last executing test programs: 42.862691117s ago: executing program 3 (id=949): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="080003000400000008000100", @ANYRES32=r5, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x2000, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) sendfile$auto(r7, r7, 0x0, 0x2) close_range$auto(r6, r7, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r8, 0x0, 0x20) r9 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r9, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) 41.442233917s ago: executing program 3 (id=956): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r1) ioctl$auto(r0, 0x4b35, 0x1) 41.112853722s ago: executing program 3 (id=957): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/bdi/43:32/min_ratio_fine\x00', 0x88282, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd10/queue/max_segment_size\x00', 0x68600, 0x0) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 40.64309519s ago: executing program 3 (id=959): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount$auto(0x0, 0x0, 0x0, 0x7fff, 0x0) 40.367876581s ago: executing program 3 (id=960): close_range$auto(0x2, 0x8, 0x0) select$auto(0xff800000, &(0x7f0000000040)={[0x49, 0x1, 0x8000000000000001, 0x4, 0x0, 0xffffffffffffffa4, 0x100000001, 0xffffffff, 0x4, 0x688, 0x0, 0x10, 0xbef0, 0x83, 0x1, 0x8]}, 0x0, 0x0, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4020ae76, &(0x7f0000000040)={0x4}) 39.639812944s ago: executing program 3 (id=963): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x6cf, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) epoll_create$auto(0x3e) poll$auto(&(0x7f0000000040)={r0, 0x1, 0xa}, 0x5, 0x108) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x16, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10040800}, 0x4044000) r3 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x40, 0x0) ioctl$auto_media_devnode_fops_mc_devnode(r3, 0x80047c05, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) pipe2$auto(&(0x7f0000000080)=r1, 0xe) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x5, 0x8000000000000006]}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='\x18\v/bDtw\x18m\xfa\x99;', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) 33.24383693s ago: executing program 0 (id=981): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x6cf, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) epoll_create$auto(0x3e) poll$auto(&(0x7f0000000040)={r0, 0x1, 0xa}, 0x5, 0x108) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x16, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x40, 0x0) ioctl$auto_media_devnode_fops_mc_devnode(r3, 0x80047c05, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) pipe2$auto(&(0x7f0000000080)=r1, 0xe) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x5, 0x8000000000000006]}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='\x18\v/bDtw\x18m\xfa\x99;', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) 30.478778046s ago: executing program 0 (id=986): openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) ptrace$auto(0xc, r0, 0x6, 0x6) 29.089308027s ago: executing program 0 (id=994): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) epoll_create$auto(0x3e) socketpair$auto(0x4, 0x8, 0x8000000000000000, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) pwritev$auto(r0, &(0x7f00000001c0)={0x0, 0x4}, 0x2000000002, 0x5, 0x3) 28.368664049s ago: executing program 0 (id=995): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x5, &(0x7f0000000100)="8d9588be350e9e808820bae98c813068e8c27d37a83892f4d58917f81f5da5bf0cb448aea0e823c32c07bb547b532595fcd3f543cf27e9eb5700f933c2eba0fc1d088ffdcac57a4df9e229951ec6a996240e02dc187459ac4935c2d66a393b9021e0e4a8072dd28d6bc467") r0 = socket(0xa, 0x1, 0x84) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) setsockopt$auto(r0, 0x0, 0x60, 0x0, 0x6f7250c4) 27.550777963s ago: executing program 0 (id=998): mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1b, 0x0) r0 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 27.208623892s ago: executing program 0 (id=1000): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32, @ANYBLOB="080003000400000008000100", @ANYRES32=r4, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x2000, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) sendfile$auto(r6, r6, 0x0, 0x2) close_range$auto(r5, r6, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r7, 0x0, 0x20) r8 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r8, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) 22.248113367s ago: executing program 2 (id=1012): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) socket(0x23, 0x5, 0x0) 21.569207583s ago: executing program 2 (id=1014): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0xa, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 21.222413316s ago: executing program 2 (id=1017): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect$auto(0x0, 0x806121, 0x6) 20.602762412s ago: executing program 2 (id=1019): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 20.1354898s ago: executing program 2 (id=1020): madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) r0 = socket(0x2b, 0x1, 0x0) r1 = socket(0x2, 0x801, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x11) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x10001}, 0x5, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x7fff, 0x0, 0xf) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000240), r5) close_range$auto(r4, r4, 0x1) msgctl$auto(0xffffff38, 0xffffffff, &(0x7f0000000380)={{0x8, 0x0, 0xffffffffffffffff, 0x6, 0x2bb9, 0x7, 0x2}, &(0x7f0000000180)=0x5, 0x0, 0x4, 0x7fffffffffffffff, 0x6, 0x1, 0x8, 0x1, 0x2, 0x1, @inferred, @raw=0x3}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'lo\x00'}) r6 = socket(0x1e, 0x4, 0x0) ioperm$auto(0x7, 0x6, 0x2) getsockname$auto(r6, &(0x7f0000000000)=@generic={0x2b, "bc9fefa9442c9e39021439230679"}, &(0x7f0000000180)=0xff) 18.461727636s ago: executing program 2 (id=1022): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r4, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="080003000400000008000100", @ANYRES32=r6, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x2000, 0x0) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) sendfile$auto(r8, r8, 0x0, 0x2) close_range$auto(r7, r8, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r9, 0x0, 0x20) r10 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r10, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) 18.15185301s ago: executing program 1 (id=1024): mmap$auto(0x0, 0x2000d, 0x5f890d6a, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x183800, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x4c8) getdents$auto(r2, 0x0, 0x400018) ioctl$auto(r1, 0xc1205531, r0) 17.830760406s ago: executing program 1 (id=1025): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x8911, r0) 16.8868477s ago: executing program 1 (id=1026): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) write$auto(0x3, 0x0, 0x1) 16.633818155s ago: executing program 1 (id=1027): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) write$auto(0xca, 0x0, 0x2b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x3) mmap$auto(0x0, 0x400008, 0x5d, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) 16.278883634s ago: executing program 1 (id=1028): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x6cf, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) epoll_create$auto(0x3e) poll$auto(&(0x7f0000000040)={r0, 0x1, 0xa}, 0x5, 0x108) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x16, 0x0) sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10040800}, 0x4044000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x40, 0x0) ioctl$auto_media_devnode_fops_mc_devnode(r2, 0x80047c05, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) pipe2$auto(&(0x7f0000000080)=r1, 0xe) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x5, 0x8000000000000006]}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='\x18\v/bDtw\x18m\xfa\x99;', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) 15.220191179s ago: executing program 1 (id=1029): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="080003000400000008000100", @ANYRES32=r5, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x2000, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) sendfile$auto(r7, r7, 0x0, 0x2) close_range$auto(r6, r7, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r8, 0x0, 0x20) r9 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r9, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) 11.992257592s ago: executing program 32 (id=1000): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r2, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32, @ANYBLOB="080003000400000008000100", @ANYRES32=r4, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x2000, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) sendfile$auto(r6, r6, 0x0, 0x2) close_range$auto(r5, r6, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r7, 0x0, 0x20) r8 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r8, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) 2.999069988s ago: executing program 33 (id=1022): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r4, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="080003000400000008000100", @ANYRES32=r6, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x2000, 0x0) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) sendfile$auto(r8, r8, 0x0, 0x2) close_range$auto(r7, r8, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r9, 0x0, 0x20) r10 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r10, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) 0s ago: executing program 34 (id=1029): mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2c, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_bond\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fcdbdf251c0000006400018008000300f1ffffff1400020076657468305f746f5f62726964676500080003000600000008000100", @ANYRES32, @ANYBLOB="0800030000018000140002006970366772653000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="080003000400000008000100", @ANYRES32=r5, @ANYBLOB="20000180140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000300603ffec2f5d20615173f60fc9cb332af3e2344b64b"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x28bf571df7b248e2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/setgroups\x00', 0x2000, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) sendfile$auto(r7, r7, 0x0, 0x2) close_range$auto(r6, r7, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0) read$auto(r8, 0x0, 0x20) r9 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r9, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0xfffffffd) kernel console output (not intermixed with test programs): ] ? __pfx___sys_socket+0x10/0x10 [ 137.862110][ T6149] __x64_sys_socket+0x72/0xb0 [ 137.862141][ T6149] ? lockdep_hardirqs_on+0x78/0x100 [ 137.862175][ T6149] do_syscall_64+0x115/0x840 [ 137.862209][ T6149] ? clear_bhb_loop+0x40/0x90 [ 137.862263][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.862298][ T6149] RIP: 0033:0x7f9ef739de99 [ 137.862325][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.862358][ T6149] RSP: 002b:00007f9ef81e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 137.862390][ T6149] RAX: ffffffffffffffda RBX: 00007f9ef7626180 RCX: 00007f9ef739de99 [ 137.862411][ T6149] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000011 [ 137.862430][ T6149] RBP: 00007f9ef7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 137.862451][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.862470][ T6149] R13: 00007f9ef7626218 R14: 00007f9ef7626180 R15: 00007ffc673fea88 [ 137.862512][ T6149] [ 139.328359][ T5640] block nbd0: Receive control failed (result -32) [ 140.994082][ T6196] netlink: 146 bytes leftover after parsing attributes in process `syz.2.75'. [ 141.260131][ T6197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.74'. [ 142.269047][ T6212] random: crng reseeded on system resumption [ 142.290437][ T6199] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 142.358193][ T6199] File: /dev/nullb0 PID: 6199 Comm: syz.1.76 [ 142.386469][ T6214] rnbd_client L202: map_device: Unknown parameter or missing value '0="/' [ 143.109435][ T6224] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.161760][ T29] audit: type=1807 audit(1784382122.053:3): UNKNOWN=nl80211 res=0 [ 143.177616][ T6222] input: jJǸ-9%vJ86 as /devices/virtual/input/input6 [ 143.209364][ T29] audit: type=1802 audit(1784382122.073:4): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.78" res=0 errno=0 [ 143.387412][ T6226] netlink: 'syz.1.80': attribute type 1 has an invalid length. [ 143.441100][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.485553][ T6226] FAULT_INJECTION: forcing a failure. [ 143.485553][ T6226] name failslab, interval 1, probability 0, space 0, times 0 [ 143.546589][ T6226] CPU: 0 UID: 0 PID: 6226 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) [ 143.546621][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.546635][ T6226] Call Trace: [ 143.546643][ T6226] [ 143.546652][ T6226] dump_stack_lvl+0x100/0x190 [ 143.546683][ T6226] should_fail_ex.cold+0x5/0xa [ 143.546718][ T6226] should_failslab+0xc2/0x120 [ 143.546750][ T6226] __kmalloc_noprof+0xfc/0x820 [ 143.546776][ T6226] ? lockdep_init_map_type+0x5c/0x250 [ 143.546814][ T6226] ? ops_init+0x77/0x5f0 [ 143.546850][ T6226] ops_init+0x77/0x5f0 [ 143.546884][ T6226] setup_net+0x118/0x3a0 [ 143.546915][ T6226] ? __pfx_setup_net+0x10/0x10 [ 143.546950][ T6226] ? mutex_init_lockdep+0xf1/0x120 [ 143.546993][ T6226] copy_net_ns+0x46f/0x7c0 [ 143.547030][ T6226] create_new_namespaces+0x3ea/0xac0 [ 143.547060][ T6226] unshare_nsproxy_namespaces+0xf2/0x220 [ 143.547087][ T6226] ksys_unshare+0x438/0xab0 [ 143.547117][ T6226] ? __pfx_ksys_unshare+0x10/0x10 [ 143.547157][ T6226] __x64_sys_unshare+0x31/0x40 [ 143.547185][ T6226] do_syscall_64+0x115/0x840 [ 143.547212][ T6226] ? clear_bhb_loop+0x40/0x90 [ 143.547240][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.547265][ T6226] RIP: 0033:0x7faa36f9de99 [ 143.547284][ T6226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.547306][ T6226] RSP: 002b:00007faa37efc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 143.547328][ T6226] RAX: ffffffffffffffda RBX: 00007faa37225fa0 RCX: 00007faa36f9de99 [ 143.547343][ T6226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 143.547357][ T6226] RBP: 00007faa37033eaf R08: 0000000000000000 R09: 0000000000000000 [ 143.547372][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.547385][ T6226] R13: 00007faa37226038 R14: 00007faa37225fa0 R15: 00007ffcafc43428 [ 143.547415][ T6226] [ 144.270651][ T6216] ima: policy update failed [ 144.278955][ T29] audit: type=1802 audit(1784382123.153:5): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.78" res=0 errno=0 [ 144.438440][ T6233] random: crng reseeded on system resumption [ 148.438113][ T6304] syz.1.92 uses obsolete (PF_INET,SOCK_PACKET) [ 148.887244][ T6314] syz.2.95 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 152.076876][ T6373] ubi0: attaching mtd0 [ 152.284938][ T6373] ubi0: scanning is finished [ 152.372435][ T6373] ubi0: empty MTD device detected [ 152.543179][ T29] audit: type=1400 audit(1784382131.423:6): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6359 comm="syz.1.98" [ 153.172366][ T6382] smpboot: CPU 1 is now offline [ 153.519434][ T6373] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 153.625698][ T6373] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 153.727317][ T6373] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 153.837539][ T6373] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 153.982044][ T6373] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 154.068707][ T6373] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 154.203555][ T6373] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4196005869 [ 154.246788][ T6406] openvswitch: netlink: Duplicate key (type 15). [ 154.349542][ T6373] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 154.406448][ T6409] binder: 6405:6409 ioctl c018620c 200000000040 returned -22 [ 154.492463][ T6398] ubi0: background thread "ubi_bgt0d" started, PID 6398 [ 154.535100][ T6357] ubi0: detaching mtd0 [ 154.768486][ T6357] ubi0: mtd0 is detached [ 157.081102][ T6443] FAULT_INJECTION: forcing a failure. [ 157.081102][ T6443] name failslab, interval 1, probability 0, space 0, times 0 [ 157.186479][ T6443] CPU: 0 UID: 0 PID: 6443 Comm: syz.3.106 Not tainted syzkaller #0 PREEMPT(full) [ 157.186511][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.186526][ T6443] Call Trace: [ 157.186533][ T6443] [ 157.186542][ T6443] dump_stack_lvl+0x100/0x190 [ 157.186574][ T6443] should_fail_ex.cold+0x5/0xa [ 157.186601][ T6443] should_failslab+0xc2/0x120 [ 157.186633][ T6443] kmem_cache_alloc_noprof+0x91/0x6a0 [ 157.186660][ T6443] ? __pfx_map_id_range_down+0x10/0x10 [ 157.186693][ T6443] ? security_inode_alloc+0x3b/0x2c0 [ 157.186724][ T6443] security_inode_alloc+0x3b/0x2c0 [ 157.186750][ T6443] inode_init_always_gfp+0xc77/0xfb0 [ 157.186794][ T6443] alloc_inode+0x8e/0x250 [ 157.186823][ T6443] iget_locked+0x1d9/0x6d0 [ 157.186854][ T6443] ? __pfx_iget_locked+0x10/0x10 [ 157.186882][ T6443] ? kernfs_root+0xee/0x2a0 [ 157.186914][ T6443] ? kernfs_root+0xee/0x2a0 [ 157.186957][ T6443] kernfs_get_inode+0x46/0x470 [ 157.186991][ T6443] kernfs_iop_lookup+0x1a7/0x2d0 [ 157.187030][ T6443] __lookup_slow+0x155/0x320 [ 157.187070][ T6443] lookup_slow+0x50/0x70 [ 157.187100][ T6443] link_path_walk+0x1377/0x1cc0 [ 157.187146][ T6443] path_openat+0x1c9/0x4280 [ 157.187166][ T6443] ? __kasan_slab_alloc+0x89/0x90 [ 157.187195][ T6443] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 157.187221][ T6443] ? do_getname+0x35/0x390 [ 157.187248][ T6443] ? __x64_sys_openat+0x12d/0x210 [ 157.187288][ T6443] ? __pfx_path_openat+0x10/0x10 [ 157.187318][ T6443] do_file_open+0x20e/0x430 [ 157.187342][ T6443] ? __pfx_do_file_open+0x10/0x10 [ 157.187385][ T6443] ? alloc_fd+0x471/0x7a0 [ 157.187426][ T6443] ? do_getname+0x191/0x390 [ 157.187457][ T6443] do_sys_openat2+0x10f/0x1e0 [ 157.187487][ T6443] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.187519][ T6443] ? do_raw_spin_lock+0x128/0x260 [ 157.187550][ T6443] __x64_sys_openat+0x12d/0x210 [ 157.187581][ T6443] ? __pfx___x64_sys_openat+0x10/0x10 [ 157.187623][ T6443] do_syscall_64+0x115/0x840 [ 157.187648][ T6443] ? clear_bhb_loop+0x40/0x90 [ 157.187677][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.187702][ T6443] RIP: 0033:0x7ff17a79de99 [ 157.187721][ T6443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.187743][ T6443] RSP: 002b:00007ff17b5cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.187766][ T6443] RAX: ffffffffffffffda RBX: 00007ff17aa26090 RCX: 00007ff17a79de99 [ 157.187782][ T6443] RDX: 0000000000189002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 157.187797][ T6443] RBP: 00007ff17a833eaf R08: 0000000000000000 R09: 0000000000000000 [ 157.187811][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.187824][ T6443] R13: 00007ff17aa26128 R14: 00007ff17aa26090 R15: 00007ffd2f1f2ff8 [ 157.187855][ T6443] [ 157.636220][ T6429] zswap: compressor not available [ 158.006447][ T6452] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 160.534395][ T5710] Process accounting resumed [ 162.891358][ T6497] ======================================================= [ 162.891358][ T6497] WARNING: The mand mount option has been deprecated and [ 162.891358][ T6497] and is ignored by this kernel. Remove the mand [ 162.891358][ T6497] option from the mount to silence this warning. [ 162.891358][ T6497] ======================================================= [ 163.292686][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 164.998304][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.121'. [ 165.092042][ T6527] ipvlan1: entered promiscuous mode [ 165.134451][ T6527] ipvlan1: entered allmulticast mode [ 165.220140][ T6527] veth0_vlan: entered allmulticast mode [ 165.727069][ T6536] random: crng reseeded on system resumption [ 168.100678][ T6556] HfR: entered promiscuous mode [ 168.573913][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 169.870623][ T6577] FAULT_INJECTION: forcing a failure. [ 169.870623][ T6577] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.013169][ T6577] CPU: 0 UID: 0 PID: 6577 Comm: syz.1.127 Not tainted syzkaller #0 PREEMPT(full) [ 170.013200][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.013215][ T6577] Call Trace: [ 170.013222][ T6577] [ 170.013230][ T6577] dump_stack_lvl+0x100/0x190 [ 170.013261][ T6577] should_fail_ex.cold+0x5/0xa [ 170.013288][ T6577] _copy_from_user+0x2e/0xd0 [ 170.013324][ T6577] memdup_user+0x6b/0xe0 [ 170.013352][ T6577] get_filter.isra.0+0xa9/0x160 [ 170.013391][ T6577] ? __pfx_get_filter.isra.0+0x10/0x10 [ 170.013439][ T6577] ppp_ioctl+0x1755/0x27c0 [ 170.013467][ T6577] ? find_held_lock+0x2b/0x80 [ 170.013495][ T6577] ? __pfx_ppp_ioctl+0x10/0x10 [ 170.013525][ T6577] ? __fget_files+0x21f/0x3d0 [ 170.013567][ T6577] ? __pfx_ppp_ioctl+0x10/0x10 [ 170.013593][ T6577] __x64_sys_ioctl+0x18e/0x210 [ 170.013628][ T6577] do_syscall_64+0x115/0x840 [ 170.013652][ T6577] ? clear_bhb_loop+0x40/0x90 [ 170.013681][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.013706][ T6577] RIP: 0033:0x7faa36f9de99 [ 170.013732][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.013755][ T6577] RSP: 002b:00007faa37eba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.013778][ T6577] RAX: ffffffffffffffda RBX: 00007faa37226180 RCX: 00007faa36f9de99 [ 170.013794][ T6577] RDX: 0000200000000100 RSI: 0000000040107447 RDI: 0000000000000005 [ 170.013808][ T6577] RBP: 00007faa37033eaf R08: 0000000000000000 R09: 0000000000000000 [ 170.013823][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.013836][ T6577] R13: 00007faa37226218 R14: 00007faa37226180 R15: 00007ffcafc43428 [ 170.013866][ T6577] [ 170.850331][ T6582] FAULT_INJECTION: forcing a failure. [ 170.850331][ T6582] name failslab, interval 1, probability 0, space 0, times 0 [ 170.937530][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.3.128 Not tainted syzkaller #0 PREEMPT(full) [ 170.937563][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.937577][ T6582] Call Trace: [ 170.937584][ T6582] [ 170.937593][ T6582] dump_stack_lvl+0x100/0x190 [ 170.937624][ T6582] should_fail_ex.cold+0x5/0xa [ 170.937651][ T6582] should_failslab+0xc2/0x120 [ 170.937692][ T6582] __kmalloc_noprof+0xfc/0x820 [ 170.937718][ T6582] ? trace_kmalloc+0xeb/0x110 [ 170.937750][ T6582] ? lsm_blob_alloc+0x68/0x90 [ 170.937790][ T6582] lsm_blob_alloc+0x68/0x90 [ 170.937826][ T6582] security_sk_alloc+0x2d/0x290 [ 170.937852][ T6582] sk_prot_alloc+0x12a/0x2a0 [ 170.937894][ T6582] sk_alloc+0x36/0xe80 [ 170.937923][ T6582] packet_create+0x127/0x8e0 [ 170.937950][ T6582] __sock_create+0x339/0x860 [ 170.937993][ T6582] __sys_socket+0x14d/0x260 [ 170.938015][ T6582] ? __pfx___sys_socket+0x10/0x10 [ 170.938046][ T6582] __x64_sys_socket+0x72/0xb0 [ 170.938067][ T6582] ? lockdep_hardirqs_on+0x78/0x100 [ 170.938092][ T6582] do_syscall_64+0x115/0x840 [ 170.938115][ T6582] ? clear_bhb_loop+0x40/0x90 [ 170.938144][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.938169][ T6582] RIP: 0033:0x7ff17a79de99 [ 170.938188][ T6582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.938244][ T6582] RSP: 002b:00007ff17b5cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 170.938267][ T6582] RAX: ffffffffffffffda RBX: 00007ff17aa26090 RCX: 00007ff17a79de99 [ 170.938283][ T6582] RDX: 0000000000000300 RSI: 0000000000080003 RDI: 0000000000000011 [ 170.938297][ T6582] RBP: 00007ff17a833eaf R08: 0000000000000000 R09: 0000000000000000 [ 170.938311][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.938325][ T6582] R13: 00007ff17aa26128 R14: 00007ff17aa26090 R15: 00007ffd2f1f2ff8 [ 170.938354][ T6582] [ 171.173292][ T6589] random: crng reseeded on system resumption [ 172.032649][ T6601] FAULT_INJECTION: forcing a failure. [ 172.032649][ T6601] name failslab, interval 1, probability 0, space 0, times 0 [ 172.106468][ T6601] CPU: 0 UID: 0 PID: 6601 Comm: syz.3.131 Not tainted syzkaller #0 PREEMPT(full) [ 172.106508][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.106522][ T6601] Call Trace: [ 172.106529][ T6601] [ 172.106537][ T6601] dump_stack_lvl+0x100/0x190 [ 172.106570][ T6601] should_fail_ex.cold+0x5/0xa [ 172.106597][ T6601] should_failslab+0xc2/0x120 [ 172.106629][ T6601] kmem_cache_alloc_noprof+0x91/0x6a0 [ 172.106656][ T6601] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 172.106682][ T6601] ? alloc_vfsmnt+0x23/0x710 [ 172.106715][ T6601] alloc_vfsmnt+0x23/0x710 [ 172.106745][ T6601] clone_mnt+0x4b/0x930 [ 172.106776][ T6601] ? is_subdir+0x1a8/0x3e0 [ 172.106806][ T6601] copy_tree+0x329/0xbf0 [ 172.106836][ T6601] copy_mnt_ns+0x3fa/0x1180 [ 172.106867][ T6601] ? __pfx_copy_mnt_ns+0x10/0x10 [ 172.106895][ T6601] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 172.106923][ T6601] ? create_new_namespaces+0x30/0xac0 [ 172.106951][ T6601] create_new_namespaces+0xd3/0xac0 [ 172.106974][ T6601] ? bpf_lsm_capable+0x9/0x10 [ 172.106998][ T6601] ? security_capable+0x80/0x260 [ 172.107041][ T6601] unshare_nsproxy_namespaces+0xf2/0x220 [ 172.107068][ T6601] ksys_unshare+0x438/0xab0 [ 172.107099][ T6601] ? __pfx_ksys_unshare+0x10/0x10 [ 172.107138][ T6601] __x64_sys_unshare+0x31/0x40 [ 172.107167][ T6601] do_syscall_64+0x115/0x840 [ 172.107191][ T6601] ? clear_bhb_loop+0x40/0x90 [ 172.107220][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.107244][ T6601] RIP: 0033:0x7ff17a79de99 [ 172.107263][ T6601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.107290][ T6601] RSP: 002b:00007ff17b58b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 172.107313][ T6601] RAX: ffffffffffffffda RBX: 00007ff17aa26270 RCX: 00007ff17a79de99 [ 172.107328][ T6601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 172.107342][ T6601] RBP: 00007ff17a833eaf R08: 0000000000000000 R09: 0000000000000000 [ 172.107356][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.107369][ T6601] R13: 00007ff17aa26308 R14: 00007ff17aa26270 R15: 00007ffd2f1f2ff8 [ 172.107406][ T6601] [ 174.174759][ T29] audit: type=1800 audit(1784382153.053:7): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.135" name="dbroot" dev="configfs" ino=14121 res=0 errno=0 [ 174.943374][ T6631] futex_wake_op: syz.0.136 tries to shift op by -2048; fix this program [ 175.110017][ T6631] futex_wake_op: syz.0.136 tries to shift op by -2048; fix this program [ 175.421508][ T6634] FAULT_INJECTION: forcing a failure. [ 175.421508][ T6634] name failslab, interval 1, probability 0, space 0, times 0 [ 175.497047][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT(full) [ 175.497087][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.497101][ T6634] Call Trace: [ 175.497109][ T6634] [ 175.497117][ T6634] dump_stack_lvl+0x100/0x190 [ 175.497148][ T6634] should_fail_ex.cold+0x5/0xa [ 175.497176][ T6634] should_failslab+0xc2/0x120 [ 175.497208][ T6634] __kmalloc_noprof+0xfc/0x820 [ 175.497235][ T6634] ? trace_kmem_cache_alloc+0xdd/0x100 [ 175.497268][ T6634] ? lsm_blob_alloc+0x68/0x90 [ 175.497308][ T6634] lsm_blob_alloc+0x68/0x90 [ 175.497343][ T6634] security_prepare_creds+0x2d/0x290 [ 175.497379][ T6634] prepare_creds+0x5d6/0x950 [ 175.497416][ T6634] __sys_setresuid+0x458/0x1280 [ 175.497444][ T6634] do_syscall_64+0x115/0x840 [ 175.497468][ T6634] ? clear_bhb_loop+0x40/0x90 [ 175.497497][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.497521][ T6634] RIP: 0033:0x7f9ef739de99 [ 175.497543][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.497566][ T6634] RSP: 002b:00007f9ef8227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 175.497588][ T6634] RAX: ffffffffffffffda RBX: 00007f9ef7625fa0 RCX: 00007f9ef739de99 [ 175.497603][ T6634] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.497617][ T6634] RBP: 00007f9ef7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 175.497631][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.497644][ T6634] R13: 00007f9ef7626038 R14: 00007f9ef7625fa0 R15: 00007ffc673fea88 [ 175.497674][ T6634] [ 176.834471][ T6653] random: crng reseeded on system resumption [ 177.119177][ T6647] netlink: Unknown NAT attribute (type=262, max=9) [ 177.528757][ T6667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'. [ 177.868002][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.906554][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.977979][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.023438][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.742154][ T6681] warning: `syz.0.144' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 178.783997][ T6684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.144'. [ 179.074134][ T6684] bond0: (slave bond_slave_0): Releasing backup interface [ 179.896796][ T6692] openvswitch: HfR: Dropping previously announced user features [ 180.087103][ T29] audit: type=1800 audit(1784382158.963:8): pid=6701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.147" name="lu_gp_id" dev="configfs" ino=14651 res=0 errno=0 [ 180.613036][ T1171] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.384564][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 181.525177][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 181.604988][ T6723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.152'. [ 181.745180][ T6705] HfR: left promiscuous mode [ 181.793601][ T6724] ptp ptp0: only physical clock in use now [ 182.992786][ T6741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.153'. [ 188.217050][ T6828] netlink: 306 bytes leftover after parsing attributes in process `syz.1.165'. [ 190.697326][ T6825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.816050][ T6892] netlink: 306 bytes leftover after parsing attributes in process `syz.2.176'. [ 193.209363][ T29] audit: type=1800 audit(1784382172.083:9): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.178" name="dbroot" dev="configfs" ino=15886 res=0 errno=0 [ 194.372865][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.385312][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.627546][ T6924] netlink: 808 bytes leftover after parsing attributes in process `syz.0.185'. [ 195.664740][ T6924] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 196.012011][ T6921] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.059102][ T6921] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.089231][ T6921] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.110345][ T6929] netlink: 306 bytes leftover after parsing attributes in process `syz.3.186'. [ 196.125685][ T6921] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.971442][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.130023][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.136248][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.209745][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.456204][ T6963] netlink: 146 bytes leftover after parsing attributes in process `syz.1.193'. [ 199.338367][ T6970] netlink: 146 bytes leftover after parsing attributes in process `syz.2.194'. [ 199.643769][ T6951] Process accounting resumed [ 200.003904][ T6979] netlink: 306 bytes leftover after parsing attributes in process `syz.0.197'. [ 201.001247][ T6994] random: crng reseeded on system resumption [ 203.850839][ T7017] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.0.204: bg 2: bad block bitmap checksum [ 204.165253][ T7017] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 948 with max blocks 76 with error 74 [ 204.410121][ T7017] EXT4-fs (sda1): This should not happen!! Data will be lost [ 204.410121][ T7017] [ 204.499689][ T7024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.518138][ T7024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.543792][ T7024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.568724][ T7024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.032286][ T1122] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1297 with max blocks 28 with error 117 [ 205.127801][ T1122] EXT4-fs (sda1): This should not happen!! Data will be lost [ 205.127801][ T1122] [ 205.235967][ T7050] netlink: 146 bytes leftover after parsing attributes in process `syz.3.210'. [ 206.291199][ T5640] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 206.325714][ T7061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.211'. [ 206.473699][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.529884][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.536053][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.609949][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.616084][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.672597][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.728480][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.777448][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.309139][ T7042] Process accounting resumed [ 207.413802][ T7077] vivid-007: ================= START STATUS ================= [ 207.495187][ T7077] vivid-007: Generate PTS: true [ 207.637134][ T7077] vivid-007: Generate SCR: true [ 207.685371][ T7077] tpg source WxH: 320x240 (Y'CbCr) [ 207.729357][ T7077] tpg field: 1 [ 207.762726][ T7077] tpg crop: (0,0)/320x240 [ 207.807860][ T7077] tpg compose: (0,0)/320x240 [ 207.853968][ T7077] tpg colorspace: 8 [ 207.909742][ T7077] tpg transfer function: 0/0 [ 207.963202][ T7077] tpg Y'CbCr encoding: 0/0 [ 208.011853][ T7077] tpg quantization: 0/0 [ 208.053813][ T7077] tpg RGB range: 0/2 [ 208.090822][ T7077] vivid-007: ================== END STATUS ================== [ 210.751023][ T7115] netlink: 146 bytes leftover after parsing attributes in process `syz.1.220'. [ 211.777681][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 211.884688][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 212.039633][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.089196][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.126973][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.144938][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.721962][ T7125] FAULT_INJECTION: forcing a failure. [ 212.721962][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 212.785452][ T7127] futex_wake_op: syz.0.226 tries to shift op by -2048; fix this program [ 212.863269][ T7125] CPU: 0 UID: 0 PID: 7125 Comm: syz.3.223 Not tainted syzkaller #0 PREEMPT(full) [ 212.863301][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 212.863315][ T7125] Call Trace: [ 212.863322][ T7125] [ 212.863330][ T7125] dump_stack_lvl+0x100/0x190 [ 212.863361][ T7125] should_fail_ex.cold+0x5/0xa [ 212.863388][ T7125] should_failslab+0xc2/0x120 [ 212.863420][ T7125] kmem_cache_alloc_noprof+0x91/0x6a0 [ 212.863447][ T7125] ? d_instantiate+0x8a/0xb0 [ 212.863473][ T7125] ? d_instantiate+0x8a/0xb0 [ 212.863497][ T7125] ? alloc_empty_file+0x5b/0x1c0 [ 212.863530][ T7125] alloc_empty_file+0x5b/0x1c0 [ 212.863559][ T7125] alloc_file_pseudo+0x183/0x290 [ 212.863589][ T7125] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 212.863619][ T7125] ? alloc_fd+0x471/0x7a0 [ 212.863661][ T7125] sock_alloc_file+0x50/0x210 [ 212.863694][ T7125] __sys_socket+0x1c0/0x260 [ 212.863717][ T7125] ? __pfx___sys_socket+0x10/0x10 [ 212.863747][ T7125] __x64_sys_socket+0x72/0xb0 [ 212.863768][ T7125] ? lockdep_hardirqs_on+0x78/0x100 [ 212.863793][ T7125] do_syscall_64+0x115/0x840 [ 212.863816][ T7125] ? clear_bhb_loop+0x40/0x90 [ 212.863846][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.863880][ T7125] RIP: 0033:0x7ff17a79de99 [ 212.863899][ T7125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.863922][ T7125] RSP: 002b:00007ff17b5ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 212.863945][ T7125] RAX: ffffffffffffffda RBX: 00007ff17aa26180 RCX: 00007ff17a79de99 [ 212.863960][ T7125] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000011 [ 212.863974][ T7125] RBP: 00007ff17a833eaf R08: 0000000000000000 R09: 0000000000000000 [ 212.863988][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.864001][ T7125] R13: 00007ff17aa26218 R14: 00007ff17aa26180 R15: 00007ffd2f1f2ff8 [ 212.864031][ T7125] [ 217.927552][ T7205] netlink: 808 bytes leftover after parsing attributes in process `syz.1.238'. [ 217.944902][ T7176] Process accounting resumed [ 217.968740][ T7205] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 218.391087][ T7212] binder: 7211:7212 ioctl c0046209 ffffffffffffffff returned -22 [ 219.929171][ T7238] netlink: 146 bytes leftover after parsing attributes in process `syz.0.246'. [ 224.468712][ T5640] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 224.529758][ T7305] ima: policy update failed [ 224.604956][ T29] audit: type=1802 audit(1784382203.483:10): pid=7305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.256" res=0 errno=0 [ 224.943872][ T7270] Process accounting resumed [ 226.259794][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 226.789740][ T7334] netlink: 146 bytes leftover after parsing attributes in process `syz.3.262'. [ 228.014309][ T7326] futex_wake_op: syz.1.260 tries to shift op by -2048; fix this program [ 228.532526][ T7356] netlink: 146 bytes leftover after parsing attributes in process `syz.3.266'. [ 229.728773][ T7340] Process accounting paused [ 229.930850][ T5640] Bluetooth: hci3: unexpected event 0x02 length: 1021 > 260 [ 229.987053][ T7372] ima: policy update failed [ 230.115858][ T29] audit: type=1802 audit(1784382208.993:11): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.270" res=0 errno=0 [ 230.905378][ T7392] ubi0: attaching mtd0 [ 231.129967][ T7392] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 231.294244][ T7392] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 231.420252][ T7392] eraseblock attaching information dump: [ 231.535009][ T7392] ec -1 [ 231.576597][ T7392] pnum 0 [ 231.623518][ T7392] lnum 0 [ 231.697790][ T7392] scrub 1 [ 231.758565][ T7392] sqnum 1 [ 231.807553][ T7392] Volume identifier header dump: [ 231.898438][ T7392] magic 55424921 [ 231.956755][ T7392] version 1 [ 231.996920][ T7392] vol_type 1 [ 232.052464][ T7392] copy_flag 0 [ 232.108042][ T7392] compat 5 [ 232.115910][ T7409] binder: 7408:7409 ioctl c018620c 200000000040 returned -1 [ 232.177463][ T7392] vol_id 2147479551 [ 232.245352][ T7392] lnum 0 [ 232.311139][ T7392] data_size 0 [ 232.359763][ T7392] used_ebs 0 [ 232.405263][ T7392] data_pad 0 [ 232.469989][ T7392] sqnum 1 [ 232.511034][ T7392] hdr_crc 65b3bd2d [ 232.558688][ T7392] Volume identifier header hexdump: [ 232.939329][ T7392] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 235.891739][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1297 with max blocks 28 with error 117 [ 235.971918][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 235.971918][ T13] [ 238.600741][ T7493] netlink: 146 bytes leftover after parsing attributes in process `syz.0.298'. [ 239.285357][ T7468] Process accounting paused [ 239.820480][ T7513] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 242.977189][ T7565] netlink: 146 bytes leftover after parsing attributes in process `syz.0.322'. [ 243.223612][ T7574] netlink: 146 bytes leftover after parsing attributes in process `syz.3.323'. [ 244.397792][ T7589] random: crng reseeded on system resumption [ 249.488653][ T7646] Process accounting paused [ 251.651412][ T7706] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 251.720029][ T7706] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 252.854153][ T7727] usb usb34: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 255.283301][ T7739] Process accounting paused [ 255.806038][ T7782] binder: 7779:7782 ioctl 40046205 0 returned -22 [ 255.823606][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.831001][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.925708][ T1171] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 912 with max blocks 112 with error 117 [ 258.005925][ T1171] EXT4-fs (sda1): This should not happen!! Data will be lost [ 258.005925][ T1171] [ 258.283393][ T7820] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 258.318339][ T7820] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 260.701771][ T7851] Process accounting resumed [ 261.025803][ T7868] random: crng reseeded on system resumption [ 261.484470][ T7881] netlink: 146 bytes leftover after parsing attributes in process `syz.0.408'. [ 261.589070][ T7884] binder: 7883:7884 ioctl 40046210 0 returned -14 [ 264.224605][ T7930] netlink: 146 bytes leftover after parsing attributes in process `syz.1.424'. [ 265.499006][ T7956] netlink: 146 bytes leftover after parsing attributes in process `syz.2.430'. [ 268.644974][ T8014] netlink: 616 bytes leftover after parsing attributes in process `syz.1.451'. [ 268.714502][ T8014] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 269.561974][ T8035] netlink: 146 bytes leftover after parsing attributes in process `syz.0.458'. [ 270.026173][ T8016] Process accounting resumed [ 271.263388][ T8074] random: crng reseeded on system resumption [ 272.443770][ T1171] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 912 with max blocks 112 with error 117 [ 272.504417][ T1171] EXT4-fs (sda1): This should not happen!! Data will be lost [ 272.504417][ T1171] [ 273.156272][ T1171] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 917 with max blocks 1 with error 117 [ 273.230862][ T1171] EXT4-fs (sda1): This should not happen!! Data will be lost [ 273.230862][ T1171] [ 273.351146][ T1171] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1290 with max blocks 7 with error 117 [ 273.436999][ T1171] EXT4-fs (sda1): This should not happen!! Data will be lost [ 273.436999][ T1171] [ 274.126199][ T8110] netlink: 146 bytes leftover after parsing attributes in process `syz.2.480'. [ 274.891061][ T8123] binder: 8122:8123 ioctl 400c620e 200000001f40 returned -22 [ 275.522314][ T8129] netlink: 800 bytes leftover after parsing attributes in process `syz.1.485'. [ 275.546975][ T8129] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 275.970098][ T8138] usb usb39: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 276.004869][ T8138] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0 [ 314.129535][ T8796] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 315.963595][ T8831] FAULT_INJECTION: forcing a failure. [ 315.963595][ T8831] name failslab, interval 1, probability 0, space 0, times 0 [ 316.038148][ T8831] CPU: 0 UID: 0 PID: 8831 Comm: syz.0.690 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.038187][ T8831] Tainted: [L]=SOFTLOCKUP [ 316.038195][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.038209][ T8831] Call Trace: [ 316.038216][ T8831] [ 316.038224][ T8831] dump_stack_lvl+0x100/0x190 [ 316.038256][ T8831] should_fail_ex.cold+0x5/0xa [ 316.038283][ T8831] should_failslab+0xc2/0x120 [ 316.038314][ T8831] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 316.038345][ T8831] ? sock_alloc_inode+0x26/0x2c0 [ 316.038383][ T8831] ? __pfx_sock_alloc_inode+0x10/0x10 [ 316.038419][ T8831] sock_alloc_inode+0x26/0x2c0 [ 316.038453][ T8831] ? __pfx_sock_alloc_inode+0x10/0x10 [ 316.038487][ T8831] alloc_inode+0x68/0x250 [ 316.038517][ T8831] sock_alloc+0x44/0x280 [ 316.038547][ T8831] ? security_socket_create+0x7f/0x250 [ 316.038572][ T8831] __sock_create+0xc2/0x860 [ 316.038615][ T8831] __sys_socketpair+0x1e4/0x5b0 [ 316.038640][ T8831] ? __pfx___sys_socketpair+0x10/0x10 [ 316.038666][ T8831] ? xfd_validate_state+0x129/0x190 [ 316.038698][ T8831] __x64_sys_socketpair+0x96/0x100 [ 316.038722][ T8831] ? lockdep_hardirqs_on+0x78/0x100 [ 316.038746][ T8831] do_syscall_64+0x115/0x840 [ 316.038797][ T8831] ? clear_bhb_loop+0x40/0x90 [ 316.038830][ T8831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.038854][ T8831] RIP: 0033:0x7f5d4f39de99 [ 316.038880][ T8831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.038903][ T8831] RSP: 002b:00007f5d50187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 316.038925][ T8831] RAX: ffffffffffffffda RBX: 00007f5d4f625fa0 RCX: 00007f5d4f39de99 [ 316.038941][ T8831] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 316.038955][ T8831] RBP: 00007f5d4f433eaf R08: 0000000000000000 R09: 0000000000000000 [ 316.038969][ T8831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.038983][ T8831] R13: 00007f5d4f626038 R14: 00007f5d4f625fa0 R15: 00007ffe243a5fa8 [ 316.039012][ T8831] [ 316.039024][ T8831] socket: no more sockets [ 316.580742][ T8809] Process accounting paused [ 316.680519][ T8844] FAULT_INJECTION: forcing a failure. [ 316.680519][ T8844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 316.707641][ T8844] CPU: 0 UID: 0 PID: 8844 Comm: syz.2.691 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.707679][ T8844] Tainted: [L]=SOFTLOCKUP [ 316.707688][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.707702][ T8844] Call Trace: [ 316.707710][ T8844] [ 316.707725][ T8844] dump_stack_lvl+0x100/0x190 [ 316.707757][ T8844] should_fail_ex.cold+0x5/0xa [ 316.707779][ T8844] ? prepare_alloc_pages+0x16d/0x5f0 [ 316.707815][ T8844] should_fail_alloc_page+0xeb/0x140 [ 316.707850][ T8844] prepare_alloc_pages+0x1f0/0x5f0 [ 316.707882][ T8844] ? is_bpf_text_address+0x8a/0x1a0 [ 316.707919][ T8844] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 316.707946][ T8844] ? is_bpf_text_address+0x94/0x1a0 [ 316.707978][ T8844] ? kernel_text_address+0x8d/0x100 [ 316.708012][ T8844] ? find_held_lock+0x2b/0x80 [ 316.708039][ T8844] ? __kernel_text_address+0xd/0x30 [ 316.708073][ T8844] ? unwind_get_return_address+0x59/0xa0 [ 316.708108][ T8844] ? arch_stack_walk+0xa6/0xf0 [ 316.708148][ T8844] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 316.708177][ T8844] ? __pfx_stack_trace_save+0x10/0x10 [ 316.708209][ T8844] ? stack_depot_save_flags+0x27/0x9d0 [ 316.708250][ T8844] ? kasan_save_stack+0x3f/0x50 [ 316.708277][ T8844] ? kasan_save_stack+0x30/0x50 [ 316.708309][ T8844] ? handle_mm_fault+0x37b/0xa30 [ 316.708345][ T8844] ? __get_user_pages+0x1178/0x32a0 [ 316.708376][ T8844] ? populate_vma_page_range+0x267/0x3f0 [ 316.708409][ T8844] ? __mm_populate+0x107/0x3a0 [ 316.708441][ T8844] ? vm_mmap_pgoff+0x37f/0x470 [ 316.708469][ T8844] ? ksys_mmap_pgoff+0xe4/0x610 [ 316.708498][ T8844] ? __x64_sys_mmap+0x125/0x190 [ 316.708523][ T8844] ? do_syscall_64+0x115/0x840 [ 316.708547][ T8844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.708574][ T8844] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 316.708609][ T8844] ? policy_nodemask+0xed/0x4f0 [ 316.708652][ T8844] alloc_pages_mpol+0x1fb/0x540 [ 316.708687][ T8844] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 316.708748][ T8844] alloc_pages_noprof+0x1a/0x160 [ 316.708785][ T8844] pte_alloc_one+0x1c/0x3d0 [ 316.708821][ T8844] __pte_alloc+0x6d/0x3e0 [ 316.708849][ T8844] ? __pfx___pte_alloc+0x10/0x10 [ 316.708879][ T8844] ? do_raw_spin_lock+0x128/0x260 [ 316.708902][ T8844] ? find_held_lock+0x2b/0x80 [ 316.708932][ T8844] do_anonymous_page+0x13ae/0x2080 [ 316.708974][ T8844] ? __pmd_alloc+0x3fb/0x950 [ 316.709009][ T8844] __handle_mm_fault+0x1d2c/0x2a00 [ 316.709052][ T8844] ? mt_find+0x45e/0x8e0 [ 316.709082][ T8844] ? __pfx___handle_mm_fault+0x10/0x10 [ 316.709118][ T8844] ? __pfx_mt_find+0x10/0x10 [ 316.709169][ T8844] handle_mm_fault+0x37b/0xa30 [ 316.709213][ T8844] __get_user_pages+0x1178/0x32a0 [ 316.709256][ T8844] ? __pfx___get_user_pages+0x10/0x10 [ 316.709296][ T8844] populate_vma_page_range+0x267/0x3f0 [ 316.709332][ T8844] ? __pfx_populate_vma_page_range+0x10/0x10 [ 316.709365][ T8844] ? __pfx_find_vma_intersection+0x10/0x10 [ 316.709397][ T8844] ? do_mmap+0x93f/0x12f0 [ 316.709431][ T8844] __mm_populate+0x107/0x3a0 [ 316.709466][ T8844] ? __pfx___mm_populate+0x10/0x10 [ 316.709502][ T8844] ? up_write+0x2e5/0x5c0 [ 316.709526][ T8844] vm_mmap_pgoff+0x37f/0x470 [ 316.709560][ T8844] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 316.709596][ T8844] ? __pfx_do_futex+0x10/0x10 [ 316.709625][ T8844] ksys_mmap_pgoff+0xe4/0x610 [ 316.709656][ T8844] ? __x64_sys_futex+0x358/0x4d0 [ 316.709680][ T8844] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 316.709711][ T8844] ? xfd_validate_state+0x129/0x190 [ 316.709748][ T8844] __x64_sys_mmap+0x125/0x190 [ 316.709778][ T8844] do_syscall_64+0x115/0x840 [ 316.709802][ T8844] ? clear_bhb_loop+0x40/0x90 [ 316.709834][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.709860][ T8844] RIP: 0033:0x7f9ef739de99 [ 316.709879][ T8844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.709902][ T8844] RSP: 002b:00007f9ef8227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 316.709924][ T8844] RAX: ffffffffffffffda RBX: 00007f9ef7625fa0 RCX: 00007f9ef739de99 [ 316.709940][ T8844] RDX: 0000000c00000072 RSI: 0000000000000004 RDI: 0000000000000000 [ 316.709954][ T8844] RBP: 00007f9ef7433eaf R08: 0000001000000002 R09: 0000000000008000 [ 316.709969][ T8844] R10: 0000000000008b72 R11: 0000000000000246 R12: 0000000000000000 [ 316.709983][ T8844] R13: 00007f9ef7626038 R14: 00007f9ef7625fa0 R15: 00007ffc673fea88 [ 316.710013][ T8844] [ 317.458703][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.465169][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.633726][ T8854] FAULT_INJECTION: forcing a failure. [ 317.633726][ T8854] name failslab, interval 1, probability 0, space 0, times 0 [ 317.655969][ T8854] CPU: 0 UID: 0 PID: 8854 Comm: syz.0.696 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.656008][ T8854] Tainted: [L]=SOFTLOCKUP [ 317.656016][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.656030][ T8854] Call Trace: [ 317.656038][ T8854] [ 317.656046][ T8854] dump_stack_lvl+0x100/0x190 [ 317.656077][ T8854] should_fail_ex.cold+0x5/0xa [ 317.656104][ T8854] should_failslab+0xc2/0x120 [ 317.656136][ T8854] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 317.656189][ T8854] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 317.656230][ T8854] ? sock_alloc_inode+0x26/0x2c0 [ 317.656267][ T8854] ? __pfx_sock_alloc_inode+0x10/0x10 [ 317.656303][ T8854] sock_alloc_inode+0x26/0x2c0 [ 317.656336][ T8854] ? __pfx_sock_alloc_inode+0x10/0x10 [ 317.656369][ T8854] alloc_inode+0x68/0x250 [ 317.656398][ T8854] sock_alloc+0x44/0x280 [ 317.656427][ T8854] ? security_socket_create+0x7f/0x250 [ 317.656453][ T8854] __sock_create+0xc2/0x860 [ 317.656490][ T8854] ? lockdep_init_map_type+0x5c/0x250 [ 317.656532][ T8854] smc_create+0x163/0x290 [ 317.656556][ T8854] __sock_create+0x339/0x860 [ 317.656598][ T8854] __sys_socket+0x14d/0x260 [ 317.656621][ T8854] ? __pfx___sys_socket+0x10/0x10 [ 317.656658][ T8854] __x64_sys_socket+0x72/0xb0 [ 317.656713][ T8854] ? lockdep_hardirqs_on+0x78/0x100 [ 317.656737][ T8854] do_syscall_64+0x115/0x840 [ 317.656761][ T8854] ? clear_bhb_loop+0x40/0x90 [ 317.656796][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.656821][ T8854] RIP: 0033:0x7f5d4f39de99 [ 317.656841][ T8854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.656863][ T8854] RSP: 002b:00007f5d50187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 317.656886][ T8854] RAX: ffffffffffffffda RBX: 00007f5d4f625fa0 RCX: 00007f5d4f39de99 [ 317.656901][ T8854] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 317.656915][ T8854] RBP: 00007f5d4f433eaf R08: 0000000000000000 R09: 0000000000000000 [ 317.656929][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.656942][ T8854] R13: 00007f5d4f626038 R14: 00007f5d4f625fa0 R15: 00007ffe243a5fa8 [ 317.656972][ T8854] [ 317.656984][ T8854] socket: no more sockets [ 319.382289][ T8894] FAULT_INJECTION: forcing a failure. [ 319.382289][ T8894] name failslab, interval 1, probability 0, space 0, times 0 [ 319.491343][ T8894] CPU: 0 UID: 0 PID: 8894 Comm: syz.0.707 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.491381][ T8894] Tainted: [L]=SOFTLOCKUP [ 319.491389][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.491411][ T8894] Call Trace: [ 319.491418][ T8894] [ 319.491427][ T8894] dump_stack_lvl+0x100/0x190 [ 319.491458][ T8894] should_fail_ex.cold+0x5/0xa [ 319.491485][ T8894] should_failslab+0xc2/0x120 [ 319.491517][ T8894] kmem_cache_alloc_noprof+0x91/0x6a0 [ 319.491543][ T8894] ? security_inode_alloc+0x3b/0x2c0 [ 319.491569][ T8894] ? sk_prot_alloc+0x60/0x2a0 [ 319.491609][ T8894] sk_prot_alloc+0x60/0x2a0 [ 319.491647][ T8894] sk_alloc+0x36/0xe80 [ 319.491675][ T8894] rxrpc_create+0x116/0x8d0 [ 319.491706][ T8894] __sock_create+0x339/0x860 [ 319.491749][ T8894] __sys_socket+0x14d/0x260 [ 319.491771][ T8894] ? __pfx___sys_socket+0x10/0x10 [ 319.491801][ T8894] __x64_sys_socket+0x72/0xb0 [ 319.491823][ T8894] ? lockdep_hardirqs_on+0x78/0x100 [ 319.491847][ T8894] do_syscall_64+0x115/0x840 [ 319.491870][ T8894] ? clear_bhb_loop+0x40/0x90 [ 319.491900][ T8894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.491924][ T8894] RIP: 0033:0x7f5d4f39de99 [ 319.491943][ T8894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.491966][ T8894] RSP: 002b:00007f5d50187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 319.491988][ T8894] RAX: ffffffffffffffda RBX: 00007f5d4f625fa0 RCX: 00007f5d4f39de99 [ 319.492004][ T8894] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 2000000000000021 [ 319.492019][ T8894] RBP: 00007f5d4f433eaf R08: 0000000000000000 R09: 0000000000000000 [ 319.492033][ T8894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.492046][ T8894] R13: 00007f5d4f626038 R14: 00007f5d4f625fa0 R15: 00007ffe243a5fa8 [ 319.492075][ T8894] [ 322.148205][ T8911] Process accounting resumed [ 322.861752][ T1122] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 910 with max blocks 114 with error 117 [ 322.927159][ T1122] EXT4-fs (sda1): This should not happen!! Data will be lost [ 322.927159][ T1122] [ 322.956211][ T8953] netlink: 796 bytes leftover after parsing attributes in process `syz.1.724'. [ 323.003681][ T8953] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 323.265537][ T1122] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 985 with max blocks 7 with error 117 [ 323.337780][ T1122] EXT4-fs (sda1): This should not happen!! Data will be lost [ 323.337780][ T1122] [ 323.873155][ T3320] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 960 with max blocks 25 with error 117 [ 323.924619][ T3320] EXT4-fs (sda1): This should not happen!! Data will be lost [ 323.924619][ T3320] [ 326.162626][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 960 with max blocks 1 with error 117 [ 326.236820][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 326.236820][ T12] [ 327.204340][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 970 with max blocks 54 with error 117 [ 327.278721][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 327.278721][ T12] [ 327.879344][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 970 with max blocks 38 with error 117 [ 327.954330][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 327.954330][ T12] [ 328.081363][ T9039] device-mapper: ioctl: Unable to rename non-existent device, to [ 328.127357][ T1122] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 925 with max blocks 45 with error 117 [ 328.182584][ T1122] EXT4-fs (sda1): This should not happen!! Data will be lost [ 328.182584][ T1122] [ 329.456864][ T9053] netlink: 206 bytes leftover after parsing attributes in process `syz.0.752'. [ 329.494867][ T1171] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 925 with max blocks 1 with error 117 [ 329.554263][ T1171] EXT4-fs (sda1): This should not happen!! Data will be lost [ 329.554263][ T1171] [ 329.642928][ T1171] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1017 with max blocks 7 with error 117 [ 329.746956][ T1171] EXT4-fs (sda1): This should not happen!! Data will be lost [ 329.746956][ T1171] [ 329.937850][ T29] audit: type=1800 audit(1784382308.813:12): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.755" name="lu_gp_id" dev="configfs" ino=30036 res=0 errno=0 [ 329.996921][ T9062] ALUA LU Group already has a valid ID, ignoring request [ 330.841277][ T9054] Process accounting resumed [ 331.088801][ T9086] netlink: 784 bytes leftover after parsing attributes in process `syz.1.760'. [ 331.145080][ T9086] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 331.388409][ T9094] ubi0: attaching mtd0 [ 331.436972][ T9094] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 331.475333][ T9094] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 331.504199][ T9094] eraseblock attaching information dump: [ 331.527281][ T9094] ec -1 [ 331.543045][ T9094] pnum 0 [ 331.554699][ T9094] lnum 0 [ 331.567670][ T9094] scrub 1 [ 331.580608][ T9094] sqnum 1 [ 331.594266][ T9094] Volume identifier header dump: [ 331.615307][ T9094] magic 55424921 [ 331.628509][ T9094] version 1 [ 331.642711][ T9094] vol_type 1 [ 331.655711][ T9094] copy_flag 0 [ 331.667623][ T9094] compat 5 [ 331.688851][ T9094] vol_id 2147479551 [ 331.706957][ T9094] lnum 0 [ 331.721803][ T9094] data_size 0 [ 331.734904][ T9094] used_ebs 0 [ 331.748002][ T9094] data_pad 0 [ 331.761832][ T9094] sqnum 1 [ 331.771305][ T9094] hdr_crc 65b3bd2d [ 331.785619][ T9094] Volume identifier header hexdump: [ 331.899968][ T9094] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 333.755017][ T9131] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 334.802934][ T9153] ubi1: attaching mtd0 [ 335.041699][ T57] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1017 with max blocks 7 with error 117 [ 335.105723][ T57] EXT4-fs (sda1): This should not happen!! Data will be lost [ 335.105723][ T57] [ 335.328036][ T57] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 942 with max blocks 75 with error 117 [ 335.412716][ T57] EXT4-fs (sda1): This should not happen!! Data will be lost [ 335.412716][ T57] [ 335.856851][ T1171] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 952 with max blocks 41 with error 117 [ 335.881389][ T9170] netlink: 720 bytes leftover after parsing attributes in process `syz.3.785'. [ 335.925055][ T9170] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 335.934167][ T1171] EXT4-fs (sda1): This should not happen!! Data will be lost [ 335.934167][ T1171] [ 339.222081][ T9230] netlink: 800 bytes leftover after parsing attributes in process `syz.2.802'. [ 339.280213][ T9230] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 339.376255][ T9236] netlink: 720 bytes leftover after parsing attributes in process `syz.1.804'. [ 339.410641][ T9236] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 339.644789][ T9244] netlink: 146 bytes leftover after parsing attributes in process `syz.3.806'. [ 340.779231][ T9256] netlink: 800 bytes leftover after parsing attributes in process `syz.0.807'. [ 340.858640][ T9256] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 341.490434][ T9277] FAULT_INJECTION: forcing a failure. [ 341.490434][ T9277] name failslab, interval 1, probability 0, space 0, times 0 [ 341.538814][ T9277] CPU: 0 UID: 0 PID: 9277 Comm: syz.2.814 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.538852][ T9277] Tainted: [L]=SOFTLOCKUP [ 341.538860][ T9277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.538873][ T9277] Call Trace: [ 341.538880][ T9277] [ 341.538889][ T9277] dump_stack_lvl+0x100/0x190 [ 341.538920][ T9277] should_fail_ex.cold+0x5/0xa [ 341.538947][ T9277] should_failslab+0xc2/0x120 [ 341.538980][ T9277] __kmalloc_noprof+0xfc/0x820 [ 341.539005][ T9277] ? __lock_acquire+0x49f/0x1a40 [ 341.539042][ T9277] ? sk_prot_alloc+0x10b/0x2a0 [ 341.539082][ T9277] sk_prot_alloc+0x10b/0x2a0 [ 341.539126][ T9277] sk_alloc+0x36/0xe80 [ 341.539155][ T9277] pptp_create+0x32/0x340 [ 341.539194][ T9277] pppox_create+0x15c/0x2c0 [ 341.539231][ T9277] __sock_create+0x339/0x860 [ 341.539273][ T9277] __sys_socket+0x14d/0x260 [ 341.539296][ T9277] ? __pfx___sys_socket+0x10/0x10 [ 341.539326][ T9277] __x64_sys_socket+0x72/0xb0 [ 341.539351][ T9277] ? lockdep_hardirqs_on+0x78/0x100 [ 341.539378][ T9277] do_syscall_64+0x115/0x840 [ 341.539401][ T9277] ? clear_bhb_loop+0x40/0x90 [ 341.539431][ T9277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.539455][ T9277] RIP: 0033:0x7f9ef739de99 [ 341.539474][ T9277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.539497][ T9277] RSP: 002b:00007f9ef8227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 341.539520][ T9277] RAX: ffffffffffffffda RBX: 00007f9ef7625fa0 RCX: 00007f9ef739de99 [ 341.539535][ T9277] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 0000000000000018 [ 341.539549][ T9277] RBP: 00007f9ef7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 341.539563][ T9277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.539577][ T9277] R13: 00007f9ef7626038 R14: 00007f9ef7625fa0 R15: 00007ffc673fea88 [ 341.539606][ T9277] [ 342.065397][ T9282] FAULT_INJECTION: forcing a failure. [ 342.065397][ T9282] name failslab, interval 1, probability 0, space 0, times 0 [ 342.107271][ T9282] CPU: 0 UID: 0 PID: 9282 Comm: syz.1.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.107309][ T9282] Tainted: [L]=SOFTLOCKUP [ 342.107318][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 342.107332][ T9282] Call Trace: [ 342.107340][ T9282] [ 342.107349][ T9282] dump_stack_lvl+0x100/0x190 [ 342.107380][ T9282] should_fail_ex.cold+0x5/0xa [ 342.107407][ T9282] should_failslab+0xc2/0x120 [ 342.107439][ T9282] kmem_cache_alloc_noprof+0x91/0x6a0 [ 342.107469][ T9282] ? sk_prot_alloc+0x60/0x2a0 [ 342.107510][ T9282] sk_prot_alloc+0x60/0x2a0 [ 342.107547][ T9282] sk_alloc+0x36/0xe80 [ 342.107575][ T9282] qrtr_create+0x84/0x1d0 [ 342.107603][ T9282] __sock_create+0x339/0x860 [ 342.107646][ T9282] __sys_socket+0x14d/0x260 [ 342.107669][ T9282] ? __pfx___sys_socket+0x10/0x10 [ 342.107699][ T9282] __x64_sys_socket+0x72/0xb0 [ 342.107720][ T9282] ? lockdep_hardirqs_on+0x78/0x100 [ 342.107745][ T9282] do_syscall_64+0x115/0x840 [ 342.107768][ T9282] ? clear_bhb_loop+0x40/0x90 [ 342.107797][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.107822][ T9282] RIP: 0033:0x7faa36f9de99 [ 342.107841][ T9282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.107863][ T9282] RSP: 002b:00007faa37efc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 342.107885][ T9282] RAX: ffffffffffffffda RBX: 00007faa37225fa0 RCX: 00007faa36f9de99 [ 342.107901][ T9282] RDX: 00000000fffffffe RSI: 0000000000000002 RDI: 000000000000002a [ 342.107914][ T9282] RBP: 00007faa37033eaf R08: 0000000000000000 R09: 0000000000000000 [ 342.107928][ T9282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.107942][ T9282] R13: 00007faa37226038 R14: 00007faa37225fa0 R15: 00007ffcafc43428 [ 342.107972][ T9282] [ 342.843386][ T1171] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 952 with max blocks 72 with error 117 [ 342.902217][ T1171] EXT4-fs (sda1): This should not happen!! Data will be lost [ 342.902217][ T1171] [ 343.087135][ T1171] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 917 with max blocks 35 with error 117 [ 343.161108][ T1171] EXT4-fs (sda1): This should not happen!! Data will be lost [ 343.161108][ T1171] [ 343.476670][ T9261] Process accounting resumed [ 343.569060][ T1171] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 990 with max blocks 34 with error 117 [ 343.670045][ T1171] EXT4-fs (sda1): This should not happen!! Data will be lost [ 343.670045][ T1171] [ 343.702125][ T9308] capability: warning: `syz.3.821' uses 32-bit capabilities (legacy support in use) [ 343.754548][ T9308] program syz.3.821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.545249][ T57] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 971 with max blocks 53 with error 117 [ 345.653780][ T57] EXT4-fs (sda1): This should not happen!! Data will be lost [ 345.653780][ T57] [ 346.292286][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 971 with max blocks 1 with error 117 [ 346.378030][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 346.378030][ T12] [ 346.917396][ T9343] Process accounting resumed [ 348.937557][ T9397] netlink: 800 bytes leftover after parsing attributes in process `syz.1.847'. [ 348.973903][ T9397] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 349.712214][ T12] EXT4-fs: 6 callbacks suppressed [ 349.712232][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 970 with max blocks 54 with error 117 [ 349.817739][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 349.817739][ T12] [ 349.978634][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 951 with max blocks 2 with error 117 [ 350.051711][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 350.051711][ T12] [ 350.210458][ T9413] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 350.752280][ T3320] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 992 with max blocks 32 with error 117 [ 350.810380][ T3320] EXT4-fs (sda1): This should not happen!! Data will be lost [ 350.810380][ T3320] [ 350.865668][ T3320] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 990 with max blocks 2 with error 117 [ 350.932262][ T3320] EXT4-fs (sda1): This should not happen!! Data will be lost [ 350.932262][ T3320] [ 351.242826][ T3320] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 990 with max blocks 1 with error 117 [ 351.283999][ T3320] EXT4-fs (sda1): This should not happen!! Data will be lost [ 351.283999][ T3320] [ 352.406334][ T9451] netlink: 146 bytes leftover after parsing attributes in process `syz.3.859'. [ 353.387499][ T9448] Process accounting paused [ 354.183876][ T9478] netlink: 764 bytes leftover after parsing attributes in process `syz.1.864'. [ 354.218930][ T9478] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 356.045277][ T9504] zero sized request [ 356.076943][ T9506] netlink: 146 bytes leftover after parsing attributes in process `syz.1.870'. [ 356.443521][ T3320] EXT4-fs: 6 callbacks suppressed [ 356.443538][ T3320] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 961 with max blocks 31 with error 117 [ 356.611665][ T3320] EXT4-fs (sda1): This should not happen!! Data will be lost [ 356.611665][ T3320] [ 356.761728][ T3320] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 991 with max blocks 33 with error 117 [ 356.856747][ T3320] EXT4-fs (sda1): This should not happen!! Data will be lost [ 356.856747][ T3320] [ 356.971098][ T9523] FAULT_INJECTION: forcing a failure. [ 356.971098][ T9523] name failslab, interval 1, probability 0, space 0, times 0 [ 357.023724][ T9523] CPU: 0 UID: 0 PID: 9523 Comm: syz.3.874 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.023762][ T9523] Tainted: [L]=SOFTLOCKUP [ 357.023770][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.023784][ T9523] Call Trace: [ 357.023792][ T9523] [ 357.023800][ T9523] dump_stack_lvl+0x100/0x190 [ 357.023832][ T9523] should_fail_ex.cold+0x5/0xa [ 357.023859][ T9523] should_failslab+0xc2/0x120 [ 357.023891][ T9523] __kmalloc_cache_noprof+0x91/0x6c0 [ 357.023936][ T9523] ? create_filter_start.constprop.0+0x1c4/0x310 [ 357.023976][ T9523] create_filter_start.constprop.0+0x1c4/0x310 [ 357.024008][ T9523] ? __mutex_lock+0x26d/0x1bd0 [ 357.024036][ T9523] create_filter+0xb5/0x210 [ 357.024069][ T9523] ? __pfx_create_filter+0x10/0x10 [ 357.024103][ T9523] ? find_held_lock+0x2b/0x80 [ 357.024134][ T9523] apply_event_filter+0x220/0x500 [ 357.024170][ T9523] ? __pfx_apply_event_filter+0x10/0x10 [ 357.024211][ T9523] event_filter_write+0x16d/0x290 [ 357.024236][ T9523] vfs_write+0x2aa/0x1050 [ 357.024273][ T9523] ? __pfx_event_filter_write+0x10/0x10 [ 357.024299][ T9523] ? __pfx_vfs_write+0x10/0x10 [ 357.024347][ T9523] ? __fget_files+0x215/0x3d0 [ 357.024390][ T9523] ? __fget_files+0x21f/0x3d0 [ 357.024440][ T9523] ksys_write+0x12a/0x250 [ 357.024477][ T9523] ? __pfx_ksys_write+0x10/0x10 [ 357.024523][ T9523] do_syscall_64+0x115/0x840 [ 357.024546][ T9523] ? clear_bhb_loop+0x40/0x90 [ 357.024576][ T9523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.024600][ T9523] RIP: 0033:0x7ff17a79de99 [ 357.024620][ T9523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.024642][ T9523] RSP: 002b:00007ff17b5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 357.024665][ T9523] RAX: ffffffffffffffda RBX: 00007ff17aa25fa0 RCX: 00007ff17a79de99 [ 357.024680][ T9523] RDX: 000000000000000d RSI: 000020000000ac80 RDI: 0000000000000003 [ 357.024695][ T9523] RBP: 00007ff17a833eaf R08: 0000000000000000 R09: 0000000000000000 [ 357.024709][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.024723][ T9523] R13: 00007ff17aa26038 R14: 00007ff17aa25fa0 R15: 00007ffd2f1f2ff8 [ 357.024753][ T9523] [ 358.714283][ T9550] netlink: 146 bytes leftover after parsing attributes in process `syz.2.884'. [ 358.895283][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 949 with max blocks 43 with error 117 [ 358.983912][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 358.983912][ T13] [ 359.124120][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 991 with max blocks 33 with error 117 [ 359.195701][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 359.195701][ T13] [ 359.264543][ T9556] zswap: compressor not available [ 359.803195][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 959 with max blocks 33 with error 117 [ 359.877597][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 359.877597][ T13] [ 360.347034][ T9582] netlink: 146 bytes leftover after parsing attributes in process `syz.2.890'. [ 360.853490][ T9591] random: crng reseeded on system resumption [ 361.322898][ T9596] netlink: 804 bytes leftover after parsing attributes in process `syz.3.895'. [ 361.371250][ T9596] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 361.525198][ T9568] Process accounting paused [ 362.128301][ T9611] netlink: 146 bytes leftover after parsing attributes in process `syz.1.899'. [ 363.796993][ T9636] netlink: 146 bytes leftover after parsing attributes in process `syz.1.905'. [ 366.249231][ T9691] FAULT_INJECTION: forcing a failure. [ 366.249231][ T9691] name failslab, interval 1, probability 0, space 0, times 0 [ 366.353660][ T9693] netlink: 146 bytes leftover after parsing attributes in process `syz.0.922'. [ 366.366166][ T9691] CPU: 0 UID: 0 PID: 9691 Comm: syz.1.921 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.366203][ T9691] Tainted: [L]=SOFTLOCKUP [ 366.366212][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 366.366229][ T9691] Call Trace: [ 366.366236][ T9691] [ 366.366244][ T9691] dump_stack_lvl+0x100/0x190 [ 366.366276][ T9691] should_fail_ex.cold+0x5/0xa [ 366.366304][ T9691] should_failslab+0xc2/0x120 [ 366.366342][ T9691] kmem_cache_alloc_noprof+0x91/0x6a0 [ 366.366372][ T9691] ? prepare_creds+0x2c/0x950 [ 366.366412][ T9691] prepare_creds+0x2c/0x950 [ 366.366449][ T9691] __sys_setfsgid+0xe3/0x3b0 [ 366.366476][ T9691] do_syscall_64+0x115/0x840 [ 366.366500][ T9691] ? clear_bhb_loop+0x40/0x90 [ 366.366529][ T9691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.366553][ T9691] RIP: 0033:0x7faa36f9de99 [ 366.366572][ T9691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.366595][ T9691] RSP: 002b:00007faa37efc028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 366.366621][ T9691] RAX: ffffffffffffffda RBX: 00007faa37225fa0 RCX: 00007faa36f9de99 [ 366.366636][ T9691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.366649][ T9691] RBP: 00007faa37033eaf R08: 0000000000000000 R09: 0000000000000000 [ 366.366663][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.366677][ T9691] R13: 00007faa37226038 R14: 00007faa37225fa0 R15: 00007ffcafc43428 [ 366.366707][ T9691] [ 367.712024][ T9715] netlink: 146 bytes leftover after parsing attributes in process `syz.2.926'. [ 367.776045][ T9717] FAULT_INJECTION: forcing a failure. [ 367.776045][ T9717] name failslab, interval 1, probability 0, space 0, times 0 [ 367.834671][ T9717] CPU: 0 UID: 0 PID: 9717 Comm: syz.3.928 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.834710][ T9717] Tainted: [L]=SOFTLOCKUP [ 367.834719][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.834732][ T9717] Call Trace: [ 367.834741][ T9717] [ 367.834750][ T9717] dump_stack_lvl+0x100/0x190 [ 367.834781][ T9717] should_fail_ex.cold+0x5/0xa [ 367.834811][ T9717] should_failslab+0xc2/0x120 [ 367.834843][ T9717] __kmalloc_noprof+0xfc/0x820 [ 367.834872][ T9717] ? show_slab_objects+0x2c/0x3e0 [ 367.834904][ T9717] ? __pfx_slab_attr_show+0x10/0x10 [ 367.834930][ T9717] show_slab_objects+0x2c/0x3e0 [ 367.834962][ T9717] ? __pfx_slab_attr_show+0x10/0x10 [ 367.834988][ T9717] sysfs_kf_seq_show+0x217/0x3f0 [ 367.835024][ T9717] seq_read_iter+0x32f/0x1270 [ 367.835058][ T9717] ? lock_acquire+0x1b9/0x370 [ 367.835105][ T9717] kernfs_fop_read_iter+0x46c/0x610 [ 367.835132][ T9717] ? rw_verify_area+0xce/0x6d0 [ 367.835164][ T9717] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 367.835206][ T9717] vfs_read+0x82e/0xb40 [ 367.835247][ T9717] ? __pfx_vfs_read+0x10/0x10 [ 367.835302][ T9717] ksys_read+0x12a/0x250 [ 367.835338][ T9717] ? __pfx_ksys_read+0x10/0x10 [ 367.835383][ T9717] do_syscall_64+0x115/0x840 [ 367.835407][ T9717] ? clear_bhb_loop+0x40/0x90 [ 367.835437][ T9717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.835461][ T9717] RIP: 0033:0x7ff17a79de99 [ 367.835481][ T9717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.835503][ T9717] RSP: 002b:00007ff17b5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.835525][ T9717] RAX: ffffffffffffffda RBX: 00007ff17aa25fa0 RCX: 00007ff17a79de99 [ 367.835540][ T9717] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 367.835554][ T9717] RBP: 00007ff17a833eaf R08: 0000000000000000 R09: 0000000000000000 [ 367.835569][ T9717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.835583][ T9717] R13: 00007ff17aa26038 R14: 00007ff17aa25fa0 R15: 00007ffd2f1f2ff8 [ 367.835619][ T9717] [ 368.134781][ T9722] netlink: 146 bytes leftover after parsing attributes in process `syz.0.930'. [ 368.348680][ T9727] FAULT_INJECTION: forcing a failure. [ 368.348680][ T9727] name failslab, interval 1, probability 0, space 0, times 0 [ 368.429622][ T9727] CPU: 0 UID: 0 PID: 9727 Comm: syz.3.931 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.429661][ T9727] Tainted: [L]=SOFTLOCKUP [ 368.429671][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.429686][ T9727] Call Trace: [ 368.429694][ T9727] [ 368.429702][ T9727] dump_stack_lvl+0x100/0x190 [ 368.429733][ T9727] should_fail_ex.cold+0x5/0xa [ 368.429760][ T9727] should_failslab+0xc2/0x120 [ 368.429792][ T9727] kmem_cache_alloc_noprof+0x91/0x6a0 [ 368.429818][ T9727] ? __pfx___might_resched+0x10/0x10 [ 368.429855][ T9727] ? __ksm_enter+0x3c/0x630 [ 368.429884][ T9727] __ksm_enter+0x3c/0x630 [ 368.429913][ T9727] ksm_enable_merge_any+0xbf/0x120 [ 368.429947][ T9727] __do_sys_prctl+0x1086/0x2270 [ 368.429983][ T9727] ? __pfx___do_sys_prctl+0x10/0x10 [ 368.430025][ T9727] do_syscall_64+0x115/0x840 [ 368.430049][ T9727] ? clear_bhb_loop+0x40/0x90 [ 368.430078][ T9727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.430102][ T9727] RIP: 0033:0x7ff17a79de99 [ 368.430121][ T9727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.430144][ T9727] RSP: 002b:00007ff17b5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 368.430172][ T9727] RAX: ffffffffffffffda RBX: 00007ff17aa25fa0 RCX: 00007ff17a79de99 [ 368.430187][ T9727] RDX: 0000000000000000 RSI: 0000000000000017 RDI: 0000000000000043 [ 368.430202][ T9727] RBP: 00007ff17a833eaf R08: 0000000000000000 R09: 0000000000000000 [ 368.430216][ T9727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.430230][ T9727] R13: 00007ff17aa26038 R14: 00007ff17aa25fa0 R15: 00007ffd2f1f2ff8 [ 368.430261][ T9727] [ 372.536367][ T13] EXT4-fs: 10 callbacks suppressed [ 372.536387][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 955 with max blocks 69 with error 117 [ 372.677321][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 372.677321][ T13] [ 372.943608][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1015 with max blocks 1 with error 117 [ 373.027751][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 373.027751][ T13] [ 373.222683][ T9815] netlink: 720 bytes leftover after parsing attributes in process `syz.0.958'. [ 373.276645][ T9815] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 373.627532][ T9171] Process accounting paused [ 374.526171][ T1122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.780380][ T9832] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 374.864387][ T9832] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 374.900098][ T1122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.922887][ T9832] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 375.008611][ T9839] netlink: 146 bytes leftover after parsing attributes in process `syz.0.967'. [ 375.302971][ T1122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.563410][ T9847] futex_wake_op: syz.2.968 tries to shift op by -2048; fix this program [ 375.671882][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.687167][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.695358][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.704606][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.715350][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.724533][ T9844] 0x000000000001-0x000000020000 : "" [ 375.764145][ T1122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.915494][ T9844] ftl_cs: FTL header corrupt! [ 376.701336][ T1122] bridge_slave_1: left allmulticast mode [ 376.743167][ T1122] bridge_slave_1: left promiscuous mode [ 376.790976][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.935576][ T1122] bridge_slave_0: left allmulticast mode [ 376.967011][ T9863] Process accounting paused [ 376.985166][ T1122] bridge_slave_0: left promiscuous mode [ 377.020984][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.516674][ T9880] FAULT_INJECTION: forcing a failure. [ 377.516674][ T9880] name failslab, interval 1, probability 0, space 0, times 0 [ 377.598733][ T9880] CPU: 0 UID: 0 PID: 9880 Comm: syz.2.973 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.598770][ T9880] Tainted: [L]=SOFTLOCKUP [ 377.598785][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 377.598800][ T9880] Call Trace: [ 377.598807][ T9880] [ 377.598816][ T9880] dump_stack_lvl+0x100/0x190 [ 377.598848][ T9880] should_fail_ex.cold+0x5/0xa [ 377.598874][ T9880] should_failslab+0xc2/0x120 [ 377.598905][ T9880] __kmalloc_cache_noprof+0x91/0x6c0 [ 377.598944][ T9880] ? xfd_validate_state+0x129/0x190 [ 377.598969][ T9880] ? __do_sys_memfd_create+0x170/0x3d0 [ 377.599006][ T9880] __do_sys_memfd_create+0x170/0x3d0 [ 377.599040][ T9880] do_syscall_64+0x115/0x840 [ 377.599064][ T9880] ? clear_bhb_loop+0x40/0x90 [ 377.599100][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.599125][ T9880] RIP: 0033:0x7f9ef739de99 [ 377.599144][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.599166][ T9880] RSP: 002b:00007f9ef8227028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 377.599189][ T9880] RAX: ffffffffffffffda RBX: 00007f9ef7625fa0 RCX: 00007f9ef739de99 [ 377.599204][ T9880] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 377.599217][ T9880] RBP: 00007f9ef7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 377.599232][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.599245][ T9880] R13: 00007f9ef7626038 R14: 00007f9ef7625fa0 R15: 00007ffc673fea88 [ 377.599274][ T9880] [ 377.922937][ T9885] netlink: 764 bytes leftover after parsing attributes in process `syz.0.974'. [ 377.932067][ T9885] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 377.956230][ T5631] Bluetooth: hci3: command tx timeout [ 378.453675][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.521223][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.554844][ T1122] bond0 (unregistering): Released all slaves [ 378.692254][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.698939][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.185259][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 379.334438][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1015 with max blocks 9 with error 117 [ 379.421827][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 379.421827][ T12] [ 379.708056][ T35] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 963 with max blocks 52 with error 117 [ 379.759296][ T35] EXT4-fs (sda1): This should not happen!! Data will be lost [ 379.759296][ T35] [ 379.969939][ T5631] Bluetooth: hci3: command tx timeout [ 381.228218][ T1122] hsr_slave_0: left promiscuous mode [ 381.258799][ T1122] hsr_slave_1: left promiscuous mode [ 381.352415][ T1122] veth1_macvtap: left promiscuous mode [ 381.394725][ T1122] veth0_macvtap: left promiscuous mode [ 381.435481][ T1122] veth1_vlan: left promiscuous mode [ 381.475403][ T1122] veth0_vlan: left promiscuous mode [ 382.050483][ T5631] Bluetooth: hci3: command tx timeout [ 382.415359][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 382.432617][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 382.589078][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 383.363706][ T9959] FAULT_INJECTION: forcing a failure. [ 383.363706][ T9959] name failslab, interval 1, probability 0, space 0, times 0 [ 383.446654][ T9959] CPU: 0 UID: 0 PID: 9959 Comm: syz.2.987 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.446691][ T9959] Tainted: [L]=SOFTLOCKUP [ 383.446700][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.446713][ T9959] Call Trace: [ 383.446721][ T9959] [ 383.446729][ T9959] dump_stack_lvl+0x100/0x190 [ 383.446761][ T9959] should_fail_ex.cold+0x5/0xa [ 383.446788][ T9959] should_failslab+0xc2/0x120 [ 383.446820][ T9959] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 383.446853][ T9959] ? kstrdup_const+0x63/0x80 [ 383.446884][ T9959] kstrdup+0x51/0xe0 [ 383.446910][ T9959] kstrdup_const+0x63/0x80 [ 383.446939][ T9959] __kmem_cache_create_args+0x118/0x420 [ 383.446982][ T9959] mon_text_open+0x333/0x510 [ 383.447017][ T9959] ? __pfx_mon_text_open+0x10/0x10 [ 383.447058][ T9959] ? __pfx_mon_text_ctor+0x10/0x10 [ 383.447093][ T9959] ? __pfx_apparmor_file_open+0x10/0x10 [ 383.447117][ T9959] ? lockdown_is_locked_down+0x3d/0x140 [ 383.447157][ T9959] ? bpf_lsm_locked_down+0x9/0x10 [ 383.447185][ T9959] ? __pfx_mon_text_open+0x10/0x10 [ 383.447218][ T9959] full_proxy_open_regular+0x1b6/0x370 [ 383.447249][ T9959] do_dentry_open+0x6ab/0x14d0 [ 383.447287][ T9959] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 383.447321][ T9959] vfs_open+0x82/0x3f0 [ 383.447352][ T9959] path_openat+0x2873/0x4280 [ 383.447387][ T9959] ? __pfx_path_openat+0x10/0x10 [ 383.447417][ T9959] do_file_open+0x20e/0x430 [ 383.447441][ T9959] ? __pfx_do_file_open+0x10/0x10 [ 383.447484][ T9959] ? alloc_fd+0x471/0x7a0 [ 383.447531][ T9959] ? do_getname+0x191/0x390 [ 383.447562][ T9959] do_sys_openat2+0x10f/0x1e0 [ 383.447592][ T9959] ? __pfx_do_sys_openat2+0x10/0x10 [ 383.447624][ T9959] ? __fget_files+0x21f/0x3d0 [ 383.447666][ T9959] __x64_sys_openat+0x12d/0x210 [ 383.447697][ T9959] ? __pfx___x64_sys_openat+0x10/0x10 [ 383.447739][ T9959] do_syscall_64+0x115/0x840 [ 383.447763][ T9959] ? clear_bhb_loop+0x40/0x90 [ 383.447792][ T9959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.447816][ T9959] RIP: 0033:0x7f9ef739de99 [ 383.447836][ T9959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.447858][ T9959] RSP: 002b:00007f9ef8227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.447880][ T9959] RAX: ffffffffffffffda RBX: 00007f9ef7625fa0 RCX: 00007f9ef739de99 [ 383.447896][ T9959] RDX: 0000000000022202 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 383.447911][ T9959] RBP: 00007f9ef7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 383.447925][ T9959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.447939][ T9959] R13: 00007f9ef7626038 R14: 00007f9ef7625fa0 R15: 00007ffc673fea88 [ 383.447969][ T9959] [ 383.779672][ T9959] __kmem_cache_create_args(mon_text_ffff88807b9ed400) failed with error -12 [ 383.790190][ T9959] CPU: 0 UID: 0 PID: 9959 Comm: syz.2.987 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.790228][ T9959] Tainted: [L]=SOFTLOCKUP [ 383.790236][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.790251][ T9959] Call Trace: [ 383.790259][ T9959] [ 383.790268][ T9959] dump_stack_lvl+0x100/0x190 [ 383.790299][ T9959] __kmem_cache_create_args.cold+0x33/0x6e [ 383.790336][ T9959] mon_text_open+0x333/0x510 [ 383.790373][ T9959] ? __pfx_mon_text_open+0x10/0x10 [ 383.790410][ T9959] ? __pfx_mon_text_ctor+0x10/0x10 [ 383.790445][ T9959] ? __pfx_apparmor_file_open+0x10/0x10 [ 383.790469][ T9959] ? lockdown_is_locked_down+0x3d/0x140 [ 383.790514][ T9959] ? bpf_lsm_locked_down+0x9/0x10 [ 383.790543][ T9959] ? __pfx_mon_text_open+0x10/0x10 [ 383.790576][ T9959] full_proxy_open_regular+0x1b6/0x370 [ 383.790607][ T9959] do_dentry_open+0x6ab/0x14d0 [ 383.790646][ T9959] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 383.790682][ T9959] vfs_open+0x82/0x3f0 [ 383.790714][ T9959] path_openat+0x2873/0x4280 [ 383.790748][ T9959] ? __pfx_path_openat+0x10/0x10 [ 383.790779][ T9959] do_file_open+0x20e/0x430 [ 383.790803][ T9959] ? __pfx_do_file_open+0x10/0x10 [ 383.790847][ T9959] ? alloc_fd+0x471/0x7a0 [ 383.790887][ T9959] ? do_getname+0x191/0x390 [ 383.790918][ T9959] do_sys_openat2+0x10f/0x1e0 [ 383.790948][ T9959] ? __pfx_do_sys_openat2+0x10/0x10 [ 383.790980][ T9959] ? __fget_files+0x21f/0x3d0 [ 383.791023][ T9959] __x64_sys_openat+0x12d/0x210 [ 383.791054][ T9959] ? __pfx___x64_sys_openat+0x10/0x10 [ 383.791096][ T9959] do_syscall_64+0x115/0x840 [ 383.791121][ T9959] ? clear_bhb_loop+0x40/0x90 [ 383.791150][ T9959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.791176][ T9959] RIP: 0033:0x7f9ef739de99 [ 383.791195][ T9959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.791224][ T9959] RSP: 002b:00007f9ef8227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.791247][ T9959] RAX: ffffffffffffffda RBX: 00007f9ef7625fa0 RCX: 00007f9ef739de99 [ 383.791264][ T9959] RDX: 0000000000022202 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 383.791279][ T9959] RBP: 00007f9ef7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 383.791293][ T9959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.791307][ T9959] R13: 00007f9ef7626038 R14: 00007f9ef7625fa0 R15: 00007ffc673fea88 [ 383.791337][ T9959] [ 384.067330][ T9962] Process accounting resumed [ 384.251765][ T9976] program syz.1.990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.261397][ T9976] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 384.340148][ T5631] Bluetooth: hci3: command tx timeout [ 384.512082][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.519282][ T9848] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.546627][ T9981] FAULT_INJECTION: forcing a failure. [ 384.546627][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 384.624722][ T9848] bridge_slave_0: entered allmulticast mode [ 384.636059][ T9981] CPU: 0 UID: 0 PID: 9981 Comm: syz.1.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.636109][ T9981] Tainted: [L]=SOFTLOCKUP [ 384.636143][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 384.636169][ T9981] Call Trace: [ 384.636178][ T9981] [ 384.636187][ T9981] dump_stack_lvl+0x100/0x190 [ 384.636218][ T9981] should_fail_ex.cold+0x5/0xa [ 384.636246][ T9981] should_failslab+0xc2/0x120 [ 384.636278][ T9981] __kmalloc_cache_noprof+0x91/0x6c0 [ 384.636321][ T9981] ? down_write_killable+0x152/0x250 [ 384.636350][ T9981] ? alloc_ldt_struct+0x5d/0x1b0 [ 384.636394][ T9981] alloc_ldt_struct+0x5d/0x1b0 [ 384.636425][ T9981] write_ldt+0x62b/0xd40 [ 384.636473][ T9981] ? __pfx_write_ldt+0x10/0x10 [ 384.636506][ T9981] ? xfd_validate_state+0x129/0x190 [ 384.636540][ T9981] __x64_sys_modify_ldt+0xb1/0x170 [ 384.636573][ T9981] do_syscall_64+0x115/0x840 [ 384.636597][ T9981] ? clear_bhb_loop+0x40/0x90 [ 384.636626][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.636651][ T9981] RIP: 0033:0x7faa36f9de99 [ 384.636669][ T9981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.636693][ T9981] RSP: 002b:00007faa37efc028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 384.636716][ T9981] RAX: ffffffffffffffda RBX: 00007faa37225fa0 RCX: 00007faa36f9de99 [ 384.636732][ T9981] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 384.636746][ T9981] RBP: 00007faa37033eaf R08: 0000000000000000 R09: 0000000000000000 [ 384.636761][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.636775][ T9981] R13: 00007faa37226038 R14: 00007faa37225fa0 R15: 00007ffcafc43428 [ 384.636805][ T9981] [ 384.842026][ T9848] bridge_slave_0: entered promiscuous mode [ 384.850133][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.857327][ T9848] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.865900][ T9848] bridge_slave_1: entered allmulticast mode [ 384.873328][ T9848] bridge_slave_1: entered promiscuous mode [ 384.904222][ T9848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.916256][ T9848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.947126][ T9848] team0: Port device team_slave_0 added [ 384.955145][ T9848] team0: Port device team_slave_1 added [ 384.982584][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.989676][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.017825][ T9848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.050636][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.084355][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.228508][ T9848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.432633][ T9983] zswap: compressor not available [ 385.643496][ T9848] hsr_slave_0: entered promiscuous mode [ 385.668634][ T9848] hsr_slave_1: entered promiscuous mode [ 385.721860][ T9848] debugfs: 'hsr0' already exists in 'hsr' [ 385.754296][ T9848] Cannot create hsr debugfs directory [ 386.438535][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 387.134451][T10026] FAULT_INJECTION: forcing a failure. [ 387.134451][T10026] name failslab, interval 1, probability 0, space 0, times 0 [ 387.187386][T10026] CPU: 0 UID: 0 PID: 10026 Comm: syz.1.1002 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.187425][T10026] Tainted: [L]=SOFTLOCKUP [ 387.187433][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 387.187448][T10026] Call Trace: [ 387.187455][T10026] [ 387.187463][T10026] dump_stack_lvl+0x100/0x190 [ 387.187495][T10026] should_fail_ex.cold+0x5/0xa [ 387.187522][T10026] should_failslab+0xc2/0x120 [ 387.187559][T10026] kmem_cache_alloc_noprof+0x91/0x6a0 [ 387.187587][T10026] ? d_instantiate+0x8a/0xb0 [ 387.187612][T10026] ? d_instantiate+0x8a/0xb0 [ 387.187636][T10026] ? alloc_empty_file+0x5b/0x1c0 [ 387.187670][T10026] alloc_empty_file+0x5b/0x1c0 [ 387.187700][T10026] alloc_file_pseudo+0x183/0x290 [ 387.187730][T10026] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 387.187768][T10026] __shmem_file_setup+0x205/0x460 [ 387.187804][T10026] ? __pfx___shmem_file_setup+0x10/0x10 [ 387.187848][T10026] ? vm_area_alloc+0x1f/0x160 [ 387.187889][T10026] shmem_zero_setup+0x96/0x1b0 [ 387.187917][T10026] __mmap_region+0x24ef/0x2db0 [ 387.187945][T10026] ? __pfx___mmap_region+0x10/0x10 [ 387.187970][T10026] ? __lock_acquire+0x49f/0x1a40 [ 387.188023][T10026] ? __lock_acquire+0x49f/0x1a40 [ 387.188068][T10026] ? do_raw_spin_unlock+0x145/0x1e0 [ 387.188094][T10026] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 387.188158][T10026] ? lockdep_hardirqs_on+0x78/0x100 [ 387.188182][T10026] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 387.188249][T10026] ? preempt_schedule_thunk+0x16/0x40 [ 387.188294][T10026] mmap_region+0x35d/0x620 [ 387.188319][T10026] ? rcu_is_watching+0x12/0xc0 [ 387.188345][T10026] ? __pfx_mmap_region+0x10/0x10 [ 387.188374][T10026] ? cap_mmap_addr+0x4b/0x120 [ 387.188395][T10026] ? bpf_lsm_mmap_addr+0x9/0x30 [ 387.188431][T10026] ? security_mmap_addr+0x71/0x1e0 [ 387.188462][T10026] ? __get_unmapped_area+0x255/0x3e0 [ 387.188501][T10026] do_mmap+0xc63/0x12f0 [ 387.188538][T10026] ? __pfx_do_mmap+0x10/0x10 [ 387.188570][T10026] ? __pfx_down_write_killable+0x10/0x10 [ 387.188604][T10026] vm_mmap_pgoff+0x29e/0x470 [ 387.188641][T10026] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 387.188677][T10026] ? __pfx_do_futex+0x10/0x10 [ 387.188706][T10026] ksys_mmap_pgoff+0xe4/0x610 [ 387.188738][T10026] ? __x64_sys_futex+0x358/0x4d0 [ 387.188763][T10026] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 387.188794][T10026] ? xfd_validate_state+0x129/0x190 [ 387.188825][T10026] __x64_sys_mmap+0x125/0x190 [ 387.188855][T10026] do_syscall_64+0x115/0x840 [ 387.188879][T10026] ? clear_bhb_loop+0x40/0x90 [ 387.188909][T10026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.188933][T10026] RIP: 0033:0x7faa36f9de99 [ 387.188953][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.188977][T10026] RSP: 002b:00007faa37efc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 387.189000][T10026] RAX: ffffffffffffffda RBX: 00007faa37225fa0 RCX: 00007faa36f9de99 [ 387.189015][T10026] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 387.189030][T10026] RBP: 00007faa37033eaf R08: fffffffffffffffa R09: 0000000000008000 [ 387.189045][T10026] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 387.189066][T10026] R13: 00007faa37226038 R14: 00007faa37225fa0 R15: 00007ffcafc43428 [ 387.189096][T10026] [ 387.657072][T10033] netlink: 804 bytes leftover after parsing attributes in process `syz.1.1003'. [ 387.666297][T10033] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 390.586461][T10076] misc userio: Invalid payload size [ 391.554337][T10098] FAULT_INJECTION: forcing a failure. [ 391.554337][T10098] name failslab, interval 1, probability 0, space 0, times 0 [ 391.595899][T10098] CPU: 0 UID: 0 PID: 10098 Comm: syz.2.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.595938][T10098] Tainted: [L]=SOFTLOCKUP [ 391.595946][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.595960][T10098] Call Trace: [ 391.595967][T10098] [ 391.595975][T10098] dump_stack_lvl+0x100/0x190 [ 391.596006][T10098] should_fail_ex.cold+0x5/0xa [ 391.596033][T10098] should_failslab+0xc2/0x120 [ 391.596065][T10098] kmem_cache_alloc_noprof+0x91/0x6a0 [ 391.596094][T10098] ? sk_prot_alloc+0x60/0x2a0 [ 391.596135][T10098] sk_prot_alloc+0x60/0x2a0 [ 391.596172][T10098] sk_alloc+0x36/0xe80 [ 391.596200][T10098] pn_socket_create+0x22d/0x560 [ 391.596235][T10098] __sock_create+0x339/0x860 [ 391.596278][T10098] __sys_socket+0x14d/0x260 [ 391.596302][T10098] ? __pfx___sys_socket+0x10/0x10 [ 391.596333][T10098] __x64_sys_socket+0x72/0xb0 [ 391.596354][T10098] ? lockdep_hardirqs_on+0x78/0x100 [ 391.596379][T10098] do_syscall_64+0x115/0x840 [ 391.596403][T10098] ? clear_bhb_loop+0x40/0x90 [ 391.596433][T10098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.596457][T10098] RIP: 0033:0x7f9ef739de99 [ 391.596476][T10098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.596500][T10098] RSP: 002b:00007f9ef8227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 391.596523][T10098] RAX: ffffffffffffffda RBX: 00007f9ef7625fa0 RCX: 00007f9ef739de99 [ 391.596539][T10098] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000023 [ 391.596553][T10098] RBP: 00007f9ef7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 391.596568][T10098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.596582][T10098] R13: 00007f9ef7626038 R14: 00007f9ef7625fa0 R15: 00007ffc673fea88 [ 391.596612][T10098] [ 391.846346][T10088] Process accounting resumed [ 392.884834][T10126] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1018'. [ 393.844285][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 927 with max blocks 97 with error 117 [ 393.902874][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 393.902874][ T12] [ 395.263320][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 395.367075][T10162] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1021'. [ 401.862877][T10209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 401.875491][T10209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 401.884588][T10209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 401.894293][T10209] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 401.903982][T10209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.492783][T10208] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.500110][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.507348][T10208] bridge_slave_0: entered allmulticast mode [ 402.516714][T10208] bridge_slave_0: entered promiscuous mode [ 402.525169][T10208] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.532591][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.540334][T10208] bridge_slave_1: entered allmulticast mode [ 402.548038][T10208] bridge_slave_1: entered promiscuous mode [ 402.588050][T10208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.601048][T10208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.635758][T10208] team0: Port device team_slave_0 added [ 402.645079][T10208] team0: Port device team_slave_1 added [ 402.681007][T10208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.688012][T10208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.714746][T10208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.727667][T10208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.736294][T10208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.762885][T10208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.819166][T10208] hsr_slave_0: entered promiscuous mode [ 402.825942][T10208] hsr_slave_1: entered promiscuous mode [ 402.832725][T10208] debugfs: 'hsr0' already exists in 'hsr' [ 402.838501][T10208] Cannot create hsr debugfs directory [ 403.969711][T10209] Bluetooth: hci4: command tx timeout [ 406.049515][T10209] Bluetooth: hci4: command tx timeout [ 408.129486][T10209] Bluetooth: hci4: command tx timeout [ 409.891820][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 927 with max blocks 1 with error 117 [ 409.904523][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 409.904523][ T12] [ 410.209615][T10209] Bluetooth: hci4: command tx timeout [ 410.708332][ T5634] Process accounting resumed [ 410.843251][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.854287][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 410.862810][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 410.879412][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 410.889507][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.501314][T10227] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.508638][T10227] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.516449][T10227] bridge_slave_0: entered allmulticast mode [ 411.524434][T10227] bridge_slave_0: entered promiscuous mode [ 411.534206][T10227] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.541570][T10227] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.549086][T10227] bridge_slave_1: entered allmulticast mode [ 411.559816][T10227] bridge_slave_1: entered promiscuous mode [ 411.596831][T10227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.609986][T10227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.645397][T10227] team0: Port device team_slave_0 added [ 411.660325][T10227] team0: Port device team_slave_1 added [ 411.693155][T10227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.701445][T10227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.729050][T10227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.743512][T10227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.751587][T10227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.778147][T10227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.834112][T10227] hsr_slave_0: entered promiscuous mode [ 411.841603][T10227] hsr_slave_1: entered promiscuous mode [ 411.847956][T10227] debugfs: 'hsr0' already exists in 'hsr' [ 411.854311][T10227] Cannot create hsr debugfs directory [ 412.929515][T10209] Bluetooth: hci5: command tx timeout [ 413.926487][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 413.937802][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 413.952875][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 413.964041][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.971923][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 414.396904][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.493334][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.635165][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.692812][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.010165][T10209] Bluetooth: hci5: command tx timeout [ 415.115515][ T12] netdevsim netdevsim1335 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.426883][T10248] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.450455][T10248] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.457821][T10248] bridge_slave_0: entered allmulticast mode [ 415.474361][T10248] bridge_slave_0: entered promiscuous mode [ 415.598208][T10248] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.617865][T10248] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.630337][T10248] bridge_slave_1: entered allmulticast mode [ 415.649106][T10248] bridge_slave_1: entered promiscuous mode [ 415.707718][ T12] bridge_slave_1: left allmulticast mode [ 415.730476][ T12] bridge_slave_1: left promiscuous mode [ 415.738979][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.761325][ T12] bridge_slave_0: left allmulticast mode [ 415.767119][ T12] bridge_slave_0: left promiscuous mode [ 415.785655][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.053300][T10209] Bluetooth: hci6: command tx timeout [ 416.088346][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.104958][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.115546][ T12] bond0 (unregistering): Released all slaves [ 416.138236][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 416.178138][T10248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.213879][T10248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.364891][T10248] team0: Port device team_slave_0 added [ 416.388721][T10248] team0: Port device team_slave_1 added [ 416.514254][T10248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.540754][T10248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.584707][T10248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.636783][T10248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.654643][T10248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.715507][T10248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.748332][ T12] hsr_slave_0: left promiscuous mode [ 416.770176][ T12] hsr_slave_1: left promiscuous mode [ 416.821568][ T12] veth1_macvtap: left promiscuous mode [ 416.836616][ T12] veth0_macvtap: left promiscuous mode [ 416.857271][ T12] veth1_vlan: left promiscuous mode [ 416.872732][ T12] veth0_vlan: left promiscuous mode [ 417.091526][T10209] Bluetooth: hci5: command tx timeout [ 417.409185][ T12] team0 (unregistering): Port device team_slave_1 removed [ 417.431915][ T12] team0 (unregistering): Port device team_slave_0 removed [ 417.576170][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 417.683369][T10248] hsr_slave_0: entered promiscuous mode [ 417.700189][T10248] hsr_slave_1: entered promiscuous mode [ 417.706606][T10248] debugfs: 'hsr0' already exists in 'hsr' [ 417.714901][T10248] Cannot create hsr debugfs directory [ 418.129692][T10209] Bluetooth: hci6: command tx timeout [ 418.407583][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 418.879159][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 419.171621][T10209] Bluetooth: hci5: command tx timeout [ 419.364219][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 420.209594][T10209] Bluetooth: hci6: command tx timeout [ 422.289554][T10209] Bluetooth: hci6: command tx timeout [ 435.315490][ T5631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 435.331027][ T5631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 435.349629][ T5631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 435.357690][ T5631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 435.367126][ T5631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 435.980869][T10421] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.988115][T10421] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.996013][T10421] bridge_slave_0: entered allmulticast mode [ 436.006787][T10421] bridge_slave_0: entered promiscuous mode [ 436.015340][T10421] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.022684][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.030495][T10421] bridge_slave_1: entered allmulticast mode [ 436.037965][T10421] bridge_slave_1: entered promiscuous mode [ 436.075729][T10421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.090260][T10421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.130202][T10421] team0: Port device team_slave_0 added [ 436.138472][T10421] team0: Port device team_slave_1 added [ 436.170765][T10421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.177846][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.205626][T10421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.223986][T10421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.231218][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.257823][T10421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.312549][T10421] hsr_slave_0: entered promiscuous mode [ 436.319147][T10421] hsr_slave_1: entered promiscuous mode [ 436.326407][T10421] debugfs: 'hsr0' already exists in 'hsr' [ 436.335211][T10421] Cannot create hsr debugfs directory [ 437.409697][T10209] Bluetooth: hci7: command tx timeout [ 439.489879][T10209] Bluetooth: hci7: command tx timeout [ 440.132091][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.138694][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.569579][T10209] Bluetooth: hci7: command tx timeout [ 443.649594][T10209] Bluetooth: hci7: command tx timeout [ 461.844001][ T5631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 461.862926][ T5631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 461.873881][ T5631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 461.885594][ T5631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 461.895032][ T5631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 462.511536][T10447] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.518762][T10447] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.526667][T10447] bridge_slave_0: entered allmulticast mode [ 462.537482][T10447] bridge_slave_0: entered promiscuous mode [ 462.545997][T10447] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.553311][T10447] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.561905][T10447] bridge_slave_1: entered allmulticast mode [ 462.569954][T10447] bridge_slave_1: entered promiscuous mode [ 462.608843][T10447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.625416][T10447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.663028][T10447] team0: Port device team_slave_0 added [ 462.672898][T10447] team0: Port device team_slave_1 added [ 462.706294][T10447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.713454][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.740672][T10447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.755184][T10447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.762610][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.795968][T10447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.846250][T10447] hsr_slave_0: entered promiscuous mode [ 462.854465][T10447] hsr_slave_1: entered promiscuous mode [ 462.862899][T10447] debugfs: 'hsr0' already exists in 'hsr' [ 462.868694][T10447] Cannot create hsr debugfs directory [ 463.969646][ T5631] Bluetooth: hci8: command tx timeout [ 466.049656][ T5631] Bluetooth: hci8: command tx timeout [ 468.129683][ T5631] Bluetooth: hci8: command tx timeout [ 470.209505][ T5631] Bluetooth: hci8: command tx timeout [ 470.862194][T10209] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 470.876553][T10209] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 470.886197][T10209] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 470.898848][T10209] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 470.906479][T10209] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 471.547965][T10468] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.557127][T10468] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.565009][T10468] bridge_slave_0: entered allmulticast mode [ 471.576339][T10468] bridge_slave_0: entered promiscuous mode [ 471.585161][T10468] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.595166][T10468] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.602929][T10468] bridge_slave_1: entered allmulticast mode [ 471.610976][T10468] bridge_slave_1: entered promiscuous mode [ 471.645769][T10468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.658838][T10468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.697895][T10468] team0: Port device team_slave_0 added [ 471.707376][T10468] team0: Port device team_slave_1 added [ 471.740797][T10468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.747818][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.775460][T10468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.789080][T10468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.797760][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.825443][T10468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.877440][T10468] hsr_slave_0: entered promiscuous mode [ 471.885137][T10468] hsr_slave_1: entered promiscuous mode [ 471.895044][T10468] debugfs: 'hsr0' already exists in 'hsr' [ 471.902384][T10468] Cannot create hsr debugfs directory [ 473.009672][T10209] Bluetooth: hci9: command tx timeout [ 473.877796][ T5631] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 473.893650][ T5631] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 473.903084][ T5631] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 473.914585][ T5631] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 473.922321][ T5631] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 474.551306][T10489] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.558611][T10489] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.567651][T10489] bridge_slave_0: entered allmulticast mode [ 474.577437][T10489] bridge_slave_0: entered promiscuous mode [ 474.588561][T10489] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.595903][T10489] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.603875][T10489] bridge_slave_1: entered allmulticast mode [ 474.611907][T10489] bridge_slave_1: entered promiscuous mode [ 474.649214][T10489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.662436][T10489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.700563][T10489] team0: Port device team_slave_0 added [ 474.708933][T10489] team0: Port device team_slave_1 added [ 474.738983][T10489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.746967][T10489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.776183][T10489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.789097][T10489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.797907][T10489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.824406][T10489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.875652][T10489] hsr_slave_0: entered promiscuous mode [ 474.883470][T10489] hsr_slave_1: entered promiscuous mode [ 474.890373][T10489] debugfs: 'hsr0' already exists in 'hsr' [ 474.896159][T10489] Cannot create hsr debugfs directory [ 475.089658][ T5631] Bluetooth: hci9: command tx timeout [ 475.970174][T10209] Bluetooth: hci10: command tx timeout [ 477.169647][T10209] Bluetooth: hci9: command tx timeout [ 478.049601][T10209] Bluetooth: hci10: command tx timeout [ 479.249785][T10209] Bluetooth: hci9: command tx timeout [ 480.129634][T10209] Bluetooth: hci10: command tx timeout [ 482.209593][T10209] Bluetooth: hci10: command tx timeout [ 495.794141][ T5631] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 495.805196][ T5631] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 495.819823][ T5631] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 495.834059][ T5631] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 495.842738][ T5631] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 496.496920][T10507] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.504450][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.512240][T10507] bridge_slave_0: entered allmulticast mode [ 496.520165][T10507] bridge_slave_0: entered promiscuous mode [ 496.530998][T10507] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.538189][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.545997][T10507] bridge_slave_1: entered allmulticast mode [ 496.554845][T10507] bridge_slave_1: entered promiscuous mode [ 496.595255][T10507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.611674][T10507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.646269][T10507] team0: Port device team_slave_0 added [ 496.654674][T10507] team0: Port device team_slave_1 added [ 496.687668][T10507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.697974][T10507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.724642][T10507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.738722][T10507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.746233][T10507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.776082][T10507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.828261][T10507] hsr_slave_0: entered promiscuous mode [ 496.835268][T10507] hsr_slave_1: entered promiscuous mode [ 496.842126][T10507] debugfs: 'hsr0' already exists in 'hsr' [ 496.847894][T10507] Cannot create hsr debugfs directory [ 497.889655][T10209] Bluetooth: hci11: command tx timeout [ 498.536431][T10209] Bluetooth: hci3: command 0x0406 tx timeout [ 499.969677][ T5631] Bluetooth: hci11: command tx timeout [ 501.575983][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.585061][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.049546][ T5631] Bluetooth: hci11: command tx timeout [ 504.129790][ T5631] Bluetooth: hci11: command tx timeout [ 521.924174][T10209] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 521.937787][T10209] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 521.948835][T10209] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 521.961577][T10209] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 521.974907][T10209] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 522.603087][T10533] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.611434][T10533] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.618960][T10533] bridge_slave_0: entered allmulticast mode [ 522.627216][T10533] bridge_slave_0: entered promiscuous mode [ 522.638207][T10533] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.646641][T10533] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.654639][T10533] bridge_slave_1: entered allmulticast mode [ 522.662429][T10533] bridge_slave_1: entered promiscuous mode [ 522.702209][T10533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.715367][T10533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.752345][T10533] team0: Port device team_slave_0 added [ 522.761374][T10533] team0: Port device team_slave_1 added [ 522.795010][T10533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.802102][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.828758][T10533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.841757][T10533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.848740][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.878328][T10533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.935575][T10533] hsr_slave_0: entered promiscuous mode [ 522.942489][T10533] hsr_slave_1: entered promiscuous mode [ 522.948877][T10533] debugfs: 'hsr0' already exists in 'hsr' [ 522.955347][T10533] Cannot create hsr debugfs directory [ 524.049694][T10209] Bluetooth: hci12: command tx timeout [ 524.133147][T10209] Bluetooth: hci4: command 0x0406 tx timeout [ 526.129598][ T5631] Bluetooth: hci12: command tx timeout [ 528.209540][ T5631] Bluetooth: hci12: command tx timeout [ 530.289590][ T5631] Bluetooth: hci12: command tx timeout [ 530.924365][T10209] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 530.937567][T10209] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 530.947847][T10209] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 530.958293][T10209] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 530.971483][T10209] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 531.607520][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.614866][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.622719][T10554] bridge_slave_0: entered allmulticast mode [ 531.631003][T10554] bridge_slave_0: entered promiscuous mode [ 531.639786][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.647043][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.657021][T10554] bridge_slave_1: entered allmulticast mode [ 531.665837][T10554] bridge_slave_1: entered promiscuous mode [ 531.706503][T10554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.721805][T10554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.760407][T10554] team0: Port device team_slave_0 added [ 531.769096][T10554] team0: Port device team_slave_1 added [ 531.804482][T10554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.811834][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.838533][T10554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.851377][T10554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.858390][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.885356][T10554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.939753][T10554] hsr_slave_0: entered promiscuous mode [ 531.946501][T10554] hsr_slave_1: entered promiscuous mode [ 531.953390][T10554] debugfs: 'hsr0' already exists in 'hsr' [ 531.959167][T10554] Cannot create hsr debugfs directory [ 533.009741][T10209] Bluetooth: hci13: command tx timeout [ 533.939923][T10576] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 533.955490][T10576] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 533.965915][T10576] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 533.976441][T10576] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 533.986102][T10576] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 534.369534][T10576] Bluetooth: hci5: command 0x0406 tx timeout [ 534.618634][T10575] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.625990][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.633836][T10575] bridge_slave_0: entered allmulticast mode [ 534.642730][T10575] bridge_slave_0: entered promiscuous mode [ 534.652645][T10575] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.660071][T10575] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.667337][T10575] bridge_slave_1: entered allmulticast mode [ 534.677445][T10575] bridge_slave_1: entered promiscuous mode [ 534.715713][T10575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.728140][T10575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.767690][T10575] team0: Port device team_slave_0 added [ 534.777938][T10575] team0: Port device team_slave_1 added [ 534.808930][T10575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.816058][T10575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.842775][T10575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.856790][T10575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.865292][T10575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.894833][T10575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.945515][T10575] hsr_slave_0: entered promiscuous mode [ 534.952348][T10575] hsr_slave_1: entered promiscuous mode [ 534.958673][T10575] debugfs: 'hsr0' already exists in 'hsr' [ 534.964923][T10575] Cannot create hsr debugfs directory [ 535.089522][ T5631] Bluetooth: hci13: command tx timeout [ 536.049641][ T5631] Bluetooth: hci14: command tx timeout [ 537.169662][ T5631] Bluetooth: hci13: command tx timeout [ 538.129555][T10576] Bluetooth: hci14: command tx timeout [ 539.249646][T10576] Bluetooth: hci13: command tx timeout [ 539.489569][T10576] Bluetooth: hci6: command 0x0406 tx timeout [ 540.209586][ T5631] Bluetooth: hci14: command tx timeout [ 542.289589][ T5631] Bluetooth: hci14: command tx timeout [ 542.530264][ T30] INFO: task syz-executor:9848 blocked for more than 143 seconds. [ 542.548927][ T30] Tainted: G L syzkaller #0 [ 542.557230][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.567305][ T30] task:syz-executor state:D stack:24088 pid:9848 tgid:9848 ppid:1 task_flags:0x480140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 542.579827][ T30] Call Trace: [ 542.583679][ T30] [ 542.590448][ T30] __schedule+0x125c/0x6730 [ 542.602294][ T30] ? __pfx___schedule+0x10/0x10 [ 542.612747][ T30] ? find_held_lock+0x2b/0x80 [ 542.622179][ T30] ? schedule+0x225/0x2c0 [ 542.636123][ T30] schedule+0xdd/0x2c0 [ 542.640557][ T30] schedule_timeout+0x1b2/0x280 [ 542.651426][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 542.669500][ T30] __wait_for_common+0x2e7/0x4c0 [ 542.675405][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 542.695690][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 542.710696][ T30] remove_one+0x312/0x420 [ 542.715124][ T30] ? up_write+0x2e5/0x5c0 [ 542.726285][ T30] __simple_recursive_removal+0x148/0x5c0 [ 542.751392][ T30] ? __pfx_remove_one+0x10/0x10 [ 542.787618][ T30] debugfs_remove+0x5d/0x80 [ 542.815245][ T30] nsim_drv_remove+0xd2/0x1e0 [ 542.838775][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 542.852574][ T30] device_remove+0xcb/0x180 [ 542.863922][ T30] device_release_driver_internal+0x44e/0x620 [ 542.872304][ T30] bus_remove_device+0x2bc/0x560 [ 542.877329][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 542.883277][ T30] ? __pfx_device_remove_attrs+0x10/0x10 [ 542.888985][ T30] device_del+0x376/0x9b0 [ 542.895335][ T30] ? __pfx_device_del+0x10/0x10 [ 542.900500][ T30] device_unregister+0x1d/0xe0 [ 542.905330][ T30] del_device_store+0x346/0x480 [ 542.910609][ T30] ? __pfx_del_device_store+0x10/0x10 [ 542.916042][ T30] ? find_held_lock+0x2b/0x80 [ 542.921332][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 542.926238][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 542.933695][ T30] ? __pfx_del_device_store+0x10/0x10 [ 542.939169][ T30] bus_attr_store+0x74/0xb0 [ 542.944093][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 542.950107][ T30] sysfs_kf_write+0xf2/0x150 [ 542.954991][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 542.960583][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 542.967051][ T30] vfs_write+0x6ac/0x1050 [ 542.971870][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 542.977835][ T30] ? __pfx_vfs_write+0x10/0x10 [ 542.983549][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.988842][ T30] ksys_write+0x12a/0x250 [ 542.993620][ T30] ? __pfx_ksys_write+0x10/0x10 [ 542.998543][ T30] do_syscall_64+0x115/0x840 [ 543.004533][ T30] ? clear_bhb_loop+0x40/0x90 [ 543.009850][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.015839][ T30] RIP: 0033:0x7fb1b095e6ce [ 543.020775][ T30] RSP: 002b:00007ffcaf75d498 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.029731][ T30] RAX: ffffffffffffffda RBX: 000055559219b500 RCX: 00007fb1b095e6ce [ 543.037774][ T30] RDX: 0000000000000001 RSI: 00007ffcaf75d520 RDI: 0000000000000005 [ 543.047418][ T30] RBP: 00007fb1b0a34732 R08: 0000000000000000 R09: 0000000000000000 [ 543.055862][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.064196][ T30] R13: 00007ffcaf75d520 R14: 00007fb1b1754620 R15: 0000000000000003 [ 543.074397][ T30] [ 543.077530][ T30] INFO: task syz.0.1000:10024 blocked for more than 143 seconds. [ 543.102457][ T30] Tainted: G L syzkaller #0 [ 543.109083][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.119237][ T30] task:syz.0.1000 state:D stack:26056 pid:10024 tgid:10016 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 543.131411][ T30] Call Trace: [ 543.134716][ T30] [ 543.137719][ T30] __schedule+0x125c/0x6730 [ 543.142901][ T30] ? do_raw_spin_lock+0x128/0x260 [ 543.147999][ T30] ? __pfx___schedule+0x10/0x10 [ 543.154554][ T30] ? find_held_lock+0x2b/0x80 [ 543.159574][ T30] ? schedule+0x225/0x2c0 [ 543.163973][ T30] schedule+0xdd/0x2c0 [ 543.168125][ T30] schedule_preempt_disabled+0x13/0x30 [ 543.178002][ T30] __mutex_lock+0xccc/0x1bd0 [ 543.182926][ T30] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 543.188923][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 543.194374][ T30] ? __kmalloc_noprof+0x343/0x820 [ 543.200008][ T30] ? nsim_bus_dev_max_vfs_write+0x1bb/0x410 [ 543.206007][ T30] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 543.212875][ T30] nsim_bus_dev_max_vfs_write+0x206/0x410 [ 543.218684][ T30] ? __pfx_nsim_bus_dev_max_vfs_write+0x10/0x10 [ 543.226440][ T30] ? __debugfs_file_get+0x1fc/0x860 [ 543.232028][ T30] full_proxy_write+0x135/0x1a0 [ 543.236959][ T30] vfs_write+0x2aa/0x1050 [ 543.241723][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 543.247505][ T30] ? __pfx_vfs_write+0x10/0x10 [ 543.253780][ T30] ? __fget_files+0x215/0x3d0 [ 543.258761][ T30] ? __fget_files+0x21f/0x3d0 [ 543.265356][ T30] ksys_write+0x12a/0x250 [ 543.270051][ T30] ? __pfx_ksys_write+0x10/0x10 [ 543.276189][ T30] do_syscall_64+0x115/0x840 [ 543.281244][ T30] ? clear_bhb_loop+0x40/0x90 [ 543.285992][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.292355][ T30] RIP: 0033:0x7f5d4f39de99 [ 543.296851][ T30] RSP: 002b:00007f5d4d1b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.305715][ T30] RAX: ffffffffffffffda RBX: 00007f5d4f626270 RCX: 00007f5d4f39de99 [ 543.314110][ T30] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000a [ 543.322944][ T30] RBP: 00007f5d4f433eaf R08: 0000000000000000 R09: 0000000000000000 [ 543.333222][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.341671][ T30] R13: 00007f5d4f626308 R14: 00007f5d4f626270 R15: 00007ffe243a5fa8 [ 543.350040][ T30] [ 543.353243][ T30] INFO: task syz.2.1022:10166 blocked for more than 144 seconds. [ 543.361905][ T30] Tainted: G L syzkaller #0 [ 543.368452][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.380071][ T30] task:syz.2.1022 state:D stack:26472 pid:10166 tgid:10160 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 543.392423][ T30] Call Trace: [ 543.395748][ T30] [ 543.398701][ T30] __schedule+0x125c/0x6730 [ 543.403930][ T30] ? __pfx___schedule+0x10/0x10 [ 543.408881][ T30] ? find_held_lock+0x2b/0x80 [ 543.414995][ T30] ? schedule+0x225/0x2c0 [ 543.419744][ T30] schedule+0xdd/0x2c0 [ 543.423879][ T30] schedule_preempt_disabled+0x13/0x30 [ 543.430428][ T30] rwsem_down_read_slowpath+0x5af/0xb40 [ 543.436079][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 543.443585][ T30] ? __pfx___might_resched+0x10/0x10 [ 543.448956][ T30] down_read+0xed/0x4c0 [ 543.453573][ T30] ? __pfx_down_read+0x10/0x10 [ 543.458408][ T30] ? mnt_get_write_access+0x1e9/0x2f0 [ 543.464503][ T30] path_openat+0xb3c/0x4280 [ 543.469555][ T30] ? __pfx_path_openat+0x10/0x10 [ 543.474556][ T30] do_file_open+0x20e/0x430 [ 543.481145][ T30] ? __pfx_do_file_open+0x10/0x10 [ 543.486318][ T30] ? alloc_fd+0x471/0x7a0 [ 543.493002][ T30] ? do_getname+0x191/0x390 [ 543.497564][ T30] do_sys_openat2+0x10f/0x1e0 [ 543.502646][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 543.507891][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 543.514279][ T30] __x64_sys_openat+0x12d/0x210 [ 543.519196][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 543.524970][ T30] do_syscall_64+0x115/0x840 [ 543.529920][ T30] ? clear_bhb_loop+0x40/0x90 [ 543.534651][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.541538][ T30] RIP: 0033:0x7f9ef739de99 [ 543.545997][ T30] RSP: 002b:00007f9ef81e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 543.555844][ T30] RAX: ffffffffffffffda RBX: 00007f9ef7626180 RCX: 00007f9ef739de99 [ 543.564103][ T30] RDX: 0000000000048002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 543.574354][ T30] RBP: 00007f9ef7433eaf R08: 0000000000000000 R09: 0000000000000000 [ 543.584714][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.593613][ T30] R13: 00007f9ef7626218 R14: 00007f9ef7626180 R15: 00007ffc673fea88 [ 543.602879][ T30] [ 543.606131][ T30] INFO: task syz.1.1029:10200 blocked for more than 144 seconds. [ 543.614539][ T30] Tainted: G L syzkaller #0 [ 543.621372][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.630332][ T30] task:syz.1.1029 state:D stack:26056 pid:10200 tgid:10198 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 543.642639][ T30] Call Trace: [ 543.645973][ T30] [ 543.649121][ T30] __schedule+0x125c/0x6730 [ 543.655735][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 543.662326][ T30] ? __pfx___schedule+0x10/0x10 [ 543.667255][ T30] ? find_held_lock+0x2b/0x80 [ 543.672389][ T30] ? schedule+0x225/0x2c0 [ 543.676791][ T30] schedule+0xdd/0x2c0 [ 543.683353][ T30] schedule_preempt_disabled+0x13/0x30 [ 543.688962][ T30] rwsem_down_read_slowpath+0x5af/0xb40 [ 543.694943][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 543.701888][ T30] ? __pfx___might_resched+0x10/0x10 [ 543.707272][ T30] down_read+0xed/0x4c0 [ 543.712685][ T30] ? __pfx_down_read+0x10/0x10 [ 543.717507][ T30] ? mnt_get_write_access+0x1e9/0x2f0 [ 543.723360][ T30] path_openat+0xb3c/0x4280 [ 543.727955][ T30] ? __pfx_path_openat+0x10/0x10 [ 543.737731][ T30] do_file_open+0x20e/0x430 [ 543.742567][ T30] ? __pfx_do_file_open+0x10/0x10 [ 543.747686][ T30] ? alloc_fd+0x471/0x7a0 [ 543.752570][ T30] ? do_getname+0x191/0x390 [ 543.757141][ T30] do_sys_openat2+0x10f/0x1e0 [ 543.762765][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 543.768051][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 543.775684][ T30] __x64_sys_openat+0x12d/0x210 [ 543.780883][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 543.787549][ T30] do_syscall_64+0x115/0x840 [ 543.792595][ T30] ? clear_bhb_loop+0x40/0x90 [ 543.797337][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.803614][ T30] RIP: 0033:0x7faa36f9de99 [ 543.808072][ T30] RSP: 002b:00007faa37edb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 543.818790][ T30] RAX: ffffffffffffffda RBX: 00007faa37226090 RCX: 00007faa36f9de99 [ 543.827962][ T30] RDX: 0000000000048002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 543.836449][ T30] RBP: 00007faa37033eaf R08: 0000000000000000 R09: 0000000000000000 [ 543.844826][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.853253][ T30] R13: 00007faa37226128 R14: 00007faa37226090 R15: 00007ffcafc43428 [ 543.861562][ T30] [ 543.864729][ T30] [ 543.864729][ T30] Showing all locks held in the system: [ 543.874097][ T30] 1 lock held by khungtaskd/30: [ 543.878997][ T30] #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 543.894378][ T30] 3 locks held by kworker/u8:8/1171: [ 543.900085][ T30] #0: ffff8880b843b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 543.910382][ T30] #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 [ 543.919190][ T30] #2: ffff8880b8426298 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 543.930320][ T30] 2 locks held by getty/5380: [ 543.935051][ T30] #0: ffff8880388ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 543.945538][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 543.956030][ T30] 7 locks held by syz-executor/9848: [ 543.961565][ T30] #0: ffff88803738e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 543.971972][ T30] #1: ffff88805c202480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 543.982532][ T30] #2: ffff88802a9d73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 543.994127][ T30] #3: ffffffff9000cee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 544.005737][ T30] #4: ffff88807f466128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 544.016698][ T30] #5: ffff88807f465258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 544.027637][ T30] #6: ffff88805c801950 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 544.041001][ T30] 3 locks held by syz.0.1000/10024: [ 544.046243][ T30] #0: ffff888020736d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 544.056357][ T30] #1: ffff888020694450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 544.065675][ T30] #2: ffff88807f465258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 [ 544.077180][ T30] 2 locks held by syz.2.1022/10166: [ 544.082704][ T30] #0: ffff888020694450 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 544.093895][ T30] #1: ffff88805c801950 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xb3c/0x4280 [ 544.104858][ T30] 2 locks held by syz.1.1029/10200: [ 544.111423][ T30] #0: ffff888020694450 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 544.121690][ T30] #1: ffff88805c801950 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xb3c/0x4280 [ 544.133047][ T30] 4 locks held by syz-executor/10208: [ 544.138474][ T30] #0: ffff88803738e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 544.148500][ T30] #1: ffff88802cffe480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 544.159925][ T30] #2: ffff88802a9d73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 544.170302][ T30] #3: ffffffff9000cee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 544.180953][ T30] 4 locks held by syz-executor/10227: [ 544.186385][ T30] #0: ffff88803738e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 544.197106][ T30] #1: ffff88807cbfdc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 544.207961][ T30] #2: ffff88802a9d73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 544.221050][ T30] #3: ffffffff9000cee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 544.231779][ T30] 4 locks held by syz-executor/10248: [ 544.237204][ T30] #0: ffff88803738e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 544.246737][ T30] #1: ffff88805c5ea480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 544.256841][ T30] #2: ffff88802a9d73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 544.268096][ T30] #3: ffffffff9000cee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 544.279471][ T30] 4 locks held by syz-executor/10421: [ 544.285065][ T30] #0: ffff88803738e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 544.296753][ T30] #1: ffff888033270080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 544.307052][ T30] #2: ffff88802a9d73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 544.318060][ T30] #3: ffffffff9000cee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 544.328853][ T30] 4 locks held by syz-executor/10447: [ 544.335782][ T30] #0: ffff88803738e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 544.345252][ T30] #1: ffff88807cb08480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 544.355474][ T30] #2: ffff88802a9d73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 544.365844][ T30] #3: ffffffff9000cee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 544.378907][ T30] 4 locks held by syz-executor/10468: [ 544.385140][ T30] #0: ffff88803738e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 544.394483][ T30] #1: ffff88805da11480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 544.405840][ T30] #2: ffff88802a9d73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 544.416361][ T30] #3: ffffffff9000cee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 544.427554][ T30] 4 locks held by syz-executor/10489: [ 544.433336][ T30] #0: ffff88803738e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 544.443738][ T30] #1: ffff88802def4880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 544.456310][ T30] #2: ffff88802a9d73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 544.466790][ T30] #3: ffffffff9000cee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 544.477504][ T30] 4 locks held by syz-executor/10507: [ 544.484116][ T30] #0: ffff88803738e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 544.494185][ T30] #1: ffff88805a2b1080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 544.505580][ T30] #2: ffff88802a9d73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 544.516030][ T30] #3: ffffffff9000cee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 544.526926][ T30] 4 locks held by syz-executor/10533: [ 544.534401][ T30] #0: ffff88803738e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 544.543823][ T30] #1: ffff888022be0880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 544.555122][ T30] #2: ffff88802a9d73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 544.565702][ T30] #3: ffffffff9000cee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 544.576328][ T30] 4 locks held by syz-executor/10554: [ 544.582059][ T30] #0: ffff88803738e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 544.592902][ T30] #1: ffff8880792d5480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 544.604805][ T30] #2: ffff88802a9d73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 544.619161][ T30] #3: ffffffff9000cee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 544.629980][ T30] 4 locks held by syz-executor/10575: [ 544.635587][ T30] #0: ffff88803738e450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 544.645330][ T30] #1: ffff88808d5e7080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 544.655755][ T30] #2: ffff88802a9d73c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 544.667325][ T30] #3: ffffffff9000cee0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 544.678072][ T30] [ 544.681328][ T30] ============================================= [ 544.681328][ T30] [ 544.691125][ T30] NMI backtrace for cpu 0 [ 544.691149][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 544.691181][ T30] Tainted: [L]=SOFTLOCKUP [ 544.691189][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.691207][ T30] Call Trace: [ 544.691214][ T30] [ 544.691222][ T30] dump_stack_lvl+0x100/0x190 [ 544.691253][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 544.691282][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 544.691310][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 544.691349][ T30] sys_info+0x141/0x190 [ 544.691378][ T30] watchdog+0xcb1/0x1030 [ 544.691416][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 544.691454][ T30] ? __pfx_watchdog+0x10/0x10 [ 544.691486][ T30] ? __kthread_parkme+0x18c/0x230 [ 544.691521][ T30] ? kthread+0x13a/0x450 [ 544.691548][ T30] ? __pfx_watchdog+0x10/0x10 [ 544.691578][ T30] kthread+0x370/0x450 [ 544.691605][ T30] ? __pfx_kthread+0x10/0x10 [ 544.691641][ T30] ret_from_fork+0x72b/0xd50 [ 544.691668][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 544.691696][ T30] ? __switch_to+0x800/0x10f0 [ 544.691730][ T30] ? __switch_to_asm+0x39/0x70 [ 544.691761][ T30] ? __pfx_kthread+0x10/0x10 [ 544.691791][ T30] ret_from_fork_asm+0x1a/0x30 [ 544.691836][ T30] [ 544.835878][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 544.842765][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 544.853480][ T30] Tainted: [L]=SOFTLOCKUP [ 544.857827][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.867905][ T30] Call Trace: [ 544.871202][ T30] [ 544.874149][ T30] dump_stack_lvl+0x100/0x190 [ 544.878845][ T30] vpanic+0x552/0x970 [ 544.882859][ T30] ? __pfx_vpanic+0x10/0x10 [ 544.887399][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 544.893596][ T30] panic+0xd1/0xe0 [ 544.897351][ T30] ? __pfx_panic+0x10/0x10 [ 544.901791][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 544.907982][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 544.914163][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 544.920342][ T30] ? watchdog.cold+0x1ec/0x234 [ 544.925121][ T30] ? watchdog+0xcc1/0x1030 [ 544.929561][ T30] watchdog.cold+0x1fd/0x234 [ 544.934173][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 544.940009][ T30] ? __pfx_watchdog+0x10/0x10 [ 544.944711][ T30] ? __kthread_parkme+0x18c/0x230 [ 544.949751][ T30] ? kthread+0x13a/0x450 [ 544.954012][ T30] ? __pfx_watchdog+0x10/0x10 [ 544.958726][ T30] kthread+0x370/0x450 [ 544.962816][ T30] ? __pfx_kthread+0x10/0x10 [ 544.967444][ T30] ret_from_fork+0x72b/0xd50 [ 544.972056][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 544.977211][ T30] ? __switch_to+0x800/0x10f0 [ 544.981914][ T30] ? __switch_to_asm+0x39/0x70 [ 544.986718][ T30] ? __pfx_kthread+0x10/0x10 [ 544.991332][ T30] ret_from_fork_asm+0x1a/0x30 [ 544.996132][ T30] [ 544.999249][ T30] Kernel Offset: disabled [ 545.003629][ T30] Rebooting in 86400 seconds..