435145a4fd0ecba8e9ac742722943956b74bb56a174b334fecebda2c0d6847e4ea40b2f68013996fd8c3c92088d459df4faf72beb12a9245ae83505be18d2fb909103b6"}, @NL80211_ATTR_PREV_BSSID={0xe5, 0x4f, "84f32fdbadd91eac2babe4522ea99d0bb2789674a4176953b1120d8f2fae232594557aa43407ac5793b0accce74924a28c25ef735954c0976a9556ed6924a9d4a98a9e31ff872cf3b03f8ed25a962ad647439c6bb40faa34c0ce5ca2a3f1d3205a78290d90b9770dd795f519e547f4f234ddefd9654e9d718da5c2236d839490ef484aafd7f8e442832bdf94e38420fcaa5125f7f559844eb3c17f3b0ee44e15d55b1ebf435a93cff9b6c25a4695f360912c6dff6a3c253a72b0d6f0a74e2432c47a626bd4ea1a82a94fbf1da74b746725cfede336a4b16c40cdc5559295825092"}]}, 0x57c}, 0x1, 0x0, 0x0, 0x840}, 0x50) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x501100, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x40, 0x801ffdf, 0xffffffff, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3b9, 0x0, 0x0, 0x0, 0xdc1, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) 1m47.988133912s ago: executing program 1 (id=1923): socket(0xa, 0x801, 0x84) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x1) setfsuid$auto(0xee00) set_tid_address$auto(0x0) r1 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$auto(0x3, 0x0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = socket(0xa, 0x3, 0x3b) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, 0x0, 0x24040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x68, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x24, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x18, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) r6 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000200), r4) sendmsg$auto_NET_DM_CMD_STOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0xffff}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_QUEUE_LEN={0x8, 0xb, 0x9}, @NET_DM_ATTR_SW_DROPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x8040) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x884) sendmsg$auto_NET_DM_CMD_CONFIG_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_UNSPEC={0xa8, 0x0, "5623adcaad55032742e6b1b420053c75432bb7e2d9549e249056004235c572c8771f9225c6c36d8a6ad20895a2bc3558bd33b4006bab12488e4e4f8d1c72a25faa8f816642b247ffe5ae37920cea5070be33e32e9e54a6985e0d5ebf940080152b6e07ee5f6deec85db7e21cf764b317e4e4b86e4684d1c735debb45063dd0d532561a8b8e947328eaa00d0d33fb5a3da569af0ae549b3c6a9333187874e859097d4f3ac"}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x10001}, @NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x20004001) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r0, 0x4004ae8b, 0x0) r7 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$auto_component_list_fops_(r7, &(0x7f0000000100)=""/78, 0x4e) 1m46.698816603s ago: executing program 1 (id=1927): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_DP_ATTR_USER_FEATURES={0x0, 0x5, 0xffff}]}, 0xffffffffffffffc7}, 0x1, 0x0, 0x0, 0x20040cc4}, 0x4004450) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:04.0/resource0\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)='7', 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x1000, 0xffffffffffff0006, 0x19) madvise$auto(0x6592, 0x5, 0x5) 1m46.479488617s ago: executing program 1 (id=1929): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0xa, 0x9) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0xb, 0x1, 'dummy0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x9}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041040}, 0x44c0) unshare$auto(0x40000080) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1c, 0x0) r1 = fsopen$auto(0x0, 0x1) setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0xc0202, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0x4) close_range$auto(r1, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x1000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 1m31.388812786s ago: executing program 33 (id=1929): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0xa, 0x9) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0xb, 0x1, 'dummy0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x9}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041040}, 0x44c0) unshare$auto(0x40000080) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1c, 0x0) r1 = fsopen$auto(0x0, 0x1) setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0xc0202, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0x4) close_range$auto(r1, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x1000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 6.810621308s ago: executing program 0 (id=2420): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) r1 = getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_BINDTOIFINDEX(r2, 0x1, 0x3e, &(0x7f0000000080)='/dev/audio1\x00', &(0x7f00000000c0)=0x8) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, 0x0, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0x381, 0x6, 0x8001, 0x800010, 0x6, 0x10001, 0xefe, 0xfffffffa, 0x5, 0x8001, 0x62f, 0x101, 0x4, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x9, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x34b5, 0xfff, 0x5, 0x4, 0x2, 0x1000, 0x9, 0x3, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x5, 0x4, 0x80, 0x6ed, 0x0, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x4, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78e, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x4, 0x5, 0xfffff43e, 0x0, 0x4f000, 0xfe, 0x5, 0x4, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xf2, 0x0, 0x7fffffff, 0x7f77, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x0, 0x5, 0x1000, 0x1, 0x7, 0x400, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) io_uring_setup$auto(0x3, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x403c6f2b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto(r1, &(0x7f0000000640)={&(0x7f0000000400)="d48842bd8c3e0a244af1fbf41be564171d44fd653b1a120d482a433b9042ba2eee646acbd8583c24b70bd2026d087fa9ec3b3801285e61c3680cba76e69419a3e1b41c88b8dca2954f27541a0bdec26c4c9080", 0x2, &(0x7f0000000580)={&(0x7f0000000480)="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", 0x4}, 0x2, &(0x7f00000005c0)="fc2d4abe7a9517d8c7a76ae3e78faf948badb78eb0753ef19f7b713f2817a761f859eb3110ce3eea3780b0b1034d05c130536698188451d20dea595b00a0d23ac498c3c63fd7f23fa7215a6fcf20ef266e35bb7b65d0ae79109a14a74a228e686c5a922bd30bbb2b2bed80f9db4db7c6", 0x6, 0x80000001}, 0x6503) acct$auto(&(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/fo\"mat\x00') sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, 0x0, 0x4048000) 6.4323254s ago: executing program 0 (id=2425): r0 = prctl$auto_PR_SYS_DISPATCH_OFF(0x2, 0x0, 0x0, 0xf4, 0x2) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000580)=@raw_tracepoint={0x5, r0, 0x0, 0xfffffffffffffffd}, 0x80000000) mmap$auto(0xffffffffffffffff, 0xa58, 0xd, 0x9b72, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x18, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x800) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$auto_SNDCTL_TMR_START(r3, 0x5402, &(0x7f0000000680)="0b027704d194f4e6151784f48fdbc795c3e702943d20410ea87e41cd05133e45fa23d4dc5afc3b64ae4aefa872d2308d2c9b54c49b03f055ee96b295ff062fb961aeff4938b6161533940b4ffff0aeb3b02d124711ab7467441af4b7e5471c6537277512aebd9586d87bfdaf14819ac7fb87521f50bb0752bf7acfae97e867582da207609970f502dbd820a62012e42171d8f7d7b2b117d61c886162e0c287159a741919337291fa75208a4431bf53556b77464ad1d6131cbe498e6917d68a387c68c33b176ca6d3c3f92be2") setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) socket(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x318}}, 0x10044000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x06\x01e\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14N\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xd4f, 0x3) 6.24015774s ago: executing program 0 (id=2427): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr12/tx_queue_len\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x100000000000000, 0x2020009, 0x3, 0xeb9, 0xfffffffffffffffa, 0x8000) openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x41a900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unshare$auto(0x1) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x1) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r2, 0x0, 0x40002) getdents64$auto(r2, 0x0, 0x400) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x338800, 0x0) 5.926518216s ago: executing program 2 (id=2429): r0 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000000)="eb2efd2b6709e39b5947e9c7c304577e5e385c") mknodat$auto(r0, &(0x7f0000000040)='./file0\x00', 0x9, 0xc2) mount$auto(&(0x7f0000000080)='veth0_to_hsr\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.-:]\x00', 0x5, &(0x7f0000000140)="0ab6e32adb97f6d7516c2f2933ed667a5ca54e96af6ec2170be4c880ea155de495a274848bb9258e2a735847da268e88d303a88e724f080a64dd9bc7b1d57dde81c0d67ab5396ebbda2f9c69a0ce9323722e86313797228113a4374445f89cd4d0b7f5a3b3c86f11421d096db5901a6c93f7beddf9184212f777ff457e4267d8864beb12eb62909c11b8d6d48cbb1edbcc334b7f308cbb4b6de4146e01f94d3244c1fc310a4c6722da1444e15f8d9485bd1343d86427a6e1e927386d3edcea6acb750c1273b13e2022813975451c65214dbd5301f30e669d4eebdc1b060c") openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy5/long_retry_limit\x00', 0x740, 0x0) (async) r1 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy5/long_retry_limit\x00', 0x740, 0x0) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r1, 0x6eff, &(0x7f0000000280)='][%\x00', &(0x7f00000002c0), 0x80) (async) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r1, 0x6eff, &(0x7f0000000280)='][%\x00', &(0x7f00000002c0), 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xa0000, 0x1f2) read$auto_long_retry_limit_ops_(r0, &(0x7f0000000340)=""/252, 0xfc) (async) read$auto_long_retry_limit_ops_(r0, &(0x7f0000000340)=""/252, 0xfc) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, &(0x7f0000000480)={0x4, 0x3, 0x4, 0xffff, 0x81, 0xa}) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4002, 0x24) ioctl$auto_UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, &(0x7f0000000500)) read$auto_fops_init_pkru_pkeys(r0, &(0x7f0000000540)=""/250, 0xfa) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sg1\x00', 0x20000, 0x0) readv$auto(r2, &(0x7f0000000780)={&(0x7f0000000680)="bb45dbed0bbab0b75f0dadb9be4ab5d4f0721027744c80961d834d46c0a39faba4efd126e82721f9995f290514ce72f4aca2a4ebf17b16b93db33d37ca39298903c57d9a5377deb30132a75215117fb112b651a792bc203421d87b6061188dad2da1f0a9f55fafee32d460baea2575c61c88e3fcdd28d46a6be1ca8dce440bcbabf44185ca6e9497b32474f999369127e8ebcf97db553e84085665c6e2903b9799c91dd52f5550f2ed9aec6b19ffd85441ac55c53641ce81eb118b9784e0d6e57ad417dd7fd0b22747cc7f8bc2163d491c1678c2b63c938b31c6dd4c6a4e8cfe2b6b004e264e86feb178c9"}, 0x18) r4 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f00000007c0), 0x4881, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000008c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000008c0)=0x0) sendto$auto(r4, &(0x7f0000000800)="8bebc9cc948b7d015420ffcc73e13195041f7d9b7805649bddaf3c3848c33c65daf8edbd8bd1e2b6cc10ca4accdaa34e267b8f28a296ae359b7677bbbb76f81729464f0c7363cfd3b306c4b845e1a7fc5027e5fab287c0015e0a56f1cbd47cded0c3fc7cced58c0c6285f49efea90c790a5cd5baa5578c5cc75daee311937f7e2b1b0c884de3", 0x6, 0x80, &(0x7f0000000900)=@nfc={0x27, r5, 0xffffffffffffffff, 0x5}, 0x1ff) ioctl$auto_OTPERASE(r0, 0x400c4d19, &(0x7f0000000940)={0x6, 0x8000, 0x7}) (async) ioctl$auto_OTPERASE(r0, 0x400c4d19, &(0x7f0000000940)={0x6, 0x8000, 0x7}) setsockopt$auto_SO_RCVBUF(r4, 0xc, 0x8, &(0x7f0000000980)='][%\x00', 0x7) syz_clone(0x8000, &(0x7f00000009c0)="a7774c8168d11a7ce5f5b9c84dbf07135f4e51a109cf79e499964532a52b0c85b16a80c43aae394e6366528967e0029ecd7c0fa1ee3341020bcd52cc460c7d6bf59b878ccf9d184109c403377adac5816a7a776482766b2e5725d7000d562938c046c42d3904c677c5809e6ea59d513265f02f303f19edce153ef9c9104a40ca38af0770e6191462492d4794a0f4cee08f2244f8025af04780b1d26e229acc9452192fdfc95e11819498fc6be23b17ce7c9c3c75e8450ba2ab889e47e3c7c6c8ee0619682f934340073ca9d8a1753d7fbb28b7b17531564e", 0xd8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="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") (async) r6 = syz_clone(0x8000, &(0x7f00000009c0)="a7774c8168d11a7ce5f5b9c84dbf07135f4e51a109cf79e499964532a52b0c85b16a80c43aae394e6366528967e0029ecd7c0fa1ee3341020bcd52cc460c7d6bf59b878ccf9d184109c403377adac5816a7a776482766b2e5725d7000d562938c046c42d3904c677c5809e6ea59d513265f02f303f19edce153ef9c9104a40ca38af0770e6191462492d4794a0f4cee08f2244f8025af04780b1d26e229acc9452192fdfc95e11819498fc6be23b17ce7c9c3c75e8450ba2ab889e47e3c7c6c8ee0619682f934340073ca9d8a1753d7fbb28b7b17531564e", 0xd8, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="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") clone3$auto(&(0x7f0000001b40)={0x100000000, 0x58, 0x7, 0x2, 0xfffffffffffffffa, 0x6, 0x2, 0x1, 0x19, 0xa2}, 0x2b) (async) r7 = clone3$auto(&(0x7f0000001b40)={0x100000000, 0x58, 0x7, 0x2, 0xfffffffffffffffa, 0x6, 0x2, 0x1, 0x19, 0xa2}, 0x2b) kcmp$auto_KCMP_FILE(r6, r7, 0x0, r3, r0) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, &(0x7f0000001bc0)=0x5bf86cbb) read$auto(r3, &(0x7f0000001c00)='\x00', 0xcec) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000001c40), r0) (async) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000001c40), r0) ioctl$auto_UI_SET_SNDBIT(r0, 0x4004556a, &(0x7f0000001c80)=0x1) (async) ioctl$auto_UI_SET_SNDBIT(r0, 0x4004556a, &(0x7f0000001c80)=0x1) ioctl$auto_SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000001cc0)="b08c1c4ce1379dc68651bba2c874a37532d0ce6126d1a770162d1d96c31003b9bcd2e506b96db9a7f822862a21daac8d8f47137108ffa0ccc5bdd55677bf2a3430bf9dd1fca5ed7f69d0ddb8a4a346c5bac14aeb96f13a18e8824a3f0ec117dcbe59dd182a183cda5e9b02ab630ead5b0c643094e3f2efda4291e93928ab872dcc90da921f90aae7cea28cb45b6e4efb420a314439683a") r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001dc0), r0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000002240)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002200)={&(0x7f0000001e00)={0x3f0, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x200}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0xf896}, @NL80211_ATTR_BSSID={0x27, 0xf5, "176cc809307895a89c5e01532589fb5606ffc71723886a96f70914f21325d52da7d14d"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x2000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xfd}, @NL80211_ATTR_IE={0x37c, 0x2a, "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"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x14}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x80}, 0x40004) (async) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000002240)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002200)={&(0x7f0000001e00)={0x3f0, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x200}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0xf896}, @NL80211_ATTR_BSSID={0x27, 0xf5, "176cc809307895a89c5e01532589fb5606ffc71723886a96f70914f21325d52da7d14d"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x2000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xfd}, @NL80211_ATTR_IE={0x37c, 0x2a, "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"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x14}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x80}, 0x40004) openat2$dir(0xffffffffffffff9c, &(0x7f0000002280)='./file1\x00', &(0x7f00000022c0)={0x8000, 0x8}, 0x18) 5.008962923s ago: executing program 2 (id=2431): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0xa, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) r1 = getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) r2 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_BINDTOIFINDEX(r2, 0x1, 0x3e, &(0x7f0000000080)='/dev/audio1\x00', &(0x7f00000000c0)=0x8) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r3 = bpf$auto(0x0, 0x0, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0x381, 0x6, 0x8001, 0x800010, 0x6, 0x10001, 0xefe, 0xfffffffa, 0x5, 0x8001, 0x62f, 0x101, 0x4, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x9, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x34b5, 0xfff, 0x5, 0x4, 0x2, 0x1000, 0x9, 0x3, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x5, 0x4, 0x80, 0x6ed, 0x0, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x4, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78e, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x4, 0x5, 0xfffff43e, 0x0, 0x4f000, 0xfe, 0x5, 0x4, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xf2, 0x0, 0x7fffffff, 0x7f77, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x0, 0x5, 0x1000, 0x1, 0x7, 0x400, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) io_uring_setup$auto(0x3, &(0x7f00000002c0)={0xa, 0x2, 0x2, 0x8, 0x1, 0x80000001, r3, [0x8861, 0x896], {0x0, 0x3, 0x1, 0x5, 0x7, 0x3, 0x7f, 0x1, 0x9}, {0xfffffffd, 0x6, 0x80000001, 0x2, 0xf, 0xfffffffa, 0x4, 0x10001, 0x3}}) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x403c6f2b, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto(r1, &(0x7f0000000640)={&(0x7f0000000400)="d48842bd8c3e0a244af1fbf41be564171d44fd653b1a120d482a433b9042ba2eee646acbd8583c24b70bd2026d087fa9ec3b3801285e61c3680cba76e69419a3e1b41c88b8dca2954f27541a0bdec26c4c9080", 0x2, &(0x7f0000000580)={&(0x7f0000000480)="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", 0x4}, 0x2, &(0x7f00000005c0)="fc2d4abe7a9517d8c7a76ae3e78faf948badb78eb0753ef19f7b713f2817a761f859eb3110ce3eea3780b0b1034d05c130536698188451d20dea595b00a0d23ac498c3c63fd7f23fa7215a6fcf20ef266e35bb7b65d0ae79109a14a74a228e686c5a922bd30bbb2b2bed80f9db4db7c6", 0x6, 0x80000001}, 0x6503) acct$auto(&(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/fo\"mat\x00') sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, 0x0, 0x4048000) 4.388663912s ago: executing program 4 (id=2432): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4241, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(r0, 0x40189206, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/032/001\x00', 0x8202, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8001) r2 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r2, 0x8, &(0x7f0000001100), 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r2, 0x7, 0xffffffffffffffff) fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x400000000000) writev$auto(0x3, 0x0, 0x8000000000001b) unshare$auto(0x40000080) mmap$auto(0x1, 0x0, 0x44000000000dd, 0x15, 0x401, 0x7fff) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x85}, 0x8, 0x7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) ioctl$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x4, &(0x7f0000000280)="f26891cb2ed18376017ff1ab12c1792935603a41d4aa06cb408af493565f5f681a8ea3c393851f3e9e9ff18e46c874829f4690aa9deb4ce9ff6524a4e182a843681ee75966c8d0e7e77d777a1531cdc6faff458cf96f44dab5415092292166f727df1ee0ae366beace4eb1de82c93a7f5f0a839fe922f2b3393f4df6af12803213f171c129cc17d13400c1da13f077dfa7251c1a477921e24f5cdc93dd2292daaee610ad261965c267f6a73a") read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00<\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t+\xe4\xc2\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) msgrcv$auto(0x0, 0x0, 0x4bd, 0x0, 0xf1) 4.05122791s ago: executing program 2 (id=2433): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x100) unshare$auto(0x40000080) mmap$auto(0x0, 0x40006, 0xe3, 0x200009b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0x5, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x209403, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto_sg_fops_sg(r0, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0x29, 0x800, 0xa) 3.837745242s ago: executing program 4 (id=2434): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/sem\x00', 0x40000, 0x0) r0 = socket(0xa, 0x80803, 0x6) bind$auto(r0, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x1b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_thermal(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_snmp6/syz_tun\x00', 0x8040, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000100)=""/182, 0xb6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_GET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x883bfe75f72e8821}, 0x24040084) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r3, 0xffff, 0x29}, 0x3, 0x7) madvise$auto(0x0, 0x2, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) madvise$auto(0x7, 0x40001, 0x401007) madvise$auto(0x0, 0x400053, 0x9) shmdt$auto(0x0) process_madvise$auto_MADV_WIPEONFORK(r4, &(0x7f0000000280)={&(0x7f00000001c0)="41c110993a71f4b7e9d4fb0eb80e9551ae8582d18c79faf1f43b751928b7120f90b4a455ce49816463fa19bd476dd7185bd4d1923fed71c5b06a7c6ca385e67128652254a15145276decbc17a3ae2e162b06a951114408bc54d8d02ea747b28d9d4b06c995adf8dea732dcd5ae0bdb8b98cb16b2bc11ff012a6c23246762445ded", 0x81}, 0xb, 0x12, 0x6) 3.17812556s ago: executing program 2 (id=2436): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setpgid$auto(0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/snd_aloop.0/driver_override\x00', 0x101901, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) 3.121325349s ago: executing program 5 (id=2437): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/oss\x00', 0x60c80, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0xb0040, 0x0) pread64$auto(r0, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca', 0x200000000042, 0x8) 2.93565015s ago: executing program 5 (id=2438): waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x863, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) socket(0x2, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x200000001000000, 0xfffff7fffffffff7, 0x3ee) r1 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/msft_opcode\x00', 0x0, 0x0) read$auto(r1, &(0x7f0000006740)='^%-[)>\'\xdf\x00', 0xffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) mprotect$auto(0x0, 0x806121, 0x6) r2 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x100, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x200, 0x1, 0x9, 0x7, 0x3c, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x1, 0x9, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0xfffffffffffffffd, 0x6, 0x4, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2000000ffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x5]}, 0x205, 0x2000000d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 2.400034164s ago: executing program 0 (id=2439): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/035/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)=' \f', 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) socket(0x3c, 0x3, 0x4) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r2 = getpid() mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb0, r1, 0x8000) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x8866}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2a00, 0x0) socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xffffba07, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x8138ae83, &(0x7f00000000c0)={0xdd}) 2.389819952s ago: executing program 4 (id=2440): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x301040, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x2000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc080aebe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{@raw=0x81, 0x6, 0x8001, 0x8, "b132ce14b9fa7a699c29a892e255dab2591457de9c4db5868db157e9cc1910aa07e336ede9b387eac3eae00a", @raw=0x8ef}, 0x2, 0x8, 0x1895, @raw=0x4, @integer={0x0, 0xf, 0x9}, "f82d0516c633863c5281ae962fd8c811792ad96298c95d5a9da1400adb4ee0bc170d51ef637d9927912407406936d9cbf46ddadb7820b40766245026a272cd3a"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) memfd_secret$auto(0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) mmap$auto(0x4, 0x6, 0x0, 0x9b72, r0, 0xa8000) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) 2.136791286s ago: executing program 2 (id=2441): r0 = socket(0xa, 0x3, 0x2) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="0002"], 0x18}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x11, 0x3, 0xe) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0803, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) clone$auto(0x20003b48, 0x2, 0x0, 0x0, 0x5) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0xc, 0x2000000000940, 0x1ffde, 0x7, 0x4, 0x3fe, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x8000000007, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x47e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a]}, 0x400, 0x81) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3c) write$auto(r2, &(0x7f00000003c0)='+&\x00', 0x273f) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='.'], 0x1ac}}, 0x40000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000000000)="2dc2f4045de01fe67fa93d2c44e76f6e3fef497c029b61208f4342190a", 0x1d) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'g\t$K\xcb\x12\xfa\x00\x00\xcfk', 0xb7f) select$auto(0x1, &(0x7f0000000040)={[0xfffffffffffff921, 0x40, 0x4, 0x80, 0x3, 0x3, 0x80000001, 0x7c, 0x3, 0x8001, 0x5, 0xb, 0x4, 0x6, 0x0, 0x6]}, &(0x7f00000000c0)={[0x3, 0x4, 0x0, 0x1, 0x39, 0x3, 0x7f, 0x3, 0x2, 0xc6a, 0x8, 0xffffffff, 0x1, 0x0, 0x7491, 0x40]}, 0x0, &(0x7f00000001c0)={0x9, 0x40001}) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) fsopen$auto(0x0, 0x1) 2.071538959s ago: executing program 0 (id=2442): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0p/oss\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/209, 0xd1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/snd_hda_intel/parameters/align_buffer_size\x00', 0xc0481, 0x0) write$auto(r2, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x7e) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) write$auto(0x3, 0x0, 0xfdef) prctl$auto(0x10000, 0x4, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x6d, 0x2, 0x8000000000000000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) copy_file_range$auto(0xffffffffffffffff, 0x0, r4, 0x0, 0xffffffffffffffff, 0x8) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x10, 0xdf, 0x20e91, 0xffffffffffffffff, 0x6) r5 = mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u50x0}) bpf$auto(0x2, &(0x7f0000000080)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x3a88, r1, @relative_id=0x7, 0x5}, 0x9) close_range$auto(0x2, 0x8, 0x0) 698.863145ms ago: executing program 2 (id=2446): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) modify_ldt$auto(0x11, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @rand_addr=0x64010101}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r1, 0x3a, 0x1, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="909d1286", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x40804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4fc9, &(0x7f00000002c0)={0x0, 0xff8c}, 0x5, 0x0, 0x4, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tee$auto(r2, r2, 0x0, 0x5) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x18b201, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) 495.538565ms ago: executing program 5 (id=2447): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, 0x0, 0x2, 0x100) msgctl$auto(0x0, 0x88c, 0x0) r2 = bpf$auto(0x0, 0x0, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r2, 0x8000) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r3, 0x0, 0x0, 0x0, 0x1000) rename$auto(0x0, 0x0) rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file0\x00') madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) ioctl$auto(r4, 0x560a, 0x7) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) truncate$auto(&(0x7f00000000c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x6) getsockopt$auto(r0, 0x10e, 0x9, 0xfffffffffffffffe, 0x0) 460.601219ms ago: executing program 4 (id=2448): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) ioprio_set$auto(0x2, 0x800000000, 0x8) getpgrp(0xffffffffffffffff) r1 = getpid() setpriority$auto_PRIO_PGRP(0x1, r1, 0x4) prctl$auto_PR_SYS_DISPATCH_ON(0x3, 0x1, r1, 0xc, 0xa) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 338.2745ms ago: executing program 4 (id=2449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x3c, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x18, 0x3, 0x0, 0x1, [@nested={0x4, 0x14}, @typed={0xf, 0xd, 0x0, 0x0, @str='ovs_packet\x00'}]}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x61d}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4814) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40a4}, 0x4000800) 239.94603ms ago: executing program 4 (id=2450): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setpgid$auto(0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/snd_aloop.0/driver_override\x00', 0x101901, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) 0s ago: executing program 0 (id=2451): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/035/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)=' \f', 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) socket(0x3c, 0x3, 0x4) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r2 = getpid() mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb0, r1, 0x8000) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x8866}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2a00, 0x0) socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xffffba07, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x8138ae83, &(0x7f00000000c0)={0xdd}) kernel console output (not intermixed with test programs): olve the problem. [ 603.533611][T15289] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5208, tgid 5208 (udevadm), ts 33650218262, free_ts 27700938149 [ 603.597598][T15251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.628655][T15289] post_alloc_hook+0x153/0x170 [ 603.659502][T15289] get_page_from_freelist+0x111d/0x3140 [ 603.683330][T15289] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 603.699987][T15289] new_slab+0xa6/0x6b0 [ 603.713468][T15289] refill_objects+0x26b/0x400 [ 603.733501][T15289] __pcs_replace_empty_main+0x1ab/0x660 [ 603.753437][T15289] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 603.759441][T15289] __d_alloc+0x34/0xa80 [ 603.781351][T15289] d_alloc_parallel+0x111/0x14e0 [ 603.794104][T15289] __lookup_slow+0x193/0x460 [ 603.806318][T15289] lookup_slow+0x50/0x70 [ 603.821109][T15289] path_lookupat+0x5e8/0xc40 [ 603.827268][T15289] filename_lookup+0x202/0x590 [ 603.842348][T15289] do_readlinkat+0xd3/0x370 [ 603.851595][T15289] __x64_sys_readlink+0x78/0xc0 [ 603.864137][T15289] do_syscall_64+0x106/0xf80 [ 603.879361][T15289] page last free pid 1 tgid 1 stack trace: [ 603.893604][T15289] __free_frozen_pages+0x7e1/0x10d0 [ 603.909559][T15289] free_contig_range+0xde/0x1d0 [ 603.920101][T15289] destroy_args+0xa8/0x7a0 [ 603.931388][T15289] debug_vm_pgtable+0x1b66/0x34c0 [ 603.947030][T15289] do_one_initcall+0x11d/0x760 [ 603.951919][T15289] kernel_init_freeable+0x6e5/0x7a0 [ 603.975950][T15289] kernel_init+0x1f/0x1e0 [ 603.988750][T15289] ret_from_fork+0x754/0xd80 [ 604.006552][T15289] ret_from_fork_asm+0x1a/0x30 [ 604.298849][T15251] hsr_slave_0: entered promiscuous mode [ 604.334629][T15251] hsr_slave_1: entered promiscuous mode [ 604.354046][T15251] debugfs: 'hsr0' already exists in 'hsr' [ 604.359846][T15251] Cannot create hsr debugfs directory [ 604.622727][ T9484] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.683485][ T8071] Bluetooth: hci2: command tx timeout [ 604.866092][ T9484] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.037836][ T9484] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.168778][ T9484] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.330855][T15325] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2022'. [ 605.766021][T15251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 605.816487][ T9484] bridge_slave_0: left allmulticast mode [ 605.833750][ T9484] bridge_slave_0: left promiscuous mode [ 605.867840][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.931950][T15338] random: crng reseeded on system resumption [ 606.125758][ T8071] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 606.395675][ T9484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.423786][T15354] ksmbd: Unknown IPC event: 14, ignore. [ 606.444393][ T9484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.487940][ T9484] bond0 (unregistering): Released all slaves [ 606.527678][T15251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 606.586821][T15358] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.2027: iget: checksum invalid [ 606.599348][T15251] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 606.648289][ T9484] Â: left promiscuous mode [ 606.733863][T15358] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 606.746276][T15251] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 606.771501][ T8071] Bluetooth: hci2: command tx timeout [ 606.845472][ T9484] tipc: Left network mode [ 606.901898][T15358] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.2027: iget: checksum invalid [ 607.038965][T15358] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 607.167995][T15358] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.2027: iget: checksum invalid [ 607.320678][T15358] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 607.412338][T15358] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.2027: iget: checksum invalid [ 607.473487][T15358] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 607.547138][T15358] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 607.589894][T15251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.607432][T15358] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 607.796924][T15251] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.881822][ T9484] veth1_macvtap: left promiscuous mode [ 607.904131][ T9484] veth0_macvtap: left promiscuous mode [ 607.924820][ T9484] veth1_vlan: left promiscuous mode [ 607.941199][ T9484] veth0_vlan: left promiscuous mode [ 608.686458][ T9484] team0 (unregistering): Port device team_slave_1 removed [ 608.758660][ T9484] team0 (unregistering): Port device team_slave_0 removed [ 608.814774][T15416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2037'. [ 608.844697][ T8071] Bluetooth: hci2: command tx timeout [ 608.954752][T15418] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 608.992879][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.000153][ T8373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.025477][T15418] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 609.040597][T15418] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 609.051146][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.058507][ T8373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.067807][T15418] page_type: f5(slab) [ 609.072290][T15418] raw: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 609.119862][T15418] raw: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 609.243594][T15418] head: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 609.319931][T15418] head: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 609.399625][T15418] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 609.475853][T15418] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 609.547856][T15418] page dumped because: unmovable page [ 609.581249][T15418] page_owner tracks the page as allocated [ 609.604852][T15418] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5208, tgid 5208 (udevadm), ts 33650218262, free_ts 27700938149 [ 609.712580][T15418] post_alloc_hook+0x153/0x170 [ 609.737043][T15418] get_page_from_freelist+0x111d/0x3140 [ 609.813194][T15418] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 609.861203][T15418] new_slab+0xa6/0x6b0 [ 609.885268][T15418] refill_objects+0x26b/0x400 [ 609.907184][T15418] __pcs_replace_empty_main+0x1ab/0x660 [ 609.932991][T15418] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 609.957385][T15418] __d_alloc+0x34/0xa80 [ 609.974446][T15251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.993557][T15418] d_alloc_parallel+0x111/0x14e0 [ 610.008287][T15418] __lookup_slow+0x193/0x460 [ 610.028583][T15418] lookup_slow+0x50/0x70 [ 610.052475][T15418] path_lookupat+0x5e8/0xc40 [ 610.076954][T15418] filename_lookup+0x202/0x590 [ 610.096840][T15418] do_readlinkat+0xd3/0x370 [ 610.120029][T15418] __x64_sys_readlink+0x78/0xc0 [ 610.144400][T15418] do_syscall_64+0x106/0xf80 [ 610.167810][T15418] page last free pid 1 tgid 1 stack trace: [ 610.194569][T15418] __free_frozen_pages+0x7e1/0x10d0 [ 610.226103][T15418] free_contig_range+0xde/0x1d0 [ 610.253527][T15418] destroy_args+0xa8/0x7a0 [ 610.258180][T15418] debug_vm_pgtable+0x1b66/0x34c0 [ 610.296556][T15418] do_one_initcall+0x11d/0x760 [ 610.318101][T15418] kernel_init_freeable+0x6e5/0x7a0 [ 610.343850][T15418] kernel_init+0x1f/0x1e0 [ 610.369056][T15418] ret_from_fork+0x754/0xd80 [ 610.389148][T15418] ret_from_fork_asm+0x1a/0x30 [ 611.147965][T15251] veth0_vlan: entered promiscuous mode [ 611.229969][T15251] veth1_vlan: entered promiscuous mode [ 611.368598][T15251] veth0_macvtap: entered promiscuous mode [ 611.445579][T15251] veth1_macvtap: entered promiscuous mode [ 611.560833][T15484] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2046'. [ 611.571333][T15251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.630650][T15251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.711310][ T9484] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.759504][ T9484] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.833587][ T9484] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.899888][ T9484] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.169740][ T9484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.245922][ T9484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.386397][ T8395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.429264][ T8395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.493029][T15470] kexec: Could not allocate control_code_buffer [ 613.492271][T15523] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 613.548750][T15523] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 614.250705][T15535] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 614.268801][T15536] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 614.301167][T15535] CPU: 0 UID: 0 PID: 15535 Comm: syz.0.2055 Tainted: G U L syzkaller #0 PREEMPT(full) [ 614.301196][T15535] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 614.301202][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 614.301216][T15535] Call Trace: [ 614.301222][T15535] [ 614.301229][T15535] dump_stack_lvl+0x100/0x190 [ 614.301258][T15535] sysfs_warn_dup.cold+0x1c/0x28 [ 614.301280][T15535] sysfs_do_create_link_sd+0x113/0x140 [ 614.301303][T15535] sysfs_create_link+0x61/0xc0 [ 614.301324][T15535] device_add+0x675/0x1950 [ 614.301346][T15535] ? __pfx_device_add+0x10/0x10 [ 614.301364][T15535] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 614.301383][T15535] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 614.301411][T15535] wiphy_register+0x1e5b/0x2d30 [ 614.301427][T15535] ? __rtnl_unlock+0xb9/0xf0 [ 614.301445][T15535] ? netdev_run_todo+0x840/0x12c0 [ 614.301464][T15535] ? __pfx_wiphy_register+0x10/0x10 [ 614.301482][T15535] ? __asan_memset+0x23/0x50 [ 614.301504][T15535] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 614.301529][T15535] ieee80211_register_hw+0x2cfd/0x4140 [ 614.301556][T15535] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 614.301573][T15535] ? __pfx___debug_object_init+0x10/0x10 [ 614.301600][T15535] ? find_held_lock+0x2b/0x80 [ 614.301618][T15535] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 614.301635][T15535] ? __hrtimer_setup+0x178/0x280 [ 614.301658][T15535] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 614.301688][T15535] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 614.301711][T15535] hwsim_new_radio_nl+0xc1f/0x1340 [ 614.301729][T15535] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 614.301752][T15535] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 614.301774][T15535] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 614.301797][T15535] genl_family_rcv_msg_doit+0x214/0x300 [ 614.301818][T15535] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 614.301836][T15535] ? genl_get_cmd+0x3ef/0x720 [ 614.301857][T15535] ? bpf_lsm_capable+0x9/0x10 [ 614.301873][T15535] ? security_capable+0x80/0x260 [ 614.301889][T15535] ? ns_capable+0xd2/0xf0 [ 614.301905][T15535] genl_rcv_msg+0x560/0x800 [ 614.301925][T15535] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.301943][T15535] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 614.301967][T15535] netlink_rcv_skb+0x159/0x420 [ 614.301982][T15535] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.302001][T15535] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.302025][T15535] ? netlink_deliver_tap+0x1ae/0xcc0 [ 614.302043][T15535] genl_rcv+0x28/0x40 [ 614.302058][T15535] netlink_unicast+0x5aa/0x870 [ 614.302076][T15535] ? __pfx_netlink_unicast+0x10/0x10 [ 614.302091][T15535] ? __pfx___might_resched+0x10/0x10 [ 614.302112][T15535] ? __lock_acquire+0x4a5/0x2630 [ 614.302136][T15535] netlink_sendmsg+0x8b0/0xda0 [ 614.302154][T15535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.302169][T15535] ? __import_iovec+0x1d2/0x640 [ 614.302190][T15535] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 614.302208][T15535] ____sys_sendmsg+0x9e1/0xb70 [ 614.302225][T15535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.302243][T15535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.302264][T15535] ? __pfx_futex_wake_mark+0x10/0x10 [ 614.302289][T15535] ___sys_sendmsg+0x190/0x1e0 [ 614.302309][T15535] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.302351][T15535] __sys_sendmsg+0x170/0x220 [ 614.302365][T15535] ? __pfx___sys_sendmsg+0x10/0x10 [ 614.302379][T15535] ? __x64_sys_futex+0x34f/0x4d0 [ 614.302410][T15535] do_syscall_64+0x106/0xf80 [ 614.302424][T15535] ? clear_bhb_loop+0x40/0x90 [ 614.302442][T15535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.302457][T15535] RIP: 0033:0x7f9da1b9c819 [ 614.302470][T15535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.302485][T15535] RSP: 002b:00007f9da2a3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.302500][T15535] RAX: ffffffffffffffda RBX: 00007f9da1e15fa0 RCX: 00007f9da1b9c819 [ 614.302510][T15535] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 614.302519][T15535] RBP: 00007f9da1c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 614.302529][T15535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.302538][T15535] R13: 00007f9da1e16038 R14: 00007f9da1e15fa0 R15: 00007ffca89ef5a8 [ 614.302559][T15535] [ 614.723217][ C0] hrtimer: interrupt took 419981954 ns [ 614.988583][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2058'. [ 614.999877][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2058'. [ 615.452474][T15557] netlink: 'syz.5.2057': attribute type 1 has an invalid length. [ 616.230650][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'. [ 616.275810][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2068'. [ 616.507960][ T8071] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 616.516787][ T8071] Bluetooth: hci4: Invalid handle: 0x3a4a > 0x0eff [ 616.543564][T15589] : Can't lookup blockdev [ 616.661939][T15591] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 616.683744][T15591] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 617.641102][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 617.717984][T15613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2077'. [ 619.719570][T15651] ubi0: attaching mtd0 [ 619.963858][T15658] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 619.981005][T15669] random: crng reseeded on system resumption [ 620.007966][T15658] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 620.036716][T15651] ubi0: scanning is finished [ 620.041434][T15651] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 620.082069][T15658] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 620.126242][T15658] page_type: f5(slab) [ 620.159304][T15658] raw: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 620.171398][T15669] hub 1-0:1.0: USB hub found [ 620.216627][T15658] raw: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 620.228297][T15669] hub 1-0:1.0: 1 port detected [ 620.255780][T15658] head: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 620.300099][T15658] head: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 620.350853][T15658] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 620.382790][T15658] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 620.419097][T15658] page dumped because: unmovable page [ 620.429387][T15651] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 620.441290][T15658] page_owner tracks the page as allocated [ 620.458195][T15658] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5208, tgid 5208 (udevadm), ts 33650218262, free_ts 27700938149 [ 620.550942][T15658] post_alloc_hook+0x153/0x170 [ 620.566922][T15658] get_page_from_freelist+0x111d/0x3140 [ 620.587765][T15658] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 620.639922][T15658] new_slab+0xa6/0x6b0 [ 620.671660][T15658] refill_objects+0x26b/0x400 [ 620.691400][T15658] __pcs_replace_empty_main+0x1ab/0x660 [ 620.717072][T15658] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 620.729982][T15658] __d_alloc+0x34/0xa80 [ 620.741051][T15658] d_alloc_parallel+0x111/0x14e0 [ 620.752992][T15658] __lookup_slow+0x193/0x460 [ 620.762926][T15658] lookup_slow+0x50/0x70 [ 620.771886][T15658] path_lookupat+0x5e8/0xc40 [ 620.781996][T15658] filename_lookup+0x202/0x590 [ 620.792084][T15658] do_readlinkat+0xd3/0x370 [ 620.803054][T15658] __x64_sys_readlink+0x78/0xc0 [ 620.815712][T15658] do_syscall_64+0x106/0xf80 [ 620.830683][T15658] page last free pid 1 tgid 1 stack trace: [ 620.837660][T15658] __free_frozen_pages+0x7e1/0x10d0 [ 620.844747][T15658] free_contig_range+0xde/0x1d0 [ 620.849791][T15658] destroy_args+0xa8/0x7a0 [ 620.855628][T15658] debug_vm_pgtable+0x1b66/0x34c0 [ 620.861071][T15658] do_one_initcall+0x11d/0x760 [ 620.866395][T15658] kernel_init_freeable+0x6e5/0x7a0 [ 620.871840][T15658] kernel_init+0x1f/0x1e0 [ 620.877159][T15658] ret_from_fork+0x754/0xd80 [ 620.881988][T15658] ret_from_fork_asm+0x1a/0x30 [ 621.738471][T15698] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 621.902288][T15689] MTRR 1 not used [ 624.003457][T15755] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 624.011092][T15755] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 624.020044][T15757] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2106'. [ 624.446719][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.453112][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.840671][T15778] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 625.013872][T15778] CPU: 0 UID: 0 PID: 15778 Comm: syz.5.2111 Tainted: G U L syzkaller #0 PREEMPT(full) [ 625.013902][T15778] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 625.013908][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 625.013918][T15778] Call Trace: [ 625.013923][T15778] [ 625.013930][T15778] dump_stack_lvl+0x100/0x190 [ 625.013958][T15778] sysfs_warn_dup.cold+0x1c/0x28 [ 625.013980][T15778] sysfs_do_create_link_sd+0x113/0x140 [ 625.014003][T15778] sysfs_create_link+0x61/0xc0 [ 625.014024][T15778] device_add+0x675/0x1950 [ 625.014045][T15778] ? __pfx_device_add+0x10/0x10 [ 625.014064][T15778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 625.014081][T15778] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 625.014109][T15778] wiphy_register+0x1e5b/0x2d30 [ 625.014126][T15778] ? __rtnl_unlock+0xb9/0xf0 [ 625.014142][T15778] ? netdev_run_todo+0x840/0x12c0 [ 625.014161][T15778] ? __pfx_wiphy_register+0x10/0x10 [ 625.014186][T15778] ? __asan_memset+0x23/0x50 [ 625.014210][T15778] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 625.014236][T15778] ieee80211_register_hw+0x2cfd/0x4140 [ 625.014263][T15778] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 625.014281][T15778] ? __pfx___debug_object_init+0x10/0x10 [ 625.014301][T15778] ? find_held_lock+0x2b/0x80 [ 625.014316][T15778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 625.014332][T15778] ? __hrtimer_setup+0x178/0x280 [ 625.014354][T15778] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 625.014383][T15778] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 625.014406][T15778] hwsim_new_radio_nl+0xc1f/0x1340 [ 625.014425][T15778] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 625.014447][T15778] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 625.014466][T15778] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 625.014489][T15778] genl_family_rcv_msg_doit+0x214/0x300 [ 625.014519][T15778] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 625.014538][T15778] ? genl_get_cmd+0x3ef/0x720 [ 625.014560][T15778] ? bpf_lsm_capable+0x9/0x10 [ 625.014576][T15778] ? security_capable+0x80/0x260 [ 625.014592][T15778] ? ns_capable+0xd2/0xf0 [ 625.014608][T15778] genl_rcv_msg+0x560/0x800 [ 625.014628][T15778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 625.014646][T15778] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 625.014670][T15778] netlink_rcv_skb+0x159/0x420 [ 625.014685][T15778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 625.014704][T15778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 625.014727][T15778] ? netlink_deliver_tap+0x1ae/0xcc0 [ 625.014745][T15778] genl_rcv+0x28/0x40 [ 625.014761][T15778] netlink_unicast+0x5aa/0x870 [ 625.014779][T15778] ? __pfx_netlink_unicast+0x10/0x10 [ 625.014794][T15778] ? __pfx___might_resched+0x10/0x10 [ 625.014814][T15778] ? __lock_acquire+0x4a5/0x2630 [ 625.014838][T15778] netlink_sendmsg+0x8b0/0xda0 [ 625.014857][T15778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.014871][T15778] ? __import_iovec+0x1d2/0x640 [ 625.014892][T15778] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 625.014911][T15778] ____sys_sendmsg+0x9e1/0xb70 [ 625.014927][T15778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.014944][T15778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.014966][T15778] ? __pfx_futex_wake_mark+0x10/0x10 [ 625.014992][T15778] ___sys_sendmsg+0x190/0x1e0 [ 625.015012][T15778] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.015053][T15778] __sys_sendmsg+0x170/0x220 [ 625.015068][T15778] ? __pfx___sys_sendmsg+0x10/0x10 [ 625.015082][T15778] ? __x64_sys_futex+0x34f/0x4d0 [ 625.015113][T15778] do_syscall_64+0x106/0xf80 [ 625.015128][T15778] ? clear_bhb_loop+0x40/0x90 [ 625.015147][T15778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.015162][T15778] RIP: 0033:0x7fd76fb9c819 [ 625.015176][T15778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.015191][T15778] RSP: 002b:00007fd770a1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.015207][T15778] RAX: ffffffffffffffda RBX: 00007fd76fe15fa0 RCX: 00007fd76fb9c819 [ 625.015217][T15778] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000006 [ 625.015227][T15778] RBP: 00007fd76fc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 625.015236][T15778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.015245][T15778] R13: 00007fd76fe16038 R14: 00007fd76fe15fa0 R15: 00007ffd19ef9da8 [ 625.015266][T15778] [ 627.400706][T15822] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 627.453510][T15826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2115'. [ 627.464803][T15822] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 627.997139][T15835] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 628.047343][T15835] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 628.093007][T15835] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 628.189183][T15835] page_type: f5(slab) [ 628.208465][T15835] raw: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 628.293501][T15835] raw: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 628.342183][T15825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2117'. [ 628.365038][T15835] head: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 628.401824][T15825] ipvlan1: entered promiscuous mode [ 628.410538][T15835] head: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 628.448357][T15825] ipvlan1: entered allmulticast mode [ 628.465781][T15835] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 628.543682][T15835] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 628.595283][T15835] page dumped because: unmovable page [ 628.682425][T15835] page_owner tracks the page as allocated [ 628.703485][T15835] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5208, tgid 5208 (udevadm), ts 33650218262, free_ts 27700938149 [ 628.889255][T15835] post_alloc_hook+0x153/0x170 [ 628.932434][T15835] get_page_from_freelist+0x111d/0x3140 [ 628.961845][T15835] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 629.001196][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'. [ 629.020887][T15835] new_slab+0xa6/0x6b0 [ 629.036983][T15835] refill_objects+0x26b/0x400 [ 629.059196][T15835] __pcs_replace_empty_main+0x1ab/0x660 [ 629.093326][T15835] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 629.115433][T15835] __d_alloc+0x34/0xa80 [ 629.130388][T15835] d_alloc_parallel+0x111/0x14e0 [ 629.149117][T15835] __lookup_slow+0x193/0x460 [ 629.167314][T15835] lookup_slow+0x50/0x70 [ 629.181582][T15835] path_lookupat+0x5e8/0xc40 [ 629.198608][T15835] filename_lookup+0x202/0x590 [ 629.217860][T15835] do_readlinkat+0xd3/0x370 [ 629.232383][T15835] __x64_sys_readlink+0x78/0xc0 [ 629.250144][T15835] do_syscall_64+0x106/0xf80 [ 629.267979][T15835] page last free pid 1 tgid 1 stack trace: [ 629.289981][T15835] __free_frozen_pages+0x7e1/0x10d0 [ 629.309410][T15835] free_contig_range+0xde/0x1d0 [ 629.332295][T15835] destroy_args+0xa8/0x7a0 [ 629.345685][T15835] debug_vm_pgtable+0x1b66/0x34c0 [ 629.365012][T15835] do_one_initcall+0x11d/0x760 [ 629.387372][T15835] kernel_init_freeable+0x6e5/0x7a0 [ 629.416330][T15835] kernel_init+0x1f/0x1e0 [ 629.436465][T15835] ret_from_fork+0x754/0xd80 [ 629.457121][T15835] ret_from_fork_asm+0x1a/0x30 [ 630.057321][T15890] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 630.175994][T15890] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 630.265655][T15890] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 630.356034][T15890] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 630.412312][T15890] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 630.448415][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2127'. [ 630.474081][T15890] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 631.936892][T15950] blkio.reset_stats is deprecated [ 632.111827][T15957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2139'. [ 632.124042][ T8132] Bluetooth: hci4: command 0x0c1a tx timeout [ 632.130142][ T8132] Bluetooth: hci3: command 0x0c1a tx timeout [ 632.287197][ T8132] Bluetooth: hci1: command 0x0c1a tx timeout [ 632.363893][ T8132] Bluetooth: hci2: command 0x0c1a tx timeout [ 633.455996][T15992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2150'. [ 633.936686][ T8395] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:29: bg 4: bad block bitmap checksum [ 634.011884][ T8395] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 634.080098][ T8395] EXT4-fs (sda1): This should not happen!! Data will be lost [ 634.080098][ T8395] [ 634.173170][T16006] zram: Removed device: zram0 [ 634.443890][ T8132] Bluetooth: hci2: command 0x0c1a tx timeout [ 634.521047][T16017] random: crng reseeded on system resumption [ 634.786934][T16023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2157'. [ 635.469522][ T9467] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 635.530675][ T9467] EXT4-fs (sda1): This should not happen!! Data will be lost [ 635.530675][ T9467] [ 635.751849][T16032] FAULT_INJECTION: forcing a failure. [ 635.751849][T16032] name failslab, interval 0, probability 0, space 0, times 0 [ 635.966059][T16032] CPU: 0 UID: 0 PID: 16032 Comm: syz.2.2159 Tainted: G U L syzkaller #0 PREEMPT(full) [ 635.966086][T16032] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 635.966091][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 635.966100][T16032] Call Trace: [ 635.966105][T16032] [ 635.966112][T16032] dump_stack_lvl+0x100/0x190 [ 635.966138][T16032] should_fail_ex.cold+0x5/0xa [ 635.966155][T16032] should_failslab+0xc2/0x120 [ 635.966171][T16032] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 635.966186][T16032] ? debugfs_create_symlink+0x29/0x220 [ 635.966209][T16032] kstrdup+0x51/0xe0 [ 635.966224][T16032] debugfs_create_symlink+0x29/0x220 [ 635.966241][T16032] ref_tracker_dir_symlink+0x257/0x3b0 [ 635.966262][T16032] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 635.966282][T16032] ? __lock_acquire+0x4a5/0x2630 [ 635.966315][T16032] ? lockdep_hardirqs_on+0x78/0x100 [ 635.966330][T16032] ? crng_make_state+0x2b0/0x6c0 [ 635.966358][T16032] ? __pfx_net_ns_net_init+0x10/0x10 [ 635.966373][T16032] net_ns_net_init+0xd2/0x120 [ 635.966388][T16032] ops_init+0x1e2/0x5f0 [ 635.966404][T16032] setup_net+0x118/0x3a0 [ 635.966418][T16032] ? __pfx_setup_net+0x10/0x10 [ 635.966431][T16032] ? lockdep_init_map_type+0x5c/0x250 [ 635.966450][T16032] ? mutex_init_lockep+0x110/0x150 [ 635.966471][T16032] copy_net_ns+0x46f/0x7c0 [ 635.966488][T16032] create_new_namespaces+0x3ea/0xac0 [ 635.966508][T16032] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 635.966525][T16032] ksys_unshare+0x473/0xad0 [ 635.966545][T16032] ? __pfx_ksys_unshare+0x10/0x10 [ 635.966569][T16032] __x64_sys_unshare+0x31/0x40 [ 635.966585][T16032] do_syscall_64+0x106/0xf80 [ 635.966599][T16032] ? clear_bhb_loop+0x40/0x90 [ 635.966617][T16032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.966631][T16032] RIP: 0033:0x7f9ab6d9c819 [ 635.966643][T16032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.966657][T16032] RSP: 002b:00007f9ab7c13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 635.966672][T16032] RAX: ffffffffffffffda RBX: 00007f9ab7015fa0 RCX: 00007f9ab6d9c819 [ 635.966682][T16032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 635.966690][T16032] RBP: 00007f9ab6e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 635.966699][T16032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.966707][T16032] R13: 00007f9ab7016038 R14: 00007f9ab7015fa0 R15: 00007ffc08418f38 [ 635.966726][T16032] [ 636.581154][ T8132] Bluetooth: hci2: command 0x0c1a tx timeout [ 636.636513][T16045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2162'. [ 638.274644][T16065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.303575][T16065] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 638.323438][T16074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2168'. [ 638.354801][T16065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 638.384026][T16065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 638.464734][ T9463] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 638.521824][ T9463] EXT4-fs (sda1): This should not happen!! Data will be lost [ 638.521824][ T9463] [ 638.918803][T16088] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.5.2170: Error -117 reading block bitmap for 4 [ 639.775481][T16104] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2173'. [ 640.283511][ T8132] Bluetooth: hci3: command 0x0c1a tx timeout [ 640.363340][ T8132] Bluetooth: hci1: command 0x0c1a tx timeout [ 640.372141][ T8071] Bluetooth: hci4: command 0x0c1a tx timeout [ 640.406751][T16109] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 640.445844][ T8132] Bluetooth: hci2: command 0x0c1a tx timeout [ 640.508027][T16109] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 641.285139][T16129] cougar: G6 mapped to space [ 641.837226][T16142] aoe: can't write to that file. [ 641.929650][T16145] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 641.978338][T16145] CPU: 0 UID: 0 PID: 16145 Comm: syz.5.2185 Tainted: G U L syzkaller #0 PREEMPT(full) [ 641.978368][T16145] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 641.978374][T16145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 641.978384][T16145] Call Trace: [ 641.978390][T16145] [ 641.978396][T16145] dump_stack_lvl+0x100/0x190 [ 641.978424][T16145] sysfs_warn_dup.cold+0x1c/0x28 [ 641.978447][T16145] sysfs_do_create_link_sd+0x113/0x140 [ 641.978471][T16145] sysfs_create_link+0x61/0xc0 [ 641.978492][T16145] device_add+0x675/0x1950 [ 641.978515][T16145] ? __pfx_device_add+0x10/0x10 [ 641.978534][T16145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 641.978550][T16145] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 641.978578][T16145] wiphy_register+0x1e5b/0x2d30 [ 641.978594][T16145] ? __rtnl_unlock+0xb9/0xf0 [ 641.978611][T16145] ? netdev_run_todo+0x840/0x12c0 [ 641.978630][T16145] ? __pfx_wiphy_register+0x10/0x10 [ 641.978647][T16145] ? __asan_memset+0x23/0x50 [ 641.978668][T16145] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 641.978692][T16145] ieee80211_register_hw+0x2cfd/0x4140 [ 641.978719][T16145] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 641.978736][T16145] ? __pfx___debug_object_init+0x10/0x10 [ 641.978756][T16145] ? find_held_lock+0x2b/0x80 [ 641.978772][T16145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 641.978788][T16145] ? __hrtimer_setup+0x178/0x280 [ 641.978818][T16145] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 641.978848][T16145] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 641.978871][T16145] hwsim_new_radio_nl+0xc1f/0x1340 [ 641.978889][T16145] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 641.978913][T16145] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 641.978932][T16145] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 641.978955][T16145] genl_family_rcv_msg_doit+0x214/0x300 [ 641.978975][T16145] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 641.978993][T16145] ? genl_get_cmd+0x3ef/0x720 [ 641.979014][T16145] ? bpf_lsm_capable+0x9/0x10 [ 641.979030][T16145] ? security_capable+0x80/0x260 [ 641.979046][T16145] ? ns_capable+0xd2/0xf0 [ 641.979062][T16145] genl_rcv_msg+0x560/0x800 [ 641.979082][T16145] ? __pfx_genl_rcv_msg+0x10/0x10 [ 641.979100][T16145] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 641.979124][T16145] netlink_rcv_skb+0x159/0x420 [ 641.979139][T16145] ? __pfx_genl_rcv_msg+0x10/0x10 [ 641.979158][T16145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 641.979182][T16145] ? netlink_deliver_tap+0x1ae/0xcc0 [ 641.979200][T16145] genl_rcv+0x28/0x40 [ 641.979215][T16145] netlink_unicast+0x5aa/0x870 [ 641.979233][T16145] ? __pfx_netlink_unicast+0x10/0x10 [ 641.979248][T16145] ? __pfx___might_resched+0x10/0x10 [ 641.979269][T16145] ? __lock_acquire+0x4a5/0x2630 [ 641.979293][T16145] netlink_sendmsg+0x8b0/0xda0 [ 641.979312][T16145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.979326][T16145] ? __import_iovec+0x1d2/0x640 [ 641.979347][T16145] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 641.979366][T16145] ____sys_sendmsg+0x9e1/0xb70 [ 641.979383][T16145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.979400][T16145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.979422][T16145] ? __pfx_futex_wake_mark+0x10/0x10 [ 641.979448][T16145] ___sys_sendmsg+0x190/0x1e0 [ 641.979468][T16145] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.979510][T16145] __sys_sendmsg+0x170/0x220 [ 641.979525][T16145] ? __pfx___sys_sendmsg+0x10/0x10 [ 641.979539][T16145] ? __x64_sys_futex+0x34f/0x4d0 [ 641.979570][T16145] do_syscall_64+0x106/0xf80 [ 641.979585][T16145] ? clear_bhb_loop+0x40/0x90 [ 641.979603][T16145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.979618][T16145] RIP: 0033:0x7fd76fb9c819 [ 641.979633][T16145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.979647][T16145] RSP: 002b:00007fd770a1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.979661][T16145] RAX: ffffffffffffffda RBX: 00007fd76fe15fa0 RCX: 00007fd76fb9c819 [ 641.979672][T16145] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 641.979681][T16145] RBP: 00007fd76fc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 641.979691][T16145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.979700][T16145] R13: 00007fd76fe16038 R14: 00007fd76fe15fa0 R15: 00007ffd19ef9da8 [ 641.979721][T16145] [ 643.331951][T16181] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 643.363796][T16191] random: crng reseeded on system resumption [ 643.377930][T16181] CPU: 0 UID: 0 PID: 16181 Comm: syz.2.2194 Tainted: G U L syzkaller #0 PREEMPT(full) [ 643.377959][T16181] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 643.377965][T16181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 643.377975][T16181] Call Trace: [ 643.377982][T16181] [ 643.377988][T16181] dump_stack_lvl+0x100/0x190 [ 643.378015][T16181] sysfs_warn_dup.cold+0x1c/0x28 [ 643.378037][T16181] sysfs_do_create_link_sd+0x113/0x140 [ 643.378060][T16181] sysfs_create_link+0x61/0xc0 [ 643.378081][T16181] device_add+0x675/0x1950 [ 643.378103][T16181] ? __pfx_device_add+0x10/0x10 [ 643.378122][T16181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 643.378140][T16181] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 643.378168][T16181] wiphy_register+0x1e5b/0x2d30 [ 643.378185][T16181] ? __rtnl_unlock+0xb9/0xf0 [ 643.378204][T16181] ? netdev_run_todo+0x840/0x12c0 [ 643.378225][T16181] ? __pfx_wiphy_register+0x10/0x10 [ 643.378243][T16181] ? __asan_memset+0x23/0x50 [ 643.378265][T16181] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 643.378290][T16181] ieee80211_register_hw+0x2cfd/0x4140 [ 643.378317][T16181] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 643.378334][T16181] ? __pfx___debug_object_init+0x10/0x10 [ 643.378354][T16181] ? find_held_lock+0x2b/0x80 [ 643.378370][T16181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 643.378386][T16181] ? __hrtimer_setup+0x178/0x280 [ 643.378442][T16181] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 643.378475][T16181] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 643.378498][T16181] hwsim_new_radio_nl+0xc1f/0x1340 [ 643.378517][T16181] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 643.378539][T16181] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 643.378558][T16181] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 643.378758][T16181] genl_family_rcv_msg_doit+0x214/0x300 [ 643.378789][T16181] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 643.378809][T16181] ? genl_get_cmd+0x3ef/0x720 [ 643.378831][T16181] ? bpf_lsm_capable+0x9/0x10 [ 643.378853][T16181] ? security_capable+0x80/0x260 [ 643.378871][T16181] ? ns_capable+0xd2/0xf0 [ 643.378894][T16181] genl_rcv_msg+0x560/0x800 [ 643.378934][T16181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 643.378966][T16181] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 643.378991][T16181] netlink_rcv_skb+0x159/0x420 [ 643.379009][T16181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 643.379028][T16181] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 643.379052][T16181] ? netlink_deliver_tap+0x1ae/0xcc0 [ 643.379070][T16181] genl_rcv+0x28/0x40 [ 643.379086][T16181] netlink_unicast+0x5aa/0x870 [ 643.379106][T16181] ? __pfx_netlink_unicast+0x10/0x10 [ 643.379120][T16181] ? __pfx___might_resched+0x10/0x10 [ 643.379142][T16181] ? __lock_acquire+0x4a5/0x2630 [ 643.379167][T16181] netlink_sendmsg+0x8b0/0xda0 [ 643.379186][T16181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.379201][T16181] ? __import_iovec+0x1d2/0x640 [ 643.379222][T16181] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 643.379241][T16181] ____sys_sendmsg+0x9e1/0xb70 [ 643.379258][T16181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.379276][T16181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.379302][T16181] ? try_to_wake_up+0x644/0x1a80 [ 643.379322][T16181] ___sys_sendmsg+0x190/0x1e0 [ 643.379342][T16181] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.379362][T16181] ? futex_private_hash_put+0x107/0x1c0 [ 643.379404][T16181] __sys_sendmsg+0x170/0x220 [ 643.379420][T16181] ? __pfx___sys_sendmsg+0x10/0x10 [ 643.379434][T16181] ? __x64_sys_futex+0x34f/0x4d0 [ 643.379465][T16181] do_syscall_64+0x106/0xf80 [ 643.379481][T16181] ? clear_bhb_loop+0x40/0x90 [ 643.379501][T16181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.379516][T16181] RIP: 0033:0x7f9ab6d9c819 [ 643.379531][T16181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.379546][T16181] RSP: 002b:00007f9ab7c13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.379561][T16181] RAX: ffffffffffffffda RBX: 00007f9ab7015fa0 RCX: 00007f9ab6d9c819 [ 643.379572][T16181] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 643.379582][T16181] RBP: 00007f9ab6e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 643.379591][T16181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.379600][T16181] R13: 00007f9ab7016038 R14: 00007f9ab7015fa0 R15: 00007ffc08418f38 [ 643.379621][T16181] [ 645.056537][T16215] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 645.099274][T16215] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 646.003634][T16239] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 646.011304][T16239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 646.053543][T16239] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 646.082670][T16239] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 646.536830][T16249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2211'. [ 646.579006][T16250] device-mapper: ioctl: Invalid ioctl structure: name þÿÿÿÿÿÿÿd, dev 3000000000 [ 646.810190][T16259] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 646.861426][T16259] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 647.814084][T16282] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2220'. [ 647.963411][ T8132] Bluetooth: hci3: command 0x0c1a tx timeout [ 648.043422][ T8132] Bluetooth: hci4: command 0x0c1a tx timeout [ 648.087541][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2222'. [ 648.130114][ T8132] Bluetooth: hci2: command 0x0c1a tx timeout [ 648.137122][ T8071] Bluetooth: hci1: command 0x0c1a tx timeout [ 648.209634][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 649.211837][T16315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2225'. [ 649.556420][T16319] FAULT_INJECTION: forcing a failure. [ 649.556420][T16319] name fail_futex, interval 1, probability 0, space 0, times 0 [ 649.627952][T16319] CPU: 0 UID: 0 PID: 16319 Comm: syz.2.2226 Tainted: G U L syzkaller #0 PREEMPT(full) [ 649.627982][T16319] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 649.627988][T16319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 649.627998][T16319] Call Trace: [ 649.628004][T16319] [ 649.628010][T16319] dump_stack_lvl+0x100/0x190 [ 649.628038][T16319] should_fail_ex.cold+0x5/0xa [ 649.628053][T16319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.628071][T16319] get_futex_key+0x1d2/0x1620 [ 649.628091][T16319] ? __pfx_get_futex_key+0x10/0x10 [ 649.628116][T16319] futex_wake+0xea/0x530 [ 649.628140][T16319] ? __pfx_futex_wake+0x10/0x10 [ 649.628164][T16319] ? __pfx___might_resched+0x10/0x10 [ 649.628186][T16319] ? __kasan_slab_alloc+0x89/0x90 [ 649.628207][T16319] do_futex+0x32b/0x350 [ 649.628226][T16319] ? __pfx_do_futex+0x10/0x10 [ 649.628246][T16319] ? errseq_sample+0x51/0x70 [ 649.628267][T16319] __x64_sys_futex+0x34f/0x4d0 [ 649.628287][T16319] ? fd_install+0x223/0x580 [ 649.628301][T16319] ? __pfx___x64_sys_futex+0x10/0x10 [ 649.628335][T16319] do_syscall_64+0x106/0xf80 [ 649.628351][T16319] ? clear_bhb_loop+0x40/0x90 [ 649.628369][T16319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.628384][T16319] RIP: 0033:0x7f9ab6d9c819 [ 649.628398][T16319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.628412][T16319] RSP: 002b:00007f9ab7c130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 649.628427][T16319] RAX: ffffffffffffffda RBX: 00007f9ab7015fa8 RCX: 00007f9ab6d9c819 [ 649.628437][T16319] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9ab7015fac [ 649.628446][T16319] RBP: 00007f9ab7015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 649.628455][T16319] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 649.628464][T16319] R13: 00007f9ab7016038 R14: 00007ffc08418e50 R15: 00007ffc08418f38 [ 649.628483][T16319] [ 650.112237][T16320] aoe: can't write to that file. [ 650.996385][T16342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2232'. [ 651.183578][T16346] FAULT_INJECTION: forcing a failure. [ 651.183578][T16346] name failslab, interval 0, probability 0, space 0, times 0 [ 651.273381][T16346] CPU: 0 UID: 0 PID: 16346 Comm: syz.2.2234 Tainted: G U L syzkaller #0 PREEMPT(full) [ 651.273407][T16346] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 651.273413][T16346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 651.273422][T16346] Call Trace: [ 651.273428][T16346] [ 651.273434][T16346] dump_stack_lvl+0x100/0x190 [ 651.273460][T16346] should_fail_ex.cold+0x5/0xa [ 651.273478][T16346] should_failslab+0xc2/0x120 [ 651.273494][T16346] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 651.273515][T16346] ? __d_alloc+0x34/0xa80 [ 651.273534][T16346] __d_alloc+0x34/0xa80 [ 651.273552][T16346] d_alloc_pseudo+0x1c/0xc0 [ 651.273571][T16346] alloc_file_pseudo+0xcf/0x230 [ 651.273590][T16346] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 651.273613][T16346] __shmem_file_setup+0x221/0x490 [ 651.273633][T16346] ? __pfx___shmem_file_setup+0x10/0x10 [ 651.273655][T16346] ? vm_area_alloc+0x1f/0x160 [ 651.273675][T16346] shmem_zero_setup+0x96/0x1b0 [ 651.273690][T16346] __mmap_region+0x21f6/0x2a50 [ 651.273713][T16346] ? __pfx___mmap_region+0x10/0x10 [ 651.273734][T16346] ? __lock_acquire+0x4a5/0x2630 [ 651.273754][T16346] ? set_next_entity+0x11e/0x9c0 [ 651.273776][T16346] ? __lock_acquire+0x4a5/0x2630 [ 651.273793][T16346] ? find_held_lock+0x2b/0x80 [ 651.273814][T16346] ? find_held_lock+0x2b/0x80 [ 651.273827][T16346] ? finish_task_switch.isra.0+0x200/0xb80 [ 651.273843][T16346] ? finish_task_switch.isra.0+0x200/0xb80 [ 651.273865][T16346] ? trace_sched_exit_tp+0x13a/0x180 [ 651.273888][T16346] ? __schedule+0x1000/0x6120 [ 651.273926][T16346] ? rcu_is_watching+0x12/0xc0 [ 651.273946][T16346] ? cap_capable+0x107/0x460 [ 651.273964][T16346] mmap_region+0x180/0x3e0 [ 651.273988][T16346] do_mmap+0xc63/0x12f0 [ 651.274008][T16346] ? __pfx_do_mmap+0x10/0x10 [ 651.274023][T16346] ? __pfx_down_write_killable+0x10/0x10 [ 651.274044][T16346] vm_mmap_pgoff+0x29e/0x470 [ 651.274063][T16346] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 651.274080][T16346] ? do_futex+0x192/0x350 [ 651.274099][T16346] ? __pfx_do_futex+0x10/0x10 [ 651.274119][T16346] ksys_mmap_pgoff+0xe1/0x650 [ 651.274135][T16346] ? __x64_sys_futex+0x34f/0x4d0 [ 651.274151][T16346] ? __x64_sys_futex+0x358/0x4d0 [ 651.274169][T16346] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 651.274184][T16346] ? xfd_validate_state+0x129/0x190 [ 651.274211][T16346] __x64_sys_mmap+0x125/0x190 [ 651.274233][T16346] do_syscall_64+0x106/0xf80 [ 651.274247][T16346] ? clear_bhb_loop+0x40/0x90 [ 651.274265][T16346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.274280][T16346] RIP: 0033:0x7f9ab6d9c819 [ 651.274292][T16346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.274306][T16346] RSP: 002b:00007f9ab7c13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 651.274320][T16346] RAX: ffffffffffffffda RBX: 00007f9ab7015fa0 RCX: 00007f9ab6d9c819 [ 651.274330][T16346] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 651.274339][T16346] RBP: 00007f9ab6e32c91 R08: 0000000000000003 R09: 0000000000008000 [ 651.274349][T16346] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 651.274362][T16346] R13: 00007f9ab7016038 R14: 00007f9ab7015fa0 R15: 00007ffc08418f38 [ 651.274383][T16346] [ 652.144676][T16353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2235'. [ 652.524746][T16359] FAULT_INJECTION: forcing a failure. [ 652.524746][T16359] name failslab, interval 0, probability 0, space 0, times 0 [ 652.706191][T16359] CPU: 0 UID: 0 PID: 16359 Comm: syz.4.2237 Tainted: G U L syzkaller #0 PREEMPT(full) [ 652.706224][T16359] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 652.706230][T16359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 652.706240][T16359] Call Trace: [ 652.706246][T16359] [ 652.706252][T16359] dump_stack_lvl+0x100/0x190 [ 652.706280][T16359] should_fail_ex.cold+0x5/0xa [ 652.706299][T16359] should_failslab+0xc2/0x120 [ 652.706316][T16359] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 652.706337][T16359] ? alloc_empty_file+0x55/0x1c0 [ 652.706360][T16359] alloc_empty_file+0x55/0x1c0 [ 652.706379][T16359] alloc_file_pseudo+0x13a/0x230 [ 652.706399][T16359] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 652.706418][T16359] ? security_inode_init_security_anon+0x7b/0x230 [ 652.706440][T16359] __do_sys_memfd_secret+0x11d/0x3d0 [ 652.706457][T16359] do_syscall_64+0x106/0xf80 [ 652.706473][T16359] ? clear_bhb_loop+0x40/0x90 [ 652.706490][T16359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.706505][T16359] RIP: 0033:0x7f72bbd9c819 [ 652.706518][T16359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.706532][T16359] RSP: 002b:00007f72bcd32028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 652.706547][T16359] RAX: ffffffffffffffda RBX: 00007f72bc015fa0 RCX: 00007f72bbd9c819 [ 652.706557][T16359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 652.706565][T16359] RBP: 00007f72bbe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 652.706574][T16359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.706583][T16359] R13: 00007f72bc016038 R14: 00007f72bc015fa0 R15: 00007ffd9e085878 [ 652.706602][T16359] [ 654.271539][T16376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2240'. [ 655.359068][T16400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2247'. [ 655.453850][T16407] FAULT_INJECTION: forcing a failure. [ 655.453850][T16407] name failslab, interval 0, probability 0, space 0, times 0 [ 655.533006][T16407] CPU: 0 UID: 0 PID: 16407 Comm: syz.5.2250 Tainted: G U L syzkaller #0 PREEMPT(full) [ 655.533035][T16407] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 655.533042][T16407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 655.533052][T16407] Call Trace: [ 655.533058][T16407] [ 655.533064][T16407] dump_stack_lvl+0x100/0x190 [ 655.533092][T16407] should_fail_ex.cold+0x5/0xa [ 655.533110][T16407] should_failslab+0xc2/0x120 [ 655.533127][T16407] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 655.533149][T16407] ? alloc_empty_file+0x55/0x1c0 [ 655.533167][T16407] ? __pfx_stack_trace_save+0x10/0x10 [ 655.533186][T16407] alloc_empty_file+0x55/0x1c0 [ 655.533207][T16407] path_openat+0xe8/0x31a0 [ 655.533222][T16407] ? kasan_save_stack+0x3f/0x50 [ 655.533236][T16407] ? kasan_save_stack+0x30/0x50 [ 655.533248][T16407] ? kasan_save_track+0x14/0x30 [ 655.533261][T16407] ? __kasan_slab_alloc+0x89/0x90 [ 655.533274][T16407] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 655.533294][T16407] ? do_getname+0x35/0x390 [ 655.533311][T16407] ? do_sys_openat2+0xc5/0x1e0 [ 655.533330][T16407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.533347][T16407] ? __pfx_path_openat+0x10/0x10 [ 655.533368][T16407] do_file_open+0x20e/0x430 [ 655.533386][T16407] ? __pfx_do_file_open+0x10/0x10 [ 655.533414][T16407] ? alloc_fd+0x476/0x790 [ 655.533431][T16407] ? do_getname+0x191/0x390 [ 655.533451][T16407] do_sys_openat2+0x10d/0x1e0 [ 655.533470][T16407] ? __pfx_do_sys_openat2+0x10/0x10 [ 655.533496][T16407] __x64_sys_openat+0x12d/0x210 [ 655.533515][T16407] ? __pfx___x64_sys_openat+0x10/0x10 [ 655.533541][T16407] do_syscall_64+0x106/0xf80 [ 655.533557][T16407] ? clear_bhb_loop+0x40/0x90 [ 655.533574][T16407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.533589][T16407] RIP: 0033:0x7fd76fb9c819 [ 655.533602][T16407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.533617][T16407] RSP: 002b:00007fd770a1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 655.533632][T16407] RAX: ffffffffffffffda RBX: 00007fd76fe15fa0 RCX: 00007fd76fb9c819 [ 655.533642][T16407] RDX: 0000000000038000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 655.533651][T16407] RBP: 00007fd76fc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 655.533660][T16407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.533669][T16407] R13: 00007fd76fe16038 R14: 00007fd76fe15fa0 R15: 00007ffd19ef9da8 [ 655.533689][T16407] [ 657.044014][T16431] netlink: 318 bytes leftover after parsing attributes in process `syz.0.2255'. [ 657.175670][T16434] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 659.943091][T16480] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2266'. [ 660.956320][T16498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2270'. [ 660.979810][T16500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2272'. [ 662.304298][T16531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2281'. [ 662.315108][T16533] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2282'. [ 662.743548][T16546] ACPI: Can not change Invalid GPE/Fixed Event status [ 662.917455][T16552] FAULT_INJECTION: forcing a failure. [ 662.917455][T16552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.010999][T16552] CPU: 0 UID: 0 PID: 16552 Comm: syz.0.2287 Tainted: G U L syzkaller #0 PREEMPT(full) [ 663.011025][T16552] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 663.011031][T16552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 663.011040][T16552] Call Trace: [ 663.011045][T16552] [ 663.011051][T16552] dump_stack_lvl+0x100/0x190 [ 663.011077][T16552] should_fail_ex.cold+0x5/0xa [ 663.011095][T16552] _copy_from_user+0x2e/0xd0 [ 663.011114][T16552] copy_msghdr_from_user+0x9f/0x4f0 [ 663.011132][T16552] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 663.011153][T16552] ? futex_unqueue+0x133/0x2c0 [ 663.011175][T16552] ___sys_sendmsg+0x106/0x1e0 [ 663.011197][T16552] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.011214][T16552] ? __pfx___futex_wait+0x10/0x10 [ 663.011241][T16552] ? find_held_lock+0x2b/0x80 [ 663.011266][T16552] __sys_sendmmsg+0x205/0x430 [ 663.011282][T16552] ? __pfx___sys_sendmmsg+0x10/0x10 [ 663.011295][T16552] ? __local_bh_enable_ip+0x9e/0x120 [ 663.011315][T16552] ? __pfx_do_futex+0x10/0x10 [ 663.011342][T16552] ? xfd_validate_state+0x129/0x190 [ 663.011366][T16552] __x64_sys_sendmmsg+0x9c/0x100 [ 663.011379][T16552] ? lockdep_hardirqs_on+0x78/0x100 [ 663.011394][T16552] do_syscall_64+0x106/0xf80 [ 663.011408][T16552] ? clear_bhb_loop+0x40/0x90 [ 663.011425][T16552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.011439][T16552] RIP: 0033:0x7f9da1b9c819 [ 663.011452][T16552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.011465][T16552] RSP: 002b:00007f9da29fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 663.011480][T16552] RAX: ffffffffffffffda RBX: 00007f9da1e16180 RCX: 00007f9da1b9c819 [ 663.011490][T16552] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 663.011498][T16552] RBP: 00007f9da1c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 663.011507][T16552] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.011515][T16552] R13: 00007f9da1e16218 R14: 00007f9da1e16180 R15: 00007ffca89ef5a8 [ 663.011534][T16552] [ 663.816588][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2292'. [ 664.027706][T16576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2293'. [ 665.923084][T16625] futex_wake_op: syz.4.2307 tries to shift op by -2048; fix this program [ 666.028047][T16630] FAULT_INJECTION: forcing a failure. [ 666.028047][T16630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.125060][T16630] CPU: 0 UID: 0 PID: 16630 Comm: syz.5.2308 Tainted: G U L syzkaller #0 PREEMPT(full) [ 666.125087][T16630] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 666.125093][T16630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 666.125101][T16630] Call Trace: [ 666.125107][T16630] [ 666.125113][T16630] dump_stack_lvl+0x100/0x190 [ 666.125139][T16630] should_fail_ex.cold+0x5/0xa [ 666.125157][T16630] _copy_to_iter+0x5a4/0x1720 [ 666.125179][T16630] ? __pfx__copy_to_iter+0x10/0x10 [ 666.125199][T16630] ? info_read+0x98/0xb0 [ 666.125214][T16630] ? snd_info_seq_show+0xd5/0x120 [ 666.125232][T16630] ? single_next+0xd/0x40 [ 666.125249][T16630] ? single_stop+0x9/0x10 [ 666.125265][T16630] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 666.125291][T16630] seq_read_iter+0x691/0x1270 [ 666.125313][T16630] ? aa_file_perm+0x7f3/0x14d0 [ 666.125338][T16630] seq_read+0x33b/0x4c0 [ 666.125358][T16630] ? __pfx_seq_read+0x10/0x10 [ 666.125390][T16630] ? __pfx_seq_read+0x10/0x10 [ 666.125410][T16630] proc_reg_read+0x240/0x330 [ 666.125431][T16630] ? __pfx_proc_reg_read+0x10/0x10 [ 666.125451][T16630] vfs_read+0x1e4/0xb30 [ 666.125467][T16630] ? __pfx_vfs_read+0x10/0x10 [ 666.125479][T16630] ? find_held_lock+0x2b/0x80 [ 666.125492][T16630] ? __fget_files+0x215/0x3d0 [ 666.125505][T16630] ? __fget_files+0x215/0x3d0 [ 666.125522][T16630] ? __fget_files+0x21f/0x3d0 [ 666.125540][T16630] __x64_sys_pread64+0x1eb/0x250 [ 666.125556][T16630] ? __pfx___x64_sys_pread64+0x10/0x10 [ 666.125575][T16630] do_syscall_64+0x106/0xf80 [ 666.125590][T16630] ? clear_bhb_loop+0x40/0x90 [ 666.125608][T16630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.125622][T16630] RIP: 0033:0x7fd76fb9c819 [ 666.125634][T16630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.125654][T16630] RSP: 002b:00007fd770a1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 666.125668][T16630] RAX: ffffffffffffffda RBX: 00007fd76fe15fa0 RCX: 00007fd76fb9c819 [ 666.125677][T16630] RDX: 0000200000000042 RSI: 0000200000000540 RDI: 0000000000000003 [ 666.125686][T16630] RBP: 00007fd770a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 666.125695][T16630] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 666.125704][T16630] R13: 00007fd76fe16038 R14: 00007fd76fe15fa0 R15: 00007ffd19ef9da8 [ 666.125722][T16630] [ 666.488776][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2312'. [ 666.539758][T16639] sd 0:0:1:0: PR command failed: 1026 [ 666.548399][T16639] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 666.558053][T16639] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 667.349639][T16652] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2316'. [ 667.430412][T16652] ipvlan1: entered promiscuous mode [ 667.435812][T16652] ipvlan1: entered allmulticast mode [ 667.442134][T16663] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 667.472954][T16652] veth0_vlan: entered allmulticast mode [ 667.483632][T16663] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 667.879606][T16671] bridge0: port 3(veth0_to_bridge) entered blocking state [ 667.917734][T16673] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2323'. [ 667.927404][T16671] bridge0: port 3(veth0_to_bridge) entered disabled state [ 667.955221][T16671] veth0_to_bridge: entered allmulticast mode [ 667.983562][T16671] veth0_to_bridge: entered promiscuous mode [ 668.000046][T16671] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.045673][T16671] bridge0: port 3(veth0_to_bridge) entered blocking state [ 668.053122][T16671] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 668.827535][T16689] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 668.846708][T16692] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 668.884263][T16689] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 668.893071][T16689] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 668.904030][T16692] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 668.971862][T16689] page_type: f5(slab) [ 668.995891][T16689] raw: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 669.071004][T16689] raw: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 669.102549][T16689] head: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 669.150310][T16689] head: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 669.203503][T16689] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 669.273368][T16689] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 669.313692][T16689] page dumped because: unmovable page [ 669.331543][T16707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2334'. [ 669.343532][T16689] page_owner tracks the page as allocated [ 669.384541][T16689] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5208, tgid 5208 (udevadm), ts 33650218262, free_ts 27700938149 [ 669.519793][T16689] post_alloc_hook+0x153/0x170 [ 669.543512][T16689] get_page_from_freelist+0x111d/0x3140 [ 669.576488][T16689] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 669.613734][T16689] new_slab+0xa6/0x6b0 [ 669.629077][T16689] refill_objects+0x26b/0x400 [ 669.653447][T16689] __pcs_replace_empty_main+0x1ab/0x660 [ 669.659130][T16689] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 669.715464][T16689] __d_alloc+0x34/0xa80 [ 669.733114][T16689] d_alloc_parallel+0x111/0x14e0 [ 669.755706][T16689] __lookup_slow+0x193/0x460 [ 669.774457][T16689] lookup_slow+0x50/0x70 [ 669.799897][T16689] path_lookupat+0x5e8/0xc40 [ 669.818421][T16689] filename_lookup+0x202/0x590 [ 669.843396][T16689] do_readlinkat+0xd3/0x370 [ 669.865408][T16689] __x64_sys_readlink+0x78/0xc0 [ 669.870368][T16689] do_syscall_64+0x106/0xf80 [ 669.906500][T16689] page last free pid 1 tgid 1 stack trace: [ 669.934230][T16689] __free_frozen_pages+0x7e1/0x10d0 [ 669.959001][T16689] free_contig_range+0xde/0x1d0 [ 669.985896][T16689] destroy_args+0xa8/0x7a0 [ 670.000758][T16689] debug_vm_pgtable+0x1b66/0x34c0 [ 670.030258][T16689] do_one_initcall+0x11d/0x760 [ 670.048756][T16689] kernel_init_freeable+0x6e5/0x7a0 [ 670.075342][T16689] kernel_init+0x1f/0x1e0 [ 670.091254][T16689] ret_from_fork+0x754/0xd80 [ 670.116910][T16689] ret_from_fork_asm+0x1a/0x30 [ 670.499039][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2339'. [ 670.564017][T16733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2341'. [ 670.624446][T16735] bond0: no command found in slaves file - use +ifname or -ifname [ 670.927332][T16745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2344'. [ 670.975320][ T8389] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:23: bg 5: bad block bitmap checksum [ 671.038335][ T8389] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 671.113162][ T8389] EXT4-fs (sda1): This should not happen!! Data will be lost [ 671.113162][ T8389] [ 671.195574][T16749] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 671.239029][T16749] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 671.597812][T16755] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 671.627619][T16755] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 671.670055][T16755] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 671.713967][T16755] page_type: f5(slab) [ 671.724110][T16755] raw: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 671.767024][T16755] raw: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 671.807540][T16755] head: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 671.854170][T16755] head: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 671.928366][T16755] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 671.972502][T16762] bond0: invalid ARP target specified [ 671.983514][T16755] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 672.004921][ T9463] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 672.023502][T16762] binder: 16761:16762 ioctl c0905664 38 returned -22 [ 672.037549][T16755] page dumped because: unmovable page [ 672.051536][ T9463] EXT4-fs (sda1): This should not happen!! Data will be lost [ 672.051536][ T9463] [ 672.065002][T16755] page_owner tracks the page as allocated [ 672.080563][T16755] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5208, tgid 5208 (udevadm), ts 33650218262, free_ts 27700938149 [ 672.175571][T16755] post_alloc_hook+0x153/0x170 [ 672.190973][T16755] get_page_from_freelist+0x111d/0x3140 [ 672.210321][T16755] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 672.230934][T16755] new_slab+0xa6/0x6b0 [ 672.250307][T16755] refill_objects+0x26b/0x400 [ 672.268541][T16755] __pcs_replace_empty_main+0x1ab/0x660 [ 672.296593][T16755] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 672.323554][T16755] __d_alloc+0x34/0xa80 [ 672.343987][T16755] d_alloc_parallel+0x111/0x14e0 [ 672.365451][T16770] zram: Added device: zram0 [ 672.378322][T16755] __lookup_slow+0x193/0x460 [ 672.393318][T16755] lookup_slow+0x50/0x70 [ 672.448250][T16755] path_lookupat+0x5e8/0xc40 [ 672.467785][T16755] filename_lookup+0x202/0x590 [ 672.472734][T16755] do_readlinkat+0xd3/0x370 [ 672.487868][ T8389] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 672.513366][T16755] __x64_sys_readlink+0x78/0xc0 [ 672.533385][ T8389] EXT4-fs (sda1): This should not happen!! Data will be lost [ 672.533385][ T8389] [ 672.553400][T16755] do_syscall_64+0x106/0xf80 [ 672.558099][T16755] page last free pid 1 tgid 1 stack trace: [ 672.595680][T16773] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2351'. [ 672.609262][T16755] __free_frozen_pages+0x7e1/0x10d0 [ 672.632356][T16755] free_contig_range+0xde/0x1d0 [ 672.655777][T16755] destroy_args+0xa8/0x7a0 [ 672.674450][T16755] debug_vm_pgtable+0x1b66/0x34c0 [ 672.704549][T16755] do_one_initcall+0x11d/0x760 [ 672.743478][T16755] kernel_init_freeable+0x6e5/0x7a0 [ 672.748761][T16755] kernel_init+0x1f/0x1e0 [ 672.778818][T16755] ret_from_fork+0x754/0xd80 [ 672.803356][T16755] ret_from_fork_asm+0x1a/0x30 [ 673.045153][T16775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2352'. [ 673.237124][T16785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2355'. [ 673.420395][T16778] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2353'. [ 673.504068][ T9463] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 673.588336][ T9463] EXT4-fs (sda1): This should not happen!! Data will be lost [ 673.588336][ T9463] [ 673.866871][T16803] futex_wake_op: syz.4.2358 tries to shift op by -2048; fix this program [ 673.975167][T16808] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2360'. [ 674.002214][ T8374] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 674.050161][ T8374] EXT4-fs (sda1): This should not happen!! Data will be lost [ 674.050161][ T8374] [ 674.850868][T16829] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 674.884982][T16829] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 675.317452][T16836] HfR: entered promiscuous mode [ 675.795019][T16850] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 675.850342][T16850] CPU: 0 UID: 0 PID: 16850 Comm: syz.4.2374 Tainted: G U L syzkaller #0 PREEMPT(full) [ 675.850371][T16850] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 675.850377][T16850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 675.850386][T16850] Call Trace: [ 675.850392][T16850] [ 675.850399][T16850] dump_stack_lvl+0x100/0x190 [ 675.850433][T16850] sysfs_warn_dup.cold+0x1c/0x28 [ 675.850454][T16850] sysfs_do_create_link_sd+0x113/0x140 [ 675.850478][T16850] sysfs_create_link+0x61/0xc0 [ 675.850499][T16850] device_add+0x675/0x1950 [ 675.850521][T16850] ? __pfx_device_add+0x10/0x10 [ 675.850540][T16850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.850557][T16850] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 675.850585][T16850] wiphy_register+0x1e5b/0x2d30 [ 675.850602][T16850] ? __rtnl_unlock+0xb9/0xf0 [ 675.850619][T16850] ? netdev_run_todo+0x840/0x12c0 [ 675.850637][T16850] ? __pfx_wiphy_register+0x10/0x10 [ 675.850656][T16850] ? __asan_memset+0x23/0x50 [ 675.850676][T16850] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 675.850703][T16850] ieee80211_register_hw+0x2cfd/0x4140 [ 675.850730][T16850] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 675.850748][T16850] ? __pfx___debug_object_init+0x10/0x10 [ 675.850768][T16850] ? find_held_lock+0x2b/0x80 [ 675.850784][T16850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.850800][T16850] ? __hrtimer_setup+0x178/0x280 [ 675.850822][T16850] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 675.850852][T16850] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 675.850874][T16850] hwsim_new_radio_nl+0xc1f/0x1340 [ 675.850893][T16850] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 675.850915][T16850] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 675.850935][T16850] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 675.850958][T16850] genl_family_rcv_msg_doit+0x214/0x300 [ 675.850979][T16850] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 675.850996][T16850] ? genl_get_cmd+0x3ef/0x720 [ 675.851018][T16850] ? bpf_lsm_capable+0x9/0x10 [ 675.851034][T16850] ? security_capable+0x80/0x260 [ 675.851049][T16850] ? ns_capable+0xd2/0xf0 [ 675.851066][T16850] genl_rcv_msg+0x560/0x800 [ 675.851086][T16850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.851104][T16850] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 675.851127][T16850] netlink_rcv_skb+0x159/0x420 [ 675.851143][T16850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.851161][T16850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 675.851188][T16850] ? netlink_deliver_tap+0x1ae/0xcc0 [ 675.851206][T16850] genl_rcv+0x28/0x40 [ 675.851221][T16850] netlink_unicast+0x5aa/0x870 [ 675.851240][T16850] ? __pfx_netlink_unicast+0x10/0x10 [ 675.851255][T16850] ? __pfx___might_resched+0x10/0x10 [ 675.851276][T16850] ? __lock_acquire+0x4a5/0x2630 [ 675.851300][T16850] netlink_sendmsg+0x8b0/0xda0 [ 675.851318][T16850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.851333][T16850] ? __import_iovec+0x1d2/0x640 [ 675.851354][T16850] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 675.851372][T16850] ____sys_sendmsg+0x9e1/0xb70 [ 675.851389][T16850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.851407][T16850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.851436][T16850] ? __pfx_futex_wake_mark+0x10/0x10 [ 675.851463][T16850] ___sys_sendmsg+0x190/0x1e0 [ 675.851484][T16850] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.851528][T16850] __sys_sendmsg+0x170/0x220 [ 675.851543][T16850] ? __pfx___sys_sendmsg+0x10/0x10 [ 675.851557][T16850] ? __x64_sys_futex+0x34f/0x4d0 [ 675.851587][T16850] do_syscall_64+0x106/0xf80 [ 675.851602][T16850] ? clear_bhb_loop+0x40/0x90 [ 675.851620][T16850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.851636][T16850] RIP: 0033:0x7f72bbd9c819 [ 675.851650][T16850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.851664][T16850] RSP: 002b:00007f72bcd32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.851679][T16850] RAX: ffffffffffffffda RBX: 00007f72bc015fa0 RCX: 00007f72bbd9c819 [ 675.851689][T16850] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 675.851699][T16850] RBP: 00007f72bbe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 675.851708][T16850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.851717][T16850] R13: 00007f72bc016038 R14: 00007f72bc015fa0 R15: 00007ffd9e085878 [ 675.851738][T16850] [ 676.407178][ T8389] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 676.419891][ T8389] EXT4-fs (sda1): This should not happen!! Data will be lost [ 676.419891][ T8389] [ 676.488183][T16862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2376'. [ 676.873780][T16871] QAT: Device 0 not found [ 677.659551][T16887] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 677.713355][T16887] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 677.964253][T16892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2387'. [ 677.991069][T16894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2388'. [ 678.119776][T16896] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 678.137905][T16896] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 678.356421][T16904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2398'. [ 678.473815][ T9463] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 678.546800][ T9463] EXT4-fs (sda1): This should not happen!! Data will be lost [ 678.546800][ T9463] [ 679.723938][T16939] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 679.768429][T16939] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 679.815506][T16939] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 679.870181][T16939] page_type: f5(slab) [ 679.895422][T16947] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2400'. [ 679.907786][T16939] raw: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 679.946221][T16939] raw: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 679.972004][ T8389] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 679.993402][T16939] head: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 680.023020][ T8389] EXT4-fs (sda1): This should not happen!! Data will be lost [ 680.023020][ T8389] [ 680.034384][T16939] head: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 680.074770][T16939] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 680.128268][T16939] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 680.182899][T16939] page dumped because: unmovable page [ 680.231925][T16939] page_owner tracks the page as allocated [ 680.253028][T16939] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5208, tgid 5208 (udevadm), ts 33650218262, free_ts 27700938149 [ 680.363528][T16939] post_alloc_hook+0x153/0x170 [ 680.384288][T16939] get_page_from_freelist+0x111d/0x3140 [ 680.403318][T16939] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 680.423337][T16939] new_slab+0xa6/0x6b0 [ 680.445815][T16939] refill_objects+0x26b/0x400 [ 680.469321][T16939] __pcs_replace_empty_main+0x1ab/0x660 [ 680.493464][T16939] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 680.524318][T16939] __d_alloc+0x34/0xa80 [ 680.528559][T16939] d_alloc_parallel+0x111/0x14e0 [ 680.550069][T16939] __lookup_slow+0x193/0x460 [ 680.570497][T16939] lookup_slow+0x50/0x70 [ 680.592419][T16939] path_lookupat+0x5e8/0xc40 [ 680.612511][T16939] filename_lookup+0x202/0x590 [ 680.629410][T16939] do_readlinkat+0xd3/0x370 [ 680.644467][T16939] __x64_sys_readlink+0x78/0xc0 [ 680.661527][T16939] do_syscall_64+0x106/0xf80 [ 680.691243][T16939] page last free pid 1 tgid 1 stack trace: [ 680.722759][T16939] __free_frozen_pages+0x7e1/0x10d0 [ 680.735899][T16939] free_contig_range+0xde/0x1d0 [ 680.755217][T16939] destroy_args+0xa8/0x7a0 [ 680.775004][T16939] debug_vm_pgtable+0x1b66/0x34c0 [ 680.788219][T16939] do_one_initcall+0x11d/0x760 [ 680.807509][T16939] kernel_init_freeable+0x6e5/0x7a0 [ 680.827586][T16939] kernel_init+0x1f/0x1e0 [ 680.835619][T16939] ret_from_fork+0x754/0xd80 [ 680.848060][T16939] ret_from_fork_asm+0x1a/0x30 [ 680.858473][T16958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2402'. [ 680.890695][T16966] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 680.936547][T16958] ipvlan1: entered promiscuous mode [ 680.959963][T16958] ipvlan1: entered allmulticast mode [ 681.006982][T16958] veth0_vlan: entered allmulticast mode [ 681.998976][ T9463] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 682.083117][ T9463] EXT4-fs (sda1): This should not happen!! Data will be lost [ 682.083117][ T9463] [ 682.503523][ T9463] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 682.575781][ T9463] EXT4-fs (sda1): This should not happen!! Data will be lost [ 682.575781][ T9463] [ 682.830347][T16974] kexec: Could not allocate control_code_buffer [ 682.994564][ T9463] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 683.085136][ T9463] EXT4-fs (sda1): This should not happen!! Data will be lost [ 683.085136][ T9463] [ 683.099417][T16999] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 683.122768][T17005] random: crng reseeded on system resumption [ 683.143795][T16999] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 683.186258][T16999] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 683.218303][T17006] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 683.244218][T16999] page_type: f5(slab) [ 683.259432][T16999] raw: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 683.279332][T17006] CPU: 0 UID: 0 PID: 17006 Comm: syz.4.2414 Tainted: G U L syzkaller #0 PREEMPT(full) [ 683.279361][T17006] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 683.279367][T17006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 683.279376][T17006] Call Trace: [ 683.279382][T17006] [ 683.279388][T17006] dump_stack_lvl+0x100/0x190 [ 683.279417][T17006] sysfs_warn_dup.cold+0x1c/0x28 [ 683.279438][T17006] sysfs_do_create_link_sd+0x113/0x140 [ 683.279462][T17006] sysfs_create_link+0x61/0xc0 [ 683.279492][T17006] device_add+0x675/0x1950 [ 683.279516][T17006] ? __pfx_device_add+0x10/0x10 [ 683.279534][T17006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 683.279553][T17006] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 683.279580][T17006] wiphy_register+0x1e5b/0x2d30 [ 683.279598][T17006] ? __rtnl_unlock+0xb9/0xf0 [ 683.279614][T17006] ? netdev_run_todo+0x840/0x12c0 [ 683.279633][T17006] ? __pfx_wiphy_register+0x10/0x10 [ 683.279651][T17006] ? __asan_memset+0x23/0x50 [ 683.279672][T17006] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 683.279704][T17006] ieee80211_register_hw+0x2cfd/0x4140 [ 683.279732][T17006] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 683.279750][T17006] ? __pfx___debug_object_init+0x10/0x10 [ 683.279772][T17006] ? find_held_lock+0x2b/0x80 [ 683.279789][T17006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 683.279805][T17006] ? __hrtimer_setup+0x178/0x280 [ 683.279827][T17006] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 683.279856][T17006] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 683.279879][T17006] hwsim_new_radio_nl+0xc1f/0x1340 [ 683.279898][T17006] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 683.279920][T17006] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 683.279939][T17006] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 683.279962][T17006] genl_family_rcv_msg_doit+0x214/0x300 [ 683.279989][T17006] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 683.280008][T17006] ? genl_get_cmd+0x3ef/0x720 [ 683.280030][T17006] ? bpf_lsm_capable+0x9/0x10 [ 683.280047][T17006] ? security_capable+0x80/0x260 [ 683.280064][T17006] ? ns_capable+0xd2/0xf0 [ 683.280080][T17006] genl_rcv_msg+0x560/0x800 [ 683.280101][T17006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 683.280119][T17006] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 683.280142][T17006] netlink_rcv_skb+0x159/0x420 [ 683.280158][T17006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 683.280176][T17006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 683.280203][T17006] ? netlink_deliver_tap+0x1ae/0xcc0 [ 683.280221][T17006] genl_rcv+0x28/0x40 [ 683.280236][T17006] netlink_unicast+0x5aa/0x870 [ 683.280255][T17006] ? __pfx_netlink_unicast+0x10/0x10 [ 683.280270][T17006] ? __pfx___might_resched+0x10/0x10 [ 683.280290][T17006] ? __lock_acquire+0x4a5/0x2630 [ 683.280314][T17006] netlink_sendmsg+0x8b0/0xda0 [ 683.280334][T17006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.280348][T17006] ? __import_iovec+0x1d2/0x640 [ 683.280369][T17006] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 683.280388][T17006] ____sys_sendmsg+0x9e1/0xb70 [ 683.280405][T17006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.280422][T17006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.280444][T17006] ? __pfx_futex_wake_mark+0x10/0x10 [ 683.280469][T17006] ___sys_sendmsg+0x190/0x1e0 [ 683.280489][T17006] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.280531][T17006] __sys_sendmsg+0x170/0x220 [ 683.280546][T17006] ? __pfx___sys_sendmsg+0x10/0x10 [ 683.280559][T17006] ? __x64_sys_futex+0x34f/0x4d0 [ 683.280590][T17006] do_syscall_64+0x106/0xf80 [ 683.280606][T17006] ? clear_bhb_loop+0x40/0x90 [ 683.280624][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.280638][T17006] RIP: 0033:0x7f72bbd9c819 [ 683.280654][T17006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.280677][T17006] RSP: 002b:00007f72bcd32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.280700][T17006] RAX: ffffffffffffffda RBX: 00007f72bc015fa0 RCX: 00007f72bbd9c819 [ 683.280711][T17006] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 683.280721][T17006] RBP: 00007f72bbe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 683.280730][T17006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.280739][T17006] R13: 00007f72bc016038 R14: 00007f72bc015fa0 R15: 00007ffd9e085878 [ 683.280764][T17006] [ 683.749866][T16999] raw: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 683.758741][T16999] head: 00fff00000000040 ffff88801ce91780 dead000000000100 dead000000000122 [ 683.768079][T16999] head: 0000000000000000 0000000800150015 00000000f5000000 0000000000000000 [ 683.779624][T16999] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 683.788475][T16999] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 683.797403][T16999] page dumped because: unmovable page [ 683.802811][T16999] page_owner tracks the page as allocated [ 683.808708][T16999] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5208, tgid 5208 (udevadm), ts 33650218262, free_ts 27700938149 [ 683.832025][T16999] post_alloc_hook+0x153/0x170 [ 683.837152][T16999] get_page_from_freelist+0x111d/0x3140 [ 683.842861][T16999] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 683.848858][T16999] new_slab+0xa6/0x6b0 [ 683.853037][T16999] refill_objects+0x26b/0x400 [ 683.857804][T16999] __pcs_replace_empty_main+0x1ab/0x660 [ 683.863545][T16999] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 683.869829][T16999] __d_alloc+0x34/0xa80 [ 683.874223][T16999] d_alloc_parallel+0x111/0x14e0 [ 683.879666][T16999] __lookup_slow+0x193/0x460 [ 683.884528][T16999] lookup_slow+0x50/0x70 [ 683.888835][T16999] path_lookupat+0x5e8/0xc40 [ 683.893529][T16999] filename_lookup+0x202/0x590 [ 683.898478][T16999] do_readlinkat+0xd3/0x370 [ 683.903036][T16999] __x64_sys_readlink+0x78/0xc0 [ 683.908113][T16999] do_syscall_64+0x106/0xf80 [ 683.912833][T16999] page last free pid 1 tgid 1 stack trace: [ 683.918805][T16999] __free_frozen_pages+0x7e1/0x10d0 [ 683.924238][T16999] free_contig_range+0xde/0x1d0 [ 683.929578][T16999] destroy_args+0xa8/0x7a0 [ 683.934152][T16999] debug_vm_pgtable+0x1b66/0x34c0 [ 683.939334][T16999] do_one_initcall+0x11d/0x760 [ 683.944219][T16999] kernel_init_freeable+0x6e5/0x7a0 [ 683.949551][T16999] kernel_init+0x1f/0x1e0 [ 683.953979][T16999] ret_from_fork+0x754/0xd80 [ 683.958610][T16999] ret_from_fork_asm+0x1a/0x30 [ 684.085711][ T9485] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 684.098224][ T9485] EXT4-fs (sda1): This should not happen!! Data will be lost [ 684.098224][ T9485] [ 684.372635][T17028] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[17028] [ 684.925386][T17044] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2421'. [ 685.019299][ T9474] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 685.058021][ T9474] EXT4-fs (sda1): This should not happen!! Data will be lost [ 685.058021][ T9474] [ 685.688062][T17071] FAULT_INJECTION: forcing a failure. [ 685.688062][T17071] name failslab, interval 0, probability 0, space 0, times 0 [ 685.783332][T17071] CPU: 0 UID: 0 PID: 17071 Comm: syz.5.2430 Tainted: G U L syzkaller #0 PREEMPT(full) [ 685.783361][T17071] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 685.783367][T17071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 685.783376][T17071] Call Trace: [ 685.783381][T17071] [ 685.783387][T17071] dump_stack_lvl+0x100/0x190 [ 685.783423][T17071] should_fail_ex.cold+0x5/0xa [ 685.783442][T17071] should_failslab+0xc2/0x120 [ 685.783460][T17071] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 685.783481][T17071] ? security_inode_alloc+0x3b/0x2c0 [ 685.783498][T17071] ? lockdep_init_map_type+0x5c/0x250 [ 685.783521][T17071] security_inode_alloc+0x3b/0x2c0 [ 685.783538][T17071] inode_init_always_gfp+0xced/0x1040 [ 685.783557][T17071] alloc_inode+0x8e/0x250 [ 685.783576][T17071] sock_alloc+0x44/0x280 [ 685.783591][T17071] ? security_socket_create+0x7f/0x250 [ 685.783607][T17071] sock_create_lite+0x82/0x120 [ 685.783625][T17071] __netlink_kernel_create+0xbd/0x750 [ 685.783643][T17071] ? __pfx___netlink_kernel_create+0x10/0x10 [ 685.783658][T17071] ? find_held_lock+0x2b/0x80 [ 685.783672][T17071] ? audit_net_init+0x190/0x440 [ 685.783691][T17071] ? audit_net_init+0x190/0x440 [ 685.783713][T17071] audit_net_init+0x1ae/0x440 [ 685.783732][T17071] ? __pfx_audit_net_init+0x10/0x10 [ 685.783750][T17071] ? rcu_is_watching+0x12/0xc0 [ 685.783772][T17071] ? __pfx_audit_receive+0x10/0x10 [ 685.783784][T17071] ? __pfx_audit_multicast_bind+0x10/0x10 [ 685.783805][T17071] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 685.783828][T17071] ? __kmalloc_noprof+0x320/0x850 [ 685.783852][T17071] ? __pfx_audit_net_init+0x10/0x10 [ 685.783871][T17071] ops_init+0x1e2/0x5f0 [ 685.783888][T17071] setup_net+0x118/0x3a0 [ 685.783903][T17071] ? __pfx_setup_net+0x10/0x10 [ 685.783949][T17071] ? lockdep_init_map_type+0x5c/0x250 [ 685.783970][T17071] ? mutex_init_lockep+0x110/0x150 [ 685.783994][T17071] copy_net_ns+0x46f/0x7c0 [ 685.784013][T17071] create_new_namespaces+0x3ea/0xac0 [ 685.784034][T17071] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 685.784051][T17071] ksys_unshare+0x473/0xad0 [ 685.784071][T17071] ? __pfx_ksys_unshare+0x10/0x10 [ 685.784096][T17071] __x64_sys_unshare+0x31/0x40 [ 685.784114][T17071] do_syscall_64+0x106/0xf80 [ 685.784129][T17071] ? clear_bhb_loop+0x40/0x90 [ 685.784147][T17071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.784162][T17071] RIP: 0033:0x7fd76fb9c819 [ 685.784176][T17071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.784199][T17071] RSP: 002b:00007fd7709fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 685.784216][T17071] RAX: ffffffffffffffda RBX: 00007fd76fe16090 RCX: 00007fd76fb9c819 [ 685.784226][T17071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 685.784236][T17071] RBP: 00007fd76fc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 685.784245][T17071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.784255][T17071] R13: 00007fd76fe16128 R14: 00007fd76fe16090 R15: 00007ffd19ef9da8 [ 685.784275][T17071] [ 685.784317][T17071] audit: cannot initialize netlink socket in namespace [ 686.143587][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.149938][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.525469][ T9474] EXT4-fs: 2 callbacks suppressed [ 687.525483][ T9474] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 687.591156][ T9474] EXT4-fs (sda1): This should not happen!! Data will be lost [ 687.591156][ T9474] [ 688.513545][ T9474] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 688.562041][ T9474] EXT4-fs (sda1): This should not happen!! Data will be lost [ 688.562041][ T9474] [ 688.864365][T17115] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2438'. [ 688.974277][ T9467] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 689.018705][ T9467] EXT4-fs (sda1): This should not happen!! Data will be lost [ 689.018705][ T9467] [ 689.048117][T17118] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 689.068894][T17118] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 689.352866][T17123] bond0: option slaves: interface -Âô]àæ©=,Dçon?ïI|›a CB does not exist! [ 689.483559][T17127] FAULT_INJECTION: forcing a failure. [ 689.483559][T17127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.503640][ T9474] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 689.567634][ T9474] EXT4-fs (sda1): This should not happen!! Data will be lost [ 689.567634][ T9474] [ 689.679456][T17123] FAULT_INJECTION: forcing a failure. [ 689.679456][T17123] name failslab, interval 0, probability 0, space 0, times 0 [ 689.755348][T17127] CPU: 0 UID: 0 PID: 17127 Comm: syz.2.2441 Tainted: G U L syzkaller #0 PREEMPT(full) [ 689.755376][T17127] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 689.755383][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 689.755392][T17127] Call Trace: [ 689.755399][T17127] [ 689.755406][T17127] dump_stack_lvl+0x100/0x190 [ 689.755433][T17127] should_fail_ex.cold+0x5/0xa [ 689.755452][T17127] core_sys_select+0x9b9/0xbb0 [ 689.755471][T17127] ? __pfx_core_sys_select+0x10/0x10 [ 689.755505][T17127] ? ktime_get_ts64+0x2d2/0x3f0 [ 689.755522][T17127] ? read_tsc+0x9/0x20 [ 689.755538][T17127] ? ktime_get_ts64+0x256/0x3f0 [ 689.755555][T17127] kern_select+0x20c/0x270 [ 689.755571][T17127] ? __pfx_kern_select+0x10/0x10 [ 689.755591][T17127] __x64_sys_select+0xbd/0x160 [ 689.755605][T17127] ? do_syscall_64+0x95/0xf80 [ 689.755620][T17127] ? lockdep_hardirqs_on+0x78/0x100 [ 689.755635][T17127] do_syscall_64+0x106/0xf80 [ 689.755650][T17127] ? clear_bhb_loop+0x40/0x90 [ 689.755667][T17127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.755683][T17127] RIP: 0033:0x7f9ab6d9c819 [ 689.755696][T17127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.755710][T17127] RSP: 002b:00007f9ab7bf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 689.755726][T17127] RAX: ffffffffffffffda RBX: 00007f9ab7016090 RCX: 00007f9ab6d9c819 [ 689.755736][T17127] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 689.755745][T17127] RBP: 00007f9ab6e32c91 R08: 00002000000001c0 R09: 0000000000000000 [ 689.755754][T17127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.755763][T17127] R13: 00007f9ab7016128 R14: 00007f9ab7016090 R15: 00007ffc08418f38 [ 689.755782][T17127] [ 690.164804][T17123] CPU: 0 UID: 0 PID: 17123 Comm: syz.2.2441 Tainted: G U L syzkaller #0 PREEMPT(full) [ 690.164833][T17123] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 690.164840][T17123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 690.164849][T17123] Call Trace: [ 690.164855][T17123] [ 690.164861][T17123] dump_stack_lvl+0x100/0x190 [ 690.164890][T17123] should_fail_ex.cold+0x5/0xa [ 690.164910][T17123] should_failslab+0xc2/0x120 [ 690.164927][T17123] __kmalloc_cache_noprof+0x7a/0x6f0 [ 690.164947][T17123] ? call_usermodehelper_setup+0xaf/0x360 [ 690.164972][T17123] ? __pfx_free_modprobe_argv+0x10/0x10 [ 690.164999][T17123] call_usermodehelper_setup+0xaf/0x360 [ 690.165024][T17123] __request_module+0x3c7/0x6c0 [ 690.165046][T17123] ? __pfx___request_module+0x10/0x10 [ 690.165072][T17123] ? __get_fs_type+0x12c/0x170 [ 690.165088][T17123] ? __get_fs_type+0x12c/0x170 [ 690.165112][T17123] get_fs_type+0xd7/0x190 [ 690.165130][T17123] __x64_sys_fsopen+0xca/0x220 [ 690.165150][T17123] do_syscall_64+0x106/0xf80 [ 690.165165][T17123] ? clear_bhb_loop+0x40/0x90 [ 690.165186][T17123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.165202][T17123] RIP: 0033:0x7f9ab6d9c819 [ 690.165215][T17123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.165230][T17123] RSP: 002b:00007f9ab7c13028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 690.165245][T17123] RAX: ffffffffffffffda RBX: 00007f9ab7015fa0 RCX: 00007f9ab6d9c819 [ 690.165255][T17123] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 690.165263][T17123] RBP: 00007f9ab6e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 690.165272][T17123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.165281][T17123] R13: 00007f9ab7016038 R14: 00007f9ab7015fa0 R15: 00007ffc08418f38 [ 690.165300][T17123] [ 690.660954][ T8374] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 690.722204][ T8374] EXT4-fs (sda1): This should not happen!! Data will be lost [ 690.722204][ T8374] [ 691.345997][ C0] net_ratelimit: 19 callbacks suppressed [ 691.346015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.346368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.346585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.346860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.347069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.347361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.347590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.347861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.348069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.348365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.353283][ C0] net_ratelimit: 21707 callbacks suppressed [ 696.353306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.353555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.353841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.354058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.354369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.354589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.354886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.355112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.355420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.355646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.838844][ C0] sched: DL replenish lagged too much [ 701.109994][ T9485] EXT4-fs: 2 callbacks suppressed [ 701.110010][ T9485] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 701.110095][ T9485] EXT4-fs (sda1): This should not happen!! Data will be lost [ 701.110095][ T9485] [ 701.363398][ C0] net_ratelimit: 21253 callbacks suppressed [ 701.363416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.363678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.363873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.364136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.364346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.364726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.364928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.365245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.365446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.365710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.373361][ C0] net_ratelimit: 21730 callbacks suppressed [ 706.373379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.373667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.373906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.374200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.374414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.374694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.374910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.375202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.375448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.375779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.383398][ C0] net_ratelimit: 21800 callbacks suppressed [ 711.383415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.383697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.383908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.384196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.384400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.384694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.384904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.385190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.385394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.385662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.393283][ C0] net_ratelimit: 22022 callbacks suppressed [ 716.393301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.393551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.393742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.393988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.394186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.394432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.394643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.394888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.395074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.395371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.403236][ C0] net_ratelimit: 22072 callbacks suppressed [ 721.403254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.403533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.403739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.404019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.404245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.404518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.404722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.404994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.405219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.405533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.413351][ C0] net_ratelimit: 22499 callbacks suppressed [ 726.413370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.413587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.413858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.414099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.414414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.414618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.414889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.415091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.415417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.415623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.423417][ C0] net_ratelimit: 21154 callbacks suppressed [ 731.423434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.423624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.423879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.424064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.424328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.424513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.424760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.424976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.425277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.425463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.433327][ C0] net_ratelimit: 21955 callbacks suppressed [ 736.433345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.433673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.433868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.434145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.434356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.434613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.434800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.435044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.435243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.435523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.443346][ C0] net_ratelimit: 22279 callbacks suppressed [ 741.443367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.443649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.443891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.444080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.444315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.444613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.444826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.445019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.445253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.445530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.453212][ C0] net_ratelimit: 21299 callbacks suppressed [ 746.453229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.453488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.453704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.453944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.454262][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.454528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.454740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.454979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.455296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.455532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.025627][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.039175][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.463224][ C0] net_ratelimit: 21737 callbacks suppressed [ 751.463242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.463548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.463823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.464020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.464256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.464536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.464749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.464944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.465177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.465457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.473266][ C0] net_ratelimit: 21733 callbacks suppressed [ 756.473283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.473563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.473865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.474142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.474371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.474624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.474924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.475172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.475384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.475625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.483323][ C0] net_ratelimit: 22303 callbacks suppressed [ 761.483341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.483615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.483828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.484011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.484238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.484507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.484712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.484900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.485135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.485419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.493331][ C0] net_ratelimit: 21859 callbacks suppressed [ 766.493349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.493587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.493794][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.494039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.494359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.494592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.494819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.495087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.495408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.495643][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.898100][ T9485] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 766.898127][ T9485] EXT4-fs (sda1): This should not happen!! Data will be lost [ 766.898127][ T9485] [ 771.503351][ C0] net_ratelimit: 21078 callbacks suppressed [ 771.503367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.503601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.503833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.504072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.504416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.504649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.504862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.505114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.505428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.505659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.513359][ C0] net_ratelimit: 22250 callbacks suppressed [ 776.513377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.513594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.513806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.514043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.514533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.514751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.514939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.515179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.515471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.515683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.523239][ C0] net_ratelimit: 22072 callbacks suppressed [ 781.523256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.523491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.523790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.524039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.524254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.524483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.524772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.525003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.525226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.525458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.533246][ C0] net_ratelimit: 20515 callbacks suppressed [ 786.533263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.533592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.533858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.534072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.534532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.534908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.535176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.535418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.535682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.535999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.543371][ C0] net_ratelimit: 21814 callbacks suppressed [ 791.543389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.543664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.543872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.544057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.544297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.544572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.544781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.544965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.545205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.545497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.353167][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 796.353194][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17156/1:b..l P17154/2:b..l [ 796.353816][ C0] rcu: (detected by 0, t=10502 jiffies, g=108389, q=1405 ncpus=1) [ 796.353830][ C0] task:syz.4.2450 state:R running task stack:26952 pid:17154 tgid:17152 ppid:7025 task_flags:0x400040 flags:0x00080000 [ 796.353876][ C0] Call Trace: [ 796.353882][ C0] [ 796.353892][ C0] __schedule+0xfee/0x6120 [ 796.353911][ C0] ? enqueue_to_backlog+0x498/0x1010 [ 796.353940][ C0] ? netif_rx_internal+0x109/0x630 [ 796.353955][ C0] ? find_held_lock+0x2b/0x80 [ 796.353971][ C0] ? sock_wfree+0x423/0x830 [ 796.353999][ C0] ? sock_wfree+0x423/0x830 [ 796.354021][ C0] ? __pfx___schedule+0x10/0x10 [ 796.354035][ C0] ? trace_netif_rx_exit+0x6d/0x240 [ 796.354052][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 796.354072][ C0] preempt_schedule_common+0x42/0xc0 [ 796.354091][ C0] preempt_schedule_thunk+0x16/0x30 [ 796.354113][ C0] ? __dev_queue_xmit+0x8a0/0x4800 [ 796.354130][ C0] __local_bh_enable_ip+0xff/0x120 [ 796.354146][ C0] ? __dev_queue_xmit+0x8a0/0x4800 [ 796.354163][ C0] __dev_queue_xmit+0x8b5/0x4800 [ 796.354302][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 796.354340][ C0] ? __lock_acquire+0x4a5/0x2630 [ 796.354377][ C0] ip_finish_output2+0xf4a/0x24d0 [ 796.354466][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 796.354484][ C0] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 796.354500][ C0] ? nf_nat_ipv4_out+0xb2/0x510 [ 796.354522][ C0] ? find_held_lock+0x2b/0x80 [ 796.354591][ C0] __ip_finish_output.part.0+0x444/0x6f0 [ 796.354627][ C0] ip_output+0x39b/0xc10 [ 796.354643][ C0] ? __pfx_ip_output+0x10/0x10 [ 796.354661][ C0] ? __ip_make_skb+0x111e/0x1f90 [ 796.354687][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 796.354705][ C0] ? __pfx_ip_output+0x10/0x10 [ 796.354726][ C0] ip_push_pending_frames+0x284/0x300 [ 796.354745][ C0] raw_sendmsg+0x150b/0x35f0 [ 796.354770][ C0] ? __pfx_raw_sendmsg+0x10/0x10 [ 796.354787][ C0] ? __mark_inode_dirty+0xff5/0x1790 [ 796.354813][ C0] ? do_raw_spin_lock+0x128/0x260 [ 796.354842][ C0] ? find_held_lock+0x2b/0x80 [ 796.354861][ C0] ? __mark_inode_dirty+0x557/0x1790 [ 796.354880][ C0] ? __mark_inode_dirty+0x557/0x1790 [ 796.354917][ C0] ? __import_iovec+0x1d2/0x640 [ 796.354941][ C0] ? __pfx_raw_sendmsg+0x10/0x10 [ 796.354964][ C0] inet_sendmsg+0x11c/0x140 [ 796.354984][ C0] ____sys_sendmsg+0x98d/0xb70 [ 796.355001][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 796.355021][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.355046][ C0] ? rcu_is_watching+0x12/0xc0 [ 796.355067][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 796.355084][ C0] ? kfree+0x2ec/0x6b0 [ 796.355101][ C0] ? find_held_lock+0x2b/0x80 [ 796.355115][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 796.355133][ C0] ___sys_sendmsg+0x190/0x1e0 [ 796.355153][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.355170][ C0] ? handle_mm_fault+0x3fb/0xa20 [ 796.355196][ C0] ? irqentry_exit+0x180/0x670 [ 796.355219][ C0] ? __pfx___might_resched+0x10/0x10 [ 796.355244][ C0] __sys_sendmmsg+0x205/0x430 [ 796.355261][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 796.355295][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 796.355321][ C0] ? kcov_ioctl+0x16a/0x720 [ 796.355343][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 796.355357][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 796.355372][ C0] do_syscall_64+0x106/0xf80 [ 796.355387][ C0] ? clear_bhb_loop+0x40/0x90 [ 796.355405][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.355421][ C0] RIP: 0033:0x7f72bbd9c819 [ 796.355433][ C0] RSP: 002b:00007f72bcd11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 796.355448][ C0] RAX: ffffffffffffffda RBX: 00007f72bc016090 RCX: 00007f72bbd9c819 [ 796.355458][ C0] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 796.355467][ C0] RBP: 00007f72bbe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 796.355476][ C0] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.355486][ C0] R13: 00007f72bc016128 R14: 00007f72bc016090 R15: 00007ffd9e085878 [ 796.355505][ C0] [ 796.355512][ C0] task:syz.2.2446 state:R running task stack:27272 pid:17156 tgid:17141 ppid:5825 task_flags:0x400040 flags:0x00080000 [ 796.355557][ C0] Call Trace: [ 796.355562][ C0] [ 796.355569][ C0] __schedule+0xfee/0x6120 [ 796.355594][ C0] ? __pfx___schedule+0x10/0x10 [ 796.355610][ C0] ? mark_held_locks+0x40/0x70 [ 796.355629][ C0] preempt_schedule_irq+0x50/0x90 [ 796.355643][ C0] irqentry_exit+0x17b/0x670 [ 796.355660][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 796.355676][ C0] RIP: 0010:kasan_check_range+0x18/0x1e0 [ 796.355695][ C0] Code: 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 85 f6 0f 84 7a 01 00 00 48 89 f8 41 54 41 89 d0 48 01 f0 <55> 53 0f 82 e6 00 00 00 eb 0f cc cc cc 48 b8 00 00 00 00 00 00 00 [ 796.355710][ C0] RSP: 0018:ffffc90004a474a8 EFLAGS: 00000286 [ 796.355721][ C0] RAX: ffffea000168d688 RBX: ffffea000168d680 RCX: ffffffff827ac334 [ 796.355731][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea000168d680 [ 796.355741][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 796.355749][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffea000168d688 [ 796.355758][ C0] R13: ffffffffffffffff R14: ffffea000168d680 R15: 0000000000000000 [ 796.355776][ C0] ? release_pte_folio+0x114/0x220 [ 796.355802][ C0] release_pte_folio+0x114/0x220 [ 796.355825][ C0] collapse_huge_page+0x2bf7/0x38c0 [ 796.355855][ C0] ? __pfx_collapse_huge_page+0x10/0x10 [ 796.355880][ C0] ? pte_offset_map_lock+0x174/0x320 [ 796.355897][ C0] ? find_held_lock+0x2b/0x80 [ 796.355910][ C0] ? hpage_collapse_scan_pmd+0xd7c/0x1670 [ 796.355927][ C0] ? hpage_collapse_scan_pmd+0xd7c/0x1670 [ 796.355948][ C0] hpage_collapse_scan_pmd+0xdb9/0x1670 [ 796.355970][ C0] ? __pfx_hpage_collapse_scan_pmd+0x10/0x10 [ 796.355993][ C0] madvise_collapse+0x6ee/0xbe0 [ 796.356015][ C0] ? finish_task_switch.isra.0+0x200/0xb80 [ 796.356042][ C0] ? __pfx_madvise_collapse+0x10/0x10 [ 796.356060][ C0] ? rcu_is_cpu_rrupt_from_idle+0x211/0x270 [ 796.356088][ C0] madvise_vma_behavior+0x1987/0x3050 [ 796.356110][ C0] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 796.356127][ C0] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 796.356147][ C0] ? mas_prev+0x9b/0xf0 [ 796.356162][ C0] ? __pfx_mas_prev+0x10/0x10 [ 796.356183][ C0] ? find_vma_prev+0xd8/0x150 [ 796.356198][ C0] ? futex_unqueue+0x133/0x2c0 [ 796.356216][ C0] ? __pfx_find_vma_prev+0x10/0x10 [ 796.356243][ C0] ? __futex_wait+0x256/0x300 [ 796.356268][ C0] madvise_walk_vmas+0x2fe/0xa90 [ 796.356289][ C0] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 796.356311][ C0] madvise_do_behavior+0x1ea/0x510 [ 796.356330][ C0] ? __pfx_madvise_do_behavior+0x10/0x10 [ 796.356414][ C0] ? down_read+0x13b/0x460 [ 796.356439][ C0] do_madvise+0x195/0x240 [ 796.356456][ C0] ? __pfx_do_madvise+0x10/0x10 [ 796.356473][ C0] ? do_futex+0x192/0x350 [ 796.356503][ C0] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 796.356525][ C0] __x64_sys_madvise+0xa9/0x110 [ 796.356548][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 796.356564][ C0] do_syscall_64+0x106/0xf80 [ 796.356579][ C0] ? clear_bhb_loop+0x40/0x90 [ 796.356599][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.356614][ C0] RIP: 0033:0x7f9ab6d9c819 [ 796.356626][ C0] RSP: 002b:00007f9ab7bb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 796.356640][ C0] RAX: ffffffffffffffda RBX: 00007f9ab7016270 RCX: 00007f9ab6d9c819 [ 796.356650][ C0] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 796.356659][ C0] RBP: 00007f9ab6e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 796.356668][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.356677][ C0] R13: 00007f9ab7016308 R14: 00007f9ab7016270 R15: 00007ffc08418f38 [ 796.356703][ C0] [ 796.356720][ C0] rcu: rcu_preempt kthread starved for 1133 jiffies! g108389 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 796.356737][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 796.356744][ C0] rcu: RCU grace-period kthread stack dump: [ 796.356749][ C0] task:rcu_preempt state:R running task stack:27832 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 796.356793][ C0] Call Trace: [ 796.356798][ C0] [ 796.356806][ C0] __schedule+0xfee/0x6120 [ 796.356821][ C0] ? __lock_acquire+0x4a5/0x2630 [ 796.356848][ C0] ? __pfx___schedule+0x10/0x10 [ 796.356860][ C0] ? find_held_lock+0x2b/0x80 [ 796.356874][ C0] ? schedule+0x2bf/0x390 [ 796.356890][ C0] schedule+0xdd/0x390 [ 796.356903][ C0] schedule_timeout+0x127/0x280 [ 796.356923][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 796.356946][ C0] ? __pfx_process_timeout+0x10/0x10 [ 796.356976][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 796.356998][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 796.357020][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 796.357038][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 796.357057][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 796.357076][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 796.357092][ C0] ? rcu_is_watching+0x12/0xc0 [ 796.357113][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 796.357136][ C0] rcu_gp_kthread+0x179/0x230 [ 796.357154][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 796.357173][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 796.357197][ C0] ? __kthread_parkme+0x18c/0x230 [ 796.357216][ C0] ? kthread+0x13a/0x450 [ 796.357233][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 796.357253][ C0] kthread+0x370/0x450 [ 796.357271][ C0] ? __pfx_kthread+0x10/0x10 [ 796.357291][ C0] ret_from_fork+0x754/0xd80 [ 796.357313][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 796.357335][ C0] ? __switch_to+0x7b4/0x1120 [ 796.357357][ C0] ? __pfx_kthread+0x10/0x10 [ 796.357380][ C0] ret_from_fork_asm+0x1a/0x30 [ 796.357404][ C0] [ 796.357414][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 796.357428][ C0] CPU: 0 UID: 0 PID: 8379 Comm: kworker/u10:13 Tainted: G U L syzkaller #0 PREEMPT(full) [ 796.357449][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 796.357455][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 796.357466][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 796.357486][ C0] RIP: 0010:lock_release+0x19e/0x320 [ 796.357504][ C0] Code: ff 65 0f c1 05 4b d6 29 12 83 f8 01 0f 85 3d 01 00 00 9c 58 f6 c4 02 0f 85 28 01 00 00 41 f7 c6 00 02 00 00 0f 85 de 00 00 00 <48> 8b 44 24 10 65 48 2b 05 9d 8e 29 12 0f 85 63 01 00 00 48 83 c4 [ 796.357518][ C0] RSP: 0018:ffffc90000006ad0 EFLAGS: 00000206 [ 796.357528][ C0] RAX: 0000000000000046 RBX: ffffffff8e7e75e0 RCX: ffffc90000006adc [ 796.357538][ C0] RDX: 0000000000000007 RSI: ffffffff8de5d94b RDI: ffffffff8c1b1e20 [ 796.357547][ C0] RBP: ffffffff81b7c03e R08: 0000000000000001 R09: 0000000000000007 [ 796.357556][ C0] R10: 0000000000000200 R11: 000000000003f654 R12: ffff888078c21e80 [ 796.357565][ C0] R13: ffffc90000006b88 R14: 0000000000000202 R15: 0000000000000008 [ 796.357574][ C0] FS: 0000000000000000(0000) GS:ffff888124340000(0000) knlGS:0000000000000000 [ 796.357589][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 796.357607][ C0] CR2: 00007fdab4c000e4 CR3: 0000000075a06000 CR4: 00000000003526f0 [ 796.357617][ C0] Call Trace: [ 796.357623][ C0] [ 796.357631][ C0] unwind_next_frame+0x3c3/0x1ea0 [ 796.357648][ C0] ? blake2s_compress+0x78/0xf0 [ 796.357668][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 796.357684][ C0] arch_stack_walk+0x94/0xf0 [ 796.357701][ C0] ? blake2s_final+0xc9/0x150 [ 796.357720][ C0] ? kfree_skbmem+0x19a/0x210 [ 796.357737][ C0] stack_trace_save+0x8e/0xc0 [ 796.357752][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 796.357766][ C0] ? __skb_ext_put+0x102/0x2f0 [ 796.357784][ C0] ? __lock_acquire+0x4a5/0x2630 [ 796.357801][ C0] ? sk_skb_reason_drop+0xc4/0x1b0 [ 796.357815][ C0] ? ip6_mc_input+0x832/0xf50 [ 796.357842][ C0] kasan_save_stack+0x30/0x50 [ 796.357856][ C0] ? kasan_save_stack+0x30/0x50 [ 796.357868][ C0] ? kasan_save_track+0x14/0x30 [ 796.357881][ C0] ? kasan_save_free_info+0x3b/0x70 [ 796.357899][ C0] ? __kasan_slab_free+0x5f/0x80 [ 796.357912][ C0] ? kmem_cache_free+0x124/0x6a0 [ 796.357930][ C0] ? kfree_skbmem+0x19a/0x210 [ 796.357946][ C0] ? sk_skb_reason_drop+0x10f/0x1b0 [ 796.357959][ C0] ? ip6_mc_input+0x832/0xf50 [ 796.357976][ C0] ? ip6_rcv_finish+0x294/0x300 [ 796.357993][ C0] ? ip_sabotage_in+0x21e/0x290 [ 796.358013][ C0] ? nf_hook_slow+0xbf/0x220 [ 796.358026][ C0] ? nf_hook.constprop.0+0x2a6/0x750 [ 796.358049][ C0] ? ipv6_rcv+0xa4/0x3d0 [ 796.358065][ C0] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 796.358085][ C0] ? __netif_receive_skb+0x1f/0x120 [ 796.358103][ C0] ? netif_receive_skb+0x139/0x820 [ 796.358120][ C0] ? br_pass_frame_up+0x346/0x490 [ 796.358140][ C0] ? br_handle_frame_finish+0xa74/0x1f60 [ 796.358160][ C0] ? br_nf_hook_thresh+0x30d/0x420 [ 796.358180][ C0] ? br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 796.358194][ C0] ? br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 796.358207][ C0] ? br_nf_pre_routing+0x90d/0x1550 [ 796.358225][ C0] ? br_handle_frame+0xcdd/0x1520 [ 796.358246][ C0] ? __netif_receive_skb_core.constprop.0+0x6c5/0x3550 [ 796.358266][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 796.358285][ C0] ? __netif_receive_skb+0x1f/0x120 [ 796.358302][ C0] ? process_backlog+0x37a/0x1580 [ 796.358319][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 796.358343][ C0] ? net_rx_action+0xa40/0xf20 [ 796.358361][ C0] ? handle_softirqs+0x1eb/0x9e0 [ 796.358375][ C0] ? do_softirq+0xac/0xe0 [ 796.358389][ C0] ? __local_bh_enable_ip+0xf8/0x120 [ 796.358403][ C0] ? kernel_fpu_end+0x64/0x80 [ 796.358420][ C0] ? blake2s_compress+0x78/0xf0 [ 796.358450][ C0] kasan_save_track+0x14/0x30 [ 796.358464][ C0] kasan_save_free_info+0x3b/0x70 [ 796.358482][ C0] __kasan_slab_free+0x5f/0x80 [ 796.358497][ C0] kmem_cache_free+0x124/0x6a0 [ 796.358515][ C0] ? skb_release_data+0x7a0/0x9d0 [ 796.358532][ C0] kfree_skbmem+0x19a/0x210 [ 796.358553][ C0] sk_skb_reason_drop+0x10f/0x1b0 [ 796.358569][ C0] ip6_mc_input+0x832/0xf50 [ 796.358591][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 796.358611][ C0] ? __netif_receive_skb_core.constprop.0+0xd4d/0x3550 [ 796.358638][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 796.358658][ C0] ip6_rcv_finish+0x294/0x300 [ 796.358676][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 796.358695][ C0] ip_sabotage_in+0x21e/0x290 [ 796.358717][ C0] nf_hook_slow+0xbf/0x220 [ 796.358732][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 796.358750][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 796.358769][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 796.358789][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 796.358811][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 796.358828][ C0] ipv6_rcv+0xa4/0x3d0 [ 796.358847][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 796.358863][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 796.358883][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 796.358904][ C0] ? lock_acquire+0x1cf/0x380 [ 796.358926][ C0] __netif_receive_skb+0x1f/0x120 [ 796.358946][ C0] netif_receive_skb+0x139/0x820 [ 796.358964][ C0] ? br_multicast_count+0x8d/0xbc0 [ 796.358985][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 796.359008][ C0] ? br_netif_receive_skb+0xff/0x1f0 [ 796.359030][ C0] br_pass_frame_up+0x346/0x490 [ 796.359052][ C0] br_handle_frame_finish+0xa74/0x1f60 [ 796.359076][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 796.359099][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 796.359117][ C0] ? ip6t_do_table+0xc1d/0x1c90 [ 796.359135][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 796.359153][ C0] ? nf_hook_slow+0x167/0x220 [ 796.359168][ C0] br_nf_hook_thresh+0x30d/0x420 [ 796.359190][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 796.359214][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 796.359237][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 796.359259][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 796.359279][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 796.359293][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 796.359309][ C0] br_nf_pre_routing_finish_ipv6+0x769/0xfb0 [ 796.359329][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 796.359360][ C0] br_nf_pre_routing_ipv6+0x39c/0x8b0 [ 796.359377][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 796.359391][ C0] ? lock_acquire+0x1cf/0x380 [ 796.359410][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 796.359425][ C0] ? net_generic+0xea/0x2a0 [ 796.359449][ C0] br_nf_pre_routing+0x90d/0x1550 [ 796.359466][ C0] br_handle_frame+0xcdd/0x1520 [ 796.359490][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 796.359513][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 796.359537][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 796.359558][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3550 [ 796.359579][ C0] ? mark_held_locks+0x40/0x70 [ 796.359601][ C0] ? kmem_cache_free+0x124/0x6a0 [ 796.359618][ C0] ? skb_release_data+0x7a0/0x9d0 [ 796.359632][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 796.359654][ C0] ? kfree_skbmem+0x19f/0x210 [ 796.359671][ C0] ? sk_skb_reason_drop+0x114/0x1b0 [ 796.359686][ C0] ? ip6_mc_input+0x51a/0xf50 [ 796.359705][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 796.359727][ C0] ? __lock_acquire+0x4a5/0x2630 [ 796.359748][ C0] ? process_backlog+0x32a/0x1580 [ 796.359765][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 796.359786][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 796.359806][ C0] ? lock_acquire+0x1cf/0x380 [ 796.359825][ C0] ? process_backlog+0x32a/0x1580 [ 796.359845][ C0] ? process_backlog+0x32a/0x1580 [ 796.359862][ C0] __netif_receive_skb+0x1f/0x120 [ 796.359881][ C0] process_backlog+0x37a/0x1580 [ 796.359905][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 796.359926][ C0] net_rx_action+0xa40/0xf20 [ 796.359950][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 796.359970][ C0] ? mark_held_locks+0x40/0x70 [ 796.359988][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 796.360003][ C0] ? tmigr_handle_remote+0x132/0x380 [ 796.360023][ C0] ? run_timer_base+0x121/0x190 [ 796.360040][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 796.360059][ C0] handle_softirqs+0x1eb/0x9e0 [ 796.360077][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 796.360094][ C0] ? kernel_fpu_end+0x5f/0x80 [ 796.360109][ C0] do_softirq+0xac/0xe0 [ 796.360124][ C0] [ 796.360128][ C0] [ 796.360134][ C0] __local_bh_enable_ip+0xf8/0x120 [ 796.360149][ C0] kernel_fpu_end+0x64/0x80 [ 796.360162][ C0] blake2s_compress+0x78/0xf0 [ 796.360182][ C0] blake2s_final+0xc9/0x150 [ 796.360200][ C0] hmac.constprop.0+0x25d/0x480 [ 796.360223][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 796.360249][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 796.360264][ C0] ? irqentry_exit+0x180/0x670 [ 796.360284][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 796.360298][ C0] ? kernel_fpu_end+0x5f/0x80 [ 796.360311][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 796.360326][ C0] ? kernel_fpu_end+0x69/0x80 [ 796.360349][ C0] kdf.constprop.0+0x209/0x280 [ 796.360372][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 796.360392][ C0] ? __pfx_mix_hash+0x10/0x10 [ 796.360419][ C0] ? __crypto_memneq+0x1fe/0x430 [ 796.360437][ C0] wg_noise_handshake_create_initiation+0x406/0x610 [ 796.360456][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 796.360476][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 796.360493][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 796.360507][ C0] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 796.360523][ C0] ? ktime_get_coarse_with_offset+0x150/0x240 [ 796.360541][ C0] wg_packet_send_handshake_initiation+0x19c/0x360 [ 796.360561][ C0] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 796.360578][ C0] ? __lock_acquire+0x4a5/0x2630 [ 796.360606][ C0] ? rcu_is_watching+0x12/0xc0 [ 796.360628][ C0] wg_packet_handshake_send_worker+0x1c/0x30 [ 796.360646][ C0] process_one_work+0xa23/0x19a0 [ 796.360673][ C0] ? __pfx_process_one_work+0x10/0x10 [ 796.360698][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 796.360718][ C0] worker_thread+0x5ef/0xe50 [ 796.360744][ C0] ? kthread+0x13a/0x450 [ 796.360761][ C0] ? __pfx_worker_thread+0x10/0x10 [ 796.360779][ C0] kthread+0x370/0x450 [ 796.360796][ C0] ? __pfx_kthread+0x10/0x10 [ 796.360815][ C0] ret_from_fork+0x754/0xd80 [ 796.360836][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 796.360857][ C0] ? __switch_to+0x7b4/0x1120 [ 796.360872][ C0] ? __pfx_kthread+0x10/0x10 [ 796.360891][ C0] ret_from_fork_asm+0x1a/0x30 [ 796.360915][ C0] [ 796.553269][ C0] net_ratelimit: 21454 callbacks suppressed [ 796.553286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.553587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.553814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.554064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.554312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.554606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.554831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.555031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.555277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.555573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.563202][ C0] net_ratelimit: 21011 callbacks suppressed [ 801.563218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.563446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.563641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.563877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.564186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.564410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.564605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.564926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.565246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.565475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.573220][ C0] net_ratelimit: 21960 callbacks suppressed [ 806.573239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.573482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.573767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.573976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.574176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.574392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.574669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.574878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.575063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.575294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 810.195727][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.209147][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.583335][ C0] net_ratelimit: 21962 callbacks suppressed [ 811.583353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.583589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.583897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.584124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.584339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.584570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.584865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.585090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.585303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.585556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.593208][ C0] net_ratelimit: 21324 callbacks suppressed [ 816.593225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.593457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.593763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.594016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.594341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.594575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.594775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.595005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.595309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 816.595534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.603428][ C0] net_ratelimit: 22002 callbacks suppressed [ 821.603444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.603654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.603845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.604263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.604546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.604753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.604957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.605209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.605500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 821.605706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.613280][ C0] net_ratelimit: 22005 callbacks suppressed [ 826.613297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.613597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.613840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.614027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.614261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.614545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.614758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.614944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.615176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 826.615457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.623257][ C0] net_ratelimit: 21550 callbacks suppressed [ 831.623278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.623599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.623839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.624026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.624264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.624539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.624748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.624941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.625172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 831.625447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.633286][ C0] net_ratelimit: 22087 callbacks suppressed [ 836.633303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.633545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.633958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.634259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.634616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.634886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.635098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.635368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.635682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 836.635913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.643169][ C0] net_ratelimit: 21301 callbacks suppressed [ 841.643186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.643494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.643749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.643964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.644218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.644519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.644752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.644964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.645248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 841.645548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.653262][ C0] net_ratelimit: 20932 callbacks suppressed [ 846.653283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.653500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.653741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.654043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.654293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.654532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.654771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.655072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.655405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 846.655623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.663224][ C0] net_ratelimit: 21927 callbacks suppressed [ 851.663241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.663458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.663749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.663963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.664161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.664372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.664639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.664851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.665040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 851.665296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.856893][ T30] INFO: task udevd:5815 blocked for more than 145 seconds. [ 854.856915][ T30] Tainted: G U L syzkaller #0 [ 854.856924][ T30] Blocked by coredump. [ 854.856929][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 854.856936][ T30] task:udevd state:D stack:25832 pid:5815 tgid:5815 ppid:5194 task_flags:0x40014c flags:0x00080001 [ 854.856981][ T30] Call Trace: [ 854.856988][ T30] [ 854.856998][ T30] __schedule+0xfee/0x6120 [ 854.857018][ T30] ? __lock_acquire+0x4a5/0x2630 [ 854.857047][ T30] ? __pfx___schedule+0x10/0x10 [ 854.857061][ T30] ? find_held_lock+0x2b/0x80 [ 854.857076][ T30] ? schedule+0x2bf/0x390 [ 854.857092][ T30] ? netlink_table_grab+0x17a/0x2d0 [ 854.864800][ T30] schedule+0xdd/0x390 [ 854.864832][ T30] netlink_table_grab+0x192/0x2d0 [ 854.864850][ T30] ? __pfx_netlink_table_grab+0x10/0x10 [ 854.864868][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 854.864886][ T30] ? find_held_lock+0x2b/0x80 [ 854.864900][ T30] ? netlink_release+0xd54/0x1ff0 [ 854.864916][ T30] ? netlink_release+0xd54/0x1ff0 [ 854.864935][ T30] netlink_release+0xd9e/0x1ff0 [ 854.864954][ T30] ? netlink_release+0x1d8/0x1ff0 [ 854.864970][ T30] ? __pfx_netlink_release+0x10/0x10 [ 854.864988][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 854.865008][ T30] __sock_release+0xb3/0x260 [ 854.865025][ T30] ? __pfx_sock_close+0x10/0x10 [ 854.865040][ T30] sock_close+0x1c/0x30 [ 854.865054][ T30] __fput+0x3ff/0xb40 [ 854.865074][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 854.865098][ T30] task_work_run+0x150/0x240 [ 854.880004][ T30] ? __pfx_task_work_run+0x10/0x10 [ 854.880037][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 854.880064][ T30] do_exit+0x8b8/0x2b60 [ 854.880086][ T30] ? do_raw_spin_lock+0x128/0x260 [ 854.880106][ T30] ? __pfx_do_exit+0x10/0x10 [ 854.887815][ T30] ? do_group_exit+0x1bd/0x2a0 [ 854.887847][ T30] ? rcu_is_watching+0x12/0xc0 [ 854.887872][ T30] do_group_exit+0xd5/0x2a0 [ 854.887894][ T30] __x64_sys_exit_group+0x3e/0x50 [ 854.887913][ T30] x64_sys_call+0x102c/0x1530 [ 854.887931][ T30] do_syscall_64+0x106/0xf80 [ 854.887947][ T30] ? clear_bhb_loop+0x40/0x90 [ 854.887966][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.887982][ T30] RIP: 0033:0x7f6a5c6f16c5 [ 854.887995][ T30] RSP: 002b:00007ffee1c72558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 854.888012][ T30] RAX: ffffffffffffffda RBX: 00005611f6a1c4d0 RCX: 00007f6a5c6f16c5 [ 854.888023][ T30] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 854.888033][ T30] RBP: 00005611f69f9910 R08: 0000000000000000 R09: 0000000000000000 [ 854.888043][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.888052][ T30] R13: 00007ffee1c725a0 R14: 0000000000000000 R15: 0000000000000000 [ 854.888072][ T30] [ 854.888080][ T30] INFO: task udevd:5816 blocked for more than 145 seconds. [ 854.888094][ T30] Tainted: G U L syzkaller #0 [ 854.888103][ T30] Blocked by coredump. [ 854.895685][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 854.895700][ T30] task:udevd state:D stack:26472 pid:5816 tgid:5816 ppid:5194 task_flags:0x40014c flags:0x00080001 [ 854.895755][ T30] Call Trace: [ 854.895760][ T30] [ 854.895770][ T30] __schedule+0xfee/0x6120 [ 854.895790][ T30] ? __lock_acquire+0x4a5/0x2630 [ 854.895820][ T30] ? __pfx___schedule+0x10/0x10 [ 854.895833][ T30] ? find_held_lock+0x2b/0x80 [ 854.895849][ T30] ? schedule+0x2bf/0x390 [ 854.895864][ T30] ? netlink_table_grab+0x17a/0x2d0 [ 854.895880][ T30] schedule+0xdd/0x390 [ 854.895894][ T30] netlink_table_grab+0x192/0x2d0 [ 854.895910][ T30] ? __pfx_netlink_table_grab+0x10/0x10 [ 854.895927][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 854.895944][ T30] ? find_held_lock+0x2b/0x80 [ 854.895958][ T30] ? netlink_release+0xd54/0x1ff0 [ 854.895973][ T30] ? netlink_release+0xd54/0x1ff0 [ 854.895992][ T30] netlink_release+0xd9e/0x1ff0 [ 854.896011][ T30] ? netlink_release+0x1d8/0x1ff0 [ 854.896028][ T30] ? __pfx_netlink_release+0x10/0x10 [ 854.896046][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 854.896066][ T30] __sock_release+0xb3/0x260 [ 854.896083][ T30] ? __pfx_sock_close+0x10/0x10 [ 854.896098][ T30] sock_close+0x1c/0x30 [ 854.903458][ T30] __fput+0x3ff/0xb40 [ 854.903487][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 854.903513][ T30] task_work_run+0x150/0x240 [ 854.903537][ T30] ? __pfx_task_work_run+0x10/0x10 [ 854.903558][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 854.903583][ T30] do_exit+0x8b8/0x2b60 [ 854.903605][ T30] ? do_raw_spin_lock+0x128/0x260 [ 854.903626][ T30] ? __pfx_do_exit+0x10/0x10 [ 854.903644][ T30] ? do_group_exit+0x1bd/0x2a0 [ 854.903664][ T30] ? rcu_is_watching+0x12/0xc0 [ 854.903688][ T30] do_group_exit+0xd5/0x2a0 [ 854.903709][ T30] __x64_sys_exit_group+0x3e/0x50 [ 854.903729][ T30] x64_sys_call+0x102c/0x1530 [ 854.903751][ T30] do_syscall_64+0x106/0xf80 [ 854.903767][ T30] ? clear_bhb_loop+0x40/0x90 [ 854.903785][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.903804][ T30] RIP: 0033:0x7f6a5c6f16c5 [ 854.903816][ T30] RSP: 002b:00007ffee1c72558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 854.903833][ T30] RAX: ffffffffffffffda RBX: 00005611f6a03840 RCX: 00007f6a5c6f16c5 [ 854.903843][ T30] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 854.903853][ T30] RBP: 00005611f69f9910 R08: 0000000000000000 R09: 0000000000000000 [ 854.903863][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.903872][ T30] R13: 00007ffee1c725a0 R14: 0000000000000000 R15: 0000000000000000 [ 854.903892][ T30] [ 854.903900][ T30] INFO: task udevd:5817 blocked for more than 145 seconds. [ 854.903912][ T30] Tainted: G U L syzkaller #0 [ 854.903921][ T30] Blocked by coredump. [ 854.903925][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 854.903932][ T30] task:udevd state:D stack:25384 pid:5817 tgid:5817 ppid:5194 task_flags:0x40014c flags:0x00080001 [ 854.903974][ T30] Call Trace: [ 854.903979][ T30] [ 854.903988][ T30] __schedule+0xfee/0x6120 [ 854.904003][ T30] ? __lock_acquire+0x4a5/0x2630 [ 854.904031][ T30] ? __pfx___schedule+0x10/0x10 [ 854.904044][ T30] ? find_held_lock+0x2b/0x80 [ 854.904059][ T30] ? schedule+0x2bf/0x390 [ 854.904074][ T30] ? netlink_table_grab+0x17a/0x2d0 [ 854.904090][ T30] schedule+0xdd/0x390 [ 854.904104][ T30] netlink_table_grab+0x192/0x2d0 [ 854.919609][ T30] ? __pfx_netlink_table_grab+0x10/0x10 [ 854.919639][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 854.919657][ T30] ? find_held_lock+0x2b/0x80 [ 854.919678][ T30] ? netlink_release+0xd54/0x1ff0 [ 854.919693][ T30] ? netlink_release+0xd54/0x1ff0 [ 854.919712][ T30] netlink_release+0xd9e/0x1ff0 [ 854.919731][ T30] ? netlink_release+0x1d8/0x1ff0 [ 854.919748][ T30] ? __pfx_netlink_release+0x10/0x10 [ 854.919766][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 854.919786][ T30] __sock_release+0xb3/0x260 [ 854.919802][ T30] ? __pfx_sock_close+0x10/0x10 [ 854.919817][ T30] sock_close+0x1c/0x30 [ 854.919832][ T30] __fput+0x3ff/0xb40 [ 854.919851][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 854.919876][ T30] task_work_run+0x150/0x240 [ 854.919899][ T30] ? __pfx_task_work_run+0x10/0x10 [ 854.919920][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 854.919944][ T30] do_exit+0x8b8/0x2b60 [ 854.919966][ T30] ? do_raw_spin_lock+0x128/0x260 [ 854.919987][ T30] ? __pfx_do_exit+0x10/0x10 [ 854.920004][ T30] ? do_group_exit+0x1bd/0x2a0 [ 854.920024][ T30] ? rcu_is_watching+0x12/0xc0 [ 854.920049][ T30] do_group_exit+0xd5/0x2a0 [ 854.920070][ T30] __x64_sys_exit_group+0x3e/0x50 [ 854.920089][ T30] x64_sys_call+0x102c/0x1530 [ 854.920107][ T30] do_syscall_64+0x106/0xf80 [ 854.927613][ T30] ? clear_bhb_loop+0x40/0x90 [ 854.927645][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.927661][ T30] RIP: 0033:0x7f6a5c6f16c5 [ 854.927675][ T30] RSP: 002b:00007ffee1c72558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 854.927691][ T30] RAX: ffffffffffffffda RBX: 00005611f6abbb20 RCX: 00007f6a5c6f16c5 [ 854.927702][ T30] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 854.927712][ T30] RBP: 00005611f69f9910 R08: 0000000000000000 R09: 0000000000000000 [ 854.927722][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.927732][ T30] R13: 00007ffee1c725a0 R14: 0000000000000000 R15: 0000000000000000 [ 854.927752][ T30] [ 854.927783][ T30] INFO: task kworker/u10:61:9488 blocked for more than 145 seconds. [ 854.927796][ T30] Tainted: G U L syzkaller #0 [ 854.927805][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 854.927812][ T30] task:kworker/u10:61 state:D stack:26200 pid:9488 tgid:9488 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 854.927858][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 854.927877][ T30] Call Trace: [ 854.927883][ T30] [ 854.927891][ T30] __schedule+0xfee/0x6120 [ 854.927907][ T30] ? __lock_acquire+0x4a5/0x2630 [ 854.927936][ T30] ? __pfx___schedule+0x10/0x10 [ 854.927949][ T30] ? find_held_lock+0x2b/0x80 [ 854.927965][ T30] ? schedule+0x2bf/0x390 [ 854.927981][ T30] schedule+0xdd/0x390 [ 854.927995][ T30] schedule_preempt_disabled+0x13/0x30 [ 854.928017][ T30] __mutex_lock+0xc9a/0x1b90 [ 854.928033][ T30] ? find_held_lock+0x2b/0x80 [ 854.928049][ T30] ? addrconf_verify_work+0x12/0x30 [ 854.928069][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 854.928085][ T30] ? try_to_wake_up+0x160/0x1a80 [ 854.928102][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 854.936172][ T30] ? addrconf_verify_work+0x12/0x30 [ 854.936201][ T30] addrconf_verify_work+0x12/0x30 [ 854.936219][ T30] process_one_work+0xa23/0x19a0 [ 854.936249][ T30] ? __pfx_process_one_work+0x10/0x10 [ 854.936276][ T30] ? __pfx_addrconf_verify_work+0x10/0x10 [ 854.936295][ T30] worker_thread+0x5ef/0xe50 [ 854.936323][ T30] ? kthread+0x13a/0x450 [ 854.936341][ T30] ? __pfx_worker_thread+0x10/0x10 [ 854.936361][ T30] kthread+0x370/0x450 [ 854.936379][ T30] ? __pfx_kthread+0x10/0x10 [ 854.936399][ T30] ret_from_fork+0x754/0xd80 [ 854.936422][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 854.936444][ T30] ? __switch_to+0x7b4/0x1120 [ 854.936461][ T30] ? __pfx_kthread+0x10/0x10 [ 854.936481][ T30] ret_from_fork_asm+0x1a/0x30 [ 854.936512][ T30] [ 854.936521][ T30] INFO: task udevd:9850 blocked for more than 145 seconds. [ 854.936535][ T30] Tainted: G U L syzkaller #0 [ 854.936544][ T30] Blocked by coredump. [ 854.936549][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 854.936556][ T30] task:udevd state:D stack:26472 pid:9850 tgid:9850 ppid:5194 task_flags:0x40014c flags:0x00080001 [ 854.959879][ T30] Call Trace: [ 854.959892][ T30] [ 854.959904][ T30] __schedule+0xfee/0x6120 [ 854.959926][ T30] ? __lock_acquire+0x4a5/0x2630 [ 854.959961][ T30] ? __pfx___schedule+0x10/0x10 [ 854.959977][ T30] ? find_held_lock+0x2b/0x80 [ 854.959992][ T30] ? schedule+0x2bf/0x390 [ 854.960008][ T30] ? netlink_table_grab+0x17a/0x2d0 [ 854.960024][ T30] schedule+0xdd/0x390 [ 854.960039][ T30] netlink_table_grab+0x192/0x2d0 [ 854.960055][ T30] ? __pfx_netlink_table_grab+0x10/0x10 [ 854.960072][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 854.960089][ T30] ? find_held_lock+0x2b/0x80 [ 854.960103][ T30] ? netlink_release+0xd54/0x1ff0 [ 854.968062][ T30] ? netlink_release+0xd54/0x1ff0 [ 854.968095][ T30] netlink_release+0xd9e/0x1ff0 [ 854.975921][ T30] ? netlink_release+0x1d8/0x1ff0 [ 854.975952][ T30] ? __pfx_netlink_release+0x10/0x10 [ 854.975970][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 854.975991][ T30] __sock_release+0xb3/0x260 [ 854.976007][ T30] ? __pfx_sock_close+0x10/0x10 [ 854.976022][ T30] sock_close+0x1c/0x30 [ 854.976037][ T30] __fput+0x3ff/0xb40 [ 854.976057][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 854.976089][ T30] task_work_run+0x150/0x240 [ 854.983827][ T30] ? __pfx_task_work_run+0x10/0x10 [ 854.983859][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 854.983885][ T30] do_exit+0x8b8/0x2b60 [ 854.983907][ T30] ? do_raw_spin_lock+0x128/0x260 [ 854.983927][ T30] ? __pfx_do_exit+0x10/0x10 [ 854.983945][ T30] ? do_group_exit+0x1bd/0x2a0 [ 854.983964][ T30] ? rcu_is_watching+0x12/0xc0 [ 854.983991][ T30] do_group_exit+0xd5/0x2a0 [ 854.984011][ T30] __x64_sys_exit_group+0x3e/0x50 [ 854.984031][ T30] x64_sys_call+0x102c/0x1530 [ 854.984047][ T30] do_syscall_64+0x106/0xf80 [ 854.984063][ T30] ? clear_bhb_loop+0x40/0x90 [ 854.984081][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.984096][ T30] RIP: 0033:0x7f6a5c6f16c5 [ 855.008356][ T30] RSP: 002b:00007ffee1c72558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 855.008379][ T30] RAX: ffffffffffffffda RBX: 00005611f6a0c1a0 RCX: 00007f6a5c6f16c5 [ 855.008390][ T30] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 855.008400][ T30] RBP: 00005611f69f9910 R08: 0000000000000000 R09: 0000000000000000 [ 855.008409][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.008419][ T30] R13: 00007ffee1c725a0 R14: 0000000000000000 R15: 0000000000000000 [ 855.008440][ T30] [ 855.008452][ T30] INFO: task udevd:9851 blocked for more than 145 seconds. [ 855.008464][ T30] Tainted: G U L syzkaller #0 [ 855.008479][ T30] Blocked by coredump. [ 855.008484][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 855.008490][ T30] task:udevd state:D stack:27912 pid:9851 tgid:9851 ppid:5194 task_flags:0x40014c flags:0x00080001 [ 855.008535][ T30] Call Trace: [ 855.008541][ T30] [ 855.008549][ T30] __schedule+0xfee/0x6120 [ 855.008569][ T30] ? __lock_acquire+0x4a5/0x2630 [ 855.008599][ T30] ? __pfx___schedule+0x10/0x10 [ 855.008612][ T30] ? find_held_lock+0x2b/0x80 [ 855.008627][ T30] ? schedule+0x2bf/0x390 [ 855.008643][ T30] ? netlink_table_grab+0x17a/0x2d0 [ 855.008659][ T30] schedule+0xdd/0x390 [ 855.008673][ T30] netlink_table_grab+0x192/0x2d0 [ 855.008690][ T30] ? __pfx_netlink_table_grab+0x10/0x10 [ 855.008707][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 855.008724][ T30] ? find_held_lock+0x2b/0x80 [ 855.008738][ T30] ? netlink_release+0xd54/0x1ff0 [ 855.008753][ T30] ? netlink_release+0xd54/0x1ff0 [ 855.008772][ T30] netlink_release+0xd9e/0x1ff0 [ 855.008791][ T30] ? netlink_release+0x1d8/0x1ff0 [ 855.008808][ T30] ? __pfx_netlink_release+0x10/0x10 [ 855.008826][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 855.008846][ T30] __sock_release+0xb3/0x260 [ 855.008862][ T30] ? __pfx_sock_close+0x10/0x10 [ 855.008877][ T30] sock_close+0x1c/0x30 [ 855.008891][ T30] __fput+0x3ff/0xb40 [ 855.008912][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 855.008936][ T30] task_work_run+0x150/0x240 [ 855.008959][ T30] ? __pfx_task_work_run+0x10/0x10 [ 855.008988][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 855.009013][ T30] do_exit+0x8b8/0x2b60 [ 855.009038][ T30] ? do_raw_spin_lock+0x128/0x260 [ 855.009068][ T30] ? __pfx_do_exit+0x10/0x10 [ 855.009086][ T30] ? do_group_exit+0x1bd/0x2a0 [ 855.009106][ T30] ? rcu_is_watching+0x12/0xc0 [ 855.016492][ T30] do_group_exit+0xd5/0x2a0 [ 855.016524][ T30] __x64_sys_exit_group+0x3e/0x50 [ 855.016544][ T30] x64_sys_call+0x102c/0x1530 [ 855.016561][ T30] do_syscall_64+0x106/0xf80 [ 855.016577][ T30] ? clear_bhb_loop+0x40/0x90 [ 855.016596][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.016612][ T30] RIP: 0033:0x7f6a5c6f16c5 [ 855.016625][ T30] RSP: 002b:00007ffee1c72558 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 855.016641][ T30] RAX: ffffffffffffffda RBX: 00005611f6a263f0 RCX: 00007f6a5c6f16c5 [ 855.016652][ T30] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 855.016662][ T30] RBP: 00005611f69f9910 R08: 0000000000000000 R09: 0000000000000000 [ 855.016672][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.016681][ T30] R13: 00007ffee1c725a0 R14: 0000000000000000 R15: 0000000000000000 [ 855.016701][ T30] [ 855.016742][ T30] [ 855.016742][ T30] Showing all locks held in the system: [ 855.016755][ T30] 1 lock held by khungtaskd/30: [ 855.016764][ T30] #0: ffffffff8e7e75e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 855.016813][ T30] 2 locks held by kswapd0/79: [ 855.016841][ T30] 1 lock held by klogd/5183: [ 855.016850][ T30] 3 locks held by udevd/5194: [ 855.016858][ T30] 2 locks held by dhcpcd/5488: [ 855.016867][ T30] 4 locks held by dhcpcd/5489: [ 855.016876][ T30] 1 lock held by crond/5566: [ 855.016884][ T30] 2 locks held by getty/5585: [ 855.016892][ T30] #0: ffff888037aca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 855.016934][ T30] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 855.016981][ T30] 4 locks held by syz-executor/5811: [ 855.016990][ T30] #0: ffff888075a26d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 855.017031][ T30] #1: ffff888036a7c518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 855.017066][ T30] #2: ffff88807e5e6f08 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_page_mkwrite+0x36c/0x1980 [ 855.024480][ T30] #3: ffff88807e5e6bf8 (&ei->i_data_sem){++++}-{4:4}, at: ext4_da_get_block_prep+0x738/0x1240 [ 855.024535][ T30] 1 lock held by udevd/5813: [ 855.024544][ T30] #0: ffff88807e4a63c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 855.024585][ T30] 1 lock held by udevd/5815: [ 855.024594][ T30] #0: ffff88807e4a5848 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 855.024634][ T30] 1 lock held by udevd/5816: [ 855.024642][ T30] #0: ffff88807e4a5288 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 855.024682][ T30] 1 lock held by udevd/5817: [ 855.024690][ T30] #0: ffff88807e4a4cc8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 855.024732][ T30] 2 locks held by kworker/0:4/5868: [ 855.024744][ T30] 3 locks held by kworker/u10:2/8075: [ 855.024753][ T30] 3 locks held by kworker/u10:8/8374: [ 855.024762][ T30] 3 locks held by kworker/u10:10/8376: [ 855.024772][ T30] 4 locks held by kworker/u10:13/8379: [ 855.024781][ T30] 3 locks held by kworker/u10:23/8389: [ 855.024790][ T30] 3 locks held by kworker/u10:33/8955: [ 855.024800][ T30] 3 locks held by kworker/u10:39/9463: [ 855.024809][ T30] 7 locks held by kworker/u10:41/9465: [ 855.024818][ T30] 4 locks held by kworker/u10:42/9466: [ 855.024827][ T30] 3 locks held by kworker/u10:43/9467: [ 855.024836][ T30] 4 locks held by kworker/u10:44/9469: [ 855.024847][ T30] 3 locks held by kworker/u10:48/9474: [ 855.024856][ T30] 3 locks held by kworker/u10:51/9477: [ 855.024865][ T30] 2 locks held by kworker/u10:52/9478: [ 855.024874][ T30] 2 locks held by kworker/u10:54/9481: [ 855.024883][ T30] 3 locks held by kworker/u10:57/9484: [ 855.024892][ T30] 4 locks held by kworker/u10:58/9485: [ 855.024901][ T30] 4 locks held by kworker/u10:60/9487: [ 855.024910][ T30] 3 locks held by kworker/u10:61/9488: [ 855.024919][ T30] #0: ffff888032721148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 855.024962][ T30] #1: ffffc90003cbfd08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 855.025004][ T30] #2: ffffffff906172a8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 855.025043][ T30] 1 lock held by udevd/9850: [ 855.025052][ T30] #0: ffff88807e5eb008 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 855.025091][ T30] 1 lock held by udevd/9851: [ 855.025099][ T30] #0: ffff88807e49ccc8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 855.033282][ T30] 1 lock held by udevd/9853: [ 855.033291][ T30] #0: ffff88807e49e3c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 855.033332][ T30] 1 lock held by udevd/9854: [ 855.033341][ T30] #0: ffff88807e49e988 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 855.033384][ T30] 3 locks held by kworker/0:2/12406: [ 855.033392][ T30] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 855.033435][ T30] #1: ffffc90004d6fd08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 855.033476][ T30] #2: ffffffff906172a8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 855.033521][ T30] 4 locks held by syz-executor/12411: [ 855.033543][ T30] 1 lock held by syz.2.2446/17141: [ 855.033552][ T30] #0: ffff888026d70f80 (&mm->mmap_lock){++++}-{4:4}, at: do_exit+0x72b/0x2b60 [ 855.033593][ T30] 1 lock held by syz.2.2446/17143: [ 855.033601][ T30] #0: ffff888026d70f80 (&mm->mmap_lock){++++}-{4:4}, at: do_exit+0x72b/0x2b60 [ 855.033640][ T30] 2 locks held by syz.2.2446/17156: [ 855.033649][ T30] 1 lock held by syz.5.2447/17144: [ 855.033658][ T30] 1 lock held by syz.5.2447/17145: [ 855.033667][ T30] 2 locks held by syz.5.2447/17148: [ 855.033676][ T30] 1 lock held by syz.4.2450/17154: [ 855.033685][ T30] 2 locks held by syz.4.2450/17155: [ 855.033696][ T30] [ 855.033701][ T30] ============================================= [ 855.033701][ T30] [ 855.033709][ T30] NMI backtrace for cpu 0 [ 855.033724][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 855.033764][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 855.033775][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 855.033792][ T30] Call Trace: [ 855.033801][ T30] [ 855.033812][ T30] dump_stack_lvl+0x100/0x190 [ 855.033854][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 855.033900][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 855.033942][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 855.033986][ T30] sys_info+0x141/0x190 [ 855.034019][ T30] watchdog+0xd25/0x1050 [ 855.034059][ T30] ? __pfx_watchdog+0x10/0x10 [ 855.034088][ T30] ? __kthread_parkme+0x18c/0x230 [ 855.034118][ T30] ? kthread+0x13a/0x450 [ 855.034135][ T30] ? __pfx_watchdog+0x10/0x10 [ 855.034147][ T30] kthread+0x370/0x450 [ 855.034163][ T30] ? __pfx_kthread+0x10/0x10 [ 855.034182][ T30] ret_from_fork+0x754/0xd80 [ 855.034215][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 855.034240][ T30] ? __switch_to+0x7b4/0x1120 [ 855.034260][ T30] ? __pfx_kthread+0x10/0x10 [ 855.034283][ T30] ret_from_fork_asm+0x1a/0x30 [ 855.034311][ T30] [ 855.049421][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 855.049441][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 855.049465][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 855.049473][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 855.049487][ T30] Call Trace: [ 855.049493][ T30] [ 855.049500][ T30] dump_stack_lvl+0x100/0x190 [ 855.049546][ T30] vpanic+0x552/0x970 [ 855.049560][ T30] ? __pfx_vpanic+0x10/0x10 [ 855.049575][ T30] ? rcu_is_watching+0x12/0xc0 [ 855.049599][ T30] panic+0xd1/0xe0 [ 855.049612][ T30] ? __pfx_panic+0x10/0x10 [ 855.049628][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 855.049648][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 855.049667][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 855.049686][ T30] ? watchdog.cold+0x198/0x1ca [ 855.049701][ T30] ? watchdog+0xd35/0x1050 [ 855.049716][ T30] watchdog.cold+0x1a9/0x1ca [ 855.049736][ T30] ? __pfx_watchdog+0x10/0x10 [ 855.049751][ T30] ? __kthread_parkme+0x18c/0x230 [ 855.049775][ T30] ? kthread+0x13a/0x450 [ 855.049792][ T30] ? __pfx_watchdog+0x10/0x10 [ 855.049809][ T30] kthread+0x370/0x450 [ 855.049826][ T30] ? __pfx_kthread+0x10/0x10 [ 855.049845][ T30] ret_from_fork+0x754/0xd80 [ 855.049866][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 855.049888][ T30] ? __switch_to+0x7b4/0x1120 [ 855.049904][ T30] ? __pfx_kthread+0x10/0x10 [ 855.049923][ T30] ret_from_fork_asm+0x1a/0x30 [ 855.049947][ T30] [ 855.050003][ T30] Kernel Offset: disabled