last executing test programs: 5.119813027s ago: executing program 3 (id=5905): r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0) lseek$auto(r0, 0x9, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/7/affinity_hint\x00', 0x28000, 0x0) dup3$auto(r2, r2, 0x400) pread64$auto(r2, 0x0, 0x800003, 0x270) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_wakeup_irq\x00', 0x8000, 0x0) socket(0x2, 0x2, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fcntl$auto(0xff80000000000000, 0x409, 0x13) mmap$auto(0x7ffffdfde000, 0x2020006, 0x9, 0x12, 0x8000000000000000, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4109, 0x100d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x220448c0}, 0x4043) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="24ef5000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf2502000000060020000008000008002300e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008880) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.031862495s ago: executing program 0 (id=5906): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x400000000000000, 0x884}, 0x8020) 4.693528972s ago: executing program 3 (id=5908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r2, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000380), r3) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080029bd7000fddbdf25004b617e9f7663616e300000002c1ad6d062d1946a804c9a5878d0d5e7f883ceb52453b2ea8de24433a7fc6f6f4bcc98675e2a52a782c4042c7ceafadfa18afa850f89cb5f24aff95e16c86b237a912ee76a515a05"], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x10) bind$auto(r3, &(0x7f0000000000)=@can={0x1d, r5}, 0x6a) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xeb4}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r5}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x800}]}, 0x2c}}, 0x40) 4.243813562s ago: executing program 3 (id=5911): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x4, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pwritev$auto(0xffffffffffffffff, 0x0, 0x4, 0x3, 0x9) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x400000040000, 0x200006, 0x80000000000000, 0x40eb1, 0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) unshare$auto(0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb1, 0x401, 0x8000) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002cbd7000df250a0a08000a"], 0x10e}}, 0x10004010) 3.83609268s ago: executing program 0 (id=5912): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x4, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pwritev$auto(0xffffffffffffffff, 0x0, 0x4, 0x3, 0x9) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x400000040000, 0x200006, 0x80000000000000, 0x40eb1, 0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) unshare$auto(0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb1, 0x401, 0x8000) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002cbd7000df250a0a08000a"], 0x10e}}, 0x10004010) 3.722687338s ago: executing program 3 (id=5913): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x200100000eb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0xffffffff, 0x2, 0x7a3f, 0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r2, 0x720, 0x0) r3 = socket(0xa, 0xa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) 3.485141259s ago: executing program 2 (id=5914): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000003dc0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10a}]}]}, 0x20}, 0x1, 0x0, 0x3000000000000, 0x20000840}, 0x80) 3.231927844s ago: executing program 2 (id=5915): socket(0x10, 0x2, 0x9) r0 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x4028041) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) bpf$auto(0x5, &(0x7f0000001540)=@bpf_attr_3={0x9, 0x9, 0x10000, 0x1, 0x9, 0x80000000, 0x3, 0x4, 0x10000, "06dbde4e070000001b0000000800", 0x0, 0x6, 0x2, 0x2, 0x0, 0x81, 0x4eaf, 0x1, 0x2, 0x5, @attach_prog_fd, 0x3, 0x1ff, 0x100000002, 0x101, 0xe4, 0x6}, 0x1000) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/tracing/trace_marker_raw\x00', 0x68000, 0x0) io_uring_setup$auto(0x59, 0x0) socket(0x10, 0x3, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/fcloop/ctl/del_local_port\x00', 0x80001, 0x0) r1 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty37\x00', 0x800, 0x0) socket(0x2d, 0x2, 0x0) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) fsopen$auto(&(0x7f00000001c0)='nfsd\x00', 0x1) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) ioctl$auto(r2, 0x560a, r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq/13/actions\x00', 0x1, 0x0) shmctl$auto_SHM_UNLOCK(0x0, 0xc, &(0x7f0000001140)={{0x8, 0xee01, 0xee00, 0x6, 0x850, 0x2, 0x46}, 0x10000, 0x4, 0x37cf7b20, 0x400, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x980f, 0x0, &(0x7f0000000080)="a9c2f0c481b38f16dd4e585546a8c47ea02477a515e001842385e37c6a98f6d4c0483a36f29246f5917a9cb2ddfa89b17203c749fd3024029b8acd70709f924eddbbb40c54f1964603cc284a73907f8369463511e8882c504848cc15f607b94250109516bfc8f0c2a5780f62f7f2c8bd8524d0657ad45103f74985f558061d8cfbf3c600c2ce9418bf6b193d4c84082c1cab26b98d6cedb00350bcadcec1757fa721ba0d25dd31339c2da4", &(0x7f0000000140)="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"}) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)='1', 0x1) 2.955624816s ago: executing program 0 (id=5916): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80282, 0x0) 2.629240985s ago: executing program 2 (id=5918): socket(0x11, 0x6, 0x9) mmap$auto(0x0, 0x2000f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0x1b, 0xffffffffffffffff, 0x6) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x103, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xb, 0x6, 0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20002, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)=0x80) listen$auto(r0, 0x1) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x200060, 0x0, 0xff7ffffffffffe1c, 0x7fffffff, 0x4, 0xfffffffffffffffb, 0x103, 0x2000000000001e7, 0x11000000000, 0x4, 0x0, 0xc}) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000214af"], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) socket(0xa, 0x801, 0x84) getpid() close_range$auto(0x2, 0x8, 0x0) 2.626367951s ago: executing program 0 (id=5919): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) close_range$auto(0x2, 0x8, 0x0) 2.302944028s ago: executing program 2 (id=5920): r0 = socket(0x10, 0x2, 0x0) unshare$auto(0x40000080) r1 = socket(0xa, 0x1, 0x84) futex_wake$auto(0x0, 0x7, 0x1, 0x81) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00'}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7100f97bf53b7200000408000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan0\x00'}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25110000002000018008000300070000001400020076657468315f746f5f626f6e640000004c000180140002006970365f767469300000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300020000004800018014000200626f6e645f736c6176655f3000000000140002006272696467653000000000000000000014000200766972745f776966693000000000000008000300090000006000018008000100", @ANYRES32=0x0, @ANYBLOB="08000300ff7f0000080003009000000008000300ffffffff140002006970365f767469300000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030006000000080003000702000008000100", @ANYRES32=0x0, @ANYBLOB="04000180"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r7, 0x4004743d, 0x0) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0x41}, 0x6, 0x0) syz_clone(0x2084080, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x7f) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x3, 0x1f00) syz_clone3(&(0x7f00000003c0)={0x200000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.049650147s ago: executing program 3 (id=5921): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x300000000000000, 0x884}, 0x8020) 1.779797977s ago: executing program 1 (id=5922): ioctl$auto_SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x60482, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)={0xc}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r1, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004a80)={&(0x7f0000000080)={0x14, 0x0, 0x6d9f06716527075f, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc0090) recvfrom$auto(r1, &(0x7f0000007fc0), 0x3, 0x6, &(0x7f0000008080)=@isdn={0x22, 0x80, 0xff, 0x9, 0x38}, &(0x7f00000080c0)=0xfffff001) setsockopt$auto(0xffffffffffffffff, 0x79c, 0x8, 0x0, 0x804) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x28, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bdi/43:416/min_ratio\x00', 0x80302, 0x0) epoll_create1$auto(0x1) sendfile$auto(r2, r2, 0x0, 0x1) 1.527860887s ago: executing program 1 (id=5923): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x4, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pwritev$auto(0xffffffffffffffff, 0x0, 0x4, 0x3, 0x9) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x400000040000, 0x200006, 0x80000000000000, 0x40eb1, 0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) unshare$auto(0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x2, 0x7) getsockopt$auto(r3, 0x28, 0x2, 0xfffffffffffffffe, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) 1.459498324s ago: executing program 0 (id=5924): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000002c0)={0x9, &(0x7f0000000000)={0x1d, 0xf2, 0x9, @raw=0x9}}) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) write$auto(0x3, 0x0, 0x4fffffdf2) (async, rerun: 32) fcntl$auto_F_SETFD(r1, 0x2, 0x10) (async, rerun: 32) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) listen$auto(r3, 0x80) (async) ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(r3, 0x40084146, &(0x7f00000000c0)=0x1b4) (async, rerun: 32) r4 = socket(0x2, 0x1, 0x0) (rerun: 32) setrlimit$auto(0xc, &(0x7f0000000040)={0x29, 0x5}) r5 = getsockopt$auto(r4, 0x1, 0x8, 0xfffffffffffffffc, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0x6f2d, 0x2000) (rerun: 32) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto_RNDGETENTCNT2(r5, 0x80045200, &(0x7f0000000140)=0x5) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r6, 0x8000) (async) open_tree$auto(0xffffffffffffffff, 0x0, 0x2) 1.152850475s ago: executing program 1 (id=5925): r0 = socketpair$auto(0x1, 0x5, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x5393, r0) 1.000443732s ago: executing program 1 (id=5926): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x103841, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0xf67, 0x1, "669cbbd9e9756f22fdffa199e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x101}, 0x0, @integer=@value=[0x6, 0x0, 0x5, 0x80, 0xfffffffffffffffe, 0x8b0, 0x4, 0x8000000000000001, 0x100000000000004, 0x2090, 0xf7a, 0x6, 0x3, 0x1, 0x0, 0x7fffffffffffffff, 0x9, 0x3, 0x6, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x6, 0x2, 0x8, 0x10, 0xfffffffffffffffe, 0x3, 0x7, 0x6d, 0x3, 0xfffffffffffffff7, 0x10000, 0x5, 0x6, 0x3ff, 0x5, 0x6, 0x7, 0x200000000a78, 0x100000000000000, 0x100000004, 0x1, 0x0, 0x29, 0x81, 0x50, 0x5, 0x6, 0x8, 0x2afb, 0x803, 0x80, 0x4, 0x0, 0x4572, 0x9, 0xce13, 0x0, 0x4, 0x6, 0xd, 0x0, 0xfff, 0xc, 0xfffffffffffffffb, 0x6, 0xff, 0x10001, 0x0, 0x9, 0x9, 0x3, 0xd3ad, 0x9, 0x5, 0x7, 0x100000001, 0xffffffffffffffdc, 0x5, 0x1, 0x1000, 0x100000001, 0x100, 0x80000001, 0x8, 0x7, 0x4, 0x8, 0x800000000010, 0xff, 0x6, 0xff8000000, 0x2a4c32e3, 0x800, 0x18, 0x200000000000007, 0x4, 0x57, 0x1, 0x6, 0x7fffffffffffffff, 0x119af68c, 0x3, 0x4, 0x7, 0x6, 0xfdfd, 0x8000000000000001, 0x5, 0x8, 0xc8d, 0x7, 0x7, 0x2, 0x9, 0xfffffffffffffff8, 0x4, 0xc, 0x6, 0xa, 0x10001, 0x4bb2, 0x2, 0x400, 0x401, 0x8, 0x7], "282f77b07e718e11749a346177741dc299a28a585e87e0d908e2c8e50de501951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c8500"}) 934.350324ms ago: executing program 3 (id=5927): ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000001040)={0xffffffffffffffff, 0xf}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000) mmap$auto(0xfffffffffffffffe, 0x2020009, 0xff, 0xeb5, r0, 0x28000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg1\x00', 0xa0481, 0x0) ioctl$auto_BLKTRACESTOP2(r2, 0x1275, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0x22c00, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r3, &(0x7f0000000040)=""/4080, 0x1036) connect$auto(0x3, 0x0, 0x55) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x80000000, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mounts\x00', 0x2, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC2(0xffffffffffffffff, 0x80044dff, &(0x7f0000000240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r6, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x48000) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) ioctl$auto(0x3, 0x4020aea5, 0x38) preadv$auto(r4, &(0x7f0000000140)={0x0, 0x20000182}, 0x7, 0x4, 0x2) unshare$auto(0x40000080) r7 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x48040, 0x0) getdents$auto(r7, &(0x7f0000000040)={0x2, 0x2, 0x3, "53dd5e0f2ad9bf460138bd172de555421940b59bdfb1683f02abffee53f1cf72779dbddd13f275d6a3296889847ae9f4db7cc2376d8df9aa5bfe3b0cec7d11117ca45b1f25db9e75a0844ce1e931fb3bc0e348f056a2bc45ad727b9f1683b85bcf766d21708438326b99f67ae753aba9f38bff2513a251906582fd914a524611c632b0a3615b4224afcd36e19d35e9bb58b9db77b7af74ac777fa4e465aa471d3c563ea9d88a7c7ea19e"}, 0x7) 838.585863ms ago: executing program 1 (id=5928): socket(0x11, 0x6, 0x9) mmap$auto(0x0, 0x2000f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0x1b, 0xffffffffffffffff, 0x6) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x103, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xb, 0x6, 0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20002, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)=0x80) listen$auto(r0, 0x1) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x200060, 0x0, 0xff7ffffffffffe1c, 0x7fffffff, 0x4, 0xfffffffffffffffb, 0x103, 0x2000000000001e7, 0x11000000000, 0x4, 0x0, 0xc}) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000214af"], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) socket(0xa, 0x801, 0x84) getpid() close_range$auto(0x2, 0x8, 0x0) 567.494197ms ago: executing program 1 (id=5929): unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, 0x0}) write$auto(r2, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/usbip-vudc.0/usbip_status\x00', 0x8a180, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x902, 0x0) mmap$auto(0x7fffffffe000, 0x81, 0xffffffffffffa3a6, 0x8011, 0x3, 0x8000) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) ioctl$auto_SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000200)="538b2f525e17429845091e0af7da403c56eaa6f80b80de3866dbf18d049307def4e2becf58bc80eccb7cf4264c2051d48b9e9366e07e691f93161a7afbaedd1e5653be34b2ba4594cb045fb918676c92bf2f0e59566c5f5cac2cd65d9f26a74c18737b1e66395f4a71bbb60ed6d9ebec9220c0efff4c2be998cf1b3b0aefedb898978058171f2dc17cd27cf0ad91d248b57d07b5c926969969829452c20c152fef25ed370010764dad0b89939f95ce4434bb959e23f94fa8684353") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x10}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) sendmsg$auto_SMC_PNETID_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="185e", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25020000000b00010064756d6d793000000b00020064756d6d79300000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44c0) 473.675861ms ago: executing program 2 (id=5930): r0 = socket(0x2, 0x1, 0x106) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x20000800) mmap$auto(0x100004, 0x80000000040000c, 0x53e2, 0x9b72, 0xffffffffffffffff, 0x8003) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(r1, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(r1, 0x0, 0x4) futex$auto(0x0, 0x8c, 0xcd4b, 0x0, &(0x7f0000000180)=0x8e, 0x0) setsockopt$auto(r0, 0x6, 0x2, &(0x7f0000000080)='\x00\x00C\x80\'\xf9\xc4\xf5W_\xa2\x00\x05\x00\x00\x00\f\x8a\x7f\xcf\x9d\xc4ZrAF\xc7\xeeV\xda\x8ex\x1d\xddzL\xba\xc11\xc6\x1c\xe2\xe9\xbb,\x80\xd3\xcc\xf8\xd5h\xf7S\x81r[\xc8\xf1w \x95V?K\xf2\xd0\x02A\xf020\xe1\xd5^\xa8\xa9\xa0\xd5\xfa\x17I\x17\xf5\xdc\xb8\x1bt\xfc\xd9Ei5l\xef\xfbs\x04\xa0\xd8\x94E\b~\xd9\xbb\xeb\xc7\xfe\xe7\xde)\xc4r\x89\x03\xe0;\xa7\x1d+\xd5\x94N\xf4>-\xe3\xd3\x8d\xc7\xa4*\x96\xf7', 0x9) r2 = bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdir$auto(&(0x7f0000000040)='./cgroup.net/\f\x00\x00\x00\x00', 0xa3) r3 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x3, 0xfffffeff, 0x7ff, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x4, 0x4], {0x6, 0x105, 0xf, 0x2, 0x2, 0x83, 0x101, 0x0, 0x3}, {0x0, 0x10000, 0x55, 0x6, 0x2000001, 0x3, 0x4, 0x8, 0x54}}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000080)={0x2, 0x80, 0x0, 0x60, &(0x7f0000000000), 0x9, 0x3, 0x7, @stream_id=0x2, 0xfffffff5, 0x476, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_SETOWN_EX(r2, 0xf, 0x4) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) stat$auto(&(0x7f0000000140)='./cgroup.net/\f\x00', &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, 0xee00, 0xee00, 0x0, 0x1, 0x7, 0xffffffff, 0x7, 0x8f, 0x7, 0x2000000000000, 0x1000, 0x4, 0xe}) msgctl$auto_MSG_INFO(0x4, 0xc, &(0x7f00000004c0)={{0x0, r8, r9, 0x0, 0x6, 0x80, 0x6}, &(0x7f00000002c0)=0x2, &(0x7f0000000300)=0x81, 0x8000, 0x1, 0x3, 0x6, 0x7, 0x25, 0x5, 0x2a, @inferred=0x0, @raw=0x8}) sendmsg$auto_OVS_FLOW_CMD_SET(r6, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000004740)={0x2478, r7, 0x10, 0x70bd28, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_KEY={0x245c, 0x1, 0x0, 0x1, [@nested={0xb4, 0xf2, 0x0, 0x1, [@nested={0xa2, 0x131, 0x0, 0x1, [@typed={0x8, 0xd9, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0xee}, @typed={0x6, 0x8b, 0x0, 0x0, @str='\\\x00'}, @generic="1b7839b1cec9a4bb1b1442d79cc3d2258e341c7d99f4c161b9cd74ffc07fe395721ba0c93ea4bf07a9a18da47ff59c27e213d19ceb103241e28b0b526509e0dada2c63110051addfb222ff2e0134e4a9b43ffd70d771b077007ec2dd5d66b448667a60c22d35bb4017deb6", @nested={0x4, 0x19}, @generic="498d4def7736dd65c93bb137c0dd5271967c9337ea17c3a14dadfa"]}, @typed={0x7, 0xfe, 0x0, 0x0, @str=']*\x00'}, @typed={0x4, 0x8f}]}, @nested={0x238c, 0x4a, 0x0, 0x1, [@nested={0x4, 0x134}, @nested={0x1377, 0x100, 0x0, 0x1, [@generic="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", @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}, @nested={0x4, 0x28}, @nested={0x351, 0x97, 0x0, 0x1, [@nested={0x171, 0x80, 0x0, 0x1, [@nested={0xcd, 0x8, 0x0, 0x1, [@generic="8f0784836ca44b6da10f0dcccd60fed649556f7c6b7ef2afd9ff3491726f7df04daf746548f958bda8e1a68af8ba02203b73f465fd346d6c6155219292ab67377356e5ad03e87b9946d2f89c8fcdeedb00095094366e033ed2234b9483d1d5753b5798fb78d217be6b9bb5fb76b0f21c8eac245e969dbc74ad70336a52df7ab1ad48c5af87d4d6bd9fc5187a51bbe21499662c93bb410a20f7625f17090a47e3b360742ba4987e24443ec2b5afdb38e255298fcaa2c7f6f965a9ce6aac5d719c67cae1301ae0ceeb17"]}, @typed={0x8, 0xc1, 0x0, 0x0, @u32=0xdd}, @generic="c5f92793e93c7c53bd8429d69cfe8a49e10be7a6c89f7fcf0610bab502d75d1bcde6dcd0e03326743b751a56c22d56a7062ec69a5ba1eedf79b040f567584294ef2c0033cec16d8e2f07c9117c64ef51bda9de23f30b2bac0e48960004e10ff7c139c7ab0b64f6d73081f445ec1c8252f5c6955497cada1ad619ff687bee4e99d6eca8bb41d9361b235ef907eed5996c55fcaaae98"]}, @typed={0xc, 0x149, 0x0, 0x0, @u64=0x8000}, @generic="8958b51672683294c098aac1137f261059e8dc500f955a20e49bdaeb2a8f7be348f513e193f946d7d05c0ada513c10f422ee8f91e963aae2ee9ee03c3478f63401bc500092d3c221c7d20fb59c", @typed={0x8, 0x13a, 0x0, 0x0, @uid=r10}, @typed={0x8, 0x15d, 0x0, 0x0, @pid=r11}, @nested={0x13c, 0xf4, 0x0, 0x1, [@nested={0xc, 0x28, 0x0, 0x1, [@typed={0x8, 0xca, 0x0, 0x0, @uid=r8}]}, @nested={0x123, 0x12f, 0x0, 0x1, [@generic="4dce8a6f44a54973a0a65321befa8df2e307515e72753dd62e192d36e612597a4a01f8e2387b29e3e6ccc97ac598ef466814393389101a58ef6c766bc5e71bca62f2a8f1f34ada0c8f54cc157eef0082c2de2fe795446479a7ce8f0285fdae9ac47550ae2e066aa25da24d15eb59f12ce545045e5fb7bf2680ae605159844cacdc0bcc5d963bf8c0d5c7ec0311", @nested={0x4, 0xc8}, @generic="5870e5af0416af19a898de6697272fed4f315aad0a39614dea188c83f957e55dfe0fba1e331900bbe0fb9d07bfd7dad06c6710783cc909274a54ba832747f8f1915c516f5fd00cb724a009d5682510d3d1ee4af221de86a4136fbb233cff50c156a2a72616941a5b0d161cc3d03f00aa6f6e46adf4b434166d093e4ab60429a27eb03c8be169", @typed={0x8, 0x6f, 0x0, 0x0, @uid=r10}]}, @nested={0x8, 0x39, 0x0, 0x1, [@nested={0x4, 0x152}]}]}, @typed={0x32, 0xc1, 0x0, 0x0, @binary="ce4326bfc6c659be94ea11547ac343ef5c3f2bc80420690bd9919baec2459ae7271f3b7a8315b92d6e84fabdaf80"}]}, @generic="c8b92a1825559dd45ea5bedabfea1b27375832"]}, @typed={0x4, 0x87}, @generic="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", @typed={0x8, 0x11e, 0x0, 0x0, @uid=r8}]}, @nested={0x18, 0x3, 0x0, 0x1, [@typed={0x9, 0x113, 0x0, 0x0, @str='nfsd\x00'}, @typed={0x8, 0xc3, 0x0, 0x0, @uid=r10}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x2478}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="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"], 0xa0}}, 0x0) 171.67011ms ago: executing program 2 (id=5931): openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC0D0c\x00', 0x2d24c0, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x80003, 0x300) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e1") waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x5, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) set_tid_address$auto(&(0x7f0000000500)=0x5) getpgid$auto(0x0) socket(0x2, 0x801, 0x106) 0s ago: executing program 0 (id=5932): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x700000000000000, 0x884}, 0x8020) kernel console output (not intermixed with test programs): 0x40/0x90 [ 810.426323][T20979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.426338][T20979] RIP: 0033:0x7fee6699c799 [ 810.426352][T20979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.426367][T20979] RSP: 002b:00007fee677b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 810.426383][T20979] RAX: ffffffffffffffda RBX: 00007fee66c15fa0 RCX: 00007fee6699c799 [ 810.426393][T20979] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 810.426402][T20979] RBP: 00007fee677b6090 R08: 0000000000000000 R09: 0000000000000000 [ 810.426411][T20979] R10: 0000000000000071 R11: 0000000000000246 R12: 0000000000000001 [ 810.426420][T20979] R13: 00007fee66c16038 R14: 00007fee66c15fa0 R15: 00007fffbdede138 [ 810.426439][T20979] [ 811.183396][T20981] zswap: compressor 000 not available [ 811.763579][T21008] FAULT_INJECTION: forcing a failure. [ 811.763579][T21008] name failslab, interval 1, probability 0, space 0, times 0 [ 811.853129][T21008] CPU: 0 UID: 0 PID: 21008 Comm: syz.2.3682 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.853158][T21008] Tainted: [L]=SOFTLOCKUP [ 811.853164][T21008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 811.853174][T21008] Call Trace: [ 811.853180][T21008] [ 811.853187][T21008] dump_stack_lvl+0x100/0x190 [ 811.853216][T21008] should_fail_ex.cold+0x5/0xa [ 811.853241][T21008] ? process_vm_rw_core.constprop.0+0x1d7/0x950 [ 811.853267][T21008] should_failslab+0xc2/0x120 [ 811.853284][T21008] __kmalloc_noprof+0xe0/0x850 [ 811.853307][T21008] ? find_held_lock+0x2b/0x80 [ 811.853324][T21008] process_vm_rw_core.constprop.0+0x1d7/0x950 [ 811.853349][T21008] ? futex_unqueue+0x13d/0x2c0 [ 811.853371][T21008] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 811.853396][T21008] ? import_ubuf+0x1b6/0x220 [ 811.853427][T21008] ? iovec_from_user+0xda/0x140 [ 811.853444][T21008] process_vm_rw+0x226/0x2d0 [ 811.853468][T21008] ? __pfx_process_vm_rw+0x10/0x10 [ 811.853495][T21008] ? ksys_write+0x190/0x250 [ 811.853533][T21008] ? xfd_validate_state+0x129/0x190 [ 811.853558][T21008] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 811.853581][T21008] ? do_syscall_64+0x95/0xf80 [ 811.853599][T21008] ? lockdep_hardirqs_on+0x78/0x100 [ 811.853616][T21008] do_syscall_64+0x106/0xf80 [ 811.853633][T21008] ? clear_bhb_loop+0x40/0x90 [ 811.853652][T21008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.853668][T21008] RIP: 0033:0x7f0c7259c799 [ 811.853683][T21008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.853698][T21008] RSP: 002b:00007f0c73499028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 811.853714][T21008] RAX: ffffffffffffffda RBX: 00007f0c72815fa0 RCX: 00007f0c7259c799 [ 811.853725][T21008] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 811.853735][T21008] RBP: 00007f0c72632c99 R08: 0000000000000004 R09: 0000000000000000 [ 811.853744][T21008] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 811.853754][T21008] R13: 00007f0c72816038 R14: 00007f0c72815fa0 R15: 00007ffd10e191a8 [ 811.853774][T21008] [ 814.140795][T21033] MTRR 1 not used [ 815.170445][T21057] FAULT_INJECTION: forcing a failure. [ 815.170445][T21057] name failslab, interval 1, probability 0, space 0, times 0 [ 815.283294][T21057] CPU: 0 UID: 0 PID: 21057 Comm: syz.1.3693 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.283321][T21057] Tainted: [L]=SOFTLOCKUP [ 815.283327][T21057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 815.283337][T21057] Call Trace: [ 815.283343][T21057] [ 815.283349][T21057] dump_stack_lvl+0x100/0x190 [ 815.283378][T21057] should_fail_ex.cold+0x5/0xa [ 815.283397][T21057] ? process_vm_rw_core.constprop.0+0x1d7/0x950 [ 815.283421][T21057] should_failslab+0xc2/0x120 [ 815.283437][T21057] __kmalloc_noprof+0xe0/0x850 [ 815.283459][T21057] ? find_held_lock+0x2b/0x80 [ 815.283479][T21057] process_vm_rw_core.constprop.0+0x1d7/0x950 [ 815.283504][T21057] ? futex_unqueue+0x13d/0x2c0 [ 815.283528][T21057] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 815.283554][T21057] ? import_ubuf+0x1b6/0x220 [ 815.283584][T21057] ? iovec_from_user+0xda/0x140 [ 815.283601][T21057] process_vm_rw+0x226/0x2d0 [ 815.283629][T21057] ? __pfx_process_vm_rw+0x10/0x10 [ 815.283658][T21057] ? ksys_write+0x190/0x250 [ 815.283688][T21057] ? xfd_validate_state+0x129/0x190 [ 815.283712][T21057] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 815.283736][T21057] ? do_syscall_64+0x95/0xf80 [ 815.283754][T21057] ? lockdep_hardirqs_on+0x78/0x100 [ 815.283772][T21057] do_syscall_64+0x106/0xf80 [ 815.283789][T21057] ? clear_bhb_loop+0x40/0x90 [ 815.283807][T21057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.283823][T21057] RIP: 0033:0x7f317859c799 [ 815.283837][T21057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.283851][T21057] RSP: 002b:00007f31793bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 815.283866][T21057] RAX: ffffffffffffffda RBX: 00007f3178815fa0 RCX: 00007f317859c799 [ 815.283880][T21057] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 815.283889][T21057] RBP: 00007f3178632c99 R08: 0000000000000004 R09: 0000000000000000 [ 815.283899][T21057] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 815.283909][T21057] R13: 00007f3178816038 R14: 00007f3178815fa0 R15: 00007ffeb780be98 [ 815.283928][T21057] [ 817.024194][T21097] FAULT_INJECTION: forcing a failure. [ 817.024194][T21097] name failslab, interval 1, probability 0, space 0, times 0 [ 817.076980][T21097] CPU: 0 UID: 0 PID: 21097 Comm: syz.1.3705 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.077007][T21097] Tainted: [L]=SOFTLOCKUP [ 817.077013][T21097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 817.077022][T21097] Call Trace: [ 817.077028][T21097] [ 817.077035][T21097] dump_stack_lvl+0x100/0x190 [ 817.077063][T21097] should_fail_ex.cold+0x5/0xa [ 817.077083][T21097] ? process_vm_rw_core.constprop.0+0x1d7/0x950 [ 817.077107][T21097] should_failslab+0xc2/0x120 [ 817.077123][T21097] __kmalloc_noprof+0xe0/0x850 [ 817.077145][T21097] ? find_held_lock+0x2b/0x80 [ 817.077163][T21097] process_vm_rw_core.constprop.0+0x1d7/0x950 [ 817.077188][T21097] ? futex_unqueue+0x13d/0x2c0 [ 817.077211][T21097] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 817.077236][T21097] ? import_ubuf+0x1b6/0x220 [ 817.077266][T21097] ? iovec_from_user+0xda/0x140 [ 817.077283][T21097] process_vm_rw+0x226/0x2d0 [ 817.077307][T21097] ? __pfx_process_vm_rw+0x10/0x10 [ 817.077334][T21097] ? ksys_write+0x190/0x250 [ 817.077365][T21097] ? xfd_validate_state+0x129/0x190 [ 817.077390][T21097] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 817.077413][T21097] ? do_syscall_64+0x95/0xf80 [ 817.077431][T21097] ? lockdep_hardirqs_on+0x78/0x100 [ 817.077449][T21097] do_syscall_64+0x106/0xf80 [ 817.077466][T21097] ? clear_bhb_loop+0x40/0x90 [ 817.077484][T21097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.077500][T21097] RIP: 0033:0x7f317859c799 [ 817.077514][T21097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.077529][T21097] RSP: 002b:00007f31793bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 817.077545][T21097] RAX: ffffffffffffffda RBX: 00007f3178815fa0 RCX: 00007f317859c799 [ 817.077555][T21097] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 817.077565][T21097] RBP: 00007f3178632c99 R08: 0000000000000004 R09: 0000000000000000 [ 817.077574][T21097] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 817.077583][T21097] R13: 00007f3178816038 R14: 00007f3178815fa0 R15: 00007ffeb780be98 [ 817.077602][T21097] [ 817.369487][T21100] FAULT_INJECTION: forcing a failure. [ 817.369487][T21100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.382733][T21100] CPU: 0 UID: 0 PID: 21100 Comm: syz.0.3706 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.382761][T21100] Tainted: [L]=SOFTLOCKUP [ 817.382767][T21100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 817.382777][T21100] Call Trace: [ 817.382783][T21100] [ 817.382790][T21100] dump_stack_lvl+0x100/0x190 [ 817.382818][T21100] should_fail_ex.cold+0x5/0xa [ 817.382838][T21100] _copy_from_user+0x2e/0xd0 [ 817.382855][T21100] copy_mount_options+0x76/0x190 [ 817.382876][T21100] __x64_sys_mount+0x1ab/0x310 [ 817.382894][T21100] ? __pfx___x64_sys_mount+0x10/0x10 [ 817.382917][T21100] do_syscall_64+0x106/0xf80 [ 817.382935][T21100] ? clear_bhb_loop+0x40/0x90 [ 817.382954][T21100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.382990][T21100] RIP: 0033:0x7f6d6e79c799 [ 817.383006][T21100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.383022][T21100] RSP: 002b:00007f6d6f69a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 817.383038][T21100] RAX: ffffffffffffffda RBX: 00007f6d6ea16090 RCX: 00007f6d6e79c799 [ 817.383049][T21100] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 817.383059][T21100] RBP: 00007f6d6e832c99 R08: 00002000000009c0 R09: 0000000000000000 [ 817.383069][T21100] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 817.383078][T21100] R13: 00007f6d6ea16128 R14: 00007f6d6ea16090 R15: 00007fff36e1ff18 [ 817.383098][T21100] [ 820.126969][T21160] FAULT_INJECTION: forcing a failure. [ 820.126969][T21160] name failslab, interval 1, probability 0, space 0, times 0 [ 820.204276][T21160] CPU: 0 UID: 0 PID: 21160 Comm: syz.2.3716 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.204305][T21160] Tainted: [L]=SOFTLOCKUP [ 820.204311][T21160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 820.204321][T21160] Call Trace: [ 820.204328][T21160] [ 820.204334][T21160] dump_stack_lvl+0x100/0x190 [ 820.204362][T21160] should_fail_ex.cold+0x5/0xa [ 820.204381][T21160] ? process_vm_rw_core.constprop.0+0x1d7/0x950 [ 820.204406][T21160] should_failslab+0xc2/0x120 [ 820.204421][T21160] __kmalloc_noprof+0xe0/0x850 [ 820.204444][T21160] ? find_held_lock+0x2b/0x80 [ 820.204461][T21160] process_vm_rw_core.constprop.0+0x1d7/0x950 [ 820.204487][T21160] ? futex_unqueue+0x13d/0x2c0 [ 820.204509][T21160] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 820.204534][T21160] ? import_ubuf+0x1b6/0x220 [ 820.204568][T21160] ? iovec_from_user+0xda/0x140 [ 820.204585][T21160] process_vm_rw+0x226/0x2d0 [ 820.204609][T21160] ? __pfx_process_vm_rw+0x10/0x10 [ 820.204645][T21160] ? ksys_write+0x190/0x250 [ 820.204676][T21160] ? xfd_validate_state+0x129/0x190 [ 820.204701][T21160] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 820.204725][T21160] ? do_syscall_64+0x95/0xf80 [ 820.204744][T21160] ? lockdep_hardirqs_on+0x78/0x100 [ 820.204762][T21160] do_syscall_64+0x106/0xf80 [ 820.204779][T21160] ? clear_bhb_loop+0x40/0x90 [ 820.204798][T21160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.204814][T21160] RIP: 0033:0x7f0c7259c799 [ 820.204828][T21160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.204843][T21160] RSP: 002b:00007f0c73499028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 820.204858][T21160] RAX: ffffffffffffffda RBX: 00007f0c72815fa0 RCX: 00007f0c7259c799 [ 820.204869][T21160] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 820.204878][T21160] RBP: 00007f0c72632c99 R08: 0000000000000004 R09: 0000000000000000 [ 820.204888][T21160] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 820.204898][T21160] R13: 00007f0c72816038 R14: 00007f0c72815fa0 R15: 00007ffd10e191a8 [ 820.204918][T21160] [ 821.292177][T21169] netlink: get zone limit has 4 unknown bytes [ 821.486063][ T5839] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 821.503517][T21180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3719'. [ 821.533991][T21179] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 821.541826][T21179] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 821.552635][T21179] CPU: 0 UID: 0 PID: 21179 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.552662][T21179] Tainted: [L]=SOFTLOCKUP [ 821.552668][T21179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 821.552698][T21179] Workqueue: hci2 hci_rx_work [ 821.552779][T21179] Call Trace: [ 821.552785][T21179] [ 821.552792][T21179] dump_stack_lvl+0x100/0x190 [ 821.552817][T21179] sysfs_warn_dup.cold+0x1c/0x28 [ 821.552845][T21179] sysfs_create_dir_ns+0x24b/0x2b0 [ 821.552867][T21179] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 821.552886][T21179] ? find_held_lock+0x2b/0x80 [ 821.552901][T21179] ? kobject_add_internal+0x25f/0x930 [ 821.552923][T21179] ? kobject_add_internal+0x25f/0x930 [ 821.552946][T21179] ? do_raw_spin_unlock+0x145/0x1e0 [ 821.552971][T21179] kobject_add_internal+0x2c8/0x930 [ 821.552995][T21179] kobject_add+0x16a/0x1e0 [ 821.553016][T21179] ? __pfx_kobject_add+0x10/0x10 [ 821.553035][T21179] ? class_to_subsys+0x10f/0x150 [ 821.553088][T21179] ? kobject_put+0xb9/0x640 [ 821.553107][T21179] ? _raw_spin_unlock+0x28/0x50 [ 821.553129][T21179] device_add+0x294/0x1950 [ 821.553170][T21179] ? __pfx_dev_set_name+0x10/0x10 [ 821.553189][T21179] ? __pfx_device_add+0x10/0x10 [ 821.553204][T21179] ? mgmt_send_event_skb+0x2fb/0x460 [ 821.553252][T21179] hci_conn_add_sysfs+0x1a3/0x260 [ 821.553319][T21179] le_conn_complete_evt+0x11cb/0x1f40 [ 821.553362][T21179] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 821.553377][T21179] ? __pfx_bt_warn+0x10/0x10 [ 821.553410][T21179] hci_le_conn_complete_evt+0x23c/0x3a0 [ 821.553427][T21179] ? skb_pull_data+0x15f/0x1e0 [ 821.553452][T21179] hci_le_meta_evt+0x34a/0x5f0 [ 821.553492][T21179] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 821.553512][T21179] hci_event_packet+0x682/0x11c0 [ 821.553529][T21179] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 821.553547][T21179] ? __pfx_hci_event_packet+0x10/0x10 [ 821.553573][T21179] ? kcov_remote_start+0x374/0x660 [ 821.553589][T21179] ? lockdep_hardirqs_on+0x78/0x100 [ 821.553613][T21179] hci_rx_work+0x451/0xfc0 [ 821.553633][T21179] process_one_work+0x9d7/0x1920 [ 821.553663][T21179] ? __pfx_process_one_work+0x10/0x10 [ 821.553690][T21179] ? __pfx_hci_rx_work+0x10/0x10 [ 821.553707][T21179] worker_thread+0x5da/0xe40 [ 821.553732][T21179] ? __pfx_worker_thread+0x10/0x10 [ 821.553754][T21179] ? kthread+0x13a/0x450 [ 821.553772][T21179] ? __pfx_worker_thread+0x10/0x10 [ 821.553791][T21179] kthread+0x370/0x450 [ 821.553809][T21179] ? __pfx_kthread+0x10/0x10 [ 821.553829][T21179] ret_from_fork+0x754/0xd80 [ 821.553852][T21179] ? __pfx_ret_from_fork+0x10/0x10 [ 821.553875][T21179] ? __switch_to+0x7b4/0x1120 [ 821.553891][T21179] ? __pfx_kthread+0x10/0x10 [ 821.553911][T21179] ret_from_fork_asm+0x1a/0x30 [ 821.553938][T21179] [ 821.553991][T21179] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 821.865790][T21179] Bluetooth: hci2: failed to register connection device [ 823.550797][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 825.510165][T21233] FAULT_INJECTION: forcing a failure. [ 825.510165][T21233] name failslab, interval 1, probability 0, space 0, times 0 [ 825.630653][T21179] Bluetooth: hci2: command 0x0406 tx timeout [ 825.678849][T21233] CPU: 0 UID: 0 PID: 21233 Comm: syz.0.3728 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.678877][T21233] Tainted: [L]=SOFTLOCKUP [ 825.678884][T21233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 825.678894][T21233] Call Trace: [ 825.678900][T21233] [ 825.678910][T21233] dump_stack_lvl+0x100/0x190 [ 825.678972][T21233] should_fail_ex.cold+0x5/0xa [ 825.679003][T21233] ? process_vm_rw_core.constprop.0+0x1d7/0x950 [ 825.679042][T21233] should_failslab+0xc2/0x120 [ 825.679068][T21233] __kmalloc_noprof+0xe0/0x850 [ 825.679090][T21233] ? find_held_lock+0x2b/0x80 [ 825.679117][T21233] process_vm_rw_core.constprop.0+0x1d7/0x950 [ 825.679142][T21233] ? futex_unqueue+0x13d/0x2c0 [ 825.679173][T21233] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 825.679198][T21233] ? lockdep_hardirqs_on+0x78/0x100 [ 825.679236][T21233] ? import_ubuf+0x1b6/0x220 [ 825.679382][T21233] ? iovec_from_user+0xda/0x140 [ 825.679412][T21233] process_vm_rw+0x226/0x2d0 [ 825.679441][T21233] ? __pfx_process_vm_rw+0x10/0x10 [ 825.679471][T21233] ? ksys_write+0x190/0x250 [ 825.679510][T21233] ? xfd_validate_state+0x129/0x190 [ 825.679541][T21233] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 825.679566][T21233] ? do_syscall_64+0x95/0xf80 [ 825.679584][T21233] ? lockdep_hardirqs_on+0x78/0x100 [ 825.679602][T21233] do_syscall_64+0x106/0xf80 [ 825.679619][T21233] ? clear_bhb_loop+0x40/0x90 [ 825.679644][T21233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.679660][T21233] RIP: 0033:0x7f6d6e79c799 [ 825.679677][T21233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.679692][T21233] RSP: 002b:00007f6d6f6bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 825.679715][T21233] RAX: ffffffffffffffda RBX: 00007f6d6ea15fa0 RCX: 00007f6d6e79c799 [ 825.679726][T21233] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 825.679736][T21233] RBP: 00007f6d6e832c99 R08: 0000000000000004 R09: 0000000000000000 [ 825.679749][T21233] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 825.679760][T21233] R13: 00007f6d6ea16038 R14: 00007f6d6ea15fa0 R15: 00007fff36e1ff18 [ 825.679791][T21233] [ 832.408536][T21330] sp0: Synchronizing with TNC [ 833.447760][T21357] FAULT_INJECTION: forcing a failure. [ 833.447760][T21357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.628292][T21357] CPU: 0 UID: 0 PID: 21357 Comm: syz.2.3760 Tainted: G L syzkaller #0 PREEMPT(full) [ 833.628320][T21357] Tainted: [L]=SOFTLOCKUP [ 833.628325][T21357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 833.628344][T21357] Call Trace: [ 833.628351][T21357] [ 833.628357][T21357] dump_stack_lvl+0x100/0x190 [ 833.628385][T21357] should_fail_ex.cold+0x5/0xa [ 833.628404][T21357] _copy_to_user+0x32/0xd0 [ 833.628421][T21357] simple_read_from_buffer+0xcb/0x170 [ 833.628452][T21357] proc_fail_nth_read+0x1af/0x230 [ 833.628485][T21357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 833.628504][T21357] ? rw_verify_area+0xce/0x6d0 [ 833.628525][T21357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 833.628543][T21357] vfs_read+0x1e4/0xb30 [ 833.628568][T21357] ? __pfx_vfs_read+0x10/0x10 [ 833.628590][T21357] ? __fget_files+0x215/0x3d0 [ 833.628608][T21357] ? __fget_files+0x21f/0x3d0 [ 833.628628][T21357] ksys_read+0x12a/0x250 [ 833.628650][T21357] ? __pfx_ksys_read+0x10/0x10 [ 833.628678][T21357] do_syscall_64+0x106/0xf80 [ 833.628699][T21357] ? clear_bhb_loop+0x40/0x90 [ 833.628717][T21357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.628733][T21357] RIP: 0033:0x7f0c7255cfce [ 833.628746][T21357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 833.628761][T21357] RSP: 002b:00007f0c73498fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 833.628779][T21357] RAX: ffffffffffffffda RBX: 00007f0c734996c0 RCX: 00007f0c7255cfce [ 833.628790][T21357] RDX: 000000000000000f RSI: 00007f0c734990a0 RDI: 0000000000000004 [ 833.628799][T21357] RBP: 00007f0c73499090 R08: 0000000000000000 R09: 0000000000000000 [ 833.628813][T21357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.628822][T21357] R13: 00007f0c72816038 R14: 00007f0c72815fa0 R15: 00007ffd10e191a8 [ 833.628842][T21357] [ 834.124372][T21350] zswap: compressor not available [ 834.382641][T21372] netlink: 'syz.0.3761': attribute type 1 has an invalid length. [ 834.483384][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 835.809842][T21392] netlink: 'syz.2.3768': attribute type 21 has an invalid length. [ 835.881931][T21392] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3768'. [ 836.960688][T21415] FAULT_INJECTION: forcing a failure. [ 836.960688][T21415] name failslab, interval 1, probability 0, space 0, times 0 [ 837.035232][T21415] CPU: 0 UID: 0 PID: 21415 Comm: syz.0.3772 Tainted: G L syzkaller #0 PREEMPT(full) [ 837.035269][T21415] Tainted: [L]=SOFTLOCKUP [ 837.035275][T21415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 837.035285][T21415] Call Trace: [ 837.035291][T21415] [ 837.035299][T21415] dump_stack_lvl+0x100/0x190 [ 837.035327][T21415] should_fail_ex.cold+0x5/0xa [ 837.035347][T21415] should_failslab+0xc2/0x120 [ 837.035363][T21415] __kmalloc_cache_noprof+0x7a/0x6f0 [ 837.035383][T21415] ? landlock_init_hierarchy_log+0xa9/0x820 [ 837.035422][T21415] landlock_init_hierarchy_log+0xa9/0x820 [ 837.035441][T21415] ? inherit_tree+0x197/0x2d0 [ 837.035465][T21415] landlock_merge_ruleset+0x67b/0x830 [ 837.035493][T21415] __do_sys_landlock_restrict_self+0x2a6/0x9e0 [ 837.035520][T21415] do_syscall_64+0x106/0xf80 [ 837.035548][T21415] ? clear_bhb_loop+0x40/0x90 [ 837.035569][T21415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.035585][T21415] RIP: 0033:0x7f6d6e79c799 [ 837.035599][T21415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.035614][T21415] RSP: 002b:00007f6d6f69a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 837.035631][T21415] RAX: ffffffffffffffda RBX: 00007f6d6ea16090 RCX: 00007f6d6e79c799 [ 837.035641][T21415] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 837.035650][T21415] RBP: 00007f6d6e832c99 R08: 0000000000000000 R09: 0000000000000000 [ 837.035659][T21415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.035668][T21415] R13: 00007f6d6ea16128 R14: 00007f6d6ea16090 R15: 00007fff36e1ff18 [ 837.035689][T21415] [ 837.802350][T21425] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 838.120695][T21436] FAULT_INJECTION: forcing a failure. [ 838.120695][T21436] name failslab, interval 1, probability 0, space 0, times 0 [ 838.207402][T21436] CPU: 0 UID: 0 PID: 21436 Comm: syz.0.3778 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.207432][T21436] Tainted: [L]=SOFTLOCKUP [ 838.207437][T21436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 838.207447][T21436] Call Trace: [ 838.207453][T21436] [ 838.207459][T21436] dump_stack_lvl+0x100/0x190 [ 838.207487][T21436] should_fail_ex.cold+0x5/0xa [ 838.207514][T21436] should_failslab+0xc2/0x120 [ 838.207530][T21436] __kvmalloc_node_noprof+0xfa/0xa00 [ 838.207554][T21436] ? seq_read_iter+0x819/0x1270 [ 838.207582][T21436] seq_read_iter+0x819/0x1270 [ 838.207606][T21436] ? aa_file_perm+0x7f3/0x14d0 [ 838.207631][T21436] seq_read+0x33b/0x4c0 [ 838.207653][T21436] ? __pfx_seq_read+0x10/0x10 [ 838.207687][T21436] ? __pfx_seq_read+0x10/0x10 [ 838.207709][T21436] proc_reg_read+0x240/0x330 [ 838.207731][T21436] ? __pfx_proc_reg_read+0x10/0x10 [ 838.207754][T21436] vfs_read+0x1e4/0xb30 [ 838.207781][T21436] ? __pfx_vfs_read+0x10/0x10 [ 838.207803][T21436] ? __fget_files+0x215/0x3d0 [ 838.207822][T21436] ? __fget_files+0x21f/0x3d0 [ 838.207841][T21436] ksys_read+0x12a/0x250 [ 838.207863][T21436] ? __pfx_ksys_read+0x10/0x10 [ 838.207892][T21436] do_syscall_64+0x106/0xf80 [ 838.207910][T21436] ? clear_bhb_loop+0x40/0x90 [ 838.207929][T21436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.207944][T21436] RIP: 0033:0x7f6d6e79c799 [ 838.207958][T21436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.207972][T21436] RSP: 002b:00007f6d6f6bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 838.207987][T21436] RAX: ffffffffffffffda RBX: 00007f6d6ea15fa0 RCX: 00007f6d6e79c799 [ 838.207998][T21436] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000003 [ 838.208007][T21436] RBP: 00007f6d6f6bb090 R08: 0000000000000000 R09: 0000000000000000 [ 838.208016][T21436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.208025][T21436] R13: 00007f6d6ea16038 R14: 00007f6d6ea15fa0 R15: 00007fff36e1ff18 [ 838.208044][T21436] [ 838.717823][T21430] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 839.497907][T21452] FAULT_INJECTION: forcing a failure. [ 839.497907][T21452] name fail_futex, interval 1, probability 0, space 0, times 0 [ 839.579958][T21452] CPU: 0 UID: 0 PID: 21452 Comm: syz.3.3783 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.579986][T21452] Tainted: [L]=SOFTLOCKUP [ 839.579992][T21452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 839.580001][T21452] Call Trace: [ 839.580007][T21452] [ 839.580014][T21452] dump_stack_lvl+0x100/0x190 [ 839.580043][T21452] should_fail_ex.cold+0x5/0xa [ 839.580063][T21452] get_futex_key+0x1d2/0x1620 [ 839.580084][T21452] ? __pfx_get_futex_key+0x10/0x10 [ 839.580100][T21452] ? kasan_quarantine_put+0x104/0x240 [ 839.580122][T21452] ? lockdep_hardirqs_on+0x78/0x100 [ 839.580143][T21452] ? process_vm_rw_core.constprop.0+0x6ff/0x950 [ 839.580165][T21452] ? kfree+0x1f6/0x6b0 [ 839.580185][T21452] futex_wait_setup+0x83/0x510 [ 839.580222][T21452] __futex_wait+0x19f/0x300 [ 839.580246][T21452] ? __pfx___futex_wait+0x10/0x10 [ 839.580268][T21452] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 839.580293][T21452] ? lockdep_hardirqs_on+0x78/0x100 [ 839.580321][T21452] ? __pfx_futex_wake_mark+0x10/0x10 [ 839.580347][T21452] ? futex_hash+0x2c5/0x380 [ 839.580370][T21452] futex_wait+0xed/0x380 [ 839.580393][T21452] ? __pfx_futex_wait+0x10/0x10 [ 839.580421][T21452] ? ksys_write+0x190/0x250 [ 839.580440][T21452] do_futex+0x1ef/0x350 [ 839.580459][T21452] ? __pfx_do_futex+0x10/0x10 [ 839.580482][T21452] __x64_sys_futex+0x34f/0x4d0 [ 839.580503][T21452] ? __pfx___x64_sys_futex+0x10/0x10 [ 839.580529][T21452] do_syscall_64+0x106/0xf80 [ 839.580547][T21452] ? clear_bhb_loop+0x40/0x90 [ 839.580565][T21452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.580580][T21452] RIP: 0033:0x7fee6699c799 [ 839.580594][T21452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.580609][T21452] RSP: 002b:00007fee677b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 839.580624][T21452] RAX: ffffffffffffffda RBX: 00007fee66c15fa8 RCX: 00007fee6699c799 [ 839.580635][T21452] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fee66c15fa8 [ 839.580645][T21452] RBP: 00007fee66c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 839.580654][T21452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.580664][T21452] R13: 00007fee66c16038 R14: 00007fffbdede050 R15: 00007fffbdede138 [ 839.580684][T21452] [ 841.139563][ T5911] usb usb40-port2: attempt power cycle [ 841.722779][ T5911] usb usb40-port2: unable to enumerate USB device [ 844.473210][T21546] FAULT_INJECTION: forcing a failure. [ 844.473210][T21546] name failslab, interval 1, probability 0, space 0, times 0 [ 844.552474][T21548] FAULT_INJECTION: forcing a failure. [ 844.552474][T21548] name failslab, interval 1, probability 0, space 0, times 0 [ 844.566530][T21546] CPU: 0 UID: 0 PID: 21546 Comm: syz.1.3804 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.566557][T21546] Tainted: [L]=SOFTLOCKUP [ 844.566563][T21546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 844.566573][T21546] Call Trace: [ 844.566580][T21546] [ 844.566586][T21546] dump_stack_lvl+0x100/0x190 [ 844.566616][T21546] should_fail_ex.cold+0x5/0xa [ 844.566636][T21546] should_failslab+0xc2/0x120 [ 844.566652][T21546] __kmalloc_cache_noprof+0x7a/0x6f0 [ 844.566673][T21546] ? rfkill_fop_open+0x1b6/0x750 [ 844.566810][T21546] ? mark_held_locks+0x40/0x70 [ 844.566835][T21546] rfkill_fop_open+0x1b6/0x750 [ 844.566862][T21546] ? __pfx_rfkill_fop_open+0x10/0x10 [ 844.566885][T21546] misc_open+0x26d/0x450 [ 844.566953][T21546] ? __pfx_misc_open+0x10/0x10 [ 844.566968][T21546] chrdev_open+0x234/0x6a0 [ 844.566984][T21546] ? __pfx_apparmor_file_open+0x10/0x10 [ 844.567007][T21546] ? __pfx_chrdev_open+0x10/0x10 [ 844.567024][T21546] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 844.567049][T21546] do_dentry_open+0x6d8/0x1660 [ 844.567064][T21546] ? __pfx_chrdev_open+0x10/0x10 [ 844.567084][T21546] vfs_open+0x82/0x3f0 [ 844.567105][T21546] path_openat+0x208c/0x31a0 [ 844.567128][T21546] ? __pfx_path_openat+0x10/0x10 [ 844.567151][T21546] do_file_open+0x20e/0x430 [ 844.567168][T21546] ? __pfx_do_file_open+0x10/0x10 [ 844.567197][T21546] ? alloc_fd+0x476/0x790 [ 844.567214][T21546] ? do_getname+0x191/0x390 [ 844.567234][T21546] do_sys_openat2+0x10d/0x1e0 [ 844.567253][T21546] ? __pfx_do_sys_openat2+0x10/0x10 [ 844.567283][T21546] __x64_sys_openat+0x12d/0x210 [ 844.567303][T21546] ? __pfx___x64_sys_openat+0x10/0x10 [ 844.567330][T21546] do_syscall_64+0x106/0xf80 [ 844.567348][T21546] ? clear_bhb_loop+0x40/0x90 [ 844.567367][T21546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.567383][T21546] RIP: 0033:0x7f317859c799 [ 844.567398][T21546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.567413][T21546] RSP: 002b:00007f31793bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 844.567429][T21546] RAX: ffffffffffffffda RBX: 00007f3178815fa0 RCX: 00007f317859c799 [ 844.567449][T21546] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 844.567459][T21546] RBP: 00007f3178632c99 R08: 0000000000000000 R09: 0000000000000000 [ 844.567469][T21546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.567478][T21546] R13: 00007f3178816038 R14: 00007f3178815fa0 R15: 00007ffeb780be98 [ 844.567500][T21546] [ 844.940044][T21550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3806'. [ 845.128998][T21548] CPU: 0 UID: 0 PID: 21548 Comm: syz.3.3805 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.129028][T21548] Tainted: [L]=SOFTLOCKUP [ 845.129034][T21548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 845.129043][T21548] Call Trace: [ 845.129049][T21548] [ 845.129056][T21548] dump_stack_lvl+0x100/0x190 [ 845.129083][T21548] should_fail_ex.cold+0x5/0xa [ 845.129102][T21548] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 845.129118][T21548] should_failslab+0xc2/0x120 [ 845.129134][T21548] __kmalloc_noprof+0xe0/0x850 [ 845.129156][T21548] ? trace_kmalloc+0x101/0x130 [ 845.129174][T21548] kernfs_fop_write_iter+0x26a/0x5f0 [ 845.129193][T21548] iter_file_splice_write+0x830/0x10a0 [ 845.129218][T21548] ? __pfx_iter_file_splice_write+0x10/0x10 [ 845.129237][T21548] ? __pfx_copy_splice_read+0x10/0x10 [ 845.129271][T21548] ? __pfx_iter_file_splice_write+0x10/0x10 [ 845.129288][T21548] direct_splice_actor+0x192/0x6c0 [ 845.129314][T21548] splice_direct_to_actor+0x345/0xa30 [ 845.129330][T21548] ? __pfx_direct_splice_actor+0x10/0x10 [ 845.129357][T21548] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 845.129378][T21548] do_splice_direct+0x174/0x240 [ 845.129393][T21548] ? __pfx_do_splice_direct+0x10/0x10 [ 845.129409][T21548] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 845.129435][T21548] ? rw_verify_area+0xce/0x6d0 [ 845.129459][T21548] do_sendfile+0xadc/0xe20 [ 845.129485][T21548] ? __pfx_do_sendfile+0x10/0x10 [ 845.129507][T21548] ? __fget_files+0x21f/0x3d0 [ 845.129526][T21548] __x64_sys_sendfile64+0x1d8/0x220 [ 845.129543][T21548] ? ksys_write+0x1ac/0x250 [ 845.129556][T21548] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 845.129579][T21548] do_syscall_64+0x106/0xf80 [ 845.129598][T21548] ? clear_bhb_loop+0x40/0x90 [ 845.129616][T21548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.129637][T21548] RIP: 0033:0x7fee6699c799 [ 845.129650][T21548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.129666][T21548] RSP: 002b:00007fee677b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 845.129680][T21548] RAX: ffffffffffffffda RBX: 00007fee66c15fa0 RCX: 00007fee6699c799 [ 845.129690][T21548] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 845.129699][T21548] RBP: 00007fee677b6090 R08: 0000000000000000 R09: 0000000000000000 [ 845.129708][T21548] R10: 0000000000000071 R11: 0000000000000246 R12: 0000000000000001 [ 845.129717][T21548] R13: 00007fee66c16038 R14: 00007fee66c15fa0 R15: 00007fffbdede138 [ 845.129737][T21548] [ 852.160677][T21646] FAULT_INJECTION: forcing a failure. [ 852.160677][T21646] name failslab, interval 1, probability 0, space 0, times 0 [ 852.230270][T21646] CPU: 0 UID: 0 PID: 21646 Comm: syz.1.3838 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.230297][T21646] Tainted: [L]=SOFTLOCKUP [ 852.230303][T21646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 852.230312][T21646] Call Trace: [ 852.230318][T21646] [ 852.230324][T21646] dump_stack_lvl+0x100/0x190 [ 852.230352][T21646] should_fail_ex.cold+0x5/0xa [ 852.230372][T21646] should_failslab+0xc2/0x120 [ 852.230388][T21646] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 852.230411][T21646] ? __proc_create+0x2cb/0x8c0 [ 852.230438][T21646] __proc_create+0x2cb/0x8c0 [ 852.230461][T21646] ? __pfx___proc_create+0x10/0x10 [ 852.230487][T21646] ? _raw_write_unlock+0x28/0x50 [ 852.230530][T21646] proc_create_reg+0x75/0x170 [ 852.230547][T21646] proc_create_net_data+0x8e/0x1c0 [ 852.230573][T21646] ? __pfx_proc_create_net_data+0x10/0x10 [ 852.230598][T21646] ? __pfx_proc_create_net_data+0x10/0x10 [ 852.230621][T21646] ? __pfx_uevent_net_rcv+0x10/0x10 [ 852.230656][T21646] ? __pfx_dev_proc_net_init+0x10/0x10 [ 852.230778][T21646] wext_proc_init+0x53/0x80 [ 852.230832][T21646] dev_proc_net_init+0x112/0x230 [ 852.230851][T21646] ops_init+0x1e2/0x5f0 [ 852.230879][T21646] setup_net+0x118/0x3a0 [ 852.230898][T21646] ? __pfx_setup_net+0x10/0x10 [ 852.230916][T21646] ? lockdep_init_map_type+0x5c/0x250 [ 852.230937][T21646] ? mutex_init_lockep+0x110/0x150 [ 852.230960][T21646] copy_net_ns+0x46f/0x7c0 [ 852.230983][T21646] create_new_namespaces+0x3ea/0xac0 [ 852.231007][T21646] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 852.231025][T21646] ksys_unshare+0x473/0xad0 [ 852.231052][T21646] ? __pfx_ksys_unshare+0x10/0x10 [ 852.231077][T21646] __x64_sys_unshare+0x31/0x40 [ 852.231096][T21646] do_syscall_64+0x106/0xf80 [ 852.231113][T21646] ? clear_bhb_loop+0x40/0x90 [ 852.231132][T21646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.231148][T21646] RIP: 0033:0x7f317859c799 [ 852.231162][T21646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.231177][T21646] RSP: 002b:00007f31793bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 852.231193][T21646] RAX: ffffffffffffffda RBX: 00007f3178815fa0 RCX: 00007f317859c799 [ 852.231204][T21646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 852.231213][T21646] RBP: 00007f3178632c99 R08: 0000000000000000 R09: 0000000000000000 [ 852.231223][T21646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.231232][T21646] R13: 00007f3178816038 R14: 00007f3178815fa0 R15: 00007ffeb780be98 [ 852.231253][T21646] [ 853.975440][T21664] netlink: 'syz.0.3841': attribute type 27 has an invalid length. [ 854.045053][T21664] netlink: 'syz.0.3841': attribute type 28 has an invalid length. [ 854.121747][T21664] netlink: 'syz.0.3841': attribute type 29 has an invalid length. [ 854.221057][T21664] netlink: 'syz.0.3841': attribute type 30 has an invalid length. [ 854.311026][T21664] netlink: 'syz.0.3841': attribute type 31 has an invalid length. [ 854.391762][T21664] netlink: 'syz.0.3841': attribute type 32 has an invalid length. [ 854.471685][T21664] netlink: 'syz.0.3841': attribute type 33 has an invalid length. [ 854.543906][T21664] netlink: 'syz.0.3841': attribute type 35 has an invalid length. [ 854.680732][T21664] netlink: 'syz.0.3841': attribute type 37 has an invalid length. [ 854.688604][T21664] netlink: 'syz.0.3841': attribute type 39 has an invalid length. [ 854.729579][ T3168] usb usb40-port2: attempt power cycle [ 854.788956][T21664] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3841'. [ 855.329505][ T3168] usb usb40-port2: unable to enumerate USB device [ 856.832266][T21709] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 856.969098][T21709] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 859.005780][T21747] zswap: compressor  not available [ 862.732609][T21822] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3881'. [ 863.295380][T21794] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 869.624879][T21906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3898'. [ 870.273913][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.280523][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.448328][T21914] FAULT_INJECTION: forcing a failure. [ 870.448328][T21914] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 870.622695][T21914] CPU: 0 UID: 0 PID: 21914 Comm: syz.2.3901 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.622723][T21914] Tainted: [L]=SOFTLOCKUP [ 870.622728][T21914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 870.622738][T21914] Call Trace: [ 870.622744][T21914] [ 870.622751][T21914] dump_stack_lvl+0x100/0x190 [ 870.622778][T21914] should_fail_ex.cold+0x5/0xa [ 870.622794][T21914] ? prepare_alloc_pages+0x16d/0x5f0 [ 870.622814][T21914] should_fail_alloc_page+0xeb/0x140 [ 870.622831][T21914] prepare_alloc_pages+0x1f0/0x5f0 [ 870.622848][T21914] ? kernel_text_address+0x8d/0x100 [ 870.622872][T21914] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 870.622901][T21914] ? copy_splice_read+0x1a3/0xb90 [ 870.622924][T21914] ? stack_trace_save+0x8e/0xc0 [ 870.622951][T21914] ? __pfx_stack_trace_save+0x10/0x10 [ 870.622964][T21914] ? do_splice_direct+0x174/0x240 [ 870.622979][T21914] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 870.623009][T21914] ? copy_splice_read+0x1a3/0xb90 [ 870.623031][T21914] ? kasan_save_stack+0x3f/0x50 [ 870.623054][T21914] ? kasan_save_stack+0x30/0x50 [ 870.623075][T21914] ? kasan_save_track+0x14/0x30 [ 870.623096][T21914] ? __kasan_kmalloc+0xaa/0xb0 [ 870.623116][T21914] ? __kmalloc_noprof+0x301/0x850 [ 870.623137][T21914] ? copy_splice_read+0x1a3/0xb90 [ 870.623159][T21914] ? do_splice_read+0x285/0x370 [ 870.623183][T21914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.623209][T21914] alloc_pages_bulk_noprof+0x782/0x1490 [ 870.623239][T21914] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 870.623266][T21914] ? __kmalloc_noprof+0x320/0x850 [ 870.623291][T21914] copy_splice_read+0x1e1/0xb90 [ 870.623319][T21914] ? __pfx_copy_splice_read+0x10/0x10 [ 870.623349][T21914] ? find_held_lock+0x2b/0x80 [ 870.623366][T21914] ? __pfx_copy_splice_read+0x10/0x10 [ 870.623390][T21914] do_splice_read+0x285/0x370 [ 870.623415][T21914] splice_direct_to_actor+0x2a1/0xa30 [ 870.623431][T21914] ? __pfx_direct_splice_actor+0x10/0x10 [ 870.623458][T21914] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 870.623478][T21914] do_splice_direct+0x174/0x240 [ 870.623496][T21914] ? __pfx_do_splice_direct+0x10/0x10 [ 870.623512][T21914] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 870.623538][T21914] ? rw_verify_area+0xce/0x6d0 [ 870.623561][T21914] do_sendfile+0xadc/0xe20 [ 870.623586][T21914] ? __pfx_do_sendfile+0x10/0x10 [ 870.623609][T21914] ? __fget_files+0x21f/0x3d0 [ 870.623627][T21914] __x64_sys_sendfile64+0x1d8/0x220 [ 870.623644][T21914] ? ksys_write+0x1ac/0x250 [ 870.623657][T21914] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 870.623679][T21914] do_syscall_64+0x106/0xf80 [ 870.623698][T21914] ? clear_bhb_loop+0x40/0x90 [ 870.623716][T21914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.623734][T21914] RIP: 0033:0x7f0c7259c799 [ 870.623748][T21914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.623763][T21914] RSP: 002b:00007f0c73499028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 870.623778][T21914] RAX: ffffffffffffffda RBX: 00007f0c72815fa0 RCX: 00007f0c7259c799 [ 870.623789][T21914] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 870.623798][T21914] RBP: 00007f0c73499090 R08: 0000000000000000 R09: 0000000000000000 [ 870.623807][T21914] R10: 0000000000000071 R11: 0000000000000246 R12: 0000000000000001 [ 870.623816][T21914] R13: 00007f0c72816038 R14: 00007f0c72815fa0 R15: 00007ffd10e191a8 [ 870.623836][T21914] [ 872.100034][T21916] zswap: compressor not available [ 880.482104][T22025] FAULT_INJECTION: forcing a failure. [ 880.482104][T22025] name fail_futex, interval 1, probability 0, space 0, times 0 [ 880.616910][T22025] CPU: 0 UID: 0 PID: 22025 Comm: syz.1.3926 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.616938][T22025] Tainted: [L]=SOFTLOCKUP [ 880.616944][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 880.616954][T22025] Call Trace: [ 880.616961][T22025] [ 880.616967][T22025] dump_stack_lvl+0x100/0x190 [ 880.616995][T22025] should_fail_ex.cold+0x5/0xa [ 880.617012][T22025] ? __kernel_text_address+0xd/0x30 [ 880.617037][T22025] get_futex_key+0x1d2/0x1620 [ 880.617057][T22025] ? __pfx_get_futex_key+0x10/0x10 [ 880.617076][T22025] ? putname+0xb1/0x110 [ 880.617092][T22025] ? stack_trace_save+0x8e/0xc0 [ 880.617107][T22025] ? __pfx_stack_trace_save+0x10/0x10 [ 880.617124][T22025] futex_wait_setup+0x83/0x510 [ 880.617150][T22025] __futex_wait+0x19f/0x300 [ 880.617173][T22025] ? __pfx___futex_wait+0x10/0x10 [ 880.617200][T22025] ? __pfx_futex_wake_mark+0x10/0x10 [ 880.617225][T22025] ? futex_hash+0x2c5/0x380 [ 880.617247][T22025] futex_wait+0xed/0x380 [ 880.617269][T22025] ? __pfx_futex_wait+0x10/0x10 [ 880.617321][T22025] ? putname+0xb1/0x110 [ 880.617337][T22025] ? kmem_cache_free+0x124/0x6a0 [ 880.617363][T22025] do_futex+0x1ef/0x350 [ 880.617383][T22025] ? __pfx_do_futex+0x10/0x10 [ 880.617401][T22025] ? __pfx_do_sys_openat2+0x10/0x10 [ 880.617421][T22025] ? __fget_files+0x21f/0x3d0 [ 880.617437][T22025] __x64_sys_futex+0x34f/0x4d0 [ 880.617457][T22025] ? __x64_sys_openat+0x12d/0x210 [ 880.617476][T22025] ? __pfx___x64_sys_futex+0x10/0x10 [ 880.617502][T22025] do_syscall_64+0x106/0xf80 [ 880.617521][T22025] ? clear_bhb_loop+0x40/0x90 [ 880.617539][T22025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.617556][T22025] RIP: 0033:0x7f317859c799 [ 880.617569][T22025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.617584][T22025] RSP: 002b:00007f31793bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 880.617600][T22025] RAX: ffffffffffffffda RBX: 00007f3178815fa8 RCX: 00007f317859c799 [ 880.617610][T22025] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3178815fa8 [ 880.617619][T22025] RBP: 00007f3178815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 880.617629][T22025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.617639][T22025] R13: 00007f3178816038 R14: 00007ffeb780bdb0 R15: 00007ffeb780be98 [ 880.617659][T22025] [ 882.938164][ T29] audit: type=1800 audit(2147483834.930:39): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3933" name="dbroot" dev="configfs" ino=103539 res=0 errno=0 [ 885.643714][T22081] FAULT_INJECTION: forcing a failure. [ 885.643714][T22081] name failslab, interval 1, probability 0, space 0, times 0 [ 885.700476][T22081] CPU: 0 UID: 0 PID: 22081 Comm: syz.2.3942 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.700505][T22081] Tainted: [L]=SOFTLOCKUP [ 885.700510][T22081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 885.700524][T22081] Call Trace: [ 885.700530][T22081] [ 885.700536][T22081] dump_stack_lvl+0x100/0x190 [ 885.700568][T22081] should_fail_ex.cold+0x5/0xa [ 885.700590][T22081] ? process_vm_rw_core.constprop.0+0x1d7/0x950 [ 885.700617][T22081] should_failslab+0xc2/0x120 [ 885.700637][T22081] __kmalloc_noprof+0xe0/0x850 [ 885.700658][T22081] ? find_held_lock+0x2b/0x80 [ 885.700679][T22081] process_vm_rw_core.constprop.0+0x1d7/0x950 [ 885.700708][T22081] ? futex_unqueue+0x13d/0x2c0 [ 885.700731][T22081] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 885.700759][T22081] ? import_ubuf+0x1b6/0x220 [ 885.700790][T22081] ? iovec_from_user+0xda/0x140 [ 885.700806][T22081] process_vm_rw+0x226/0x2d0 [ 885.700831][T22081] ? __pfx_process_vm_rw+0x10/0x10 [ 885.700858][T22081] ? ksys_write+0x190/0x250 [ 885.700895][T22081] ? xfd_validate_state+0x129/0x190 [ 885.700924][T22081] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 885.700949][T22081] ? do_syscall_64+0x95/0xf80 [ 885.700969][T22081] ? lockdep_hardirqs_on+0x78/0x100 [ 885.700988][T22081] do_syscall_64+0x106/0xf80 [ 885.701009][T22081] ? clear_bhb_loop+0x40/0x90 [ 885.701028][T22081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.701044][T22081] RIP: 0033:0x7f0c7259c799 [ 885.701059][T22081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.701075][T22081] RSP: 002b:00007f0c73499028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 885.701090][T22081] RAX: ffffffffffffffda RBX: 00007f0c72815fa0 RCX: 00007f0c7259c799 [ 885.701102][T22081] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 885.701111][T22081] RBP: 00007f0c72632c99 R08: 0000000000000004 R09: 0000000000000000 [ 885.701120][T22081] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 885.701129][T22081] R13: 00007f0c72816038 R14: 00007f0c72815fa0 R15: 00007ffd10e191a8 [ 885.701149][T22081] [ 888.849326][T22108] FAULT_INJECTION: forcing a failure. [ 888.849326][T22108] name failslab, interval 1, probability 0, space 0, times 0 [ 888.978060][T22108] CPU: 0 UID: 0 PID: 22108 Comm: syz.1.3947 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.978086][T22108] Tainted: [L]=SOFTLOCKUP [ 888.978091][T22108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 888.978101][T22108] Call Trace: [ 888.978107][T22108] [ 888.978114][T22108] dump_stack_lvl+0x100/0x190 [ 888.978142][T22108] should_fail_ex.cold+0x5/0xa [ 888.978161][T22108] ? process_vm_rw_core.constprop.0+0x1d7/0x950 [ 888.978185][T22108] should_failslab+0xc2/0x120 [ 888.978202][T22108] __kmalloc_noprof+0xe0/0x850 [ 888.978224][T22108] ? find_held_lock+0x2b/0x80 [ 888.978242][T22108] process_vm_rw_core.constprop.0+0x1d7/0x950 [ 888.978267][T22108] ? futex_unqueue+0x13d/0x2c0 [ 888.978290][T22108] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 888.978313][T22108] ? lockdep_hardirqs_on+0x78/0x100 [ 888.978332][T22108] ? import_ubuf+0x1b6/0x220 [ 888.978364][T22108] ? iovec_from_user+0xda/0x140 [ 888.978382][T22108] process_vm_rw+0x226/0x2d0 [ 888.978406][T22108] ? __pfx_process_vm_rw+0x10/0x10 [ 888.978433][T22108] ? ksys_write+0x190/0x250 [ 888.978464][T22108] ? xfd_validate_state+0x129/0x190 [ 888.978488][T22108] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 888.978512][T22108] ? do_syscall_64+0x95/0xf80 [ 888.978529][T22108] ? lockdep_hardirqs_on+0x78/0x100 [ 888.978546][T22108] do_syscall_64+0x106/0xf80 [ 888.978563][T22108] ? clear_bhb_loop+0x40/0x90 [ 888.978582][T22108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.978597][T22108] RIP: 0033:0x7f317859c799 [ 888.978611][T22108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.978626][T22108] RSP: 002b:00007f317939a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 888.978642][T22108] RAX: ffffffffffffffda RBX: 00007f3178816090 RCX: 00007f317859c799 [ 888.978652][T22108] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 888.978662][T22108] RBP: 00007f3178632c99 R08: 0000000000000004 R09: 0000000000000000 [ 888.978673][T22108] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 888.978683][T22108] R13: 00007f3178816128 R14: 00007f3178816090 R15: 00007ffeb780be98 [ 888.978702][T22108] [ 889.909094][T22119] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3951'. [ 890.929215][T22125] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3954'. [ 890.994773][T22134] FAULT_INJECTION: forcing a failure. [ 890.994773][T22134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.210654][T22134] CPU: 0 UID: 0 PID: 22134 Comm: syz.2.3954 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.210682][T22134] Tainted: [L]=SOFTLOCKUP [ 891.210688][T22134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 891.210698][T22134] Call Trace: [ 891.210704][T22134] [ 891.210711][T22134] dump_stack_lvl+0x100/0x190 [ 891.210744][T22134] should_fail_ex.cold+0x5/0xa [ 891.210765][T22134] core_sys_select+0x9b9/0xbb0 [ 891.210794][T22134] ? __pfx_core_sys_select+0x10/0x10 [ 891.210837][T22134] ? ktime_get_ts64+0x2d2/0x3f0 [ 891.210856][T22134] ? read_tsc+0x9/0x20 [ 891.210872][T22134] ? ktime_get_ts64+0x256/0x3f0 [ 891.210890][T22134] kern_select+0x20c/0x270 [ 891.210914][T22134] ? __pfx_kern_select+0x10/0x10 [ 891.210940][T22134] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 891.210961][T22134] __x64_sys_select+0xbd/0x160 [ 891.210983][T22134] ? do_syscall_64+0x95/0xf80 [ 891.211003][T22134] ? lockdep_hardirqs_on+0x78/0x100 [ 891.211021][T22134] do_syscall_64+0x106/0xf80 [ 891.211038][T22134] ? clear_bhb_loop+0x40/0x90 [ 891.211057][T22134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.211073][T22134] RIP: 0033:0x7f0c7259c799 [ 891.211086][T22134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.211102][T22134] RSP: 002b:00007f0c73457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 891.211118][T22134] RAX: ffffffffffffffda RBX: 00007f0c72816180 RCX: 00007f0c7259c799 [ 891.211128][T22134] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 891.211138][T22134] RBP: 00007f0c72632c99 R08: 00002000000001c0 R09: 0000000000000000 [ 891.211147][T22134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.211156][T22134] R13: 00007f0c72816218 R14: 00007f0c72816180 R15: 00007ffd10e191a8 [ 891.211175][T22134] [ 893.118785][T22184] sctp: [Deprecated]: syz.0.3964 (pid 22184) Use of int in max_burst socket option deprecated. [ 893.118785][T22184] Use struct sctp_assoc_value instead [ 905.055705][T21179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 905.072898][T21179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 905.084183][T21179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 905.093155][T21179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 905.101047][T21179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 905.730655][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.984931][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.218518][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.414377][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.693338][T22842] chnl_net:caif_netlink_parms(): no params data found [ 907.073359][ T58] bridge_slave_1: left allmulticast mode [ 907.109208][ T58] bridge_slave_1: left promiscuous mode [ 907.115000][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.148960][T21179] Bluetooth: hci5: command tx timeout [ 907.202946][ T58] bridge_slave_0: left allmulticast mode [ 907.252350][ T58] bridge_slave_0: left promiscuous mode [ 907.291670][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.241610][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.326690][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.439863][ T58] bond0 (unregistering): Released all slaves [ 908.643642][T22842] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.695414][T22842] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.760070][T22842] bridge_slave_0: entered allmulticast mode [ 908.823167][T22842] bridge_slave_0: entered promiscuous mode [ 908.859761][T22842] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.867060][T22842] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.951917][T22842] bridge_slave_1: entered allmulticast mode [ 908.997135][T22842] bridge_slave_1: entered promiscuous mode [ 909.183304][T22842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.234077][T21179] Bluetooth: hci5: command tx timeout [ 909.307239][T22842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.583261][T22842] team0: Port device team_slave_0 added [ 909.642866][T22842] team0: Port device team_slave_1 added [ 910.021969][T22842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.080769][T22842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.259086][T22842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.395013][T22842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.458830][T22842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.648961][T22842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.105646][T22842] hsr_slave_0: entered promiscuous mode [ 911.147875][T22842] hsr_slave_1: entered promiscuous mode [ 911.196928][T22842] debugfs: 'hsr0' already exists in 'hsr' [ 911.236583][T22842] Cannot create hsr debugfs directory [ 911.309155][T21179] Bluetooth: hci5: command tx timeout [ 911.319764][ T58] hsr_slave_0: left promiscuous mode [ 911.372907][ T58] hsr_slave_1: left promiscuous mode [ 911.424666][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.468568][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.533796][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.583333][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.643653][ T58] veth1_macvtap: left promiscuous mode [ 911.686422][ T58] veth0_macvtap: left promiscuous mode [ 911.707176][ T58] veth1_vlan: left promiscuous mode [ 911.738010][ T58] veth0_vlan: left promiscuous mode [ 912.611514][ T58] team0 (unregistering): Port device team_slave_1 removed [ 912.688017][ T58] team0 (unregistering): Port device team_slave_0 removed [ 913.389171][T21179] Bluetooth: hci5: command tx timeout [ 914.791322][T22842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 914.860387][T22842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 914.933498][T22842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 915.049124][T22842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 915.495820][T22842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.612901][T22842] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.710909][T20455] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.718060][T20455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.796352][T20455] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.803525][T20455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.765899][T22842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.991298][T22842] veth0_vlan: entered promiscuous mode [ 917.059763][T22842] veth1_vlan: entered promiscuous mode [ 917.208619][T22842] veth0_macvtap: entered promiscuous mode [ 917.262397][T22842] veth1_macvtap: entered promiscuous mode [ 917.355029][T22842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.435227][T22842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.522903][T20456] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.555726][T20456] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.623573][T20456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.681805][T20456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.022754][T20455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.074018][T20455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.175655][T20456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.233769][T20456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.019471][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 919.031145][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 919.042105][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 919.050498][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 919.058219][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 920.173477][ T9967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.541201][ T9967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.797707][ T9967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.088218][ T9967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.149589][ T5839] Bluetooth: hci0: command tx timeout [ 921.261562][T23451] chnl_net:caif_netlink_parms(): no params data found [ 922.496919][T23451] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.543864][T23451] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.576185][T23451] bridge_slave_0: entered allmulticast mode [ 922.607752][T23451] bridge_slave_0: entered promiscuous mode [ 922.636306][T23451] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.667713][T23451] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.716456][T23451] bridge_slave_1: entered allmulticast mode [ 922.759151][T23451] bridge_slave_1: entered promiscuous mode [ 922.932675][ T9967] bridge_slave_0: left allmulticast mode [ 922.938352][ T9967] bridge_slave_0: left promiscuous mode [ 923.004465][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.232061][ T5839] Bluetooth: hci0: command tx timeout [ 923.772557][ T9967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.821709][ T9967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.892379][ T9967] bond0 (unregistering): Released all slaves [ 924.036629][T23451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.215308][T23451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.703517][T23451] team0: Port device team_slave_0 added [ 924.739721][T23451] team0: Port device team_slave_1 added [ 925.054467][T23451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.098781][T23451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.253096][T23451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.310824][ T5839] Bluetooth: hci0: command tx timeout [ 925.331566][T23451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.338528][T23451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.518571][T23451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.919623][T23451] hsr_slave_0: entered promiscuous mode [ 925.959070][T23451] hsr_slave_1: entered promiscuous mode [ 926.008903][T23451] debugfs: 'hsr0' already exists in 'hsr' [ 926.014666][T23451] Cannot create hsr debugfs directory [ 927.389430][T21179] Bluetooth: hci0: command tx timeout [ 928.114858][ T9967] hsr_slave_0: left promiscuous mode [ 928.151441][ T9967] hsr_slave_1: left promiscuous mode [ 928.179287][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 928.186722][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.266316][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 928.314124][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 928.381062][ T9967] veth1_macvtap: left promiscuous mode [ 928.405109][ T9967] veth0_macvtap: left promiscuous mode [ 928.421422][ T9967] veth1_vlan: left promiscuous mode [ 928.426891][ T9967] veth0_vlan: left promiscuous mode [ 928.680373][T23834] netlink: 472 bytes leftover after parsing attributes in process `syz.1.5319'. [ 929.217408][ T9967] team0 (unregistering): Port device team_slave_1 removed [ 929.268230][ T9967] team0 (unregistering): Port device team_slave_0 removed [ 930.253924][T23451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 930.311777][T23451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 930.380126][T23451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 930.450442][T23451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 930.822678][T23451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.912726][T23451] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.008425][T20450] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.015597][T20450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.098193][T20450] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.105349][T20450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.389733][T16034] usb usb40-port2: attempt power cycle [ 931.649203][T23963] Invalid ELF header magic: != ELF [ 931.713554][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.720693][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.944023][T23451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.969679][T16034] usb usb40-port2: unable to enumerate USB device [ 932.125293][T23451] veth0_vlan: entered promiscuous mode [ 932.214817][T23451] veth1_vlan: entered promiscuous mode [ 932.338354][T23451] veth0_macvtap: entered promiscuous mode [ 932.397280][T23451] veth1_macvtap: entered promiscuous mode [ 932.511224][T23451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.610984][T23451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.666207][ T9967] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.717109][ T9967] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.815944][ T9967] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.863669][ T9967] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.220237][ T9967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.275836][ T9967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.400874][T20450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.447557][T20450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.195129][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 934.205850][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 934.215175][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 934.223459][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 934.231297][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 934.312523][T24060] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 934.807274][ T9957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.100509][ T9957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.246624][T24093] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 935.346009][ T9957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.649678][ T9957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.012926][T24058] chnl_net:caif_netlink_parms(): no params data found [ 936.349125][T21179] Bluetooth: hci1: command tx timeout [ 936.405332][ T9957] bridge_slave_1: left allmulticast mode [ 936.438208][ T9957] bridge_slave_1: left promiscuous mode [ 936.468080][ T9957] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.572980][ T9957] bridge_slave_0: left allmulticast mode [ 936.598545][ T9957] bridge_slave_0: left promiscuous mode [ 936.624850][ T9957] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.625295][ T9957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.650266][ T9957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.665879][ T9957] bond0 (unregistering): Released all slaves [ 937.835811][T24058] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.873891][T24058] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.905694][T24058] bridge_slave_0: entered allmulticast mode [ 937.928319][T24058] bridge_slave_0: entered promiscuous mode [ 937.959869][T24058] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.967565][T24058] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.033590][T24058] bridge_slave_1: entered allmulticast mode [ 938.062157][T24058] bridge_slave_1: entered promiscuous mode [ 938.429666][T21179] Bluetooth: hci1: command tx timeout [ 938.613859][T24058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.845595][T24058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.327522][T24058] team0: Port device team_slave_0 added [ 939.357717][T24058] team0: Port device team_slave_1 added [ 939.700156][T24058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.736736][T24058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.861210][T24058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.907172][T24058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.941918][T24058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.069516][T24058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.137001][T24225] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 940.186117][ T9957] hsr_slave_0: left promiscuous mode [ 940.228329][ T9957] hsr_slave_1: left promiscuous mode [ 940.307676][ T9957] veth1_macvtap: left promiscuous mode [ 940.369682][ T9957] veth0_macvtap: left promiscuous mode [ 940.375243][ T9957] veth1_vlan: left promiscuous mode [ 940.406467][ T9957] veth0_vlan: left promiscuous mode [ 940.509572][T21179] Bluetooth: hci1: command tx timeout [ 942.092797][ T9957] team0 (unregistering): Port device team_slave_1 removed [ 942.121577][ T9957] team0 (unregistering): Port device team_slave_0 removed [ 942.468271][T24058] hsr_slave_0: entered promiscuous mode [ 942.548593][T24058] hsr_slave_1: entered promiscuous mode [ 942.591846][T21179] Bluetooth: hci1: command tx timeout [ 942.613945][T24058] debugfs: 'hsr0' already exists in 'hsr' [ 942.636029][T24058] Cannot create hsr debugfs directory [ 944.214165][T24324] zswap: compressor not available [ 944.368249][T24344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5617'. [ 944.418297][T24058] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 944.764709][T24058] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 944.780284][T24058] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 944.809766][T24058] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 945.082082][T24058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.157555][T24058] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.187040][T20449] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.187135][T20449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.188416][T20449] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.188480][T20449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.339764][T24058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 945.956353][T24058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.166250][T24058] veth0_vlan: entered promiscuous mode [ 946.233134][T24058] veth1_vlan: entered promiscuous mode [ 946.326899][T24058] veth0_macvtap: entered promiscuous mode [ 946.404210][T24058] veth1_macvtap: entered promiscuous mode [ 946.538477][T24058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.612230][T24058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.754694][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.802667][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.043952][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.126657][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.689573][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.697402][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.894503][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.954667][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.351589][T24477] program syz.0.5464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 948.891122][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 948.901140][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 948.923223][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 948.945392][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 948.954578][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 950.366873][T24518] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 950.991846][ T5839] Bluetooth: hci2: command tx timeout [ 951.235933][T24539] validate_nla: 1 callbacks suppressed [ 951.235950][T24539] netlink: 'syz.3.5686': attribute type 21 has an invalid length. [ 951.366547][T24539] netlink: 334 bytes leftover after parsing attributes in process `syz.3.5686'. [ 951.395299][ T9951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.726517][ T9951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.141505][ T9951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.623853][ T9951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.834657][T24489] chnl_net:caif_netlink_parms(): no params data found [ 953.069020][ T5839] Bluetooth: hci2: command tx timeout [ 953.298432][T24489] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.321645][T24489] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.348953][T24489] bridge_slave_0: entered allmulticast mode [ 953.369984][T24489] bridge_slave_0: entered promiscuous mode [ 953.397638][T24489] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.424154][T24489] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.444357][T24489] bridge_slave_1: entered allmulticast mode [ 953.472909][T24489] bridge_slave_1: entered promiscuous mode [ 953.781733][T24489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.793799][T24578] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 953.866016][T24578] FAULT_INJECTION: forcing a failure. [ 953.866016][T24578] name failslab, interval 1, probability 0, space 0, times 0 [ 953.915409][T24489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.927688][T24578] CPU: 0 UID: 0 PID: 24578 Comm: syz.0.5693 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.927715][T24578] Tainted: [L]=SOFTLOCKUP [ 953.927722][T24578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 953.927732][T24578] Call Trace: [ 953.927737][T24578] [ 953.927745][T24578] dump_stack_lvl+0x100/0x190 [ 953.927775][T24578] should_fail_ex.cold+0x5/0xa [ 953.927795][T24578] should_failslab+0xc2/0x120 [ 953.927813][T24578] __kmalloc_node_noprof+0xe6/0x850 [ 953.927835][T24578] ? __rb_allocate_pages+0x589/0xf50 [ 953.927877][T24578] __rb_allocate_pages+0x589/0xf50 [ 953.927905][T24578] ring_buffer_subbuf_order_set+0x3ef/0x18c0 [ 953.927932][T24578] ? tracing_stop_tr+0xf6/0x210 [ 953.927955][T24578] ? __pfx_ring_buffer_subbuf_order_set+0x10/0x10 [ 953.927976][T24578] ? __pfx___might_resched+0x10/0x10 [ 953.927999][T24578] ? iovec_from_user+0xda/0x140 [ 953.928019][T24578] buffer_subbuf_size_write+0x182/0x280 [ 953.928044][T24578] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 953.928073][T24578] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 953.928096][T24578] vfs_writev+0x5ea/0xe10 [ 953.928125][T24578] ? rcu_is_watching+0x12/0xc0 [ 953.928157][T24578] ? __pfx_vfs_writev+0x10/0x10 [ 953.928178][T24578] ? fdget_pos+0x2aa/0x380 [ 953.928210][T24578] ? __fget_files+0x21f/0x3d0 [ 953.928230][T24578] ? do_writev+0x13e/0x340 [ 953.928251][T24578] do_writev+0x13e/0x340 [ 953.928274][T24578] ? __pfx_do_writev+0x10/0x10 [ 953.928301][T24578] do_syscall_64+0x106/0xf80 [ 953.928320][T24578] ? clear_bhb_loop+0x40/0x90 [ 953.928339][T24578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.928354][T24578] RIP: 0033:0x7f8210f9c799 [ 953.928369][T24578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.928385][T24578] RSP: 002b:00007f8211eef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 953.928400][T24578] RAX: ffffffffffffffda RBX: 00007f8211215fa0 RCX: 00007f8210f9c799 [ 953.928411][T24578] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000008 [ 953.928421][T24578] RBP: 00007f8211032c99 R08: 0000000000000000 R09: 0000000000000000 [ 953.928431][T24578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.928440][T24578] R13: 00007f8211216038 R14: 00007f8211215fa0 R15: 00007ffdf1f63ae8 [ 953.928461][T24578] [ 954.641183][ T9951] bridge_slave_1: left allmulticast mode [ 954.665332][ T9951] bridge_slave_1: left promiscuous mode [ 954.698939][ T9951] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.799366][ T9951] bridge_slave_0: left allmulticast mode [ 954.823741][ T9951] bridge_slave_0: left promiscuous mode [ 954.855251][ T9951] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.155116][ T5839] Bluetooth: hci2: command tx timeout [ 956.432586][ T9951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.475989][ T9951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.546353][ T9951] bond0 (unregistering): Released all slaves [ 956.698753][T24489] team0: Port device team_slave_0 added [ 956.707791][T24489] team0: Port device team_slave_1 added [ 956.860030][T24617] FAULT_INJECTION: forcing a failure. [ 956.860030][T24617] name failslab, interval 1, probability 0, space 0, times 0 [ 956.931680][T24617] CPU: 0 UID: 0 PID: 24617 Comm: syz.0.5699 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.931708][T24617] Tainted: [L]=SOFTLOCKUP [ 956.931713][T24617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 956.931723][T24617] Call Trace: [ 956.931729][T24617] [ 956.931736][T24617] dump_stack_lvl+0x100/0x190 [ 956.931763][T24617] should_fail_ex.cold+0x5/0xa [ 956.931781][T24617] should_failslab+0xc2/0x120 [ 956.931798][T24617] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 956.931822][T24617] ? __alloc_skb+0x140/0x710 [ 956.931861][T24617] __alloc_skb+0x140/0x710 [ 956.931876][T24617] ? __alloc_skb+0x5b7/0x710 [ 956.931892][T24617] ? __pfx___alloc_skb+0x10/0x10 [ 956.931914][T24617] netlink_alloc_large_skb+0x69/0x150 [ 956.931945][T24617] netlink_sendmsg+0x680/0xda0 [ 956.931968][T24617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.931987][T24617] ? __import_iovec+0x1d2/0x640 [ 956.932004][T24617] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 956.932029][T24617] ____sys_sendmsg+0x9e1/0xb70 [ 956.932051][T24617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.932072][T24617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 956.932098][T24617] ? __pfx__kstrtoull+0x10/0x10 [ 956.932127][T24617] ___sys_sendmsg+0x190/0x1e0 [ 956.932152][T24617] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.932184][T24617] ? find_held_lock+0x2b/0x80 [ 956.932210][T24617] __sys_sendmmsg+0x205/0x430 [ 956.932232][T24617] ? __pfx___sys_sendmmsg+0x10/0x10 [ 956.932256][T24617] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 956.932284][T24617] ? fput+0x79/0x100 [ 956.932302][T24617] ? ksys_write+0x1ac/0x250 [ 956.932315][T24617] ? __pfx_ksys_write+0x10/0x10 [ 956.932332][T24617] __x64_sys_sendmmsg+0x9c/0x100 [ 956.932350][T24617] ? lockdep_hardirqs_on+0x78/0x100 [ 956.932367][T24617] do_syscall_64+0x106/0xf80 [ 956.932385][T24617] ? clear_bhb_loop+0x40/0x90 [ 956.932403][T24617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.932419][T24617] RIP: 0033:0x7f8210f9c799 [ 956.932432][T24617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.932447][T24617] RSP: 002b:00007f8211eef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 956.932463][T24617] RAX: ffffffffffffffda RBX: 00007f8211215fa0 RCX: 00007f8210f9c799 [ 956.932473][T24617] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 956.932483][T24617] RBP: 00007f8211eef090 R08: 0000000000000000 R09: 0000000000000000 [ 956.932492][T24617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.932501][T24617] R13: 00007f8211216038 R14: 00007f8211215fa0 R15: 00007ffdf1f63ae8 [ 956.932520][T24617] [ 957.586269][ T5839] Bluetooth: hci2: command tx timeout [ 958.467923][T24489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.514121][T24489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.710923][T24489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.765859][T24489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.821005][T24489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.958009][T24489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.253327][T24489] hsr_slave_0: entered promiscuous mode [ 959.293783][T24489] hsr_slave_1: entered promiscuous mode [ 959.329364][T24489] debugfs: 'hsr0' already exists in 'hsr' [ 959.365368][T24489] Cannot create hsr debugfs directory [ 959.724094][T24672] FAULT_INJECTION: forcing a failure. [ 959.724094][T24672] name failslab, interval 1, probability 0, space 0, times 0 [ 959.768843][T24672] CPU: 0 UID: 0 PID: 24672 Comm: syz.0.5709 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.768870][T24672] Tainted: [L]=SOFTLOCKUP [ 959.768875][T24672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 959.768884][T24672] Call Trace: [ 959.768890][T24672] [ 959.768896][T24672] dump_stack_lvl+0x100/0x190 [ 959.768925][T24672] should_fail_ex.cold+0x5/0xa [ 959.768943][T24672] should_failslab+0xc2/0x120 [ 959.768959][T24672] __kmalloc_cache_noprof+0x7a/0x6f0 [ 959.768979][T24672] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 959.769087][T24672] snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 959.769120][T24672] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 959.769150][T24672] ? _mutex_trylock_nest_lock+0x170/0x310 [ 959.769170][T24672] ? snd_pcm_oss_mmap+0x557/0x6c0 [ 959.769193][T24672] ? __pfx__mutex_trylock_nest_lock+0x10/0x10 [ 959.769212][T24672] ? __pfx___vma_start_write+0x10/0x10 [ 959.769237][T24672] snd_pcm_oss_mmap+0x575/0x6c0 [ 959.769262][T24672] __mmap_region+0x1443/0x29e0 [ 959.769287][T24672] ? __pfx___mmap_region+0x10/0x10 [ 959.769306][T24672] ? process_measurement+0x1f4/0x2350 [ 959.769368][T24672] ? is_bpf_text_address+0x94/0x1a0 [ 959.769394][T24672] ? process_measurement+0x1f4/0x2350 [ 959.769440][T24672] ? rcu_is_watching+0x12/0xc0 [ 959.769463][T24672] ? cap_capable+0x107/0x460 [ 959.769497][T24672] mmap_region+0x30a/0x3e0 [ 959.769522][T24672] do_mmap+0xc63/0x12f0 [ 959.769543][T24672] ? __pfx_do_mmap+0x10/0x10 [ 959.769564][T24672] ? __pfx_down_write_killable+0x10/0x10 [ 959.769589][T24672] vm_mmap_pgoff+0x29e/0x470 [ 959.769613][T24672] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 959.769628][T24672] ? __fget_files+0x215/0x3d0 [ 959.769646][T24672] ? __fget_files+0x21f/0x3d0 [ 959.769663][T24672] ksys_mmap_pgoff+0x3c8/0x650 [ 959.769681][T24672] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 959.769696][T24672] ? fput+0x79/0x100 [ 959.769713][T24672] ? ksys_write+0x1ac/0x250 [ 959.769726][T24672] ? __pfx_ksys_write+0x10/0x10 [ 959.769742][T24672] __x64_sys_mmap+0x125/0x190 [ 959.769766][T24672] do_syscall_64+0x106/0xf80 [ 959.769784][T24672] ? clear_bhb_loop+0x40/0x90 [ 959.769803][T24672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.769819][T24672] RIP: 0033:0x7f8210f9c799 [ 959.769833][T24672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.769848][T24672] RSP: 002b:00007f8211ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 959.769863][T24672] RAX: ffffffffffffffda RBX: 00007f8211216090 RCX: 00007f8210f9c799 [ 959.769874][T24672] RDX: 0000001000000016 RSI: 0000000000000008 RDI: 0000000000000000 [ 959.769883][T24672] RBP: 00007f8211ece090 R08: 0000000000000003 R09: 0000400180000000 [ 959.769893][T24672] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 959.769902][T24672] R13: 00007f8211216128 R14: 00007f8211216090 R15: 00007ffdf1f63ae8 [ 959.769922][T24672] [ 961.321842][T24689] FAULT_INJECTION: forcing a failure. [ 961.321842][T24689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.378856][T24689] CPU: 0 UID: 0 PID: 24689 Comm: syz.0.5714 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.378887][T24689] Tainted: [L]=SOFTLOCKUP [ 961.378893][T24689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 961.378902][T24689] Call Trace: [ 961.378909][T24689] [ 961.378915][T24689] dump_stack_lvl+0x100/0x190 [ 961.378944][T24689] should_fail_ex.cold+0x5/0xa [ 961.378962][T24689] _copy_from_iter+0x1f4/0x1690 [ 961.378981][T24689] ? __asan_memset+0x23/0x50 [ 961.379003][T24689] ? __pfx__copy_from_iter+0x10/0x10 [ 961.379017][T24689] ? __pfx___alloc_skb+0x10/0x10 [ 961.379043][T24689] netlink_sendmsg+0x808/0xda0 [ 961.379068][T24689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.379093][T24689] ? __import_iovec+0x1d2/0x640 [ 961.379109][T24689] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 961.379134][T24689] ____sys_sendmsg+0x9e1/0xb70 [ 961.379155][T24689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.379176][T24689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 961.379201][T24689] ? __pfx__kstrtoull+0x10/0x10 [ 961.379223][T24689] ___sys_sendmsg+0x190/0x1e0 [ 961.379249][T24689] ? __pfx____sys_sendmsg+0x10/0x10 [ 961.379280][T24689] ? find_held_lock+0x2b/0x80 [ 961.379306][T24689] __sys_sendmmsg+0x205/0x430 [ 961.379327][T24689] ? __pfx___sys_sendmmsg+0x10/0x10 [ 961.379351][T24689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 961.379379][T24689] ? fput+0x79/0x100 [ 961.379395][T24689] ? ksys_write+0x1ac/0x250 [ 961.379409][T24689] ? __pfx_ksys_write+0x10/0x10 [ 961.379426][T24689] __x64_sys_sendmmsg+0x9c/0x100 [ 961.379463][T24689] ? lockdep_hardirqs_on+0x78/0x100 [ 961.379482][T24689] do_syscall_64+0x106/0xf80 [ 961.379500][T24689] ? clear_bhb_loop+0x40/0x90 [ 961.379518][T24689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.379534][T24689] RIP: 0033:0x7f8210f9c799 [ 961.379548][T24689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.379563][T24689] RSP: 002b:00007f8211eef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 961.379578][T24689] RAX: ffffffffffffffda RBX: 00007f8211215fa0 RCX: 00007f8210f9c799 [ 961.379589][T24689] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 961.379598][T24689] RBP: 00007f8211eef090 R08: 0000000000000000 R09: 0000000000000000 [ 961.379607][T24689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.379615][T24689] R13: 00007f8211216038 R14: 00007f8211215fa0 R15: 00007ffdf1f63ae8 [ 961.379635][T24689] [ 963.415730][ T9951] hsr_slave_0: left promiscuous mode [ 963.446122][ T9951] hsr_slave_1: left promiscuous mode [ 963.478477][ T9951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.513795][ T9951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.642084][ T9951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.698776][ T9951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.800548][ T9951] veth1_macvtap: left promiscuous mode [ 963.806082][ T9951] veth0_macvtap: left promiscuous mode [ 963.851134][ T9951] veth1_vlan: left promiscuous mode [ 963.881730][ T9951] veth0_vlan: left promiscuous mode [ 965.374612][ T9951] team0 (unregistering): Port device team_slave_1 removed [ 965.425571][ T9951] team0 (unregistering): Port device team_slave_0 removed [ 966.953278][T24489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 967.036573][T24489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 967.115565][T24489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 967.280657][T24489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 967.683505][T24489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.772802][T24489] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.814630][ T9951] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.821811][ T9951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.880517][ T9951] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.887685][ T9951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.896609][T24761] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 967.916013][T24761] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 967.940739][T24761] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 967.968574][T24761] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 967.992173][T24761] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 968.028572][T24761] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 968.072993][T24761] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 968.095470][T24761] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 968.125232][T24761] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 968.186390][T24761] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 968.229687][T24761] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 968.295415][T24761] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 968.712784][T24811] Console: switching to colour VGA+ 80x25 [ 969.020154][T24489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.110471][T24825] FAULT_INJECTION: forcing a failure. [ 969.110471][T24825] name failslab, interval 1, probability 0, space 0, times 0 [ 969.196619][T24489] veth0_vlan: entered promiscuous mode [ 969.203983][T24825] CPU: 0 UID: 0 PID: 24825 Comm: syz.0.5734 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.204009][T24825] Tainted: [L]=SOFTLOCKUP [ 969.204015][T24825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 969.204025][T24825] Call Trace: [ 969.204030][T24825] [ 969.204037][T24825] dump_stack_lvl+0x100/0x190 [ 969.204065][T24825] should_fail_ex.cold+0x5/0xa [ 969.204084][T24825] ? tomoyo_encode2+0xfb/0x3c0 [ 969.204102][T24825] should_failslab+0xc2/0x120 [ 969.204119][T24825] __kmalloc_noprof+0xe0/0x850 [ 969.204142][T24825] ? d_absolute_path+0x136/0x1b0 [ 969.204168][T24825] tomoyo_encode2+0xfb/0x3c0 [ 969.204188][T24825] tomoyo_encode+0x29/0x50 [ 969.204204][T24825] tomoyo_realpath_from_path+0x18c/0x690 [ 969.204225][T24825] tomoyo_path_number_perm+0x23c/0x580 [ 969.204249][T24825] ? tomoyo_path_number_perm+0x22e/0x580 [ 969.204273][T24825] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 969.204315][T24825] ? find_held_lock+0x2b/0x80 [ 969.204329][T24825] ? __fget_files+0x215/0x3d0 [ 969.204342][T24825] ? hook_file_ioctl_common+0x146/0x410 [ 969.204370][T24825] ? __fget_files+0x21f/0x3d0 [ 969.204386][T24825] security_file_ioctl+0xd3/0x230 [ 969.204412][T24825] __x64_sys_ioctl+0xb7/0x210 [ 969.204441][T24825] do_syscall_64+0x106/0xf80 [ 969.204460][T24825] ? clear_bhb_loop+0x40/0x90 [ 969.204479][T24825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.204495][T24825] RIP: 0033:0x7f8210f9c799 [ 969.204509][T24825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.204523][T24825] RSP: 002b:00007f8211eef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 969.204538][T24825] RAX: ffffffffffffffda RBX: 00007f8211215fa0 RCX: 00007f8210f9c799 [ 969.204548][T24825] RDX: 0000000000000000 RSI: 0000000000005001 RDI: 0000000000000003 [ 969.204557][T24825] RBP: 00007f8211eef090 R08: 0000000000000000 R09: 0000000000000000 [ 969.204566][T24825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.204575][T24825] R13: 00007f8211216038 R14: 00007f8211215fa0 R15: 00007ffdf1f63ae8 [ 969.204595][T24825] [ 969.204627][T24825] ERROR: Out of memory at tomoyo_realpath_from_path. [ 969.463452][T24489] veth1_vlan: entered promiscuous mode [ 969.502378][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 969.776998][T24489] veth0_macvtap: entered promiscuous mode [ 969.833606][T24489] veth1_macvtap: entered promiscuous mode [ 969.899816][T24489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.943894][T24489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.069219][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 970.080213][T24843] netlink: 'syz.1.5737': attribute type 21 has an invalid length. [ 970.088166][T24843] netlink: 334 bytes leftover after parsing attributes in process `syz.1.5737'. [ 970.145896][ T9957] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.158867][ T9957] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.167629][ T9957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.179820][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 970.204992][T21179] Bluetooth: hci2: command 0x0c1a tx timeout [ 970.226250][T24841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5738'. [ 970.261010][ T9957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.314755][T24841] bond0: (slave bond_slave_0): Releasing backup interface [ 970.732245][ T9957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.778781][ T9957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.922377][ T9957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.962727][ T9957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.974537][T24864] FAULT_INJECTION: forcing a failure. [ 970.974537][T24864] name failslab, interval 1, probability 0, space 0, times 0 [ 971.031459][T24864] CPU: 0 UID: 0 PID: 24864 Comm: syz.0.5742 Tainted: G L syzkaller #0 PREEMPT(full) [ 971.031486][T24864] Tainted: [L]=SOFTLOCKUP [ 971.031492][T24864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 971.031501][T24864] Call Trace: [ 971.031507][T24864] [ 971.031513][T24864] dump_stack_lvl+0x100/0x190 [ 971.031541][T24864] should_fail_ex.cold+0x5/0xa [ 971.031560][T24864] should_failslab+0xc2/0x120 [ 971.031576][T24864] __kmalloc_cache_noprof+0x7a/0x6f0 [ 971.031596][T24864] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 971.031622][T24864] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 971.031648][T24864] snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 971.031682][T24864] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 971.031711][T24864] ? _mutex_trylock_nest_lock+0x170/0x310 [ 971.031731][T24864] ? snd_pcm_oss_mmap+0x557/0x6c0 [ 971.031761][T24864] snd_pcm_oss_mmap+0x575/0x6c0 [ 971.031786][T24864] __mmap_region+0x1443/0x29e0 [ 971.031811][T24864] ? __pfx___mmap_region+0x10/0x10 [ 971.031830][T24864] ? process_measurement+0x1f4/0x2350 [ 971.031884][T24864] ? is_bpf_text_address+0x94/0x1a0 [ 971.031912][T24864] ? process_measurement+0x1f4/0x2350 [ 971.031959][T24864] ? rcu_is_watching+0x12/0xc0 [ 971.031981][T24864] ? cap_capable+0x107/0x460 [ 971.032005][T24864] mmap_region+0x30a/0x3e0 [ 971.032030][T24864] do_mmap+0xc63/0x12f0 [ 971.032051][T24864] ? __pfx_do_mmap+0x10/0x10 [ 971.032067][T24864] ? __pfx_down_write_killable+0x10/0x10 [ 971.032091][T24864] vm_mmap_pgoff+0x29e/0x470 [ 971.032112][T24864] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 971.032127][T24864] ? __fget_files+0x215/0x3d0 [ 971.032144][T24864] ? __fget_files+0x21f/0x3d0 [ 971.032162][T24864] ksys_mmap_pgoff+0x3c8/0x650 [ 971.032180][T24864] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 971.032194][T24864] ? fput+0x79/0x100 [ 971.032211][T24864] ? ksys_write+0x1ac/0x250 [ 971.032224][T24864] ? __pfx_ksys_write+0x10/0x10 [ 971.032240][T24864] __x64_sys_mmap+0x125/0x190 [ 971.032264][T24864] do_syscall_64+0x106/0xf80 [ 971.032282][T24864] ? clear_bhb_loop+0x40/0x90 [ 971.032300][T24864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.032316][T24864] RIP: 0033:0x7f8210f9c799 [ 971.032329][T24864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.032344][T24864] RSP: 002b:00007f8211ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 971.032359][T24864] RAX: ffffffffffffffda RBX: 00007f8211216090 RCX: 00007f8210f9c799 [ 971.032370][T24864] RDX: 0000001000000016 RSI: 0000000000000008 RDI: 0000000000000000 [ 971.032379][T24864] RBP: 00007f8211ece090 R08: 0000000000000003 R09: 0000400180000000 [ 971.032388][T24864] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 971.032397][T24864] R13: 00007f8211216128 R14: 00007f8211216090 R15: 00007ffdf1f63ae8 [ 971.032417][T24864] [ 971.688739][T24849] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 971.698731][T24849] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 971.718571][T24849] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 971.725077][T24849] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 972.142854][T24884] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 972.749063][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 973.366275][T24909] netlink: 'syz.1.5752': attribute type 21 has an invalid length. [ 973.399659][T24909] netlink: 334 bytes leftover after parsing attributes in process `syz.1.5752'. [ 973.850877][T24919] FAULT_INJECTION: forcing a failure. [ 973.850877][T24919] name failslab, interval 1, probability 0, space 0, times 0 [ 973.880646][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 973.886824][T21179] Bluetooth: hci1: command 0x0c1a tx timeout [ 973.894623][T21179] Bluetooth: hci0: command 0x0c1a tx timeout [ 973.961953][T24919] CPU: 0 UID: 0 PID: 24919 Comm: syz.2.5756 Tainted: G L syzkaller #0 PREEMPT(full) [ 973.961979][T24919] Tainted: [L]=SOFTLOCKUP [ 973.961984][T24919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 973.961994][T24919] Call Trace: [ 973.962000][T24919] [ 973.962006][T24919] dump_stack_lvl+0x100/0x190 [ 973.962034][T24919] should_fail_ex.cold+0x5/0xa [ 973.962053][T24919] should_failslab+0xc2/0x120 [ 973.962069][T24919] __kmalloc_cache_noprof+0x7a/0x6f0 [ 973.962089][T24919] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 973.962119][T24919] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 973.962143][T24919] ? trace_contention_end+0xe5/0x180 [ 973.962165][T24919] ? __mutex_lock+0x26a/0x1b90 [ 973.962185][T24919] ? __mutex_lock+0x7ca/0x1b90 [ 973.962203][T24919] ? snd_pcm_oss_make_ready+0xcb/0x1b0 [ 973.962227][T24919] ? find_held_lock+0x2b/0x80 [ 973.962241][T24919] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 973.962266][T24919] ? __pfx___mutex_lock+0x10/0x10 [ 973.962290][T24919] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 973.962311][T24919] ? __pfx_default_wake_function+0x10/0x10 [ 973.962331][T24919] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 973.962357][T24919] snd_pcm_oss_sync+0x1de/0x840 [ 973.962374][T24919] snd_pcm_oss_ioctl+0x19ce/0x3720 [ 973.962389][T24919] ? find_held_lock+0x2b/0x80 [ 973.962403][T24919] ? __fget_files+0x215/0x3d0 [ 973.962424][T24919] ? hook_file_ioctl_common+0x146/0x410 [ 973.962450][T24919] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 973.962467][T24919] ? __fget_files+0x21f/0x3d0 [ 973.962483][T24919] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 973.962502][T24919] __x64_sys_ioctl+0x18e/0x210 [ 973.962542][T24919] do_syscall_64+0x106/0xf80 [ 973.962560][T24919] ? clear_bhb_loop+0x40/0x90 [ 973.962579][T24919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.962595][T24919] RIP: 0033:0x7f66d6d9c799 [ 973.962614][T24919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.962629][T24919] RSP: 002b:00007f66d7cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 973.962644][T24919] RAX: ffffffffffffffda RBX: 00007f66d7015fa0 RCX: 00007f66d6d9c799 [ 973.962655][T24919] RDX: 0000000000000000 RSI: 0000000000005001 RDI: 0000000000000003 [ 973.962664][T24919] RBP: 00007f66d7cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 973.962673][T24919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.962682][T24919] R13: 00007f66d7016038 R14: 00007f66d7015fa0 R15: 00007ffc1f9c7608 [ 973.962702][T24919] [ 974.835456][T24921] Bluetooth: hci5: command 0x0c1a tx timeout [ 975.127597][T24936] synth uevent: /devices/virtual/net/lowpan0: unknown uevent action string [ 975.263778][T24936] net lowpan0: uevent: failed to send synthetic uevent: -22 [ 975.360288][T24925] block nbd8: shutting down sockets [ 975.950736][T24921] Bluetooth: hci0: command 0x0c1a tx timeout [ 975.958212][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 975.964272][T21179] Bluetooth: hci1: command 0x0c1a tx timeout [ 976.039151][T24967] FAULT_INJECTION: forcing a failure. [ 976.039151][T24967] name failslab, interval 1, probability 0, space 0, times 0 [ 976.126458][T24967] CPU: 0 UID: 0 PID: 24967 Comm: syz.1.5766 Tainted: G L syzkaller #0 PREEMPT(full) [ 976.126485][T24967] Tainted: [L]=SOFTLOCKUP [ 976.126491][T24967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 976.126500][T24967] Call Trace: [ 976.126506][T24967] [ 976.126512][T24967] dump_stack_lvl+0x100/0x190 [ 976.126540][T24967] should_fail_ex.cold+0x5/0xa [ 976.126561][T24967] ? constrain_params_by_rules+0x175/0xcc0 [ 976.126592][T24967] should_failslab+0xc2/0x120 [ 976.126609][T24967] __kmalloc_noprof+0xe0/0x850 [ 976.126631][T24967] ? unwind_get_return_address+0x59/0xa0 [ 976.126658][T24967] constrain_params_by_rules+0x175/0xcc0 [ 976.126680][T24967] ? stack_trace_save+0x8e/0xc0 [ 976.126698][T24967] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 976.126714][T24967] ? bpf_ksym_find+0x124/0x1c0 [ 976.126735][T24967] ? __kasan_kmalloc+0xaa/0xb0 [ 976.126757][T24967] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 976.126782][T24967] ? snd_pcm_oss_mmap+0x575/0x6c0 [ 976.126804][T24967] ? __mmap_region+0x1443/0x29e0 [ 976.126831][T24967] ? snd_interval_refine+0x2d0/0x580 [ 976.126938][T24967] snd_pcm_hw_refine+0x7e7/0xad0 [ 976.126959][T24967] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 976.126985][T24967] ? snd_interval_refine+0x2d0/0x580 [ 976.127012][T24967] snd_pcm_oss_change_params_locked+0xdb3/0x39f0 [ 976.127045][T24967] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 976.127075][T24967] ? _mutex_trylock_nest_lock+0x170/0x310 [ 976.127094][T24967] ? snd_pcm_oss_mmap+0x557/0x6c0 [ 976.127124][T24967] snd_pcm_oss_mmap+0x575/0x6c0 [ 976.127149][T24967] __mmap_region+0x1443/0x29e0 [ 976.127173][T24967] ? __pfx___mmap_region+0x10/0x10 [ 976.127193][T24967] ? process_measurement+0x1f4/0x2350 [ 976.127247][T24967] ? is_bpf_text_address+0x94/0x1a0 [ 976.127269][T24967] ? process_measurement+0x1f4/0x2350 [ 976.127314][T24967] ? rcu_is_watching+0x12/0xc0 [ 976.127337][T24967] ? cap_capable+0x107/0x460 [ 976.127361][T24967] mmap_region+0x30a/0x3e0 [ 976.127393][T24967] do_mmap+0xc63/0x12f0 [ 976.127414][T24967] ? __pfx_do_mmap+0x10/0x10 [ 976.127430][T24967] ? __pfx_down_write_killable+0x10/0x10 [ 976.127455][T24967] vm_mmap_pgoff+0x29e/0x470 [ 976.127476][T24967] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 976.127491][T24967] ? __fget_files+0x215/0x3d0 [ 976.127508][T24967] ? __fget_files+0x21f/0x3d0 [ 976.127526][T24967] ksys_mmap_pgoff+0x3c8/0x650 [ 976.127544][T24967] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 976.127558][T24967] ? fput+0x79/0x100 [ 976.127575][T24967] ? ksys_write+0x1ac/0x250 [ 976.127588][T24967] ? __pfx_ksys_write+0x10/0x10 [ 976.127604][T24967] __x64_sys_mmap+0x125/0x190 [ 976.127628][T24967] do_syscall_64+0x106/0xf80 [ 976.127647][T24967] ? clear_bhb_loop+0x40/0x90 [ 976.127665][T24967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.127681][T24967] RIP: 0033:0x7ffacc79c799 [ 976.127695][T24967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.127709][T24967] RSP: 002b:00007ffacd66d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 976.127725][T24967] RAX: ffffffffffffffda RBX: 00007ffacca16090 RCX: 00007ffacc79c799 [ 976.127736][T24967] RDX: 0000001000000016 RSI: 0000000000000008 RDI: 0000000000000000 [ 976.127745][T24967] RBP: 00007ffacd66d090 R08: 0000000000000003 R09: 0000400180000000 [ 976.127754][T24967] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 976.127763][T24967] R13: 00007ffacca16128 R14: 00007ffacca16090 R15: 00007ffd71c2a238 [ 976.127783][T24967] [ 977.615066][T24989] FAULT_INJECTION: forcing a failure. [ 977.615066][T24989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.677255][T24989] CPU: 0 UID: 0 PID: 24989 Comm: syz.0.5776 Tainted: G L syzkaller #0 PREEMPT(full) [ 977.677282][T24989] Tainted: [L]=SOFTLOCKUP [ 977.677288][T24989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 977.677297][T24989] Call Trace: [ 977.677302][T24989] [ 977.677309][T24989] dump_stack_lvl+0x100/0x190 [ 977.677336][T24989] should_fail_ex.cold+0x5/0xa [ 977.677355][T24989] _copy_to_iter+0x1f3/0x1720 [ 977.677382][T24989] ? sysfs_file_kobj+0xe4/0x290 [ 977.677403][T24989] ? __pfx__copy_to_iter+0x10/0x10 [ 977.677427][T24989] ? kernfs_seq_stop+0xcd/0x120 [ 977.677454][T24989] ? kernfs_put_active+0x93/0xe0 [ 977.677480][T24989] seq_read_iter+0xdab/0x1270 [ 977.677512][T24989] kernfs_fop_read_iter+0x46c/0x610 [ 977.677529][T24989] ? rw_verify_area+0xce/0x6d0 [ 977.677550][T24989] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 977.677568][T24989] vfs_read+0x825/0xb30 [ 977.677594][T24989] ? __pfx_vfs_read+0x10/0x10 [ 977.677628][T24989] ksys_read+0x12a/0x250 [ 977.677651][T24989] ? __pfx_ksys_read+0x10/0x10 [ 977.677679][T24989] do_syscall_64+0x106/0xf80 [ 977.677697][T24989] ? clear_bhb_loop+0x40/0x90 [ 977.677716][T24989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.677732][T24989] RIP: 0033:0x7f8210f9c799 [ 977.677745][T24989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.677761][T24989] RSP: 002b:00007f8211ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 977.677776][T24989] RAX: ffffffffffffffda RBX: 00007f8211216090 RCX: 00007f8210f9c799 [ 977.677786][T24989] RDX: 000000000000002d RSI: 0000200000000080 RDI: 0000000000000004 [ 977.677795][T24989] RBP: 00007f8211ece090 R08: 0000000000000000 R09: 0000000000000000 [ 977.677805][T24989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.677814][T24989] R13: 00007f8211216128 R14: 00007f8211216090 R15: 00007ffdf1f63ae8 [ 977.677834][T24989] [ 978.572011][T25010] netlink: 93 bytes leftover after parsing attributes in process `syz.3.5779'. [ 978.682282][T25006] netlink: 93 bytes leftover after parsing attributes in process `syz.3.5779'. [ 983.991380][T25124] FAULT_INJECTION: forcing a failure. [ 983.991380][T25124] name failslab, interval 1, probability 0, space 0, times 0 [ 984.121435][T25124] CPU: 0 UID: 0 PID: 25124 Comm: syz.0.5813 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.121462][T25124] Tainted: [L]=SOFTLOCKUP [ 984.121469][T25124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 984.121479][T25124] Call Trace: [ 984.121484][T25124] [ 984.121491][T25124] dump_stack_lvl+0x100/0x190 [ 984.121520][T25124] should_fail_ex.cold+0x5/0xa [ 984.121539][T25124] should_failslab+0xc2/0x120 [ 984.121555][T25124] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 984.121579][T25124] ? key_alloc+0x3c5/0x1310 [ 984.121608][T25124] ? rcu_is_watching+0x12/0xc0 [ 984.121634][T25124] key_alloc+0x3c5/0x1310 [ 984.121658][T25124] ? __pfx_key_alloc+0x10/0x10 [ 984.121679][T25124] keyring_alloc+0x44/0xc0 [ 984.121698][T25124] lookup_user_key+0x9b8/0x1300 [ 984.121724][T25124] ? __pfx_lookup_user_key+0x10/0x10 [ 984.121747][T25124] ? do_futex+0x192/0x350 [ 984.121767][T25124] ? __pfx_do_futex+0x10/0x10 [ 984.121787][T25124] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 984.121818][T25124] ? __x64_sys_futex+0x34f/0x4d0 [ 984.121837][T25124] ? __x64_sys_futex+0x358/0x4d0 [ 984.121861][T25124] keyctl_watch_key+0x52/0x500 [ 984.121886][T25124] __do_sys_keyctl+0x29f/0x5a0 [ 984.121909][T25124] do_syscall_64+0x106/0xf80 [ 984.121928][T25124] ? clear_bhb_loop+0x40/0x90 [ 984.121947][T25124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.121963][T25124] RIP: 0033:0x7f8210f9c799 [ 984.121978][T25124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.121993][T25124] RSP: 002b:00007f8211eef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 984.122008][T25124] RAX: ffffffffffffffda RBX: 00007f8211215fa0 RCX: 00007f8210f9c799 [ 984.122018][T25124] RDX: 0000000000000005 RSI: ffffffffffffffff RDI: 0200000000000020 [ 984.122028][T25124] RBP: 00007f8211032c99 R08: 0000000000000008 R09: 0000000000000000 [ 984.122038][T25124] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 984.122047][T25124] R13: 00007f8211216038 R14: 00007f8211215fa0 R15: 00007ffdf1f63ae8 [ 984.122067][T25124] [ 987.618851][ T9957] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.974900][T25179] nbd: couldn't find a device at index 35644 [ 993.053312][T25223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5830'. [ 993.164278][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.171196][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.189740][T25228] netlink: 25 bytes leftover after parsing attributes in process `syz.0.5830'. [ 993.260539][T25223] FAULT_INJECTION: forcing a failure. [ 993.260539][T25223] name fail_futex, interval 1, probability 0, space 0, times 0 [ 993.408908][T25223] CPU: 0 UID: 0 PID: 25223 Comm: syz.0.5830 Tainted: G L syzkaller #0 PREEMPT(full) [ 993.408936][T25223] Tainted: [L]=SOFTLOCKUP [ 993.408942][T25223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 993.408953][T25223] Call Trace: [ 993.408959][T25223] [ 993.408966][T25223] dump_stack_lvl+0x100/0x190 [ 993.408995][T25223] should_fail_ex.cold+0x5/0xa [ 993.409015][T25223] get_futex_key+0x1d2/0x1620 [ 993.409035][T25223] ? __pfx_get_futex_key+0x10/0x10 [ 993.409054][T25223] ? update_se+0x94/0x760 [ 993.409080][T25223] futex_wait_setup+0x83/0x510 [ 993.409107][T25223] __futex_wait+0x19f/0x300 [ 993.409130][T25223] ? __pfx___futex_wait+0x10/0x10 [ 993.409151][T25223] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 993.409176][T25223] ? lockdep_hardirqs_on+0x78/0x100 [ 993.409197][T25223] ? __pfx_futex_wake_mark+0x10/0x10 [ 993.409223][T25223] ? find_held_lock+0x2b/0x80 [ 993.409237][T25223] ? futex_wake+0x456/0x530 [ 993.409263][T25223] futex_wait+0xed/0x380 [ 993.409285][T25223] ? __pfx_futex_wait+0x10/0x10 [ 993.409318][T25223] do_futex+0x1ef/0x350 [ 993.409337][T25223] ? __pfx_do_futex+0x10/0x10 [ 993.409357][T25223] ? __do_sys_capset+0xfb/0x460 [ 993.409375][T25223] __x64_sys_futex+0x34f/0x4d0 [ 993.409394][T25223] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 993.409411][T25223] ? __pfx___x64_sys_futex+0x10/0x10 [ 993.409437][T25223] do_syscall_64+0x106/0xf80 [ 993.409455][T25223] ? clear_bhb_loop+0x40/0x90 [ 993.409473][T25223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.409489][T25223] RIP: 0033:0x7f8210f9c799 [ 993.409503][T25223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.409518][T25223] RSP: 002b:00007f8211eef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 993.409533][T25223] RAX: ffffffffffffffda RBX: 00007f8211215fa8 RCX: 00007f8210f9c799 [ 993.409544][T25223] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8211215fa8 [ 993.409553][T25223] RBP: 00007f8211215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 993.409562][T25223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 993.409571][T25223] R13: 00007f8211216038 R14: 00007ffdf1f63a00 R15: 00007ffdf1f63ae8 [ 993.409591][T25223] [ 995.561363][T25242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5834'. [ 996.525409][T25271] FAULT_INJECTION: forcing a failure. [ 996.525409][T25271] name failslab, interval 1, probability 0, space 0, times 0 [ 996.749262][T25271] CPU: 0 UID: 0 PID: 25271 Comm: syz.0.5841 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.749289][T25271] Tainted: [L]=SOFTLOCKUP [ 996.749295][T25271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 996.749304][T25271] Call Trace: [ 996.749310][T25271] [ 996.749316][T25271] dump_stack_lvl+0x100/0x190 [ 996.749348][T25271] should_fail_ex.cold+0x5/0xa [ 996.749370][T25271] should_failslab+0xc2/0x120 [ 996.749386][T25271] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 996.749409][T25271] ? do_getname+0x35/0x390 [ 996.749431][T25271] do_getname+0x35/0x390 [ 996.749450][T25271] do_sys_openat2+0xc5/0x1e0 [ 996.749475][T25271] ? __pfx_do_sys_openat2+0x10/0x10 [ 996.749501][T25271] __x64_sys_open+0xfe/0x1d0 [ 996.749520][T25271] ? __pfx___x64_sys_open+0x10/0x10 [ 996.749546][T25271] do_syscall_64+0x106/0xf80 [ 996.749565][T25271] ? clear_bhb_loop+0x40/0x90 [ 996.749583][T25271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.749598][T25271] RIP: 0033:0x7f8210f9c799 [ 996.749612][T25271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.749627][T25271] RSP: 002b:00007f8211eef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 996.749642][T25271] RAX: ffffffffffffffda RBX: 00007f8211215fa0 RCX: 00007f8210f9c799 [ 996.749652][T25271] RDX: 00000000000001d0 RSI: 0000000000145042 RDI: 0000200000000000 [ 996.749662][T25271] RBP: 00007f8211032c99 R08: 0000000000000000 R09: 0000000000000000 [ 996.749671][T25271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.749680][T25271] R13: 00007f8211216038 R14: 00007f8211215fa0 R15: 00007ffdf1f63ae8 [ 996.749699][T25271] [ 997.340693][T25284] Invalid ELF header magic: != ELF [ 998.156356][T25315] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 998.543052][T25322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5851'. [ 998.880112][T25322] i: entered promiscuous mode [ 999.508702][T25341] netlink: set zone limit has 8 unknown bytes [ 1000.168009][T25352] zram: Added device: zram1 [ 1001.942018][T25397] Invalid ELF header magic: != ELF [ 1002.008178][T25400] FAULT_INJECTION: forcing a failure. [ 1002.008178][T25400] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.119483][T25400] CPU: 0 UID: 0 PID: 25400 Comm: syz.1.5869 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.119511][T25400] Tainted: [L]=SOFTLOCKUP [ 1002.119516][T25400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1002.119526][T25400] Call Trace: [ 1002.119531][T25400] [ 1002.119538][T25400] dump_stack_lvl+0x100/0x190 [ 1002.119566][T25400] should_fail_ex.cold+0x5/0xa [ 1002.119585][T25400] should_failslab+0xc2/0x120 [ 1002.119601][T25400] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1002.119621][T25400] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 1002.119650][T25400] snd_pcm_hw_param_near.constprop.0+0xbc/0x850 [ 1002.119675][T25400] ? lockdep_hardirqs_on+0x78/0x100 [ 1002.119695][T25400] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1002.119719][T25400] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 1002.119742][T25400] ? kfree+0x1f6/0x6b0 [ 1002.119763][T25400] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 1002.119796][T25400] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1002.119820][T25400] ? __pfx___mutex_lock+0x10/0x10 [ 1002.119847][T25400] ? __pfx_default_wake_function+0x10/0x10 [ 1002.119871][T25400] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1002.119897][T25400] snd_pcm_oss_sync+0x1de/0x840 [ 1002.119915][T25400] snd_pcm_oss_ioctl+0x19ce/0x3720 [ 1002.119933][T25400] ? find_held_lock+0x2b/0x80 [ 1002.119947][T25400] ? __fget_files+0x215/0x3d0 [ 1002.119960][T25400] ? hook_file_ioctl_common+0x146/0x410 [ 1002.119986][T25400] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1002.120003][T25400] ? __fget_files+0x21f/0x3d0 [ 1002.120020][T25400] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1002.120036][T25400] __x64_sys_ioctl+0x18e/0x210 [ 1002.120065][T25400] do_syscall_64+0x106/0xf80 [ 1002.120083][T25400] ? clear_bhb_loop+0x40/0x90 [ 1002.120102][T25400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.120118][T25400] RIP: 0033:0x7ffacc79c799 [ 1002.120131][T25400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.120146][T25400] RSP: 002b:00007ffacd68e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1002.120161][T25400] RAX: ffffffffffffffda RBX: 00007ffacca15fa0 RCX: 00007ffacc79c799 [ 1002.120171][T25400] RDX: 0000000000000000 RSI: 0000000000005001 RDI: 0000000000000003 [ 1002.120181][T25400] RBP: 00007ffacd68e090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.120190][T25400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.120199][T25400] R13: 00007ffacca16038 R14: 00007ffacca15fa0 R15: 00007ffd71c2a238 [ 1002.120219][T25400] [ 1002.853058][T25416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1002.905222][T25416] netlink: 25 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1003.383521][T25420] FAULT_INJECTION: forcing a failure. [ 1003.383521][T25420] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.448782][T25420] CPU: 0 UID: 0 PID: 25420 Comm: syz.2.5873 Tainted: G L syzkaller #0 PREEMPT(full) [ 1003.448809][T25420] Tainted: [L]=SOFTLOCKUP [ 1003.448815][T25420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1003.448824][T25420] Call Trace: [ 1003.448830][T25420] [ 1003.448836][T25420] dump_stack_lvl+0x100/0x190 [ 1003.448864][T25420] should_fail_ex.cold+0x5/0xa [ 1003.448882][T25420] ? alloc_pipe_info+0x1ec/0x590 [ 1003.448897][T25420] should_failslab+0xc2/0x120 [ 1003.448913][T25420] __kmalloc_noprof+0xe0/0x850 [ 1003.448940][T25420] alloc_pipe_info+0x1ec/0x590 [ 1003.448957][T25420] splice_direct_to_actor+0x78f/0xa30 [ 1003.448973][T25420] ? __lock_acquire+0x4a5/0x2630 [ 1003.448991][T25420] ? __pfx_direct_splice_actor+0x10/0x10 [ 1003.449015][T25420] ? __pfx_aa_file_perm+0x10/0x10 [ 1003.449035][T25420] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1003.449056][T25420] do_splice_direct+0x174/0x240 [ 1003.449071][T25420] ? __pfx_do_splice_direct+0x10/0x10 [ 1003.449087][T25420] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1003.449113][T25420] ? rw_verify_area+0xce/0x6d0 [ 1003.449136][T25420] do_sendfile+0xadc/0xe20 [ 1003.449162][T25420] ? __pfx_do_sendfile+0x10/0x10 [ 1003.449184][T25420] ? __fget_files+0x21f/0x3d0 [ 1003.449202][T25420] __x64_sys_sendfile64+0x1d8/0x220 [ 1003.449219][T25420] ? ksys_write+0x1ac/0x250 [ 1003.449232][T25420] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1003.449255][T25420] do_syscall_64+0x106/0xf80 [ 1003.449273][T25420] ? clear_bhb_loop+0x40/0x90 [ 1003.449292][T25420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.449307][T25420] RIP: 0033:0x7f66d6d9c799 [ 1003.449321][T25420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.449337][T25420] RSP: 002b:00007f66d7cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1003.449352][T25420] RAX: ffffffffffffffda RBX: 00007f66d7015fa0 RCX: 00007f66d6d9c799 [ 1003.449363][T25420] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1003.449372][T25420] RBP: 00007f66d7cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.449381][T25420] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1003.449390][T25420] R13: 00007f66d7016038 R14: 00007f66d7015fa0 R15: 00007ffc1f9c7608 [ 1003.449409][T25420] [ 1004.932392][T25440] hub 1-0:1.0: USB hub found [ 1004.975752][T25440] hub 1-0:1.0: 1 port detected [ 1005.193502][ C0] sd 0:0:1:0: [sda] tag#8253 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1005.204095][ C0] sd 0:0:1:0: [sda] tag#8253 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 1007.366070][T25499] FAULT_INJECTION: forcing a failure. [ 1007.366070][T25499] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.426548][T25499] CPU: 0 UID: 0 PID: 25499 Comm: syz.2.5897 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.426574][T25499] Tainted: [L]=SOFTLOCKUP [ 1007.426579][T25499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1007.426589][T25499] Call Trace: [ 1007.426595][T25499] [ 1007.426601][T25499] dump_stack_lvl+0x100/0x190 [ 1007.426629][T25499] should_fail_ex.cold+0x5/0xa [ 1007.426647][T25499] ? copy_splice_read+0x1a3/0xb90 [ 1007.426670][T25499] should_failslab+0xc2/0x120 [ 1007.426686][T25499] __kmalloc_noprof+0xe0/0x850 [ 1007.426712][T25499] copy_splice_read+0x1a3/0xb90 [ 1007.426740][T25499] ? __pfx_copy_splice_read+0x10/0x10 [ 1007.426772][T25499] ? look_up_lock_class+0x55/0x120 [ 1007.426795][T25499] ? lockdep_init_map_type+0x5c/0x250 [ 1007.426817][T25499] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1007.426841][T25499] ? __pfx_copy_splice_read+0x10/0x10 [ 1007.426865][T25499] do_splice_read+0x285/0x370 [ 1007.426890][T25499] splice_direct_to_actor+0x2a1/0xa30 [ 1007.426907][T25499] ? __pfx_direct_splice_actor+0x10/0x10 [ 1007.426933][T25499] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1007.426954][T25499] do_splice_direct+0x174/0x240 [ 1007.426969][T25499] ? __pfx_do_splice_direct+0x10/0x10 [ 1007.426984][T25499] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1007.427011][T25499] ? rw_verify_area+0xce/0x6d0 [ 1007.427034][T25499] do_sendfile+0xadc/0xe20 [ 1007.427060][T25499] ? __pfx_do_sendfile+0x10/0x10 [ 1007.427082][T25499] ? __fget_files+0x21f/0x3d0 [ 1007.427101][T25499] __x64_sys_sendfile64+0x1d8/0x220 [ 1007.427117][T25499] ? ksys_write+0x1ac/0x250 [ 1007.427130][T25499] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1007.427153][T25499] do_syscall_64+0x106/0xf80 [ 1007.427170][T25499] ? clear_bhb_loop+0x40/0x90 [ 1007.427189][T25499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.427204][T25499] RIP: 0033:0x7f66d6d9c799 [ 1007.427218][T25499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.427232][T25499] RSP: 002b:00007f66d7cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1007.427248][T25499] RAX: ffffffffffffffda RBX: 00007f66d7015fa0 RCX: 00007f66d6d9c799 [ 1007.427258][T25499] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1007.427270][T25499] RBP: 00007f66d7cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.427279][T25499] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1007.427288][T25499] R13: 00007f66d7016038 R14: 00007f66d7015fa0 R15: 00007ffc1f9c7608 [ 1007.427308][T25499] [ 1010.119775][T25546] netlink: 93 bytes leftover after parsing attributes in process `syz.3.5911'. [ 1010.206134][T25544] netlink: 93 bytes leftover after parsing attributes in process `syz.3.5911'. [ 1010.698046][T25563] netlink: 93 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1010.779850][T25554] netlink: 93 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1011.965964][T25585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5920'. [ 1013.332728][T25617] NFSD: Failed to start, no listeners configured. [ 1013.935737][T25629] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1014.129464][T25630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5929'. [ 1014.188696][T25630] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1014.224455][T25629] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. [ 1014.295389][T25629] TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. [ 1014.311622][T25629] MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. [ 1014.368551][T25626] smpboot: CPU 1 is now offline [ 1014.397038][T25626] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1014.519946][T25626] ------------[ cut here ]------------ [ 1014.525414][T25626] DEAD callback error for CPU1 [ 1014.525439][T25626] WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020, CPU#0: syz.1.5929/25626 [ 1014.539712][T25626] Modules linked in: [ 1014.544334][T25626] CPU: 0 UID: 0 PID: 25626 Comm: syz.1.5929 Tainted: G L syzkaller #0 PREEMPT(full) [ 1014.555726][T25626] Tainted: [L]=SOFTLOCKUP [ 1014.561474][T25626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1014.572621][T25626] RIP: 0010:_cpu_down+0x75c/0x1020 [ 1014.577792][T25626] Code: cb 7a f6 89 ee bf 91 00 00 00 e8 ff c5 7a f6 81 fd 91 00 00 00 0f 84 6b 02 00 00 e8 3e cb 7a f6 48 8d 3d c7 55 4f 05 44 89 ee <67> 48 0f b9 3a e9 3a fa ff ff 45 31 ff e9 32 fa ff ff e8 1d cb 7a [ 1014.599195][T25626] RSP: 0018:ffffc90005957aa8 EFLAGS: 00010283 [ 1014.605292][T25626] RAX: 000000000000c8f1 RBX: ffff8880b85242e0 RCX: ffffc900100b1000 [ 1014.614075][T25626] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff90dca010 [ 1014.622129][T25626] RBP: 0000000000000092 R08: 0000000000000005 R09: 0000000000000091 [ 1014.630198][T25626] R10: 0000000000000092 R11: 0000000000000001 R12: 00000000000000ed [ 1014.638184][T25626] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffffff5 [ 1014.646312][T25626] FS: 00007ffacd66d6c0(0000) GS:ffff88812434d000(0000) knlGS:0000000000000000 [ 1014.655888][T25626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1014.663715][T25626] CR2: 0000001b2f4c3ff8 CR3: 00000000747e0000 CR4: 00000000003526f0 [ 1014.672509][T25626] Call Trace: [ 1014.676050][T25626] [ 1014.679223][T25626] ? __pfx_cpu_subsys_offline+0x10/0x10 [ 1014.684800][T25626] cpu_device_down+0x82/0xc0 [ 1014.689466][T25626] device_offline+0x2a7/0x3c0 [ 1014.694147][T25626] ? __pfx_device_offline+0x10/0x10 [ 1014.699450][T25626] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1014.705392][T25626] ? __pfx_online_store+0x10/0x10 [ 1014.710496][T25626] online_store+0xd1/0x180 [ 1014.714916][T25626] ? __pfx_online_store+0x10/0x10 [ 1014.720010][T25626] ? __print_lock_name+0x60/0x80 [ 1014.724981][T25626] ? sysfs_file_kobj+0xe4/0x290 [ 1014.729878][T25626] ? sysfs_file_kobj+0xe4/0x290 [ 1014.734734][T25626] dev_attr_store+0x58/0x80 [ 1014.739293][T25626] ? __pfx_dev_attr_store+0x10/0x10 [ 1014.744491][T25626] sysfs_kf_write+0xf2/0x150 [ 1014.749148][T25626] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1014.754635][T25626] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1014.760067][T25626] vfs_write+0x6ac/0x1070 [ 1014.765125][T25626] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1014.771417][T25626] ? __pfx_vfs_write+0x10/0x10 [ 1014.776470][T25626] ksys_write+0x12a/0x250 [ 1014.781116][T25626] ? __pfx_ksys_write+0x10/0x10 [ 1014.786069][T25626] do_syscall_64+0x106/0xf80 [ 1014.790758][T25626] ? clear_bhb_loop+0x40/0x90 [ 1014.795458][T25626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.801592][T25626] RIP: 0033:0x7ffacc79c799 [ 1014.806042][T25626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.826211][T25626] RSP: 002b:00007ffacd66d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1014.834729][T25626] RAX: ffffffffffffffda RBX: 00007ffacca16090 RCX: 00007ffacc79c799 [ 1014.842867][T25626] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000003 [ 1014.850878][T25626] RBP: 00007ffacc832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1014.859052][T25626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.867902][T25626] R13: 00007ffacca16128 R14: 00007ffacca16090 R15: 00007ffd71c2a238 [ 1014.876414][T25626] [ 1014.879648][T25626] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1014.886919][T25626] CPU: 0 UID: 0 PID: 25626 Comm: syz.1.5929 Tainted: G L syzkaller #0 PREEMPT(full) [ 1014.897950][T25626] Tainted: [L]=SOFTLOCKUP [ 1014.902266][T25626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1014.912315][T25626] Call Trace: [ 1014.915625][T25626] [ 1014.918545][T25626] dump_stack_lvl+0x100/0x190 [ 1014.923231][T25626] vpanic+0x552/0x970 [ 1014.927207][T25626] ? __pfx_vpanic+0x10/0x10 [ 1014.931738][T25626] panic+0xd1/0xe0 [ 1014.935453][T25626] ? __pfx_panic+0x10/0x10 [ 1014.939868][T25626] check_panic_on_warn.cold+0x19/0x34 [ 1014.945235][T25626] ? _cpu_down+0x759/0x1020 [ 1014.949752][T25626] __warn.cold+0x191/0x348 [ 1014.954167][T25626] __report_bug+0x296/0x3d0 [ 1014.958735][T25626] ? _cpu_down+0x759/0x1020 [ 1014.963240][T25626] ? __pfx___report_bug+0x10/0x10 [ 1014.968251][T25626] ? __pfx_try_to_wake_up+0x10/0x10 [ 1014.973462][T25626] report_bug_entry+0xe1/0x290 [ 1014.978317][T25626] ? _cpu_down+0x75c/0x1020 [ 1014.982825][T25626] handle_bug+0x1cd/0x2a0 [ 1014.987269][T25626] exc_invalid_op+0x17/0x50 [ 1014.991783][T25626] asm_exc_invalid_op+0x1a/0x20 [ 1014.996647][T25626] RIP: 0010:_cpu_down+0x75c/0x1020 [ 1015.001786][T25626] Code: cb 7a f6 89 ee bf 91 00 00 00 e8 ff c5 7a f6 81 fd 91 00 00 00 0f 84 6b 02 00 00 e8 3e cb 7a f6 48 8d 3d c7 55 4f 05 44 89 ee <67> 48 0f b9 3a e9 3a fa ff ff 45 31 ff e9 32 fa ff ff e8 1d cb 7a [ 1015.021502][T25626] RSP: 0018:ffffc90005957aa8 EFLAGS: 00010283 [ 1015.027680][T25626] RAX: 000000000000c8f1 RBX: ffff8880b85242e0 RCX: ffffc900100b1000 [ 1015.035678][T25626] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff90dca010 [ 1015.043716][T25626] RBP: 0000000000000092 R08: 0000000000000005 R09: 0000000000000091 [ 1015.051707][T25626] R10: 0000000000000092 R11: 0000000000000001 R12: 00000000000000ed [ 1015.059730][T25626] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffffff5 [ 1015.067895][T25626] ? _cpu_down+0x752/0x1020 [ 1015.072414][T25626] ? __pfx_cpu_subsys_offline+0x10/0x10 [ 1015.077980][T25626] cpu_device_down+0x82/0xc0 [ 1015.082703][T25626] device_offline+0x2a7/0x3c0 [ 1015.087485][T25626] ? __pfx_device_offline+0x10/0x10 [ 1015.092784][T25626] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1015.098708][T25626] ? __pfx_online_store+0x10/0x10 [ 1015.103764][T25626] online_store+0xd1/0x180 [ 1015.108182][T25626] ? __pfx_online_store+0x10/0x10 [ 1015.113301][T25626] ? __print_lock_name+0x60/0x80 [ 1015.118327][T25626] ? sysfs_file_kobj+0xe4/0x290 [ 1015.123200][T25626] ? sysfs_file_kobj+0xe4/0x290 [ 1015.128228][T25626] dev_attr_store+0x58/0x80 [ 1015.132745][T25626] ? __pfx_dev_attr_store+0x10/0x10 [ 1015.137948][T25626] sysfs_kf_write+0xf2/0x150 [ 1015.142671][T25626] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1015.147954][T25626] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1015.153173][T25626] vfs_write+0x6ac/0x1070 [ 1015.157516][T25626] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1015.163417][T25626] ? __pfx_vfs_write+0x10/0x10 [ 1015.168207][T25626] ksys_write+0x12a/0x250 [ 1015.172529][T25626] ? __pfx_ksys_write+0x10/0x10 [ 1015.177395][T25626] do_syscall_64+0x106/0xf80 [ 1015.181990][T25626] ? clear_bhb_loop+0x40/0x90 [ 1015.186688][T25626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.192580][T25626] RIP: 0033:0x7ffacc79c799 [ 1015.197090][T25626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.216797][T25626] RSP: 002b:00007ffacd66d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.225210][T25626] RAX: ffffffffffffffda RBX: 00007ffacca16090 RCX: 00007ffacc79c799 [ 1015.233173][T25626] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000003 [ 1015.241144][T25626] RBP: 00007ffacc832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1015.249313][T25626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.257461][T25626] R13: 00007ffacca16128 R14: 00007ffacca16090 R15: 00007ffd71c2a238 [ 1015.265558][T25626] [ 1015.268937][T25626] Kernel Offset: disabled [ 1015.273267][T25626] Rebooting in 86400 seconds..