last executing test programs: 33.904158633s ago: executing program 0 (id=2694): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000340)="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", 0x3, &(0x7f0000000100)="76b24c9208d60c1590d32aabf0b71e8c27433a0438c58281a8ddc2707efe9fd42c84c2f2b1d32b78ac07e8f3434ee6e02861598753de13427e39197e62f31d797a4c430426f6fd5e5093f91348604e9bdb9707813499b2d0c4c0289bb78076cd96557f51b00cdc7987789a2058a29447a1ff924a60231f130c754450a9d864bd20ef57bbd8b40fb615565a1a45addcab95b452650013d02a96fb", 0xd, &(0x7f00000001c0)="7c322ad4f24b55fd230361586d07e5f6dde50f8aeb821b0568374ecb907d10f39b6fed74833c9f7703a47ef01cb741457ad29ef55909abe6827e55731350144d56faf2aa7e1843ef3d9dca13ec5f1c613110caf49bea2d8937e17b75c3c1cf69eef865f5a04e81f0706e508620394ec4a0978bf771779d6911f8ea21dd8fbedea899fcc9b27b5ec42630dbed624c023d53bb3ff6598f3baa58289a6d2e7829", &(0x7f00000002c0)=0x2}) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, r0, 0x8000) socket(0xa, 0x3, 0x3b) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/orangefs/cache_timeout_msecs\x00', 0xb02, 0x0) connect$auto(r1, &(0x7f0000000080)=@xdp={0x2c, 0x9, 0x0, 0x5}, 0x58) recvmmsg$auto(r1, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x200c82, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd21, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x20, &(0x7f0000000040)="7ba938944044756a87b389db8bae0e060636ae1b3be8c6467cb13ca04913bf0c2e83defca9710dc6", 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) mmap$auto(0x0, 0x3, 0x8000000000000000, 0xeb1, 0x1, 0x808000) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0x0) prctl$auto(0x7fffffff, 0x6, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 32.276927725s ago: executing program 3 (id=2699): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x34) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/capcache/hard_limit\x00', 0x82042, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000000)="2dc2", 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyt8\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) listen$auto(0x3, 0x81) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\t/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3f, 0x200001000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x3, 0x8) getsockopt$auto(r2, 0x3a, 0x1, 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(0xffffffffffffffff, 0x1, 0x9, 0x0, 0xeb66) shutdown$auto(0x200000003, 0x2) semctl$auto(0x80000001, 0x86e5, 0x6, 0xfffffffffffffffb) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0xfffffffffffffffe, 0x0) madvise$auto(0x0, 0x200005, 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x1, 0x0) 31.544156136s ago: executing program 3 (id=2701): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/flags\x00', 0x189082, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)=@link_detach={r0}, 0x90) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x1000007ffe) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xfdef, 0x3) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)="387a0ccdb162ebe77b530cb444fc69e819701404b42606f4d71a0bc6615597112227352bad959e69bb1e0114fb518eaa021e6ac9390d9fe4289330d55e3da00a6ef24e311781f629831237045d59fa858a8d0596d85eefbea1a24fb8e8e88bd1279df6b85588ab322a76bd954c758f7deb5a21") r4 = socketcall$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) mincore$auto(0x4, 0x400000000fff, &(0x7f0000000280)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9') ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) futex$auto(0x0, 0x8, 0x3d, 0x0, 0x0, 0x0) futex$auto(0x0, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) r5 = syz_clone3(&(0x7f0000001580)={0x8200000, &(0x7f00000000c0), &(0x7f0000000100), 0x0, {0x15}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000001440)=""/215, 0x0, 0x0, {r1}}, 0x58) r6 = set_tid_address$auto(&(0x7f0000001600)) kcmp$auto_KCMP_FILE(r5, r6, 0x0, r1, r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x20048000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x200000, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) 31.51658119s ago: executing program 0 (id=2702): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) unshare$auto(0x40000080) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='^\x00', @ANYRES16, @ANYBLOB="e958e86e5bafd39a3f8aa96117ffbe687c"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000340), 0xfff}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) read$auto(r0, 0x0, 0x39b8) socketcall$auto_SYS_RECVMSG(0x11, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) sendto$auto(r2, 0x0, 0xb, 0xc, &(0x7f0000000000), 0x1c) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 30.707957873s ago: executing program 3 (id=2704): socket(0x10, 0xa, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r0, 0x0, 0x10001, 0x830) r1 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x1a9602, 0x0) read$auto(r1, &(0x7f0000000100)='/proc/self/loginuid\x00', 0x7fffffff) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) pipe2$auto(&(0x7f00000000c0), 0x0) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) shmctl$auto_SHM_STAT_ANY(0x2, 0xf, &(0x7f00000005c0)={{0x1, 0xee00, 0xee01, 0x8, 0x5d, 0x0, 0xd1}, 0xffff46e6, 0x8, 0x8, 0x8, @raw=0x8, @raw=0x400, 0x7a, 0x0, 0x0, 0x0}) 30.160750335s ago: executing program 3 (id=2706): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) r1 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x0) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xbd, 0x10) (async) unshare$auto(0x40000080) (async) r3 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0x9}, 0xf}, 0xd, 0xffffffff) (async) connect$auto(0x3, 0x0, 0x6) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x8) mmap$auto(0x0, 0x202000b, 0x40000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sysfs$auto(0x2, 0x23, 0x0) (async) r4 = socket(0x21, 0x3, 0x6) getsockopt$auto(r4, 0x40000000029, 0x50, 0xfffffffffffffffe, 0x0) (async) mmap$auto(0x1000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x9) (async) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa200, 0x0) (async) bpf$auto(0x0, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, r0, 0x2, 0x8}, 0x100000cf) sendmmsg$auto(r5, 0x0, 0x4, 0x4008) socket(0x29, 0x2, 0x0) 29.785370315s ago: executing program 0 (id=2707): r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000000), 0x4900c0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x9, 0xffffffffffffffff, 0x3, 0x18, r0, 0x0) semget$auto(0x0, 0x4, 0x1) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x149942, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25040000002d0011"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r4, 0x5, 0x8) getdents$auto(r4, &(0x7f00000004c0)={0x600, 0x7fffffffffffffff, 0x8}, 0x62d4) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) fsconfig$auto_SHMEM_HUGE_DENY(r5, 0x9, &(0x7f0000000140)='\x00', &(0x7f0000000180)="f54f07e7fc5271bd2d206acf46f392fbfd768b405d9a62deb248d81bbcd71f19e703bf4efbc48303395edff9f1fb1395540d963ca783eda52f8e21d43105d6c3072db755cb8e97ab290f7235a7f42a112bf23e2fcee9aaf8901d95e7f4970f3cc6cb69ccdbfc57a2153e38aa22903defb8b8643cb3f62e3ff2b05cffea0711664ea75c3c12fb3ed50ba2710bee4cf12691a774365cd68861e4e4af110811748cef2b57db85", 0xffffffffffffffff) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/wlan0/max_desync_factor\x00', 0x42402, 0x0) read$auto(r6, 0x0, 0x1ff) r7 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x80201, 0x0) writev$auto(r7, &(0x7f0000005f00)={0x0, 0x4}, 0x6) mmap$auto(0x101, 0x0, 0x3, 0x15, r1, 0x8) write$auto_split_huge_pages_fops_huge_memory(r0, 0x0, 0x0) 28.626156521s ago: executing program 0 (id=2708): unshare$auto(0x40000080) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x3, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000400)="42496fe17b780b0548ad3204074b6f01fb4ab25f83fb8b85bfb2f172f2d4c12ef011e35c002558c82d6c2cf1a6de386dee2593b9712d19f9943fcb6796d280d75bd9b951c0156ab4f478c76649d6eb05992a553cfc6190a837fef8a4af5d13e21079c6c25ca78523d319297c047d194400"/122, 0x7a) write$auto(0xffffffffffffffff, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="0100253d7000fddbdf2501000000140007800c0001800800018000000000040089800c0002000600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x10309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) 28.417166156s ago: executing program 3 (id=2709): r0 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x83bc) mmap$auto(0x7, 0x80000001, 0x3a4f4a3f, 0x8011, r0, 0x80000001) mmap$auto(0x0, 0x80004, 0xe2, 0xeb1, 0x405, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_NS_GET_PID_FROM_PIDNS(r0, 0x8004b706, &(0x7f0000000000)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f00000002c0)={'caif0\x00'}) close_range$auto(r1, 0x8, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop12\x00', 0x14fa02, 0x0) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) r4 = socketpair$auto(0x1, 0x9, 0x8000000000000000, 0x0) ioctl$auto(r3, 0xc0105303, r3) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=@batch={0x8, 0x80000000, 0x7, 0x1, 0xf, r4, 0x80000001, 0x855}, 0x3) read$auto(r2, &(0x7f0000000140)='/dev/snd/seq\x00', 0xb9e) 28.178192557s ago: executing program 1 (id=2710): close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="205c782002200dc0023af10e9bfa1babfa203753ca9a20370a", 0x19) ioperm$auto(0x7, 0x6, 0x90d) (async) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) acct$auto(0x0) rt_sigprocmask$auto(0xffffffff, 0x0, 0x0, 0x8) (async) mmap$auto(0x0, 0x2020006, 0x6, 0x810, r0, 0x1008000) (async) mmap$auto(0x0, 0x400008, 0x2, 0x400000000009b72, 0x2, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) pwrite64$auto(0xc8, 0x0, 0x11, 0x4) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) r2 = getsockopt$auto(r1, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r2, r2, 0x8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x400802, 0x0) socket(0xa, 0x1, 0x84) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) (async) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r5, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r7 = wait4$auto(r6, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc642, 0x3, 0x4189, 0x8, 0x7ffffffffffffffc, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x10000000002, 0x6, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r7, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r7}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) (async) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x1, 0x2, r7, 0x7, 0x5) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa1\x05\x9b\xad}yX\xc5\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9E\b\xa3Rgu\xf5L\x1d\xf8\ny', 0x401) (async) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) (async) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 27.823378788s ago: executing program 3 (id=2711): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) r1 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000a00), 0x80000, 0x0) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) read$auto(r1, 0x0, 0xf) 27.707990492s ago: executing program 0 (id=2712): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x3f) close_range$auto(0x0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001040)='/proc/sys/net/ipv6/neigh/batadv_slave_0/gc_stale_time\x00', 0x200040, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r0, &(0x7f0000000040)=""/4080, 0x1036) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xc048aeca, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4b66, 0x1) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r4, 0x65, 0x1, 0x0, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = clone$auto(0x6, 0x5, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x2, 0x1) msgctl$auto_IPC_RMID(0x101, 0x0, &(0x7f00000002c0)={{0x8, 0xffffffffffffffff, 0xee01, 0x711, 0x40c, 0xfff, 0xfffd}, &(0x7f0000000240)=0x9, &(0x7f0000000280)=0xff, 0x10, 0x8, 0x3, 0x1, 0x6, 0x2, 0x1, 0x8, @raw=0xb3}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000004d40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004d00)={&(0x7f0000004dc0)={0x24a0, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x190, 0x5, 0x0, 0x1, [@typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@empty}, @nested={0x176, 0x91, 0x0, 0x1, [@nested={0x4, 0x29}, @nested={0x4, 0x89}, @typed={0x8, 0xb9, 0x0, 0x0, @pid=r6}, @generic="8f942332be53b2c6e2f897877f6c403d17c47ff1192af70dc87635f363e5aac9cd1b90e69ad12a70e691c8340008a1f96aa26b8a94cf3849319f94cc8fdd8f3aa3292ada58cff8e66b2815918394d1f3ffde8997efe6516184fb03cbbf2729bbb065b3989f2481db409836c8677df072e9bed8e5f33064439bfdac03def9153a5e3b4871ea3e6871", @typed={0x8, 0xf5, 0x0, 0x0, @fd=r4}, @nested={0x4, 0xf4}, @nested={0x4, 0x137}, @nested={0x2e, 0x158, 0x0, 0x1, [@generic="a0df45dd7a3e1896dfa6a4cb34c8c334574626b8aff1b856422fae73e71af8600fa8", @typed={0x8, 0x124, 0x0, 0x0, @uid=r7}]}, @generic="7609fc23f796e5ef7ce7ed82db2473146837bc25c1ced9db95b08a039d9960cd48070cb8a6a83ec445f234ef6424b1eaf0c2a8990d23200a55a6f1776d70b54d4a575e05fa80c31b5ae13b8b852f5f78a5d820f74a611253ddf776bd84e9b1fd2b78f5a659c0e29f9a2f716bf23dcbf875dff26eb07531d09bd65e16471aac01e417223059e561f87086b2410ce687bd93a9cc97e0f90627574a"]}]}, @TIPC_NLA_MON={0x2d, 0x9, 0x0, 0x1, [@generic="da04607ca459ed22c8e4359268f4d87054219d34d6bd235d9783c8d8585f4308e9b14f5ab29e258215"]}, @TIPC_NLA_NET={0x22c5, 0x7, 0x0, 0x1, [@nested={0x81, 0x116, 0x0, 0x1, [@generic="a93ca5256460975bad1064a0f2b6b816f67795006f89662f9b04d4a37587511ae0d2b50355a3b20800d7db1301f72f9f6ed2c3f955cac062ce838c1ece6ba8b54c15388f2cf93f3cf464b01e471ecfb09a05cbf081febdf672bdda1de0ac84290e37390a79c72a2f90b466c941ec2aafcef32f3116", @typed={0x7, 0x6e, 0x0, 0x0, @str='Q)\x00'}]}, @generic="42e8994b8bd14a75b49a8f0fb20147694f40bc71ca571f45ef45ed7aaf0816096f15c3e37bf94ef3", @nested={0x2d, 0x6a, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @generic="2ccadf5c35106857eff3c7a4bd4eec92978c69d2c3", @typed={0xc, 0x14f, 0x0, 0x0, @str='-,{{\']&\x00'}]}, @generic="75e03fb227fab408298ab176446dda3defce0b52bc73dc3b96e36d4473d8c004d628b4a831fe42c6b5ffcb3f65cc17bc85da412d645f36aa9afe540c23156acbe6a98be2d4ffe077f55f1fa28b04e3332ed64d7abb57d37fa1f63aad9dbf904587a0b9cb1726c7fc89a18b5f97ef63598fafc706cb16a82b84bf317da5f051ee87442de393ceeb275d917e053ad9d84c790075a9e0767261c7c6714897b360fa3bc406671b04f0d8de3d5d34da794f18acafaafb1383c1cd66965150db", @typed={0x14, 0x117, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x210d, 0xb5, 0x0, 0x1, [@generic="fa8588a2ce15c19eb7bfe4f5727cc46d", @typed={0xc, 0xa8, 0x0, 0x0, @u64=0x401}, @typed={0x8, 0xb4, 0x0, 0x0, @uid=r7}, @nested={0x4, 0xdf}, @generic="8052e1b4568ed61fcc5453d3647d45f2f03ec96d021ebd87359ceb709aea6b4658da0d1294794a244593693cb97ed4aa8cea5d164d152443dedb2678cc536a02c30f4bb256a41751d442032290481b974cb3d15907a861203e7b03586066765a4b9168f6e742ee81a28de8989ea37b0634a68729978ae49522e0e74f092860cca1aae6bc8547f706b8f6ca2a041ef8b38dc2073d72d95d064eb334c203f20687d9df94cc061897a31d272a64d5d05c612e28b507b1e961d719834670fd1f167c91b1ab7fd8dd965a59", @nested={0x4, 0x16b}, @generic="ac5616b9ffffffff805f000041c276fa2d000000", @generic="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", @generic="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"]}, @nested={0x4, 0xb9}]}, @TIPC_NLA_SOCK={0x4}]}, 0x24a0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) sendmsg$auto_IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000004d80)=ANY=[@ANYBLOB="24fe24d9560602479ee742d2a128f5514753b991333ae84e5fca0d60", @ANYRES16=r3, @ANYBLOB="000126bd7000ffdbdf250200000008000400080000000800040007000000"], 0x24}, 0x1, 0x0, 0x0, 0x6048000}, 0x80) 27.136637854s ago: executing program 0 (id=2713): statmount$auto(0x0, 0x0, 0x2000000009, 0xd) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0xf, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 27.093158464s ago: executing program 1 (id=2714): mmap$auto(0x3, 0x2020009, 0x802, 0x1000000000ebf, 0xfffffffffffffffa, 0x5) io_uring_setup$auto(0x6, 0x0) (async) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x7, 0xc0b, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xb, 0x1, 0xced80000000000, 0x9, 0x6, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x2, 0xc) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x80) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async, rerun: 32) ioctl$auto(0x3, 0xae41, r1) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x26, 0x80805, 0x0) (async, rerun: 64) r5 = socket(0x26, 0x4, 0x1) (rerun: 64) connect$auto(r5, 0x0, 0x55) socket(0x1, 0x1, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) 25.594553997s ago: executing program 1 (id=2716): r0 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000a00), 0x80000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, 0x0, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/tty/ptyce/power/runtime_suspended_time\x00', 0x2400, 0x0) r2 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim7/ports/0/ipsec\x00', 0x282500, 0x0) close_range$auto(r2, 0xffffffffffffffff, 0x6) r3 = gettid() setpriority$auto_PRIO_PROCESS(0x0, r3, 0x3) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0x1494c0, 0x0) socket(0x2, 0x1, 0x0) read$auto(r1, 0x0, 0x20) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) socket(0x15, 0x1, 0x0) socket(0x2c, 0x5, 0x2000006) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) inotify_init1$auto(0x4) ioctl$auto_SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000040)) r5 = epoll_create$auto(0x3e) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video59\x00', 0x2aa02, 0x0) ioctl$auto(r5, 0xc0585611, r6) fcntl$auto_F_SETSIG(r5, 0xa, 0x0) read$auto(r0, 0x0, 0xf) 24.765288079s ago: executing program 1 (id=2717): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) unshare$auto(0x401) mmap$auto(0x0, 0x2, 0x1000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x9) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x1000000) socket(0x2, 0x80002, 0x73) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) membarrier$auto_MEMBARRIER_CMD_REGISTER_PRIVATE_EXPEDITED_RSEQ(0x100, 0x1, 0x1) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0xfffffe36) setsockopt$auto(r1, 0x81, 0x4000, &(0x7f0000000040)='/dev/kvm\x00', 0x9) close_range$auto(0x2, 0x8, 0x0) 24.408255733s ago: executing program 1 (id=2719): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x149180, 0x0) read$auto_tracing_stats_fops_trace(r0, &(0x7f0000000000)=""/43, 0xfedf) syz_clone3(0x0, 0x0) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, 0x0) mmap$auto(0x1, 0x2020009, 0x3, 0xeb0, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f00000003c0), 0x103400, 0x0) pread64$auto(r1, &(0x7f0000000400)='\\\x00', 0xffff, 0x1) ioctl$auto(0x3, 0x40081271, 0x38) close_range$auto(0x2, 0xffffffffffffffff, 0x40) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) ioperm$auto(0x7, 0x6, 0x80) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="09007fc99994fa2b470dda612ca0405d22deef33c7f4e6d8c14c8732ce2028c26b755ca2361169587020463df19cb0ee7bec9e0d45f6d183ae38b87974731dfd66a2f35bd1e6ee5a7a55c35cfe1163c0b8827c9e1116d6e10b59f5a06b75960f942eeff731ab4708d29f8a75885356ab5b86880324e3bda3d57e936f513e198aad96db26fb8d97998c576c104c55f1"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x5}, 0x1, 0x0, 0x7ff, 0xf819}, 0x7}, 0x2, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="72010000", @ANYRES32=r4], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x800400}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) 24.264956384s ago: executing program 1 (id=2720): statmount$auto(0x0, 0x0, 0x2000000009, 0xd) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0xf, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 12.842962111s ago: executing program 32 (id=2711): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) r1 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000a00), 0x80000, 0x0) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) read$auto(r1, 0x0, 0xf) 12.163612888s ago: executing program 33 (id=2713): statmount$auto(0x0, 0x0, 0x2000000009, 0xd) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0xf, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 8.829141167s ago: executing program 34 (id=2720): statmount$auto(0x0, 0x0, 0x2000000009, 0xd) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0xf, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 3.19517954s ago: executing program 2 (id=2765): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_FIOCLEX(r0, 0x5451, 0x8) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_TIMESTAMP_NEW(r1, 0x6, 0x3f, &(0x7f0000000080)='\x00', &(0x7f0000000100)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x51) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x400000008000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x151) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xf, 0x0, 0x6) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x80000000003) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_gettime$auto(0x1, 0x0) getsockopt$auto_SO_TXTIME(r2, 0x0, 0x3d, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x2) r4 = socket(0x2, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0xd, 0x0, 0x0) socket(0x2a, 0x4, 0xffffffff) r5 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8955, 0x0) 3.082680698s ago: executing program 2 (id=2766): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop7\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r1 = getpid() mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x101000, 0x8) shmget$auto(0x0, 0x7c, 0x100) process_vm_readv$auto(r1, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) syz_clone3(&(0x7f0000000480)={0x22000000, 0x0, &(0x7f00000001c0), 0x0, {0xa}, &(0x7f00000002c0)=""/150, 0x96, &(0x7f0000000380)=""/162, 0x0}, 0x58) mknod$auto(&(0x7f0000000040)='\x00', 0xfff7, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) r3 = socket(0x2c, 0x3, 0x40000) bind$auto(r3, 0x0, 0x6b) socket(0x6, 0x2, 0x3) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1) mmap$auto(0x0, 0x400008, 0x1000dd, 0x9b72, 0xffffffffffffffff, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) close_range$auto(0xffffffffffffffff, r0, 0x5) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) setfsuid$auto(0xee00) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000240), 0xffffffffffffffff) r4 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x428400, 0x0) lseek$auto(r4, 0x0, 0x2) 2.699039428s ago: executing program 2 (id=2767): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020209, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x3) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) execve$auto(0x0, &(0x7f0000000440)=&(0x7f00000003c0)='/dev/dri/card1\x00', &(0x7f00000004c0)=&(0x7f0000000480)='wlan1\x00') setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) setsockopt$auto(r1, 0x0, 0x13, 0x0, 0x8009) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40cc}, 0x20040080) ioctl$auto(r0, 0x5424, 0x1) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r1) ioctl$auto_VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) sendmsg$auto_TIPC_NL_NODE_GET(r2, 0x0, 0x4000) 2.396237701s ago: executing program 2 (id=2768): r0 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000001000)={@siginfo_0_0={0x3, 0xf, 0x2, @_sigsys={&(0x7f0000000000)="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", 0x8, 0x40}}}, 0x7fff, &(0x7f0000001080)={{0x7fffffffffffffff, 0x4}, {0x6, 0x9}, 0x1ff, 0x7, 0x200040, 0x80000000, 0x3, 0x800, 0x100, 0x3, 0x9, 0xfffffffffffffff7, 0x8, 0x5, 0xff, 0x400}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) r4 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) pread64$auto(r4, 0x0, 0x100000, 0x7fff) ioctl$auto(r3, 0x4b4b, r3) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r1, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r5 = socket(0x1d, 0x2, 0x7) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r5, &(0x7f0000000000)=@can={0x1d, r7}, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r8}, 0x18) write$auto(0x3, 0x0, 0x6f9) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) 977.548728ms ago: executing program 2 (id=2769): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x20000, 0xffffffffffff0005, 0x19) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ppoll$auto(&(0x7f0000000040)={r2, 0x200, 0xc00}, 0xc6bc, &(0x7f0000000080)={0x4, 0x1}, &(0x7f0000000140)={0x9}, 0x8) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5404, &(0x7f0000000180)="170c6d88b286f35d4d51e3e0e6a11e8f6d3792c0e3519b6832c5852cb73acaf8cdfca077aba790d10927eda4c20109def67a01f40d7a22fdb8c82cb4b30f4ae4892ebece065514e841e7676be745381aa2f31a86e0a9510c8d44be4edaee2d21") getdents64$auto(r3, 0x0, 0x40002) epoll_create1$auto(0x3) ioctl$auto(0x3, 0x541b, 0x7f) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) getsockopt$auto(r0, 0x29, 0x3, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) 0s ago: executing program 2 (id=2770): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000f00", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) open(&(0x7f0000000100)='.\x00', 0x595002, 0x60c) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586aa59caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x6, 0x24f}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) kernel console output (not intermixed with test programs): e name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 943.415301][T17206] Call Trace: [ 943.415312][T17206] [ 943.415323][T17206] dump_stack_lvl+0x100/0x190 [ 943.415354][T17206] should_fail_ex.cold+0x5/0xa [ 943.415392][T17206] should_failslab+0xc2/0x120 [ 943.415422][T17206] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 943.415465][T17206] ? __d_alloc+0x34/0xa40 [ 943.415504][T17206] __d_alloc+0x34/0xa40 [ 943.415540][T17206] d_alloc+0x4a/0x1e0 [ 943.415575][T17206] lookup_one_qstr_excl+0x171/0x250 [ 943.415617][T17206] start_dirop+0x59/0xb0 [ 943.415646][T17206] simple_start_creating+0xf9/0x110 [ 943.415677][T17206] ? __pfx_simple_start_creating+0x10/0x10 [ 943.415708][T17206] ? mntput+0x70/0xa0 [ 943.415733][T17206] ? simple_pin_fs+0xa3/0x190 [ 943.415760][T17206] debugfs_start_creating.part.0+0x82/0x170 [ 943.415790][T17206] __debugfs_create_file+0xb3/0x4f0 [ 943.415819][T17206] debugfs_create_file_full+0x41/0x60 [ 943.415848][T17206] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 943.415875][T17206] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 943.415925][T17206] ? lockdep_init_map_type+0x5c/0x250 [ 943.415970][T17206] preinit_net.part.0+0x43b/0x920 [ 943.415999][T17206] copy_net_ns+0x339/0x7c0 [ 943.416031][T17206] create_new_namespaces+0x3ea/0xac0 [ 943.416069][T17206] unshare_nsproxy_namespaces+0xf2/0x220 [ 943.416103][T17206] ksys_unshare+0x438/0xab0 [ 943.416139][T17206] ? __pfx_ksys_unshare+0x10/0x10 [ 943.416173][T17206] ? xfd_validate_state+0x129/0x190 [ 943.416197][T17206] ? ksys_write+0x1ac/0x250 [ 943.416239][T17206] __x64_sys_unshare+0x31/0x40 [ 943.416275][T17206] do_syscall_64+0x115/0x840 [ 943.416311][T17206] ? clear_bhb_loop+0x40/0x90 [ 943.416341][T17206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.416384][T17206] RIP: 0033:0x7f085e79ce59 [ 943.416405][T17206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.416430][T17206] RSP: 002b:00007f085f595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 943.416455][T17206] RAX: ffffffffffffffda RBX: 00007f085ea16090 RCX: 00007f085e79ce59 [ 943.416472][T17206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 943.416487][T17206] RBP: 00007f085e832d6f R08: 0000000000000000 R09: 0000000000000000 [ 943.416502][T17206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.416518][T17206] R13: 00007f085ea16128 R14: 00007f085ea16090 R15: 00007ffcd25b6818 [ 943.416550][T17206] [ 944.037335][ T9367] Bluetooth: hci4: command tx timeout [ 944.195428][T17140] hsr_slave_0: entered promiscuous mode [ 944.213982][T17140] hsr_slave_1: entered promiscuous mode [ 944.253474][T17140] debugfs: 'hsr0' already exists in 'hsr' [ 944.273969][T17140] Cannot create hsr debugfs directory [ 945.374553][T17228] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2351'. [ 945.578812][T17140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.848710][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2349'. [ 946.106780][ T9367] Bluetooth: hci4: command tx timeout [ 946.201910][T17140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.515476][T17140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.873167][T17140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.007175][T17267] FAULT_INJECTION: forcing a failure. [ 949.007175][T17267] name failslab, interval 1, probability 0, space 0, times 0 [ 949.081682][T17267] CPU: 0 UID: 0 PID: 17267 Comm: syz.0.2358 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.081731][T17267] Tainted: [L]=SOFTLOCKUP [ 949.081740][T17267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 949.081756][T17267] Call Trace: [ 949.081764][T17267] [ 949.081773][T17267] dump_stack_lvl+0x100/0x190 [ 949.081805][T17267] should_fail_ex.cold+0x5/0xa [ 949.081838][T17267] should_failslab+0xc2/0x120 [ 949.081868][T17267] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 949.081910][T17267] ? shmem_alloc_inode+0x25/0x50 [ 949.081946][T17267] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 949.081979][T17267] shmem_alloc_inode+0x25/0x50 [ 949.082009][T17267] alloc_inode+0x68/0x250 [ 949.082048][T17267] new_inode+0x22/0x1c0 [ 949.082090][T17267] shmem_get_inode+0x1e3/0xfb0 [ 949.082126][T17267] ? __pfx_shmem_get_inode+0x10/0x10 [ 949.082162][T17267] ? do_raw_spin_unlock+0x145/0x1e0 [ 949.082195][T17267] shmem_mknod+0x217/0x480 [ 949.082232][T17267] ? __pfx_shmem_mknod+0x10/0x10 [ 949.082263][T17267] ? bpf_lsm_inode_create+0x9/0x10 [ 949.082304][T17267] ? __pfx_shmem_create+0x10/0x10 [ 949.082338][T17267] lookup_open.isra.0+0xc47/0x11b0 [ 949.082371][T17267] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 949.082402][T17267] ? __pfx___might_resched+0x10/0x10 [ 949.082429][T17267] ? mnt_get_write_access+0x52/0x2f0 [ 949.082474][T17267] ? __pfx_down_write+0x10/0x10 [ 949.082513][T17267] ? mnt_get_write_access+0x1e9/0x2f0 [ 949.082557][T17267] path_openat+0x2291/0x31a0 [ 949.082602][T17267] ? __pfx_path_openat+0x10/0x10 [ 949.082645][T17267] do_file_open+0x20e/0x430 [ 949.082679][T17267] ? __pfx_do_file_open+0x10/0x10 [ 949.082738][T17267] ? alloc_fd+0x476/0x790 [ 949.082771][T17267] ? do_getname+0x191/0x390 [ 949.082815][T17267] do_sys_openat2+0x10d/0x1e0 [ 949.082854][T17267] ? __pfx_do_sys_openat2+0x10/0x10 [ 949.082903][T17267] __x64_sys_openat+0x12d/0x210 [ 949.082943][T17267] ? __pfx___x64_sys_openat+0x10/0x10 [ 949.082986][T17267] ? rcu_is_watching+0x12/0xc0 [ 949.083018][T17267] do_syscall_64+0x115/0x840 [ 949.083051][T17267] ? clear_bhb_loop+0x40/0x90 [ 949.083098][T17267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.083123][T17267] RIP: 0033:0x7fb8ec39ce59 [ 949.083143][T17267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.083168][T17267] RSP: 002b:00007fb8ed210028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 949.083192][T17267] RAX: ffffffffffffffda RBX: 00007fb8ec616090 RCX: 00007fb8ec39ce59 [ 949.083208][T17267] RDX: 0000000000141440 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 949.083224][T17267] RBP: 00007fb8ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 949.083239][T17267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.083253][T17267] R13: 00007fb8ec616128 R14: 00007fb8ec616090 R15: 00007ffd444e3e98 [ 949.083284][T17267] [ 949.553780][T17140] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 949.564266][T17140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.574446][T17140] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 949.586799][T17140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 949.594967][T17140] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 949.604960][T17140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 949.617953][T17140] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 949.635405][T17140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 950.801024][T17140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.942429][T17140] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.025987][T13774] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.033350][T13774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.132311][T13774] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.139512][T13774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.125279][T17140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.228548][T17332] bond0: invalid ARP target specified [ 954.383209][T17140] veth0_vlan: entered promiscuous mode [ 954.448768][T17140] veth1_vlan: entered promiscuous mode [ 954.460303][T17334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2367'. [ 954.580444][T17332] nbd: socks must be embedded in a SOCK_ITEM attr [ 954.587864][T17140] veth0_macvtap: entered promiscuous mode [ 954.626396][T17140] veth1_macvtap: entered promiscuous mode [ 954.708276][T17332] block nbd0: shutting down sockets [ 954.892678][T17140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.957784][T17140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.034860][T13768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.075408][T13768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.127181][T13768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.188227][T13768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.854864][T13789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.912048][T13789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.170200][T13789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.258502][T13789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.680135][T17363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2372'. [ 958.043847][T17367] bond0: invalid ARP target specified [ 958.783399][T13978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 958.800836][T13978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 958.811654][T13978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 958.828432][T13978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 958.837748][T13978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 958.971182][T17379] bond0: invalid ARP target specified [ 959.065324][T17381] binder: 17378:17381 ioctl c004620b 6 returned -22 [ 959.216246][T17358] block2mtd: too many arguments [ 959.368392][T17379] bond0: Unable to set down delay as MII monitoring is disabled [ 960.909637][T13978] Bluetooth: hci0: command tx timeout [ 961.103727][T17407] futex_wake_op: syz.2.2381 tries to shift op by -2048; fix this program [ 961.136143][T17407] futex_wake_op: syz.2.2381 tries to shift op by -2048; fix this program [ 961.183473][T17407] 0x000000000001-0x000000020000 : "" [ 961.240585][T17407] ftl_cs: FTL header corrupt! [ 961.535846][ T30] audit: type=1800 audit(4295006747.739:90): pid=17412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2381" name="lu_gp_id" dev="configfs" ino=90576 res=0 errno=0 [ 961.582256][T17412] kstrtoul() returned -22 for lu_gp_id [ 962.160861][T13774] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.738359][T17424] random: crng reseeded on system resumption [ 962.827575][T17424] hub 1-0:1.0: USB hub found [ 962.848251][T13774] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.880428][T17424] hub 1-0:1.0: 1 port detected [ 962.979616][T13978] Bluetooth: hci0: command tx timeout [ 963.262701][T13774] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.460597][T13774] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.639225][T17434] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 963.888371][T17389] Process accounting paused [ 965.048405][T13978] Bluetooth: hci0: command tx timeout [ 965.231505][T13774] team0: left allmulticast mode [ 965.260253][T13774] team_slave_0: left allmulticast mode [ 965.282509][T13774] team_slave_1: left allmulticast mode [ 965.313636][T13774] team0: left promiscuous mode [ 965.328776][T13774] team_slave_0: left promiscuous mode [ 965.346108][T13774] team_slave_1: left promiscuous mode [ 965.372459][T13774] bridge0: port 3(team0) entered disabled state [ 965.427372][T13774] bridge_slave_1: left allmulticast mode [ 965.455599][T13774] bridge_slave_1: left promiscuous mode [ 965.481832][T13774] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.529845][T13774] bridge_slave_0: left allmulticast mode [ 965.550383][T13774] bridge_slave_0: left promiscuous mode [ 965.571358][T13774] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.468658][T13774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.524659][T13774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.565979][T13774] bond0 (unregistering): Released all slaves [ 966.738053][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 966.866507][T17473] FAULT_INJECTION: forcing a failure. [ 966.866507][T17473] name failslab, interval 1, probability 0, space 0, times 0 [ 967.009507][T17473] CPU: 0 UID: 0 PID: 17473 Comm: syz.0.2390 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.009547][T17473] Tainted: [L]=SOFTLOCKUP [ 967.009556][T17473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 967.009572][T17473] Call Trace: [ 967.009580][T17473] [ 967.009590][T17473] dump_stack_lvl+0x100/0x190 [ 967.009620][T17473] should_fail_ex.cold+0x5/0xa [ 967.009662][T17473] should_failslab+0xc2/0x120 [ 967.009693][T17473] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 967.009735][T17473] ? __d_alloc+0x34/0xa40 [ 967.009777][T17473] __d_alloc+0x34/0xa40 [ 967.009814][T17473] d_alloc_pseudo+0x1c/0xc0 [ 967.009839][T17473] alloc_file_pseudo+0xcf/0x230 [ 967.009878][T17473] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 967.009915][T17473] ? alloc_fd+0x476/0x790 [ 967.009946][T17473] ? do_raw_spin_unlock+0x145/0x1e0 [ 967.009977][T17473] __anon_inode_getfile+0xe8/0x280 [ 967.010018][T17473] anon_inode_getfile_fmode+0x37/0xa0 [ 967.010057][T17473] __do_sys_fanotify_init+0xab8/0xe80 [ 967.010090][T17473] do_syscall_64+0x115/0x840 [ 967.010126][T17473] ? clear_bhb_loop+0x40/0x90 [ 967.010155][T17473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.010181][T17473] RIP: 0033:0x7fb8ec39ce59 [ 967.010201][T17473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.010226][T17473] RSP: 002b:00007fb8ed231028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 967.010250][T17473] RAX: ffffffffffffffda RBX: 00007fb8ec615fa0 RCX: 00007fb8ec39ce59 [ 967.010267][T17473] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000c00 [ 967.010283][T17473] RBP: 00007fb8ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 967.010298][T17473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.010313][T17473] R13: 00007fb8ec616038 R14: 00007fb8ec615fa0 R15: 00007ffd444e3e98 [ 967.010343][T17473] [ 967.497163][T13978] Bluetooth: hci0: command tx timeout [ 968.113523][T17502] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 968.195150][T17478] zswap: compressor 000 not available [ 968.692944][T17489] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 969.371472][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 969.444583][T17377] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.465111][T17377] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.472428][T17377] bridge_slave_0: entered allmulticast mode [ 969.516005][T17377] bridge_slave_0: entered promiscuous mode [ 969.579252][T17377] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.613559][T17528] FAULT_INJECTION: forcing a failure. [ 969.613559][T17528] name failslab, interval 1, probability 0, space 0, times 0 [ 969.624743][T17377] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.627592][T17528] CPU: 1 UID: 0 PID: 17528 Comm: syz.0.2399 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.627723][T17528] Tainted: [L]=SOFTLOCKUP [ 969.627763][T17528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 969.627817][T17528] Call Trace: [ 969.627850][T17528] [ 969.627910][T17528] dump_stack_lvl+0x100/0x190 [ 969.628040][T17528] should_fail_ex.cold+0x5/0xa [ 969.628158][T17528] should_failslab+0xc2/0x120 [ 969.628268][T17528] __kmalloc_cache_noprof+0x7a/0x6f0 [ 969.628394][T17528] ? __do_sys_fanotify_init+0x547/0xe80 [ 969.628510][T17528] ? get_mem_cgroup_from_mm+0x69/0x5e0 [ 969.628601][T17528] ? get_mem_cgroup_from_mm+0x113/0x5e0 [ 969.628702][T17528] __do_sys_fanotify_init+0x547/0xe80 [ 969.628819][T17528] do_syscall_64+0x115/0x840 [ 969.628938][T17528] ? clear_bhb_loop+0x40/0x90 [ 969.629050][T17528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.629145][T17528] RIP: 0033:0x7fb8ec39ce59 [ 969.629218][T17528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.629341][T17528] RSP: 002b:00007fb8ed231028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 969.629453][T17528] RAX: ffffffffffffffda RBX: 00007fb8ec615fa0 RCX: 00007fb8ec39ce59 [ 969.629511][T17528] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000c00 [ 969.629567][T17528] RBP: 00007fb8ec432d6f R08: 0000000000000000 R09: 0000000000000000 [ 969.629621][T17528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.629677][T17528] R13: 00007fb8ec616038 R14: 00007fb8ec615fa0 R15: 00007ffd444e3e98 [ 969.629766][T17528] [ 969.821164][T17377] bridge_slave_1: entered allmulticast mode [ 969.834017][T17377] bridge_slave_1: entered promiscuous mode [ 970.063281][T17377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.115846][T17377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.477566][T17377] team0: Port device team_slave_0 added [ 970.565149][T17377] team0: Port device team_slave_1 added [ 970.928293][T17377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.965877][T17377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.046946][T17377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.076240][T17377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.092459][T17377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.176210][T17377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.647420][T17377] hsr_slave_0: entered promiscuous mode [ 971.678420][T17377] hsr_slave_1: entered promiscuous mode [ 971.709865][T17377] debugfs: 'hsr0' already exists in 'hsr' [ 971.724561][T17377] Cannot create hsr debugfs directory [ 972.396341][T17571] FAULT_INJECTION: forcing a failure. [ 972.396341][T17571] name fail_futex, interval 1, probability 0, space 0, times 0 [ 972.425729][T17571] CPU: 0 UID: 0 PID: 17571 Comm: syz.2.2407 Tainted: G L syzkaller #0 PREEMPT(full) [ 972.425785][T17571] Tainted: [L]=SOFTLOCKUP [ 972.425798][T17571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 972.425821][T17571] Call Trace: [ 972.425834][T17571] [ 972.425851][T17571] dump_stack_lvl+0x100/0x190 [ 972.425897][T17571] should_fail_ex.cold+0x5/0xa [ 972.425939][T17571] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 972.425996][T17571] get_futex_key+0x1d2/0x1510 [ 972.426058][T17571] ? __pfx_get_futex_key+0x10/0x10 [ 972.426132][T17571] futex_wait_setup+0x83/0x510 [ 972.426192][T17571] __futex_wait+0x19f/0x300 [ 972.426256][T17571] ? __pfx___futex_wait+0x10/0x10 [ 972.426314][T17571] ? __pfx_futex_wake_mark+0x10/0x10 [ 972.426365][T17571] ? futex_hash+0x2ad/0x370 [ 972.426424][T17571] ? futex_hash+0x141/0x370 [ 972.426482][T17571] futex_wait+0xe6/0x370 [ 972.426524][T17571] ? __pfx_futex_wait+0x10/0x10 [ 972.426588][T17571] do_futex+0x1ef/0x350 [ 972.426624][T17571] ? __pfx_do_futex+0x10/0x10 [ 972.426659][T17571] ? do_raw_spin_lock+0x128/0x260 [ 972.426696][T17571] ? find_held_lock+0x2b/0x80 [ 972.426738][T17571] ? __x64_sys_close_range+0x2d9/0x5d0 [ 972.426791][T17571] __x64_sys_futex+0x34f/0x4d0 [ 972.426832][T17571] ? __pfx___x64_sys_futex+0x10/0x10 [ 972.426877][T17571] ? rcu_is_watching+0x12/0xc0 [ 972.426920][T17571] do_syscall_64+0x115/0x840 [ 972.426970][T17571] ? clear_bhb_loop+0x40/0x90 [ 972.427014][T17571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.427052][T17571] RIP: 0033:0x7fd815f9ce59 [ 972.427082][T17571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.427119][T17571] RSP: 002b:00007fd816e450e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 972.427152][T17571] RAX: ffffffffffffffda RBX: 00007fd816215fa8 RCX: 00007fd815f9ce59 [ 972.427177][T17571] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd816215fa8 [ 972.427200][T17571] RBP: 00007fd816215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 972.427269][T17571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.427292][T17571] R13: 00007fd816216038 R14: 00007fffabdacdd0 R15: 00007fffabdaceb8 [ 972.427340][T17571] [ 972.721816][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 975.712989][T17377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 975.768405][T17377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 975.958195][T17377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 976.012093][T17377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 976.354027][T17377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 976.422363][T17377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 976.494964][T17377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 976.593623][T17377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 978.206940][T13774] hsr_slave_0: left promiscuous mode [ 978.236890][T13774] hsr_slave_1: left promiscuous mode [ 978.262226][T13774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.280387][T13774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.365233][T13774] veth1_macvtap: left promiscuous mode [ 978.391573][T13774] veth0_macvtap: left promiscuous mode [ 978.409839][T13774] veth1_vlan: left promiscuous mode [ 978.417695][T13774] veth0_vlan: left promiscuous mode [ 979.200571][T13774] team0 (unregistering): Port device team_slave_1 removed [ 979.240553][T13774] team0 (unregistering): Port device team_slave_0 removed [ 979.692368][T17377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.043117][T17377] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.532541][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.539879][ T6376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.598121][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.605307][ T6376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.929803][T17735] futex_wake_op: syz.3.2425 tries to shift op by -2048; fix this program [ 982.980614][T17735] blktrace: Concurrent blktraces are not allowed on loop2 [ 983.614204][T17377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.808992][T17377] veth0_vlan: entered promiscuous mode [ 983.893015][T17377] veth1_vlan: entered promiscuous mode [ 984.094365][T17377] veth0_macvtap: entered promiscuous mode [ 984.138765][T17377] veth1_macvtap: entered promiscuous mode [ 984.296663][T17377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.364520][T17377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.410015][ T8203] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.620879][ T8203] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.668090][ T8203] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.712770][ T6383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.219386][ T6376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.242656][ T6376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.632465][T13768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.645784][T13768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.014303][T13978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 987.041309][T13978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 987.056726][T13978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 987.067901][T13978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 987.084337][T13978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 987.589666][T17799] bond0: invalid ARP target specified [ 987.723255][T17799] nbd: socks must be embedded in a SOCK_ITEM attr [ 987.744175][T17805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2432'. [ 987.757504][T17799] block nbd0: shutting down sockets [ 987.851750][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2431'. [ 989.149034][ T8203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.173166][T13978] Bluetooth: hci1: command tx timeout [ 989.531833][ T8203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.074529][ T8203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.209693][T17788] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.257413][T17788] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.264832][T17788] bridge_slave_0: entered allmulticast mode [ 990.275037][T17788] bridge_slave_0: entered promiscuous mode [ 990.286183][T17788] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.293577][T17788] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.308696][T17788] bridge_slave_1: entered allmulticast mode [ 990.322242][T17788] bridge_slave_1: entered promiscuous mode [ 990.599600][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 990.607762][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 990.671333][T17788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.722695][T17788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.820416][T17838] futex_wake_op: syz.1.2438 tries to shift op by -2048; fix this program [ 990.853944][T17838] futex_wake_op: syz.1.2438 tries to shift op by -2048; fix this program [ 990.895916][T17840] 0x000000000001-0x000000020000 : "" [ 990.930634][T17840] ftl_cs: FTL header corrupt! [ 991.187335][ T30] audit: type=1800 audit(4295006777.533:91): pid=17846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2438" name="lu_gp_id" dev="configfs" ino=92118 res=0 errno=0 [ 991.237366][T13978] Bluetooth: hci1: command tx timeout [ 991.304919][T17838] kstrtoul() returned -22 for lu_gp_id [ 991.343872][T17788] team0: Port device team_slave_0 added [ 991.378835][T17788] team0: Port device team_slave_1 added [ 991.426663][ T8203] bridge_slave_1: left allmulticast mode [ 991.443780][ T8203] bridge_slave_1: left promiscuous mode [ 991.458443][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.495770][ T8203] bridge_slave_0: left allmulticast mode [ 991.514044][ T8203] bridge_slave_0: left promiscuous mode [ 991.530984][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.235178][ T8203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.282202][ T8203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.324681][ T8203] bond0 (unregistering): Released all slaves [ 992.531607][ T8203] tipc: Left network mode [ 992.560706][T17788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.569364][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.603745][T17788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.809909][T17788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.823557][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.890329][T17788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.961081][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 993.171024][T17788] hsr_slave_0: entered promiscuous mode [ 993.184942][T17788] hsr_slave_1: entered promiscuous mode [ 993.199400][T17788] debugfs: 'hsr0' already exists in 'hsr' [ 993.214885][T17788] Cannot create hsr debugfs directory [ 993.301082][T13978] Bluetooth: hci1: command tx timeout [ 993.448425][T17863] Process accounting resumed [ 994.405657][T17886] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 994.678765][T17907] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 994.857857][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 995.370245][T13978] Bluetooth: hci1: command tx timeout [ 997.496887][T17788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 997.525355][T17788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 997.616872][T17788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 997.670283][T17788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.734626][T17788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 997.754865][T17788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 997.778329][T17788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 997.797259][T17788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 997.925234][T17954] FAULT_INJECTION: forcing a failure. [ 997.925234][T17954] name failslab, interval 1, probability 0, space 0, times 0 [ 997.977316][T17954] CPU: 1 UID: 0 PID: 17954 Comm: syz.3.2452 Tainted: G L syzkaller #0 PREEMPT(full) [ 997.977370][T17954] Tainted: [L]=SOFTLOCKUP [ 997.977383][T17954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 997.977404][T17954] Call Trace: [ 997.977415][T17954] [ 997.977428][T17954] dump_stack_lvl+0x100/0x190 [ 997.977470][T17954] should_fail_ex.cold+0x5/0xa [ 997.977524][T17954] should_failslab+0xc2/0x120 [ 997.977564][T17954] __kmalloc_cache_noprof+0x7a/0x6f0 [ 997.977615][T17954] ? tomoyo_open_control+0x56/0xa20 [ 997.977648][T17954] ? __pfx_apparmor_file_open+0x10/0x10 [ 997.977692][T17954] tomoyo_open_control+0x56/0xa20 [ 997.977732][T17954] do_dentry_open+0x6ab/0x14d0 [ 997.977774][T17954] ? __pfx_tomoyo_open+0x10/0x10 [ 997.977832][T17954] vfs_open+0x82/0x3f0 [ 997.977888][T17954] path_openat+0x208c/0x31a0 [ 997.977945][T17954] ? __pfx_path_openat+0x10/0x10 [ 997.978003][T17954] do_file_open+0x20e/0x430 [ 997.978049][T17954] ? __pfx_do_file_open+0x10/0x10 [ 997.978123][T17954] ? alloc_fd+0x476/0x790 [ 997.978168][T17954] ? do_getname+0x191/0x390 [ 997.978223][T17954] do_sys_openat2+0x10d/0x1e0 [ 997.978277][T17954] ? __pfx_do_sys_openat2+0x10/0x10 [ 997.978332][T17954] ? do_raw_spin_lock+0x128/0x260 [ 997.978380][T17954] __x64_sys_openat+0x12d/0x210 [ 997.978438][T17954] ? __pfx___x64_sys_openat+0x10/0x10 [ 997.978510][T17954] ? rcu_is_watching+0x12/0xc0 [ 997.978556][T17954] do_syscall_64+0x115/0x840 [ 997.978605][T17954] ? clear_bhb_loop+0x40/0x90 [ 997.978646][T17954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.978681][T17954] RIP: 0033:0x7f09bc59ce59 [ 997.978709][T17954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.978743][T17954] RSP: 002b:00007f09bd475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 997.978779][T17954] RAX: ffffffffffffffda RBX: 00007f09bc816090 RCX: 00007f09bc59ce59 [ 997.978803][T17954] RDX: 0000000000000002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 997.978825][T17954] RBP: 00007f09bc632d6f R08: 0000000000000000 R09: 0000000000000000 [ 997.978845][T17954] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 997.978865][T17954] R13: 00007f09bc816128 R14: 00007f09bc816090 R15: 00007fff865d2248 [ 997.978909][T17954] [ 999.100320][T17788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.198363][T17988] FAULT_INJECTION: forcing a failure. [ 999.198363][T17988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.251587][T17988] CPU: 1 UID: 0 PID: 17988 Comm: syz.3.2455 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.251640][T17988] Tainted: [L]=SOFTLOCKUP [ 999.251652][T17988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 999.251672][T17988] Call Trace: [ 999.251683][T17988] [ 999.251697][T17988] dump_stack_lvl+0x100/0x190 [ 999.251738][T17988] should_fail_ex.cold+0x5/0xa [ 999.251781][T17988] _copy_from_user+0x2e/0xd0 [ 999.251840][T17988] copy_msghdr_from_user+0x9f/0x4f0 [ 999.251889][T17988] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 999.251943][T17988] ? rcu_is_watching+0x12/0xc0 [ 999.251981][T17988] ? ___sys_sendmsg+0x19d/0x1e0 [ 999.252024][T17988] ? kfree+0x1dd/0x6c0 [ 999.252078][T17988] ___sys_sendmsg+0x106/0x1e0 [ 999.252129][T17988] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.252213][T17988] ? __pfx___might_resched+0x10/0x10 [ 999.252260][T17988] __sys_sendmmsg+0x205/0x430 [ 999.252301][T17988] ? __pfx___sys_sendmmsg+0x10/0x10 [ 999.252351][T17988] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 999.252421][T17988] ? fput+0x79/0x100 [ 999.252468][T17988] ? ksys_write+0x1ac/0x250 [ 999.252505][T17988] ? __pfx_ksys_write+0x10/0x10 [ 999.252551][T17988] __x64_sys_sendmmsg+0x9c/0x100 [ 999.252587][T17988] ? lockdep_hardirqs_on+0x78/0x100 [ 999.252634][T17988] do_syscall_64+0x115/0x840 [ 999.252680][T17988] ? clear_bhb_loop+0x40/0x90 [ 999.252721][T17988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.252755][T17988] RIP: 0033:0x7f09bc59ce59 [ 999.252781][T17988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.252821][T17988] RSP: 002b:00007f09bd496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 999.252853][T17988] RAX: ffffffffffffffda RBX: 00007f09bc815fa0 RCX: 00007f09bc59ce59 [ 999.252875][T17988] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 999.252894][T17988] RBP: 00007f09bd496090 R08: 0000000000000000 R09: 0000000000000000 [ 999.252912][T17988] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 999.252931][T17988] R13: 00007f09bc816038 R14: 00007f09bc815fa0 R15: 00007fff865d2248 [ 999.252977][T17988] [ 999.893617][T17788] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.317549][T13774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.324865][T13774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.363932][T18003] zram: Added device: zram1 [ 1000.634719][T18012] bond0: invalid ARP target specified [ 1000.673819][T18017] nbd: socks must be embedded in a SOCK_ITEM attr [ 1000.681265][T13774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.688559][T13774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.690674][T18017] block nbd0: shutting down sockets [ 1000.770916][T18012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2457'. [ 1002.955833][ T8203] hsr_slave_1: left promiscuous mode [ 1002.971483][ T8203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.991152][ T8203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.034719][ T8203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.050328][ T8203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.145158][ T8203] veth1_macvtap: left promiscuous mode [ 1003.207615][ T8203] veth0_macvtap: left promiscuous mode [ 1003.218656][ T8203] veth1_vlan: left promiscuous mode [ 1003.224924][ T8203] veth0_vlan: left promiscuous mode [ 1004.068018][T18075] FAULT_INJECTION: forcing a failure. [ 1004.068018][T18075] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.106609][T18075] CPU: 1 UID: 0 PID: 18075 Comm: syz.1.2462 Tainted: G L syzkaller #0 PREEMPT(full) [ 1004.106665][T18075] Tainted: [L]=SOFTLOCKUP [ 1004.106691][T18075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1004.106711][T18075] Call Trace: [ 1004.106722][T18075] [ 1004.106736][T18075] dump_stack_lvl+0x100/0x190 [ 1004.106779][T18075] should_fail_ex.cold+0x5/0xa [ 1004.106826][T18075] should_failslab+0xc2/0x120 [ 1004.106868][T18075] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1004.106926][T18075] ? __d_alloc+0x34/0xa40 [ 1004.106979][T18075] __d_alloc+0x34/0xa40 [ 1004.107029][T18075] d_alloc+0x4a/0x1e0 [ 1004.107077][T18075] lookup_one_qstr_excl+0x171/0x250 [ 1004.107136][T18075] start_dirop+0x59/0xb0 [ 1004.107176][T18075] simple_start_creating+0xf9/0x110 [ 1004.107218][T18075] ? __pfx_simple_start_creating+0x10/0x10 [ 1004.107259][T18075] ? mntput+0x70/0xa0 [ 1004.107293][T18075] ? simple_pin_fs+0xa3/0x190 [ 1004.107331][T18075] debugfs_start_creating.part.0+0x82/0x170 [ 1004.107369][T18075] __debugfs_create_file+0xb3/0x4f0 [ 1004.107421][T18075] debugfs_create_file_full+0x41/0x60 [ 1004.107463][T18075] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1004.107499][T18075] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1004.107571][T18075] ? lockdep_init_map_type+0x5c/0x250 [ 1004.107633][T18075] preinit_net.part.0+0x43b/0x920 [ 1004.107674][T18075] copy_net_ns+0x339/0x7c0 [ 1004.107721][T18075] create_new_namespaces+0x3ea/0xac0 [ 1004.107774][T18075] unshare_nsproxy_namespaces+0xf2/0x220 [ 1004.107829][T18075] ksys_unshare+0x438/0xab0 [ 1004.107883][T18075] ? __pfx_ksys_unshare+0x10/0x10 [ 1004.107938][T18075] ? ksys_write+0x1ac/0x250 [ 1004.107990][T18075] __x64_sys_unshare+0x31/0x40 [ 1004.108037][T18075] do_syscall_64+0x115/0x840 [ 1004.108085][T18075] ? clear_bhb_loop+0x40/0x90 [ 1004.108128][T18075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.108162][T18075] RIP: 0033:0x7fa8e599ce59 [ 1004.108191][T18075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.108227][T18075] RSP: 002b:00007fa8e6805028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1004.108258][T18075] RAX: ffffffffffffffda RBX: 00007fa8e5c15fa0 RCX: 00007fa8e599ce59 [ 1004.108280][T18075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1004.108301][T18075] RBP: 00007fa8e5a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1004.108321][T18075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.108339][T18075] R13: 00007fa8e5c16038 R14: 00007fa8e5c15fa0 R15: 00007ffcbb0ddc38 [ 1004.108378][T18075] [ 1004.449028][ T8203] team0 (unregistering): Port device team_slave_1 removed [ 1004.484220][ T8203] team0 (unregistering): Port device team_slave_0 removed [ 1005.333644][T17788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.709994][T18094] Line length is too long: Should be less than 4094 [ 1005.923766][T17788] veth0_vlan: entered promiscuous mode [ 1006.288706][T18098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2463'. [ 1006.537116][ T8203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.549125][ T8203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.603158][ T8203] bond0 (unregistering): Released all slaves [ 1007.114131][T17788] veth1_vlan: entered promiscuous mode [ 1007.229925][ T8203] tipc: Left network mode [ 1007.616203][T17788] veth0_macvtap: entered promiscuous mode [ 1007.799422][T17788] veth1_macvtap: entered promiscuous mode [ 1007.878078][T17788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.988614][T17788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.052911][ T6376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.096509][ T6376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.125592][T18117] bond0: invalid ARP target specified [ 1008.170460][ T6376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.190602][ T6376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.226350][T18117] nbd: socks must be embedded in a SOCK_ITEM attr [ 1008.265657][T18120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2469'. [ 1008.278877][T18117] block nbd0: shutting down sockets [ 1008.560795][T18126] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2470'. [ 1009.132837][T13786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.184082][T13786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.356221][T18135] bond0: invalid ARP target specified [ 1009.449245][T18135] nbd: socks must be embedded in a SOCK_ITEM attr [ 1009.457825][T18135] block nbd0: shutting down sockets [ 1009.470423][T13786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.499858][T13786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.508385][T18135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2473'. [ 1010.289196][ T9367] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1010.308629][ T9367] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1010.322860][ T9367] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1010.339385][ T9367] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1010.350522][ T9367] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1012.402041][T13978] Bluetooth: hci3: command tx timeout [ 1013.471419][ T8203] hsr_slave_0: left promiscuous mode [ 1013.487289][ T8203] hsr_slave_1: left promiscuous mode [ 1013.496449][ T8203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.510773][ T8203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.540313][ T8203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.557398][ T8203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.573928][ T8203] veth1_macvtap: left promiscuous mode [ 1013.582501][ T8203] veth0_macvtap: left promiscuous mode [ 1013.982994][ T8203] team0 (unregistering): Port device team_slave_1 removed [ 1014.021087][ T8203] team0 (unregistering): Port device team_slave_0 removed [ 1014.471762][T13978] Bluetooth: hci3: command tx timeout [ 1015.439402][T18154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.456475][T18154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.464946][T18154] bridge_slave_0: entered allmulticast mode [ 1015.479749][T18154] bridge_slave_0: entered promiscuous mode [ 1015.494170][T18154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.512403][T18154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.519956][T18154] bridge_slave_1: entered allmulticast mode [ 1015.531227][T18154] bridge_slave_1: entered promiscuous mode [ 1015.633547][T18154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.660409][T18154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.783572][ T8203] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.908116][T18154] team0: Port device team_slave_0 added [ 1015.962163][T18208] FAULT_INJECTION: forcing a failure. [ 1015.962163][T18208] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.993710][T18154] team0: Port device team_slave_1 added [ 1016.006217][T18208] CPU: 0 UID: 0 PID: 18208 Comm: syz.0.2485 Tainted: G L syzkaller #0 PREEMPT(full) [ 1016.006280][T18208] Tainted: [L]=SOFTLOCKUP [ 1016.006291][T18208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1016.006310][T18208] Call Trace: [ 1016.006320][T18208] [ 1016.006341][T18208] dump_stack_lvl+0x100/0x190 [ 1016.006380][T18208] should_fail_ex.cold+0x5/0xa [ 1016.006420][T18208] should_failslab+0xc2/0x120 [ 1016.006456][T18208] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1016.006499][T18208] ? sctp_add_bind_addr+0xae/0x3e0 [ 1016.006547][T18208] ? __sctp_v6_cmp_addr+0x206/0x530 [ 1016.006584][T18208] sctp_add_bind_addr+0xae/0x3e0 [ 1016.006634][T18208] sctp_copy_local_addr_list+0x349/0x550 [ 1016.006671][T18208] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1016.006707][T18208] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 1016.006742][T18208] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1016.006788][T18208] sctp_bind_addr_copy+0xe0/0x530 [ 1016.006843][T18208] sctp_connect_new_asoc+0x1c9/0x770 [ 1016.006885][T18208] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1016.006922][T18208] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 1016.006956][T18208] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 1016.007002][T18208] __sctp_connect+0x3e7/0xc70 [ 1016.007049][T18208] ? __pfx___sctp_connect+0x10/0x10 [ 1016.007090][T18208] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1016.007129][T18208] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1016.007178][T18208] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1016.007220][T18208] sctp_inet_connect+0x15f/0x220 [ 1016.007263][T18208] __sys_connect_file+0x141/0x1a0 [ 1016.007316][T18208] __sys_connect+0x141/0x170 [ 1016.007375][T18208] ? __pfx___sys_connect+0x10/0x10 [ 1016.007422][T18208] ? __fget_files+0x21f/0x3d0 [ 1016.007475][T18208] ? __pfx_ksys_write+0x10/0x10 [ 1016.007522][T18208] __x64_sys_connect+0x72/0xb0 [ 1016.007571][T18208] ? lockdep_hardirqs_on+0x78/0x100 [ 1016.007617][T18208] do_syscall_64+0x115/0x840 [ 1016.007660][T18208] ? clear_bhb_loop+0x40/0x90 [ 1016.007701][T18208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.007737][T18208] RIP: 0033:0x7f8092d9ce59 [ 1016.007765][T18208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.007796][T18208] RSP: 002b:00007f8093ca4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1016.007827][T18208] RAX: ffffffffffffffda RBX: 00007f8093015fa0 RCX: 00007f8092d9ce59 [ 1016.007848][T18208] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 1016.007868][T18208] RBP: 00007f8093ca4090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.007887][T18208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1016.007906][T18208] R13: 00007f8093016038 R14: 00007f8093015fa0 R15: 00007fff19df4068 [ 1016.007948][T18208] [ 1016.534876][ T8203] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.548904][T13978] Bluetooth: hci3: command tx timeout [ 1016.635254][T18154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.673736][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.715336][T18154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.774534][T18154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.786216][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.812926][T18154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.915962][ T8203] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.048676][ T8203] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.121781][T18154] hsr_slave_0: entered promiscuous mode [ 1017.129811][T18154] hsr_slave_1: entered promiscuous mode [ 1017.136195][T18154] debugfs: 'hsr0' already exists in 'hsr' [ 1017.142322][T18154] Cannot create hsr debugfs directory [ 1017.232565][ T8203] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.648118][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 1018.551626][ T8203] bridge_slave_1: left allmulticast mode [ 1018.585936][ T8203] bridge_slave_1: left promiscuous mode [ 1018.612269][T13978] Bluetooth: hci3: command tx timeout [ 1018.622069][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.725702][ T8203] bridge_slave_0: left allmulticast mode [ 1018.756242][ T8203] bridge_slave_0: left promiscuous mode [ 1018.772685][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.781448][ T8203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.797807][ T8203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.816527][ T8203] bond0 (unregistering): Released all slaves [ 1020.125720][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1020.161487][ T8203] ovs_ÿþÿþ?: left promiscuous mode [ 1020.327084][ T8203] ovs_: left promiscuous mode [ 1023.232494][T18154] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1023.270354][T18154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1023.286337][T18154] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1023.302202][T18154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1023.336298][T18154] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1023.444941][T18154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1023.523442][T18154] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1023.566020][T18154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1023.745348][T18305] Process accounting paused [ 1024.571682][T18154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.696739][T18154] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.779217][T13774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.786737][T13774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.931181][T13768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.938420][T13768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.037663][T18348] bond0: invalid ARP target specified [ 1026.281464][T18348] nbd: socks must be embedded in a SOCK_ITEM attr [ 1026.302563][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2502'. [ 1026.328443][T18348] block nbd0: shutting down sockets [ 1026.773722][T18367] FAULT_INJECTION: forcing a failure. [ 1026.773722][T18367] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1026.836785][T18367] CPU: 0 UID: 0 PID: 18367 Comm: syz.1.2504 Tainted: G L syzkaller #0 PREEMPT(full) [ 1026.836833][T18367] Tainted: [L]=SOFTLOCKUP [ 1026.836844][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1026.836864][T18367] Call Trace: [ 1026.836875][T18367] [ 1026.836888][T18367] dump_stack_lvl+0x100/0x190 [ 1026.836930][T18367] should_fail_ex.cold+0x5/0xa [ 1026.836992][T18367] ? prepare_alloc_pages+0x16d/0x5f0 [ 1026.837040][T18367] should_fail_alloc_page+0xeb/0x140 [ 1026.837084][T18367] prepare_alloc_pages+0x1f0/0x5f0 [ 1026.837127][T18367] ? is_bpf_text_address+0x94/0x1a0 [ 1026.837214][T18367] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1026.837278][T18367] ? __lock_acquire+0x4a5/0x2630 [ 1026.837338][T18367] ? _parse_integer_limit+0x17f/0x1d0 [ 1026.837376][T18367] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1026.837438][T18367] ? find_held_lock+0x2b/0x80 [ 1026.837480][T18367] ? aa_file_perm+0x7e4/0x14d0 [ 1026.837527][T18367] ? aa_file_perm+0x7e4/0x14d0 [ 1026.837583][T18367] ? aa_file_perm+0x7f3/0x14d0 [ 1026.837637][T18367] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1026.837689][T18367] ? policy_nodemask+0xed/0x4f0 [ 1026.837733][T18367] alloc_pages_mpol+0x1fb/0x540 [ 1026.837773][T18367] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1026.837813][T18367] ? lock_acquire+0x1b1/0x370 [ 1026.837871][T18367] alloc_pages_noprof+0x1a/0x160 [ 1026.837924][T18367] get_free_pages_noprof+0x10/0xb0 [ 1026.837967][T18367] mem_rw+0x94/0x640 [ 1026.838020][T18367] vfs_write+0x2aa/0x1070 [ 1026.838060][T18367] ? __pfx_mem_write+0x10/0x10 [ 1026.838110][T18367] ? __pfx_vfs_write+0x10/0x10 [ 1026.838148][T18367] ? __fget_files+0x215/0x3d0 [ 1026.838198][T18367] ? __fget_files+0x21f/0x3d0 [ 1026.838250][T18367] ksys_write+0x12a/0x250 [ 1026.838289][T18367] ? __pfx_ksys_write+0x10/0x10 [ 1026.838332][T18367] ? rcu_is_watching+0x12/0xc0 [ 1026.838378][T18367] do_syscall_64+0x115/0x840 [ 1026.838425][T18367] ? clear_bhb_loop+0x40/0x90 [ 1026.838465][T18367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.838495][T18367] RIP: 0033:0x7fa8e599ce59 [ 1026.838523][T18367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.838554][T18367] RSP: 002b:00007fa8e6805028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1026.838586][T18367] RAX: ffffffffffffffda RBX: 00007fa8e5c15fa0 RCX: 00007fa8e599ce59 [ 1026.838608][T18367] RDX: 00000000fffffc96 RSI: 0000200000001680 RDI: 0000000000000003 [ 1026.838628][T18367] RBP: 00007fa8e6805090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.838648][T18367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.838667][T18367] R13: 00007fa8e5c16038 R14: 00007fa8e5c15fa0 R15: 00007ffcbb0ddc38 [ 1026.838710][T18367] [ 1027.280375][T18154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.313703][T18154] veth0_vlan: entered promiscuous mode [ 1027.324670][T18154] veth1_vlan: entered promiscuous mode [ 1027.348429][T18154] veth0_macvtap: entered promiscuous mode [ 1027.357717][T18154] veth1_macvtap: entered promiscuous mode [ 1027.374161][T18154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.384973][T18154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.464990][T13774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.474179][T13774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.554095][T13774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.795777][T13774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.343590][ T8203] hsr_slave_0: left promiscuous mode [ 1028.377584][ T8203] hsr_slave_1: left promiscuous mode [ 1028.399618][ T8203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.436211][ T8203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.462036][ T8203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.474891][ T8203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.532009][ T8203] veth1_macvtap: left promiscuous mode [ 1028.549371][ T8203] veth0_macvtap: left promiscuous mode [ 1029.256501][ T8203] team0 (unregistering): Port device team_slave_1 removed [ 1029.349064][ T8203] team0 (unregistering): Port device team_slave_0 removed [ 1029.547954][T18413] futex_wake_op: syz.0.2509 tries to shift op by -2048; fix this program [ 1029.602452][T18413] futex_wake_op: syz.0.2509 tries to shift op by -2048; fix this program [ 1029.658272][T18413] 0x000000000001-0x000000020000 : "" [ 1029.697221][T18413] ftl_cs: FTL header corrupt! [ 1030.057383][T13787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.086585][T13787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.275522][T13786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.301367][T13786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.300607][T18432] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1032.609850][T18445] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1033.580062][T18467] random: crng reseeded on system resumption [ 1037.596948][T18525] can: request_module (can-proto-3) failed. [ 1037.909559][T18533] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1037.922255][T18531] FAULT_INJECTION: forcing a failure. [ 1037.922255][T18531] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.940170][T18535] FAULT_INJECTION: forcing a failure. [ 1037.940170][T18535] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.958805][T18533] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1037.993655][T18535] CPU: 1 UID: 0 PID: 18535 Comm: syz.1.2527 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.993720][T18535] Tainted: [L]=SOFTLOCKUP [ 1037.993730][T18535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1037.993746][T18535] Call Trace: [ 1037.993757][T18535] [ 1037.993768][T18535] dump_stack_lvl+0x100/0x190 [ 1037.993802][T18535] should_fail_ex.cold+0x5/0xa [ 1037.993836][T18535] should_failslab+0xc2/0x120 [ 1037.993869][T18535] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1037.993909][T18535] ? __do_sys_fanotify_init+0x608/0xe80 [ 1037.993948][T18535] __do_sys_fanotify_init+0x608/0xe80 [ 1037.993982][T18535] do_syscall_64+0x115/0x840 [ 1037.994019][T18535] ? clear_bhb_loop+0x40/0x90 [ 1037.994051][T18535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.994077][T18535] RIP: 0033:0x7fa8e599ce59 [ 1037.994099][T18535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.994124][T18535] RSP: 002b:00007fa8e6805028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1037.994148][T18535] RAX: ffffffffffffffda RBX: 00007fa8e5c15fa0 RCX: 00007fa8e599ce59 [ 1037.994165][T18535] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000c00 [ 1037.994181][T18535] RBP: 00007fa8e5a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1037.994196][T18535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.994223][T18535] R13: 00007fa8e5c16038 R14: 00007fa8e5c15fa0 R15: 00007ffcbb0ddc38 [ 1037.994256][T18535] [ 1038.189204][T18531] CPU: 0 UID: 0 PID: 18531 Comm: syz.0.2525 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.189262][T18531] Tainted: [L]=SOFTLOCKUP [ 1038.189274][T18531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1038.189295][T18531] Call Trace: [ 1038.189307][T18531] [ 1038.189321][T18531] dump_stack_lvl+0x100/0x190 [ 1038.189364][T18531] should_fail_ex.cold+0x5/0xa [ 1038.189411][T18531] should_failslab+0xc2/0x120 [ 1038.189455][T18531] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1038.189509][T18531] ? tomoyo_open_control+0x56/0xa20 [ 1038.189547][T18531] ? __pfx_apparmor_file_open+0x10/0x10 [ 1038.189593][T18531] tomoyo_open_control+0x56/0xa20 [ 1038.189635][T18531] do_dentry_open+0x6ab/0x14d0 [ 1038.189680][T18531] ? __pfx_tomoyo_open+0x10/0x10 [ 1038.189740][T18531] vfs_open+0x82/0x3f0 [ 1038.189799][T18531] path_openat+0x208c/0x31a0 [ 1038.189860][T18531] ? __pfx_path_openat+0x10/0x10 [ 1038.189933][T18531] do_file_open+0x20e/0x430 [ 1038.189982][T18531] ? __pfx_do_file_open+0x10/0x10 [ 1038.190059][T18531] ? alloc_fd+0x476/0x790 [ 1038.190110][T18531] ? do_getname+0x191/0x390 [ 1038.190166][T18531] do_sys_openat2+0x10d/0x1e0 [ 1038.190220][T18531] ? __pfx_do_sys_openat2+0x10/0x10 [ 1038.190278][T18531] ? do_raw_spin_lock+0x128/0x260 [ 1038.190329][T18531] __x64_sys_openat+0x12d/0x210 [ 1038.190385][T18531] ? __pfx___x64_sys_openat+0x10/0x10 [ 1038.190449][T18531] ? rcu_is_watching+0x12/0xc0 [ 1038.190496][T18531] do_syscall_64+0x115/0x840 [ 1038.190544][T18531] ? clear_bhb_loop+0x40/0x90 [ 1038.190587][T18531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.190623][T18531] RIP: 0033:0x7f8092d9ce59 [ 1038.190656][T18531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.190692][T18531] RSP: 002b:00007f8093c83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1038.190727][T18531] RAX: ffffffffffffffda RBX: 00007f8093016090 RCX: 00007f8092d9ce59 [ 1038.190751][T18531] RDX: 0000000000000002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1038.190774][T18531] RBP: 00007f8092e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1038.190796][T18531] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 1038.190817][T18531] R13: 00007f8093016128 R14: 00007f8093016090 R15: 00007fff19df4068 [ 1038.190862][T18531] [ 1038.437698][T18533] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1038.565910][T18533] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1038.572165][T18533] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1038.657304][T18533] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1038.726437][T18533] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1038.736039][T18533] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1038.791984][T18533] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1038.857400][T18533] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1038.874952][T18533] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1038.931020][T18533] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1039.938459][ T9367] Bluetooth: hci4: command 0x0c1a tx timeout [ 1040.575410][ T9367] Bluetooth: hci0: command 0x0c1a tx timeout [ 1040.742536][ T9367] Bluetooth: hci1: command 0x0c1a tx timeout [ 1040.895460][ T9367] Bluetooth: hci3: command 0x0c1a tx timeout [ 1041.515604][T18580] FAULT_INJECTION: forcing a failure. [ 1041.515604][T18580] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.539790][T18580] CPU: 1 UID: 0 PID: 18580 Comm: syz.1.2535 Tainted: G L syzkaller #0 PREEMPT(full) [ 1041.539852][T18580] Tainted: [L]=SOFTLOCKUP [ 1041.539865][T18580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1041.539887][T18580] Call Trace: [ 1041.539899][T18580] [ 1041.539914][T18580] dump_stack_lvl+0x100/0x190 [ 1041.539962][T18580] should_fail_ex.cold+0x5/0xa [ 1041.540012][T18580] should_failslab+0xc2/0x120 [ 1041.540056][T18580] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1041.540116][T18580] ? ptlock_alloc+0x1f/0x70 [ 1041.540179][T18580] ptlock_alloc+0x1f/0x70 [ 1041.540234][T18580] pte_alloc_one+0x82/0x3d0 [ 1041.540285][T18580] __pte_alloc+0x6d/0x380 [ 1041.540326][T18580] ? __pfx___pte_alloc+0x10/0x10 [ 1041.540366][T18580] ? walk_pgd_range+0x1391/0x1dd0 [ 1041.540402][T18580] ? walk_pgd_range+0x1391/0x1dd0 [ 1041.540445][T18580] walk_pgd_range+0xb99/0x1dd0 [ 1041.540489][T18580] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1041.540537][T18580] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 1041.540589][T18580] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1041.540650][T18580] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1041.540702][T18580] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1041.540747][T18580] ? __pfx_walk_pgd_range+0x10/0x10 [ 1041.540796][T18580] __walk_page_range+0x171/0x850 [ 1041.540837][T18580] ? find_vma+0xbf/0x140 [ 1041.540879][T18580] ? __pfx_find_vma+0x10/0x10 [ 1041.540922][T18580] ? walk_page_test+0x78/0x180 [ 1041.540960][T18580] walk_page_range_mm_unsafe+0x563/0xa10 [ 1041.541007][T18580] ? __pfx_walk_page_range_mm_unsafe+0x10/0x10 [ 1041.541070][T18580] madvise_guard_install+0x2dd/0x790 [ 1041.541132][T18580] ? __pfx_madvise_guard_install+0x10/0x10 [ 1041.541186][T18580] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 1041.541230][T18580] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 1041.541276][T18580] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 1041.541329][T18580] ? __pfx_guard_install_set_pte+0x10/0x10 [ 1041.541379][T18580] ? find_held_lock+0x2b/0x80 [ 1041.541423][T18580] ? mt_find+0x687/0x8e0 [ 1041.541482][T18580] madvise_vma_behavior+0xb9b/0x2240 [ 1041.541535][T18580] ? mt_find+0x45e/0x8e0 [ 1041.541588][T18580] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1041.541650][T18580] ? __pfx_mt_find+0x10/0x10 [ 1041.541714][T18580] ? find_vma_prev+0xd8/0x150 [ 1041.541757][T18580] ? lock_vma_under_rcu+0x1f9/0x590 [ 1041.541824][T18580] ? find_vma+0xbf/0x140 [ 1041.541863][T18580] ? __pfx_find_vma+0x10/0x10 [ 1041.541902][T18580] ? madvise_do_behavior+0x1ea/0x510 [ 1041.541950][T18580] ? madvise_do_behavior+0x1ea/0x510 [ 1041.542007][T18580] madvise_walk_vmas+0x2fe/0xa90 [ 1041.542065][T18580] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1041.542132][T18580] ? futex_hash+0x2ad/0x370 [ 1041.542196][T18580] madvise_do_behavior+0x1ea/0x510 [ 1041.542248][T18580] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1041.542295][T18580] ? futex_wait+0x11e/0x370 [ 1041.542352][T18580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1041.542408][T18580] do_madvise+0x195/0x240 [ 1041.542456][T18580] ? __pfx_do_madvise+0x10/0x10 [ 1041.542502][T18580] ? do_futex+0x192/0x350 [ 1041.542580][T18580] __x64_sys_madvise+0xa9/0x110 [ 1041.542639][T18580] ? lockdep_hardirqs_on+0x78/0x100 [ 1041.542692][T18580] do_syscall_64+0x115/0x840 [ 1041.542741][T18580] ? clear_bhb_loop+0x40/0x90 [ 1041.542783][T18580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.542820][T18580] RIP: 0033:0x7fa8e599ce59 [ 1041.542855][T18580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.542892][T18580] RSP: 002b:00007fa8e6805028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1041.542928][T18580] RAX: ffffffffffffffda RBX: 00007fa8e5c15fa0 RCX: 00007fa8e599ce59 [ 1041.542953][T18580] RDX: 0000000000000066 RSI: 0000000100000000 RDI: 0000000000000000 [ 1041.542974][T18580] RBP: 00007fa8e5a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1041.542995][T18580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.543016][T18580] R13: 00007fa8e5c16038 R14: 00007fa8e5c15fa0 R15: 00007ffcbb0ddc38 [ 1041.543062][T18580] [ 1042.007655][ T9367] Bluetooth: hci4: command 0x0c1a tx timeout [ 1042.654420][ T9367] Bluetooth: hci0: command 0x0c1a tx timeout [ 1042.724822][T18599] nbd: socks must be embedded in a SOCK_ITEM attr [ 1042.741376][T18599] block nbd0: shutting down sockets [ 1042.789796][T18601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2538'. [ 1042.808206][ T9367] Bluetooth: hci1: command 0x0c1a tx timeout [ 1042.977856][ T9367] Bluetooth: hci3: command 0x0c1a tx timeout [ 1043.112597][T18604] nbd: socks must be embedded in a SOCK_ITEM attr [ 1043.178706][T18604] block nbd0: shutting down sockets [ 1043.215361][T18605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2539'. [ 1043.324215][T18603] bond0: invalid ARP target specified [ 1044.081115][ T9367] Bluetooth: hci4: command 0x0c1a tx timeout [ 1044.714529][ T9367] Bluetooth: hci0: command 0x0c1a tx timeout [ 1044.877078][ T9367] Bluetooth: hci1: command 0x0c1a tx timeout [ 1045.036582][ T9367] Bluetooth: hci3: command 0x0c1a tx timeout [ 1048.465505][T18671] binder: 18670:18671 ioctl c004620b 3 returned -22 [ 1050.062852][T18692] bond0: invalid ARP target specified [ 1050.145463][T18692] nbd: socks must be embedded in a SOCK_ITEM attr [ 1050.219212][T18692] block nbd0: shutting down sockets [ 1051.053890][T13774] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.221189][ T9367] Bluetooth: hci3: unexpected subevent 0x1b length: 0 < 18 [ 1051.341021][T18720] Format for deleting device is "id" (uint). [ 1051.406141][T18720] sctp: [Deprecated]: syz.0.2565 (pid 18720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1051.406141][T18720] Use struct sctp_sack_info instead [ 1051.431096][T18721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2564'. [ 1051.453632][T18721] openvswitch: netlink: IP tunnel dst address not specified [ 1051.721925][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1051.728593][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1052.124349][T18735] bond0: invalid ARP target specified [ 1052.204816][T18735] nbd: socks must be embedded in a SOCK_ITEM attr [ 1052.224819][T18735] block nbd0: shutting down sockets [ 1053.873213][ C0] sd 0:0:1:0: [sda] tag#3233 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1053.883882][ C0] sd 0:0:1:0: [sda] tag#3233 CDB: Write(6) 0a 00 00 00 0b 00 00 00 00 00 00 00 [ 1054.393248][T18748] Process accounting resumed [ 1056.893476][ T9367] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1060.676125][T18844] nbd: socks must be embedded in a SOCK_ITEM attr [ 1060.687270][T18844] block nbd0: shutting down sockets [ 1061.425191][T18864] : Can't lookup blockdev [ 1061.519019][ T9367] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1063.581355][ T9367] Bluetooth: hci4: command 0x0c1a tx timeout [ 1063.972324][T18898] FAULT_INJECTION: forcing a failure. [ 1063.972324][T18898] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.002959][T18898] CPU: 0 UID: 0 PID: 18898 Comm: syz.1.2599 Tainted: G L syzkaller #0 PREEMPT(full) [ 1064.003015][T18898] Tainted: [L]=SOFTLOCKUP [ 1064.003027][T18898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1064.003059][T18898] Call Trace: [ 1064.003070][T18898] [ 1064.003086][T18898] dump_stack_lvl+0x100/0x190 [ 1064.003129][T18898] should_fail_ex.cold+0x5/0xa [ 1064.003173][T18898] should_failslab+0xc2/0x120 [ 1064.003216][T18898] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1064.003270][T18898] ? alloc_empty_file+0x5b/0x1c0 [ 1064.003330][T18898] alloc_empty_file+0x5b/0x1c0 [ 1064.003382][T18898] alloc_file_pseudo+0x13a/0x230 [ 1064.003437][T18898] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1064.003491][T18898] ? alloc_fd+0x476/0x790 [ 1064.003541][T18898] sock_alloc_file+0x50/0x210 [ 1064.003584][T18898] __sys_socket+0x1c0/0x260 [ 1064.003640][T18898] ? __pfx___sys_socket+0x10/0x10 [ 1064.003683][T18898] ? ksys_write+0x1ac/0x250 [ 1064.003729][T18898] __x64_sys_socket+0x72/0xb0 [ 1064.003772][T18898] ? lockdep_hardirqs_on+0x78/0x100 [ 1064.003816][T18898] do_syscall_64+0x115/0x840 [ 1064.003859][T18898] ? clear_bhb_loop+0x40/0x90 [ 1064.003915][T18898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.003951][T18898] RIP: 0033:0x7fa8e599e6c7 [ 1064.003981][T18898] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.004017][T18898] RSP: 002b:00007fa8e6803f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1064.004051][T18898] RAX: ffffffffffffffda RBX: 00007fa8e5c15fa0 RCX: 00007fa8e599e6c7 [ 1064.004075][T18898] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1064.004097][T18898] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1064.004119][T18898] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 1064.004141][T18898] R13: 00007fa8e5c16038 R14: 00007fa8e5c15fa0 R15: 00007ffcbb0ddc38 [ 1064.004186][T18898] [ 1065.654342][ T9367] Bluetooth: hci4: command 0x0c1a tx timeout [ 1066.109521][T18922] bond0: invalid ARP target specified [ 1066.141145][T18921] FAULT_INJECTION: forcing a failure. [ 1066.141145][T18921] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.171012][T18921] CPU: 1 UID: 0 PID: 18921 Comm: syz.2.2604 Tainted: G L syzkaller #0 PREEMPT(full) [ 1066.171060][T18921] Tainted: [L]=SOFTLOCKUP [ 1066.171072][T18921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1066.171091][T18921] Call Trace: [ 1066.171102][T18921] [ 1066.171116][T18921] dump_stack_lvl+0x100/0x190 [ 1066.171158][T18921] should_fail_ex.cold+0x5/0xa [ 1066.171198][T18921] should_failslab+0xc2/0x120 [ 1066.171239][T18921] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1066.171288][T18921] ? proc_thread_self_get_link+0x1a6/0x210 [ 1066.171347][T18921] proc_thread_self_get_link+0x1a6/0x210 [ 1066.171390][T18921] pick_link+0xac2/0x13c0 [ 1066.171425][T18921] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1066.171471][T18921] step_into_slowpath+0x9ba/0xf90 [ 1066.171518][T18921] ? __pfx_step_into_slowpath+0x10/0x10 [ 1066.171563][T18921] ? lookup_fast+0x2da/0x600 [ 1066.171594][T18921] ? inode_permission+0x374/0x620 [ 1066.171651][T18921] link_path_walk+0xf28/0x1cc0 [ 1066.171703][T18921] path_openat+0x1be/0x31a0 [ 1066.171744][T18921] ? kasan_save_stack+0x3f/0x50 [ 1066.171778][T18921] ? kasan_save_stack+0x30/0x50 [ 1066.171813][T18921] ? kasan_save_track+0x14/0x30 [ 1066.171844][T18921] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1066.171904][T18921] ? __pfx_path_openat+0x10/0x10 [ 1066.171959][T18921] do_file_open+0x20e/0x430 [ 1066.172005][T18921] ? __pfx_do_file_open+0x10/0x10 [ 1066.172072][T18921] ? alloc_fd+0x476/0x790 [ 1066.172115][T18921] ? do_getname+0x191/0x390 [ 1066.172164][T18921] do_sys_openat2+0x10d/0x1e0 [ 1066.172217][T18921] ? __pfx_do_sys_openat2+0x10/0x10 [ 1066.172284][T18921] __x64_sys_openat+0x12d/0x210 [ 1066.172349][T18921] ? __pfx___x64_sys_openat+0x10/0x10 [ 1066.172400][T18921] ? ksys_write+0x1ac/0x250 [ 1066.172444][T18921] ? rcu_is_watching+0x12/0xc0 [ 1066.172488][T18921] do_syscall_64+0x115/0x840 [ 1066.172535][T18921] ? clear_bhb_loop+0x40/0x90 [ 1066.172576][T18921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.172611][T18921] RIP: 0033:0x7fccdb55d68e [ 1066.172639][T18921] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1066.172673][T18921] RSP: 002b:00007fccdc50bf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1066.172706][T18921] RAX: ffffffffffffffda RBX: 00007fccdc50c6c0 RCX: 00007fccdb55d68e [ 1066.172728][T18921] RDX: 0000000000000002 RSI: 00007fccdb632676 RDI: ffffffffffffff9c [ 1066.172750][T18921] RBP: 00007fccdb632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1066.172769][T18921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1066.172788][T18921] R13: 00007fccdb816038 R14: 00007fccdb815fa0 R15: 00007ffdfee84e48 [ 1066.172830][T18921] [ 1066.636513][T18921] FAULT_INJECTION: forcing a failure. [ 1066.636513][T18921] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.660169][T18922] nbd: socks must be embedded in a SOCK_ITEM attr [ 1066.675427][T18922] block nbd0: shutting down sockets [ 1066.749279][T18921] CPU: 0 UID: 0 PID: 18921 Comm: syz.2.2604 Tainted: G L syzkaller #0 PREEMPT(full) [ 1066.749330][T18921] Tainted: [L]=SOFTLOCKUP [ 1066.749342][T18921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1066.749362][T18921] Call Trace: [ 1066.749385][T18921] [ 1066.749398][T18921] dump_stack_lvl+0x100/0x190 [ 1066.749441][T18921] should_fail_ex.cold+0x5/0xa [ 1066.749485][T18921] should_failslab+0xc2/0x120 [ 1066.749526][T18921] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1066.749580][T18921] ? alloc_empty_file+0x5b/0x1c0 [ 1066.749638][T18921] alloc_empty_file+0x5b/0x1c0 [ 1066.749690][T18921] alloc_file_pseudo+0x13a/0x230 [ 1066.749744][T18921] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1066.749799][T18921] ? security_inode_init_security_anon+0x7b/0x230 [ 1066.749849][T18921] __anon_inode_getfile+0xe8/0x280 [ 1066.749906][T18921] new_userfaultfd+0x255/0x400 [ 1066.749948][T18921] __x64_sys_userfaultfd+0x4b/0xb0 [ 1066.749992][T18921] do_syscall_64+0x115/0x840 [ 1066.750039][T18921] ? clear_bhb_loop+0x40/0x90 [ 1066.750081][T18921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.750117][T18921] RIP: 0033:0x7fccdb59ce59 [ 1066.750143][T18921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.750177][T18921] RSP: 002b:00007fccdc50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1066.750209][T18921] RAX: ffffffffffffffda RBX: 00007fccdb815fa0 RCX: 00007fccdb59ce59 [ 1066.750231][T18921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1066.750250][T18921] RBP: 00007fccdc50c090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.750269][T18921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.750289][T18921] R13: 00007fccdb816038 R14: 00007fccdb815fa0 R15: 00007ffdfee84e48 [ 1066.750330][T18921] [ 1069.556564][T18962] nbd: socks must be embedded in a SOCK_ITEM attr [ 1069.740905][T18962] block nbd0: shutting down sockets [ 1071.181855][T18984] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input10 [ 1074.494819][T19021] FAULT_INJECTION: forcing a failure. [ 1074.494819][T19021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.544080][T19021] CPU: 0 UID: 0 PID: 19021 Comm: syz.3.2625 Tainted: G L syzkaller #0 PREEMPT(full) [ 1074.544137][T19021] Tainted: [L]=SOFTLOCKUP [ 1074.544159][T19021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1074.544179][T19021] Call Trace: [ 1074.544190][T19021] [ 1074.544203][T19021] dump_stack_lvl+0x100/0x190 [ 1074.544245][T19021] should_fail_ex.cold+0x5/0xa [ 1074.544288][T19021] _copy_from_iter+0x1f4/0x1690 [ 1074.544341][T19021] ? irqentry_exit+0x24d/0x970 [ 1074.544387][T19021] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 1074.544447][T19021] ? __pfx__copy_from_iter+0x10/0x10 [ 1074.544516][T19021] netlink_sendmsg+0x808/0xda0 [ 1074.544573][T19021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1074.544617][T19021] ? __import_iovec+0x1d2/0x640 [ 1074.544670][T19021] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1074.544714][T19021] ____sys_sendmsg+0x9e1/0xb70 [ 1074.544757][T19021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1074.544806][T19021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1074.544886][T19021] ___sys_sendmsg+0x190/0x1e0 [ 1074.544936][T19021] ? __pfx____sys_sendmsg+0x10/0x10 [ 1074.545032][T19021] __sys_sendmsg+0x170/0x220 [ 1074.545069][T19021] ? __pfx___sys_sendmsg+0x10/0x10 [ 1074.545121][T19021] ? rcu_is_watching+0x12/0xc0 [ 1074.545174][T19021] do_syscall_64+0x115/0x840 [ 1074.545221][T19021] ? clear_bhb_loop+0x40/0x90 [ 1074.545264][T19021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.545299][T19021] RIP: 0033:0x7f09bc59ce59 [ 1074.545326][T19021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.545359][T19021] RSP: 002b:00007f09bd496028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1074.545389][T19021] RAX: ffffffffffffffda RBX: 00007f09bc815fa0 RCX: 00007f09bc59ce59 [ 1074.545411][T19021] RDX: 0000000000000080 RSI: 0000200000001780 RDI: 0000000000000003 [ 1074.545431][T19021] RBP: 00007f09bd496090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.545451][T19021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.545470][T19021] R13: 00007f09bc816038 R14: 00007f09bc815fa0 R15: 00007fff865d2248 [ 1074.545512][T19021] [ 1074.949077][T19023] FAULT_INJECTION: forcing a failure. [ 1074.949077][T19023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.962334][T19023] CPU: 0 UID: 0 PID: 19023 Comm: syz.0.2626 Tainted: G L syzkaller #0 PREEMPT(full) [ 1074.962392][T19023] Tainted: [L]=SOFTLOCKUP [ 1074.962407][T19023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1074.962429][T19023] Call Trace: [ 1074.962442][T19023] [ 1074.962456][T19023] dump_stack_lvl+0x100/0x190 [ 1074.962503][T19023] should_fail_ex.cold+0x5/0xa [ 1074.962553][T19023] _copy_from_user+0x2e/0xd0 [ 1074.962606][T19023] io_uring_setup+0xc0/0x160 [ 1074.962814][T19023] ? __pfx_io_uring_setup+0x10/0x10 [ 1074.962884][T19023] ? do_futex+0x192/0x350 [ 1074.962933][T19023] ? __pfx_do_futex+0x10/0x10 [ 1074.962985][T19023] ? xfd_validate_state+0x129/0x190 [ 1074.963018][T19023] ? exit_to_user_mode_loop+0xf3/0x670 [ 1074.963084][T19023] __x64_sys_io_uring_setup+0xc2/0x170 [ 1074.963141][T19023] do_syscall_64+0x115/0x840 [ 1074.963191][T19023] ? clear_bhb_loop+0x40/0x90 [ 1074.963233][T19023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.963269][T19023] RIP: 0033:0x7f8092d9ce59 [ 1074.963300][T19023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.963336][T19023] RSP: 002b:00007f8093ca4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1074.963370][T19023] RAX: ffffffffffffffda RBX: 00007f8093015fa0 RCX: 00007f8092d9ce59 [ 1074.963394][T19023] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 1074.963415][T19023] RBP: 00007f8092e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1074.963435][T19023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.963456][T19023] R13: 00007f8093016038 R14: 00007f8093015fa0 R15: 00007fff19df4068 [ 1074.963499][T19023] [ 1075.270657][T19023] futex_wake_op: syz.0.2626 tries to shift op by -2048; fix this program [ 1075.932131][T19037] FAULT_INJECTION: forcing a failure. [ 1075.932131][T19037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.051147][T19037] CPU: 0 UID: 0 PID: 19037 Comm: syz.1.2629 Tainted: G L syzkaller #0 PREEMPT(full) [ 1076.051198][T19037] Tainted: [L]=SOFTLOCKUP [ 1076.051210][T19037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1076.051230][T19037] Call Trace: [ 1076.051241][T19037] [ 1076.051253][T19037] dump_stack_lvl+0x100/0x190 [ 1076.051298][T19037] should_fail_ex.cold+0x5/0xa [ 1076.051341][T19037] _copy_from_iter+0x1f4/0x1690 [ 1076.051393][T19037] ? __asan_memset+0x23/0x50 [ 1076.051445][T19037] ? __pfx__copy_from_iter+0x10/0x10 [ 1076.051491][T19037] ? __pfx___alloc_skb+0x10/0x10 [ 1076.051539][T19037] netlink_sendmsg+0x808/0xda0 [ 1076.051600][T19037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.051640][T19037] ? __import_iovec+0x1d2/0x640 [ 1076.051690][T19037] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1076.051730][T19037] ____sys_sendmsg+0x9e1/0xb70 [ 1076.051771][T19037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.051817][T19037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1076.051878][T19037] ___sys_sendmsg+0x190/0x1e0 [ 1076.051929][T19037] ? __pfx____sys_sendmsg+0x10/0x10 [ 1076.052022][T19037] __sys_sendmsg+0x170/0x220 [ 1076.052059][T19037] ? __pfx___sys_sendmsg+0x10/0x10 [ 1076.052111][T19037] ? rcu_is_watching+0x12/0xc0 [ 1076.052155][T19037] do_syscall_64+0x115/0x840 [ 1076.052201][T19037] ? clear_bhb_loop+0x40/0x90 [ 1076.052241][T19037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.052274][T19037] RIP: 0033:0x7fa8e599ce59 [ 1076.052301][T19037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.052333][T19037] RSP: 002b:00007fa8e67e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.052366][T19037] RAX: ffffffffffffffda RBX: 00007fa8e5c16090 RCX: 00007fa8e599ce59 [ 1076.052389][T19037] RDX: 0000000000000080 RSI: 0000200000001780 RDI: 0000000000000003 [ 1076.052410][T19037] RBP: 00007fa8e67e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.052430][T19037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.052450][T19037] R13: 00007fa8e5c16128 R14: 00007fa8e5c16090 R15: 00007ffcbb0ddc38 [ 1076.052493][T19037] [ 1079.917510][T19056] tipc: can't start tipc receive workqueue [ 1080.020121][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2638'. [ 1081.771219][ T30] audit: type=1800 audit(4295006868.594:92): pid=19105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2642" name="lu_gp_id" dev="configfs" ino=101261 res=0 errno=0 [ 1081.793327][T19105] kstrtoul() returned -22 for lu_gp_id [ 1083.783631][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 1083.851612][T19139] FAULT_INJECTION: forcing a failure. [ 1083.851612][T19139] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1083.892034][T19139] CPU: 1 UID: 0 PID: 19139 Comm: syz.0.2650 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.892086][T19139] Tainted: [L]=SOFTLOCKUP [ 1083.892097][T19139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1083.892116][T19139] Call Trace: [ 1083.892127][T19139] [ 1083.892140][T19139] dump_stack_lvl+0x100/0x190 [ 1083.892181][T19139] should_fail_ex.cold+0x5/0xa [ 1083.892227][T19139] get_futex_key+0x1d2/0x1510 [ 1083.892288][T19139] ? __pfx_get_futex_key+0x10/0x10 [ 1083.892344][T19139] ? destroy_inode+0x139/0x1c0 [ 1083.892393][T19139] ? evict+0x599/0xad0 [ 1083.892448][T19139] futex_wake+0xea/0x530 [ 1083.892490][T19139] ? __lock_acquire+0x4a5/0x2630 [ 1083.892543][T19139] ? __pfx_futex_wake+0x10/0x10 [ 1083.892599][T19139] do_futex+0x32b/0x350 [ 1083.892635][T19139] ? __pfx_do_futex+0x10/0x10 [ 1083.892667][T19139] ? __sys_socketpair+0x493/0x5b0 [ 1083.892720][T19139] ? do_raw_spin_unlock+0x145/0x1e0 [ 1083.892763][T19139] __x64_sys_futex+0x34f/0x4d0 [ 1083.892814][T19139] ? __pfx___x64_sys_futex+0x10/0x10 [ 1083.892859][T19139] ? rcu_is_watching+0x12/0xc0 [ 1083.892904][T19139] do_syscall_64+0x115/0x840 [ 1083.892952][T19139] ? clear_bhb_loop+0x40/0x90 [ 1083.892996][T19139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.893031][T19139] RIP: 0033:0x7f8092d9ce59 [ 1083.893060][T19139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.893096][T19139] RSP: 002b:00007f8093ca40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1083.893129][T19139] RAX: ffffffffffffffda RBX: 00007f8093015fa8 RCX: 00007f8092d9ce59 [ 1083.893151][T19139] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8093015fac [ 1083.893173][T19139] RBP: 00007f8093015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1083.893194][T19139] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1083.893215][T19139] R13: 00007f8093016038 R14: 00007fff19df3f80 R15: 00007fff19df4068 [ 1083.893257][T19139] [ 1084.602366][T19144] Process accounting paused [ 1084.770511][T19149] bond0: invalid ARP target specified [ 1084.874949][T19149] nbd: socks must be embedded in a SOCK_ITEM attr [ 1084.951825][T19149] block nbd0: shutting down sockets [ 1086.840543][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2656'. [ 1087.069145][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'. [ 1087.913203][T19184] FAULT_INJECTION: forcing a failure. [ 1087.913203][T19184] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.977605][T19184] CPU: 0 UID: 0 PID: 19184 Comm: syz.3.2659 Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.977662][T19184] Tainted: [L]=SOFTLOCKUP [ 1087.977674][T19184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1087.977696][T19184] Call Trace: [ 1087.977708][T19184] [ 1087.977721][T19184] dump_stack_lvl+0x100/0x190 [ 1087.977765][T19184] should_fail_ex.cold+0x5/0xa [ 1087.977810][T19184] should_failslab+0xc2/0x120 [ 1087.977854][T19184] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1087.977911][T19184] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 1087.978029][T19184] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 1087.978075][T19184] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 1087.978132][T19184] alloc_inode+0x68/0x250 [ 1087.978188][T19184] new_inode+0x22/0x1c0 [ 1087.978244][T19184] hugetlbfs_get_inode+0x39a/0x700 [ 1087.978293][T19184] ? do_raw_spin_lock+0x128/0x260 [ 1087.978337][T19184] hugetlb_file_setup+0x15b/0x5b0 [ 1087.978397][T19184] memfd_alloc_file+0xc2/0x610 [ 1087.978454][T19184] ? _raw_spin_unlock+0x28/0x50 [ 1087.978499][T19184] ? __pfx_memfd_alloc_file+0x10/0x10 [ 1087.978565][T19184] __do_sys_memfd_create+0x236/0x3d0 [ 1087.978627][T19184] do_syscall_64+0x115/0x840 [ 1087.978676][T19184] ? clear_bhb_loop+0x40/0x90 [ 1087.978719][T19184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.978756][T19184] RIP: 0033:0x7f09bc59ce59 [ 1087.978786][T19184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.978821][T19184] RSP: 002b:00007f09bd496028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1087.978855][T19184] RAX: ffffffffffffffda RBX: 00007f09bc815fa0 RCX: 00007f09bc59ce59 [ 1087.978878][T19184] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 1087.978899][T19184] RBP: 00007f09bc632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1087.978919][T19184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.978939][T19184] R13: 00007f09bc816038 R14: 00007f09bc815fa0 R15: 00007fff865d2248 [ 1087.978982][T19184] [ 1089.161019][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2664'. [ 1089.275981][T19204] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2664'. [ 1089.616062][T19210] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2665'. [ 1089.798633][T19219] FAULT_INJECTION: forcing a failure. [ 1089.798633][T19219] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.829485][T19219] CPU: 1 UID: 0 PID: 19219 Comm: syz.1.2668 Tainted: G L syzkaller #0 PREEMPT(full) [ 1089.829538][T19219] Tainted: [L]=SOFTLOCKUP [ 1089.829550][T19219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1089.829570][T19219] Call Trace: [ 1089.829582][T19219] [ 1089.829596][T19219] dump_stack_lvl+0x100/0x190 [ 1089.829638][T19219] should_fail_ex.cold+0x5/0xa [ 1089.829679][T19219] ? __pfx_bonding_sysfs_store_option+0x10/0x10 [ 1089.829855][T19219] should_failslab+0xc2/0x120 [ 1089.829915][T19219] ? __pfx_bonding_sysfs_store_option+0x10/0x10 [ 1089.829966][T19219] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1089.830004][T19219] ? bonding_sysfs_store_option+0x67/0x120 [ 1089.830063][T19219] ? __pfx_bonding_sysfs_store_option+0x10/0x10 [ 1089.830118][T19219] kstrndup+0x64/0x120 [ 1089.830156][T19219] bonding_sysfs_store_option+0x67/0x120 [ 1089.830210][T19219] dev_attr_store+0x58/0x80 [ 1089.830302][T19219] ? __pfx_dev_attr_store+0x10/0x10 [ 1089.830338][T19219] sysfs_kf_write+0xf2/0x150 [ 1089.830395][T19219] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1089.830443][T19219] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1089.830498][T19219] vfs_write+0x6ac/0x1070 [ 1089.830539][T19219] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1089.830591][T19219] ? __pfx_vfs_write+0x10/0x10 [ 1089.830657][T19219] ksys_write+0x12a/0x250 [ 1089.830694][T19219] ? __pfx_ksys_write+0x10/0x10 [ 1089.830738][T19219] ? rcu_is_watching+0x12/0xc0 [ 1089.830781][T19219] do_syscall_64+0x115/0x840 [ 1089.830837][T19219] ? clear_bhb_loop+0x40/0x90 [ 1089.830878][T19219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.830912][T19219] RIP: 0033:0x7fa8e599ce59 [ 1089.830940][T19219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.830973][T19219] RSP: 002b:00007fa8e67e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1089.831004][T19219] RAX: ffffffffffffffda RBX: 00007fa8e5c16090 RCX: 00007fa8e599ce59 [ 1089.831026][T19219] RDX: 000000000000007a RSI: 0000200000000400 RDI: 0000000000000003 [ 1089.831047][T19219] RBP: 00007fa8e67e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.831067][T19219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.831085][T19219] R13: 00007fa8e5c16128 R14: 00007fa8e5c16090 R15: 00007ffcbb0ddc38 [ 1089.831129][T19219] [ 1090.274371][T19226] netlink: 'syz.3.2669': attribute type 11 has an invalid length. [ 1091.298714][T19235] netlink: 'syz.2.2671': attribute type 3 has an invalid length. [ 1091.324603][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'. [ 1092.993674][T19270] zswap: compressor û not available [ 1093.021737][T19279] block2mtd: illegal erase size [ 1093.361813][T19284] futex_wake_op: syz.0.2680 tries to shift op by -2048; fix this program [ 1094.200267][T19289] bond0: invalid ARP target specified [ 1094.287762][T19289] nbd: socks must be embedded in a SOCK_ITEM attr [ 1094.356740][T19289] block nbd0: shutting down sockets [ 1095.124585][T19306] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1096.366419][T19323] nbd: socks must be embedded in a SOCK_ITEM attr [ 1096.406617][T19323] block nbd0: shutting down sockets [ 1096.437831][T19324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2688'. [ 1096.591323][T19322] bond0: invalid ARP target specified [ 1096.631872][T19327] binder: 19326:19327 ioctl c004620b 3 returned -22 [ 1097.329862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1098.774293][T19361] FAULT_INJECTION: forcing a failure. [ 1098.774293][T19361] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.794369][T19361] CPU: 1 UID: 0 PID: 19361 Comm: syz.3.2697 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.794427][T19361] Tainted: [L]=SOFTLOCKUP [ 1098.794441][T19361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1098.794462][T19361] Call Trace: [ 1098.794474][T19361] [ 1098.794488][T19361] dump_stack_lvl+0x100/0x190 [ 1098.794534][T19361] should_fail_ex.cold+0x5/0xa [ 1098.794582][T19361] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1098.794640][T19361] should_failslab+0xc2/0x120 [ 1098.794689][T19361] __kmalloc_noprof+0xe0/0x850 [ 1098.794721][T19361] ? kfree+0x1dd/0x6c0 [ 1098.794779][T19361] tomoyo_realpath_from_path+0xb6/0x690 [ 1098.794841][T19361] tomoyo_check_open_permission+0x2af/0x3c0 [ 1098.794890][T19361] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1098.794951][T19361] ? hook_file_open+0x24e/0x7a0 [ 1098.795028][T19361] ? path_get+0x61/0x80 [ 1098.795098][T19361] tomoyo_file_open+0x6b/0x90 [ 1098.795125][T19361] security_file_open+0xb5/0x1e0 [ 1098.795162][T19361] do_dentry_open+0x588/0x14d0 [ 1098.795204][T19361] vfs_open+0x82/0x3f0 [ 1098.795248][T19361] path_openat+0x208c/0x31a0 [ 1098.795293][T19361] ? __pfx_path_openat+0x10/0x10 [ 1098.795338][T19361] do_file_open+0x20e/0x430 [ 1098.795375][T19361] ? __pfx_do_file_open+0x10/0x10 [ 1098.795435][T19361] ? alloc_fd+0x476/0x790 [ 1098.795471][T19361] ? do_getname+0x191/0x390 [ 1098.795513][T19361] do_sys_openat2+0x10d/0x1e0 [ 1098.795573][T19361] ? __pfx_do_sys_openat2+0x10/0x10 [ 1098.795615][T19361] ? __do_sys_capset+0xfb/0x460 [ 1098.795652][T19361] __x64_sys_openat+0x12d/0x210 [ 1098.795694][T19361] ? __pfx___x64_sys_openat+0x10/0x10 [ 1098.795776][T19361] ? rcu_is_watching+0x12/0xc0 [ 1098.795816][T19361] do_syscall_64+0x115/0x840 [ 1098.795853][T19361] ? clear_bhb_loop+0x40/0x90 [ 1098.795885][T19361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.795912][T19361] RIP: 0033:0x7f09bc59ce59 [ 1098.795934][T19361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.795958][T19361] RSP: 002b:00007f09bd496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1098.795983][T19361] RAX: ffffffffffffffda RBX: 00007f09bc815fa0 RCX: 00007f09bc59ce59 [ 1098.796001][T19361] RDX: 000000000014be02 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1098.796018][T19361] RBP: 00007f09bc632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1098.796034][T19361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.796049][T19361] R13: 00007f09bc816038 R14: 00007f09bc815fa0 R15: 00007fff865d2248 [ 1098.796090][T19361] [ 1098.853562][T19361] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1099.431669][T19367] sysfs_service_op_store: Client not running :-5: [ 1099.922579][T19374] bond0: invalid ARP target specified [ 1100.028831][T19374] nbd: socks must be embedded in a SOCK_ITEM attr [ 1100.060305][T19374] block nbd0: shutting down sockets [ 1100.094177][T19375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2700'. [ 1103.285207][T19418] bond0: invalid ARP target specified [ 1104.405500][T19433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.704232][T19449] bond0: invalid ARP target specified [ 1104.881296][T19454] nbd: socks must be embedded in a SOCK_ITEM attr [ 1104.923855][T19454] block nbd0: shutting down sockets [ 1105.308864][T19433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.528996][T19433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.639667][T19433] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.496390][T19480] bond0: invalid ARP target specified [ 1107.537245][T19480] nbd: socks must be embedded in a SOCK_ITEM attr [ 1107.545908][T19480] block nbd0: shutting down sockets [ 1107.559143][T19480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2720'. [ 1107.934928][T19472] ima: policy update failed [ 1107.941238][ T30] audit: type=1802 audit(4295006894.911:93): pid=19472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2718" res=0 errno=0 [ 1108.493842][T19488] tc_dump_action: action bad kind [ 1112.600570][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2731'. [ 1112.842559][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1112.850407][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1113.711472][T19540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.834765][T17140] Process accounting resumed [ 1119.031197][T18777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1119.052384][T18777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1119.072351][T18777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1119.082492][T18777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1119.090627][T18777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1119.650908][T19604] ubi0: attaching mtd0 [ 1119.666255][T19604] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 1119.703933][T19604] eraseblock attaching information dump: [ 1119.713693][T19604] ec 1 [ 1119.724308][T19604] pnum 1 [ 1119.733565][T19604] lnum 1 [ 1119.743527][T19604] scrub 0 [ 1119.753578][T19604] sqnum 2 [ 1119.763722][T19604] Volume identifier header dump: [ 1119.780140][T19604] magic 55424921 [ 1119.790477][T19604] version 1 [ 1119.794305][T19604] vol_type 1 [ 1119.797802][T19604] copy_flag 0 [ 1119.802016][T19604] compat 5 [ 1119.806133][T19604] vol_id 2147479551 [ 1119.810474][T19604] lnum 1 [ 1119.815425][T19604] data_size 0 [ 1119.819858][T19604] used_ebs 0 [ 1119.832782][T19604] data_pad 0 [ 1119.840342][T19604] sqnum 2 [ 1119.847114][ T9367] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1119.848052][T19604] hdr_crc 7beff9af [ 1119.868511][ T9367] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1119.871358][T19604] Volume identifier header hexdump: [ 1119.884483][ T9367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1119.901313][ T9367] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1119.913365][ T9367] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1120.022156][T19604] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1120.594935][T19587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.609768][T19587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.623440][T19587] bridge_slave_0: entered allmulticast mode [ 1120.641465][T19587] bridge_slave_0: entered promiscuous mode [ 1120.653247][T19587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.668689][T19587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.677439][T19587] bridge_slave_1: entered allmulticast mode [ 1120.690207][T19587] bridge_slave_1: entered promiscuous mode [ 1120.789842][T19587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.828770][T19587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.975714][T19587] team0: Port device team_slave_0 added [ 1121.018519][T19587] team0: Port device team_slave_1 added [ 1121.106472][T19587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.113637][T19587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.117069][ T9367] Bluetooth: hci2: command tx timeout [ 1121.142380][T19587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.185586][T19587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.200365][T19587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.226728][T19587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.316036][T19587] hsr_slave_0: entered promiscuous mode [ 1121.327817][T19587] hsr_slave_1: entered promiscuous mode [ 1121.991764][ T9367] Bluetooth: hci5: command tx timeout [ 1122.027132][T19609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.041695][T19609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.059716][T19609] bridge_slave_0: entered allmulticast mode [ 1122.083499][T19609] bridge_slave_0: entered promiscuous mode [ 1122.097455][T19609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.112388][T19609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.121254][T19609] bridge_slave_1: entered allmulticast mode [ 1122.131839][T19609] bridge_slave_1: entered promiscuous mode [ 1122.190064][T19609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.229996][T19609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.308549][T19609] team0: Port device team_slave_0 added [ 1122.333988][T19609] team0: Port device team_slave_1 added [ 1122.401143][T19609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.419713][T19609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.459477][T19609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.481206][T19609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.497661][T19609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.540143][T19609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.633923][T19609] hsr_slave_0: entered promiscuous mode [ 1122.644375][T19609] hsr_slave_1: entered promiscuous mode [ 1122.659468][T19609] debugfs: 'hsr0' already exists in 'hsr' [ 1122.667081][T19609] Cannot create hsr debugfs directory [ 1123.169888][T18777] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1123.183061][T18777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1123.192045][T13978] Bluetooth: hci2: command tx timeout [ 1123.207292][T18777] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1123.218667][T18777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1123.226725][T18777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1123.630177][T19663] futex_wake_op: syz.2.2754 tries to shift op by -2048; fix this program [ 1123.648240][T19663] futex_wake_op: syz.2.2754 tries to shift op by -2048; fix this program [ 1123.668943][T19663] 0x000000000001-0x000000020000 : "" [ 1123.697852][T19663] ftl_cs: FTL header corrupt! [ 1123.865908][ T30] audit: type=1800 audit(4295008958.917:94): pid=19661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2754" name="lu_gp_id" dev="configfs" ino=106690 res=0 errno=0 [ 1123.888224][T19661] kstrtoul() returned -22 for lu_gp_id [ 1124.061131][T18777] Bluetooth: hci5: command tx timeout [ 1124.869646][T19652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.877176][T19652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.884597][T19652] bridge_slave_0: entered allmulticast mode [ 1124.892802][T19652] bridge_slave_0: entered promiscuous mode [ 1124.902224][T19652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.911259][T19652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.918763][T19652] bridge_slave_1: entered allmulticast mode [ 1124.926367][T19652] bridge_slave_1: entered promiscuous mode [ 1124.961739][T19652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.977086][T19652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.023773][T19682] FAULT_INJECTION: forcing a failure. [ 1125.023773][T19682] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.033819][T19652] team0: Port device team_slave_0 added [ 1125.043219][T19682] CPU: 0 UID: 0 PID: 19682 Comm: syz.2.2756 Tainted: G L syzkaller #0 PREEMPT(full) [ 1125.043271][T19682] Tainted: [L]=SOFTLOCKUP [ 1125.043283][T19682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1125.043305][T19682] Call Trace: [ 1125.043317][T19682] [ 1125.043329][T19682] dump_stack_lvl+0x100/0x190 [ 1125.043371][T19682] should_fail_ex.cold+0x5/0xa [ 1125.043414][T19682] should_failslab+0xc2/0x120 [ 1125.043454][T19682] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1125.043506][T19682] ? alloc_empty_file+0x5b/0x1c0 [ 1125.043567][T19682] alloc_empty_file+0x5b/0x1c0 [ 1125.043620][T19682] alloc_file_pseudo+0x13a/0x230 [ 1125.043675][T19682] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1125.043740][T19682] ? security_inode_init_security_anon+0x7b/0x230 [ 1125.043796][T19682] __anon_inode_getfile+0xe8/0x280 [ 1125.043852][T19682] new_userfaultfd+0x255/0x400 [ 1125.043893][T19682] __x64_sys_userfaultfd+0x4b/0xb0 [ 1125.043937][T19682] do_syscall_64+0x115/0x840 [ 1125.043984][T19682] ? clear_bhb_loop+0x40/0x90 [ 1125.044026][T19682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.044059][T19682] RIP: 0033:0x7fccdb59ce59 [ 1125.044087][T19682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.044123][T19682] RSP: 002b:00007fccdc50c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1125.044157][T19682] RAX: ffffffffffffffda RBX: 00007fccdb815fa0 RCX: 00007fccdb59ce59 [ 1125.044179][T19682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1125.044199][T19682] RBP: 00007fccdb632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1125.044220][T19682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.044241][T19682] R13: 00007fccdb816038 R14: 00007fccdb815fa0 R15: 00007ffdfee84e48 [ 1125.044284][T19682] [ 1125.238600][T19652] team0: Port device team_slave_1 added [ 1125.258401][ T9367] Bluetooth: hci2: command tx timeout [ 1125.266750][T18777] Bluetooth: hci6: command tx timeout [ 1125.306712][T19652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.314070][T19652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.340971][T19652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.358419][T19652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.365698][T19652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.392370][T19652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.455347][T19652] hsr_slave_0: entered promiscuous mode [ 1125.464076][T19652] hsr_slave_1: entered promiscuous mode [ 1125.471277][T19652] debugfs: 'hsr0' already exists in 'hsr' [ 1125.477600][T19652] Cannot create hsr debugfs directory [ 1126.130176][T18777] Bluetooth: hci5: command tx timeout [ 1127.110848][T19701] NFSD: Failed to start, no listeners configured. [ 1127.324063][ T9367] Bluetooth: hci2: command tx timeout [ 1127.329586][T18777] Bluetooth: hci6: command tx timeout [ 1128.199336][T18777] Bluetooth: hci5: command tx timeout [ 1129.393288][T18777] Bluetooth: hci6: command tx timeout [ 1130.539780][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a081800: rx timeout, send abort [ 1130.551898][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a081800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1130.598014][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b23e400: rx timeout, send abort [ 1130.606585][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b23e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1131.462438][T18777] Bluetooth: hci6: command tx timeout [ 1173.963023][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1173.969554][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.971034][ T9367] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1178.987935][ T9367] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1178.998452][ T9367] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1179.006636][ T9367] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1179.017344][ T9367] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1179.619476][T19747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.627262][T19747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.634940][T19747] bridge_slave_0: entered allmulticast mode [ 1179.643461][T19747] bridge_slave_0: entered promiscuous mode [ 1179.652380][T19747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.659681][T19747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.667142][T19747] bridge_slave_1: entered allmulticast mode [ 1179.674625][T19747] bridge_slave_1: entered promiscuous mode [ 1179.709196][T19747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.722146][T19747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.757368][T19747] team0: Port device team_slave_0 added [ 1179.766875][T19747] team0: Port device team_slave_1 added [ 1179.800608][T19747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.807759][T19747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.834012][T19747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.847350][T19747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.855087][T19747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.881694][T19747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.963818][T19747] hsr_slave_0: entered promiscuous mode [ 1179.971674][T19747] hsr_slave_1: entered promiscuous mode [ 1179.978523][T19747] debugfs: 'hsr0' already exists in 'hsr' [ 1179.988680][T19747] Cannot create hsr debugfs directory [ 1180.106014][T18777] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1180.132090][T18777] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1180.152499][T18777] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1180.164423][T18777] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1180.175436][T18777] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1180.825198][T19766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.832513][T19766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.840173][T19766] bridge_slave_0: entered allmulticast mode [ 1180.848001][T19766] bridge_slave_0: entered promiscuous mode [ 1180.856460][T19766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.865628][T19766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.872913][T19766] bridge_slave_1: entered allmulticast mode [ 1180.880702][T19766] bridge_slave_1: entered promiscuous mode [ 1180.918344][T19766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.932224][T19766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.968269][T19766] team0: Port device team_slave_0 added [ 1180.977159][T19766] team0: Port device team_slave_1 added [ 1181.006354][T19766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.013350][T19766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.039707][T19766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.050355][T18777] Bluetooth: hci7: command tx timeout [ 1181.056762][T19766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.063872][T19766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.091079][T19766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.141250][T19766] hsr_slave_0: entered promiscuous mode [ 1181.148002][T19766] hsr_slave_1: entered promiscuous mode [ 1181.154746][T19766] debugfs: 'hsr0' already exists in 'hsr' [ 1181.160501][T19766] Cannot create hsr debugfs directory [ 1182.238559][T18777] Bluetooth: hci8: command tx timeout [ 1182.977590][ T9367] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1182.994734][ T9367] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1183.008875][ T9367] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1183.017773][ T9367] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1183.029279][ T9367] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1183.113924][ T9367] Bluetooth: hci7: command tx timeout [ 1183.641651][T19784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.648926][T19784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.656678][T19784] bridge_slave_0: entered allmulticast mode [ 1183.665190][T19784] bridge_slave_0: entered promiscuous mode [ 1183.676095][T19784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.683573][T19784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.691267][T19784] bridge_slave_1: entered allmulticast mode [ 1183.699047][T19784] bridge_slave_1: entered promiscuous mode [ 1183.733345][T19784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.746116][T19784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.779771][T19784] team0: Port device team_slave_0 added [ 1183.788212][T19784] team0: Port device team_slave_1 added [ 1183.818132][T19784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.825279][T19784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.851725][T19784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.866247][T19784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.873334][T19784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.899932][T19784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.953078][T19784] hsr_slave_0: entered promiscuous mode [ 1183.959803][T19784] hsr_slave_1: entered promiscuous mode [ 1183.966100][T19784] debugfs: 'hsr0' already exists in 'hsr' [ 1183.971953][T19784] Cannot create hsr debugfs directory [ 1184.307809][ T9367] Bluetooth: hci8: command tx timeout [ 1185.103579][ T9367] Bluetooth: hci9: command tx timeout [ 1185.183134][ T9367] Bluetooth: hci7: command tx timeout [ 1186.376903][ T9367] Bluetooth: hci8: command tx timeout [ 1187.172718][ T9367] Bluetooth: hci9: command tx timeout [ 1187.252345][ T9367] Bluetooth: hci7: command tx timeout [ 1188.446229][ T9367] Bluetooth: hci8: command tx timeout [ 1189.242780][ T9367] Bluetooth: hci9: command tx timeout [ 1191.311251][ T9367] Bluetooth: hci9: command tx timeout [ 1235.085944][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.092347][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.085558][T18777] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1239.101215][T18777] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1239.111367][T18777] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1239.127975][T18777] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1239.138693][T18777] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1239.750998][T19807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.758382][T19807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.766258][T19807] bridge_slave_0: entered allmulticast mode [ 1239.774469][T19807] bridge_slave_0: entered promiscuous mode [ 1239.784388][T19807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.791763][T19807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.799157][T19807] bridge_slave_1: entered allmulticast mode [ 1239.806791][T19807] bridge_slave_1: entered promiscuous mode [ 1239.842282][T19807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.855785][T19807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.896444][T19807] team0: Port device team_slave_0 added [ 1239.905653][T19807] team0: Port device team_slave_1 added [ 1239.940081][T19807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.947161][T19807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.974260][T19807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.987974][T19807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.995030][T19807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.021616][T19807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.098312][T19807] hsr_slave_0: entered promiscuous mode [ 1240.107851][T19807] hsr_slave_1: entered promiscuous mode [ 1240.114656][T19807] debugfs: 'hsr0' already exists in 'hsr' [ 1240.120795][T19807] Cannot create hsr debugfs directory [ 1240.220851][T19827] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1240.239827][T19827] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1240.263648][T19827] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1240.273262][T19827] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1240.288260][T19827] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1240.940560][T19826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.947930][T19826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.955711][T19826] bridge_slave_0: entered allmulticast mode [ 1240.963883][T19826] bridge_slave_0: entered promiscuous mode [ 1240.972448][T19826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.980031][T19826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.987566][T19826] bridge_slave_1: entered allmulticast mode [ 1240.995191][T19826] bridge_slave_1: entered promiscuous mode [ 1241.029336][T19826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.042012][T19826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.077727][T19826] team0: Port device team_slave_0 added [ 1241.086614][T19826] team0: Port device team_slave_1 added [ 1241.115160][T19826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.122439][T19826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.149497][T19826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.162624][T19826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.171811][T19826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.198138][T19826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.211881][T19827] Bluetooth: hci10: command tx timeout [ 1241.251648][T19826] hsr_slave_0: entered promiscuous mode [ 1241.258446][T19826] hsr_slave_1: entered promiscuous mode [ 1241.265222][T19826] debugfs: 'hsr0' already exists in 'hsr' [ 1241.270988][T19826] Cannot create hsr debugfs directory [ 1242.246406][T19827] Bluetooth: hci2: command 0x0406 tx timeout [ 1242.252518][T19654] Bluetooth: hci5: command 0x0406 tx timeout [ 1242.326105][ T9367] Bluetooth: hci11: command tx timeout [ 1243.280851][ T9367] Bluetooth: hci10: command tx timeout [ 1243.582323][T18777] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1243.603394][T18777] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1243.615815][T18777] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1243.628060][T18777] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1243.636709][T18777] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1244.230742][T19845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.239067][T19845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.246683][T19845] bridge_slave_0: entered allmulticast mode [ 1244.254295][T19845] bridge_slave_0: entered promiscuous mode [ 1244.263043][T19845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.271694][T19845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.279381][T19845] bridge_slave_1: entered allmulticast mode [ 1244.287664][T19845] bridge_slave_1: entered promiscuous mode [ 1244.321664][T19845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.336599][T19845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.370514][T19845] team0: Port device team_slave_0 added [ 1244.378893][T19845] team0: Port device team_slave_1 added [ 1244.395529][T18777] Bluetooth: hci11: command tx timeout [ 1244.414826][T19845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.422280][T19845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.449572][T19845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.462490][T19845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.469538][T19845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.495646][T19845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.546250][T19845] hsr_slave_0: entered promiscuous mode [ 1244.552858][T19845] hsr_slave_1: entered promiscuous mode [ 1244.559569][T19845] debugfs: 'hsr0' already exists in 'hsr' [ 1244.566949][T19845] Cannot create hsr debugfs directory [ 1245.350036][T18777] Bluetooth: hci10: command tx timeout [ 1245.668925][T18777] Bluetooth: hci12: command tx timeout [ 1246.464546][T18777] Bluetooth: hci11: command tx timeout [ 1247.344546][T18777] Bluetooth: hci6: command 0x0406 tx timeout [ 1247.419446][ T9367] Bluetooth: hci10: command tx timeout [ 1247.738032][ T9367] Bluetooth: hci12: command tx timeout [ 1248.533840][ T9367] Bluetooth: hci11: command tx timeout [ 1249.807249][ T9367] Bluetooth: hci12: command tx timeout [ 1251.876589][ T9367] Bluetooth: hci12: command tx timeout [ 1261.188166][ T31] INFO: task syz.3.2711:19433 blocked for more than 143 seconds. [ 1261.196000][ T31] Tainted: G L syzkaller #0 [ 1261.202653][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1261.211425][ T31] task:syz.3.2711 state:D stack:25312 pid:19433 tgid:19432 ppid:17140 task_flags:0x480140 flags:0x00080002 [ 1261.225581][ T31] Call Trace: [ 1261.229002][ T31] [ 1261.232239][ T31] __schedule+0x1295/0x67a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1261.236807][ T31] ? __pfx___schedule+0x10/0x10 [ 1261.241773][ T31] ? find_held_lock+0x2b/0x80 [ 1261.247557][ T31] ? schedule+0x2bf/0x390 [ 1261.252741][ T31] schedule+0xdd/0x390 [ 1261.256894][ T31] schedule_timeout+0x1b2/0x280 [ 1261.262369][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1261.270087][ T31] ? mark_held_locks+0x40/0x70 [ 1261.274995][ T31] __wait_for_common+0x2e7/0x4c0 [ 1261.280560][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1261.286046][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1261.292461][ T31] remove_one+0x312/0x420 [ 1261.298296][ T31] ? find_next_child+0x18f/0x280 [ 1261.303339][ T31] __simple_recursive_removal+0x148/0x5c0 [ 1261.310765][ T31] ? __pfx_remove_one+0x10/0x10 [ 1261.316045][ T31] debugfs_remove+0x5d/0x80 [ 1261.320999][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 1261.326250][ T31] nsim_dev_reload_destroy+0x144/0x4a0 [ 1261.332210][ T31] nsim_drv_remove+0x52/0x1e0 [ 1261.337451][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1261.345574][ T31] device_remove+0xcb/0x180 [ 1261.351151][ T31] device_release_driver_internal+0x44e/0x620 [ 1261.357813][ T31] bus_remove_device+0x2bc/0x560 [ 1261.362878][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 1261.368982][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 1261.374740][ T31] device_del+0x376/0x9b0 [ 1261.381234][ T31] ? __pfx_device_del+0x10/0x10 [ 1261.386212][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1261.391820][ T31] device_unregister+0x1d/0xe0 [ 1261.397277][ T31] del_device_store+0x346/0x480 [ 1261.402256][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1261.409291][ T31] ? find_held_lock+0x2b/0x80 [ 1261.414072][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1261.420724][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 1261.425701][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1261.431953][ T31] bus_attr_store+0x74/0xb0 [ 1261.436911][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 1261.444958][ T31] sysfs_kf_write+0xf2/0x150 [ 1261.450331][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1261.455745][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1261.461883][ T31] vfs_write+0x6ac/0x1070 [ 1261.466604][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1261.472530][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1261.477935][ T31] ksys_write+0x12a/0x250 [ 1261.482688][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1261.489817][ T31] ? rcu_is_watching+0x12/0xc0 [ 1261.495049][ T31] do_syscall_64+0x115/0x840 [ 1261.500205][ T31] ? clear_bhb_loop+0x40/0x90 [ 1261.504991][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.514796][ T31] RIP: 0033:0x7f09bc59ce59 [ 1261.521292][ T31] RSP: 002b:00007f09bd496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1261.531303][ T31] RAX: ffffffffffffffda RBX: 00007f09bc815fa0 RCX: 00007f09bc59ce59 [ 1261.539849][ T31] RDX: 0000000000000045 RSI: 0000200000000040 RDI: 0000000000000003 [ 1261.551092][ T31] RBP: 00007f09bc632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1261.559543][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.568045][ T31] R13: 00007f09bc816038 R14: 00007f09bc815fa0 R15: 00007fff865d2248 [ 1261.576498][ T31] [ 1261.579714][ T31] INFO: task syz.0.2713:19449 blocked for more than 143 seconds. [ 1261.589026][ T31] Tainted: G L syzkaller #0 [ 1261.597391][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1261.606453][ T31] task:syz.0.2713 state:D stack:26952 pid:19449 tgid:19441 ppid:17788 task_flags:0x400140 flags:0x00080002 [ 1261.619083][ T31] Call Trace: [ 1261.622446][ T31] [ 1261.626655][ T31] __schedule+0x1295/0x67a0 [ 1261.631301][ T31] ? __pfx___schedule+0x10/0x10 [ 1261.637510][ T31] ? find_held_lock+0x2b/0x80 [ 1261.642305][ T31] ? schedule+0x2bf/0x390 [ 1261.649643][ T31] schedule+0xdd/0x390 [ 1261.653939][ T31] schedule_preempt_disabled+0x13/0x30 [ 1261.659651][ T31] __mutex_lock+0xced/0x1b10 [ 1261.664346][ T31] ? devlink_health_report+0x66c/0xb20 [ 1261.672289][ T31] ? __pfx_devlink_nl_notify_filter+0x10/0x10 [ 1261.680038][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1261.695462][ T31] ? devlink_recover_notify.constprop.0+0x443/0x550 [ 1261.706922][ T31] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 1261.721407][ T31] ? devlink_health_report+0x66c/0xb20 [ 1261.736087][ T31] devlink_health_report+0x66c/0xb20 [ 1261.751052][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 1261.764990][ T31] ? _copy_from_user+0x59/0xd0 [ 1261.774783][ T31] nsim_dev_health_break_write+0x166/0x210 [ 1261.788583][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1261.798195][ T31] full_proxy_write+0x135/0x1a0 [ 1261.803186][ T31] vfs_write+0x2aa/0x1070 [ 1261.808268][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 1261.813772][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1261.820534][ T31] ? __fget_files+0x215/0x3d0 [ 1261.826482][ T31] ? __fget_files+0x21f/0x3d0 [ 1261.831280][ T31] ksys_write+0x12a/0x250 [ 1261.841245][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1261.853215][ T31] ? rcu_is_watching+0x12/0xc0 [ 1261.859525][ T31] do_syscall_64+0x115/0x840 [ 1261.866654][ T31] ? clear_bhb_loop+0x40/0x90 [ 1261.871442][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.877906][ T31] RIP: 0033:0x7f8092d9ce59 [ 1261.882412][ T31] RSP: 002b:00007f8093ca4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1261.891462][ T31] RAX: ffffffffffffffda RBX: 00007f8093015fa0 RCX: 00007f8092d9ce59 [ 1261.899847][ T31] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000005 [ 1261.909130][ T31] RBP: 00007f8092e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1261.917502][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.927615][ T31] R13: 00007f8093016038 R14: 00007f8093015fa0 R15: 00007fff19df4068 [ 1261.936103][ T31] [ 1261.942519][ T31] INFO: task syz.1.2720:19479 blocked for more than 144 seconds. [ 1261.966285][ T31] Tainted: G L syzkaller #0 [ 1261.990579][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1262.001351][ T31] task:syz.1.2720 state:D stack:26152 pid:19479 tgid:19478 ppid:17377 task_flags:0x400140 flags:0x00080002 [ 1262.013987][ T31] Call Trace: [ 1262.017351][ T31] [ 1262.020335][ T31] __schedule+0x1295/0x67a0 [ 1262.025638][ T31] ? __pfx___schedule+0x10/0x10 [ 1262.031053][ T31] ? find_held_lock+0x2b/0x80 [ 1262.037731][ T31] ? schedule+0x2bf/0x390 [ 1262.042186][ T31] schedule+0xdd/0x390 [ 1262.046936][ T31] schedule_preempt_disabled+0x13/0x30 [ 1262.055438][ T31] rwsem_down_read_slowpath+0x5af/0xb40 [ 1262.061115][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1262.080125][ T31] ? __pfx___might_resched+0x10/0x10 [ 1262.085634][ T31] down_read+0xed/0x450 [ 1262.089865][ T31] ? __pfx_down_read+0x10/0x10 [ 1262.094882][ T31] ? mnt_get_write_access+0x1e9/0x2f0 [ 1262.100395][ T31] path_openat+0xa16/0x31a0 [ 1262.105203][ T31] ? __pfx_path_openat+0x10/0x10 [ 1262.110295][ T31] do_file_open+0x20e/0x430 [ 1262.115158][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1262.120333][ T31] ? alloc_fd+0x476/0x790 [ 1262.124881][ T31] ? do_getname+0x191/0x390 [ 1262.129480][ T31] do_sys_openat2+0x10d/0x1e0 [ 1262.134489][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1262.140014][ T31] __x64_sys_openat+0x12d/0x210 [ 1262.149164][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1262.157281][ T31] ? ksys_write+0x1ac/0x250 [ 1262.161933][ T31] ? rcu_is_watching+0x12/0xc0 [ 1262.167057][ T31] do_syscall_64+0x115/0x840 [ 1262.171759][ T31] ? clear_bhb_loop+0x40/0x90 [ 1262.176869][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.185154][ T31] RIP: 0033:0x7fa8e599ce59 [ 1262.189696][ T31] RSP: 002b:00007fa8e6805028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1262.198395][ T31] RAX: ffffffffffffffda RBX: 00007fa8e5c15fa0 RCX: 00007fa8e599ce59 [ 1262.206485][ T31] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1262.215001][ T31] RBP: 00007fa8e5a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1262.224248][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1262.232754][ T31] R13: 00007fa8e5c16038 R14: 00007fa8e5c15fa0 R15: 00007ffcbb0ddc38 [ 1262.240880][ T31] [ 1262.266939][ T31] [ 1262.266939][ T31] Showing all locks held in the system: [ 1262.298745][ T31] 1 lock held by khungtaskd/31: [ 1262.304676][ T31] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1262.335718][ T31] 2 locks held by getty/7326: [ 1262.340630][ T31] #0: ffff888029ab80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1262.351245][ T31] #1: ffffc900037fb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1262.367009][ T31] 3 locks held by kworker/u10:22/13780: [ 1262.373281][ T31] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1262.385145][ T31] #1: ffffc9000518fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1262.396046][ T31] #2: ffffffff90606420 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1262.406235][ T31] 3 locks held by syz-executor/18149: [ 1262.411788][ T31] #0: ffff88803812c600 (sb_internal){.+.+}-{0:0}, at: evict+0x3c2/0xad0 [ 1262.420366][ T31] #1: ffff8880381b2938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 1262.430159][ T31] #2: ffff888077938210 (&ei->i_data_sem){++++}-{4:4}, at: ext4_truncate+0xd71/0x11a0 [ 1262.440060][ T31] 2 locks held by syz-executor/18154: [ 1262.446115][ T31] #0: ffffffff90606420 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1262.455287][ T31] #1: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1262.465853][ T31] 8 locks held by syz.3.2711/19433: [ 1262.471421][ T31] #0: ffff88807ac887f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1262.480618][ T31] #1: ffff8880379f8410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.490161][ T31] #2: ffff88805a169080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1262.500769][ T31] #3: ffff88802a399b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1262.511358][ T31] #4: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1262.515992][T18149] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1262.522462][ T31] #5: ffff88805a2cf128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1262.542506][ T31] #6: ffff88802b230258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 1262.553084][ T31] #7: ffff8880471b2c90 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 1262.565323][ T31] 3 locks held by syz.0.2713/19449: [ 1262.570923][ T31] #0: ffff88807aad80f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1262.580147][ T31] #1: ffff88801fec0410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.589611][ T31] #2: ffff88802b230258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_health_report+0x66c/0xb20 [ 1262.602034][ T31] 2 locks held by syz.1.2720/19479: [ 1262.607737][ T31] #0: ffff88801fec0410 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 1262.617397][ T31] #1: ffff8880471b2c90 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 1262.628414][ T31] 4 locks held by syz-executor/19587: [ 1262.634238][ T31] #0: ffff8880379f8410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.639557][T18149] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1262.644486][ T31] #1: ffff888040b86080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1262.662172][ T31] #2: ffff88802a399b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1262.672630][ T31] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1262.683192][ T31] 4 locks held by syz-executor/19609: [ 1262.688606][ T31] #0: ffff8880379f8410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.697743][ T31] #1: ffff88805ad69480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1262.707705][ T31] #2: ffff88802a399b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1262.717883][ T31] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1262.728342][ T31] 4 locks held by syz-executor/19652: [ 1262.733825][ T31] #0: ffff8880379f8410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.742966][ T31] #1: ffff888079a57080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1262.752963][ T31] #2: ffff88802a399b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1262.763119][ T31] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1262.773568][ T31] 4 locks held by syz-executor/19747: [ 1262.778987][ T31] #0: ffff8880379f8410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.788113][ T31] #1: ffff888055742080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1262.798058][ T31] #2: ffff88802a399b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1262.808318][ T31] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1262.818795][ T31] 4 locks held by syz-executor/19766: [ 1262.824288][ T31] #0: ffff8880379f8410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.833444][ T31] #1: ffff88805a070080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1262.843384][ T31] #2: ffff88802a399b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1262.853582][ T31] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1262.864765][ T31] 4 locks held by syz-executor/19784: [ 1262.870285][ T31] #0: ffff8880379f8410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.879432][ T31] #1: ffff888036842880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1262.889375][ T31] #2: ffff88802a399b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1262.899646][ T31] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1262.910290][ T31] 4 locks held by syz-executor/19807: [ 1262.915738][ T31] #0: ffff8880379f8410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.924900][ T31] #1: ffff88807adfdc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1262.934946][ T31] #2: ffff88802a399b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1262.945417][ T31] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1262.956011][ T31] 4 locks held by syz-executor/19826: [ 1262.961563][ T31] #0: ffff8880379f8410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1262.970749][ T31] #1: ffff88807b4de880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1262.980662][ T31] #2: ffff88802a399b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1262.990837][ T31] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1263.001247][ T31] 4 locks held by syz-executor/19845: [ 1263.006645][ T31] #0: ffff8880379f8410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1263.015846][ T31] #1: ffff888077d31c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1263.026074][ T31] #2: ffff88802a399b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1263.037893][ T31] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1263.064602][ T31] [ 1263.067052][ T31] ============================================= [ 1263.067052][ T31] [ 1263.075768][ T31] NMI backtrace for cpu 1 [ 1263.075799][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.075840][ T31] Tainted: [L]=SOFTLOCKUP [ 1263.075851][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1263.075867][ T31] Call Trace: [ 1263.075878][ T31] [ 1263.075890][ T31] dump_stack_lvl+0x100/0x190 [ 1263.075928][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1263.075965][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1263.075998][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1263.076077][ T31] sys_info+0x141/0x190 [ 1263.076107][ T31] watchdog+0xcb1/0x1030 [ 1263.076159][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1263.076202][ T31] ? __pfx_watchdog+0x10/0x10 [ 1263.076248][ T31] ? __kthread_parkme+0x18c/0x230 [ 1263.076296][ T31] ? kthread+0x13a/0x450 [ 1263.076342][ T31] ? __pfx_watchdog+0x10/0x10 [ 1263.076386][ T31] kthread+0x370/0x450 [ 1263.076431][ T31] ? __pfx_kthread+0x10/0x10 [ 1263.076484][ T31] ret_from_fork+0x72b/0xd50 [ 1263.076520][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1263.076554][ T31] ? __switch_to+0x800/0x1100 [ 1263.076592][ T31] ? __switch_to_asm+0x39/0x70 [ 1263.076631][ T31] ? __pfx_kthread+0x10/0x10 [ 1263.076681][ T31] ret_from_fork_asm+0x1a/0x30 [ 1263.076742][ T31] [ 1263.076754][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1263.216634][ C0] NMI backtrace for cpu 0 [ 1263.216667][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.216708][ C0] Tainted: [L]=SOFTLOCKUP [ 1263.216719][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1263.216736][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1263.216784][ C0] Code: d6 95 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 b0 24 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1263.216813][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 1263.216837][ C0] RAX: 00000000004f0905 RBX: ffffffff8e4955c0 RCX: ffffffff8b86e225 [ 1263.216857][ C0] RDX: 0000000000000000 RSI: ffffffff8df1a757 RDI: ffffffff8c1c4380 [ 1263.216876][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 1263.216895][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 1263.216914][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d73c50 [ 1263.216938][ C0] FS: 0000000000000000(0000) GS:ffff88812438a000(0000) knlGS:0000000000000000 [ 1263.216970][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1263.216990][ C0] CR2: 0000563583e6c048 CR3: 0000000031878000 CR4: 00000000003526f0 [ 1263.217010][ C0] Call Trace: [ 1263.217019][ C0] [ 1263.217030][ C0] default_idle+0x9/0x10 [ 1263.217056][ C0] default_idle_call+0x6c/0xb0 [ 1263.217083][ C0] do_idle+0x464/0x590 [ 1263.217128][ C0] ? __pfx_do_idle+0x10/0x10 [ 1263.217161][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 1263.217205][ C0] cpu_startup_entry+0x4f/0x60 [ 1263.217241][ C0] rest_init+0x251/0x260 [ 1263.217269][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1263.217422][ C0] start_kernel+0x484/0x490 [ 1263.217534][ C0] x86_64_start_reservations+0x24/0x30 [ 1263.217564][ C0] x86_64_start_kernel+0x12b/0x130 [ 1263.217594][ C0] common_startup_64+0x13e/0x148 [ 1263.217643][ C0] [ 1263.218852][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1263.218943][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.219080][ T31] Tainted: [L]=SOFTLOCKUP [ 1263.219120][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1263.219189][ T31] Call Trace: [ 1263.219249][ T31] [ 1263.219302][ T31] dump_stack_lvl+0x100/0x190 [ 1263.219424][ T31] vpanic+0x552/0x970 [ 1263.219528][ T31] ? __pfx_vpanic+0x10/0x10 [ 1263.219636][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1263.219763][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1263.219891][ T31] panic+0xd1/0xe0 [ 1263.219987][ T31] ? __pfx_panic+0x10/0x10 [ 1263.220105][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1263.220224][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1263.220340][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1263.220446][ T31] ? watchdog.cold+0x1ec/0x234 [ 1263.220559][ T31] ? watchdog+0xcc1/0x1030 [ 1263.220747][ T31] watchdog.cold+0x1fd/0x234 [ 1263.220884][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1263.221021][ T31] ? __pfx_watchdog+0x10/0x10 [ 1263.221169][ T31] ? __kthread_parkme+0x18c/0x230 [ 1263.221319][ T31] ? kthread+0x13a/0x450 [ 1263.221461][ T31] ? __pfx_watchdog+0x10/0x10 [ 1263.221590][ T31] kthread+0x370/0x450 [ 1263.221749][ T31] ? __pfx_kthread+0x10/0x10 [ 1263.221910][ T31] ret_from_fork+0x72b/0xd50 [ 1263.222025][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1263.557118][ T31] ? __switch_to+0x800/0x1100 [ 1263.561871][ T31] ? __switch_to_asm+0x39/0x70 [ 1263.566688][ T31] ? __pfx_kthread+0x10/0x10 [ 1263.571343][ T31] ret_from_fork_asm+0x1a/0x30 [ 1263.576174][ T31] [ 1263.579848][ T31] Kernel Offset: disabled [ 1263.584198][ T31] Rebooting in 86400 seconds..