last executing test programs: 7.817187834s ago: executing program 3 (id=4833): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r2 = ioctl$auto_NS_GET_TGID_FROM_PIDNS(r0, 0x8004b707, &(0x7f00000001c0)=0x72) setsockopt$auto_SO_RCVMARK(r2, 0x4, 0x4b, &(0x7f0000000200)='-\x00', 0x4) ioctl$auto(r1, 0x80045430, r0) write$auto_force_suspend_fops_hci_vhci(r2, &(0x7f0000000240)="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", 0x1000) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), r0) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x12, 0xa, '/dev/pts/ptmx\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_INDEX={0x8, 0x1, 0xffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x20044010) 7.652812743s ago: executing program 0 (id=4834): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto(r1, 0x80045430, r0) (fail_nth: 3) 7.560535179s ago: executing program 3 (id=4836): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0xfffffffa) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x80000541b, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) mmap$auto(0x3, 0x20009, 0x0, 0x12, 0xffffffffffffffff, 0xffffffffffffffff) wait4$auto(0xffffffffffffffff, &(0x7f0000000140)=0xd8de95b, 0x4, &(0x7f00000001c0)={{0xffffffffffff0000}, {0x0, 0x6}, 0xa3, 0x1, 0x80000001, 0xfffffffffffffffc, 0x3fd, 0x1, 0x9001, 0x1, 0x2, 0x9, 0xf, 0x1, 0x3, 0x6}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000001c0)={0x1, 0x7, 0x17, 0x8, 0x1, 0x64, 0x10, 0x3, 0x3}) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/free_buffer\x00', 0x0, 0xebff) bind$auto(0xffffffffffffffff, 0x0, 0x6d) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0xf5, 0x10000000de, 0xffffffffffffffff, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) r5 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x8, 0x7f, 0xffffffffffffffff, @relative_fd, 0x4}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x1}, 0x4) 7.133994544s ago: executing program 0 (id=4837): r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_futex/interval\x00', 0xa2500, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/fs/cifs/Stats\x00', 0x88040, 0x0) pread64$auto(r1, 0x0, 0x7, 0x9fffffffd) write$auto(r0, &(0x7f0000000480)='\xbe$>\x04L`\xb0D\xb0\xbe{\xca\xd4\x17x\xef\x00\x92\x0e\x05\xbdm\x9a\x90\xb1\xf4K\xe06ECf\xf9\xa5\x88\xa8\x13U\xe0\xbcV\xc2\x003\x86l\xbb\f\xbb\xbd\xbb\x16\xf0\v\xd8\xe7\x95\xdf7\xa5\xc8\xac\xce\xcb\xf3\xed\xfbA\xf9N~\'\b \xc7\x7f\xe7\xce\tF\x99\xcf\x92s\x0f\xa5\xc7E9w\x80\x01\x00\x00\x00\xb9\x8f\x1c\xbc\xb5\x1b\x80\x1b1Z\xd9\xae\x1bI\x8f3\xd4@\x1ce\xef~\xef}\v&\x11\xcd\xe2{\xc9\xa5\xba\x05\'\x13\x1d\x00\x00\xd9T\x86\xf0x\x84{F/\xc3\xa7i\xa6\x9a\xf2P\x97R\xfa\xe8dt\xf5\x91f\x06\xff\x7f\x00\x00\x00\x00\x00\x004\x13j\x0e\x8b\xfb\xabn\xbf\xa9\xfe\x19{\xca\x8e\xb3w\xc3\x14\x05n\x97\xaa\x8d\xcfn\x02\x00\x00\x00\xc1\x8e\x10M?\xae\x93\xeeb\xb3\x00'/221, 0x6) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x4, 0x3, 0x4, 0x2d) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ptrace$auto(0x4, 0x0, 0x1, 0x4) mmap$auto(0xc, 0x203, 0x2, 0x100000000040eb5, 0xffffffffffffffff, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x656, 0x800, 0xef1, 0xffffffffffffffff, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) unshare$auto(0x8100000) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r3, 0x0, 0x62d4) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x1, 0x84) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, r4, 0x8000) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) prctl$auto(0x23, 0x0, 0x2008, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) 5.77555289s ago: executing program 0 (id=4841): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0x2, &(0x7f0000000380)="dcbb5fd7054bed139fb7f9fb1dca8fe1d88f65ee057c0e6faac40d106e4f0d52edf6e31c48e8d983ae3431fa707225c2c387e1a200b38759ba8e9187200e6d044ef46a534de751b1436f20ed7071b254509700aa726ea003a1b7b9ce2313756dc84bc4556ddac694c4553d72ed13a885176712c9cff968f74bd1d14ff734ad08e60cf7e7a7dd07d2b6ca9cb21ddaae68d2969afcf6c734f6ee1c63b1c93abf32264f9ec022b64c903276298739ee8ae7ac1fe14534ad54004f39ea1b99964702554c1494e1742baeae527cf3007d50fc92e924f73b6288e5d9fd071d2fba76b2fabd3faf5229f4c3168226346e3087026d3d2c8aed398d4988971e05ff0ab9f5f2328e7f51d5061584b44581a4c83e413718d3a82f87daf87d1d5a2c32fbaa58f095fbf34ccc603b632155c27289cb5598049a7c9160dfe8a01d5a1983408082941eb39db2a09c5a34dc876dfa58a589687aa0cf6be7b5b084a8f753758332896ec3adad7a79b751908ee2b3d25131f44185a0ed8d20e9b6b8a1ed11402b02e544b67caf3177eda039e64aaf295eca7953c165fa73afca96d7750663711101c6e14e44817c6ad4b1474132dd441ca5c9d7776c871ffacb") ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd05, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r2 = socket(0x15, 0x5, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x681}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x1a, 0x1, 0x0) 5.754872107s ago: executing program 3 (id=4842): mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_GET_UNALIGN(0x5, 0x29, 0x8000, 0x3, 0x7fff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) nanosleep$auto(0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x0, 0x7fff, r1, 0x5, 0x2000000006) fallocate$auto(0xffffffffffffffff, 0x5, 0x7, 0x4cbd61) r2 = socket(0x1e, 0x1, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r3, 0xc0045627, r2) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x40400, 0x0) socket(0x10, 0x2, 0xc) r4 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci8/force_wakeup\x00', 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) r5 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci5/force_devcoredump\x00', 0x2, 0x0) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) sendmmsg$auto(r4, &(0x7f00000002c0)={{&(0x7f0000000300)="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", 0xfffffff9, &(0x7f0000000200)={&(0x7f0000000180)="1a7835e0a88063c02f1279a9d40375e905b6943ad9708d2810f62da527792edaf5af8cddd27453f296075ae53088d4cfe3cba39881759b5925a33ba87c1f491e07cbcdbdaa42af8a1e06a749954086f86136a6488968c5fb8b1451f6", 0x3}, 0x2000002000, &(0x7f0000000240)="d1e7c5fe02e7757ca1065b894fb923c868d0320169dc0b244a5ea0fedbad792ad2bf8a2cf89f53b3e18222f96b1f9b67060da11fa9ef008702bcf3ef132c8bf22c5abee30d17d0b180939fad64fd56e7ab522d7ba1203b06fb498a9e78707a4d598e389de85fa197a5da4addc6a2aba39c67c7a7d6d4780ae44ab05f58bf", 0x7, 0xfffffffa}, 0x1ff}, 0x8, 0x200) write$auto(r5, 0x0, 0xe) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) 5.563026728s ago: executing program 0 (id=4843): mmap$auto(0x3, 0x3, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x103300, 0x0) close_range$auto(0x2, r0, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/version\x00', 0x10102, 0x0) io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r1, 0x5, &(0x7f0000000100)="a825d3630e7e", 0xd91) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x0, 0xdf, 0x16, 0x2, 0x2d) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) semtimedop$auto(0x0, 0x0, 0x1, 0x0) 4.745277116s ago: executing program 0 (id=4846): r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6d) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmmsg$auto(r0, 0x0, 0x9, 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x181081, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f00000001c0), 0x0) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000000c0), r0) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0xa00, 0x70bd29, 0x25dfdbfd, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x41) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/bond_slave_1/base_reachable_time_ms\x00', 0x40001, 0x0) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x5, 0xffffffffffffffff, 0x0, 0x0, 0x101) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x0, 0xa, 0xac, 0xfff8, 0xfffffffe, 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unshare$auto(0x20000080) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400008, 0x100000005}}) vmsplice$auto(0x1, 0x0, 0x6, 0x8) 4.077914689s ago: executing program 3 (id=4848): r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_futex/interval\x00', 0xa2500, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/fs/cifs/Stats\x00', 0x88040, 0x0) pread64$auto(r1, 0x0, 0x7, 0x9fffffffd) write$auto(r0, &(0x7f0000000480)='\xbe$>\x04L`\xb0D\xb0\xbe{\xca\xd4\x17x\xef\x00\x92\x0e\x05\xbdm\x9a\x90\xb1\xf4K\xe06ECf\xf9\xa5\x88\xa8\x13U\xe0\xbcV\xc2\x003\x86l\xbb\f\xbb\xbd\xbb\x16\xf0\v\xd8\xe7\x95\xdf7\xa5\xc8\xac\xce\xcb\xf3\xed\xfbA\xf9N~\'\b \xc7\x7f\xe7\xce\tF\x99\xcf\x92s\x0f\xa5\xc7E9w\x80\x01\x00\x00\x00\xb9\x8f\x1c\xbc\xb5\x1b\x80\x1b1Z\xd9\xae\x1bI\x8f3\xd4@\x1ce\xef~\xef}\v&\x11\xcd\xe2{\xc9\xa5\xba\x05\'\x13\x1d\x00\x00\xd9T\x86\xf0x\x84{F/\xc3\xa7i\xa6\x9a\xf2P\x97R\xfa\xe8dt\xf5\x91f\x06\xff\x7f\x00\x00\x00\x00\x00\x004\x13j\x0e\x8b\xfb\xabn\xbf\xa9\xfe\x19{\xca\x8e\xb3w\xc3\x14\x05n\x97\xaa\x8d\xcfn\x02\x00\x00\x00\xc1\x8e\x10M?\xae\x93\xeeb\xb3\x00'/221, 0x6) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x4, 0x3, 0x4, 0x2d) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ptrace$auto(0x4, 0x0, 0x1, 0x4) mmap$auto(0xc, 0x203, 0x2, 0x100000000040eb5, 0xffffffffffffffff, 0x7) r3 = prctl$auto_SECCOMP_MODE_FILTER(0xfe000000, 0x2, 0x0, 0xf307, 0x101) mmap$auto(0x0, 0x656, 0x800, 0xef1, r3, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) unshare$auto(0x8100000) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r4, 0x0, 0x62d4) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x1, 0x84) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, r5, 0x8000) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) prctl$auto(0x23, 0x0, 0x2008, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) 4.019339127s ago: executing program 2 (id=4849): socket(0x2d, 0x2, 0x0) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01009b64c23ef155546b0104000008000900", @ANYBLOB="080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="0c0001"], 0x8d}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x804, 0x70bd2a, 0x25dfdbff, {}, [@OVS_METER_ATTR_USED={0xc, 0x5, 0xe5}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x400000c) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)={0x38, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7f}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8}, @NL80211_ATTR_FILS_DISCOVERY={0xc, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x1}]}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000009c0)={{@raw=0xb, 0x2, 0xed, 0x5, "23af44e99b39d92c8f7925902e82e274330f614fe788a29d9671e208274eb3003d738d0ced7f8e4ae6a7e31d"}, 0x4, 0x7, 0x65dc, @inferred, @enumerated={0x6, 0x46, "ccf8a22025f886dfa5f5ce5396f3add58174d9e53228434abe8f8017ca440b62f31abb9d0169fadbfa8b73374cc17c08360d32f9536712384d926c4677d3559d", 0x40, 0x1}, "3a1b2e5bfbf619455ff4b80b5092c5bf432fa6c3d158c2b2591103e6fdbf0bb88e707ed93304acc4c076b5b3d92be4e06123de781b632127a86c6ccae54ffb74"}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x80) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'tunl0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00'}) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.694874088s ago: executing program 2 (id=4850): r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_futex/interval\x00', 0xa2500, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/fs/cifs/Stats\x00', 0x88040, 0x0) pread64$auto(r1, 0x0, 0x7, 0x9fffffffd) write$auto(r0, &(0x7f0000000480)='\xbe$>\x04L`\xb0D\xb0\xbe{\xca\xd4\x17x\xef\x00\x92\x0e\x05\xbdm\x9a\x90\xb1\xf4K\xe06ECf\xf9\xa5\x88\xa8\x13U\xe0\xbcV\xc2\x003\x86l\xbb\f\xbb\xbd\xbb\x16\xf0\v\xd8\xe7\x95\xdf7\xa5\xc8\xac\xce\xcb\xf3\xed\xfbA\xf9N~\'\b \xc7\x7f\xe7\xce\tF\x99\xcf\x92s\x0f\xa5\xc7E9w\x80\x01\x00\x00\x00\xb9\x8f\x1c\xbc\xb5\x1b\x80\x1b1Z\xd9\xae\x1bI\x8f3\xd4@\x1ce\xef~\xef}\v&\x11\xcd\xe2{\xc9\xa5\xba\x05\'\x13\x1d\x00\x00\xd9T\x86\xf0x\x84{F/\xc3\xa7i\xa6\x9a\xf2P\x97R\xfa\xe8dt\xf5\x91f\x06\xff\x7f\x00\x00\x00\x00\x00\x004\x13j\x0e\x8b\xfb\xabn\xbf\xa9\xfe\x19{\xca\x8e\xb3w\xc3\x14\x05n\x97\xaa\x8d\xcfn\x02\x00\x00\x00\xc1\x8e\x10M?\xae\x93\xeeb\xb3\x00'/221, 0x6) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x4, 0x3, 0x4, 0x2d) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ptrace$auto(0x4, 0x0, 0x1, 0x4) r3 = prctl$auto_SECCOMP_MODE_FILTER(0xfe000000, 0x2, 0x0, 0xf307, 0x101) unshare$auto(0x40000080) mmap$auto(0x0, 0x656, 0x800, 0xef1, r3, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) unshare$auto(0x8100000) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r4, 0x0, 0x62d4) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x1, 0x84) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, r5, 0x8000) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) prctl$auto(0x23, 0x0, 0x2008, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) 3.433659626s ago: executing program 3 (id=4852): r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_futex/interval\x00', 0xa2500, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/fs/cifs/Stats\x00', 0x88040, 0x0) pread64$auto(r1, 0x0, 0x7, 0x9fffffffd) write$auto(r0, &(0x7f0000000480)='\xbe$>\x04L`\xb0D\xb0\xbe{\xca\xd4\x17x\xef\x00\x92\x0e\x05\xbdm\x9a\x90\xb1\xf4K\xe06ECf\xf9\xa5\x88\xa8\x13U\xe0\xbcV\xc2\x003\x86l\xbb\f\xbb\xbd\xbb\x16\xf0\v\xd8\xe7\x95\xdf7\xa5\xc8\xac\xce\xcb\xf3\xed\xfbA\xf9N~\'\b \xc7\x7f\xe7\xce\tF\x99\xcf\x92s\x0f\xa5\xc7E9w\x80\x01\x00\x00\x00\xb9\x8f\x1c\xbc\xb5\x1b\x80\x1b1Z\xd9\xae\x1bI\x8f3\xd4@\x1ce\xef~\xef}\v&\x11\xcd\xe2{\xc9\xa5\xba\x05\'\x13\x1d\x00\x00\xd9T\x86\xf0x\x84{F/\xc3\xa7i\xa6\x9a\xf2P\x97R\xfa\xe8dt\xf5\x91f\x06\xff\x7f\x00\x00\x00\x00\x00\x004\x13j\x0e\x8b\xfb\xabn\xbf\xa9\xfe\x19{\xca\x8e\xb3w\xc3\x14\x05n\x97\xaa\x8d\xcfn\x02\x00\x00\x00\xc1\x8e\x10M?\xae\x93\xeeb\xb3\x00'/221, 0x6) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x4, 0x3, 0x4, 0x2d) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ptrace$auto(0x4, 0x0, 0x1, 0x4) mmap$auto(0xc, 0x203, 0x2, 0x100000000040eb5, 0xffffffffffffffff, 0x7) r3 = prctl$auto_SECCOMP_MODE_FILTER(0xfe000000, 0x2, 0x0, 0xf307, 0x101) unshare$auto(0x40000080) mmap$auto(0x0, 0x656, 0x800, 0xef1, r3, 0x7) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) unshare$auto(0x8100000) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r4, 0x0, 0x62d4) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x1, 0x84) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, r5, 0x8000) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) prctl$auto(0x23, 0x0, 0x2008, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) 3.366601604s ago: executing program 0 (id=4853): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x7, 0x0, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x0, 0x6d3f, 0x8002, 0xa, 0xfffffffffffffffe]}, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) lsm_list_modules$auto(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) socket(0x2c, 0x80003, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x8eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0xffffffffffffffff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xa13, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 3.130185346s ago: executing program 2 (id=4854): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x22, 0xa, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) (async) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) (async) unshare$auto(0x40000080) (async) mmap$auto(0xfffffffffffffffe, 0x400007, 0x8, 0x9b72, 0xffffffffffffffff, 0x6) (async) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) socket(0x2, 0x1, 0x0) (async) socketpair$auto(0x1e, 0x3, 0xffffff00, 0x0) mmap$auto(0x1ff, 0x2, 0x1, 0x810, r4, 0x4) 2.759401573s ago: executing program 1 (id=4855): r0 = socket(0x29, 0x2, 0x0) setsockopt$auto(r0, 0x119, 0xfffffffe, 0x0, 0x8) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) lstat$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffffffffffe, 0x400000100000001, 0x1000, 0x0, 0x0, 0x0, 0x220fa98, 0xc, 0x6, 0x8000000008, 0x100000007fffffff, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0xb}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) unshare$auto(0x1) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0x100000000}, 0x6, 0x0) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000080)=0x6) fanotify_mark$auto(0xffffffffffffffff, 0x47e, 0xa, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/user\x00') socket(0x2000000000000021, 0x2, 0x10000000000002) fchdir$auto(r4) r5 = creat$auto(&(0x7f0000001840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xff) ioctl$auto_FS_IOC_RESVSP64(r5, 0x4030582a, 0x10) 2.475992584s ago: executing program 1 (id=4856): r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x3, 0x4020009, 0xb, 0x10, r0, 0xb081) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80102, 0x0) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x4, 0x1ff, 0x4cbd5d) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000002f80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002f40)={&(0x7f0000001700)={0x828, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x13b, 0x1, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @uid}, @generic="82f4afabceba4088c0ad36bf3681dcb27228f92289d941f5507245b3c0e4fe930245d80edc45ea7ea5a5b05c9a51439e40c85d019c73a6b8810c46788dabfd492714a480fe1c1a8613a76264f6d2ce3c58b6481aac953d957d6db9fa62f94a94968841924396787c36bf2e6768", @generic="aee497b6f16b2116162aa3e3449ec5688335ace7ee4e237c78d68e56edbd817c49312c23deffcb8fc2dfcde185610eb51a90621d4dce089d264b320ed53e1a5c1fbb2011ac1453dc672899b40f15b394ff6a4184a209f04c5760b0e2122963440aaca6e23a2d913dddf12cd0ea8dbe2bc8cef0dad6c47bd26f9c2005ee5e730ba5b9c45caa278242cee0e2b03b5ae716ae5a9c49e2436c648f8b33fd85d073777769912b97c93cda0bb7be7597dc003a774112129f00a4489a72", @typed={0x8, 0xde, 0x0, 0x0, @pid}, @generic]}, @IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x12d, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @u32=0x401}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x268, 0x3, 0x0, 0x1, [@nested={0x1b3, 0x15a, 0x0, 0x1, [@generic="9d1bd366bdc90215d8e6de452dc117cad1f779606761079f869b2f49a3d46d6ed0e988ec63bf7f192b7c99ff1406a882b1018ce779e03abc6e5aa8437b924ce9263828f9a265021160f33df753a1878b9f6cda7036a9096684de89e52598434dadbb675021e786703eb1deec3a626936464fc0dae0cba478e060150722babe8544e4e4d13d2f526050f4558479a5b6a8ed12279190c9dbbfbb0b6805d2d61d2043f054666d5c76ec596c30eb3b349397f893bcf3b7", @generic="092f6293a31debe87a9d98b380c476713ccfb7ab6583ee64c2d7db94131ecd958d3d065c6bacd89c2d5c9cbe991ef65ce3aeb675cca4eb556882b59253f0923753e5cc33478dac5c6e919faf97a45ff6da2f26401fc9fd9f9b81c84cb8647c0c0821e465183dbfa31aea6a505e781afa68c3b826f42d8cece962e74f50dfef1444ace8123f0d0e6331969942d9e50251d299fd8b881958b56d5ce50fe7f0887e89378194e4112204d4d199fd4f3674982963ac6a6b87a6f9683e1e859ef0f024978ae4ecc1797cc556016fd186f51f81df08f9ca16376e5384ae266974461f9fb7b0a43897a208fab39ab909cbbd5a189cac3838f05f", @nested={0x4, 0x96}]}, @generic="b258199dde6c7bc4e91113cffe050297d43ae195c430da00c803b43035f766dc2c68062cdc5aa7a044fb7bf347ad12136f6faf5d99c33ef655857a91", @generic="485d858d638925e558f34fb4f1c4af298b89a589eb7497a860c520656de67ef47722f851016f6d81494cbb7f490951e289e97765569e0e01c4c10c9b8dd4536ac21d5e6106e243784c0ae315ed73a1421e21afa693ef388d654b62b1d73dcff5d041c2a2d8ea066164687cae55fcdbf4fb4d3100"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x42e, 0x1, 0x0, 0x1, [@generic="b1c0b18ddb884c745d6321948bada7c8ce76588092f4a7f7d91e2da7678d0aefb3d424dff725925ed134ac430450630216c2a117f93ae2c79842d1eeeefc8c39e442574cdbdaf134cd8d8349e67ba67711e82480cf554c7d59e6dee57803bdf8cf079b15b3084acd521067f10367d5dc0cd3861caa2740c1af2539590704503d769c802e15bb87f3d1ddac2ac7233d264d62e5d478177186e95c4a41cb53b60b6fce04fabf4fa8262c21a57f3f25a710834dfaf1af7b37d840782abbec78b0b2529919975e193e2aa39acf10d4bdd1474bf2e512bd8c8c817bd5dc6b77998d7a0755f60e8249cd95", @nested={0x287, 0x71, 0x0, 0x1, [@nested={0x4, 0x74}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r1}, @generic="118327d914d58eb5188ef071bc8fb956f5e1b714898c08fc220279018a5a25286d4d43a38ffee5772d148122d502f206e739a1dd26a341150827f05dcd122e04c33755d5a4076c3be008f70ce41abe3187dc31738ee41f62e1917f310d89b62a2038c2eb413b2de8595004e496110de51be213375d1a5b57c4750b5f1dee1ce317451726ce56f1d6df44fe0105d2eb7d3ce59c7bcca1bbe1c2266d3359e2e8ca75a43ebacb9b6dd934b8eeaed504aa468bf147", @generic="7aa1ed72197206133b777e728aaecd2fef53c35a997a47bdbbe29b45d8def2f967f9c9548d6feb8ee974d7405a3dc8179e3ef729df56caf52e877a16ffca870d76d03689fd372b455da4ac7f58ab9e313da744ec4f7406b9b2064177cf898aeb125dabe9cfb3149579bfb75a4a34c3de89e4f01d50aa01e9b2fb23a1a6f1f3cfd7dbee0f04aba4191ffc22876a2bd6190e3d44ce0ada467fd2df919ebfa14a016b8dd06cb59fd5b39116b11ad0d96b67024d09491e8a21c05dda0a175d5549126fd92b5ea168e6ac", @generic="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"]}, @generic="ed532f8a9ceeac80766ad9b2bbe99df3439a400b6553360f3faac707f4aa84c8c410c7d8c57d18d3a4c0374743ec2f7fc9cd1887692b466d37b4e2540abca214efc4b5060626cf1bb6d499c6f313776e77a352fbb22906549559cb60c601bdbafc679376ece07c8c83a98c125b87528e29eb20bd18d8a8c701266324d392ad515b9ed1ce6dfcabe5248b1194ce1ac06087ff1d697213a59407c025f55ce9c6b966c6c5958e675192f1dd773446ddf2ddf55472ff894356926eec"]}]}, 0x828}, 0x1, 0x0, 0x0, 0x20048042}, 0x40) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyye/power/runtime_status\x00', 0x2c62, 0x0) write$auto(r3, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x101001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000003c0)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c050) write$auto(r4, &(0x7f00000000c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c(\xdb', 0x10000000081) write$auto(r1, 0x0, 0x40100000a3d5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/teql0/duplex\x00', 0x680e42, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x1ac}}, 0x40000) 2.1517572s ago: executing program 2 (id=4857): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) sysfs$auto(0x2, 0x10000000000002d, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) fcntl$auto_F_SETOWN_EX(r0, 0xf, 0xfffffffdfffff596) r1 = socket(0x2b, 0x1, 0x102) bind$auto(r1, 0x0, 0x6a) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4140, 0x181) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) connect$auto(0x3, 0x0, 0x54) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) setreuid$auto(0x1, 0x3) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) r3 = socket(0x84d565d4c8086e80, 0x4, 0x1000005) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) socketpair$auto(0x3, 0x9e, 0x523, &(0x7f0000000000)=0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0x5) 2.034796163s ago: executing program 3 (id=4858): r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6d) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmmsg$auto(r0, 0x0, 0x9, 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x181081, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f00000001c0), 0x0) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000000c0), r0) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0xa00, 0x70bd29, 0x25dfdbfd, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x41) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/neigh/bond_slave_1/base_reachable_time_ms\x00', 0x40001, 0x0) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x5, 0xffffffffffffffff, 0x0, 0x0, 0x101) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x0, 0xa, 0xac, 0xfff8, 0xfffffffe, 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unshare$auto(0x20000080) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400008, 0x100000005}}) vmsplice$auto(0x1, 0x0, 0x6, 0x8) 1.740553371s ago: executing program 2 (id=4859): socket(0x2d, 0x2, 0x0) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01009b64c23ef155546b0104000008000900", @ANYBLOB="080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="0c0001"], 0x8d}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x804, 0x70bd2a, 0x25dfdbff, {}, [@OVS_METER_ATTR_USED={0xc, 0x5, 0xe5}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x400000c) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)={0x38, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7f}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8}, @NL80211_ATTR_FILS_DISCOVERY={0xc, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x1}]}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000009c0)={{@raw=0xb, 0x2, 0xed, 0x5, "23af44e99b39d92c8f7925902e82e274330f614fe788a29d9671e208274eb3003d738d0ced7f8e4ae6a7e31d"}, 0x4, 0x7, 0x65dc, @inferred, @enumerated={0x6, 0x46, "ccf8a22025f886dfa5f5ce5396f3add58174d9e53228434abe8f8017ca440b62f31abb9d0169fadbfa8b73374cc17c08360d32f9536712384d926c4677d3559d", 0x40, 0x1}, "3a1b2e5bfbf619455ff4b80b5092c5bf432fa6c3d158c2b2591103e6fdbf0bb88e707ed93304acc4c076b5b3d92be4e06123de781b632127a86c6ccae54ffb74"}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x80) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'tunl0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00'}) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.478763928s ago: executing program 1 (id=4860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) write$auto_trace_options_core_fops_trace(0xffffffffffffffff, &(0x7f0000000000)="bd2afd3dd98c88ecd7ce2d71d813f5049de18649bf6a39885c1033df7aab5ae12cc197cb82fe62e718ba8b4fb56fb6", 0x2f) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f00000001c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000002c0)={@raw=0x5, "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"}) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r6}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_NFSD_CMD_POOL_MODE_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$auto_OVS_DP_CMD_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_NAME={0x6, 0x1, '.\x00'}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004895}, 0x20008004) (fail_nth: 1) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001800)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB], 0x18}}, 0x4000) r8 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vgem/gem_names\x00', 0x20800, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r8, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x541583, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) futex_waitv$auto(&(0x7f0000001040)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) futex$auto(0x0, 0x5, 0x1ff, 0x0, 0x0, 0xfffffffa) io_pgetevents$auto(0x0, 0x7fff, 0x7fff, &(0x7f0000001080)={0x7, 0xe593, 0x3}, &(0x7f00000010c0)={0x0, 0x6}, &(0x7f00000012c0)={&(0x7f0000001100)={0xb0}}) 1.340462275s ago: executing program 2 (id=4861): socket(0x11, 0x3, 0x9) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf0001824c51024c5ae08590", @ANYRES32, @ANYBLOB="0800018004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f000000d680)='/dev/ram5\x00', 0x40000, 0x0) ioctl$auto(r5, 0x3, r0) sendmsg$auto_L2TP_CMD_NOOP(r4, &(0x7f000000db00)={&(0x7f000000d9c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f000000dac0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00578f5a", @ANYRES8, @ANYBLOB="000325bd7000fcdbdf2500000000050013000d000000080018000400000005000600fe000000050006000800000008000b000d00000006001d006c0900000500060004000000", @ANYRES64=r5], 0x4c}, 0x1, 0x0, 0x0, 0xc010}, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0x29, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="feffffff", @ANYRES16=r1, @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) setresuid$auto(0xd, 0x0, 0x221) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x24082, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r8, 0x5412, &(0x7f0000000000)) ioctl$auto_TIOCSTI2(r8, 0x5412, &(0x7f0000000100)="15") r9 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0x42, 0x0) write$auto(r9, &(0x7f0000000180)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\xe5\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\xb2^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dT\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xdc*\x1dV', 0x5) 451.806532ms ago: executing program 1 (id=4863): r0 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x0, 0x0) write$auto_tracing_entries_fops_trace(r0, 0x0, 0x0) r1 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) pwritev$auto(r1, 0x0, 0x2, 0xfffffffffffff274, 0x6) sendto$auto(r1, 0x0, 0xffffffffffffbdef, 0x101, 0x0, 0x1c) sendmsg$auto_SMC_NETLINK_DISABLE_HS_LIMITATION(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x87) ioctl$auto_BCH_IOCTL_QUERY_ACCOUNTING(r1, 0x4020bc15, &(0x7f0000000180)={0x37fb0000, 0xd0f, 0x0, 0x1, 0x20ed, [{@k_i={{}, {0x2, 0x22, 0x0, 0x0, 0x0, {0x3ff}, 0x3, {0x9, 0x5, 0xfe6}}}}]}) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) 284.435169ms ago: executing program 1 (id=4864): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x40842, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x4) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x3, 0xffffff5d) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) 0s ago: executing program 1 (id=4865): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x40842, 0x0) writev$auto(r1, 0x0, 0x4) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x3, 0xffffff5d) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) kernel console output (not intermixed with test programs): 26] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4346'. [ 975.232663][T24825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4346'. [ 975.255223][T24832] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0deaa (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 975.270890][T24832] Call Trace: [ 975.274157][T24832] [ 975.277073][T24832] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 975.283736][T24832] ? __pfx___schedule+0x10/0x10 [ 975.288573][T24832] ? irqentry_exit+0x24d/0x970 [ 975.293329][T24832] mce_cpu_restart+0xd5/0x1f0 [ 975.297990][T24832] ? __pfx_mce_cpu_restart+0x10/0x10 [ 975.303257][T24832] smp_call_function_many_cond+0x13d4/0x1700 [ 975.309227][T24832] ? __pfx_mce_cpu_restart+0x10/0x10 [ 975.314498][T24832] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 975.320292][T24832] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 975.326606][T24832] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 975.332579][T24832] ? __timer_delete_sync+0x151/0x1c0 [ 975.337851][T24832] ? __pfx_mce_cpu_restart+0x10/0x10 [ 975.343119][T24832] on_each_cpu_cond_mask+0x40/0x90 [ 975.348221][T24832] set_bank+0x240/0x3a0 [ 975.352370][T24832] ? __pfx_set_bank+0x10/0x10 [ 975.357037][T24832] ? find_held_lock+0x2b/0x80 [ 975.361698][T24832] ? sysfs_file_kobj+0xe4/0x290 [ 975.366538][T24832] ? sysfs_file_kobj+0xe4/0x290 [ 975.371378][T24832] ? __pfx_set_bank+0x10/0x10 [ 975.376039][T24832] dev_attr_store+0x58/0x80 [ 975.380525][T24832] ? __pfx_dev_attr_store+0x10/0x10 [ 975.385718][T24832] sysfs_kf_write+0xf2/0x150 [ 975.390315][T24832] kernfs_fop_write_iter+0x3e0/0x5f0 [ 975.395585][T24832] ? __pfx_sysfs_kf_write+0x10/0x10 [ 975.400776][T24832] vfs_write+0x6ac/0x1070 [ 975.405092][T24832] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 975.410890][T24832] ? __pfx_vfs_write+0x10/0x10 [ 975.415653][T24832] ksys_write+0x12a/0x250 [ 975.419968][T24832] ? __pfx_ksys_write+0x10/0x10 [ 975.424806][T24832] ? rcu_is_watching+0x12/0xc0 [ 975.429560][T24832] do_syscall_64+0x115/0x840 [ 975.434141][T24832] ? clear_bhb_loop+0x40/0x90 [ 975.438804][T24832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.444683][T24832] RIP: 0033:0x7f0effd9ce59 [ 975.449080][T24832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.468672][T24832] RSP: 002b:00007f0f00bd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 975.477066][T24832] RAX: ffffffffffffffda RBX: 00007f0f00016270 RCX: 00007f0effd9ce59 [ 975.485018][T24832] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000008 [ 975.492967][T24832] RBP: 00007f0effe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 975.500915][T24832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.508863][T24832] R13: 00007f0f00016308 R14: 00007f0f00016270 R15: 00007ffe437ef398 [ 975.516822][T24832] [ 975.997532][T24835] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4347'. [ 976.020673][T24835] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4347'. [ 976.933180][T24838] EXT4-fs (sda1): pa ffff8880351e79f8: logic 6144, phys. 116736, len 2048 [ 976.942773][T24838] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:5458: group 3, free 1916, pa_free 1915 [ 977.151030][T24822] Process accounting paused [ 978.347275][T24879] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 978.846028][T24888] FAULT_INJECTION: forcing a failure. [ 978.846028][T24888] name failslab, interval 1, probability 0, space 0, times 0 [ 979.389505][T24890] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4360'. [ 979.409396][T24888] CPU: 0 UID: 0 PID: 24888 Comm: syz.2.4359 Tainted: G U L syzkaller #0 PREEMPT(full) [ 979.409423][T24888] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 979.409430][T24888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 979.409439][T24888] Call Trace: [ 979.409445][T24888] [ 979.409452][T24888] dump_stack_lvl+0x100/0x190 [ 979.409483][T24888] should_fail_ex.cold+0x5/0xa [ 979.409503][T24888] should_failslab+0xc2/0x120 [ 979.409522][T24888] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 979.409545][T24888] ? mas_preallocate+0x1105/0x14a0 [ 979.409563][T24888] mas_preallocate+0x1105/0x14a0 [ 979.409581][T24888] ? __pfx_mas_preallocate+0x10/0x10 [ 979.409600][T24888] ? vm_area_alloc+0x1f/0x160 [ 979.409622][T24888] ? lockdep_init_map_type+0x5c/0x250 [ 979.409651][T24888] __mmap_region+0x124a/0x2dd0 [ 979.409677][T24888] ? __pfx___mmap_region+0x10/0x10 [ 979.409717][T24888] ? find_held_lock+0x2b/0x80 [ 979.409734][T24888] ? ima_match_policy+0x8c4/0x2350 [ 979.409753][T24888] ? ima_match_policy+0x8c4/0x2350 [ 979.409789][T24888] ? process_measurement+0x4c8/0x2350 [ 979.409836][T24888] mmap_region+0x527/0x620 [ 979.409852][T24888] ? __pfx_mmap_region+0x10/0x10 [ 979.409869][T24888] ? cap_mmap_addr+0x4b/0x120 [ 979.409884][T24888] ? bpf_lsm_mmap_addr+0x9/0x30 [ 979.409899][T24888] ? security_mmap_addr+0x71/0x1e0 [ 979.409918][T24888] ? __get_unmapped_area+0x255/0x3e0 [ 979.409939][T24888] do_mmap+0xc63/0x12f0 [ 979.409961][T24888] ? __pfx_do_mmap+0x10/0x10 [ 979.409985][T24888] ? __pfx_down_write_killable+0x10/0x10 [ 979.410013][T24888] vm_mmap_pgoff+0x29e/0x470 [ 979.410037][T24888] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 979.410055][T24888] ? __fget_files+0x215/0x3d0 [ 979.410076][T24888] ? __fget_files+0x21f/0x3d0 [ 979.410097][T24888] ksys_mmap_pgoff+0x3cb/0x610 [ 979.410115][T24888] ? __x64_sys_futex+0x358/0x4d0 [ 979.410132][T24888] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 979.410149][T24888] ? xfd_validate_state+0x129/0x190 [ 979.410164][T24888] ? ksys_write+0x1ac/0x250 [ 979.410185][T24888] __x64_sys_mmap+0x125/0x190 [ 979.410203][T24888] do_syscall_64+0x115/0x840 [ 979.410223][T24888] ? clear_bhb_loop+0x40/0x90 [ 979.410241][T24888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.410256][T24888] RIP: 0033:0x7fabab19ce59 [ 979.410270][T24888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.410285][T24888] RSP: 002b:00007fabac105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 979.410300][T24888] RAX: ffffffffffffffda RBX: 00007fabab416090 RCX: 00007fabab19ce59 [ 979.410311][T24888] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 979.410321][T24888] RBP: 00007fabab232d6f R08: 00000000000000dd R09: 0000000000000000 [ 979.410331][T24888] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 979.410340][T24888] R13: 00007fabab416128 R14: 00007fabab416090 R15: 00007ffef8198488 [ 979.410360][T24888] [ 980.726700][T24899] FAULT_INJECTION: forcing a failure. [ 980.726700][T24899] name failslab, interval 1, probability 0, space 0, times 0 [ 980.954811][T24899] CPU: 0 UID: 0 PID: 24899 Comm: syz.0.4362 Tainted: G U L syzkaller #0 PREEMPT(full) [ 980.954843][T24899] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 980.954849][T24899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 980.954859][T24899] Call Trace: [ 980.954864][T24899] [ 980.954871][T24899] dump_stack_lvl+0x100/0x190 [ 980.954900][T24899] should_fail_ex.cold+0x5/0xa [ 980.954921][T24899] should_failslab+0xc2/0x120 [ 980.954939][T24899] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 980.954964][T24899] ? security_file_alloc+0x34/0x2c0 [ 980.954984][T24899] ? trace_kmem_cache_alloc+0xd5/0x100 [ 980.955005][T24899] security_file_alloc+0x34/0x2c0 [ 980.955025][T24899] init_file+0x95/0x480 [ 980.955046][T24899] alloc_empty_file+0x79/0x1c0 [ 980.955069][T24899] path_openat+0xe8/0x31a0 [ 980.955088][T24899] ? __kernel_text_address+0xd/0x30 [ 980.955103][T24899] ? unwind_get_return_address+0x59/0xa0 [ 980.955122][T24899] ? arch_stack_walk+0xa6/0xf0 [ 980.955144][T24899] ? __pfx_path_openat+0x10/0x10 [ 980.955164][T24899] ? stack_trace_save+0x8e/0xc0 [ 980.955184][T24899] ? __pfx_stack_trace_save+0x10/0x10 [ 980.955205][T24899] do_file_open+0x20e/0x430 [ 980.955226][T24899] ? __pfx_do_file_open+0x10/0x10 [ 980.955244][T24899] ? kasan_save_track+0x14/0x30 [ 980.955258][T24899] ? __kasan_slab_alloc+0x89/0x90 [ 980.955277][T24899] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 980.955318][T24899] do_open_execat+0xd1/0x360 [ 980.955334][T24899] ? __pfx_do_open_execat+0x10/0x10 [ 980.955351][T24899] ? __might_fault+0xc5/0x140 [ 980.955373][T24899] ? __might_fault+0xc5/0x140 [ 980.955399][T24899] alloc_bprm+0x2d/0x710 [ 980.955416][T24899] do_execveat_common.isra.0+0x19c/0x580 [ 980.955433][T24899] ? do_getname+0x191/0x390 [ 980.955456][T24899] __x64_sys_execve+0x93/0xd0 [ 980.955473][T24899] do_syscall_64+0x115/0x840 [ 980.955494][T24899] ? clear_bhb_loop+0x40/0x90 [ 980.955513][T24899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.955528][T24899] RIP: 0033:0x7f16e059ce59 [ 980.955541][T24899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.955555][T24899] RSP: 002b:00007f16e139f028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 980.955570][T24899] RAX: ffffffffffffffda RBX: 00007f16e0815fa0 RCX: 00007f16e059ce59 [ 980.955580][T24899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 980.955589][T24899] RBP: 00007f16e139f090 R08: 0000000000000000 R09: 0000000000000000 [ 980.955598][T24899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.955607][T24899] R13: 00007f16e0816038 R14: 00007f16e0815fa0 R15: 00007ffcd66d6d48 [ 980.955626][T24899] [ 981.630305][T24916] FAULT_INJECTION: forcing a failure. [ 981.630305][T24916] name failslab, interval 1, probability 0, space 0, times 0 [ 981.696249][T24916] CPU: 0 UID: 0 PID: 24916 Comm: syz.1.4366 Tainted: G U L syzkaller #0 PREEMPT(full) [ 981.696278][T24916] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 981.696285][T24916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 981.696295][T24916] Call Trace: [ 981.696301][T24916] [ 981.696308][T24916] dump_stack_lvl+0x100/0x190 [ 981.696338][T24916] should_fail_ex.cold+0x5/0xa [ 981.696359][T24916] should_failslab+0xc2/0x120 [ 981.696377][T24916] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 981.696401][T24916] ? __pmd_alloc+0xbf/0x950 [ 981.696425][T24916] __pmd_alloc+0xbf/0x950 [ 981.696446][T24916] move_page_tables+0x2f7c/0x4610 [ 981.696470][T24916] ? __pfx_copy_vma+0x10/0x10 [ 981.696500][T24916] ? __pfx_move_page_tables+0x10/0x10 [ 981.696532][T24916] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 981.696554][T24916] copy_vma_and_data+0x25c/0x7c0 [ 981.696579][T24916] ? __pfx_copy_vma_and_data+0x10/0x10 [ 981.696610][T24916] ? __vma_start_write+0x17f/0x280 [ 981.696631][T24916] ? __pfx___vma_start_write+0x10/0x10 [ 981.696657][T24916] move_vma+0x574/0x1920 [ 981.696682][T24916] ? __pfx_move_vma+0x10/0x10 [ 981.696707][T24916] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 981.696727][T24916] ? cap_mmap_addr+0x4b/0x120 [ 981.696741][T24916] ? bpf_lsm_mmap_addr+0x9/0x30 [ 981.696761][T24916] ? security_mmap_addr+0x71/0x1e0 [ 981.696782][T24916] ? __get_unmapped_area+0x255/0x3e0 [ 981.696803][T24916] ? vrm_set_new_addr+0x204/0x290 [ 981.696829][T24916] mremap_to+0x234/0x4c0 [ 981.696851][T24916] ? mas_walk+0x6ef/0x9b0 [ 981.696870][T24916] ? __pfx_mremap_to+0x10/0x10 [ 981.696892][T24916] ? check_prep_vma+0x912/0xe60 [ 981.696918][T24916] __do_sys_mremap+0x88c/0x1850 [ 981.696939][T24916] ? __pfx___do_sys_mremap+0x10/0x10 [ 981.696952][T24916] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 981.696978][T24916] ? do_futex+0x192/0x350 [ 981.696994][T24916] ? __pfx_do_futex+0x10/0x10 [ 981.697014][T24916] ? __x64_sys_futex+0x34f/0x4d0 [ 981.697037][T24916] ? rcu_is_watching+0x12/0xc0 [ 981.697057][T24916] do_syscall_64+0x115/0x840 [ 981.697077][T24916] ? clear_bhb_loop+0x40/0x90 [ 981.697095][T24916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.697110][T24916] RIP: 0033:0x7f0effd9ce59 [ 981.697124][T24916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.697139][T24916] RSP: 002b:00007f0f00c34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 981.697154][T24916] RAX: ffffffffffffffda RBX: 00007f0f00015fa0 RCX: 00007f0effd9ce59 [ 981.697165][T24916] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 981.697176][T24916] RBP: 00007f0effe32d6f R08: 0000000100000000 R09: 0000000000000000 [ 981.697185][T24916] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 981.697194][T24916] R13: 00007f0f00016038 R14: 00007f0f00015fa0 R15: 00007ffe437ef398 [ 981.697215][T24916] [ 982.338619][T24918] vhci_hcd: not connected 4 [ 984.708034][T24943] Process accounting resumed [ 984.860979][T24970] FAULT_INJECTION: forcing a failure. [ 984.860979][T24970] name failslab, interval 1, probability 0, space 0, times 0 [ 984.924124][T24970] CPU: 0 UID: 0 PID: 24970 Comm: syz.2.4378 Tainted: G U L syzkaller #0 PREEMPT(full) [ 984.924152][T24970] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 984.924159][T24970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 984.924169][T24970] Call Trace: [ 984.924175][T24970] [ 984.924181][T24970] dump_stack_lvl+0x100/0x190 [ 984.924212][T24970] should_fail_ex.cold+0x5/0xa [ 984.924232][T24970] should_failslab+0xc2/0x120 [ 984.924252][T24970] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 984.924275][T24970] ? vm_area_alloc+0x1f/0x160 [ 984.924299][T24970] vm_area_alloc+0x1f/0x160 [ 984.924320][T24970] __mmap_region+0x104d/0x2dd0 [ 984.924347][T24970] ? __pfx___mmap_region+0x10/0x10 [ 984.924387][T24970] ? find_held_lock+0x2b/0x80 [ 984.924405][T24970] ? ima_match_policy+0x8c4/0x2350 [ 984.924423][T24970] ? ima_match_policy+0x8c4/0x2350 [ 984.924459][T24970] ? process_measurement+0x4c8/0x2350 [ 984.924506][T24970] mmap_region+0x527/0x620 [ 984.924522][T24970] ? __pfx_mmap_region+0x10/0x10 [ 984.924546][T24970] ? cap_mmap_addr+0x4b/0x120 [ 984.924561][T24970] ? bpf_lsm_mmap_addr+0x9/0x30 [ 984.924576][T24970] ? security_mmap_addr+0x71/0x1e0 [ 984.924597][T24970] ? __get_unmapped_area+0x255/0x3e0 [ 984.924618][T24970] do_mmap+0xc63/0x12f0 [ 984.924640][T24970] ? __pfx_do_mmap+0x10/0x10 [ 984.924658][T24970] ? __pfx_down_write_killable+0x10/0x10 [ 984.924685][T24970] vm_mmap_pgoff+0x29e/0x470 [ 984.924708][T24970] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 984.924725][T24970] ? __fget_files+0x215/0x3d0 [ 984.924746][T24970] ? __fget_files+0x21f/0x3d0 [ 984.924766][T24970] ksys_mmap_pgoff+0x3cb/0x610 [ 984.924785][T24970] ? __x64_sys_futex+0x358/0x4d0 [ 984.924800][T24970] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 984.924818][T24970] ? xfd_validate_state+0x129/0x190 [ 984.924833][T24970] ? ksys_write+0x1ac/0x250 [ 984.924853][T24970] __x64_sys_mmap+0x125/0x190 [ 984.924871][T24970] do_syscall_64+0x115/0x840 [ 984.924891][T24970] ? clear_bhb_loop+0x40/0x90 [ 984.924909][T24970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.924925][T24970] RIP: 0033:0x7fabab19ce59 [ 984.924939][T24970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.924953][T24970] RSP: 002b:00007fabac105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 984.924969][T24970] RAX: ffffffffffffffda RBX: 00007fabab416090 RCX: 00007fabab19ce59 [ 984.924983][T24970] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 984.924992][T24970] RBP: 00007fabab232d6f R08: 00000000000000dd R09: 0000000000000000 [ 984.925001][T24970] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 984.925010][T24970] R13: 00007fabab416128 R14: 00007fabab416090 R15: 00007ffef8198488 [ 984.925030][T24970] [ 984.928865][T24967] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4377'. [ 986.297285][T24919] Process accounting paused [ 987.241765][T24971] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4377'. [ 988.777989][T25023] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4389'. [ 990.383411][T25055] vhci_hcd: not connected 4 [ 990.429942][T25062] [U] 0 [ 990.477247][T25061] [U] QUI [ 992.944103][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.950405][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.449422][T25123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4406'. [ 993.514697][T25123] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4406'. [ 993.723160][T25125] vhci_hcd: not connected 4 [ 994.338478][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4413'. [ 994.965344][T25164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4417'. [ 995.030000][T25164] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4417'. [ 995.291564][T25142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4413'. [ 995.965061][T25184] can0: slcan on ttyS2. [ 996.133710][T25183] can0 (unregistered): slcan off ttyS2. [ 996.366808][T25186] vhci_hcd: not connected 4 [ 996.559560][T25206] sd 0:0:1:0: PR command failed: 1026 [ 996.594918][T25206] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 996.635455][T25206] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 996.673298][T25197] zswap: compressor not available [ 997.069999][T25218] FAULT_INJECTION: forcing a failure. [ 997.069999][T25218] name failslab, interval 1, probability 0, space 0, times 0 [ 997.184358][T25218] CPU: 0 UID: 0 PID: 25218 Comm: syz.3.4427 Tainted: G U L syzkaller #0 PREEMPT(full) [ 997.184387][T25218] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 997.184393][T25218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 997.184403][T25218] Call Trace: [ 997.184409][T25218] [ 997.184415][T25218] dump_stack_lvl+0x100/0x190 [ 997.184444][T25218] should_fail_ex.cold+0x5/0xa [ 997.184467][T25218] ? iter_file_splice_write+0x1d8/0x10a0 [ 997.184486][T25218] should_failslab+0xc2/0x120 [ 997.184504][T25218] __kmalloc_noprof+0xe0/0x850 [ 997.184523][T25218] iter_file_splice_write+0x1d8/0x10a0 [ 997.184544][T25218] ? copy_splice_read+0x6c0/0xb90 [ 997.184562][T25218] ? copy_splice_read+0x734/0xb90 [ 997.184583][T25218] ? copy_splice_read+0x739/0xb90 [ 997.184601][T25218] ? __pfx_iter_file_splice_write+0x10/0x10 [ 997.184624][T25218] ? __pfx_copy_splice_read+0x10/0x10 [ 997.184644][T25218] ? look_up_lock_class+0x55/0x120 [ 997.184670][T25218] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 997.184688][T25218] ? __pfx_iter_file_splice_write+0x10/0x10 [ 997.184708][T25218] direct_splice_actor+0x192/0x6c0 [ 997.184730][T25218] splice_direct_to_actor+0x345/0xa30 [ 997.184750][T25218] ? __pfx_direct_splice_actor+0x10/0x10 [ 997.184773][T25218] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 997.184797][T25218] do_splice_direct+0x174/0x240 [ 997.184816][T25218] ? __pfx_do_splice_direct+0x10/0x10 [ 997.184835][T25218] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 997.184855][T25218] ? bpf_lsm_file_permission+0x9/0x10 [ 997.184869][T25218] ? security_file_permission+0x76/0x210 [ 997.184889][T25218] ? rw_verify_area+0xce/0x6d0 [ 997.184906][T25218] do_sendfile+0xadc/0xe20 [ 997.184926][T25218] ? __pfx_do_sendfile+0x10/0x10 [ 997.184945][T25218] ? __x64_sys_futex+0x34f/0x4d0 [ 997.184960][T25218] ? __x64_sys_futex+0x358/0x4d0 [ 997.184977][T25218] __x64_sys_sendfile64+0x1d8/0x220 [ 997.184998][T25218] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 997.185020][T25218] ? rcu_is_watching+0x12/0xc0 [ 997.185040][T25218] do_syscall_64+0x115/0x840 [ 997.185059][T25218] ? clear_bhb_loop+0x40/0x90 [ 997.185077][T25218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.185093][T25218] RIP: 0033:0x7f1c4659ce59 [ 997.185106][T25218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.185120][T25218] RSP: 002b:00007f1c47442028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 997.185136][T25218] RAX: ffffffffffffffda RBX: 00007f1c46815fa0 RCX: 00007f1c4659ce59 [ 997.185147][T25218] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 997.185156][T25218] RBP: 00007f1c46632d6f R08: 0000000000000000 R09: 0000000000000000 [ 997.185166][T25218] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 997.185176][T25218] R13: 00007f1c46816038 R14: 00007f1c46815fa0 R15: 00007ffc71fb9f68 [ 997.185203][T25218] [ 997.660807][T25193] Process accounting resumed [ 998.306888][T25227] input: jJǸ-9%vJ86 as /devices/virtual/input/input87 [ 998.580791][T25248] netlink: 326 bytes leftover after parsing attributes in process `syz.1.4434'. [ 998.969692][T25261] FAULT_INJECTION: forcing a failure. [ 998.969692][T25261] name failslab, interval 1, probability 0, space 0, times 0 [ 999.071316][T25261] CPU: 0 UID: 0 PID: 25261 Comm: syz.0.4437 Tainted: G U L syzkaller #0 PREEMPT(full) [ 999.071344][T25261] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 999.071350][T25261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 999.071359][T25261] Call Trace: [ 999.071365][T25261] [ 999.071371][T25261] dump_stack_lvl+0x100/0x190 [ 999.071401][T25261] should_fail_ex.cold+0x5/0xa [ 999.071420][T25261] should_failslab+0xc2/0x120 [ 999.071439][T25261] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 999.071463][T25261] ? do_getname+0x35/0x390 [ 999.071484][T25261] ? strncpy_from_user+0x19d/0x2d0 [ 999.071508][T25261] do_getname+0x35/0x390 [ 999.071531][T25261] __x64_sys_link+0x66/0xb0 [ 999.071553][T25261] do_syscall_64+0x115/0x840 [ 999.071573][T25261] ? clear_bhb_loop+0x40/0x90 [ 999.071592][T25261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.071608][T25261] RIP: 0033:0x7f16e059ce59 [ 999.071620][T25261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.071635][T25261] RSP: 002b:00007f16e139f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 999.071650][T25261] RAX: ffffffffffffffda RBX: 00007f16e0815fa0 RCX: 00007f16e059ce59 [ 999.071660][T25261] RDX: 0000000000000000 RSI: 0000200000003280 RDI: 0000200000003240 [ 999.071669][T25261] RBP: 00007f16e139f090 R08: 0000000000000000 R09: 0000000000000000 [ 999.071678][T25261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.071687][T25261] R13: 00007f16e0816038 R14: 00007f16e0815fa0 R15: 00007ffcd66d6d48 [ 999.071706][T25261] [ 1000.036615][T25297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4440'. [ 1000.126959][T25297] team0: Port device team_slave_1 removed [ 1001.075182][T25333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1001.244749][T25341] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1002.462274][T25349] Process accounting paused [ 1002.917697][T25362] Process accounting resumed [ 1002.969600][T25384] hub 1-0:1.0: USB hub found [ 1003.014733][T25384] hub 1-0:1.0: 1 port detected [ 1003.391197][T25395] FAULT_INJECTION: forcing a failure. [ 1003.391197][T25395] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.439287][T25395] CPU: 0 UID: 0 PID: 25395 Comm: syz.2.4467 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1003.439316][T25395] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1003.439322][T25395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1003.439332][T25395] Call Trace: [ 1003.439338][T25395] [ 1003.439345][T25395] dump_stack_lvl+0x100/0x190 [ 1003.439375][T25395] should_fail_ex.cold+0x5/0xa [ 1003.439395][T25395] ? lsm_blob_alloc+0x68/0x90 [ 1003.439416][T25395] should_failslab+0xc2/0x120 [ 1003.439435][T25395] __kmalloc_noprof+0xe0/0x850 [ 1003.439449][T25395] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1003.439470][T25395] lsm_blob_alloc+0x68/0x90 [ 1003.439492][T25395] security_sk_alloc+0x2d/0x290 [ 1003.439509][T25395] sk_prot_alloc+0x1d1/0x2a0 [ 1003.439531][T25395] sk_alloc+0x36/0xe80 [ 1003.439553][T25395] qrtr_create+0x84/0x1d0 [ 1003.439575][T25395] __sock_create+0x339/0x860 [ 1003.439600][T25395] __sys_socket+0x14d/0x260 [ 1003.439621][T25395] ? __pfx___sys_socket+0x10/0x10 [ 1003.439640][T25395] ? ksys_write+0x1ac/0x250 [ 1003.439662][T25395] __x64_sys_socket+0x72/0xb0 [ 1003.439681][T25395] ? lockdep_hardirqs_on+0x78/0x100 [ 1003.439702][T25395] do_syscall_64+0x115/0x840 [ 1003.439721][T25395] ? clear_bhb_loop+0x40/0x90 [ 1003.439739][T25395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.439755][T25395] RIP: 0033:0x7fabab19ce59 [ 1003.439768][T25395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.439783][T25395] RSP: 002b:00007fabac126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1003.439798][T25395] RAX: ffffffffffffffda RBX: 00007fabab415fa0 RCX: 00007fabab19ce59 [ 1003.439808][T25395] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 1003.439818][T25395] RBP: 00007fabab232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1003.439826][T25395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.439836][T25395] R13: 00007fabab416038 R14: 00007fabab415fa0 R15: 00007ffef8198488 [ 1003.439855][T25395] [ 1003.991442][T25402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4470'. [ 1004.046201][T25402] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4470'. [ 1004.423110][T25417] FAULT_INJECTION: forcing a failure. [ 1004.423110][T25417] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.546713][T25410] vhci_hcd: not connected 4 [ 1004.570153][T25417] CPU: 0 UID: 0 PID: 25417 Comm: syz.2.4473 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1004.570181][T25417] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1004.570187][T25417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1004.570197][T25417] Call Trace: [ 1004.570202][T25417] [ 1004.570209][T25417] dump_stack_lvl+0x100/0x190 [ 1004.570240][T25417] should_fail_ex.cold+0x5/0xa [ 1004.570261][T25417] should_failslab+0xc2/0x120 [ 1004.570279][T25417] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1004.570303][T25417] ? mas_preallocate+0x1105/0x14a0 [ 1004.570321][T25417] mas_preallocate+0x1105/0x14a0 [ 1004.570339][T25417] ? __pfx_mas_preallocate+0x10/0x10 [ 1004.570358][T25417] ? vm_area_alloc+0x1f/0x160 [ 1004.570380][T25417] ? lockdep_init_map_type+0x5c/0x250 [ 1004.570407][T25417] __mmap_region+0x124a/0x2dd0 [ 1004.570439][T25417] ? __pfx___mmap_region+0x10/0x10 [ 1004.570480][T25417] ? find_held_lock+0x2b/0x80 [ 1004.570499][T25417] ? ima_match_policy+0x8c4/0x2350 [ 1004.570518][T25417] ? ima_match_policy+0x8c4/0x2350 [ 1004.570553][T25417] ? process_measurement+0x4c8/0x2350 [ 1004.570600][T25417] mmap_region+0x527/0x620 [ 1004.570616][T25417] ? __pfx_mmap_region+0x10/0x10 [ 1004.570633][T25417] ? cap_mmap_addr+0x4b/0x120 [ 1004.570647][T25417] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1004.570661][T25417] ? security_mmap_addr+0x71/0x1e0 [ 1004.570680][T25417] ? __get_unmapped_area+0x255/0x3e0 [ 1004.570701][T25417] do_mmap+0xc63/0x12f0 [ 1004.570723][T25417] ? __pfx_do_mmap+0x10/0x10 [ 1004.570741][T25417] ? __pfx_down_write_killable+0x10/0x10 [ 1004.570768][T25417] vm_mmap_pgoff+0x29e/0x470 [ 1004.570790][T25417] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1004.570808][T25417] ? __fget_files+0x215/0x3d0 [ 1004.570828][T25417] ? __fget_files+0x21f/0x3d0 [ 1004.570849][T25417] ksys_mmap_pgoff+0x3cb/0x610 [ 1004.570867][T25417] ? __x64_sys_futex+0x358/0x4d0 [ 1004.570883][T25417] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1004.570901][T25417] ? xfd_validate_state+0x129/0x190 [ 1004.570915][T25417] ? ksys_write+0x1ac/0x250 [ 1004.570936][T25417] __x64_sys_mmap+0x125/0x190 [ 1004.570953][T25417] do_syscall_64+0x115/0x840 [ 1004.570973][T25417] ? clear_bhb_loop+0x40/0x90 [ 1004.570991][T25417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.571006][T25417] RIP: 0033:0x7fabab19ce59 [ 1004.571020][T25417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.571035][T25417] RSP: 002b:00007fabac105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1004.571050][T25417] RAX: ffffffffffffffda RBX: 00007fabab416090 RCX: 00007fabab19ce59 [ 1004.571060][T25417] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 1004.571069][T25417] RBP: 00007fabab232d6f R08: 00000000000000dd R09: 0000000000000000 [ 1004.571078][T25417] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1004.571087][T25417] R13: 00007fabab416128 R14: 00007fabab416090 R15: 00007ffef8198488 [ 1004.571108][T25417] [ 1005.810215][T25449] MTRR 1 not used [ 1006.893095][T25464] futex_wake_op: syz.2.4481 tries to shift op by -2048; fix this program [ 1007.020342][T25464] futex_wake_op: syz.2.4481 tries to shift op by -2048; fix this program [ 1007.817659][T25488] ICMPv6: process `syz.0.4486' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 1007.910669][T25484] vhci_hcd: not connected 4 [ 1008.517007][T25501] FAULT_INJECTION: forcing a failure. [ 1008.517007][T25501] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.692546][T25501] CPU: 0 UID: 0 PID: 25501 Comm: syz.0.4490 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1008.692576][T25501] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1008.692582][T25501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1008.692592][T25501] Call Trace: [ 1008.692598][T25501] [ 1008.692605][T25501] dump_stack_lvl+0x100/0x190 [ 1008.692635][T25501] should_fail_ex.cold+0x5/0xa [ 1008.692655][T25501] should_failslab+0xc2/0x120 [ 1008.692674][T25501] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1008.692698][T25501] ? mas_preallocate+0x1105/0x14a0 [ 1008.692717][T25501] mas_preallocate+0x1105/0x14a0 [ 1008.692735][T25501] ? __pfx_mas_preallocate+0x10/0x10 [ 1008.692754][T25501] ? vm_area_alloc+0x1f/0x160 [ 1008.692777][T25501] ? lockdep_init_map_type+0x5c/0x250 [ 1008.692804][T25501] __mmap_region+0x124a/0x2dd0 [ 1008.692830][T25501] ? __pfx___mmap_region+0x10/0x10 [ 1008.692870][T25501] ? find_held_lock+0x2b/0x80 [ 1008.692887][T25501] ? ima_match_policy+0x8c4/0x2350 [ 1008.692905][T25501] ? ima_match_policy+0x8c4/0x2350 [ 1008.692941][T25501] ? process_measurement+0x4c8/0x2350 [ 1008.692987][T25501] mmap_region+0x527/0x620 [ 1008.693003][T25501] ? __pfx_mmap_region+0x10/0x10 [ 1008.693027][T25501] ? cap_mmap_addr+0x4b/0x120 [ 1008.693042][T25501] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1008.693057][T25501] ? security_mmap_addr+0x71/0x1e0 [ 1008.693078][T25501] ? __get_unmapped_area+0x255/0x3e0 [ 1008.693100][T25501] do_mmap+0xc63/0x12f0 [ 1008.693124][T25501] ? __pfx_do_mmap+0x10/0x10 [ 1008.693143][T25501] ? __pfx_down_write_killable+0x10/0x10 [ 1008.693171][T25501] vm_mmap_pgoff+0x29e/0x470 [ 1008.693194][T25501] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1008.693211][T25501] ? __fget_files+0x215/0x3d0 [ 1008.693231][T25501] ? __fget_files+0x21f/0x3d0 [ 1008.693252][T25501] ksys_mmap_pgoff+0x3cb/0x610 [ 1008.693271][T25501] ? __x64_sys_futex+0x358/0x4d0 [ 1008.693288][T25501] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1008.693305][T25501] ? xfd_validate_state+0x129/0x190 [ 1008.693320][T25501] ? ksys_write+0x1ac/0x250 [ 1008.693340][T25501] __x64_sys_mmap+0x125/0x190 [ 1008.693358][T25501] do_syscall_64+0x115/0x840 [ 1008.693378][T25501] ? clear_bhb_loop+0x40/0x90 [ 1008.693396][T25501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.693412][T25501] RIP: 0033:0x7f16e059ce59 [ 1008.693426][T25501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.693440][T25501] RSP: 002b:00007f16e137e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1008.693455][T25501] RAX: ffffffffffffffda RBX: 00007f16e0816090 RCX: 00007f16e059ce59 [ 1008.693466][T25501] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 1008.693475][T25501] RBP: 00007f16e0632d6f R08: 00000000000000dd R09: 0000000000000000 [ 1008.693486][T25501] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1008.693496][T25501] R13: 00007f16e0816128 R14: 00007f16e0816090 R15: 00007ffcd66d6d48 [ 1008.693517][T25501] [ 1009.078664][T25463] Process accounting resumed [ 1009.215577][T25512] FAULT_INJECTION: forcing a failure. [ 1009.215577][T25512] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.228656][T25512] CPU: 0 UID: 0 PID: 25512 Comm: syz.1.4493 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1009.228681][T25512] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1009.228687][T25512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1009.228696][T25512] Call Trace: [ 1009.228702][T25512] [ 1009.228707][T25512] dump_stack_lvl+0x100/0x190 [ 1009.228737][T25512] should_fail_ex.cold+0x5/0xa [ 1009.228757][T25512] should_failslab+0xc2/0x120 [ 1009.228776][T25512] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1009.228797][T25512] ? nd_alloc_stack+0x85/0x110 [ 1009.228821][T25512] nd_alloc_stack+0x85/0x110 [ 1009.228841][T25512] pick_link+0xd4a/0x13c0 [ 1009.228859][T25512] step_into_slowpath+0x9ba/0xf90 [ 1009.228879][T25512] ? __pfx_step_into_slowpath+0x10/0x10 [ 1009.228897][T25512] ? lookup_fast+0x2da/0x600 [ 1009.228911][T25512] ? inode_permission+0x374/0x620 [ 1009.228936][T25512] link_path_walk+0xf28/0x1cc0 [ 1009.228958][T25512] path_lookupat+0x74/0xc40 [ 1009.228983][T25512] filename_lookup+0x202/0x590 [ 1009.229002][T25512] ? __pfx_filename_lookup+0x10/0x10 [ 1009.229033][T25512] ? strncpy_from_user+0x19d/0x2d0 [ 1009.229060][T25512] do_fchmodat+0xea/0x1b0 [ 1009.229081][T25512] ? __pfx_do_fchmodat+0x10/0x10 [ 1009.229106][T25512] __x64_sys_chmod+0x5e/0x80 [ 1009.229127][T25512] do_syscall_64+0x115/0x840 [ 1009.229148][T25512] ? clear_bhb_loop+0x40/0x90 [ 1009.229166][T25512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.229181][T25512] RIP: 0033:0x7f0effd9ce59 [ 1009.229195][T25512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.229209][T25512] RSP: 002b:00007f0f00c34028 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1009.229224][T25512] RAX: ffffffffffffffda RBX: 00007f0f00015fa0 RCX: 00007f0effd9ce59 [ 1009.229234][T25512] RDX: 0000000000000000 RSI: 000000000000f4ba RDI: 0000200000000240 [ 1009.229243][T25512] RBP: 00007f0f00c34090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.229252][T25512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.229261][T25512] R13: 00007f0f00016038 R14: 00007f0f00015fa0 R15: 00007ffe437ef398 [ 1009.229281][T25512] [ 1009.712666][T25519] FAULT_INJECTION: forcing a failure. [ 1009.712666][T25519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.758292][T25519] CPU: 0 UID: 0 PID: 25519 Comm: syz.1.4495 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1009.758319][T25519] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1009.758325][T25519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1009.758335][T25519] Call Trace: [ 1009.758340][T25519] [ 1009.758346][T25519] dump_stack_lvl+0x100/0x190 [ 1009.758375][T25519] should_fail_ex.cold+0x5/0xa [ 1009.758395][T25519] _copy_from_user+0x2e/0xd0 [ 1009.758417][T25519] kstrtouint_from_user+0xd6/0x1d0 [ 1009.758433][T25519] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1009.758448][T25519] ? __lock_acquire+0x4a5/0x2630 [ 1009.758474][T25519] ? lock_acquire+0x1b1/0x370 [ 1009.758503][T25519] proc_fail_nth_write+0x83/0x220 [ 1009.758527][T25519] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1009.758556][T25519] vfs_write+0x2aa/0x1070 [ 1009.758575][T25519] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1009.758600][T25519] ? __pfx_vfs_write+0x10/0x10 [ 1009.758616][T25519] ? __fget_files+0x215/0x3d0 [ 1009.758639][T25519] ? __fget_files+0x21f/0x3d0 [ 1009.758661][T25519] ksys_write+0x12a/0x250 [ 1009.758678][T25519] ? __pfx_ksys_write+0x10/0x10 [ 1009.758694][T25519] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1009.758717][T25519] ? syscall_user_dispatch+0x76/0x130 [ 1009.758735][T25519] do_syscall_64+0x115/0x840 [ 1009.758756][T25519] ? clear_bhb_loop+0x40/0x90 [ 1009.758775][T25519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.758790][T25519] RIP: 0033:0x7f0effd5d68e [ 1009.758803][T25519] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1009.758818][T25519] RSP: 002b:00007f0f00c33fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1009.758832][T25519] RAX: ffffffffffffffda RBX: 00007f0f00c346c0 RCX: 00007f0effd5d68e [ 1009.758843][T25519] RDX: 0000000000000001 RSI: 00007f0f00c340a0 RDI: 0000000000000003 [ 1009.758852][T25519] RBP: 00007f0f00c34090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.758861][T25519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1009.758869][T25519] R13: 00007f0f00016038 R14: 00007f0f00015fa0 R15: 00007ffe437ef398 [ 1009.758889][T25519] [ 1010.467375][T25533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4499'. [ 1010.477931][T22816] Bluetooth: hci5: Malformed LE Event: 0x0b [ 1010.555384][T25533] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4499'. [ 1011.046593][T25555] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 1011.592693][T25561] FAULT_INJECTION: forcing a failure. [ 1011.592693][T25561] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.663383][T25561] CPU: 0 UID: 0 PID: 25561 Comm: syz.3.4507 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1011.663413][T25561] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1011.663419][T25561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1011.663429][T25561] Call Trace: [ 1011.663434][T25561] [ 1011.663441][T25561] dump_stack_lvl+0x100/0x190 [ 1011.663471][T25561] should_fail_ex.cold+0x5/0xa [ 1011.663492][T25561] should_failslab+0xc2/0x120 [ 1011.663510][T25561] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1011.663537][T25561] ? vm_area_alloc+0x1f/0x160 [ 1011.663562][T25561] vm_area_alloc+0x1f/0x160 [ 1011.663582][T25561] __mmap_region+0x104d/0x2dd0 [ 1011.663608][T25561] ? __pfx___mmap_region+0x10/0x10 [ 1011.663648][T25561] ? find_held_lock+0x2b/0x80 [ 1011.663666][T25561] ? ima_match_policy+0x8c4/0x2350 [ 1011.663684][T25561] ? ima_match_policy+0x8c4/0x2350 [ 1011.663728][T25561] ? process_measurement+0x4c8/0x2350 [ 1011.663775][T25561] mmap_region+0x527/0x620 [ 1011.663792][T25561] ? __pfx_mmap_region+0x10/0x10 [ 1011.663809][T25561] ? cap_mmap_addr+0x4b/0x120 [ 1011.663824][T25561] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1011.663839][T25561] ? security_mmap_addr+0x71/0x1e0 [ 1011.663859][T25561] ? __get_unmapped_area+0x255/0x3e0 [ 1011.663879][T25561] do_mmap+0xc63/0x12f0 [ 1011.663900][T25561] ? __pfx_do_mmap+0x10/0x10 [ 1011.663919][T25561] ? __pfx_down_write_killable+0x10/0x10 [ 1011.663946][T25561] vm_mmap_pgoff+0x29e/0x470 [ 1011.663968][T25561] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1011.663986][T25561] ? __fget_files+0x215/0x3d0 [ 1011.664007][T25561] ? __fget_files+0x21f/0x3d0 [ 1011.664028][T25561] ksys_mmap_pgoff+0x3cb/0x610 [ 1011.664047][T25561] ? __x64_sys_futex+0x358/0x4d0 [ 1011.664063][T25561] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1011.664080][T25561] ? xfd_validate_state+0x129/0x190 [ 1011.664095][T25561] ? ksys_write+0x1ac/0x250 [ 1011.664115][T25561] __x64_sys_mmap+0x125/0x190 [ 1011.664133][T25561] do_syscall_64+0x115/0x840 [ 1011.664153][T25561] ? clear_bhb_loop+0x40/0x90 [ 1011.664171][T25561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.664187][T25561] RIP: 0033:0x7f1c4659ce59 [ 1011.664200][T25561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.664215][T25561] RSP: 002b:00007f1c47421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1011.664231][T25561] RAX: ffffffffffffffda RBX: 00007f1c46816090 RCX: 00007f1c4659ce59 [ 1011.664241][T25561] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 1011.664251][T25561] RBP: 00007f1c46632d6f R08: 00000000000000dd R09: 0000000000000000 [ 1011.664260][T25561] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1011.664270][T25561] R13: 00007f1c46816128 R14: 00007f1c46816090 R15: 00007ffc71fb9f68 [ 1011.664290][T25561] [ 1012.969227][T25579] FAULT_INJECTION: forcing a failure. [ 1012.969227][T25579] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.010602][T25573] vhci_hcd: not connected 4 [ 1013.045628][T25579] CPU: 0 UID: 0 PID: 25579 Comm: syz.0.4511 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1013.045656][T25579] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1013.045662][T25579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1013.045672][T25579] Call Trace: [ 1013.045677][T25579] [ 1013.045684][T25579] dump_stack_lvl+0x100/0x190 [ 1013.045714][T25579] should_fail_ex.cold+0x5/0xa [ 1013.045735][T25579] should_failslab+0xc2/0x120 [ 1013.045754][T25579] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1013.045777][T25579] ? vm_area_alloc+0x1f/0x160 [ 1013.045803][T25579] vm_area_alloc+0x1f/0x160 [ 1013.045824][T25579] __mmap_region+0x104d/0x2dd0 [ 1013.045851][T25579] ? __pfx___mmap_region+0x10/0x10 [ 1013.045890][T25579] ? find_held_lock+0x2b/0x80 [ 1013.045909][T25579] ? ima_match_policy+0x8c4/0x2350 [ 1013.045927][T25579] ? ima_match_policy+0x8c4/0x2350 [ 1013.045963][T25579] ? process_measurement+0x4c8/0x2350 [ 1013.046010][T25579] mmap_region+0x527/0x620 [ 1013.046026][T25579] ? __pfx_mmap_region+0x10/0x10 [ 1013.046043][T25579] ? cap_mmap_addr+0x4b/0x120 [ 1013.046057][T25579] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1013.046072][T25579] ? security_mmap_addr+0x71/0x1e0 [ 1013.046091][T25579] ? __get_unmapped_area+0x255/0x3e0 [ 1013.046116][T25579] do_mmap+0xc63/0x12f0 [ 1013.046138][T25579] ? __pfx_do_mmap+0x10/0x10 [ 1013.046156][T25579] ? __pfx_down_write_killable+0x10/0x10 [ 1013.046184][T25579] vm_mmap_pgoff+0x29e/0x470 [ 1013.046207][T25579] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1013.046224][T25579] ? __fget_files+0x215/0x3d0 [ 1013.046246][T25579] ? __fget_files+0x21f/0x3d0 [ 1013.046267][T25579] ksys_mmap_pgoff+0x3cb/0x610 [ 1013.046286][T25579] ? __x64_sys_futex+0x358/0x4d0 [ 1013.046302][T25579] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1013.046320][T25579] ? xfd_validate_state+0x129/0x190 [ 1013.046335][T25579] ? ksys_write+0x1ac/0x250 [ 1013.046355][T25579] __x64_sys_mmap+0x125/0x190 [ 1013.046374][T25579] do_syscall_64+0x115/0x840 [ 1013.046394][T25579] ? clear_bhb_loop+0x40/0x90 [ 1013.046412][T25579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.046428][T25579] RIP: 0033:0x7f16e059ce59 [ 1013.046442][T25579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.046457][T25579] RSP: 002b:00007f16e137e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1013.046472][T25579] RAX: ffffffffffffffda RBX: 00007f16e0816090 RCX: 00007f16e059ce59 [ 1013.046482][T25579] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 1013.046491][T25579] RBP: 00007f16e0632d6f R08: 00000000000000dd R09: 0000000000000000 [ 1013.046500][T25579] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1013.046510][T25579] R13: 00007f16e0816128 R14: 00007f16e0816090 R15: 00007ffcd66d6d48 [ 1013.046539][T25579] [ 1014.047838][T25602] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 1014.459777][T25610] random: crng reseeded on system resumption [ 1014.659039][T25613] nbd: socks must be embedded in a SOCK_ITEM attr [ 1014.707124][T25613] FAULT_INJECTION: forcing a failure. [ 1014.707124][T25613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.721587][T25615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4519'. [ 1014.806276][T25615] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4519'. [ 1014.815506][T25613] CPU: 0 UID: 0 PID: 25613 Comm: syz.3.4518 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1014.815531][T25613] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1014.815538][T25613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1014.815547][T25613] Call Trace: [ 1014.815553][T25613] [ 1014.815559][T25613] dump_stack_lvl+0x100/0x190 [ 1014.815588][T25613] should_fail_ex.cold+0x5/0xa [ 1014.815608][T25613] strncpy_from_user+0x3b/0x2d0 [ 1014.815633][T25613] do_getname+0x78/0x390 [ 1014.815657][T25613] user_path_at+0x26/0x60 [ 1014.815675][T25613] __x64_sys_mount+0x1fb/0x310 [ 1014.815697][T25613] ? __pfx___x64_sys_mount+0x10/0x10 [ 1014.815719][T25613] ? rcu_is_watching+0x12/0xc0 [ 1014.815739][T25613] do_syscall_64+0x115/0x840 [ 1014.815759][T25613] ? clear_bhb_loop+0x40/0x90 [ 1014.815777][T25613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.815793][T25613] RIP: 0033:0x7f1c4659ce59 [ 1014.815806][T25613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.815820][T25613] RSP: 002b:00007f1c47442028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1014.815835][T25613] RAX: ffffffffffffffda RBX: 00007f1c46815fa0 RCX: 00007f1c4659ce59 [ 1014.815845][T25613] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000000 [ 1014.815854][T25613] RBP: 00007f1c47442090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.815863][T25613] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000001 [ 1014.815872][T25613] R13: 00007f1c46816038 R14: 00007f1c46815fa0 R15: 00007ffc71fb9f68 [ 1014.815891][T25613] [ 1015.555654][T25638] FAULT_INJECTION: forcing a failure. [ 1015.555654][T25638] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.860325][T25638] CPU: 0 UID: 0 PID: 25638 Comm: syz.0.4522 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1015.860354][T25638] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1015.860360][T25638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.860370][T25638] Call Trace: [ 1015.860375][T25638] [ 1015.860382][T25638] dump_stack_lvl+0x100/0x190 [ 1015.860412][T25638] should_fail_ex.cold+0x5/0xa [ 1015.860432][T25638] should_failslab+0xc2/0x120 [ 1015.860450][T25638] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1015.860474][T25638] ? vm_area_alloc+0x1f/0x160 [ 1015.860498][T25638] vm_area_alloc+0x1f/0x160 [ 1015.860520][T25638] __mmap_region+0x104d/0x2dd0 [ 1015.860546][T25638] ? __pfx___mmap_region+0x10/0x10 [ 1015.860586][T25638] ? find_held_lock+0x2b/0x80 [ 1015.860603][T25638] ? ima_match_policy+0x8c4/0x2350 [ 1015.860622][T25638] ? ima_match_policy+0x8c4/0x2350 [ 1015.860659][T25638] ? process_measurement+0x4c8/0x2350 [ 1015.860705][T25638] mmap_region+0x527/0x620 [ 1015.860721][T25638] ? __pfx_mmap_region+0x10/0x10 [ 1015.860738][T25638] ? cap_mmap_addr+0x4b/0x120 [ 1015.860752][T25638] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1015.860768][T25638] ? security_mmap_addr+0x71/0x1e0 [ 1015.860788][T25638] ? __get_unmapped_area+0x255/0x3e0 [ 1015.860809][T25638] do_mmap+0xc63/0x12f0 [ 1015.860831][T25638] ? __pfx_do_mmap+0x10/0x10 [ 1015.860849][T25638] ? __pfx_down_write_killable+0x10/0x10 [ 1015.860877][T25638] vm_mmap_pgoff+0x29e/0x470 [ 1015.860900][T25638] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1015.860917][T25638] ? __fget_files+0x215/0x3d0 [ 1015.860938][T25638] ? __fget_files+0x21f/0x3d0 [ 1015.860958][T25638] ksys_mmap_pgoff+0x3cb/0x610 [ 1015.860977][T25638] ? __x64_sys_futex+0x358/0x4d0 [ 1015.860994][T25638] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1015.861011][T25638] ? xfd_validate_state+0x129/0x190 [ 1015.861026][T25638] ? ksys_write+0x1ac/0x250 [ 1015.861047][T25638] __x64_sys_mmap+0x125/0x190 [ 1015.861065][T25638] do_syscall_64+0x115/0x840 [ 1015.861084][T25638] ? clear_bhb_loop+0x40/0x90 [ 1015.861103][T25638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.861118][T25638] RIP: 0033:0x7f16e059ce59 [ 1015.861133][T25638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.861147][T25638] RSP: 002b:00007f16e137e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1015.861162][T25638] RAX: ffffffffffffffda RBX: 00007f16e0816090 RCX: 00007f16e059ce59 [ 1015.861172][T25638] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 1015.861182][T25638] RBP: 00007f16e0632d6f R08: 00000000000000dd R09: 0000000000000000 [ 1015.861191][T25638] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1015.861200][T25638] R13: 00007f16e0816128 R14: 00007f16e0816090 R15: 00007ffcd66d6d48 [ 1015.861220][T25638] [ 1016.505002][T25611] Process accounting paused [ 1020.376298][T25747] netlink: 206 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1020.464278][T25751] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1020.896894][T25763] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 1021.350242][T25748] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 1021.350242][T25748] program syz.0.4535 not setting count and/or reply_len properly [ 1022.416313][T25807] FAULT_INJECTION: forcing a failure. [ 1022.416313][T25807] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.455953][T25806] MTRR 1 not used [ 1022.467660][T25807] CPU: 0 UID: 0 PID: 25807 Comm: syz.3.4550 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1022.467688][T25807] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1022.467694][T25807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1022.467704][T25807] Call Trace: [ 1022.467709][T25807] [ 1022.467715][T25807] dump_stack_lvl+0x100/0x190 [ 1022.467744][T25807] should_fail_ex.cold+0x5/0xa [ 1022.467764][T25807] should_failslab+0xc2/0x120 [ 1022.467782][T25807] __kvmalloc_node_noprof+0xfa/0xa00 [ 1022.467798][T25807] ? alloc_fdtable+0x110/0x2d0 [ 1022.467819][T25807] alloc_fdtable+0x110/0x2d0 [ 1022.467837][T25807] dup_fd+0x995/0xd10 [ 1022.467860][T25807] __x64_sys_close_range+0x405/0x5d0 [ 1022.467882][T25807] ? __pfx___x64_sys_close_range+0x10/0x10 [ 1022.467903][T25807] ? rcu_is_watching+0x12/0xc0 [ 1022.467923][T25807] do_syscall_64+0x115/0x840 [ 1022.467944][T25807] ? clear_bhb_loop+0x40/0x90 [ 1022.467964][T25807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.467980][T25807] RIP: 0033:0x7f1c4659ce59 [ 1022.467994][T25807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.468009][T25807] RSP: 002b:00007f1c47442028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1022.468025][T25807] RAX: ffffffffffffffda RBX: 00007f1c46815fa0 RCX: 00007f1c4659ce59 [ 1022.468035][T25807] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 1022.468044][T25807] RBP: 00007f1c46632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1022.468053][T25807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.468062][T25807] R13: 00007f1c46816038 R14: 00007f1c46815fa0 R15: 00007ffc71fb9f68 [ 1022.468081][T25807] [ 1022.956878][T25799] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1022.963446][T25799] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1022.974395][T25799] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1022.998169][T25799] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1023.031023][T25799] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1023.052532][T25799] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1023.098550][T25799] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1023.128343][T25799] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1023.338013][T25819] FAULT_INJECTION: forcing a failure. [ 1023.338013][T25819] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.377512][T25819] CPU: 0 UID: 0 PID: 25819 Comm: syz.1.4555 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1023.377539][T25819] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1023.377544][T25819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1023.377561][T25819] Call Trace: [ 1023.377566][T25819] [ 1023.377573][T25819] dump_stack_lvl+0x100/0x190 [ 1023.377603][T25819] should_fail_ex.cold+0x5/0xa [ 1023.377622][T25819] should_failslab+0xc2/0x120 [ 1023.377641][T25819] __kvmalloc_node_noprof+0xfa/0xa00 [ 1023.377656][T25819] ? alloc_fdtable+0x110/0x2d0 [ 1023.377677][T25819] alloc_fdtable+0x110/0x2d0 [ 1023.377695][T25819] dup_fd+0x995/0xd10 [ 1023.377718][T25819] __x64_sys_close_range+0x405/0x5d0 [ 1023.377740][T25819] ? __pfx___x64_sys_close_range+0x10/0x10 [ 1023.377762][T25819] ? rcu_is_watching+0x12/0xc0 [ 1023.377782][T25819] do_syscall_64+0x115/0x840 [ 1023.377803][T25819] ? clear_bhb_loop+0x40/0x90 [ 1023.377822][T25819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.377837][T25819] RIP: 0033:0x7f0effd9ce59 [ 1023.377850][T25819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.377864][T25819] RSP: 002b:00007f0f00c34028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1023.377880][T25819] RAX: ffffffffffffffda RBX: 00007f0f00015fa0 RCX: 00007f0effd9ce59 [ 1023.377890][T25819] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 1023.377899][T25819] RBP: 00007f0effe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1023.377908][T25819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.377917][T25819] R13: 00007f0f00016038 R14: 00007f0f00015fa0 R15: 00007ffe437ef398 [ 1023.377936][T25819] [ 1023.556480][T25819] FAULT_INJECTION: forcing a failure. [ 1023.556480][T25819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.569588][T25819] CPU: 0 UID: 0 PID: 25819 Comm: syz.1.4555 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1023.569618][T25819] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1023.569624][T25819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1023.569633][T25819] Call Trace: [ 1023.569639][T25819] [ 1023.569645][T25819] dump_stack_lvl+0x100/0x190 [ 1023.569675][T25819] should_fail_ex.cold+0x5/0xa [ 1023.569696][T25819] _copy_from_iter+0x1f4/0x1690 [ 1023.569722][T25819] ? __pfx__copy_from_iter+0x10/0x10 [ 1023.569747][T25819] ? __pfx___might_resched+0x10/0x10 [ 1023.569763][T25819] ? kfree+0x1dd/0x6c0 [ 1023.569787][T25819] file_tty_write.isra.0+0x45b/0x890 [ 1023.569812][T25819] redirected_tty_write+0xd4/0x120 [ 1023.569832][T25819] vfs_write+0x6ac/0x1070 [ 1023.569851][T25819] ? __pfx_redirected_tty_write+0x10/0x10 [ 1023.569872][T25819] ? __pfx_vfs_write+0x10/0x10 [ 1023.569891][T25819] ? __pfx_do_sys_openat2+0x10/0x10 [ 1023.569926][T25819] ksys_write+0x12a/0x250 [ 1023.569943][T25819] ? __pfx_ksys_write+0x10/0x10 [ 1023.569961][T25819] ? rcu_is_watching+0x12/0xc0 [ 1023.569982][T25819] do_syscall_64+0x115/0x840 [ 1023.570003][T25819] ? clear_bhb_loop+0x40/0x90 [ 1023.570022][T25819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.570037][T25819] RIP: 0033:0x7f0effd9ce59 [ 1023.570050][T25819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.570065][T25819] RSP: 002b:00007f0f00c34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1023.570080][T25819] RAX: ffffffffffffffda RBX: 00007f0f00015fa0 RCX: 00007f0effd9ce59 [ 1023.570090][T25819] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000001 [ 1023.570099][T25819] RBP: 00007f0f00c34090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.570109][T25819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.570117][T25819] R13: 00007f0f00016038 R14: 00007f0f00015fa0 R15: 00007ffe437ef398 [ 1023.570137][T25819] [ 1024.260444][T22816] Bluetooth: hci4: command 0x0406 tx timeout [ 1024.341487][T25832] FAULT_INJECTION: forcing a failure. [ 1024.341487][T25832] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1024.417720][T25832] CPU: 0 UID: 0 PID: 25832 Comm: syz.1.4557 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1024.417747][T25832] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1024.417753][T25832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1024.417762][T25832] Call Trace: [ 1024.417768][T25832] [ 1024.417774][T25832] dump_stack_lvl+0x100/0x190 [ 1024.417804][T25832] should_fail_ex.cold+0x5/0xa [ 1024.417824][T25832] get_futex_key+0x1d2/0x1510 [ 1024.417849][T25832] ? __pfx_get_futex_key+0x10/0x10 [ 1024.417878][T25832] futex_wake+0xea/0x530 [ 1024.417899][T25832] ? rcu_is_watching+0x12/0xc0 [ 1024.417918][T25832] ? __pfx_futex_wake+0x10/0x10 [ 1024.417938][T25832] ? putname+0xb1/0x110 [ 1024.417956][T25832] ? kmem_cache_free+0x127/0x6c0 [ 1024.417981][T25832] do_futex+0x32b/0x350 [ 1024.417997][T25832] ? __pfx_do_futex+0x10/0x10 [ 1024.418011][T25832] ? __pfx_do_sys_openat2+0x10/0x10 [ 1024.418035][T25832] ? __fget_files+0x21f/0x3d0 [ 1024.418055][T25832] __x64_sys_futex+0x34f/0x4d0 [ 1024.418071][T25832] ? __x64_sys_openat+0x12d/0x210 [ 1024.418094][T25832] ? __pfx___x64_sys_futex+0x10/0x10 [ 1024.418113][T25832] ? rcu_is_watching+0x12/0xc0 [ 1024.418132][T25832] do_syscall_64+0x115/0x840 [ 1024.418152][T25832] ? clear_bhb_loop+0x40/0x90 [ 1024.418170][T25832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.418186][T25832] RIP: 0033:0x7f0effd9ce59 [ 1024.418199][T25832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.418214][T25832] RSP: 002b:00007f0f00bf20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1024.418229][T25832] RAX: ffffffffffffffda RBX: 00007f0f00016188 RCX: 00007f0effd9ce59 [ 1024.418240][T25832] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f0001618c [ 1024.418249][T25832] RBP: 00007f0f00016180 R08: 0000000000000001 R09: 0000000000000000 [ 1024.418258][T25832] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 1024.418267][T25832] R13: 00007f0f00016218 R14: 00007ffe437ef2b0 R15: 00007ffe437ef398 [ 1024.418287][T25832] [ 1024.630897][T25835] FAULT_INJECTION: forcing a failure. [ 1024.630897][T25835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.644053][T25835] CPU: 0 UID: 0 PID: 25835 Comm: syz.3.4558 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1024.644079][T25835] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1024.644085][T25835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1024.644094][T25835] Call Trace: [ 1024.644099][T25835] [ 1024.644105][T25835] dump_stack_lvl+0x100/0x190 [ 1024.644137][T25835] should_fail_ex.cold+0x5/0xa [ 1024.644157][T25835] _copy_to_user+0x32/0xd0 [ 1024.644179][T25835] evdev_handle_get_keycode_v2+0x14a/0x170 [ 1024.644196][T25835] ? __pfx_evdev_handle_get_keycode_v2+0x10/0x10 [ 1024.644215][T25835] ? rcu_is_watching+0x12/0xc0 [ 1024.644232][T25835] ? trace_contention_end+0x122/0x170 [ 1024.644251][T25835] evdev_do_ioctl+0xc78/0x1b60 [ 1024.644269][T25835] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 1024.644282][T25835] ? __pfx___mutex_lock+0x10/0x10 [ 1024.644318][T25835] evdev_ioctl+0x16f/0x1a0 [ 1024.644332][T25835] ? __pfx_evdev_ioctl+0x10/0x10 [ 1024.644348][T25835] __x64_sys_ioctl+0x18e/0x210 [ 1024.644365][T25835] do_syscall_64+0x115/0x840 [ 1024.644385][T25835] ? clear_bhb_loop+0x40/0x90 [ 1024.644409][T25835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.644425][T25835] RIP: 0033:0x7f1c4659ce59 [ 1024.644438][T25835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.644453][T25835] RSP: 002b:00007f1c47421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1024.644468][T25835] RAX: ffffffffffffffda RBX: 00007f1c46816090 RCX: 00007f1c4659ce59 [ 1024.644480][T25835] RDX: 00002000000000c0 RSI: 0000000080284504 RDI: 0000000000000004 [ 1024.644490][T25835] RBP: 00007f1c47421090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.644499][T25835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.644508][T25835] R13: 00007f1c46816128 R14: 00007f1c46816090 R15: 00007ffc71fb9f68 [ 1024.644528][T25835] [ 1025.079336][T22816] Bluetooth: hci1: command 0x0406 tx timeout [ 1025.195705][T22816] Bluetooth: hci5: command 0x0406 tx timeout [ 1025.201773][T22816] Bluetooth: hci2: command 0x0406 tx timeout [ 1025.236460][T25843] FAULT_INJECTION: forcing a failure. [ 1025.236460][T25843] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.309769][T25843] CPU: 0 UID: 0 PID: 25843 Comm: syz.2.4559 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1025.309796][T25843] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1025.309802][T25843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1025.309811][T25843] Call Trace: [ 1025.309817][T25843] [ 1025.309824][T25843] dump_stack_lvl+0x100/0x190 [ 1025.309855][T25843] should_fail_ex.cold+0x5/0xa [ 1025.309875][T25843] should_failslab+0xc2/0x120 [ 1025.309894][T25843] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1025.309916][T25843] ? security_inode_alloc+0x3b/0x2c0 [ 1025.309934][T25843] ? lockdep_init_map_type+0x5c/0x250 [ 1025.309960][T25843] security_inode_alloc+0x3b/0x2c0 [ 1025.309978][T25843] inode_init_always_gfp+0xc77/0xfb0 [ 1025.309999][T25843] alloc_inode+0x8e/0x250 [ 1025.310021][T25843] new_inode+0x22/0x1c0 [ 1025.310045][T25843] shmem_get_inode+0x1e3/0xfb0 [ 1025.310067][T25843] ? __pfx_shmem_get_inode+0x10/0x10 [ 1025.310093][T25843] __shmem_file_setup+0x382/0x460 [ 1025.310114][T25843] ? __pfx___shmem_file_setup+0x10/0x10 [ 1025.310136][T25843] ? vm_area_alloc+0x1f/0x160 [ 1025.310159][T25843] shmem_zero_setup+0x96/0x1b0 [ 1025.310176][T25843] __mmap_region+0x2509/0x2dd0 [ 1025.310202][T25843] ? __pfx___mmap_region+0x10/0x10 [ 1025.310228][T25843] ? rcu_is_watching+0x12/0xc0 [ 1025.310246][T25843] ? trace_pelt_se_tp+0x13b/0x190 [ 1025.310277][T25843] ? __lock_acquire+0x4a5/0x2630 [ 1025.310300][T25843] ? do_raw_spin_unlock+0x145/0x1e0 [ 1025.310317][T25843] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1025.310353][T25843] ? rcu_is_watching+0x12/0xc0 [ 1025.310379][T25843] ? rcu_is_watching+0x12/0xc0 [ 1025.310396][T25843] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1025.310416][T25843] ? lockdep_hardirqs_on+0x78/0x100 [ 1025.310468][T25843] mmap_region+0x35d/0x620 [ 1025.310483][T25843] ? rcu_is_watching+0x12/0xc0 [ 1025.310500][T25843] ? __pfx_mmap_region+0x10/0x10 [ 1025.310517][T25843] ? cap_mmap_addr+0x4b/0x120 [ 1025.310531][T25843] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1025.310545][T25843] ? security_mmap_addr+0x71/0x1e0 [ 1025.310564][T25843] ? __get_unmapped_area+0x255/0x3e0 [ 1025.310586][T25843] do_mmap+0xc63/0x12f0 [ 1025.310607][T25843] ? __pfx_do_mmap+0x10/0x10 [ 1025.310625][T25843] ? __pfx_down_write_killable+0x10/0x10 [ 1025.310652][T25843] vm_mmap_pgoff+0x29e/0x470 [ 1025.310674][T25843] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1025.310695][T25843] ? do_futex+0x192/0x350 [ 1025.310710][T25843] ? __pfx_do_futex+0x10/0x10 [ 1025.310729][T25843] ksys_mmap_pgoff+0xe4/0x610 [ 1025.310748][T25843] ? __x64_sys_futex+0x358/0x4d0 [ 1025.310764][T25843] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1025.310781][T25843] ? xfd_validate_state+0x129/0x190 [ 1025.310796][T25843] ? ksys_write+0x1ac/0x250 [ 1025.310817][T25843] __x64_sys_mmap+0x125/0x190 [ 1025.310834][T25843] do_syscall_64+0x115/0x840 [ 1025.310854][T25843] ? clear_bhb_loop+0x40/0x90 [ 1025.310872][T25843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.310887][T25843] RIP: 0033:0x7fabab19ce59 [ 1025.310901][T25843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.310916][T25843] RSP: 002b:00007fabac104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1025.310931][T25843] RAX: ffffffffffffffda RBX: 00007fabab416090 RCX: 00007fabab19ce59 [ 1025.310942][T25843] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1025.310951][T25843] RBP: 00007fabab232d6f R08: fffffffffffffffa R09: 0000000000008000 [ 1025.310961][T25843] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1025.310971][T25843] R13: 00007fabab416128 R14: 00007fabab416090 R15: 00007ffef8198488 [ 1025.310991][T25843] [ 1026.304025][ T9254] Bluetooth: hci4: command 0x0406 tx timeout [ 1026.551990][T25851] can: request_module (can-proto-0) failed. [ 1027.102868][ T9254] Bluetooth: hci1: command 0x0406 tx timeout [ 1027.264940][ T9254] Bluetooth: hci2: command 0x0406 tx timeout [ 1027.270972][T22816] Bluetooth: hci5: command 0x0406 tx timeout [ 1027.915317][T25887] FAULT_INJECTION: forcing a failure. [ 1027.915317][T25887] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.987205][T25887] CPU: 0 UID: 0 PID: 25887 Comm: syz.1.4567 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1027.987235][T25887] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1027.987242][T25887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1027.987251][T25887] Call Trace: [ 1027.987258][T25887] [ 1027.987265][T25887] dump_stack_lvl+0x100/0x190 [ 1027.987295][T25887] should_fail_ex.cold+0x5/0xa [ 1027.987315][T25887] should_failslab+0xc2/0x120 [ 1027.987334][T25887] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1027.987358][T25887] ? __d_alloc+0x34/0xa40 [ 1027.987381][T25887] __d_alloc+0x34/0xa40 [ 1027.987403][T25887] d_alloc_pseudo+0x1c/0xc0 [ 1027.987418][T25887] alloc_file_pseudo+0xcf/0x230 [ 1027.987441][T25887] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1027.987464][T25887] ? alloc_fd+0x476/0x790 [ 1027.987485][T25887] sock_alloc_file+0x50/0x210 [ 1027.987503][T25887] __sys_socket+0x1c0/0x260 [ 1027.987524][T25887] ? __pfx___sys_socket+0x10/0x10 [ 1027.987543][T25887] ? ksys_write+0x1ac/0x250 [ 1027.987566][T25887] __x64_sys_socket+0x72/0xb0 [ 1027.987586][T25887] ? lockdep_hardirqs_on+0x78/0x100 [ 1027.987607][T25887] do_syscall_64+0x115/0x840 [ 1027.987626][T25887] ? clear_bhb_loop+0x40/0x90 [ 1027.987644][T25887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.987659][T25887] RIP: 0033:0x7f0effd9ce59 [ 1027.987673][T25887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.987688][T25887] RSP: 002b:00007f0f00c34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1027.987703][T25887] RAX: ffffffffffffffda RBX: 00007f0f00015fa0 RCX: 00007f0effd9ce59 [ 1027.987713][T25887] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1027.987722][T25887] RBP: 00007f0effe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1027.987732][T25887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1027.987741][T25887] R13: 00007f0f00016038 R14: 00007f0f00015fa0 R15: 00007ffe437ef398 [ 1027.987761][T25887] [ 1028.627791][T25904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4573'. [ 1028.693306][T25904] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4573'. [ 1028.867867][T25916] MTRR 1 not used [ 1029.169721][ T9254] Bluetooth: hci5: Malformed LE Event: 0x0b [ 1029.235704][T25921] can: request_module (can-proto-0) failed. [ 1029.667389][T25935] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1029.919683][T25940] MTRR 1 not used [ 1031.987987][T25989] zswap: compressor not available [ 1032.520329][T25997] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1032.576305][T25981] Process accounting resumed [ 1032.791094][T26003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4591'. [ 1032.868854][T26003] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4591'. [ 1033.077918][T26004] Process accounting paused [ 1033.778765][T26020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4596'. [ 1033.864858][T26021] FAULT_INJECTION: forcing a failure. [ 1033.864858][T26021] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1034.018145][T26021] CPU: 0 UID: 0 PID: 26021 Comm: syz.2.4596 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1034.018172][T26021] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1034.018179][T26021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1034.018192][T26021] Call Trace: [ 1034.018198][T26021] [ 1034.018204][T26021] dump_stack_lvl+0x100/0x190 [ 1034.018237][T26021] should_fail_ex.cold+0x5/0xa [ 1034.018257][T26021] get_futex_key+0x1d2/0x1510 [ 1034.018282][T26021] ? __pfx_get_futex_key+0x10/0x10 [ 1034.018305][T26021] ? do_mmap+0x93f/0x12f0 [ 1034.018324][T26021] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1034.018347][T26021] futex_wake+0xea/0x530 [ 1034.018367][T26021] ? __pfx_futex_wake+0x10/0x10 [ 1034.018392][T26021] do_futex+0x32b/0x350 [ 1034.018409][T26021] ? __pfx_do_futex+0x10/0x10 [ 1034.018423][T26021] ? __pfx_do_sys_openat2+0x10/0x10 [ 1034.018456][T26021] __x64_sys_futex+0x34f/0x4d0 [ 1034.018473][T26021] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1034.018491][T26021] ? __pfx___x64_sys_futex+0x10/0x10 [ 1034.018507][T26021] ? ksys_write+0x1ac/0x250 [ 1034.018527][T26021] ? rcu_is_watching+0x12/0xc0 [ 1034.018547][T26021] do_syscall_64+0x115/0x840 [ 1034.018568][T26021] ? clear_bhb_loop+0x40/0x90 [ 1034.018586][T26021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.018601][T26021] RIP: 0033:0x7fabab19ce59 [ 1034.018616][T26021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.018634][T26021] RSP: 002b:00007fabac1050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1034.018649][T26021] RAX: ffffffffffffffda RBX: 00007fabab416098 RCX: 00007fabab19ce59 [ 1034.018660][T26021] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fabab41609c [ 1034.018670][T26021] RBP: 00007fabab416090 R08: 0000000000000001 R09: 0000000000000000 [ 1034.018680][T26021] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1034.018690][T26021] R13: 00007fabab416128 R14: 00007ffef81983a0 R15: 00007ffef8198488 [ 1034.018710][T26021] [ 1034.021173][T26014] vhci_hcd: not connected 4 [ 1034.594610][T26031] MTRR 1 not used [ 1035.269298][T26049] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1035.531702][T26057] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1035.609623][T26057] nbd: must specify a size in bytes for the device [ 1036.257860][T26070] MTRR 1 not used [ 1036.751930][T26079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4612'. [ 1038.023012][T26099] vhci_hcd: not connected 4 [ 1038.598183][T26118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4619'. [ 1038.688292][T26116] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4618'. [ 1038.699933][T26118] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4619'. [ 1039.170365][T26134] Process accounting paused [ 1041.147325][T26176] netlink: 504 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1042.422659][T26213] FAULT_INJECTION: forcing a failure. [ 1042.422659][T26213] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.480900][T26213] CPU: 0 UID: 0 PID: 26213 Comm: syz.1.4637 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1042.480928][T26213] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1042.480934][T26213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1042.480944][T26213] Call Trace: [ 1042.480950][T26213] [ 1042.480956][T26213] dump_stack_lvl+0x100/0x190 [ 1042.480987][T26213] should_fail_ex.cold+0x5/0xa [ 1042.481010][T26213] should_failslab+0xc2/0x120 [ 1042.481028][T26213] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1042.481052][T26213] ? mas_preallocate+0x1105/0x14a0 [ 1042.481070][T26213] mas_preallocate+0x1105/0x14a0 [ 1042.481088][T26213] ? __pfx_mas_preallocate+0x10/0x10 [ 1042.481106][T26213] ? vm_area_alloc+0x1f/0x160 [ 1042.481130][T26213] ? lockdep_init_map_type+0x5c/0x250 [ 1042.481157][T26213] __mmap_region+0x124a/0x2dd0 [ 1042.481183][T26213] ? __pfx___mmap_region+0x10/0x10 [ 1042.481222][T26213] ? find_held_lock+0x2b/0x80 [ 1042.481240][T26213] ? ima_match_policy+0x8c4/0x2350 [ 1042.481259][T26213] ? ima_match_policy+0x8c4/0x2350 [ 1042.481295][T26213] ? process_measurement+0x4c8/0x2350 [ 1042.481342][T26213] mmap_region+0x527/0x620 [ 1042.481358][T26213] ? __pfx_mmap_region+0x10/0x10 [ 1042.481374][T26213] ? cap_mmap_addr+0x4b/0x120 [ 1042.481388][T26213] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1042.481402][T26213] ? security_mmap_addr+0x71/0x1e0 [ 1042.481421][T26213] ? __get_unmapped_area+0x255/0x3e0 [ 1042.481443][T26213] do_mmap+0xc63/0x12f0 [ 1042.481475][T26213] ? __pfx_do_mmap+0x10/0x10 [ 1042.481494][T26213] ? __pfx_down_write_killable+0x10/0x10 [ 1042.481522][T26213] vm_mmap_pgoff+0x29e/0x470 [ 1042.481544][T26213] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1042.481562][T26213] ? __fget_files+0x215/0x3d0 [ 1042.481583][T26213] ? __fget_files+0x21f/0x3d0 [ 1042.481609][T26213] ksys_mmap_pgoff+0x3cb/0x610 [ 1042.481628][T26213] ? __x64_sys_futex+0x358/0x4d0 [ 1042.481645][T26213] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1042.481664][T26213] ? xfd_validate_state+0x129/0x190 [ 1042.481679][T26213] ? ksys_write+0x1ac/0x250 [ 1042.481701][T26213] __x64_sys_mmap+0x125/0x190 [ 1042.481719][T26213] do_syscall_64+0x115/0x840 [ 1042.481739][T26213] ? clear_bhb_loop+0x40/0x90 [ 1042.481757][T26213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.481773][T26213] RIP: 0033:0x7f0effd9ce59 [ 1042.481786][T26213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.481801][T26213] RSP: 002b:00007f0f00c13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1042.481816][T26213] RAX: ffffffffffffffda RBX: 00007f0f00016090 RCX: 00007f0effd9ce59 [ 1042.481826][T26213] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 1042.481836][T26213] RBP: 00007f0effe32d6f R08: 00000000000000dd R09: 0000000000000000 [ 1042.481846][T26213] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1042.481855][T26213] R13: 00007f0f00016128 R14: 00007f0f00016090 R15: 00007ffe437ef398 [ 1042.481875][T26213] [ 1043.264356][T26219] vhci_hcd vhci_hcd.2: invalid port number 194 [ 1043.303107][T26219] vhci_hcd vhci_hcd.2: invalid port number 194 [ 1044.534008][T26239] MTRR 1 not used [ 1044.650416][T26233] vhci_hcd: not connected 4 [ 1045.500964][T26254] vhci_hcd: not connected 4 [ 1045.557058][T26256] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4646'. [ 1046.018654][T26261] vhci_hcd: not connected 4 [ 1046.921745][T26291] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 1047.121217][T26281] Process accounting resumed [ 1047.286911][T26304] MTRR 1 not used [ 1048.315727][T26322] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4659'. [ 1048.724220][T26337] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 1049.573658][T26352] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4666'. [ 1049.905264][T26364] MTRR 1 not used [ 1050.256186][T26375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4673'. [ 1050.318292][T26377] netlink: 326 bytes leftover after parsing attributes in process `syz.1.4673'. [ 1051.299914][T26389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4684'. [ 1051.940571][T26406] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4679'. [ 1054.384485][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.392262][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.836196][T26483] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1055.901753][T26483] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1057.781076][T26505] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1057.930520][T26507] FAULT_INJECTION: forcing a failure. [ 1057.930520][T26507] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.987613][T26507] CPU: 0 UID: 0 PID: 26507 Comm: syz.2.4699 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1057.987639][T26507] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1057.987645][T26507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1057.987654][T26507] Call Trace: [ 1057.987660][T26507] [ 1057.987666][T26507] dump_stack_lvl+0x100/0x190 [ 1057.987696][T26507] should_fail_ex.cold+0x5/0xa [ 1057.987716][T26507] should_failslab+0xc2/0x120 [ 1057.987734][T26507] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1057.987756][T26507] ? __do_sys_statmount+0x15f/0x2490 [ 1057.987777][T26507] __do_sys_statmount+0x15f/0x2490 [ 1057.987799][T26507] ? fput+0x79/0x100 [ 1057.987820][T26507] ? __pfx___do_sys_statmount+0x10/0x10 [ 1057.987836][T26507] ? ksys_write+0x1ac/0x250 [ 1057.987855][T26507] ? rcu_is_watching+0x12/0xc0 [ 1057.987875][T26507] do_syscall_64+0x115/0x840 [ 1057.987895][T26507] ? clear_bhb_loop+0x40/0x90 [ 1057.987914][T26507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.987929][T26507] RIP: 0033:0x7fabab19ce59 [ 1057.987942][T26507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.987957][T26507] RSP: 002b:00007fabac126028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c9 [ 1057.987972][T26507] RAX: ffffffffffffffda RBX: 00007fabab415fa0 RCX: 00007fabab19ce59 [ 1057.987982][T26507] RDX: 00000000000001fe RSI: 0000000000000000 RDI: 0000000000000000 [ 1057.987991][T26507] RBP: 00007fabac126090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.988001][T26507] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1057.988010][T26507] R13: 00007fabab416038 R14: 00007fabab415fa0 R15: 00007ffef8198488 [ 1057.988035][T26507] [ 1058.491557][T26512] [U] 0 [ 1058.661202][T26508] [U] QUI syzkaller syzkaller login: [ 1059.406605][T26535] netlink: 138 bytes leftover after parsing attributes in process `syz.2.4705'. [ 1059.723974][T26546] FAULT_INJECTION: forcing a failure. [ 1059.723974][T26546] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.853254][T26546] CPU: 0 UID: 0 PID: 26546 Comm: syz.0.4706 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1059.853284][T26546] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1059.853290][T26546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1059.853300][T26546] Call Trace: [ 1059.853306][T26546] [ 1059.853313][T26546] dump_stack_lvl+0x100/0x190 [ 1059.853343][T26546] should_fail_ex.cold+0x5/0xa [ 1059.853364][T26546] should_failslab+0xc2/0x120 [ 1059.853382][T26546] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1059.853405][T26546] ? vm_area_alloc+0x1f/0x160 [ 1059.853430][T26546] vm_area_alloc+0x1f/0x160 [ 1059.853451][T26546] __mmap_region+0x104d/0x2dd0 [ 1059.853477][T26546] ? __pfx___mmap_region+0x10/0x10 [ 1059.853516][T26546] ? find_held_lock+0x2b/0x80 [ 1059.853534][T26546] ? ima_match_policy+0x8c4/0x2350 [ 1059.853552][T26546] ? ima_match_policy+0x8c4/0x2350 [ 1059.853588][T26546] ? process_measurement+0x4c8/0x2350 [ 1059.853635][T26546] mmap_region+0x527/0x620 [ 1059.853655][T26546] ? __pfx_mmap_region+0x10/0x10 [ 1059.853672][T26546] ? cap_mmap_addr+0x4b/0x120 [ 1059.853686][T26546] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1059.853700][T26546] ? security_mmap_addr+0x71/0x1e0 [ 1059.853720][T26546] ? __get_unmapped_area+0x255/0x3e0 [ 1059.853741][T26546] do_mmap+0xc63/0x12f0 [ 1059.853762][T26546] ? __pfx_do_mmap+0x10/0x10 [ 1059.853780][T26546] ? __pfx_down_write_killable+0x10/0x10 [ 1059.853808][T26546] vm_mmap_pgoff+0x29e/0x470 [ 1059.853831][T26546] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1059.853855][T26546] ? __fget_files+0x215/0x3d0 [ 1059.853877][T26546] ? __fget_files+0x21f/0x3d0 [ 1059.853899][T26546] ksys_mmap_pgoff+0x3cb/0x610 [ 1059.853922][T26546] ? __x64_sys_futex+0x358/0x4d0 [ 1059.853938][T26546] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1059.853956][T26546] ? xfd_validate_state+0x129/0x190 [ 1059.853971][T26546] ? ksys_write+0x1ac/0x250 [ 1059.853991][T26546] __x64_sys_mmap+0x125/0x190 [ 1059.854009][T26546] do_syscall_64+0x115/0x840 [ 1059.854029][T26546] ? clear_bhb_loop+0x40/0x90 [ 1059.854047][T26546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.854063][T26546] RIP: 0033:0x7f16e059ce59 [ 1059.854077][T26546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.854092][T26546] RSP: 002b:00007f16e137e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1059.854106][T26546] RAX: ffffffffffffffda RBX: 00007f16e0816090 RCX: 00007f16e059ce59 [ 1059.854117][T26546] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 1059.854127][T26546] RBP: 00007f16e0632d6f R08: 00000000000000dd R09: 0000000000000000 [ 1059.854136][T26546] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1059.854146][T26546] R13: 00007f16e0816128 R14: 00007f16e0816090 R15: 00007ffcd66d6d48 [ 1059.854166][T26546] [ 1061.240585][T26566] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1061.544560][T26571] MTRR 1 not used [ 1063.329463][T26588] Process accounting resumed [ 1063.646563][T26618] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1063.939330][T26620] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 1064.001331][T26578] Process accounting paused [ 1064.052249][T26620] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1064.142163][T26620] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 1064.567286][T22816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1064.579904][T22816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1064.589225][T22816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1064.599112][T22816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1064.608299][T22816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1065.150665][T17235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.329332][T17235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.508961][T17235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.703267][T17235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.234870][T17235] bridge_slave_1: left allmulticast mode [ 1066.271091][T17235] bridge_slave_1: left promiscuous mode [ 1066.299232][T17235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.341156][T17235] bridge_slave_0: left allmulticast mode [ 1066.369563][T17235] bridge_slave_0: left promiscuous mode [ 1066.395010][T17235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.623845][T22816] Bluetooth: hci0: command tx timeout [ 1066.970299][T17235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.031541][T17235] bond0 (unregistering): Released all slaves [ 1067.204012][T17235] ovs_: left promiscuous mode [ 1067.520773][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1067.790470][T26631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.826153][T26631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.863080][T26631] bridge_slave_0: entered allmulticast mode [ 1067.895106][T26631] bridge_slave_0: entered promiscuous mode [ 1067.926050][T26693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4730'. [ 1067.939873][T26631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.963411][T26631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.985110][T26695] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4730'. [ 1068.001536][T26631] bridge_slave_1: entered allmulticast mode [ 1068.023805][T26631] bridge_slave_1: entered promiscuous mode [ 1068.231567][T26631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.331983][T26631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.619868][T26631] team0: Port device team_slave_0 added [ 1068.674735][T26631] team0: Port device team_slave_1 added [ 1068.705311][T22816] Bluetooth: hci0: command tx timeout [ 1068.804125][T26631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.855676][T26631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.966222][T26631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.087202][T26631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.141030][T26631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.230901][T26718] FAULT_INJECTION: forcing a failure. [ 1069.230901][T26718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.261707][T26631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.284136][T26718] CPU: 0 UID: 0 PID: 26718 Comm: syz.2.4733 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1069.284162][T26718] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1069.284169][T26718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1069.284178][T26718] Call Trace: [ 1069.284183][T26718] [ 1069.284189][T26718] dump_stack_lvl+0x100/0x190 [ 1069.284218][T26718] should_fail_ex.cold+0x5/0xa [ 1069.284239][T26718] _copy_from_user+0x2e/0xd0 [ 1069.284261][T26718] evdev_handle_get_keycode_v2+0xb7/0x170 [ 1069.284278][T26718] ? __pfx_evdev_handle_get_keycode_v2+0x10/0x10 [ 1069.284297][T26718] ? rcu_is_watching+0x12/0xc0 [ 1069.284315][T26718] ? trace_contention_end+0x122/0x170 [ 1069.284333][T26718] evdev_do_ioctl+0xc78/0x1b60 [ 1069.284351][T26718] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 1069.284365][T26718] ? __pfx___mutex_lock+0x10/0x10 [ 1069.284401][T26718] evdev_ioctl+0x16f/0x1a0 [ 1069.284415][T26718] ? __pfx_evdev_ioctl+0x10/0x10 [ 1069.284431][T26718] __x64_sys_ioctl+0x18e/0x210 [ 1069.284449][T26718] do_syscall_64+0x115/0x840 [ 1069.284472][T26718] ? clear_bhb_loop+0x40/0x90 [ 1069.284491][T26718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.284507][T26718] RIP: 0033:0x7fabab19ce59 [ 1069.284520][T26718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.284534][T26718] RSP: 002b:00007fabac126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1069.284549][T26718] RAX: ffffffffffffffda RBX: 00007fabab415fa0 RCX: 00007fabab19ce59 [ 1069.284559][T26718] RDX: 0000200000000000 RSI: 0000000080284504 RDI: 0000000000000003 [ 1069.284568][T26718] RBP: 00007fabac126090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.284577][T26718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.284586][T26718] R13: 00007fabab416038 R14: 00007fabab415fa0 R15: 00007ffef8198488 [ 1069.284605][T26718] [ 1069.658275][T26708] Process accounting resumed [ 1069.702538][T26631] hsr_slave_0: entered promiscuous mode [ 1069.708670][T26631] hsr_slave_1: entered promiscuous mode [ 1069.715324][T26631] debugfs: 'hsr0' already exists in 'hsr' [ 1069.721035][T26631] Cannot create hsr debugfs directory [ 1069.912131][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1070.783427][T22816] Bluetooth: hci0: command tx timeout [ 1070.986798][T26740] vhci_hcd: not connected 4 [ 1071.257942][ T30] audit: type=1800 audit(4294967537.469:23): pid=26744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4738" name="trace_pipe" dev="tracefs" ino=1349 res=0 errno=0 [ 1071.353809][T26750] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4739'. [ 1071.388292][T26750] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4739'. [ 1071.791026][T26743] Process accounting resumed [ 1071.866684][ T30] audit: type=1400 audit(4294967538.089:24): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=26757 comm="syz.2.4741" [ 1072.497896][T26631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1072.547047][T26631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1072.584452][T26631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1072.624352][T26631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1072.694810][T26631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1072.760788][T26631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1072.797698][T26631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1072.856992][T26631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1072.864582][T22816] Bluetooth: hci0: command tx timeout [ 1073.164754][T26801] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1073.486250][T26631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.691945][T26631] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.786347][T26815] vhci_hcd: not connected 4 [ 1073.819093][T10051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.826202][T10051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.908348][T10051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.915493][T10051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.555819][T17235] hsr_slave_0: left promiscuous mode [ 1074.595908][T17235] hsr_slave_1: left promiscuous mode [ 1074.605300][T26838] FAULT_INJECTION: forcing a failure. [ 1074.605300][T26838] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.634987][T17235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.674447][T17235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.685274][T26838] CPU: 0 UID: 0 PID: 26838 Comm: syz.1.4751 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1074.685302][T26838] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1074.685308][T26838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1074.685319][T26838] Call Trace: [ 1074.685325][T26838] [ 1074.685331][T26838] dump_stack_lvl+0x100/0x190 [ 1074.685362][T26838] should_fail_ex.cold+0x5/0xa [ 1074.685382][T26838] should_failslab+0xc2/0x120 [ 1074.685401][T26838] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1074.685425][T26838] ? mas_preallocate+0x1105/0x14a0 [ 1074.685444][T26838] mas_preallocate+0x1105/0x14a0 [ 1074.685462][T26838] ? __pfx_mas_preallocate+0x10/0x10 [ 1074.685480][T26838] ? vm_area_alloc+0x1f/0x160 [ 1074.685503][T26838] ? lockdep_init_map_type+0x5c/0x250 [ 1074.685529][T26838] __mmap_region+0x124a/0x2dd0 [ 1074.685555][T26838] ? __pfx___mmap_region+0x10/0x10 [ 1074.685601][T26838] ? find_held_lock+0x2b/0x80 [ 1074.685620][T26838] ? ima_match_policy+0x8c4/0x2350 [ 1074.685640][T26838] ? ima_match_policy+0x8c4/0x2350 [ 1074.685677][T26838] ? process_measurement+0x4c8/0x2350 [ 1074.685724][T26838] mmap_region+0x527/0x620 [ 1074.685740][T26838] ? __pfx_mmap_region+0x10/0x10 [ 1074.685757][T26838] ? cap_mmap_addr+0x4b/0x120 [ 1074.685772][T26838] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1074.685786][T26838] ? security_mmap_addr+0x71/0x1e0 [ 1074.685805][T26838] ? __get_unmapped_area+0x255/0x3e0 [ 1074.685826][T26838] do_mmap+0xc63/0x12f0 [ 1074.685847][T26838] ? __pfx_do_mmap+0x10/0x10 [ 1074.685865][T26838] ? __pfx_down_write_killable+0x10/0x10 [ 1074.685892][T26838] vm_mmap_pgoff+0x29e/0x470 [ 1074.685915][T26838] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1074.685932][T26838] ? __fget_files+0x215/0x3d0 [ 1074.685953][T26838] ? __fget_files+0x21f/0x3d0 [ 1074.685974][T26838] ksys_mmap_pgoff+0x3cb/0x610 [ 1074.685993][T26838] ? __x64_sys_futex+0x358/0x4d0 [ 1074.686009][T26838] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1074.686027][T26838] ? xfd_validate_state+0x129/0x190 [ 1074.686042][T26838] ? ksys_write+0x1ac/0x250 [ 1074.686063][T26838] __x64_sys_mmap+0x125/0x190 [ 1074.686082][T26838] do_syscall_64+0x115/0x840 [ 1074.686101][T26838] ? clear_bhb_loop+0x40/0x90 [ 1074.686120][T26838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.686135][T26838] RIP: 0033:0x7f0effd9ce59 [ 1074.686149][T26838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.686164][T26838] RSP: 002b:00007f0f00c13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1074.686179][T26838] RAX: ffffffffffffffda RBX: 00007f0f00016090 RCX: 00007f0effd9ce59 [ 1074.686189][T26838] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 1074.686198][T26838] RBP: 00007f0effe32d6f R08: 00000000000000dd R09: 0000000000000000 [ 1074.686208][T26838] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1074.686217][T26838] R13: 00007f0f00016128 R14: 00007f0f00016090 R15: 00007ffe437ef398 [ 1074.686237][T26838] [ 1075.223615][T17235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1075.231030][T17235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.243671][T17235] veth1_macvtap: left promiscuous mode [ 1075.249174][T17235] veth0_macvtap: left promiscuous mode [ 1075.254704][T17235] veth1_vlan: left promiscuous mode [ 1075.259942][T17235] veth0_vlan: left promiscuous mode [ 1075.885668][T17235] team0 (unregistering): Port device team_slave_1 removed [ 1075.940672][T17235] team0 (unregistering): Port device team_slave_0 removed [ 1076.267739][T26855] netlink: 338 bytes leftover after parsing attributes in process `syz.0.4754'. [ 1076.555368][T26870] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1078.310320][T26631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.718888][T26631] veth0_vlan: entered promiscuous mode [ 1078.963007][T26631] veth1_vlan: entered promiscuous mode [ 1079.048698][T22816] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1079.155920][T26631] veth0_macvtap: entered promiscuous mode [ 1079.218985][T26631] veth1_macvtap: entered promiscuous mode [ 1079.354467][T26631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.404275][T26631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.591830][T17236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.637286][T26932] random: crng reseeded on system resumption [ 1079.699767][T17236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.737902][T17236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.783940][T17236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.300448][T10051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.345552][T10051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.805977][T17236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.836834][T17236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.051630][T26968] netlink: 'syz.0.4772': attribute type 19 has an invalid length. [ 1081.090487][T26968] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4772'. [ 1081.103055][ T9254] Bluetooth: hci4: command 0x0406 tx timeout [ 1081.212095][T26968] Invalid ELF header magic: != ELF [ 1081.615876][T19270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1081.628773][T19270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1081.639006][T19270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1081.647346][T19270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1081.660306][T19270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1082.190189][T26990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4776'. [ 1082.297731][T26992] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4776'. [ 1083.185041][T19270] Bluetooth: hci4: command 0x0406 tx timeout [ 1083.743372][ T9254] Bluetooth: hci1: command tx timeout [ 1083.875855][ T9263] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.176775][ T9263] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.221800][T26978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.241546][T26978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.259427][T26978] bridge_slave_0: entered allmulticast mode [ 1084.277433][T26978] bridge_slave_0: entered promiscuous mode [ 1084.349387][ T9263] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.384576][T26978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.398334][T26978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.416789][T26978] bridge_slave_1: entered allmulticast mode [ 1084.433417][T26978] bridge_slave_1: entered promiscuous mode [ 1084.491644][ T9263] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.584885][T26978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.614051][T26978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.750934][T26978] team0: Port device team_slave_0 added [ 1084.770236][T26978] team0: Port device team_slave_1 added [ 1084.914063][T26978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.935562][T26978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.051439][T26978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.085946][T27030] sysfs_service_op_store: Client not running :-5: [ 1085.106794][T26978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.141694][T26978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.262604][T26978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.441597][ T9263] bridge_slave_1: left allmulticast mode [ 1085.466633][ T9263] bridge_slave_1: left promiscuous mode [ 1085.508460][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.565142][ T9263] bridge_slave_0: left allmulticast mode [ 1085.600015][ T9263] bridge_slave_0: left promiscuous mode [ 1085.620724][T27042] FAULT_INJECTION: forcing a failure. [ 1085.620724][T27042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.644389][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.706129][T27042] CPU: 0 UID: 0 PID: 27042 Comm: syz.0.4784 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1085.706155][T27042] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1085.706161][T27042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1085.706171][T27042] Call Trace: [ 1085.706176][T27042] [ 1085.706182][T27042] dump_stack_lvl+0x100/0x190 [ 1085.706220][T27042] should_fail_ex.cold+0x5/0xa [ 1085.706240][T27042] _copy_from_user+0x2e/0xd0 [ 1085.706263][T27042] generic_map_update_batch+0x4bb/0x800 [ 1085.706292][T27042] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1085.706320][T27042] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1085.706344][T27042] bpf_map_do_batch+0x66f/0x6d0 [ 1085.706366][T27042] __sys_bpf+0x302/0x4b90 [ 1085.706383][T27042] ? __pfx___sys_bpf+0x10/0x10 [ 1085.706396][T27042] ? proc_fail_nth_write+0x9f/0x220 [ 1085.706420][T27042] ? find_held_lock+0x2b/0x80 [ 1085.706442][T27042] ? find_held_lock+0x2b/0x80 [ 1085.706460][T27042] ? ksys_write+0x190/0x250 [ 1085.706476][T27042] ? ksys_write+0x190/0x250 [ 1085.706496][T27042] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1085.706518][T27042] ? kernel_write+0x603/0x6c0 [ 1085.706534][T27042] ? __fget_files+0x215/0x3d0 [ 1085.706560][T27042] ? fput+0x79/0x100 [ 1085.706580][T27042] ? ksys_write+0x1ac/0x250 [ 1085.706597][T27042] ? __pfx_ksys_write+0x10/0x10 [ 1085.706617][T27042] __x64_sys_bpf+0x7b/0xc0 [ 1085.706635][T27042] ? lockdep_hardirqs_on+0x78/0x100 [ 1085.706656][T27042] do_syscall_64+0x115/0x840 [ 1085.706676][T27042] ? clear_bhb_loop+0x40/0x90 [ 1085.706694][T27042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.706710][T27042] RIP: 0033:0x7f16e059ce59 [ 1085.706723][T27042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.706738][T27042] RSP: 002b:00007f16e139f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1085.706753][T27042] RAX: ffffffffffffffda RBX: 00007f16e0815fa0 RCX: 00007f16e059ce59 [ 1085.706763][T27042] RDX: 0000000000000092 RSI: 0000200000000380 RDI: 000000000000001a [ 1085.706772][T27042] RBP: 00007f16e139f090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.706781][T27042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.706790][T27042] R13: 00007f16e0816038 R14: 00007f16e0815fa0 R15: 00007ffcd66d6d48 [ 1085.706809][T27042] [ 1086.128821][ T9254] Bluetooth: hci1: command tx timeout [ 1086.517060][ T9263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.535408][ T9263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.563848][ T9263] bond0 (unregistering): Released all slaves [ 1086.658059][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1086.676417][ T9263] ovs_: left promiscuous mode [ 1086.834484][T26978] hsr_slave_0: entered promiscuous mode [ 1086.860030][T26978] hsr_slave_1: entered promiscuous mode [ 1086.874200][T26978] debugfs: 'hsr0' already exists in 'hsr' [ 1086.890117][T26978] Cannot create hsr debugfs directory [ 1086.951804][T27072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4791'. [ 1087.053675][T27075] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4791'. [ 1087.113756][T27075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.121176][T27075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.054864][T27081] vhci_hcd: not connected 4 [ 1088.142962][ T9254] Bluetooth: hci1: command tx timeout [ 1088.498324][T27107] netlink: 'syz.0.4795': attribute type 19 has an invalid length. [ 1088.575277][T27107] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4795'. [ 1088.719005][T27108] Invalid ELF header magic: != ELF [ 1089.301313][T27131] MTRR 1 not used [ 1089.757232][T26978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1089.810357][T26978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1089.857748][T26978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1089.922018][T26978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1089.972053][T26978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1090.015251][T26978] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1090.048493][T26978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1090.099282][T26978] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1090.223937][ T9254] Bluetooth: hci1: command tx timeout [ 1091.638310][T26978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.718216][T26978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.767704][T17236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.774809][T17236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.889105][T17236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.896227][T17236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.026253][T27185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4806'. [ 1092.327420][T27195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4809'. [ 1092.408313][T27195] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4809'. [ 1092.985291][ T9263] hsr_slave_0: left promiscuous mode [ 1093.011679][ T9263] hsr_slave_1: left promiscuous mode [ 1093.036658][ T9263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.053835][ T9263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.081087][ T9263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.103047][T27206] input: jJǸ-9%vJ86 as /devices/virtual/input/input89 [ 1093.125784][ T9263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.183809][ T9263] veth1_macvtap: left promiscuous mode [ 1093.213042][ T9263] veth0_macvtap: left promiscuous mode [ 1093.237609][ T9263] veth1_vlan: left promiscuous mode [ 1093.260406][ T9263] veth0_vlan: left promiscuous mode [ 1094.029155][ T9263] team0 (unregistering): Port device team_slave_0 removed [ 1095.119008][T26978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.215852][T27204] Process accounting paused [ 1095.250644][T27211] Process accounting resumed [ 1095.429705][T27219] Console: switching to colour VGA+ 80x25 [ 1095.440669][T26978] veth0_vlan: entered promiscuous mode [ 1095.460775][T26978] veth1_vlan: entered promiscuous mode [ 1095.661890][T26978] veth0_macvtap: entered promiscuous mode [ 1095.717931][T26978] veth1_macvtap: entered promiscuous mode [ 1095.799404][T26978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.863823][T26978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.060111][T10051] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.117799][T10051] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.213532][T10051] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.258047][T10051] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.386690][T27241] FAULT_INJECTION: forcing a failure. [ 1096.386690][T27241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.445243][T27241] CPU: 0 UID: 0 PID: 27241 Comm: syz.0.4818 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1096.445270][T27241] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1096.445276][T27241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1096.445285][T27241] Call Trace: [ 1096.445291][T27241] [ 1096.445297][T27241] dump_stack_lvl+0x100/0x190 [ 1096.445336][T27241] should_fail_ex.cold+0x5/0xa [ 1096.445357][T27241] _copy_from_user+0x2e/0xd0 [ 1096.445379][T27241] usbdev_ioctl+0x19fb/0x3aa0 [ 1096.445405][T27241] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1096.445431][T27241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1096.445454][T27241] ? do_vfs_ioctl+0x226/0x13e0 [ 1096.445477][T27241] ? find_held_lock+0x2b/0x80 [ 1096.445496][T27241] ? __fget_files+0x215/0x3d0 [ 1096.445513][T27241] ? hook_file_ioctl_common+0x149/0x410 [ 1096.445536][T27241] ? __fget_files+0x21f/0x3d0 [ 1096.445556][T27241] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1096.445579][T27241] __x64_sys_ioctl+0x18e/0x210 [ 1096.445596][T27241] do_syscall_64+0x115/0x840 [ 1096.445617][T27241] ? clear_bhb_loop+0x40/0x90 [ 1096.445636][T27241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.445652][T27241] RIP: 0033:0x7f16e059ce59 [ 1096.445667][T27241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.445682][T27241] RSP: 002b:00007f16e139f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1096.445696][T27241] RAX: ffffffffffffffda RBX: 00007f16e0815fa0 RCX: 00007f16e059ce59 [ 1096.445706][T27241] RDX: 0000200000000240 RSI: 00000000c0185500 RDI: 0000000000000003 [ 1096.445716][T27241] RBP: 00007f16e139f090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.445725][T27241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.445734][T27241] R13: 00007f16e0816038 R14: 00007f16e0815fa0 R15: 00007ffcd66d6d48 [ 1096.445753][T27241] [ 1096.850708][T17235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.874322][T17236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.912240][T17235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.921378][T17236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.217619][T27257] binder: 27256:27257 ioctl c0306201 0 returned -14 [ 1099.068532][T27298] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1099.570669][T27309] random: crng reseeded on system resumption [ 1100.704342][T27321] FAULT_INJECTION: forcing a failure. [ 1100.704342][T27321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.789479][T27321] CPU: 0 UID: 0 PID: 27321 Comm: syz.0.4834 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1100.789506][T27321] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1100.789512][T27321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1100.789521][T27321] Call Trace: [ 1100.789527][T27321] [ 1100.789533][T27321] dump_stack_lvl+0x100/0x190 [ 1100.789564][T27321] should_fail_ex.cold+0x5/0xa [ 1100.789584][T27321] _copy_to_user+0x32/0xd0 [ 1100.789606][T27321] simple_read_from_buffer+0xcb/0x170 [ 1100.789626][T27321] proc_fail_nth_read+0x1af/0x230 [ 1100.789650][T27321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1100.789675][T27321] ? rw_verify_area+0xce/0x6d0 [ 1100.789690][T27321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1100.789720][T27321] vfs_read+0x1e4/0xb30 [ 1100.789739][T27321] ? __pfx_vfs_read+0x10/0x10 [ 1100.789755][T27321] ? __fget_files+0x215/0x3d0 [ 1100.789777][T27321] ? __fget_files+0x21f/0x3d0 [ 1100.789800][T27321] ksys_read+0x12a/0x250 [ 1100.789816][T27321] ? __pfx_ksys_read+0x10/0x10 [ 1100.789834][T27321] ? rcu_is_watching+0x12/0xc0 [ 1100.789854][T27321] do_syscall_64+0x115/0x840 [ 1100.789875][T27321] ? clear_bhb_loop+0x40/0x90 [ 1100.789894][T27321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.789909][T27321] RIP: 0033:0x7f16e055d68e [ 1100.789922][T27321] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1100.789937][T27321] RSP: 002b:00007f16e139efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1100.789952][T27321] RAX: ffffffffffffffda RBX: 00007f16e139f6c0 RCX: 00007f16e055d68e [ 1100.789963][T27321] RDX: 000000000000000f RSI: 00007f16e139f0a0 RDI: 0000000000000006 [ 1100.789972][T27321] RBP: 00007f16e139f090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.789981][T27321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.789990][T27321] R13: 00007f16e0816038 R14: 00007f16e0815fa0 R15: 00007ffcd66d6d48 [ 1100.790009][T27321] [ 1101.035347][T27302] kexec: Could not allocate control_code_buffer [ 1101.126918][T27339] FAULT_INJECTION: forcing a failure. [ 1101.126918][T27339] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.139574][T27339] CPU: 0 UID: 0 PID: 27339 Comm: syz.3.4836 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1101.139600][T27339] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1101.139607][T27339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1101.139616][T27339] Call Trace: [ 1101.139622][T27339] [ 1101.139629][T27339] dump_stack_lvl+0x100/0x190 [ 1101.139658][T27339] should_fail_ex.cold+0x5/0xa [ 1101.139686][T27339] should_failslab+0xc2/0x120 [ 1101.139705][T27339] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1101.139728][T27339] ? vm_area_alloc+0x1f/0x160 [ 1101.139753][T27339] vm_area_alloc+0x1f/0x160 [ 1101.139774][T27339] __mmap_region+0x104d/0x2dd0 [ 1101.139800][T27339] ? __pfx___mmap_region+0x10/0x10 [ 1101.139839][T27339] ? find_held_lock+0x2b/0x80 [ 1101.139857][T27339] ? ima_match_policy+0x8c4/0x2350 [ 1101.139876][T27339] ? ima_match_policy+0x8c4/0x2350 [ 1101.139912][T27339] ? process_measurement+0x4c8/0x2350 [ 1101.139958][T27339] mmap_region+0x527/0x620 [ 1101.139974][T27339] ? __pfx_mmap_region+0x10/0x10 [ 1101.139990][T27339] ? cap_mmap_addr+0x4b/0x120 [ 1101.140005][T27339] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1101.140019][T27339] ? security_mmap_addr+0x71/0x1e0 [ 1101.140039][T27339] ? __get_unmapped_area+0x255/0x3e0 [ 1101.140059][T27339] do_mmap+0xc63/0x12f0 [ 1101.140081][T27339] ? __pfx_do_mmap+0x10/0x10 [ 1101.140099][T27339] ? __pfx_down_write_killable+0x10/0x10 [ 1101.140127][T27339] vm_mmap_pgoff+0x29e/0x470 [ 1101.140149][T27339] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1101.140166][T27339] ? __fget_files+0x215/0x3d0 [ 1101.140187][T27339] ? __fget_files+0x21f/0x3d0 [ 1101.140208][T27339] ksys_mmap_pgoff+0x3cb/0x610 [ 1101.140226][T27339] ? __x64_sys_futex+0x358/0x4d0 [ 1101.140243][T27339] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1101.140260][T27339] ? xfd_validate_state+0x129/0x190 [ 1101.140275][T27339] ? ksys_write+0x1ac/0x250 [ 1101.140295][T27339] __x64_sys_mmap+0x125/0x190 [ 1101.140313][T27339] do_syscall_64+0x115/0x840 [ 1101.140333][T27339] ? clear_bhb_loop+0x40/0x90 [ 1101.140351][T27339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.140367][T27339] RIP: 0033:0x7f9f2499ce59 [ 1101.140380][T27339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.140395][T27339] RSP: 002b:00007f9f258f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1101.140413][T27339] RAX: ffffffffffffffda RBX: 00007f9f24c16180 RCX: 00007f9f2499ce59 [ 1101.140423][T27339] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 1101.140433][T27339] RBP: 00007f9f24a32d6f R08: 00000000000000dd R09: 0000000000000000 [ 1101.140442][T27339] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1101.140451][T27339] R13: 00007f9f24c16218 R14: 00007f9f24c16180 R15: 00007ffda9c37568 [ 1101.140471][T27339] [ 1101.601260][T27324] FAULT_INJECTION: forcing a failure. [ 1101.601260][T27324] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.615751][T27324] CPU: 0 UID: 0 PID: 27324 Comm: syz.2.4835 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1101.615776][T27324] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1101.615783][T27324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1101.615792][T27324] Call Trace: [ 1101.615797][T27324] [ 1101.615803][T27324] dump_stack_lvl+0x100/0x190 [ 1101.615834][T27324] should_fail_ex.cold+0x5/0xa [ 1101.615853][T27324] should_failslab+0xc2/0x120 [ 1101.615872][T27324] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1101.615896][T27324] ? __proc_create+0x2cb/0x8c0 [ 1101.615919][T27324] __proc_create+0x2cb/0x8c0 [ 1101.615939][T27324] ? __pfx___proc_create+0x10/0x10 [ 1101.615960][T27324] ? _raw_write_unlock+0x28/0x50 [ 1101.615980][T27324] ? proc_register+0x559/0x8a0 [ 1101.616002][T27324] proc_create_reg+0x75/0x170 [ 1101.616022][T27324] ? __pfx_can_stats_proc_show+0x10/0x10 [ 1101.616043][T27324] proc_create_net_single+0x86/0x180 [ 1101.616063][T27324] ? __pfx_proc_create_net_single+0x10/0x10 [ 1101.616085][T27324] ? round_jiffies+0x10a/0x160 [ 1101.616110][T27324] can_init_proc+0xac/0x4b0 [ 1101.616130][T27324] can_pernet_init+0x1e4/0x370 [ 1101.616150][T27324] ? __pfx_can_pernet_init+0x10/0x10 [ 1101.616169][T27324] ops_init+0x1e2/0x5f0 [ 1101.616188][T27324] setup_net+0x118/0x3a0 [ 1101.616204][T27324] ? __pfx_setup_net+0x10/0x10 [ 1101.616220][T27324] ? mutex_init_lockdep+0xf1/0x120 [ 1101.616239][T27324] copy_net_ns+0x46f/0x7c0 [ 1101.616259][T27324] create_new_namespaces+0x3ea/0xac0 [ 1101.616282][T27324] unshare_nsproxy_namespaces+0xf2/0x220 [ 1101.616303][T27324] ksys_unshare+0x438/0xab0 [ 1101.616325][T27324] ? __pfx_ksys_unshare+0x10/0x10 [ 1101.616345][T27324] ? xfd_validate_state+0x129/0x190 [ 1101.616366][T27324] __x64_sys_unshare+0x31/0x40 [ 1101.616387][T27324] do_syscall_64+0x115/0x840 [ 1101.616407][T27324] ? clear_bhb_loop+0x40/0x90 [ 1101.616426][T27324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.616441][T27324] RIP: 0033:0x7fabab19ce59 [ 1101.616455][T27324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.616469][T27324] RSP: 002b:00007fabac105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1101.616484][T27324] RAX: ffffffffffffffda RBX: 00007fabab416090 RCX: 00007fabab19ce59 [ 1101.616494][T27324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1101.616503][T27324] RBP: 00007fabab232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1101.616512][T27324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.616521][T27324] R13: 00007fabab416128 R14: 00007fabab416090 R15: 00007ffef8198488 [ 1101.616540][T27324] [ 1102.084531][T27344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4839'. [ 1102.178135][T27345] netlink: 326 bytes leftover after parsing attributes in process `syz.1.4839'. [ 1102.251493][T27345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.259047][T27345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.551229][T27351] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1102.746307][T27356] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1102.879321][T27360] FAULT_INJECTION: forcing a failure. [ 1102.879321][T27360] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.968167][T27360] CPU: 0 UID: 0 PID: 27360 Comm: syz.2.4844 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1102.968196][T27360] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1102.968202][T27360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1102.968212][T27360] Call Trace: [ 1102.968217][T27360] [ 1102.968224][T27360] dump_stack_lvl+0x100/0x190 [ 1102.968254][T27360] should_fail_ex.cold+0x5/0xa [ 1102.968274][T27360] should_failslab+0xc2/0x120 [ 1102.968292][T27360] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1102.968315][T27360] ? mas_preallocate+0x1105/0x14a0 [ 1102.968339][T27360] mas_preallocate+0x1105/0x14a0 [ 1102.968357][T27360] ? __pfx_mas_preallocate+0x10/0x10 [ 1102.968377][T27360] ? vm_area_alloc+0x1f/0x160 [ 1102.968400][T27360] ? lockdep_init_map_type+0x5c/0x250 [ 1102.968426][T27360] __mmap_region+0x124a/0x2dd0 [ 1102.968453][T27360] ? __pfx___mmap_region+0x10/0x10 [ 1102.968502][T27360] ? find_held_lock+0x2b/0x80 [ 1102.968520][T27360] ? ima_match_policy+0x8c4/0x2350 [ 1102.968540][T27360] ? ima_match_policy+0x8c4/0x2350 [ 1102.968575][T27360] ? process_measurement+0x4c8/0x2350 [ 1102.968622][T27360] mmap_region+0x527/0x620 [ 1102.968639][T27360] ? __pfx_mmap_region+0x10/0x10 [ 1102.968655][T27360] ? cap_mmap_addr+0x4b/0x120 [ 1102.968670][T27360] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1102.968684][T27360] ? security_mmap_addr+0x71/0x1e0 [ 1102.968703][T27360] ? __get_unmapped_area+0x255/0x3e0 [ 1102.968724][T27360] do_mmap+0xc63/0x12f0 [ 1102.968746][T27360] ? __pfx_do_mmap+0x10/0x10 [ 1102.968764][T27360] ? __pfx_down_write_killable+0x10/0x10 [ 1102.968791][T27360] vm_mmap_pgoff+0x29e/0x470 [ 1102.968814][T27360] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1102.968831][T27360] ? __fget_files+0x215/0x3d0 [ 1102.968852][T27360] ? __fget_files+0x21f/0x3d0 [ 1102.968872][T27360] ksys_mmap_pgoff+0x3cb/0x610 [ 1102.968891][T27360] ? __x64_sys_futex+0x358/0x4d0 [ 1102.968907][T27360] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1102.968925][T27360] ? xfd_validate_state+0x129/0x190 [ 1102.968939][T27360] ? ksys_write+0x1ac/0x250 [ 1102.968960][T27360] __x64_sys_mmap+0x125/0x190 [ 1102.968978][T27360] do_syscall_64+0x115/0x840 [ 1102.968997][T27360] ? clear_bhb_loop+0x40/0x90 [ 1102.969015][T27360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.969031][T27360] RIP: 0033:0x7fabab19ce59 [ 1102.969045][T27360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.969059][T27360] RSP: 002b:00007fabac105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1102.969074][T27360] RAX: ffffffffffffffda RBX: 00007fabab416090 RCX: 00007fabab19ce59 [ 1102.969085][T27360] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 1102.969094][T27360] RBP: 00007fabab232d6f R08: 00000000000000dd R09: 0000000000000000 [ 1102.969103][T27360] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1102.969112][T27360] R13: 00007fabab416128 R14: 00007fabab416090 R15: 00007ffef8198488 [ 1102.969131][T27360] [ 1104.228106][T27365] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1104.234503][T27365] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1104.268142][T27365] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1104.287927][T27365] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1104.308917][T27378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4849'. [ 1104.331816][T27365] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1104.404765][T27378] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4849'. [ 1104.415853][T27365] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1104.450916][T27365] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1104.500322][T27365] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1105.225038][T27404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4854'. [ 1105.822328][ T9254] Bluetooth: hci2: command 0x0406 tx timeout [ 1106.068720][T27424] vhci_hcd: not connected 4 [ 1106.302293][ T9254] Bluetooth: hci0: command 0x0c1a tx timeout [ 1106.308346][T19270] Bluetooth: hci5: command 0x0406 tx timeout [ 1106.462511][ T9254] Bluetooth: hci1: command 0x0c1a tx timeout [ 1106.582009][T27438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4859'. [ 1106.671816][T27438] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4859'. [ 1106.819539][T27441] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1106.909059][T27441] ovs_: entered promiscuous mode [ 1106.945251][T27443] FAULT_INJECTION: forcing a failure. [ 1106.945251][T27443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.008441][T27443] CPU: 0 UID: 0 PID: 27443 Comm: syz.1.4860 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1107.008470][T27443] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1107.008476][T27443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1107.008485][T27443] Call Trace: [ 1107.008491][T27443] [ 1107.008497][T27443] dump_stack_lvl+0x100/0x190 [ 1107.008527][T27443] should_fail_ex.cold+0x5/0xa [ 1107.008546][T27443] _copy_from_user+0x2e/0xd0 [ 1107.008568][T27443] copy_msghdr_from_user+0x9f/0x4f0 [ 1107.008590][T27443] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1107.008620][T27443] ___sys_sendmsg+0x106/0x1e0 [ 1107.008641][T27443] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.008683][T27443] __sys_sendmsg+0x170/0x220 [ 1107.008699][T27443] ? __pfx___sys_sendmsg+0x10/0x10 [ 1107.008723][T27443] ? rcu_is_watching+0x12/0xc0 [ 1107.008743][T27443] do_syscall_64+0x115/0x840 [ 1107.008763][T27443] ? clear_bhb_loop+0x40/0x90 [ 1107.008781][T27443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.008796][T27443] RIP: 0033:0x7fd3dc39ce59 [ 1107.008809][T27443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.008824][T27443] RSP: 002b:00007fd3dd316028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.008839][T27443] RAX: ffffffffffffffda RBX: 00007fd3dc616090 RCX: 00007fd3dc39ce59 [ 1107.008849][T27443] RDX: 0000000020008004 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1107.008859][T27443] RBP: 00007fd3dd316090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.008868][T27443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.008877][T27443] R13: 00007fd3dc616128 R14: 00007fd3dc616090 R15: 00007ffc5bed8eb8 [ 1107.008896][T27443] [ 1107.437605][T27443] futex_wake_op: syz.1.4860 tries to shift op by -1; fix this program [ 1108.051366][T19270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1108.067458][T19270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1108.075449][T19270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1108.084839][T19270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1108.095710][T19270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1108.382801][T19270] Bluetooth: hci0: command 0x0c1a tx timeout [ 1108.547688][T19270] Bluetooth: hci1: command 0x0c1a tx timeout [ 1108.574204][T24453] ------------[ cut here ]------------ [ 1108.579682][T24453] ODEBUG: free active (active state 0) object: ffff888029c99438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 1108.592401][T24453] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.2.4274/24453 [ 1108.603095][T24453] Modules linked in: [ 1108.607342][T24453] CPU: 0 UID: 0 PID: 24453 Comm: syz.2.4274 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1108.618335][T24453] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1108.624016][T24453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1108.635666][T24453] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1108.641474][T24453] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 72 fa e1 0b 41 56 48 8b 14 dd 40 55 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 4c 76 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1108.661446][T24453] RSP: 0018:ffffc90004b976f8 EFLAGS: 00010246 [ 1108.668124][T24453] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1108.676106][T24453] RDX: ffffffff8c1c5480 RSI: ffffffff8c1c50a0 RDI: ffffffff90e1e5e0 [ 1108.684100][T24453] RBP: 0000000000000001 R08: ffff888029c99438 R09: ffffffff8bb2c700 [ 1108.692055][T24453] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c50a0 [ 1108.700037][T24453] R13: ffffffff8bb2c740 R14: ffffffff8a910920 R15: ffffc90004b977f8 [ 1108.710043][T24453] FS: 0000000000000000(0000) GS:ffff88812438d000(0000) knlGS:0000000000000000 [ 1108.723595][T24453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.730563][T24453] CR2: 00007ffb4b28d9c0 CR3: 000000007f192000 CR4: 00000000003526f0 [ 1108.738694][T24453] Call Trace: [ 1108.741955][T24453] [ 1108.744886][T24453] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1108.750335][T24453] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1108.756167][T24453] debug_check_no_obj_freed+0x4da/0x630 [ 1108.761711][T24453] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1108.767787][T24453] ? __page_table_check_zero+0x333/0x410 [ 1108.773421][T24453] ? __page_table_check_zero+0x338/0x410 [ 1108.779040][T24453] __free_frozen_pages+0x3fc/0x10a0 [ 1108.785959][T24453] hci_release_dev+0x4ef/0x630 [ 1108.790721][T24453] ? __pfx_hci_release_dev+0x10/0x10 [ 1108.797418][T24453] ? device_release+0x97/0x270 [ 1108.802177][T24453] ? rcu_is_watching+0x12/0xc0 [ 1108.807471][T24453] ? device_release+0x97/0x270 [ 1108.812553][T24453] bt_host_release+0x6a/0xb0 [ 1108.817134][T24453] ? __pfx_bt_host_release+0x10/0x10 [ 1108.822434][T24453] device_release+0xd2/0x270 [ 1108.827012][T24453] kobject_put+0x1f7/0x640 [ 1108.831772][T24453] put_device+0x1f/0x30 [ 1108.836123][T24453] vhci_release+0x185/0x230 [ 1108.840615][T24453] ? __pfx_vhci_release+0x10/0x10 [ 1108.845656][T24453] __fput+0x3ff/0xb50 [ 1108.849632][T24453] task_work_run+0x150/0x240 [ 1108.854219][T24453] ? __pfx_task_work_run+0x10/0x10 [ 1108.859308][T24453] ? free_uts_ns+0x16e/0x330 [ 1108.865317][T24453] do_exit+0x951/0x2af0 [ 1108.869473][T24453] ? __pfx_do_exit+0x10/0x10 [ 1108.877556][T24453] ? cgroup_update_frozen_flag+0x107/0x210 [ 1108.883396][T24453] ? find_held_lock+0x2b/0x80 [ 1108.888062][T24453] ? get_signal+0x1872/0x2210 [ 1108.892765][T24453] do_group_exit+0xd5/0x2a0 [ 1108.897261][T24453] get_signal+0x20ff/0x2210 [ 1108.901753][T24453] ? __pfx_get_signal+0x10/0x10 [ 1108.906614][T24453] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1108.912585][T24453] arch_do_signal_or_restart+0x91/0x7a0 [ 1108.918122][T24453] ? get_timespec64+0x136/0x1b0 [ 1108.923277][T24453] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1108.929424][T24453] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 1108.935573][T24453] ? rcu_is_watching+0x12/0xc0 [ 1108.940328][T24453] exit_to_user_mode_loop+0x98/0x670 [ 1108.946491][T24453] ? rcu_is_watching+0x12/0xc0 [ 1108.952814][T24453] do_syscall_64+0x652/0x840 [ 1108.957405][T24453] ? clear_bhb_loop+0x40/0x90 [ 1108.962066][T24453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.968047][T24453] RIP: 0033:0x7fabab15d68e [ 1108.972468][T24453] Code: Unable to access opcode bytes at 0x7fabab15d664. [ 1108.979461][T24453] RSP: 002b:00007fabac125f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1108.987883][T24453] RAX: fffffffffffffdfc RBX: 00007fabac1266c0 RCX: 00007fabab15d68e [ 1108.995874][T24453] RDX: 00007fabac125fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1109.003860][T24453] RBP: 00007fabab232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1109.012334][T24453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.020290][T24453] R13: 00007fabab416038 R14: 00007fabab415fa0 R15: 00007ffef8198488 [ 1109.029456][T24453] [ 1109.034487][T24453] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1109.041755][T24453] CPU: 0 UID: 0 PID: 24453 Comm: syz.2.4274 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1109.052670][T24453] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1109.057838][T24453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1109.067877][T24453] Call Trace: [ 1109.071134][T24453] [ 1109.074047][T24453] dump_stack_lvl+0x100/0x190 [ 1109.078714][T24453] vpanic+0x552/0x970 [ 1109.082677][T24453] ? __pfx_vpanic+0x10/0x10 [ 1109.087162][T24453] panic+0xd1/0xe0 [ 1109.090863][T24453] ? __pfx_panic+0x10/0x10 [ 1109.095262][T24453] ? check_panic_on_warn+0x1f/0x90 [ 1109.100363][T24453] check_panic_on_warn.cold+0x19/0x34 [ 1109.105714][T24453] ? debug_print_object+0x18e/0x2a0 [ 1109.110894][T24453] __warn.cold+0x191/0x328 [ 1109.115290][T24453] __report_bug+0x296/0x3d0 [ 1109.119775][T24453] ? debug_print_object+0x18e/0x2a0 [ 1109.124954][T24453] ? __pfx___report_bug+0x10/0x10 [ 1109.129966][T24453] ? unwind_next_frame+0x3c8/0x2090 [ 1109.135152][T24453] report_bug_entry+0xe1/0x290 [ 1109.139900][T24453] ? debug_print_object+0x19b/0x2a0 [ 1109.145080][T24453] handle_bug+0x1cd/0x2a0 [ 1109.149396][T24453] exc_invalid_op+0x17/0x50 [ 1109.153879][T24453] asm_exc_invalid_op+0x1a/0x20 [ 1109.158709][T24453] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1109.164498][T24453] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 72 fa e1 0b 41 56 48 8b 14 dd 40 55 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 4c 76 d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1109.184082][T24453] RSP: 0018:ffffc90004b976f8 EFLAGS: 00010246 [ 1109.190131][T24453] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1109.198079][T24453] RDX: ffffffff8c1c5480 RSI: ffffffff8c1c50a0 RDI: ffffffff90e1e5e0 [ 1109.206028][T24453] RBP: 0000000000000001 R08: ffff888029c99438 R09: ffffffff8bb2c700 [ 1109.213976][T24453] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c50a0 [ 1109.221924][T24453] R13: ffffffff8bb2c740 R14: ffffffff8a910920 R15: ffffc90004b977f8 [ 1109.229873][T24453] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1109.235328][T24453] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1109.240767][T24453] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1109.246557][T24453] debug_check_no_obj_freed+0x4da/0x630 [ 1109.252093][T24453] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1109.258157][T24453] ? __page_table_check_zero+0x333/0x410 [ 1109.263790][T24453] ? __page_table_check_zero+0x338/0x410 [ 1109.269413][T24453] __free_frozen_pages+0x3fc/0x10a0 [ 1109.274605][T24453] hci_release_dev+0x4ef/0x630 [ 1109.279353][T24453] ? __pfx_hci_release_dev+0x10/0x10 [ 1109.284622][T24453] ? device_release+0x97/0x270 [ 1109.289369][T24453] ? rcu_is_watching+0x12/0xc0 [ 1109.294117][T24453] ? device_release+0x97/0x270 [ 1109.298878][T24453] bt_host_release+0x6a/0xb0 [ 1109.303467][T24453] ? __pfx_bt_host_release+0x10/0x10 [ 1109.308740][T24453] device_release+0xd2/0x270 [ 1109.313328][T24453] kobject_put+0x1f7/0x640 [ 1109.317745][T24453] put_device+0x1f/0x30 [ 1109.321891][T24453] vhci_release+0x185/0x230 [ 1109.326380][T24453] ? __pfx_vhci_release+0x10/0x10 [ 1109.331387][T24453] __fput+0x3ff/0xb50 [ 1109.335360][T24453] task_work_run+0x150/0x240 [ 1109.339934][T24453] ? __pfx_task_work_run+0x10/0x10 [ 1109.345032][T24453] ? free_uts_ns+0x16e/0x330 [ 1109.349619][T24453] do_exit+0x951/0x2af0 [ 1109.353771][T24453] ? __pfx_do_exit+0x10/0x10 [ 1109.358353][T24453] ? cgroup_update_frozen_flag+0x107/0x210 [ 1109.364146][T24453] ? find_held_lock+0x2b/0x80 [ 1109.368819][T24453] ? get_signal+0x1872/0x2210 [ 1109.373483][T24453] do_group_exit+0xd5/0x2a0 [ 1109.377976][T24453] get_signal+0x20ff/0x2210 [ 1109.382471][T24453] ? __pfx_get_signal+0x10/0x10 [ 1109.387319][T24453] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1109.392782][T24453] arch_do_signal_or_restart+0x91/0x7a0 [ 1109.398332][T24453] ? get_timespec64+0x136/0x1b0 [ 1109.403183][T24453] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1109.409337][T24453] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 1109.415129][T24453] ? rcu_is_watching+0x12/0xc0 [ 1109.419877][T24453] exit_to_user_mode_loop+0x98/0x670 [ 1109.425151][T24453] ? rcu_is_watching+0x12/0xc0 [ 1109.429898][T24453] do_syscall_64+0x652/0x840 [ 1109.434472][T24453] ? clear_bhb_loop+0x40/0x90 [ 1109.439134][T24453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.445008][T24453] RIP: 0033:0x7fabab15d68e [ 1109.449401][T24453] Code: Unable to access opcode bytes at 0x7fabab15d664. [ 1109.456396][T24453] RSP: 002b:00007fabac125f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1109.464788][T24453] RAX: fffffffffffffdfc RBX: 00007fabac1266c0 RCX: 00007fabab15d68e [ 1109.472746][T24453] RDX: 00007fabac125fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1109.480698][T24453] RBP: 00007fabab232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1109.488647][T24453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.496596][T24453] R13: 00007fabab416038 R14: 00007fabab415fa0 R15: 00007ffef8198488 [ 1109.504557][T24453] [ 1109.507612][T24453] Kernel Offset: disabled [ 1109.511923][T24453] Rebooting in 86400 seconds..