last executing test programs: 3m58.760823605s ago: executing program 3 (id=1519): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyqe\x00', 0x401, 0x0) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8800) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x1, 0x2, 0x40000) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26041, 0x12) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x5, 0x800, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) socket(0x2a, 0x2, 0x1) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC0D0p\x00', 0x40002, 0x0) writev$auto(r2, &(0x7f0000000040)={0x0, 0x1}, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0xa0800, 0x0) ioctl$auto(r3, 0x540a, r3) sendfile$auto(0x3, 0x3, 0x0, 0x400000000007) 3m56.861607333s ago: executing program 3 (id=1528): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000000, 0x1, 0x9, 0x5d, 0x2, 0x75, {[0x80000000]}, 0x0, 0x7ff, 0x68a6, [0x5, 0x8, 0x5, 0x4]}) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xfffffffd, 0x9, 0x3, 0x16, 0x4, 0x5, 0x3, 0x800000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x3, 0xb414, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, [0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0xffffffff], "c4cbb7ab40a4d6220aa6d6ea4305f533c9e9bee6fcfc61"}, 0x200, 0x81) keyctl$auto_KEYCTL_SETPERM(0x5, 0xa, 0x4, 0x4, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5}, 0xe) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x7, 0x2, 0x7}, {0x2d91, 0xb, 0x6}, {0x1, 0x1, 0xfffff00000000000}, {0x40, 0x4, 0x8}, {0xf61, 0x4, 0xfffffffffffffff9}, {0xf94, 0x2, 0xffffffff}]}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001380)={{&(0x7f00000001c0), 0x6c8, 0x0, 0x9, &(0x7f0000001300), 0xf55c, 0xffffffff}, 0xa00}, 0x7, 0x1) write$auto(r3, &(0x7f00000001c0)='\'+\x00', 0x9) sendfile$auto(r3, r3, 0x0, 0x400000000006) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) 3m54.129863544s ago: executing program 3 (id=1535): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) r4 = socket(0xa, 0x3, 0x3b) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x3c3501, 0x0) write$auto(r3, &(0x7f0000000080)='7\x00\\\xa0\x04\x10f\x86\x00\xf9:@ k', 0x81) mmap$auto(0x6a, 0x8, 0x4, 0x1d, r4, 0x40) connect$auto(0x3, 0x0, 0x54) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x60100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 3m53.306720578s ago: executing program 3 (id=1536): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), r0) socket(0x10, 0x2, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sda1\x00', 0x48100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0xa, 0x5, 0x84) socket(0x2, 0x2, 0x0) socketpair$auto(0xffffffff, 0x2, 0x63, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 3m52.866492196s ago: executing program 3 (id=1537): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) write$auto(r1, &(0x7f00000001c0)='\'+\x00', 0x9) sendfile$auto(r1, r1, 0x0, 0x400000000006) 3m52.073145871s ago: executing program 3 (id=1545): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x101000, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0xfffffffffffffff8, 0xd, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev$auto(0x3, 0x0, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x7d, 0x9, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, 0x0, 0x3a) mmap$auto(0x0, 0x1, 0x7fff, 0x7bafa6b1, 0x401, 0x8000) sysinfo$auto(0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) madvise$auto(0x0, 0x2003f0, 0x18) mbind$auto(0x1000000000, 0xa, 0x5, 0x0, 0x2000000006, 0x209) socket(0x6, 0x5, 0x8) socket(0x27, 0x5, 0x73) 3m36.790258523s ago: executing program 32 (id=1545): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x101000, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0xfffffffffffffff8, 0xd, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev$auto(0x3, 0x0, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x7d, 0x9, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, 0x0, 0x3a) mmap$auto(0x0, 0x1, 0x7fff, 0x7bafa6b1, 0x401, 0x8000) sysinfo$auto(0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) madvise$auto(0x0, 0x2003f0, 0x18) mbind$auto(0x1000000000, 0xa, 0x5, 0x0, 0x2000000006, 0x209) socket(0x6, 0x5, 0x8) socket(0x27, 0x5, 0x73) 28.830250396s ago: executing program 2 (id=2269): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0x401) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(0x3, 0x4b34, 0x3) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) open(&(0x7f00000000c0)='./file0\x00', 0x4020c0, 0x140) keyctl$auto(0xf, 0xfffff7ffffffffff, 0x0, 0x8, 0x8) read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0) arch_prctl$auto(0x5001, 0x800) semctl$auto(0x201, 0x2, 0x13, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x5, 0x20000284) init_module$auto(0x0, 0xffff9, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x100000001, 0x7ff) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r1, 0x8, 0x6) close_range$auto(0x2, 0xa, 0x0) read$auto_tracing_fops_trace(0xffffffffffffffff, &(0x7f0000000280)=""/249, 0xf9) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, 0x0, 0x0) setgroups$auto(0xe32, 0x0) 27.11947993s ago: executing program 2 (id=2274): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x8) write$auto(r0, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) finit_module$auto(r1, 0x0, 0x3) 23.789848986s ago: executing program 2 (id=2282): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) r4 = socket(0xa, 0x3, 0x3b) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x3c3501, 0x0) write$auto(r3, &(0x7f0000000080)='7\x00\\\xa0\x04\x10f\x86\x00\xf9:@ k', 0x81) mmap$auto(0x6a, 0x8, 0x4, 0x1d, r4, 0x40) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, 0x0, 0x54) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x60100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 22.596217648s ago: executing program 2 (id=2287): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0xb267, 0x2, 0x105, 0x20081, 0x1ffde, 0x7, 0xfffffffffffffffd, 0x8, 0x9, 0x80003, 0x200, 0x200000000005, 0x384, 0x9, 0xb14, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x21ff9, 0x200, 0x10, 0x84, 0x0, 0x0, 0x2, 0x0, 0xac79, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x196fc46e, 0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x40000000000, 0x4, 0x2000000000, 0x101, 0x0, 0x0, 0xffffffffffdffffd]}, 0x1fa, 0x11) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd05, &(0x7f00000001c0)) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0x8) read$auto(0x3, 0x0, 0x7fffffff) 22.391295504s ago: executing program 2 (id=2288): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/workqueue/cpumask_isolated\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/194, 0xc2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x8000000, &(0x7f00000001c0)=@test={r1, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x6, 0x81, 0x68198}, 0x6) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 22.287399814s ago: executing program 1 (id=2289): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x8000000, &(0x7f00000001c0)=@test={r0, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x6, 0x81, 0x68198}, 0x6) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 22.141866067s ago: executing program 2 (id=2290): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0xb267, 0x2, 0x105, 0x20081, 0x1ffde, 0x7, 0xfffffffffffffffd, 0x8, 0x9, 0x80003, 0x200, 0x200000000005, 0x384, 0x9, 0xb14, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x21ff9, 0x200, 0x10, 0x84, 0x0, 0x0, 0x2, 0x0, 0xac79, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x196fc46e, 0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x40000000000, 0x4, 0x2000000000, 0x101, 0x0, 0x0, 0xffffffffffdffffd]}, 0x1fa, 0x11) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd05, &(0x7f00000001c0)) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$auto(0x3, 0x0, 0x8) read$auto(0x3, 0x0, 0x7fffffff) 21.996599813s ago: executing program 1 (id=2291): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) r4 = socket(0xa, 0x3, 0x3b) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x3c3501, 0x0) write$auto(r3, &(0x7f0000000080)='7\x00\\\xa0\x04\x10f\x86\x00\xf9:@ k', 0x81) mmap$auto(0x6a, 0x8, 0x4, 0x1d, r4, 0x40) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, 0x0, 0x54) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x60100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 21.606671401s ago: executing program 1 (id=2294): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/overlay/parameters/check_copy_up\x00', 0x129882, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7) setresuid$auto(0x0, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8001) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x9000, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4028af11, r2) madvise$auto(0x3, 0x9, 0x77) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, &(0x7f00000001c0)=""/200, 0xc8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2242, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 18.787489216s ago: executing program 1 (id=2301): r0 = socket(0xa, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) seccomp$auto_SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, r1, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, 0x0) write$auto(0x3, 0x0, 0xfdef) socketpair$auto(0x81f, 0x80, 0xfffffffe, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) fallocate$auto(0xffffffffffffffff, 0x81, 0x9, 0x0) fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0xea6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000640), 0x8182, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000440)={0x1}) unshare$auto(0x40000080) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) getsockopt$auto(r0, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb) 15.801466973s ago: executing program 1 (id=2305): mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x9) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x80}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r3, 0x0, 0x8) close_range$auto(r2, 0xffffffffffffffff, 0x0) read$auto(r1, 0x0, 0x7) 15.454655449s ago: executing program 1 (id=2306): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) r4 = socket(0xa, 0x3, 0x3b) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x3c3501, 0x0) write$auto(r3, &(0x7f0000000080)='7\x00\\\xa0\x04\x10f\x86\x00\xf9:@ k', 0x81) mmap$auto(0x6a, 0x8, 0x4, 0x1d, r4, 0x40) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, 0x0, 0x54) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x60100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 10.44282617s ago: executing program 0 (id=2317): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/overlay/parameters/check_copy_up\x00', 0x129882, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7) setresuid$auto(0x0, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8001) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x9000, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4028af11, r2) madvise$auto(0x3, 0x9, 0x77) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000000)='3\xc7\xfe\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, &(0x7f00000001c0)=""/200, 0xc8) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 9.656518968s ago: executing program 0 (id=2318): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) statmount$auto(0x0, 0x0, 0x1fa, 0x11) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd05, &(0x7f00000001c0)) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$auto(0x3, 0x0, 0x8) read$auto(0x3, 0x0, 0x7fffffff) 9.320803961s ago: executing program 4 (id=2319): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000000, 0x1, 0x9, 0x5d, 0x2, 0x75, {[0x80000000]}, 0x0, 0x7ff, 0x68a6, [0x5, 0x8, 0x5, 0x4]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5}, 0xe) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x7, 0x2, 0x7}, {0x2d91, 0xb, 0x6}, {0x1, 0x1, 0xfffff00000000000}, {0x40, 0x4, 0x8}, {0xf61, 0x4, 0xfffffffffffffff9}, {0xf94, 0x2, 0xffffffff}]}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) ioctl$auto_VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001380)={{&(0x7f00000001c0), 0x6c8, 0x0, 0x9, &(0x7f0000001300), 0xf55c, 0xffffffff}, 0xa00}, 0x7, 0x1) write$auto(r2, &(0x7f00000001c0)='\'+\x00', 0x9) sendfile$auto(r2, r2, 0x0, 0x400000000006) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) 9.319967778s ago: executing program 0 (id=2327): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x59702, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000002800)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x1a1040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80a80, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/i8042/serio1/resolution\x00', 0x183902, 0x0) write$auto(r0, 0x0, 0x4) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x4) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x389c0, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pidfd_open$auto(0x1, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$auto(r2, 0x6, 0x1f, 0x0, 0x3d) setsockopt$auto(r1, 0x0, 0x8, 0xfffffffffffffffe, 0x20) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x3, 0x9b7f, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0xffffffffffffffff, 0x0, 0x54) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) 8.350605129s ago: executing program 4 (id=2320): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/overlay/parameters/check_copy_up\x00', 0x129882, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7) setresuid$auto(0x0, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8001) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x9000, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4028af11, r2) madvise$auto(0x3, 0x9, 0x77) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000000)='3\xc7\xfe\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, &(0x7f00000001c0)=""/200, 0xc8) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 7.698807571s ago: executing program 4 (id=2321): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/workqueue/cpumask_isolated\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/194, 0xc2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) socket(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x8000000, &(0x7f00000001c0)=@test={r2, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x6, 0x81, 0x68198}, 0x6) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 7.698001243s ago: executing program 0 (id=2323): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/overlay/parameters/check_copy_up\x00', 0x129882, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7) setresuid$auto(0x0, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8001) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x9000, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4028af11, r2) 7.348572475s ago: executing program 4 (id=2324): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000000, 0x1, 0x9, 0x5d, 0x2, 0x75, {[0x80000000]}, 0x0, 0x7ff, 0x68a6, [0x5, 0x8, 0x5, 0x4]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5}, 0xe) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x7, 0x2, 0x7}, {0x2d91, 0xb, 0x6}, {0x1, 0x1, 0xfffff00000000000}, {0x40, 0x4, 0x8}, {0xf61, 0x4, 0xfffffffffffffff9}, {0xf94, 0x2, 0xffffffff}]}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) ioctl$auto_VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001380)={{&(0x7f00000001c0), 0x6c8, 0x0, 0x9, &(0x7f0000001300), 0xf55c, 0xffffffff}, 0xa00}, 0x7, 0x1) write$auto(r2, &(0x7f00000001c0)='\'+\x00', 0x9) sendfile$auto(r2, r2, 0x0, 0x400000000006) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) 7.019083761s ago: executing program 0 (id=2325): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x468102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x5, 0x0) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/kpagecgroup\x00', 0x20000, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x24040004) write$auto_vhci_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'xfrm0\x00'}) quotactl_fd$auto(0xffffffffffffffff, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 6.701636525s ago: executing program 4 (id=2326): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/overlay/parameters/check_copy_up\x00', 0x129882, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x7) setresuid$auto(0x0, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8001) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x9000, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4028af11, r1) 6.700889895s ago: executing program 0 (id=2334): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x59702, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000002800)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x1a1040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80a80, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/i8042/serio1/resolution\x00', 0x183902, 0x0) write$auto(r0, 0x0, 0x4) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x4) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x389c0, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pidfd_open$auto(0x1, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$auto(r2, 0x6, 0x1f, 0x0, 0x3d) setsockopt$auto(r1, 0x0, 0x8, 0xfffffffffffffffe, 0x20) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) 6.245619217s ago: executing program 4 (id=2328): mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x9) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x80}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r2, 0x0, 0x8) close_range$auto(r1, 0xffffffffffffffff, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) 0s ago: executing program 33 (id=2306): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) r4 = socket(0xa, 0x3, 0x3b) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x3c3501, 0x0) write$auto(r3, &(0x7f0000000080)='7\x00\\\xa0\x04\x10f\x86\x00\xf9:@ k', 0x81) mmap$auto(0x6a, 0x8, 0x4, 0x1d, r4, 0x40) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, 0x0, 0x54) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x60100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) kernel console output (not intermixed with test programs): 4382][T26124] ? find_held_lock+0x2b/0x80 [ 595.414403][T26124] ? get_signal+0x7e0/0x21e0 [ 595.414431][T26124] do_group_exit+0xd5/0x2a0 [ 595.414465][T26124] get_signal+0x1ec7/0x21e0 [ 595.414501][T26124] ? __pfx_get_signal+0x10/0x10 [ 595.414527][T26124] ? do_futex+0x192/0x350 [ 595.414561][T26124] arch_do_signal_or_restart+0x91/0x770 [ 595.414591][T26124] ? find_held_lock+0x2b/0x80 [ 595.414614][T26124] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 595.414652][T26124] ? __pfx___x64_sys_futex+0x10/0x10 [ 595.414690][T26124] exit_to_user_mode_loop+0x86/0x4a0 [ 595.414725][T26124] do_syscall_64+0x668/0xf80 [ 595.414747][T26124] ? clear_bhb_loop+0x40/0x90 [ 595.414776][T26124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.414800][T26124] RIP: 0033:0x7f249bb9c799 [ 595.414819][T26124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.414842][T26124] RSP: 002b:00007f2499df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 595.414865][T26124] RAX: fffffffffffffe00 RBX: 00007f249be16098 RCX: 00007f249bb9c799 [ 595.414880][T26124] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f249be16098 [ 595.414894][T26124] RBP: 00007f249be16090 R08: 0000000000000000 R09: 0000000000000000 [ 595.414909][T26124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.414922][T26124] R13: 00007f249be16128 R14: 00007ffda4020eb0 R15: 00007ffda4020f98 [ 595.414952][T26124] [ 595.872333][T26164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1992'. [ 596.124579][T26174] FAULT_INJECTION: forcing a failure. [ 596.124579][T26174] name failslab, interval 1, probability 0, space 0, times 0 [ 596.138996][T26174] CPU: 0 UID: 0 PID: 26174 Comm: syz.1.1993 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.139034][T26174] Tainted: [L]=SOFTLOCKUP [ 596.139043][T26174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.139058][T26174] Call Trace: [ 596.139066][T26174] [ 596.139075][T26174] dump_stack_lvl+0x100/0x190 [ 596.139118][T26174] should_fail_ex.cold+0x5/0xa [ 596.139149][T26174] should_failslab+0xc2/0x120 [ 596.139176][T26174] __kmalloc_cache_node_noprof+0x7d/0x770 [ 596.139201][T26174] ? __get_vm_area_node+0x101/0x330 [ 596.139230][T26174] ? __pfx_css_rstat_updated+0x10/0x10 [ 596.139265][T26174] __get_vm_area_node+0x101/0x330 [ 596.139299][T26174] __vmalloc_node_range_noprof+0x213/0x1530 [ 596.139333][T26174] ? vhost_task_create+0x1db/0x370 [ 596.139370][T26174] ? find_held_lock+0x2b/0x80 [ 596.139394][T26174] ? local_lock_release+0x99/0x130 [ 596.139425][T26174] ? local_lock_release+0x99/0x130 [ 596.139459][T26174] ? vhost_task_create+0x1db/0x370 [ 596.139505][T26174] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 596.139540][T26174] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 596.139575][T26174] ? rcu_is_watching+0x12/0xc0 [ 596.139615][T26174] ? trace_kmem_cache_alloc+0xf3/0x120 [ 596.139646][T26174] ? vhost_task_create+0x1db/0x370 [ 596.139682][T26174] __vmalloc_node_noprof+0xad/0xf0 [ 596.139715][T26174] ? vhost_task_create+0x1db/0x370 [ 596.139756][T26174] copy_process+0x5ec/0x7a40 [ 596.139800][T26174] ? __pfx_copy_process+0x10/0x10 [ 596.139835][T26174] ? lockdep_init_map_type+0x5c/0x250 [ 596.139871][T26174] ? lockdep_init_map_type+0x5c/0x250 [ 596.139907][T26174] ? __pfx_vhost_run_work_list+0x10/0x10 [ 596.139951][T26174] ? __pfx_vhost_worker_killed+0x10/0x10 [ 596.139996][T26174] vhost_task_create+0x1db/0x370 [ 596.140036][T26174] ? __pfx_vhost_task_create+0x10/0x10 [ 596.140083][T26174] ? __pfx_vhost_task_fn+0x10/0x10 [ 596.140132][T26174] ? snprintf+0xc7/0x100 [ 596.140174][T26174] vhost_task_worker_create+0x8d/0x260 [ 596.140215][T26174] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 596.140256][T26174] ? lockdep_init_map_type+0x5c/0x250 [ 596.140292][T26174] ? lockdep_init_map_type+0x5c/0x250 [ 596.140330][T26174] vhost_worker_create+0x243/0x310 [ 596.140369][T26174] ? __pfx_vhost_worker_create+0x10/0x10 [ 596.140416][T26174] vhost_dev_set_owner+0x719/0xa30 [ 596.140465][T26174] vhost_net_ioctl+0xfa3/0x1910 [ 596.140487][T26174] ? do_vfs_ioctl+0x226/0x13e0 [ 596.140526][T26174] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 596.140563][T26174] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 596.140593][T26174] ? find_held_lock+0x2b/0x80 [ 596.140617][T26174] ? __fget_files+0x215/0x3d0 [ 596.140640][T26174] ? hook_file_ioctl_common+0x146/0x410 [ 596.140678][T26174] ? __fget_files+0x21f/0x3d0 [ 596.140707][T26174] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 596.140733][T26174] __x64_sys_ioctl+0x18e/0x210 [ 596.140772][T26174] do_syscall_64+0x106/0xf80 [ 596.140795][T26174] ? clear_bhb_loop+0x40/0x90 [ 596.140825][T26174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.140851][T26174] RIP: 0033:0x7f3c40d9c799 [ 596.140872][T26174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.140897][T26174] RSP: 002b:00007f3c41bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.140921][T26174] RAX: ffffffffffffffda RBX: 00007f3c41016090 RCX: 00007f3c40d9c799 [ 596.140938][T26174] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 596.140953][T26174] RBP: 00007f3c40e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 596.140969][T26174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.140984][T26174] R13: 00007f3c41016128 R14: 00007f3c41016090 R15: 00007ffcc340d2e8 [ 596.141021][T26174] [ 596.141136][T26174] syz.1.1993: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 597.151625][T26174] CPU: 0 UID: 0 PID: 26174 Comm: syz.1.1993 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.151661][T26174] Tainted: [L]=SOFTLOCKUP [ 597.151668][T26174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.151683][T26174] Call Trace: [ 597.151690][T26174] [ 597.151699][T26174] dump_stack_lvl+0x100/0x190 [ 597.151740][T26174] warn_alloc.cold+0x95/0x1c1 [ 597.151781][T26174] ? __pfx_warn_alloc+0x10/0x10 [ 597.151817][T26174] ? trace_kmalloc+0x101/0x130 [ 597.151845][T26174] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 597.151873][T26174] ? __kasan_kmalloc+0x8a/0xb0 [ 597.151912][T26174] ? __get_vm_area_node+0x208/0x330 [ 597.151955][T26174] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 597.151990][T26174] ? find_held_lock+0x2b/0x80 [ 597.152013][T26174] ? local_lock_release+0x99/0x130 [ 597.152042][T26174] ? local_lock_release+0x99/0x130 [ 597.152075][T26174] ? vhost_task_create+0x1db/0x370 [ 597.152120][T26174] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 597.152153][T26174] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 597.152186][T26174] ? rcu_is_watching+0x12/0xc0 [ 597.152224][T26174] ? trace_kmem_cache_alloc+0xf3/0x120 [ 597.152253][T26174] ? vhost_task_create+0x1db/0x370 [ 597.152287][T26174] __vmalloc_node_noprof+0xad/0xf0 [ 597.152318][T26174] ? vhost_task_create+0x1db/0x370 [ 597.152357][T26174] copy_process+0x5ec/0x7a40 [ 597.152400][T26174] ? __pfx_copy_process+0x10/0x10 [ 597.152432][T26174] ? lockdep_init_map_type+0x5c/0x250 [ 597.152467][T26174] ? lockdep_init_map_type+0x5c/0x250 [ 597.152501][T26174] ? __pfx_vhost_run_work_list+0x10/0x10 [ 597.152538][T26174] ? __pfx_vhost_worker_killed+0x10/0x10 [ 597.152573][T26174] vhost_task_create+0x1db/0x370 [ 597.152610][T26174] ? __pfx_vhost_task_create+0x10/0x10 [ 597.152654][T26174] ? __pfx_vhost_task_fn+0x10/0x10 [ 597.152698][T26174] ? snprintf+0xc7/0x100 [ 597.152737][T26174] vhost_task_worker_create+0x8d/0x260 [ 597.152776][T26174] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 597.152814][T26174] ? lockdep_init_map_type+0x5c/0x250 [ 597.152848][T26174] ? lockdep_init_map_type+0x5c/0x250 [ 597.152885][T26174] vhost_worker_create+0x243/0x310 [ 597.152925][T26174] ? __pfx_vhost_worker_create+0x10/0x10 [ 597.152970][T26174] vhost_dev_set_owner+0x719/0xa30 [ 597.153017][T26174] vhost_net_ioctl+0xfa3/0x1910 [ 597.153038][T26174] ? do_vfs_ioctl+0x226/0x13e0 [ 597.153074][T26174] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 597.153110][T26174] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 597.153138][T26174] ? find_held_lock+0x2b/0x80 [ 597.153161][T26174] ? __fget_files+0x215/0x3d0 [ 597.153183][T26174] ? hook_file_ioctl_common+0x146/0x410 [ 597.153219][T26174] ? __fget_files+0x21f/0x3d0 [ 597.153246][T26174] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 597.153270][T26174] __x64_sys_ioctl+0x18e/0x210 [ 597.153308][T26174] do_syscall_64+0x106/0xf80 [ 597.153329][T26174] ? clear_bhb_loop+0x40/0x90 [ 597.153359][T26174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.153383][T26174] RIP: 0033:0x7f3c40d9c799 [ 597.153402][T26174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.153425][T26174] RSP: 002b:00007f3c41bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.153446][T26174] RAX: ffffffffffffffda RBX: 00007f3c41016090 RCX: 00007f3c40d9c799 [ 597.153462][T26174] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 597.153476][T26174] RBP: 00007f3c40e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 597.153490][T26174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.153504][T26174] R13: 00007f3c41016128 R14: 00007f3c41016090 R15: 00007ffcc340d2e8 [ 597.153534][T26174] [ 598.164049][T26174] Mem-Info: [ 598.207817][T26174] active_anon:36144 inactive_anon:2175 isolated_anon:0 [ 598.207817][T26174] active_file:11394 inactive_file:49741 isolated_file:0 [ 598.207817][T26174] unevictable:768 dirty:1261 writeback:0 [ 598.207817][T26174] slab_reclaimable:12428 slab_unreclaimable:100238 [ 598.207817][T26174] mapped:27751 shmem:1937 pagetables:2185 [ 598.207817][T26174] sec_pagetables:0 bounce:0 [ 598.207817][T26174] kernel_misc_reclaimable:0 [ 598.207817][T26174] free:1279748 free_pcp:10459 free_cma:0 [ 598.419749][T26174] Node 0 active_anon:142540kB inactive_anon:8700kB active_file:45576kB inactive_file:198816kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110992kB dirty:5032kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12064kB pagetables:8484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 598.661440][T26174] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 598.804095][T26174] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.946537][T26174] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 598.952352][T26174] Node 0 DMA32 free:1170324kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:142232kB inactive_anon:8700kB active_file:45576kB inactive_file:198824kB unevictable:1536kB writepending:5032kB zspages:0kB present:3129332kB managed:2537300kB mlocked:0kB bounce:0kB free_pcp:40008kB local_pcp:40008kB free_cma:0kB [ 599.164292][T26174] lowmem_reserve[]: 0 0 1 1 1 [ 599.181787][T26174] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 599.258317][T26325] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2004'. [ 599.310478][T26174] lowmem_reserve[]: 0 0 0 0 0 [ 599.410048][T26174] Node 1 Normal free:3939288kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:148kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.512423][T26174] lowmem_reserve[]: 0 0 0 0 0 [ 599.545354][T26174] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 599.578161][T26329] Invalid ELF header magic: != ELF [ 599.590706][T26174] Node 0 DMA32: 6979*4kB (UME) 4719*8kB (UME) 2977*16kB (UME) 756*32kB (UME) 976*64kB (UME) 707*128kB (UME) 533*256kB (UME) 376*512kB (UME) 69*1024kB (UME) 2*2048kB (ME) 116*4096kB (M) = 1169300kB [ 599.659479][T26174] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 599.705395][T26174] Node 1 Normal: 4*4kB (M) 13*8kB (UM) 10*16kB (UM) 12*32kB (UM) 7*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (M) 3*1024kB (UM) 4*2048kB (UM) 958*4096kB (M) = 3939288kB [ 599.781990][T26174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.844101][T26174] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 599.891212][T26174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.935259][T26174] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 599.999595][T26174] 62564 total pagecache pages [ 600.024548][T26174] 3 pages in swap cache [ 600.047436][T26174] Free swap = 124984kB [ 600.063937][T26174] Total swap = 124996kB [ 600.090746][T26174] 2097051 pages RAM [ 600.135113][T26174] 0 pages HighMem/MovableOnly [ 600.185943][T26174] 430847 pages reserved [ 600.208123][T26174] 0 pages cma reserved [ 601.083581][T26393] Invalid ELF header magic: != ELF [ 601.991233][T26436] bond0: invalid ARP target specified [ 602.575352][T26439] Invalid ELF header magic: != ELF [ 604.056631][T26577] FAULT_INJECTION: forcing a failure. [ 604.056631][T26577] name failslab, interval 1, probability 0, space 0, times 0 [ 604.140021][T26577] CPU: 0 UID: 0 PID: 26577 Comm: syz.4.2019 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.140060][T26577] Tainted: [L]=SOFTLOCKUP [ 604.140068][T26577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.140084][T26577] Call Trace: [ 604.140092][T26577] [ 604.140100][T26577] dump_stack_lvl+0x100/0x190 [ 604.140149][T26577] should_fail_ex.cold+0x5/0xa [ 604.140178][T26577] should_failslab+0xc2/0x120 [ 604.140205][T26577] __kmalloc_cache_node_noprof+0x7d/0x770 [ 604.140231][T26577] ? __get_vm_area_node+0x101/0x330 [ 604.140259][T26577] ? __pfx_css_rstat_updated+0x10/0x10 [ 604.140294][T26577] __get_vm_area_node+0x101/0x330 [ 604.140328][T26577] __vmalloc_node_range_noprof+0x213/0x1530 [ 604.140362][T26577] ? vhost_task_create+0x1db/0x370 [ 604.140404][T26577] ? find_held_lock+0x2b/0x80 [ 604.140428][T26577] ? local_lock_release+0x99/0x130 [ 604.140458][T26577] ? local_lock_release+0x99/0x130 [ 604.140493][T26577] ? vhost_task_create+0x1db/0x370 [ 604.140540][T26577] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 604.140576][T26577] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 604.140611][T26577] ? rcu_is_watching+0x12/0xc0 [ 604.140650][T26577] ? trace_kmem_cache_alloc+0xf3/0x120 [ 604.140681][T26577] ? vhost_task_create+0x1db/0x370 [ 604.140718][T26577] __vmalloc_node_noprof+0xad/0xf0 [ 604.140750][T26577] ? vhost_task_create+0x1db/0x370 [ 604.140792][T26577] copy_process+0x5ec/0x7a40 [ 604.140836][T26577] ? __pfx_copy_process+0x10/0x10 [ 604.140870][T26577] ? lockdep_init_map_type+0x5c/0x250 [ 604.140906][T26577] ? lockdep_init_map_type+0x5c/0x250 [ 604.140942][T26577] ? __pfx_vhost_run_work_list+0x10/0x10 [ 604.140981][T26577] ? __pfx_vhost_worker_killed+0x10/0x10 [ 604.141019][T26577] vhost_task_create+0x1db/0x370 [ 604.141058][T26577] ? __pfx_vhost_task_create+0x10/0x10 [ 604.141105][T26577] ? __pfx_vhost_task_fn+0x10/0x10 [ 604.141151][T26577] ? snprintf+0xc7/0x100 [ 604.141191][T26577] vhost_task_worker_create+0x8d/0x260 [ 604.141233][T26577] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 604.141274][T26577] ? lockdep_init_map_type+0x5c/0x250 [ 604.141310][T26577] ? lockdep_init_map_type+0x5c/0x250 [ 604.141350][T26577] vhost_worker_create+0x243/0x310 [ 604.141389][T26577] ? __pfx_vhost_worker_create+0x10/0x10 [ 604.141440][T26577] vhost_dev_set_owner+0x719/0xa30 [ 604.141490][T26577] vhost_net_ioctl+0xfa3/0x1910 [ 604.141512][T26577] ? do_vfs_ioctl+0x226/0x13e0 [ 604.141550][T26577] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 604.141588][T26577] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 604.141618][T26577] ? find_held_lock+0x2b/0x80 [ 604.141641][T26577] ? __fget_files+0x215/0x3d0 [ 604.141664][T26577] ? hook_file_ioctl_common+0x146/0x410 [ 604.141701][T26577] ? __fget_files+0x21f/0x3d0 [ 604.141730][T26577] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 604.141755][T26577] __x64_sys_ioctl+0x18e/0x210 [ 604.141796][T26577] do_syscall_64+0x106/0xf80 [ 604.141817][T26577] ? clear_bhb_loop+0x40/0x90 [ 604.141848][T26577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.141874][T26577] RIP: 0033:0x7f69f799c799 [ 604.141894][T26577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.141918][T26577] RSP: 002b:00007f69f8830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.141943][T26577] RAX: ffffffffffffffda RBX: 00007f69f7c16090 RCX: 00007f69f799c799 [ 604.141959][T26577] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 604.141975][T26577] RBP: 00007f69f7a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 604.141990][T26577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.142006][T26577] R13: 00007f69f7c16128 R14: 00007f69f7c16090 R15: 00007fff9b647f88 [ 604.142038][T26577] [ 606.401461][T26689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2025'. [ 606.701290][T26694] bond0: invalid ARP target specified [ 607.708325][T26753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2031'. [ 608.008056][T26769] FAULT_INJECTION: forcing a failure. [ 608.008056][T26769] name failslab, interval 1, probability 0, space 0, times 0 [ 608.090237][T26769] CPU: 0 UID: 0 PID: 26769 Comm: syz.4.2033 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.090277][T26769] Tainted: [L]=SOFTLOCKUP [ 608.090286][T26769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 608.090301][T26769] Call Trace: [ 608.090308][T26769] [ 608.090317][T26769] dump_stack_lvl+0x100/0x190 [ 608.090361][T26769] should_fail_ex.cold+0x5/0xa [ 608.090394][T26769] ? lsm_blob_alloc+0x68/0x90 [ 608.090432][T26769] should_failslab+0xc2/0x120 [ 608.090459][T26769] __kmalloc_noprof+0xe0/0x850 [ 608.090498][T26769] ? trace_kmalloc+0x101/0x130 [ 608.090529][T26769] lsm_blob_alloc+0x68/0x90 [ 608.090567][T26769] security_sk_alloc+0x2d/0x290 [ 608.090594][T26769] sk_prot_alloc+0x12a/0x2a0 [ 608.090625][T26769] sk_alloc+0x36/0xe80 [ 608.090661][T26769] __netlink_create+0x5e/0x2c0 [ 608.090700][T26769] __netlink_kernel_create+0xed/0x750 [ 608.090723][T26769] ? __lock_acquire+0x4a5/0x2630 [ 608.090757][T26769] ? __pfx___netlink_kernel_create+0x10/0x10 [ 608.090791][T26769] rtnetlink_net_init+0xb9/0x140 [ 608.090826][T26769] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 608.090861][T26769] ? lockdep_init_map_type+0x5c/0x250 [ 608.090895][T26769] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 608.090927][T26769] ? __pfx_rtnetlink_bind+0x10/0x10 [ 608.090963][T26769] ? mutex_init_lockep+0x110/0x150 [ 608.091001][T26769] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 608.091034][T26769] ops_init+0x1e2/0x5f0 [ 608.091060][T26769] setup_net+0x118/0x3a0 [ 608.091084][T26769] ? __pfx_setup_net+0x10/0x10 [ 608.091113][T26769] ? lockdep_init_map_type+0x5c/0x250 [ 608.091148][T26769] ? mutex_init_lockep+0x110/0x150 [ 608.091188][T26769] copy_net_ns+0x46f/0x7c0 [ 608.091217][T26769] create_new_namespaces+0x3ea/0xac0 [ 608.091251][T26769] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 608.091282][T26769] ksys_unshare+0x473/0xad0 [ 608.091316][T26769] ? __pfx_ksys_unshare+0x10/0x10 [ 608.091360][T26769] __x64_sys_unshare+0x31/0x40 [ 608.091392][T26769] do_syscall_64+0x106/0xf80 [ 608.091414][T26769] ? clear_bhb_loop+0x40/0x90 [ 608.091444][T26769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.091470][T26769] RIP: 0033:0x7f69f799c799 [ 608.091489][T26769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.091513][T26769] RSP: 002b:00007f69f8830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 608.091536][T26769] RAX: ffffffffffffffda RBX: 00007f69f7c16090 RCX: 00007f69f799c799 [ 608.091552][T26769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 608.091567][T26769] RBP: 00007f69f7a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 608.091581][T26769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.091595][T26769] R13: 00007f69f7c16128 R14: 00007f69f7c16090 R15: 00007fff9b647f88 [ 608.091626][T26769] [ 608.721119][T26777] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 608.903193][ T48] EXT4-fs: 2 callbacks suppressed [ 608.903211][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 962 with max blocks 59 with error 117 [ 609.008957][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 609.008957][ T48] [ 609.084063][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1 with max blocks 4 with error 117 [ 609.169867][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 609.169867][ T48] [ 609.200312][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1400 with max blocks 84 with error 117 [ 609.233476][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 609.233476][ T48] [ 609.275412][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 967 with max blocks 53 with error 117 [ 609.329114][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 609.329114][ T48] [ 609.358847][T26781] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 609.397538][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1396 with max blocks 70 with error 117 [ 609.434498][T26837] FAULT_INJECTION: forcing a failure. [ 609.434498][T26837] name failslab, interval 1, probability 0, space 0, times 0 [ 609.481345][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 609.481345][ T48] [ 609.533096][T26837] CPU: 0 UID: 0 PID: 26837 Comm: syz.0.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.533135][T26837] Tainted: [L]=SOFTLOCKUP [ 609.533143][T26837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 609.533158][T26837] Call Trace: [ 609.533166][T26837] [ 609.533174][T26837] dump_stack_lvl+0x100/0x190 [ 609.533217][T26837] should_fail_ex.cold+0x5/0xa [ 609.533259][T26837] should_failslab+0xc2/0x120 [ 609.533287][T26837] __kmalloc_cache_node_noprof+0x7d/0x770 [ 609.533312][T26837] ? __get_vm_area_node+0x101/0x330 [ 609.533340][T26837] ? __pfx_css_rstat_updated+0x10/0x10 [ 609.533375][T26837] __get_vm_area_node+0x101/0x330 [ 609.533409][T26837] __vmalloc_node_range_noprof+0x213/0x1530 [ 609.533443][T26837] ? vhost_task_create+0x1db/0x370 [ 609.533480][T26837] ? find_held_lock+0x2b/0x80 [ 609.533503][T26837] ? local_lock_release+0x99/0x130 [ 609.533534][T26837] ? local_lock_release+0x99/0x130 [ 609.533569][T26837] ? vhost_task_create+0x1db/0x370 [ 609.533615][T26837] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 609.533651][T26837] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 609.533685][T26837] ? rcu_is_watching+0x12/0xc0 [ 609.533725][T26837] ? trace_kmem_cache_alloc+0xf3/0x120 [ 609.533756][T26837] ? vhost_task_create+0x1db/0x370 [ 609.533793][T26837] __vmalloc_node_noprof+0xad/0xf0 [ 609.533826][T26837] ? vhost_task_create+0x1db/0x370 [ 609.533867][T26837] copy_process+0x5ec/0x7a40 [ 609.533911][T26837] ? __pfx_copy_process+0x10/0x10 [ 609.533946][T26837] ? lockdep_init_map_type+0x5c/0x250 [ 609.533982][T26837] ? lockdep_init_map_type+0x5c/0x250 [ 609.534018][T26837] ? __pfx_vhost_run_work_list+0x10/0x10 [ 609.534058][T26837] ? __pfx_vhost_worker_killed+0x10/0x10 [ 609.534096][T26837] vhost_task_create+0x1db/0x370 [ 609.534134][T26837] ? __pfx_vhost_task_create+0x10/0x10 [ 609.534181][T26837] ? __pfx_vhost_task_fn+0x10/0x10 [ 609.534227][T26837] ? snprintf+0xc7/0x100 [ 609.534275][T26837] vhost_task_worker_create+0x8d/0x260 [ 609.534317][T26837] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 609.534358][T26837] ? lockdep_init_map_type+0x5c/0x250 [ 609.534394][T26837] ? lockdep_init_map_type+0x5c/0x250 [ 609.534434][T26837] vhost_worker_create+0x243/0x310 [ 609.534473][T26837] ? __pfx_vhost_worker_create+0x10/0x10 [ 609.534520][T26837] vhost_dev_set_owner+0x719/0xa30 [ 609.534570][T26837] vhost_net_ioctl+0xfa3/0x1910 [ 609.534593][T26837] ? do_vfs_ioctl+0x226/0x13e0 [ 609.534631][T26837] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 609.534668][T26837] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 609.534699][T26837] ? find_held_lock+0x2b/0x80 [ 609.534723][T26837] ? __fget_files+0x215/0x3d0 [ 609.534745][T26837] ? hook_file_ioctl_common+0x146/0x410 [ 609.534783][T26837] ? __fget_files+0x21f/0x3d0 [ 609.534812][T26837] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 609.534838][T26837] __x64_sys_ioctl+0x18e/0x210 [ 609.534878][T26837] do_syscall_64+0x106/0xf80 [ 609.534900][T26837] ? clear_bhb_loop+0x40/0x90 [ 609.534931][T26837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.534956][T26837] RIP: 0033:0x7f249bb9c799 [ 609.534977][T26837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.535002][T26837] RSP: 002b:00007f2499df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.535026][T26837] RAX: ffffffffffffffda RBX: 00007f249be16090 RCX: 00007f249bb9c799 [ 609.535042][T26837] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 609.535056][T26837] RBP: 00007f249bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 609.535071][T26837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.535086][T26837] R13: 00007f249be16128 R14: 00007f249be16090 R15: 00007ffda4020f98 [ 609.535117][T26837] [ 609.535128][T26837] warn_alloc: 1 callbacks suppressed [ 609.535140][T26837] syz.0.2035: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 610.525046][T26884] Invalid ELF header magic: != ELF [ 611.053276][T26837] ,cpuset=/,mems_allowed=0-1 [ 611.089648][T26837] CPU: 0 UID: 0 PID: 26837 Comm: syz.0.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.089684][T26837] Tainted: [L]=SOFTLOCKUP [ 611.089697][T26837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 611.089711][T26837] Call Trace: [ 611.089718][T26837] [ 611.089727][T26837] dump_stack_lvl+0x100/0x190 [ 611.089768][T26837] warn_alloc.cold+0x95/0x1c1 [ 611.089810][T26837] ? __pfx_warn_alloc+0x10/0x10 [ 611.089851][T26837] ? trace_kmalloc+0x101/0x130 [ 611.089879][T26837] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 611.089907][T26837] ? __kasan_kmalloc+0x8a/0xb0 [ 611.089947][T26837] ? __get_vm_area_node+0x208/0x330 [ 611.089982][T26837] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 611.090014][T26837] ? find_held_lock+0x2b/0x80 [ 611.090037][T26837] ? local_lock_release+0x99/0x130 [ 611.090067][T26837] ? local_lock_release+0x99/0x130 [ 611.090101][T26837] ? vhost_task_create+0x1db/0x370 [ 611.090146][T26837] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 611.090180][T26837] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 611.090214][T26837] ? rcu_is_watching+0x12/0xc0 [ 611.090252][T26837] ? trace_kmem_cache_alloc+0xf3/0x120 [ 611.090281][T26837] ? vhost_task_create+0x1db/0x370 [ 611.090316][T26837] __vmalloc_node_noprof+0xad/0xf0 [ 611.090346][T26837] ? vhost_task_create+0x1db/0x370 [ 611.090385][T26837] copy_process+0x5ec/0x7a40 [ 611.090428][T26837] ? __pfx_copy_process+0x10/0x10 [ 611.090461][T26837] ? lockdep_init_map_type+0x5c/0x250 [ 611.090496][T26837] ? lockdep_init_map_type+0x5c/0x250 [ 611.090530][T26837] ? __pfx_vhost_run_work_list+0x10/0x10 [ 611.090567][T26837] ? __pfx_vhost_worker_killed+0x10/0x10 [ 611.090603][T26837] vhost_task_create+0x1db/0x370 [ 611.090639][T26837] ? __pfx_vhost_task_create+0x10/0x10 [ 611.090684][T26837] ? __pfx_vhost_task_fn+0x10/0x10 [ 611.090728][T26837] ? snprintf+0xc7/0x100 [ 611.090767][T26837] vhost_task_worker_create+0x8d/0x260 [ 611.090807][T26837] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 611.090851][T26837] ? lockdep_init_map_type+0x5c/0x250 [ 611.090885][T26837] ? lockdep_init_map_type+0x5c/0x250 [ 611.090922][T26837] vhost_worker_create+0x243/0x310 [ 611.090959][T26837] ? __pfx_vhost_worker_create+0x10/0x10 [ 611.091004][T26837] vhost_dev_set_owner+0x719/0xa30 [ 611.091051][T26837] vhost_net_ioctl+0xfa3/0x1910 [ 611.091072][T26837] ? do_vfs_ioctl+0x226/0x13e0 [ 611.091109][T26837] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 611.091144][T26837] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 611.091173][T26837] ? find_held_lock+0x2b/0x80 [ 611.091196][T26837] ? __fget_files+0x215/0x3d0 [ 611.091218][T26837] ? hook_file_ioctl_common+0x146/0x410 [ 611.091254][T26837] ? __fget_files+0x21f/0x3d0 [ 611.091282][T26837] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 611.091306][T26837] __x64_sys_ioctl+0x18e/0x210 [ 611.091344][T26837] do_syscall_64+0x106/0xf80 [ 611.091366][T26837] ? clear_bhb_loop+0x40/0x90 [ 611.091396][T26837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.091421][T26837] RIP: 0033:0x7f249bb9c799 [ 611.091440][T26837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.091464][T26837] RSP: 002b:00007f2499df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.091486][T26837] RAX: ffffffffffffffda RBX: 00007f249be16090 RCX: 00007f249bb9c799 [ 611.091502][T26837] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 611.091516][T26837] RBP: 00007f249bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 611.091530][T26837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.091544][T26837] R13: 00007f249be16128 R14: 00007f249be16090 R15: 00007ffda4020f98 [ 611.091574][T26837] [ 611.091639][T26837] Mem-Info: [ 611.739403][T26912] Invalid ELF header magic: != ELF [ 612.054431][T26837] active_anon:38181 inactive_anon:2175 isolated_anon:0 [ 612.054431][T26837] active_file:11394 inactive_file:49747 isolated_file:0 [ 612.054431][T26837] unevictable:768 dirty:1087 writeback:0 [ 612.054431][T26837] slab_reclaimable:12433 slab_unreclaimable:100291 [ 612.054431][T26837] mapped:26734 shmem:1427 pagetables:2335 [ 612.054431][T26837] sec_pagetables:0 bounce:0 [ 612.054431][T26837] kernel_misc_reclaimable:0 [ 612.054431][T26837] free:1277692 free_pcp:9843 free_cma:0 [ 612.199414][T26837] Node 0 active_anon:152724kB inactive_anon:8700kB active_file:45576kB inactive_file:198840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106924kB dirty:4344kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12256kB pagetables:9188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 612.298700][T26837] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 612.410431][T26837] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 612.588058][T26837] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 612.606883][T26837] Node 0 DMA32 free:1156108kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:152728kB inactive_anon:8700kB active_file:45576kB inactive_file:198840kB unevictable:1536kB writepending:4488kB zspages:0kB present:3129332kB managed:2537300kB mlocked:0kB bounce:0kB free_pcp:39644kB local_pcp:39644kB free_cma:0kB [ 612.821720][T27042] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 612.838496][T26837] lowmem_reserve[]: 0 0 1 1 1 [ 612.853919][T26837] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 612.886347][T26837] lowmem_reserve[]: 0 0 0 0 0 [ 612.921313][T27045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2043'. [ 612.966967][T26837] Node 1 Normal free:3939288kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:148kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 613.111141][T26837] lowmem_reserve[]: 0 0 0 0 0 [ 613.128259][T26837] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 613.188324][T26837] Node 0 DMA32: 7205*4kB (UME) 4505*8kB (UME) 2749*16kB (UME) 533*32kB (UME) 853*64kB (UME) 720*128kB (UME) 543*256kB (UME) 384*512kB (UME) 67*1024kB (UME) 2*2048kB (ME) 116*4096kB (M) = 1156108kB [ 613.285428][T26837] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 613.349762][T26837] Node 1 Normal: 4*4kB (M) 13*8kB (UM) 10*16kB (UM) 12*32kB (UM) 7*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (M) 3*1024kB (UM) 4*2048kB (UM) 958*4096kB (M) = 3939288kB [ 613.423112][T26837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 613.457559][T26837] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 613.498537][T26837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 613.531271][T26837] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 613.560910][T26837] 62794 total pagecache pages [ 613.596510][T26837] 33 pages in swap cache [ 613.614664][T26837] Free swap = 122336kB [ 613.638787][T26837] Total swap = 124996kB [ 613.666772][T26837] 2097051 pages RAM [ 613.680935][T26837] 0 pages HighMem/MovableOnly [ 613.714633][T26837] 430847 pages reserved [ 613.730217][T26837] 0 pages cma reserved [ 615.006838][T27105] bond0: invalid ARP target specified [ 615.099004][T27105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2049'. [ 615.856572][T27063] Bluetooth: hci4: command 0x0406 tx timeout [ 617.127333][T27211] bond0: invalid ARP target specified [ 617.471716][T27219] FAULT_INJECTION: forcing a failure. [ 617.471716][T27219] name failslab, interval 1, probability 0, space 0, times 0 [ 617.547007][T27219] CPU: 0 UID: 0 PID: 27219 Comm: syz.0.2061 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.547046][T27219] Tainted: [L]=SOFTLOCKUP [ 617.547054][T27219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.547069][T27219] Call Trace: [ 617.547077][T27219] [ 617.547086][T27219] dump_stack_lvl+0x100/0x190 [ 617.547129][T27219] should_fail_ex.cold+0x5/0xa [ 617.547159][T27219] should_failslab+0xc2/0x120 [ 617.547186][T27219] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 617.547227][T27219] ? __d_alloc+0x34/0xa80 [ 617.547262][T27219] __d_alloc+0x34/0xa80 [ 617.547294][T27219] d_alloc_parallel+0x111/0x14e0 [ 617.547333][T27219] ? stack_trace_save+0x8e/0xc0 [ 617.547361][T27219] ? __lock_acquire+0x4a5/0x2630 [ 617.547398][T27219] ? __pfx_d_alloc_parallel+0x10/0x10 [ 617.547448][T27219] ? lockdep_init_map_type+0x5c/0x250 [ 617.547484][T27219] ? lockdep_init_map_type+0x5c/0x250 [ 617.547524][T27219] __lookup_slow+0x193/0x460 [ 617.547559][T27219] ? __pfx___lookup_slow+0x10/0x10 [ 617.547608][T27219] ? __d_lookup+0x266/0x4a0 [ 617.547652][T27219] lookup_slow+0x50/0x70 [ 617.547686][T27219] link_path_walk+0x1377/0x1cc0 [ 617.547736][T27219] path_openat+0x1be/0x31a0 [ 617.547761][T27219] ? kasan_save_stack+0x3f/0x50 [ 617.547782][T27219] ? kasan_save_stack+0x30/0x50 [ 617.547803][T27219] ? kasan_save_track+0x14/0x30 [ 617.547825][T27219] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 617.547871][T27219] ? __pfx_path_openat+0x10/0x10 [ 617.547909][T27219] do_file_open+0x20e/0x430 [ 617.547938][T27219] ? __pfx_do_file_open+0x10/0x10 [ 617.547986][T27219] ? alloc_fd+0x476/0x790 [ 617.548014][T27219] ? do_getname+0x191/0x390 [ 617.548049][T27219] do_sys_openat2+0x10d/0x1e0 [ 617.548084][T27219] ? __pfx_do_sys_openat2+0x10/0x10 [ 617.548130][T27219] __x64_sys_openat+0x12d/0x210 [ 617.548166][T27219] ? __pfx___x64_sys_openat+0x10/0x10 [ 617.548213][T27219] do_syscall_64+0x106/0xf80 [ 617.548236][T27219] ? clear_bhb_loop+0x40/0x90 [ 617.548267][T27219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.548293][T27219] RIP: 0033:0x7f249bb9c799 [ 617.548313][T27219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.548338][T27219] RSP: 002b:00007f249c98d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 617.548362][T27219] RAX: ffffffffffffffda RBX: 00007f249be15fa0 RCX: 00007f249bb9c799 [ 617.548378][T27219] RDX: 0000000000000480 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 617.548394][T27219] RBP: 00007f249bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 617.548414][T27219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.548429][T27219] R13: 00007f249be16038 R14: 00007f249be15fa0 R15: 00007ffda4020f98 [ 617.548461][T27219] [ 619.680728][T27284] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 619.698645][T27284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 619.711960][T27284] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 619.754028][T27284] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 619.787103][T27284] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 620.900293][T27419] Invalid ELF header magic: != ELF [ 621.028025][T10902] Bluetooth: hci0: command 0x0c1a tx timeout [ 621.450190][T27461] Invalid ELF header magic: != ELF [ 621.746564][T10902] Bluetooth: hci4: command 0x0406 tx timeout [ 621.752636][T10902] Bluetooth: hci1: command 0x0c1a tx timeout [ 621.759036][T27063] Bluetooth: hci2: command 0x0c1a tx timeout [ 622.515803][T27498] Invalid ELF header magic: != ELF [ 623.821668][T10902] Bluetooth: hci4: command 0x0406 tx timeout [ 623.986774][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.993204][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.356264][T27682] futex_wake_op: syz.0.2082 tries to shift op by -2048; fix this program [ 625.441786][T27684] misc userio: No port type given on /dev/userio [ 625.483705][T27682] futex_wake_op: syz.0.2082 tries to shift op by -2048; fix this program [ 625.682155][T27679] Invalid ELF header magic: != ELF [ 626.524975][T27775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2084'. [ 627.912842][T27854] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2092'. [ 628.070205][T27850] Invalid ELF header magic: != ELF [ 628.278543][T27878] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 629.776115][T27999] bond0: invalid ARP target specified [ 629.814257][T28008] FAULT_INJECTION: forcing a failure. [ 629.814257][T28008] name failslab, interval 1, probability 0, space 0, times 0 [ 629.845265][T28008] CPU: 0 UID: 0 PID: 28008 Comm: syz.4.2099 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.845312][T28008] Tainted: [L]=SOFTLOCKUP [ 629.845323][T28008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 629.845338][T28008] Call Trace: [ 629.845346][T28008] [ 629.845354][T28008] dump_stack_lvl+0x100/0x190 [ 629.845397][T28008] should_fail_ex.cold+0x5/0xa [ 629.845435][T28008] ? lsm_blob_alloc+0x68/0x90 [ 629.845473][T28008] should_failslab+0xc2/0x120 [ 629.845501][T28008] __kmalloc_noprof+0xe0/0x850 [ 629.845539][T28008] ? audit_alloc+0xa2/0x7b0 [ 629.845574][T28008] lsm_blob_alloc+0x68/0x90 [ 629.845612][T28008] security_task_alloc+0x2a/0x260 [ 629.845648][T28008] copy_process+0x258f/0x7a40 [ 629.845694][T28008] ? __pfx_copy_process+0x10/0x10 [ 629.845728][T28008] ? lockdep_init_map_type+0x5c/0x250 [ 629.845766][T28008] ? lockdep_init_map_type+0x5c/0x250 [ 629.845802][T28008] ? __pfx_vhost_run_work_list+0x10/0x10 [ 629.845841][T28008] ? __pfx_vhost_worker_killed+0x10/0x10 [ 629.845879][T28008] vhost_task_create+0x1db/0x370 [ 629.845919][T28008] ? __pfx_vhost_task_create+0x10/0x10 [ 629.845966][T28008] ? __pfx_vhost_task_fn+0x10/0x10 [ 629.846012][T28008] ? snprintf+0xc7/0x100 [ 629.846053][T28008] vhost_task_worker_create+0x8d/0x260 [ 629.846094][T28008] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 629.846147][T28008] ? lockdep_init_map_type+0x5c/0x250 [ 629.846182][T28008] ? lockdep_init_map_type+0x5c/0x250 [ 629.846220][T28008] vhost_worker_create+0x243/0x310 [ 629.846258][T28008] ? __pfx_vhost_worker_create+0x10/0x10 [ 629.846303][T28008] vhost_dev_set_owner+0x719/0xa30 [ 629.846351][T28008] vhost_net_ioctl+0xfa3/0x1910 [ 629.846372][T28008] ? do_vfs_ioctl+0x226/0x13e0 [ 629.846433][T28008] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 629.846470][T28008] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 629.846500][T28008] ? find_held_lock+0x2b/0x80 [ 629.846525][T28008] ? __fget_files+0x215/0x3d0 [ 629.846548][T28008] ? hook_file_ioctl_common+0x146/0x410 [ 629.846586][T28008] ? __fget_files+0x21f/0x3d0 [ 629.846614][T28008] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 629.846640][T28008] __x64_sys_ioctl+0x18e/0x210 [ 629.846679][T28008] do_syscall_64+0x106/0xf80 [ 629.846702][T28008] ? clear_bhb_loop+0x40/0x90 [ 629.846732][T28008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.846757][T28008] RIP: 0033:0x7f69f799c799 [ 629.846778][T28008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.846802][T28008] RSP: 002b:00007f69f8830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.846826][T28008] RAX: ffffffffffffffda RBX: 00007f69f7c16090 RCX: 00007f69f799c799 [ 629.846843][T28008] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 629.846858][T28008] RBP: 00007f69f7a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 629.846873][T28008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.846888][T28008] R13: 00007f69f7c16128 R14: 00007f69f7c16090 R15: 00007fff9b647f88 [ 629.846919][T28008] [ 630.336941][T28047] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2101'. [ 630.682771][T28071] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2110'. [ 632.926648][T28166] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 634.509835][T28239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2109'. [ 634.565289][T28242] FAULT_INJECTION: forcing a failure. [ 634.565289][T28242] name failslab, interval 1, probability 0, space 0, times 0 [ 634.581076][T28223] Invalid ELF header magic: != ELF [ 634.624804][T28242] CPU: 0 UID: 0 PID: 28242 Comm: syz.4.2111 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.624843][T28242] Tainted: [L]=SOFTLOCKUP [ 634.624852][T28242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.624868][T28242] Call Trace: [ 634.624875][T28242] [ 634.624884][T28242] dump_stack_lvl+0x100/0x190 [ 634.624927][T28242] should_fail_ex.cold+0x5/0xa [ 634.624957][T28242] should_failslab+0xc2/0x120 [ 634.624984][T28242] __kmalloc_cache_noprof+0x7a/0x6f0 [ 634.625033][T28242] ? vhost_task_create+0xee/0x370 [ 634.625072][T28242] ? __kasan_kmalloc+0xaa/0xb0 [ 634.625114][T28242] ? __pfx_vhost_worker_killed+0x10/0x10 [ 634.625153][T28242] ? __pfx_vhost_run_work_list+0x10/0x10 [ 634.625192][T28242] vhost_task_create+0xee/0x370 [ 634.625231][T28242] ? __pfx_vhost_task_create+0x10/0x10 [ 634.625278][T28242] ? __pfx_vhost_task_fn+0x10/0x10 [ 634.625325][T28242] ? snprintf+0xc7/0x100 [ 634.625366][T28242] vhost_task_worker_create+0x8d/0x260 [ 634.625408][T28242] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 634.625449][T28242] ? lockdep_init_map_type+0x5c/0x250 [ 634.625486][T28242] ? lockdep_init_map_type+0x5c/0x250 [ 634.625526][T28242] vhost_worker_create+0x243/0x310 [ 634.625565][T28242] ? __pfx_vhost_worker_create+0x10/0x10 [ 634.625612][T28242] vhost_dev_set_owner+0x719/0xa30 [ 634.625662][T28242] vhost_net_ioctl+0xfa3/0x1910 [ 634.625685][T28242] ? do_vfs_ioctl+0x226/0x13e0 [ 634.625723][T28242] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 634.625761][T28242] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 634.625792][T28242] ? find_held_lock+0x2b/0x80 [ 634.625815][T28242] ? __fget_files+0x215/0x3d0 [ 634.625838][T28242] ? hook_file_ioctl_common+0x146/0x410 [ 634.625877][T28242] ? __fget_files+0x21f/0x3d0 [ 634.625905][T28242] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 634.625931][T28242] __x64_sys_ioctl+0x18e/0x210 [ 634.625971][T28242] do_syscall_64+0x106/0xf80 [ 634.625993][T28242] ? clear_bhb_loop+0x40/0x90 [ 634.626031][T28242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.626056][T28242] RIP: 0033:0x7f69f799c799 [ 634.626077][T28242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.626102][T28242] RSP: 002b:00007f69f8830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.626125][T28242] RAX: ffffffffffffffda RBX: 00007f69f7c16090 RCX: 00007f69f799c799 [ 634.626141][T28242] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 634.626155][T28242] RBP: 00007f69f7a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 634.626171][T28242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.626186][T28242] R13: 00007f69f7c16128 R14: 00007f69f7c16090 R15: 00007fff9b647f88 [ 634.626217][T28242] [ 635.087281][T28251] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2113'. [ 635.948672][T28330] bond0: invalid ARP target specified [ 636.374932][T28345] Invalid ELF header magic: != ELF [ 637.261017][T28411] FAULT_INJECTION: forcing a failure. [ 637.261017][T28411] name failslab, interval 1, probability 0, space 0, times 0 [ 637.442524][T28411] CPU: 0 UID: 0 PID: 28411 Comm: syz.4.2124 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.442563][T28411] Tainted: [L]=SOFTLOCKUP [ 637.442572][T28411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 637.442587][T28411] Call Trace: [ 637.442595][T28411] [ 637.442605][T28411] dump_stack_lvl+0x100/0x190 [ 637.442648][T28411] should_fail_ex.cold+0x5/0xa [ 637.442679][T28411] should_failslab+0xc2/0x120 [ 637.442707][T28411] __kmalloc_cache_noprof+0x7a/0x6f0 [ 637.442741][T28411] ? vhost_task_create+0xee/0x370 [ 637.442780][T28411] ? __kasan_kmalloc+0xaa/0xb0 [ 637.442827][T28411] ? __pfx_vhost_worker_killed+0x10/0x10 [ 637.442870][T28411] ? __pfx_vhost_run_work_list+0x10/0x10 [ 637.442909][T28411] vhost_task_create+0xee/0x370 [ 637.442948][T28411] ? __pfx_vhost_task_create+0x10/0x10 [ 637.442995][T28411] ? __pfx_vhost_task_fn+0x10/0x10 [ 637.443041][T28411] ? snprintf+0xc7/0x100 [ 637.443083][T28411] vhost_task_worker_create+0x8d/0x260 [ 637.443124][T28411] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 637.443165][T28411] ? lockdep_init_map_type+0x5c/0x250 [ 637.443203][T28411] ? lockdep_init_map_type+0x5c/0x250 [ 637.443242][T28411] vhost_worker_create+0x243/0x310 [ 637.443281][T28411] ? __pfx_vhost_worker_create+0x10/0x10 [ 637.443328][T28411] vhost_dev_set_owner+0x719/0xa30 [ 637.443378][T28411] vhost_net_ioctl+0xfa3/0x1910 [ 637.443401][T28411] ? do_vfs_ioctl+0x226/0x13e0 [ 637.443438][T28411] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 637.443475][T28411] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 637.443505][T28411] ? find_held_lock+0x2b/0x80 [ 637.443528][T28411] ? __fget_files+0x215/0x3d0 [ 637.443552][T28411] ? hook_file_ioctl_common+0x146/0x410 [ 637.443589][T28411] ? __fget_files+0x21f/0x3d0 [ 637.443618][T28411] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 637.443643][T28411] __x64_sys_ioctl+0x18e/0x210 [ 637.443683][T28411] do_syscall_64+0x106/0xf80 [ 637.443705][T28411] ? clear_bhb_loop+0x40/0x90 [ 637.443736][T28411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.443762][T28411] RIP: 0033:0x7f69f799c799 [ 637.443783][T28411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.443813][T28411] RSP: 002b:00007f69f8830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.443836][T28411] RAX: ffffffffffffffda RBX: 00007f69f7c16090 RCX: 00007f69f799c799 [ 637.443852][T28411] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 637.443867][T28411] RBP: 00007f69f7a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 637.443883][T28411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.443898][T28411] R13: 00007f69f7c16128 R14: 00007f69f7c16090 R15: 00007fff9b647f88 [ 637.443930][T28411] [ 638.025362][T28454] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 638.188902][T28449] Invalid ELF header magic: != ELF [ 638.809474][T28467] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 640.208610][T17073] EXT4-fs: 2 callbacks suppressed [ 640.208634][T17073] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 962 with max blocks 59 with error 117 [ 640.349673][T17073] EXT4-fs (sda1): This should not happen!! Data will be lost [ 640.349673][T17073] [ 640.369348][T28538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2132'. [ 640.421619][T17073] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1 with max blocks 17 with error 117 [ 640.490530][T17073] EXT4-fs (sda1): This should not happen!! Data will be lost [ 640.490530][T17073] [ 640.545624][T17073] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 2 with max blocks 3 with error 117 [ 640.645874][T17073] EXT4-fs (sda1): This should not happen!! Data will be lost [ 640.645874][T17073] [ 640.696259][T17073] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1400 with max blocks 84 with error 117 [ 640.766992][T17073] EXT4-fs (sda1): This should not happen!! Data will be lost [ 640.766992][T17073] [ 640.828079][T17073] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 967 with max blocks 53 with error 117 [ 640.911857][T17073] EXT4-fs (sda1): This should not happen!! Data will be lost [ 640.911857][T17073] [ 642.338278][T28581] bond0: invalid ARP target specified [ 642.469531][T28581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2135'. [ 643.065628][T28653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2139'. [ 646.326136][T28793] bond0: invalid ARP target specified [ 646.410138][T28793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2144'. [ 647.280459][T28860] bond0: invalid ARP target specified [ 647.419109][T28860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2148'. [ 647.771772][T28899] FAULT_INJECTION: forcing a failure. [ 647.771772][T28899] name failslab, interval 1, probability 0, space 0, times 0 [ 647.841148][T28899] CPU: 0 UID: 0 PID: 28899 Comm: syz.1.2151 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.841192][T28899] Tainted: [L]=SOFTLOCKUP [ 647.841200][T28899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.841216][T28899] Call Trace: [ 647.841224][T28899] [ 647.841233][T28899] dump_stack_lvl+0x100/0x190 [ 647.841277][T28899] should_fail_ex.cold+0x5/0xa [ 647.841307][T28899] should_failslab+0xc2/0x120 [ 647.841335][T28899] __kmalloc_cache_noprof+0x7a/0x6f0 [ 647.841370][T28899] ? vhost_worker_create+0xf7/0x310 [ 647.841414][T28899] vhost_worker_create+0xf7/0x310 [ 647.841453][T28899] ? __pfx_vhost_worker_create+0x10/0x10 [ 647.841501][T28899] vhost_dev_set_owner+0x719/0xa30 [ 647.841551][T28899] vhost_net_ioctl+0xfa3/0x1910 [ 647.841574][T28899] ? do_vfs_ioctl+0x226/0x13e0 [ 647.841612][T28899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 647.841650][T28899] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 647.841680][T28899] ? find_held_lock+0x2b/0x80 [ 647.841704][T28899] ? __fget_files+0x215/0x3d0 [ 647.841727][T28899] ? hook_file_ioctl_common+0x146/0x410 [ 647.841764][T28899] ? __fget_files+0x21f/0x3d0 [ 647.841793][T28899] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 647.841818][T28899] __x64_sys_ioctl+0x18e/0x210 [ 647.841858][T28899] do_syscall_64+0x106/0xf80 [ 647.841881][T28899] ? clear_bhb_loop+0x40/0x90 [ 647.841911][T28899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.841937][T28899] RIP: 0033:0x7f3c40d9c799 [ 647.841957][T28899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.841981][T28899] RSP: 002b:00007f3c41bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.842005][T28899] RAX: ffffffffffffffda RBX: 00007f3c41016090 RCX: 00007f3c40d9c799 [ 647.842021][T28899] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 647.842041][T28899] RBP: 00007f3c40e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 647.842056][T28899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.842071][T28899] R13: 00007f3c41016128 R14: 00007f3c41016090 R15: 00007ffcc340d2e8 [ 647.842104][T28899] [ 648.696180][T28965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2155'. [ 649.336795][T29011] nvme_fabrics: missing parameter 'transport=%s' [ 649.346139][T29011] nvme_fabrics: missing parameter 'nqn=%s' [ 650.245201][T29024] Invalid ELF header magic: != ELF [ 652.699480][T29160] Invalid ELF header magic: != ELF [ 653.672180][T29256] FAULT_INJECTION: forcing a failure. [ 653.672180][T29256] name failslab, interval 1, probability 0, space 0, times 0 [ 653.738201][T29256] CPU: 0 UID: 0 PID: 29256 Comm: syz.4.2173 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.738240][T29256] Tainted: [L]=SOFTLOCKUP [ 653.738250][T29256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.738265][T29256] Call Trace: [ 653.738273][T29256] [ 653.738282][T29256] dump_stack_lvl+0x100/0x190 [ 653.738325][T29256] should_fail_ex.cold+0x5/0xa [ 653.738354][T29256] ? vhost_dev_set_owner+0x190/0xa30 [ 653.738395][T29256] should_failslab+0xc2/0x120 [ 653.738422][T29256] __kmalloc_noprof+0xe0/0x850 [ 653.738468][T29256] vhost_dev_set_owner+0x190/0xa30 [ 653.738518][T29256] vhost_net_ioctl+0xfa3/0x1910 [ 653.738540][T29256] ? do_vfs_ioctl+0x226/0x13e0 [ 653.738588][T29256] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 653.738626][T29256] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 653.738656][T29256] ? find_held_lock+0x2b/0x80 [ 653.738680][T29256] ? __fget_files+0x215/0x3d0 [ 653.738703][T29256] ? hook_file_ioctl_common+0x146/0x410 [ 653.738741][T29256] ? __fget_files+0x21f/0x3d0 [ 653.738769][T29256] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 653.738795][T29256] __x64_sys_ioctl+0x18e/0x210 [ 653.738835][T29256] do_syscall_64+0x106/0xf80 [ 653.738857][T29256] ? clear_bhb_loop+0x40/0x90 [ 653.738888][T29256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.738914][T29256] RIP: 0033:0x7f69f799c799 [ 653.738934][T29256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.738958][T29256] RSP: 002b:00007f69f8830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 653.738981][T29256] RAX: ffffffffffffffda RBX: 00007f69f7c16090 RCX: 00007f69f799c799 [ 653.738997][T29256] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 653.739012][T29256] RBP: 00007f69f7a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 653.739027][T29256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.739042][T29256] R13: 00007f69f7c16128 R14: 00007f69f7c16090 R15: 00007fff9b647f88 [ 653.739072][T29256] [ 654.837157][T29310] FAULT_INJECTION: forcing a failure. [ 654.837157][T29310] name failslab, interval 1, probability 0, space 0, times 0 [ 654.954518][T29310] CPU: 0 UID: 0 PID: 29310 Comm: syz.4.2176 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.954557][T29310] Tainted: [L]=SOFTLOCKUP [ 654.954567][T29310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.954582][T29310] Call Trace: [ 654.954590][T29310] [ 654.954599][T29310] dump_stack_lvl+0x100/0x190 [ 654.954643][T29310] should_fail_ex.cold+0x5/0xa [ 654.954673][T29310] ? vhost_dev_set_owner+0x190/0xa30 [ 654.954713][T29310] should_failslab+0xc2/0x120 [ 654.954741][T29310] __kmalloc_noprof+0xe0/0x850 [ 654.954787][T29310] vhost_dev_set_owner+0x190/0xa30 [ 654.954837][T29310] vhost_net_ioctl+0xfa3/0x1910 [ 654.954859][T29310] ? do_vfs_ioctl+0x226/0x13e0 [ 654.954897][T29310] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 654.954935][T29310] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 654.954965][T29310] ? find_held_lock+0x2b/0x80 [ 654.954994][T29310] ? __fget_files+0x215/0x3d0 [ 654.955017][T29310] ? hook_file_ioctl_common+0x146/0x410 [ 654.955056][T29310] ? __fget_files+0x21f/0x3d0 [ 654.955084][T29310] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 654.955110][T29310] __x64_sys_ioctl+0x18e/0x210 [ 654.955150][T29310] do_syscall_64+0x106/0xf80 [ 654.955172][T29310] ? clear_bhb_loop+0x40/0x90 [ 654.955203][T29310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.955228][T29310] RIP: 0033:0x7f69f799c799 [ 654.955248][T29310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.955273][T29310] RSP: 002b:00007f69f8830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.955296][T29310] RAX: ffffffffffffffda RBX: 00007f69f7c16090 RCX: 00007f69f799c799 [ 654.955312][T29310] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 654.955327][T29310] RBP: 00007f69f7a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 654.955342][T29310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.955357][T29310] R13: 00007f69f7c16128 R14: 00007f69f7c16090 R15: 00007fff9b647f88 [ 654.955388][T29310] [ 657.553866][T29534] bond0: invalid ARP target specified [ 657.644729][T29534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2188'. [ 658.717810][T29556] Invalid ELF header magic: != ELF [ 660.188496][T29712] nvme_fabrics: missing parameter 'transport=%s' [ 660.202462][T29712] nvme_fabrics: missing parameter 'nqn=%s' [ 660.961326][T29763] Invalid ELF header magic: != ELF [ 661.018709][T29762] FAULT_INJECTION: forcing a failure. [ 661.018709][T29762] name failslab, interval 1, probability 0, space 0, times 0 [ 661.087834][T29762] CPU: 0 UID: 0 PID: 29762 Comm: syz.0.2206 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.087873][T29762] Tainted: [L]=SOFTLOCKUP [ 661.087882][T29762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.087897][T29762] Call Trace: [ 661.087905][T29762] [ 661.087914][T29762] dump_stack_lvl+0x100/0x190 [ 661.087957][T29762] should_fail_ex.cold+0x5/0xa [ 661.087987][T29762] should_failslab+0xc2/0x120 [ 661.088015][T29762] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 661.088067][T29762] ? copy_process+0x48b/0x7a40 [ 661.088096][T29762] ? mark_held_locks+0x40/0x70 [ 661.088134][T29762] copy_process+0x48b/0x7a40 [ 661.088178][T29762] ? __pfx_copy_process+0x10/0x10 [ 661.088213][T29762] ? lockdep_init_map_type+0x5c/0x250 [ 661.088249][T29762] ? lockdep_init_map_type+0x5c/0x250 [ 661.088285][T29762] ? __pfx_vhost_run_work_list+0x10/0x10 [ 661.088325][T29762] ? __pfx_vhost_worker_killed+0x10/0x10 [ 661.088362][T29762] vhost_task_create+0x1db/0x370 [ 661.088402][T29762] ? __pfx_vhost_task_create+0x10/0x10 [ 661.088450][T29762] ? __pfx_vhost_task_fn+0x10/0x10 [ 661.088496][T29762] ? snprintf+0xc7/0x100 [ 661.088537][T29762] vhost_task_worker_create+0x8d/0x260 [ 661.088579][T29762] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 661.088621][T29762] ? lockdep_init_map_type+0x5c/0x250 [ 661.088657][T29762] ? lockdep_init_map_type+0x5c/0x250 [ 661.088697][T29762] vhost_worker_create+0x243/0x310 [ 661.088736][T29762] ? __pfx_vhost_worker_create+0x10/0x10 [ 661.088782][T29762] vhost_dev_set_owner+0x719/0xa30 [ 661.088832][T29762] vhost_net_ioctl+0xfa3/0x1910 [ 661.088854][T29762] ? do_vfs_ioctl+0x226/0x13e0 [ 661.088892][T29762] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 661.088929][T29762] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 661.088960][T29762] ? find_held_lock+0x2b/0x80 [ 661.088983][T29762] ? __fget_files+0x215/0x3d0 [ 661.089006][T29762] ? hook_file_ioctl_common+0x146/0x410 [ 661.089063][T29762] ? __fget_files+0x21f/0x3d0 [ 661.089092][T29762] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 661.089118][T29762] __x64_sys_ioctl+0x18e/0x210 [ 661.089157][T29762] do_syscall_64+0x106/0xf80 [ 661.089180][T29762] ? clear_bhb_loop+0x40/0x90 [ 661.089211][T29762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.089237][T29762] RIP: 0033:0x7f249bb9c799 [ 661.089257][T29762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.089282][T29762] RSP: 002b:00007f2499df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.089305][T29762] RAX: ffffffffffffffda RBX: 00007f249be16090 RCX: 00007f249bb9c799 [ 661.089322][T29762] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 661.089337][T29762] RBP: 00007f249bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 661.089352][T29762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.089367][T29762] R13: 00007f249be16128 R14: 00007f249be16090 R15: 00007ffda4020f98 [ 661.089398][T29762] [ 661.900728][T29802] FAULT_INJECTION: forcing a failure. [ 661.900728][T29802] name failslab, interval 1, probability 0, space 0, times 0 [ 661.952033][T29802] CPU: 0 UID: 0 PID: 29802 Comm: syz.1.2207 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.952072][T29802] Tainted: [L]=SOFTLOCKUP [ 661.952081][T29802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.952096][T29802] Call Trace: [ 661.952103][T29802] [ 661.952112][T29802] dump_stack_lvl+0x100/0x190 [ 661.952155][T29802] should_fail_ex.cold+0x5/0xa [ 661.952186][T29802] should_failslab+0xc2/0x120 [ 661.952213][T29802] __kmalloc_cache_noprof+0x7a/0x6f0 [ 661.952247][T29802] ? vhost_net_open+0x73/0x8b0 [ 661.952289][T29802] ? __pfx_vhost_net_open+0x10/0x10 [ 661.952330][T29802] vhost_net_open+0x73/0x8b0 [ 661.952368][T29802] ? __pfx_vhost_net_open+0x10/0x10 [ 661.952408][T29802] misc_open+0x26d/0x450 [ 661.952441][T29802] ? __pfx_misc_open+0x10/0x10 [ 661.952471][T29802] chrdev_open+0x234/0x6a0 [ 661.952518][T29802] ? __pfx_apparmor_file_open+0x10/0x10 [ 661.952546][T29802] ? __pfx_chrdev_open+0x10/0x10 [ 661.952575][T29802] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 661.952609][T29802] do_dentry_open+0x6d8/0x1660 [ 661.952635][T29802] ? __pfx_chrdev_open+0x10/0x10 [ 661.952670][T29802] vfs_open+0x82/0x3f0 [ 661.952705][T29802] path_openat+0x208c/0x31a0 [ 661.952742][T29802] ? __pfx_path_openat+0x10/0x10 [ 661.952780][T29802] do_file_open+0x20e/0x430 [ 661.952809][T29802] ? __pfx_do_file_open+0x10/0x10 [ 661.952857][T29802] ? alloc_fd+0x476/0x790 [ 661.952886][T29802] ? do_getname+0x191/0x390 [ 661.952921][T29802] do_sys_openat2+0x10d/0x1e0 [ 661.952955][T29802] ? __pfx_do_sys_openat2+0x10/0x10 [ 661.953007][T29802] __x64_sys_openat+0x12d/0x210 [ 661.953043][T29802] ? __pfx___x64_sys_openat+0x10/0x10 [ 661.953090][T29802] do_syscall_64+0x106/0xf80 [ 661.953113][T29802] ? clear_bhb_loop+0x40/0x90 [ 661.953144][T29802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.953170][T29802] RIP: 0033:0x7f3c40d9c799 [ 661.953190][T29802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.953215][T29802] RSP: 002b:00007f3c41bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 661.953239][T29802] RAX: ffffffffffffffda RBX: 00007f3c41016090 RCX: 00007f3c40d9c799 [ 661.953255][T29802] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 661.953271][T29802] RBP: 00007f3c40e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 661.953287][T29802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.953302][T29802] R13: 00007f3c41016128 R14: 00007f3c41016090 R15: 00007ffcc340d2e8 [ 661.953334][T29802] [ 662.650359][T29849] FAULT_INJECTION: forcing a failure. [ 662.650359][T29849] name failslab, interval 1, probability 0, space 0, times 0 [ 662.650413][T29849] CPU: 0 UID: 0 PID: 29849 Comm: syz.0.2211 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.650448][T29849] Tainted: [L]=SOFTLOCKUP [ 662.650457][T29849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 662.650471][T29849] Call Trace: [ 662.650479][T29849] [ 662.650488][T29849] dump_stack_lvl+0x100/0x190 [ 662.650529][T29849] should_fail_ex.cold+0x5/0xa [ 662.650559][T29849] should_failslab+0xc2/0x120 [ 662.650586][T29849] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 662.650625][T29849] ? alloc_pid+0x1bd/0x1890 [ 662.650657][T29849] ? copy_process+0x258f/0x7a40 [ 662.650686][T29849] ? vhost_task_create+0x1db/0x370 [ 662.650722][T29849] ? vhost_task_worker_create+0x8d/0x260 [ 662.650773][T29849] alloc_pid+0x1bd/0x1890 [ 662.650812][T29849] ? __pfx_alloc_pid+0x10/0x10 [ 662.650857][T29849] ? __lock_acquire+0x4a5/0x2630 [ 662.650911][T29849] ? fpu_clone+0x226/0x7c0 [ 662.650942][T29849] ? copy_thread+0x6ce/0xb60 [ 662.650984][T29849] copy_process+0x40e7/0x7a40 [ 662.651028][T29849] ? __pfx_copy_process+0x10/0x10 [ 662.651062][T29849] ? lockdep_init_map_type+0x5c/0x250 [ 662.651099][T29849] ? lockdep_init_map_type+0x5c/0x250 [ 662.651136][T29849] ? __pfx_vhost_run_work_list+0x10/0x10 [ 662.651175][T29849] ? __pfx_vhost_worker_killed+0x10/0x10 [ 662.651212][T29849] vhost_task_create+0x1db/0x370 [ 662.651251][T29849] ? __pfx_vhost_task_create+0x10/0x10 [ 662.651298][T29849] ? __pfx_vhost_task_fn+0x10/0x10 [ 662.651344][T29849] ? snprintf+0xc7/0x100 [ 662.651385][T29849] vhost_task_worker_create+0x8d/0x260 [ 662.651427][T29849] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 662.651467][T29849] ? lockdep_init_map_type+0x5c/0x250 [ 662.651504][T29849] ? lockdep_init_map_type+0x5c/0x250 [ 662.651543][T29849] vhost_worker_create+0x243/0x310 [ 662.651582][T29849] ? __pfx_vhost_worker_create+0x10/0x10 [ 662.651629][T29849] vhost_dev_set_owner+0x719/0xa30 [ 662.651679][T29849] vhost_net_ioctl+0xfa3/0x1910 [ 662.651702][T29849] ? do_vfs_ioctl+0x226/0x13e0 [ 662.651740][T29849] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 662.651777][T29849] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 662.651807][T29849] ? find_held_lock+0x2b/0x80 [ 662.651831][T29849] ? __fget_files+0x215/0x3d0 [ 662.651865][T29849] ? hook_file_ioctl_common+0x146/0x410 [ 662.651908][T29849] ? __fget_files+0x21f/0x3d0 [ 662.651937][T29849] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 662.651963][T29849] __x64_sys_ioctl+0x18e/0x210 [ 662.652003][T29849] do_syscall_64+0x106/0xf80 [ 662.652026][T29849] ? clear_bhb_loop+0x40/0x90 [ 662.652057][T29849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.652083][T29849] RIP: 0033:0x7f249bb9c799 [ 662.652103][T29849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.652126][T29849] RSP: 002b:00007f2499df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.652150][T29849] RAX: ffffffffffffffda RBX: 00007f249be16090 RCX: 00007f249bb9c799 [ 662.652166][T29849] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 662.652181][T29849] RBP: 00007f249bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 662.652196][T29849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.652211][T29849] R13: 00007f249be16128 R14: 00007f249be16090 R15: 00007ffda4020f98 [ 662.652243][T29849] [ 664.444822][T29932] FAULT_INJECTION: forcing a failure. [ 664.444822][T29932] name failslab, interval 1, probability 0, space 0, times 0 [ 664.513922][T29922] Invalid ELF header magic: != ELF [ 664.527288][T29932] CPU: 0 UID: 0 PID: 29932 Comm: syz.1.2217 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.527325][T29932] Tainted: [L]=SOFTLOCKUP [ 664.527334][T29932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 664.527349][T29932] Call Trace: [ 664.527356][T29932] [ 664.527365][T29932] dump_stack_lvl+0x100/0x190 [ 664.527408][T29932] should_fail_ex.cold+0x5/0xa [ 664.527438][T29932] should_failslab+0xc2/0x120 [ 664.527465][T29932] __kmalloc_cache_noprof+0x7a/0x6f0 [ 664.527501][T29932] ? vhost_worker_create+0xf7/0x310 [ 664.527546][T29932] vhost_worker_create+0xf7/0x310 [ 664.527585][T29932] ? __pfx_vhost_worker_create+0x10/0x10 [ 664.527632][T29932] vhost_dev_set_owner+0x719/0xa30 [ 664.527683][T29932] vhost_net_ioctl+0xfa3/0x1910 [ 664.527706][T29932] ? do_vfs_ioctl+0x226/0x13e0 [ 664.527744][T29932] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 664.527789][T29932] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 664.527821][T29932] ? find_held_lock+0x2b/0x80 [ 664.527845][T29932] ? __fget_files+0x215/0x3d0 [ 664.527869][T29932] ? hook_file_ioctl_common+0x146/0x410 [ 664.527907][T29932] ? __fget_files+0x21f/0x3d0 [ 664.527936][T29932] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 664.527961][T29932] __x64_sys_ioctl+0x18e/0x210 [ 664.528002][T29932] do_syscall_64+0x106/0xf80 [ 664.528024][T29932] ? clear_bhb_loop+0x40/0x90 [ 664.528055][T29932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.528081][T29932] RIP: 0033:0x7f3c40d9c799 [ 664.528102][T29932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.528125][T29932] RSP: 002b:00007f3c41bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.528148][T29932] RAX: ffffffffffffffda RBX: 00007f3c41016090 RCX: 00007f3c40d9c799 [ 664.528165][T29932] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 664.528179][T29932] RBP: 00007f3c40e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 664.528194][T29932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.528209][T29932] R13: 00007f3c41016128 R14: 00007f3c41016090 R15: 00007ffcc340d2e8 [ 664.528240][T29932] [ 666.376546][T30060] bond0: invalid ARP target specified [ 666.453858][T30060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2222'. [ 667.862364][T30116] Invalid ELF header magic: != ELF [ 668.445046][T30195] FAULT_INJECTION: forcing a failure. [ 668.445046][T30195] name failslab, interval 1, probability 0, space 0, times 0 [ 668.561059][T30195] CPU: 0 UID: 0 PID: 30195 Comm: syz.0.2234 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.561099][T30195] Tainted: [L]=SOFTLOCKUP [ 668.561107][T30195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 668.561122][T30195] Call Trace: [ 668.561130][T30195] [ 668.561139][T30195] dump_stack_lvl+0x100/0x190 [ 668.561182][T30195] should_fail_ex.cold+0x5/0xa [ 668.561212][T30195] should_failslab+0xc2/0x120 [ 668.561240][T30195] __kmalloc_cache_noprof+0x7a/0x6f0 [ 668.561274][T30195] ? vhost_task_create+0xee/0x370 [ 668.561312][T30195] ? __kasan_kmalloc+0xaa/0xb0 [ 668.561353][T30195] ? __pfx_vhost_worker_killed+0x10/0x10 [ 668.561391][T30195] ? __pfx_vhost_run_work_list+0x10/0x10 [ 668.561430][T30195] vhost_task_create+0xee/0x370 [ 668.561470][T30195] ? __pfx_vhost_task_create+0x10/0x10 [ 668.561527][T30195] ? __pfx_vhost_task_fn+0x10/0x10 [ 668.561576][T30195] ? snprintf+0xc7/0x100 [ 668.561617][T30195] vhost_task_worker_create+0x8d/0x260 [ 668.561660][T30195] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 668.561700][T30195] ? lockdep_init_map_type+0x5c/0x250 [ 668.561737][T30195] ? lockdep_init_map_type+0x5c/0x250 [ 668.561776][T30195] vhost_worker_create+0x243/0x310 [ 668.561816][T30195] ? __pfx_vhost_worker_create+0x10/0x10 [ 668.561862][T30195] vhost_dev_set_owner+0x719/0xa30 [ 668.561912][T30195] vhost_net_ioctl+0xfa3/0x1910 [ 668.561935][T30195] ? do_vfs_ioctl+0x226/0x13e0 [ 668.561972][T30195] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 668.562010][T30195] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 668.562040][T30195] ? find_held_lock+0x2b/0x80 [ 668.562063][T30195] ? __fget_files+0x215/0x3d0 [ 668.562086][T30195] ? hook_file_ioctl_common+0x146/0x410 [ 668.562124][T30195] ? __fget_files+0x21f/0x3d0 [ 668.562153][T30195] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 668.562179][T30195] __x64_sys_ioctl+0x18e/0x210 [ 668.562219][T30195] do_syscall_64+0x106/0xf80 [ 668.562241][T30195] ? clear_bhb_loop+0x40/0x90 [ 668.562272][T30195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.562298][T30195] RIP: 0033:0x7f249bb9c799 [ 668.562319][T30195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.562344][T30195] RSP: 002b:00007f2499df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.562367][T30195] RAX: ffffffffffffffda RBX: 00007f249be16090 RCX: 00007f249bb9c799 [ 668.562384][T30195] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 668.562399][T30195] RBP: 00007f249bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 668.562414][T30195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.562429][T30195] R13: 00007f249be16128 R14: 00007f249be16090 R15: 00007ffda4020f98 [ 668.562461][T30195] [ 670.834042][T30324] Invalid ELF header magic: != ELF [ 671.186406][T30358] bond0: invalid ARP target specified [ 671.651679][T17075] EXT4-fs: 2 callbacks suppressed [ 671.651696][T17075] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 965 with max blocks 56 with error 117 [ 671.760689][T17075] EXT4-fs (sda1): This should not happen!! Data will be lost [ 671.760689][T17075] [ 671.817707][T17075] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1 with max blocks 1 with error 117 [ 671.894949][T17075] EXT4-fs (sda1): This should not happen!! Data will be lost [ 671.894949][T17075] [ 671.949882][T17075] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1400 with max blocks 84 with error 117 [ 672.021000][T17075] EXT4-fs (sda1): This should not happen!! Data will be lost [ 672.021000][T17075] [ 672.094317][T17075] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 967 with max blocks 53 with error 117 [ 672.195203][T17075] EXT4-fs (sda1): This should not happen!! Data will be lost [ 672.195203][T17075] [ 672.246926][T17075] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1396 with max blocks 70 with error 117 [ 672.304259][T17075] EXT4-fs (sda1): This should not happen!! Data will be lost [ 672.304259][T17075] [ 672.355753][T30370] Invalid ELF header magic: != ELF [ 673.714470][T30481] bond0: invalid ARP target specified [ 674.108710][T30499] bond0: invalid ARP target specified [ 675.312627][T30552] Invalid ELF header magic: != ELF [ 677.869683][T30783] FAULT_INJECTION: forcing a failure. [ 677.869683][T30783] name fail_futex, interval 1, probability 0, space 0, times 0 [ 677.938157][T30783] CPU: 0 UID: 0 PID: 30783 Comm: syz.1.2270 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.938196][T30783] Tainted: [L]=SOFTLOCKUP [ 677.938204][T30783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 677.938219][T30783] Call Trace: [ 677.938226][T30783] [ 677.938235][T30783] dump_stack_lvl+0x100/0x190 [ 677.938282][T30783] should_fail_ex.cold+0x5/0xa [ 677.938313][T30783] get_futex_key+0x1d2/0x1620 [ 677.938347][T30783] ? __pfx_get_futex_key+0x10/0x10 [ 677.938380][T30783] ? trace_pid_list_is_set+0x11a/0x390 [ 677.938417][T30783] ? trace_pid_list_is_set+0x22c/0x390 [ 677.938463][T30783] futex_wait_setup+0x83/0x510 [ 677.938511][T30783] __futex_wait+0x19f/0x300 [ 677.938553][T30783] ? __pfx___futex_wait+0x10/0x10 [ 677.938592][T30783] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 677.938631][T30783] ? lockdep_hardirqs_on+0x78/0x100 [ 677.938675][T30783] ? __pfx_futex_wake_mark+0x10/0x10 [ 677.938720][T30783] ? find_held_lock+0x2b/0x80 [ 677.938752][T30783] ? futex_wake+0x456/0x530 [ 677.938798][T30783] futex_wait+0xed/0x380 [ 677.938838][T30783] ? __pfx_futex_wait+0x10/0x10 [ 677.938887][T30783] ? vhost_net_ioctl+0x23f/0x1910 [ 677.938910][T30783] ? do_vfs_ioctl+0x226/0x13e0 [ 677.938952][T30783] do_futex+0x1ef/0x350 [ 677.938985][T30783] ? __pfx_do_futex+0x10/0x10 [ 677.939021][T30783] ? find_held_lock+0x2b/0x80 [ 677.939049][T30783] __x64_sys_futex+0x34f/0x4d0 [ 677.939087][T30783] ? __pfx___x64_sys_futex+0x10/0x10 [ 677.939133][T30783] do_syscall_64+0x106/0xf80 [ 677.939156][T30783] ? clear_bhb_loop+0x40/0x90 [ 677.939186][T30783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.939212][T30783] RIP: 0033:0x7f3c40d9c799 [ 677.939232][T30783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.939257][T30783] RSP: 002b:00007f3c41bc50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 677.939280][T30783] RAX: ffffffffffffffda RBX: 00007f3c41016098 RCX: 00007f3c40d9c799 [ 677.939297][T30783] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3c41016098 [ 677.939312][T30783] RBP: 00007f3c41016090 R08: 0000000000000000 R09: 0000000000000000 [ 677.939328][T30783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.939342][T30783] R13: 00007f3c41016128 R14: 00007ffcc340d200 R15: 00007ffcc340d2e8 [ 677.939373][T30783] [ 677.941638][T30789] FAULT_INJECTION: forcing a failure. [ 677.941638][T30789] name failslab, interval 1, probability 0, space 0, times 0 [ 678.238956][T30778] Invalid ELF header magic: != ELF [ 678.430297][T30789] CPU: 0 UID: 0 PID: 30789 Comm: syz.0.2271 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.430336][T30789] Tainted: [L]=SOFTLOCKUP [ 678.430344][T30789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.430360][T30789] Call Trace: [ 678.430368][T30789] [ 678.430377][T30789] dump_stack_lvl+0x100/0x190 [ 678.430419][T30789] should_fail_ex.cold+0x5/0xa [ 678.430449][T30789] ? tomoyo_realpath_from_path+0xb6/0x690 [ 678.430486][T30789] should_failslab+0xc2/0x120 [ 678.430514][T30789] __kmalloc_noprof+0xe0/0x850 [ 678.430559][T30789] tomoyo_realpath_from_path+0xb6/0x690 [ 678.430603][T30789] tomoyo_path_number_perm+0x23c/0x580 [ 678.430632][T30789] ? tomoyo_path_number_perm+0x22e/0x580 [ 678.430677][T30789] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 678.430712][T30789] ? futex_wait+0x125/0x380 [ 678.430780][T30789] ? find_held_lock+0x2b/0x80 [ 678.430804][T30789] ? __fget_files+0x215/0x3d0 [ 678.430826][T30789] ? hook_file_ioctl_common+0x146/0x410 [ 678.430864][T30789] ? __fget_files+0x21f/0x3d0 [ 678.430893][T30789] security_file_ioctl+0xd3/0x230 [ 678.430924][T30789] __x64_sys_ioctl+0xb7/0x210 [ 678.430965][T30789] do_syscall_64+0x106/0xf80 [ 678.430987][T30789] ? clear_bhb_loop+0x40/0x90 [ 678.431018][T30789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.431044][T30789] RIP: 0033:0x7f249bb9c799 [ 678.431064][T30789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.431089][T30789] RSP: 002b:00007f2499df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.431112][T30789] RAX: ffffffffffffffda RBX: 00007f249be16090 RCX: 00007f249bb9c799 [ 678.431129][T30789] RDX: 0000000000000008 RSI: 000000004028af11 RDI: 0000000000000009 [ 678.431144][T30789] RBP: 00007f249bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 678.431160][T30789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.431179][T30789] R13: 00007f249be16128 R14: 00007f249be16090 R15: 00007ffda4020f98 [ 678.431211][T30789] [ 678.431298][T30789] ERROR: Out of memory at tomoyo_realpath_from_path. [ 679.721067][T30910] Invalid ELF header magic: != ELF [ 680.718136][T31031] bond0: invalid ARP target specified [ 681.594974][T31040] Invalid ELF header magic: != ELF [ 683.316480][T31134] bond0: invalid ARP target specified [ 684.585532][T31221] bond0: invalid ARP target specified [ 685.072241][T31236] FAULT_INJECTION: forcing a failure. [ 685.072241][T31236] name failslab, interval 1, probability 0, space 0, times 0 [ 685.108717][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.115179][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.190046][T10903] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 685.204304][T10903] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 685.212086][T10903] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 685.220186][T10903] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 685.227811][T10903] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 685.321980][T31236] CPU: 0 UID: 0 PID: 31236 Comm: syz.1.2294 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.322020][T31236] Tainted: [L]=SOFTLOCKUP [ 685.322028][T31236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 685.322043][T31236] Call Trace: [ 685.322052][T31236] [ 685.322060][T31236] dump_stack_lvl+0x100/0x190 [ 685.322102][T31236] should_fail_ex.cold+0x5/0xa [ 685.322139][T31236] should_failslab+0xc2/0x120 [ 685.322168][T31236] __kmalloc_cache_noprof+0x7a/0x6f0 [ 685.322202][T31236] ? vhost_task_create+0xee/0x370 [ 685.322241][T31236] ? __kasan_kmalloc+0xaa/0xb0 [ 685.322281][T31236] ? __pfx_vhost_worker_killed+0x10/0x10 [ 685.322320][T31236] ? __pfx_vhost_run_work_list+0x10/0x10 [ 685.322358][T31236] vhost_task_create+0xee/0x370 [ 685.322397][T31236] ? __pfx_vhost_task_create+0x10/0x10 [ 685.322444][T31236] ? __pfx_vhost_task_fn+0x10/0x10 [ 685.322490][T31236] ? snprintf+0xc7/0x100 [ 685.322531][T31236] vhost_task_worker_create+0x8d/0x260 [ 685.322573][T31236] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 685.322613][T31236] ? lockdep_init_map_type+0x5c/0x250 [ 685.322650][T31236] ? lockdep_init_map_type+0x5c/0x250 [ 685.322689][T31236] vhost_worker_create+0x243/0x310 [ 685.322729][T31236] ? __pfx_vhost_worker_create+0x10/0x10 [ 685.322775][T31236] vhost_dev_set_owner+0x719/0xa30 [ 685.322825][T31236] vhost_net_ioctl+0xfa3/0x1910 [ 685.322847][T31236] ? do_vfs_ioctl+0x226/0x13e0 [ 685.322885][T31236] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 685.322923][T31236] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 685.322953][T31236] ? find_held_lock+0x2b/0x80 [ 685.322977][T31236] ? __fget_files+0x215/0x3d0 [ 685.323001][T31236] ? hook_file_ioctl_common+0x146/0x410 [ 685.323039][T31236] ? __fget_files+0x21f/0x3d0 [ 685.323068][T31236] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 685.323095][T31236] __x64_sys_ioctl+0x18e/0x210 [ 685.323141][T31236] do_syscall_64+0x106/0xf80 [ 685.323165][T31236] ? clear_bhb_loop+0x40/0x90 [ 685.323197][T31236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.323223][T31236] RIP: 0033:0x7f3c40d9c799 [ 685.323244][T31236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.323270][T31236] RSP: 002b:00007f3c41bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.323297][T31236] RAX: ffffffffffffffda RBX: 00007f3c41016090 RCX: 00007f3c40d9c799 [ 685.323315][T31236] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 685.323331][T31236] RBP: 00007f3c40e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 685.323347][T31236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.323363][T31236] R13: 00007f3c41016128 R14: 00007f3c41016090 R15: 00007ffcc340d2e8 [ 685.323396][T31236] [ 687.243738][T10903] Bluetooth: hci3: command tx timeout [ 687.583232][T31240] chnl_net:caif_netlink_parms(): no params data found [ 687.754914][T31366] FAULT_INJECTION: forcing a failure. [ 687.754914][T31366] name failslab, interval 1, probability 0, space 0, times 0 [ 687.833567][T31366] CPU: 0 UID: 0 PID: 31366 Comm: syz.0.2300 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.833607][T31366] Tainted: [L]=SOFTLOCKUP [ 687.833616][T31366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 687.833632][T31366] Call Trace: [ 687.833641][T31366] [ 687.833650][T31366] dump_stack_lvl+0x100/0x190 [ 687.833694][T31366] should_fail_ex.cold+0x5/0xa [ 687.833725][T31366] should_failslab+0xc2/0x120 [ 687.833753][T31366] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 687.833795][T31366] ? copy_process+0x48b/0x7a40 [ 687.833824][T31366] ? mark_held_locks+0x40/0x70 [ 687.833861][T31366] copy_process+0x48b/0x7a40 [ 687.833906][T31366] ? __pfx_copy_process+0x10/0x10 [ 687.833941][T31366] ? lockdep_init_map_type+0x5c/0x250 [ 687.833979][T31366] ? lockdep_init_map_type+0x5c/0x250 [ 687.834015][T31366] ? __pfx_vhost_run_work_list+0x10/0x10 [ 687.834063][T31366] ? __pfx_vhost_worker_killed+0x10/0x10 [ 687.834102][T31366] vhost_task_create+0x1db/0x370 [ 687.834143][T31366] ? __pfx_vhost_task_create+0x10/0x10 [ 687.834191][T31366] ? __pfx_vhost_task_fn+0x10/0x10 [ 687.834237][T31366] ? snprintf+0xc7/0x100 [ 687.834279][T31366] vhost_task_worker_create+0x8d/0x260 [ 687.834322][T31366] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 687.834363][T31366] ? lockdep_init_map_type+0x5c/0x250 [ 687.834400][T31366] ? lockdep_init_map_type+0x5c/0x250 [ 687.834444][T31366] vhost_worker_create+0x243/0x310 [ 687.834485][T31366] ? __pfx_vhost_worker_create+0x10/0x10 [ 687.834532][T31366] vhost_dev_set_owner+0x719/0xa30 [ 687.834582][T31366] vhost_net_ioctl+0xfa3/0x1910 [ 687.834605][T31366] ? do_vfs_ioctl+0x226/0x13e0 [ 687.834644][T31366] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 687.834682][T31366] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 687.834712][T31366] ? find_held_lock+0x2b/0x80 [ 687.834736][T31366] ? __fget_files+0x215/0x3d0 [ 687.834760][T31366] ? hook_file_ioctl_common+0x146/0x410 [ 687.834798][T31366] ? __fget_files+0x21f/0x3d0 [ 687.834827][T31366] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 687.834854][T31366] __x64_sys_ioctl+0x18e/0x210 [ 687.834894][T31366] do_syscall_64+0x106/0xf80 [ 687.834917][T31366] ? clear_bhb_loop+0x40/0x90 [ 687.834949][T31366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.834975][T31366] RIP: 0033:0x7f249bb9c799 [ 687.834997][T31366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.835023][T31366] RSP: 002b:00007f2499df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.835052][T31366] RAX: ffffffffffffffda RBX: 00007f249be16090 RCX: 00007f249bb9c799 [ 687.835071][T31366] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 687.835087][T31366] RBP: 00007f249bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 687.835103][T31366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.835119][T31366] R13: 00007f249be16128 R14: 00007f249be16090 R15: 00007ffda4020f98 [ 687.835151][T31366] [ 688.740429][T17074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.899462][T17074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.931262][T31240] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.941627][T31240] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.953008][T31240] bridge_slave_0: entered allmulticast mode [ 688.962050][T31240] bridge_slave_0: entered promiscuous mode [ 688.993362][T17074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.033642][T31240] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.041430][T31240] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.056708][T31240] bridge_slave_1: entered allmulticast mode [ 689.068313][T31240] bridge_slave_1: entered promiscuous mode [ 689.102649][T17074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.318217][T10903] Bluetooth: hci3: command tx timeout [ 689.368331][T31551] FAULT_INJECTION: forcing a failure. [ 689.368331][T31551] name failslab, interval 1, probability 0, space 0, times 0 [ 689.464112][T31551] CPU: 0 UID: 0 PID: 31551 Comm: syz.0.2302 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.464152][T31551] Tainted: [L]=SOFTLOCKUP [ 689.464161][T31551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 689.464177][T31551] Call Trace: [ 689.464185][T31551] [ 689.464195][T31551] dump_stack_lvl+0x100/0x190 [ 689.464238][T31551] should_fail_ex.cold+0x5/0xa [ 689.464269][T31551] should_failslab+0xc2/0x120 [ 689.464297][T31551] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 689.464340][T31551] ? copy_process+0x48b/0x7a40 [ 689.464370][T31551] ? mark_held_locks+0x40/0x70 [ 689.464408][T31551] copy_process+0x48b/0x7a40 [ 689.464453][T31551] ? __pfx_copy_process+0x10/0x10 [ 689.464489][T31551] ? lockdep_init_map_type+0x5c/0x250 [ 689.464526][T31551] ? lockdep_init_map_type+0x5c/0x250 [ 689.464563][T31551] ? __pfx_vhost_run_work_list+0x10/0x10 [ 689.464603][T31551] ? __pfx_vhost_worker_killed+0x10/0x10 [ 689.464642][T31551] vhost_task_create+0x1db/0x370 [ 689.464683][T31551] ? __pfx_vhost_task_create+0x10/0x10 [ 689.464731][T31551] ? __pfx_vhost_task_fn+0x10/0x10 [ 689.464778][T31551] ? snprintf+0xc7/0x100 [ 689.464820][T31551] vhost_task_worker_create+0x8d/0x260 [ 689.464862][T31551] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 689.464905][T31551] ? lockdep_init_map_type+0x5c/0x250 [ 689.464951][T31551] ? lockdep_init_map_type+0x5c/0x250 [ 689.464991][T31551] vhost_worker_create+0x243/0x310 [ 689.465031][T31551] ? __pfx_vhost_worker_create+0x10/0x10 [ 689.465079][T31551] vhost_dev_set_owner+0x719/0xa30 [ 689.465131][T31551] vhost_net_ioctl+0xfa3/0x1910 [ 689.465154][T31551] ? do_vfs_ioctl+0x226/0x13e0 [ 689.465193][T31551] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 689.465231][T31551] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 689.465262][T31551] ? find_held_lock+0x2b/0x80 [ 689.465287][T31551] ? __fget_files+0x215/0x3d0 [ 689.465311][T31551] ? hook_file_ioctl_common+0x146/0x410 [ 689.465349][T31551] ? __fget_files+0x21f/0x3d0 [ 689.465379][T31551] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 689.465406][T31551] __x64_sys_ioctl+0x18e/0x210 [ 689.465446][T31551] do_syscall_64+0x106/0xf80 [ 689.465470][T31551] ? clear_bhb_loop+0x40/0x90 [ 689.465501][T31551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.465527][T31551] RIP: 0033:0x7f249bb9c799 [ 689.465548][T31551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.465573][T31551] RSP: 002b:00007f2499df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.465597][T31551] RAX: ffffffffffffffda RBX: 00007f249be16090 RCX: 00007f249bb9c799 [ 689.465614][T31551] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 689.465631][T31551] RBP: 00007f249bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 689.465647][T31551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.465663][T31551] R13: 00007f249be16128 R14: 00007f249be16090 R15: 00007ffda4020f98 [ 689.465695][T31551] [ 689.769547][T31240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.782544][T31240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.813452][T31240] team0: Port device team_slave_0 added [ 689.821429][T31240] team0: Port device team_slave_1 added [ 689.847666][T31240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.854664][T31240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.882309][T31240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.894407][T31240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.901419][T31240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.927349][T31240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.973859][T31240] hsr_slave_0: entered promiscuous mode [ 689.980314][T31240] hsr_slave_1: entered promiscuous mode [ 689.986425][T31240] debugfs: 'hsr0' already exists in 'hsr' [ 689.992213][T31240] Cannot create hsr debugfs directory [ 690.808079][T17074] bridge_slave_1: left allmulticast mode [ 690.834510][T17074] bridge_slave_1: left promiscuous mode [ 690.850819][T17074] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.871622][T17074] bridge_slave_0: left allmulticast mode [ 690.893796][T17074] bridge_slave_0: left promiscuous mode [ 690.923201][T17074] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.338924][T17074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.360810][T17074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.381364][T17074] bond0 (unregistering): Released all slaves [ 691.387615][T10903] Bluetooth: hci3: command tx timeout [ 693.325201][T17074] hsr_slave_0: left promiscuous mode [ 693.355414][T17074] hsr_slave_1: left promiscuous mode [ 693.387257][T17074] veth1_macvtap: left promiscuous mode [ 693.404310][T17074] veth0_macvtap: left promiscuous mode [ 693.409880][T17074] veth1_vlan: left promiscuous mode [ 693.441418][T17074] veth0_vlan: left promiscuous mode [ 693.453763][T10903] Bluetooth: hci3: command tx timeout [ 693.815891][T17074] team0 (unregistering): Port device team_slave_1 removed [ 693.834417][T17074] team0 (unregistering): Port device team_slave_0 removed [ 694.576526][T31903] Invalid ELF header magic: != ELF [ 694.653879][T31935] FAULT_INJECTION: forcing a failure. [ 694.653879][T31935] name failslab, interval 1, probability 0, space 0, times 0 [ 694.684898][T31935] CPU: 0 UID: 0 PID: 31935 Comm: syz.4.2313 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.684936][T31935] Tainted: [L]=SOFTLOCKUP [ 694.684946][T31935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 694.684962][T31935] Call Trace: [ 694.684970][T31935] [ 694.684980][T31935] dump_stack_lvl+0x100/0x190 [ 694.685022][T31935] should_fail_ex.cold+0x5/0xa [ 694.685053][T31935] should_failslab+0xc2/0x120 [ 694.685081][T31935] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 694.685124][T31935] ? alloc_vmap_area+0x186c/0x2bd0 [ 694.685157][T31935] alloc_vmap_area+0x186c/0x2bd0 [ 694.685197][T31935] ? __pfx_alloc_vmap_area+0x10/0x10 [ 694.685233][T31935] __get_vm_area_node+0x1ca/0x330 [ 694.685269][T31935] __vmalloc_node_range_noprof+0x213/0x1530 [ 694.685304][T31935] ? vhost_task_create+0x1db/0x370 [ 694.685342][T31935] ? find_held_lock+0x2b/0x80 [ 694.685367][T31935] ? local_lock_release+0x99/0x130 [ 694.685398][T31935] ? local_lock_release+0x99/0x130 [ 694.685442][T31935] ? vhost_task_create+0x1db/0x370 [ 694.685490][T31935] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 694.685527][T31935] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 694.685563][T31935] ? rcu_is_watching+0x12/0xc0 [ 694.685604][T31935] ? trace_kmem_cache_alloc+0xf3/0x120 [ 694.685635][T31935] ? vhost_task_create+0x1db/0x370 [ 694.685673][T31935] __vmalloc_node_noprof+0xad/0xf0 [ 694.685706][T31935] ? vhost_task_create+0x1db/0x370 [ 694.685749][T31935] copy_process+0x5ec/0x7a40 [ 694.685793][T31935] ? __pfx_copy_process+0x10/0x10 [ 694.685829][T31935] ? lockdep_init_map_type+0x5c/0x250 [ 694.685866][T31935] ? lockdep_init_map_type+0x5c/0x250 [ 694.685902][T31935] ? __pfx_vhost_run_work_list+0x10/0x10 [ 694.685943][T31935] ? __pfx_vhost_worker_killed+0x10/0x10 [ 694.685981][T31935] vhost_task_create+0x1db/0x370 [ 694.686021][T31935] ? __pfx_vhost_task_create+0x10/0x10 [ 694.686068][T31935] ? __pfx_vhost_task_fn+0x10/0x10 [ 694.686115][T31935] ? snprintf+0xc7/0x100 [ 694.686157][T31935] vhost_task_worker_create+0x8d/0x260 [ 694.686200][T31935] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 694.686241][T31935] ? lockdep_init_map_type+0x5c/0x250 [ 694.686278][T31935] ? lockdep_init_map_type+0x5c/0x250 [ 694.686318][T31935] vhost_worker_create+0x243/0x310 [ 694.686358][T31935] ? __pfx_vhost_worker_create+0x10/0x10 [ 694.686405][T31935] vhost_dev_set_owner+0x719/0xa30 [ 694.686463][T31935] vhost_net_ioctl+0xfa3/0x1910 [ 694.686486][T31935] ? do_vfs_ioctl+0x226/0x13e0 [ 694.686526][T31935] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 694.686564][T31935] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 694.686596][T31935] ? find_held_lock+0x2b/0x80 [ 694.686620][T31935] ? __fget_files+0x215/0x3d0 [ 694.686644][T31935] ? hook_file_ioctl_common+0x146/0x410 [ 694.686682][T31935] ? __fget_files+0x21f/0x3d0 [ 694.686712][T31935] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 694.686738][T31935] __x64_sys_ioctl+0x18e/0x210 [ 694.686779][T31935] do_syscall_64+0x106/0xf80 [ 694.686802][T31935] ? clear_bhb_loop+0x40/0x90 [ 694.686833][T31935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.686860][T31935] RIP: 0033:0x7f69f799c799 [ 694.686881][T31935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.686906][T31935] RSP: 002b:00007f69f8851028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.686930][T31935] RAX: ffffffffffffffda RBX: 00007f69f7c15fa0 RCX: 00007f69f799c799 [ 694.686947][T31935] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 694.686963][T31935] RBP: 00007f69f7a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 694.686978][T31935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.686994][T31935] R13: 00007f69f7c16038 R14: 00007f69f7c15fa0 R15: 00007fff9b647f88 [ 694.687027][T31935] [ 696.140265][T31962] FAULT_INJECTION: forcing a failure. [ 696.140265][T31962] name failslab, interval 1, probability 0, space 0, times 0 [ 696.207258][T31962] CPU: 0 UID: 0 PID: 31962 Comm: syz.0.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.207298][T31962] Tainted: [L]=SOFTLOCKUP [ 696.207307][T31962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.207327][T31962] Call Trace: [ 696.207336][T31962] [ 696.207346][T31962] dump_stack_lvl+0x100/0x190 [ 696.207389][T31962] should_fail_ex.cold+0x5/0xa [ 696.207419][T31962] should_failslab+0xc2/0x120 [ 696.207448][T31962] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 696.207490][T31962] ? copy_process+0x48b/0x7a40 [ 696.207520][T31962] ? mark_held_locks+0x40/0x70 [ 696.207558][T31962] copy_process+0x48b/0x7a40 [ 696.207603][T31962] ? __pfx_copy_process+0x10/0x10 [ 696.207638][T31962] ? lockdep_init_map_type+0x5c/0x250 [ 696.207674][T31962] ? lockdep_init_map_type+0x5c/0x250 [ 696.207711][T31962] ? __pfx_vhost_run_work_list+0x10/0x10 [ 696.207751][T31962] ? __pfx_vhost_worker_killed+0x10/0x10 [ 696.207790][T31962] vhost_task_create+0x1db/0x370 [ 696.207830][T31962] ? __pfx_vhost_task_create+0x10/0x10 [ 696.207877][T31962] ? __pfx_vhost_task_fn+0x10/0x10 [ 696.207924][T31962] ? snprintf+0xc7/0x100 [ 696.207965][T31962] vhost_task_worker_create+0x8d/0x260 [ 696.208008][T31962] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 696.208049][T31962] ? lockdep_init_map_type+0x5c/0x250 [ 696.208086][T31962] ? lockdep_init_map_type+0x5c/0x250 [ 696.208126][T31962] vhost_worker_create+0x243/0x310 [ 696.208166][T31962] ? __pfx_vhost_worker_create+0x10/0x10 [ 696.208213][T31962] vhost_dev_set_owner+0x719/0xa30 [ 696.208263][T31962] vhost_net_ioctl+0xfa3/0x1910 [ 696.208291][T31962] ? do_vfs_ioctl+0x226/0x13e0 [ 696.208335][T31962] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 696.208373][T31962] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 696.208404][T31962] ? find_held_lock+0x2b/0x80 [ 696.208429][T31962] ? __fget_files+0x215/0x3d0 [ 696.208452][T31962] ? hook_file_ioctl_common+0x146/0x410 [ 696.208492][T31962] ? __fget_files+0x21f/0x3d0 [ 696.208521][T31962] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 696.208547][T31962] __x64_sys_ioctl+0x18e/0x210 [ 696.208588][T31962] do_syscall_64+0x106/0xf80 [ 696.208611][T31962] ? clear_bhb_loop+0x40/0x90 [ 696.208643][T31962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.208670][T31962] RIP: 0033:0x7f249bb9c799 [ 696.208691][T31962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.208717][T31962] RSP: 002b:00007f2499df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.208742][T31962] RAX: ffffffffffffffda RBX: 00007f249be16090 RCX: 00007f249bb9c799 [ 696.208759][T31962] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 696.208775][T31962] RBP: 00007f249bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 696.208792][T31962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.208808][T31962] R13: 00007f249be16128 R14: 00007f249be16090 R15: 00007ffda4020f98 [ 696.208840][T31962] [ 696.933553][T31979] nvme_fabrics: missing parameter 'transport=%s' [ 696.939991][T31979] nvme_fabrics: missing parameter 'nqn=%s' [ 698.247600][T32033] FAULT_INJECTION: forcing a failure. [ 698.247600][T32033] name failslab, interval 1, probability 0, space 0, times 0 [ 698.270086][T32033] CPU: 0 UID: 0 PID: 32033 Comm: syz.4.2320 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.270125][T32033] Tainted: [L]=SOFTLOCKUP [ 698.270134][T32033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 698.270150][T32033] Call Trace: [ 698.270159][T32033] [ 698.270168][T32033] dump_stack_lvl+0x100/0x190 [ 698.270220][T32033] should_fail_ex.cold+0x5/0xa [ 698.270251][T32033] should_failslab+0xc2/0x120 [ 698.270279][T32033] __kmalloc_cache_noprof+0x7a/0x6f0 [ 698.270314][T32033] ? vhost_task_create+0xee/0x370 [ 698.270354][T32033] ? __kasan_kmalloc+0xaa/0xb0 [ 698.270395][T32033] ? __pfx_vhost_worker_killed+0x10/0x10 [ 698.270434][T32033] ? __pfx_vhost_run_work_list+0x10/0x10 [ 698.270474][T32033] vhost_task_create+0xee/0x370 [ 698.270513][T32033] ? __pfx_vhost_task_create+0x10/0x10 [ 698.270562][T32033] ? __pfx_vhost_task_fn+0x10/0x10 [ 698.270608][T32033] ? snprintf+0xc7/0x100 [ 698.270650][T32033] vhost_task_worker_create+0x8d/0x260 [ 698.270692][T32033] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 698.270734][T32033] ? lockdep_init_map_type+0x5c/0x250 [ 698.270770][T32033] ? lockdep_init_map_type+0x5c/0x250 [ 698.270810][T32033] vhost_worker_create+0x243/0x310 [ 698.270850][T32033] ? __pfx_vhost_worker_create+0x10/0x10 [ 698.270897][T32033] vhost_dev_set_owner+0x719/0xa30 [ 698.270947][T32033] vhost_net_ioctl+0xfa3/0x1910 [ 698.270970][T32033] ? do_vfs_ioctl+0x226/0x13e0 [ 698.271009][T32033] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 698.271046][T32033] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 698.271077][T32033] ? find_held_lock+0x2b/0x80 [ 698.271101][T32033] ? __fget_files+0x215/0x3d0 [ 698.271125][T32033] ? hook_file_ioctl_common+0x146/0x410 [ 698.271163][T32033] ? __fget_files+0x21f/0x3d0 [ 698.271197][T32033] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 698.271224][T32033] __x64_sys_ioctl+0x18e/0x210 [ 698.271265][T32033] do_syscall_64+0x106/0xf80 [ 698.271288][T32033] ? clear_bhb_loop+0x40/0x90 [ 698.271320][T32033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.271346][T32033] RIP: 0033:0x7f69f799c799 [ 698.271367][T32033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.271392][T32033] RSP: 002b:00007f69f8830028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 698.271416][T32033] RAX: ffffffffffffffda RBX: 00007f69f7c16090 RCX: 00007f69f799c799 [ 698.271433][T32033] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 698.271449][T32033] RBP: 00007f69f7a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 698.271464][T32033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.271480][T32033] R13: 00007f69f7c16128 R14: 00007f69f7c16090 R15: 00007fff9b647f88 [ 698.271512][T32033] [ 698.771722][T32042] FAULT_INJECTION: forcing a failure. [ 698.771722][T32042] name failslab, interval 1, probability 0, space 0, times 0 [ 698.784911][T32042] CPU: 0 UID: 0 PID: 32042 Comm: syz.0.2323 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.784949][T32042] Tainted: [L]=SOFTLOCKUP [ 698.784958][T32042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 698.784974][T32042] Call Trace: [ 698.784983][T32042] [ 698.784992][T32042] dump_stack_lvl+0x100/0x190 [ 698.785035][T32042] should_fail_ex.cold+0x5/0xa [ 698.785065][T32042] ? vhost_dev_set_owner+0x190/0xa30 [ 698.785106][T32042] should_failslab+0xc2/0x120 [ 698.785141][T32042] __kmalloc_noprof+0xe0/0x850 [ 698.785188][T32042] vhost_dev_set_owner+0x190/0xa30 [ 698.785239][T32042] vhost_net_ioctl+0xfa3/0x1910 [ 698.785262][T32042] ? do_vfs_ioctl+0x226/0x13e0 [ 698.785301][T32042] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 698.785339][T32042] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 698.785371][T32042] ? find_held_lock+0x2b/0x80 [ 698.785395][T32042] ? __fget_files+0x215/0x3d0 [ 698.785419][T32042] ? hook_file_ioctl_common+0x146/0x410 [ 698.785457][T32042] ? __fget_files+0x21f/0x3d0 [ 698.785486][T32042] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 698.785513][T32042] __x64_sys_ioctl+0x18e/0x210 [ 698.785553][T32042] do_syscall_64+0x106/0xf80 [ 698.785576][T32042] ? clear_bhb_loop+0x40/0x90 [ 698.785608][T32042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.785634][T32042] RIP: 0033:0x7f249bb9c799 [ 698.785655][T32042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.785680][T32042] RSP: 002b:00007f249c98d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 698.785704][T32042] RAX: ffffffffffffffda RBX: 00007f249be15fa0 RCX: 00007f249bb9c799 [ 698.785721][T32042] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000009 [ 698.785737][T32042] RBP: 00007f249bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 698.785758][T32042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.785773][T32042] R13: 00007f249be16038 R14: 00007f249be15fa0 R15: 00007ffda4020f98 [ 698.785805][T32042] [ 702.524808][T17074] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 965 with max blocks 56 with error 117 [ 702.537731][T17074] EXT4-fs (sda1): This should not happen!! Data will be lost [ 702.537731][T17074] [ 702.550097][T17074] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1400 with max blocks 84 with error 117 [ 702.563171][T17074] EXT4-fs (sda1): This should not happen!! Data will be lost [ 702.563171][T17074] [ 702.575878][T17074] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 967 with max blocks 53 with error 117 [ 702.588546][T17074] EXT4-fs (sda1): This should not happen!! Data will be lost [ 702.588546][T17074] [ 702.602539][T17074] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 3 with error 117 [ 702.617874][T17074] EXT4-fs (sda1): This should not happen!! Data will be lost [ 702.617874][T17074] [ 702.628413][T17074] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1431 with max blocks 35 with error 117 [ 702.641373][T17074] EXT4-fs (sda1): This should not happen!! Data will be lost [ 702.641373][T17074] [ 706.657452][T10902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 706.667057][T10902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 706.680519][T10902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 706.688260][T10902] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 706.696246][T10902] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 707.072305][T32123] chnl_net:caif_netlink_parms(): no params data found [ 707.204115][T32123] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.213350][T32123] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.224210][T32123] bridge_slave_0: entered allmulticast mode [ 707.232728][T32123] bridge_slave_0: entered promiscuous mode [ 707.241140][T32123] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.248317][T32123] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.255867][T32123] bridge_slave_1: entered allmulticast mode [ 707.263568][T32123] bridge_slave_1: entered promiscuous mode [ 707.305841][T32123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.318732][T32123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.363366][T32123] team0: Port device team_slave_0 added [ 707.372411][T32123] team0: Port device team_slave_1 added [ 707.415199][T32123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.422958][T32123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.452810][T32123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.466623][T32123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.474103][T32123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.502475][T32123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.563911][T32123] hsr_slave_0: entered promiscuous mode [ 707.572628][T32123] hsr_slave_1: entered promiscuous mode [ 708.731891][T10902] Bluetooth: hci1: command tx timeout [ 710.801114][T10902] Bluetooth: hci1: command tx timeout [ 712.870434][T10902] Bluetooth: hci1: command tx timeout [ 714.939821][T10902] Bluetooth: hci1: command tx timeout [ 732.852321][ T1132] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1372 with max blocks 119 with error 117 [ 732.868093][ T1132] EXT4-fs (sda1): This should not happen!! Data will be lost [ 732.868093][ T1132] [ 732.882784][ T1132] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 3403 with max blocks 62 with error 117 [ 732.896056][ T1132] EXT4-fs (sda1): This should not happen!! Data will be lost [ 732.896056][ T1132] [ 732.908141][ T1132] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1363 with max blocks 97 with error 117 [ 732.921288][ T1132] EXT4-fs (sda1): This should not happen!! Data will be lost [ 732.921288][ T1132] [ 732.938676][ T1132] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 936 with max blocks 84 with error 117 [ 732.954155][ T1132] EXT4-fs (sda1): This should not happen!! Data will be lost [ 732.954155][ T1132] [ 744.578803][T10903] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 744.587776][T10903] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 744.596385][T10903] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 744.606365][T10903] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 744.614608][T10903] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 744.862589][T32384] chnl_net:caif_netlink_parms(): no params data found [ 744.995273][T32384] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.002465][T32384] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.011003][T32384] bridge_slave_0: entered allmulticast mode [ 745.019135][T32384] bridge_slave_0: entered promiscuous mode [ 745.027380][T32384] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.034908][T32384] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.042065][T32384] bridge_slave_1: entered allmulticast mode [ 745.049858][T32384] bridge_slave_1: entered promiscuous mode [ 745.092100][T32384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.109222][T32384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.150840][T32384] team0: Port device team_slave_0 added [ 745.160504][T32384] team0: Port device team_slave_1 added [ 745.199622][T32384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.207525][T32384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.238115][T32384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.250882][T32384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.258557][T32384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.291682][T32384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.358452][T32384] hsr_slave_0: entered promiscuous mode [ 745.365359][T32384] hsr_slave_1: entered promiscuous mode [ 745.372441][T32384] debugfs: 'hsr0' already exists in 'hsr' [ 745.378203][T32384] Cannot create hsr debugfs directory [ 746.221972][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.231984][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.694457][T10902] Bluetooth: hci5: command tx timeout [ 748.765467][T10902] Bluetooth: hci5: command tx timeout [ 750.832944][T10902] Bluetooth: hci5: command tx timeout [ 752.902281][T10902] Bluetooth: hci5: command tx timeout [ 763.201712][T17074] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 946 with max blocks 19 with error 117 [ 763.216310][T17074] EXT4-fs (sda1): This should not happen!! Data will be lost [ 763.216310][T17074] [ 763.230205][T17074] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 936 with max blocks 85 with error 117 [ 763.242945][T17074] EXT4-fs (sda1): This should not happen!! Data will be lost [ 763.242945][T17074] [ 763.258020][T17074] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 935 with max blocks 32 with error 117 [ 763.271414][T17074] EXT4-fs (sda1): This should not happen!! Data will be lost [ 763.271414][T17074] [ 763.283225][T17074] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1385 with max blocks 11 with error 117 [ 763.296415][T17074] EXT4-fs (sda1): This should not happen!! Data will be lost [ 763.296415][T17074] [ 766.621493][T10903] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 766.630992][T10903] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 766.639804][T10903] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 766.652502][T10903] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 766.660003][T10903] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 767.062956][T32643] chnl_net:caif_netlink_parms(): no params data found [ 767.264561][T32643] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.286375][T32643] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.309162][T32643] bridge_slave_0: entered allmulticast mode [ 767.316588][T32643] bridge_slave_0: entered promiscuous mode [ 767.329810][T32643] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.337082][T32643] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.344254][T32643] bridge_slave_1: entered allmulticast mode [ 767.352388][T32643] bridge_slave_1: entered promiscuous mode [ 767.400489][T32643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.413758][T32643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.455605][T32643] team0: Port device team_slave_0 added [ 767.465633][T32643] team0: Port device team_slave_1 added [ 767.505182][T32643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.516709][T32643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.544502][T32643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.558321][T32643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.565270][T32643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.596506][T32643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.658851][T32643] hsr_slave_0: entered promiscuous mode [ 767.666744][T32643] hsr_slave_1: entered promiscuous mode [ 767.672929][T32643] debugfs: 'hsr0' already exists in 'hsr' [ 767.679626][T32643] Cannot create hsr debugfs directory [ 768.739901][T10903] Bluetooth: hci6: command tx timeout [ 770.809019][T10903] Bluetooth: hci6: command tx timeout [ 772.878278][T10903] Bluetooth: hci6: command tx timeout [ 774.947614][T10903] Bluetooth: hci6: command tx timeout [ 793.493454][ T1132] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1371 with max blocks 29 with error 117 [ 793.507397][ T1132] EXT4-fs (sda1): This should not happen!! Data will be lost [ 793.507397][ T1132] [ 804.650630][T10902] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 804.661442][T10902] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 804.669725][T10902] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 804.679452][T10902] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 804.690816][T10902] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 804.927534][ T439] chnl_net:caif_netlink_parms(): no params data found [ 805.048299][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.057217][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.065456][ T439] bridge_slave_0: entered allmulticast mode [ 805.073397][ T439] bridge_slave_0: entered promiscuous mode [ 805.083701][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.091290][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.098448][ T439] bridge_slave_1: entered allmulticast mode [ 805.106265][ T439] bridge_slave_1: entered promiscuous mode [ 805.150153][ T439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.163828][ T439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.207715][ T439] team0: Port device team_slave_0 added [ 805.216792][ T439] team0: Port device team_slave_1 added [ 805.258128][ T439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.265954][ T439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.300517][ T439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.312937][ T439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.320334][ T439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.350124][ T439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.415662][ T439] hsr_slave_0: entered promiscuous mode [ 805.423065][ T439] hsr_slave_1: entered promiscuous mode [ 805.430398][ T439] debugfs: 'hsr0' already exists in 'hsr' [ 805.436161][ T439] Cannot create hsr debugfs directory [ 806.702397][T10902] Bluetooth: hci7: command tx timeout [ 807.352778][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.359467][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.771699][T10902] Bluetooth: hci7: command tx timeout [ 809.418740][T10903] Bluetooth: hci3: command 0x0406 tx timeout [ 810.840874][T10902] Bluetooth: hci7: command tx timeout [ 812.910259][T10902] Bluetooth: hci7: command tx timeout [ 826.665526][T10903] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 826.676764][T10903] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 826.685402][T10903] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 826.697613][T10903] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 826.705333][T10903] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 826.936402][ T699] chnl_net:caif_netlink_parms(): no params data found [ 827.062300][ T699] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.070223][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.079991][ T699] bridge_slave_0: entered allmulticast mode [ 827.089659][ T699] bridge_slave_0: entered promiscuous mode [ 827.097878][ T699] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.105023][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.112652][ T699] bridge_slave_1: entered allmulticast mode [ 827.120492][ T699] bridge_slave_1: entered promiscuous mode [ 827.162374][ T699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.178202][ T699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.223138][ T699] team0: Port device team_slave_0 added [ 827.232460][ T699] team0: Port device team_slave_1 added [ 827.273816][ T699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.281839][ T699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.311203][ T699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.324382][ T699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.332690][ T699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.361347][ T699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.425657][ T699] hsr_slave_0: entered promiscuous mode [ 827.432225][ T699] hsr_slave_1: entered promiscuous mode [ 827.440305][ T699] debugfs: 'hsr0' already exists in 'hsr' [ 827.446939][ T699] Cannot create hsr debugfs directory [ 828.747786][T10902] Bluetooth: hci8: command tx timeout [ 829.785136][T10902] Bluetooth: hci1: command 0x0406 tx timeout [ 830.817063][T10903] Bluetooth: hci8: command tx timeout [ 832.886296][T10903] Bluetooth: hci8: command tx timeout [ 834.955434][T10903] Bluetooth: hci8: command tx timeout [ 846.814026][ T31] INFO: task syz-executor:31240 blocked for more than 143 seconds. [ 846.821953][ T31] Tainted: G L syzkaller #0 [ 846.830331][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 846.841485][ T31] task:syz-executor state:D stack:24328 pid:31240 tgid:31240 ppid:1 task_flags:0x480140 flags:0x00080002 [ 846.856969][ T31] Call Trace: [ 846.860269][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 846.863226][ T31] __schedule+0xfee/0x6120 [ 846.873778][ T31] ? __lock_acquire+0x4a5/0x2630 [ 846.878785][ T31] ? __pfx___schedule+0x10/0x10 [ 846.893544][ T31] ? find_held_lock+0x2b/0x80 [ 846.898259][ T31] ? schedule+0x2bf/0x390 [ 846.902633][ T31] schedule+0xdd/0x390 [ 846.923086][ T31] schedule_timeout+0x1b2/0x280 [ 846.928064][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 846.945070][ T31] ? mark_held_locks+0x40/0x70 [ 846.964207][ T31] __wait_for_common+0x2e7/0x4c0 [ 846.969205][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 846.982812][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 846.988331][ T31] remove_one+0x312/0x420 [ 847.002924][ T31] ? find_next_child+0x18f/0x280 [ 847.008008][ T31] __simple_recursive_removal+0x148/0x5c0 [ 847.022604][ T31] ? __pfx_remove_one+0x10/0x10 [ 847.027492][ T31] debugfs_remove+0x5d/0x80 [ 847.032032][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 847.132581][ T31] nsim_dev_reload_destroy+0x144/0x4a0 [ 847.138136][ T31] nsim_drv_remove+0x52/0x1e0 [ 847.211759][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 847.217145][ T31] device_remove+0xcb/0x180 [ 847.241560][ T31] device_release_driver_internal+0x44e/0x620 [ 847.247697][ T31] bus_remove_device+0x2bc/0x560 [ 847.271337][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 847.276871][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 847.311140][ T31] ? up_write+0x290/0x4f0 [ 847.315523][ T31] device_del+0x376/0x9b0 [ 847.319872][ T31] ? __pfx_device_del+0x10/0x10 [ 847.350994][ T31] ? __lock_acquire+0x4a5/0x2630 [ 847.380863][ T31] device_unregister+0x1d/0xe0 [ 847.385676][ T31] del_device_store+0x346/0x480 [ 847.410674][ T31] ? __pfx_del_device_store+0x10/0x10 [ 847.416175][ T31] ? find_held_lock+0x2b/0x80 [ 847.440502][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 847.445395][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 847.463929][ T31] ? __pfx_del_device_store+0x10/0x10 [ 847.469521][ T31] bus_attr_store+0x74/0xb0 [ 847.502022][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 847.507468][ T31] sysfs_kf_write+0xf2/0x150 [ 847.539938][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 847.545269][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 847.569827][ T31] vfs_write+0x6ac/0x1070 [ 847.574192][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 847.595955][ T31] ? __pfx_vfs_write+0x10/0x10 [ 847.612169][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 847.617417][ T31] ksys_write+0x12a/0x250 [ 847.644127][ T31] ? __pfx_ksys_write+0x10/0x10 [ 847.649020][ T31] do_syscall_64+0x106/0xf80 [ 847.669204][ T31] ? clear_bhb_loop+0x40/0x90 [ 847.673928][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.694129][ T31] RIP: 0033:0x7f95e355cfce [ 847.698670][ T31] RSP: 002b:00007ffcb6f6bd98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 847.720847][ T31] RAX: ffffffffffffffda RBX: 000055558bd16500 RCX: 00007f95e355cfce [ 847.728854][ T31] RDX: 0000000000000001 RSI: 00007ffcb6f6be20 RDI: 0000000000000005 [ 847.758873][ T31] RBP: 00007f95e363351c R08: 0000000000000000 R09: 0000000000000000 [ 847.778725][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.786738][ T31] R13: 00007ffcb6f6be20 R14: 00007f95e4344620 R15: 0000000000000003 [ 847.808578][ T31] [ 847.819058][ T31] INFO: task syz.1.2306:31744 blocked for more than 144 seconds. [ 847.826798][ T31] Tainted: G L syzkaller #0 [ 847.859327][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 847.888192][ T31] task:syz.1.2306 state:D stack:29000 pid:31744 tgid:31741 ppid:5826 task_flags:0x400040 flags:0x00080002 [ 847.928034][ T31] Call Trace: [ 847.931421][ T31] [ 847.934906][ T31] __schedule+0xfee/0x6120 [ 847.967173][ T31] ? __lock_acquire+0x4a5/0x2630 [ 847.974773][ T31] ? __pfx___schedule+0x10/0x10 [ 848.007018][ T31] ? find_held_lock+0x2b/0x80 [ 848.017483][ T31] ? schedule+0x2bf/0x390 [ 848.021951][ T31] schedule+0xdd/0x390 [ 848.026055][ T31] schedule_preempt_disabled+0x13/0x30 [ 848.066582][ T31] __mutex_lock+0xc9a/0x1b90 [ 848.136779][ T31] ? __pfx___alloc_skb+0x10/0x10 [ 848.141852][ T31] ? devlink_health_report+0x681/0xb50 [ 848.164689][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 848.176728][ T31] ? devlink_recover_notify.constprop.0+0x4d7/0x670 [ 848.183394][ T31] ? devlink_recover_notify.constprop.0+0x200/0x670 [ 848.226458][ T31] ? devlink_health_report+0x681/0xb50 [ 848.231961][ T31] devlink_health_report+0x681/0xb50 [ 848.259683][T11420] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.0.710: Error -117 reading block bitmap for 3 [ 848.274771][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 848.286558][ T31] ? _copy_from_user+0x59/0xd0 [ 848.291373][ T31] nsim_dev_health_break_write+0x166/0x210 [ 848.325371][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 848.333396][T11420] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.0.710: Error -117 reading block bitmap for 2 [ 848.347675][ T31] full_proxy_write+0x135/0x1a0 [ 848.352620][ T31] vfs_write+0x2aa/0x1070 [ 848.387435][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 848.392892][ T31] ? __pfx_vfs_write+0x10/0x10 [ 848.405572][ T31] ? __fget_files+0x215/0x3d0 [ 848.410309][ T31] ? __fget_files+0x21f/0x3d0 [ 848.415121][ T31] ksys_write+0x12a/0x250 [ 848.435290][ T31] ? __pfx_ksys_write+0x10/0x10 [ 848.440168][ T31] ? kcov_ioctl+0x16a/0x720 [ 848.444697][ T31] do_syscall_64+0x106/0xf80 [ 848.465415][ T31] ? clear_bhb_loop+0x40/0x90 [ 848.470143][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.481311][T11420] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 848.490503][ T31] RIP: 0033:0x7f3c40d9c799 [ 848.498623][T11420] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.0.710: Error -117 reading block bitmap for 2 [ 848.511479][ T31] RSP: 002b:00007f3c41bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 848.520152][ T31] RAX: ffffffffffffffda RBX: 00007f3c41016090 RCX: 00007f3c40d9c799 [ 848.535007][ T31] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000005 [ 848.543001][ T31] RBP: 00007f3c40e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 848.562126][T11420] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 848.571757][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.582942][ T31] R13: 00007f3c41016128 R14: 00007f3c41016090 R15: 00007ffcc340d2e8 [ 848.591190][ T31] [ 848.637071][ T31] [ 848.637071][ T31] Showing all locks held in the system: [ 848.668721][ T31] 1 lock held by khungtaskd/31: [ 848.673598][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 848.708687][ T31] 2 locks held by getty/5581: [ 848.713401][ T31] #0: ffff8880389620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 848.753688][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 848.773763][ T31] 3 locks held by kworker/u8:12/17075: [ 848.779234][ T31] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 848.805619][ T31] #1: ffffc90003d6fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 848.835048][ T31] #2: ffffffff90616168 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 848.853152][ T31] 2 locks held by syz.4.1651/21882: [ 848.858364][ T31] #0: ffffffff90616168 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 848.893019][ T31] #1: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 848.916435][ T31] 7 locks held by syz-executor/31240: [ 848.921820][ T31] #0: ffff888031ce6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 848.944757][ T31] #1: ffff88802971f888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 848.975640][ T31] #2: ffff888029f6b3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 848.987621][ T31] #3: ffffffff8fb6e6c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 848.998208][ T31] #4: ffff88805ba35130 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 849.008983][ T31] #5: ffff8880360d8250 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 849.019341][ T31] #6: ffff888052271a70 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 849.032657][ T31] 3 locks held by syz.1.2306/31744: [ 849.037872][ T31] #0: ffff88807db5e638 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 849.048128][ T31] #1: ffff8880202ce420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 849.059333][ T31] #2: ffff8880360d8250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x681/0xb50 [ 849.070347][ T31] 4 locks held by syz-executor/32123: [ 849.075992][ T31] #0: ffff888031ce6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 849.085228][ T31] #1: ffff88807c78f888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 849.096968][ T31] #2: ffff888029f6b3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 849.107252][ T31] #3: ffffffff8fb6e6c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 849.117838][ T31] 4 locks held by syz-executor/32384: [ 849.123910][ T31] #0: ffff888031ce6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 849.133200][ T31] #1: ffff88805b28f888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 849.144284][ T31] #2: ffff888029f6b3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 849.154647][ T31] #3: ffffffff8fb6e6c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 849.167957][ T31] 4 locks held by syz-executor/32643: [ 849.173827][ T31] #0: ffff888031ce6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 849.183057][ T31] #1: ffff88805b0b5488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 849.194810][ T31] #2: ffff888029f6b3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 849.206371][ T31] #3: ffffffff8fb6e6c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 849.216973][ T31] 4 locks held by syz-executor/439: [ 849.222384][ T31] #0: ffff888031ce6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 849.231705][ T31] #1: ffff88805b25cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 849.241688][ T31] #2: ffff888029f6b3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 849.253096][ T31] #3: ffffffff8fb6e6c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 849.263813][ T31] 4 locks held by syz-executor/699: [ 849.269024][ T31] #0: ffff888031ce6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 849.280527][ T31] #1: ffff88805ab9f888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 849.293612][ T31] #2: ffff888029f6b3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 849.303874][ T31] #3: ffffffff8fb6e6c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 849.333184][ T31] [ 849.335530][ T31] ============================================= [ 849.335530][ T31] [ 849.354601][T21882] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.4.1651: Error -117 reading block bitmap for 3 [ 849.372470][ T31] NMI backtrace for cpu 0 [ 849.372492][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 849.372525][ T31] Tainted: [L]=SOFTLOCKUP [ 849.372534][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 849.372556][ T31] Call Trace: [ 849.372564][ T31] [ 849.372573][ T31] dump_stack_lvl+0x100/0x190 [ 849.372614][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 849.372654][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 849.372692][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 849.372728][ T31] sys_info+0x141/0x190 [ 849.372755][ T31] watchdog+0xd25/0x1050 [ 849.372787][ T31] ? __pfx_watchdog+0x10/0x10 [ 849.372812][ T31] ? __kthread_parkme+0x18c/0x230 [ 849.372843][ T31] ? kthread+0x13a/0x450 [ 849.372873][ T31] ? __pfx_watchdog+0x10/0x10 [ 849.372896][ T31] kthread+0x370/0x450 [ 849.372927][ T31] ? __pfx_kthread+0x10/0x10 [ 849.372961][ T31] ret_from_fork+0x754/0xd80 [ 849.372999][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 849.373038][ T31] ? __switch_to+0x7b4/0x1120 [ 849.373066][ T31] ? __pfx_kthread+0x10/0x10 [ 849.373099][ T31] ret_from_fork_asm+0x1a/0x30 [ 849.373139][ T31] [ 849.506111][T21882] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.4.1651: Error -117 reading block bitmap for 3 [ 849.565467][T21882] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 849.574904][T21882] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.4.1651: Error -117 reading block bitmap for 3 [ 849.641589][T17075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.661495][T21882] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 849.678291][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 849.685264][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 849.695955][ T31] Tainted: [L]=SOFTLOCKUP [ 849.700281][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 849.710362][ T31] Call Trace: [ 849.713647][ T31] [ 849.716580][ T31] dump_stack_lvl+0x100/0x190 [ 849.721284][ T31] vpanic+0x552/0x970 [ 849.725275][ T31] ? __pfx_vpanic+0x10/0x10 [ 849.729790][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 849.735969][ T31] panic+0xd1/0xe0 [ 849.739699][ T31] ? __pfx_panic+0x10/0x10 [ 849.744128][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 849.750324][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 849.756498][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 849.762676][ T31] ? watchdog.cold+0x198/0x1ca [ 849.767457][ T31] ? watchdog+0xd35/0x1050 [ 849.771891][ T31] watchdog.cold+0x1a9/0x1ca [ 849.776504][ T31] ? __pfx_watchdog+0x10/0x10 [ 849.781193][ T31] ? __kthread_parkme+0x18c/0x230 [ 849.786232][ T31] ? kthread+0x13a/0x450 [ 849.790495][ T31] ? __pfx_watchdog+0x10/0x10 [ 849.795179][ T31] kthread+0x370/0x450 [ 849.799266][ T31] ? __pfx_kthread+0x10/0x10 [ 849.803883][ T31] ret_from_fork+0x754/0xd80 [ 849.808494][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 849.813625][ T31] ? __switch_to+0x7b4/0x1120 [ 849.818314][ T31] ? __pfx_kthread+0x10/0x10 [ 849.822934][ T31] ret_from_fork_asm+0x1a/0x30 [ 849.827740][ T31] [ 849.830829][ T31] Kernel Offset: disabled [ 849.835161][ T31] Rebooting in 86400 seconds..