last executing test programs: 51.177092288s ago: executing program 2 (id=684): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/cpuid/cpu0/uevent\x00', 0x20400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/50, 0x32) 50.65294567s ago: executing program 2 (id=693): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/ext4/sda1/options\x00', 0x80000, 0x0) unshare$auto(0x40000080) inotify_init1$auto(0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = prctl$auto(0x20003b, 0x2, 0x0, 0x4, 0x0) splice$auto(r0, 0x0, r0, 0x0, 0xb, 0x5) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000580)='\x04>\x01\x01\x00\x00\x00\x00\x01T\x9eQ\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc7\xa1\x90s\x1d\xfe\x04\b\xacO\x99\x96\xbdf\x05z4~I<@B\x1d]\xbabB\xdc\xff\x03\x00\x00\x00\x00\x00\x00\xa5\xd86\x14\xe5\xfa\x88XCu\x17\xd0\xc58\xa9\xcc\x03I\xff\x13]\xe0\x10\x83hN\x04\xaf\xa8\xfe;$\x81\xb5\'?\xbc\x82\xf6-\xe0\x97\xbe\xba(\xf3\xf4h\x85\xfb\x97\xcd\xb9JS\xf3a\x01\xca\xdb\xb6\xf5\x96\x04\x00\x00\x00\x00\x00\x00\x92\xfc\xe4\xd7\xf4\xaeU\xae\x1aB\xee\xfeTL\xfa\x17Y\xacz\xda\xd4\x9d\xecX@\x1e\x1e\xd2\xc1^\x1d\x80\x10\xca=F\xeb(\x16\xa0B\x1e\xfb\xaa\x87RVdVc:\xb0\x9e\x05\x10\xe1YLP\xe0\xa0\x1d\x8b\x13U\x16\xd9\xde\x8d\xd61\xaef\x9aZ\xecyb\xa4<\x11K\x8dG*\xbb\x06\xb7\x80\xe4\xf8eS\xf4\xd0\x96\x7f\xeaK\xff}O:\x15x\x11\xc1\v\xffW\xeb\xf6\x7f\xd6\xcc\xc8\x99\x92\x8b\x9cg\xf7#\xc8\x0e\x98\xe4\x83\xd0;?\x00\x00\x00\x00\x00\xca_\x05\")7\xdb\xff];oI,\\Y\xd6eL\x90\rb\xe5\xf4\x116O\xd1\x92C\n\x14\xac\x95\xf4m\x92\xb2\xe0\x89O\fdO\x86\x96r\xaa\xcf,\x90\xb0\xcds\x85\xbc\xbc)(\xaa_\x0f\xa6\x8e\x17\x88\xb0\x1c\x15\xbc)\xcc\xcb\xf6\x91\x11\xa9\xe7\xc9 H\xcel\xe9\xcdm/H\x83gJ%I\xd1 q\x92f\xd8f\xa8\x1b\xd7\x1c\x8aMeP\xc1\xfb\xfd\x85\x86\xc4r\xe4!\x06?\x12\xb0:\x88\\)d+\xfa`.\x8e\x8e\x1b\xba1\x13\x10\xd9n\xea0\x11\xc1l\xb10K\r\x13C#tj', 0x7) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f0000003480)={0x0, 0x30000, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x2, 0x1, 0x0) getsockopt$auto(r5, 0x6, 0x25, 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x200403, 0x0) 48.986632897s ago: executing program 2 (id=689): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) chmod$auto(&(0x7f0000000140)='./file0\x00', 0x7) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) modify_ldt$auto(0x1, 0x0, 0x10) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x100000000}, 0x6, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/190, 0xbe) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) r2 = socket(0x2, 0x801, 0x100) setsockopt$auto_SO_TIMESTAMPING_OLD(r2, 0x6, 0x25, &(0x7f00000003c0)='macsec\x00', 0x3ff) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) 47.412569663s ago: executing program 2 (id=695): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) prctl$auto(0x1, 0x3, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xe43) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x0) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0) mmap$auto(0x100, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) socketpair$auto(0xfff, 0xe, 0x7, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r2, 0x3b84, r1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x0, 0x0) recvmmsg$auto(r2, 0x0, 0xfffffff9, 0x10, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, 0x0, 0x9) r3 = getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x80000, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/xfs/panic_mask\x00', 0xa0202, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_4={0x12, 0x1, 0xa6, r5}, 0x6f4) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) setresuid$auto(0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) fcntl$auto(r0, 0x7, r3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 46.477541817s ago: executing program 2 (id=699): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) read$auto_tracing_total_entries_fops_trace(r0, &(0x7f0000000000)=""/9, 0x9) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x5a1380, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x200, 0x2020009, 0x5, 0x10000000f8, 0xfffffffffffffffa, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r2, 0x0, 0x24098841) connect$auto(r2, &(0x7f00000000c0)=@ethernet={0x306, @multicast}, 0x5) read$auto_hwsim_fops_ps_(0xffffffffffffffff, &(0x7f0000000180)=""/115, 0x73) r3 = socket(0x2b, 0x2, 0x81) write$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffffff, &(0x7f0000000380)="aebfa89cf81033baceab9078f4cd367873d65bc937be14df1489ead062cf781c4627b8c9f11cf9ff75f773f4d643f14aa6354790eee07bfb81400805470b1cd51edb2b5b71a293200ad8a186a57253482d2f302f61dae1a04bedda9ad90cda8b7631278f31f85beb2351554bf701bdacfa8cbe94396914cfa173fa6972396f4653b5aeb9ad5e51829fda8453f7ed1b9b78be4cbb1dff6e99c7035b66c2347a607df737a3f36989ace0b28ebf791530dfe72194aa3f4454d3e5a0cf8e53071c4e93ea9c8c26225d1562fb8b37342bec8d1a51e54079c2e46c5aeddbcb899f5cbece3a1e101582", 0xe6) ioctl$auto(r3, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x8) unshare$auto(0x40000080) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x101080, 0x0) r5 = semctl$auto_GETPID(0x7fff, 0x1, 0xb, 0xc6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@inferred=r5, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00fffffbfb00", @inferred=r5}, 0x4, 0x966, 0x1, @raw=0x404, @integer={0x0, 0x2000000b755, 0x6}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) select$auto(0xe2c3, &(0x7f0000000080)={[0x8, 0x8, 0x1, 0x8, 0x7, 0x1, 0x6, 0x33, 0x4, 0x3, 0x4946, 0x1ba6af20, 0x9, 0x100000001, 0x40, 0x3]}, &(0x7f0000000100)={[0x0, 0x5, 0x6, 0x1ff, 0x671, 0x7ff, 0x7ff, 0xffffffff9a18acf8, 0x7ae75805, 0x8b1, 0x1, 0x9, 0x10001, 0x3, 0x10000, 0xfab]}, &(0x7f0000000180)={[0x0, 0x4, 0x1, 0x101, 0x0, 0x6, 0x5, 0x4, 0x8, 0x3d7, 0xbb1, 0x2, 0x6, 0x6, 0x0, 0x757]}, &(0x7f0000000000)={0xffffffffffffffff, 0x5}) 45.703950399s ago: executing program 2 (id=703): write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x110007, 0x4008) memfd_create$auto(0x0, 0xe) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x81, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x80000000000006}) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000180), 0x305000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0) read$auto(r3, 0x0, 0x4) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x6c000000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r2, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) timerfd_settime$auto(r1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 42.447296265s ago: executing program 0 (id=715): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000010c0)=""/4096, 0x1000) 42.344292264s ago: executing program 0 (id=716): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) timer_delete$auto(0x1) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0xa) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0x4, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/18, 0x12) bind$auto(r1, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) socketpair$auto(0x3, 0x80000001, 0x6, &(0x7f00000000c0)=0xa6ef) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x126743, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 41.034080182s ago: executing program 0 (id=723): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) chmod$auto(&(0x7f0000000140)='./file0\x00', 0x7) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) modify_ldt$auto(0x1, 0x0, 0x10) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x100000000}, 0x6, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/190, 0xbe) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) r2 = socket(0x2, 0x801, 0x100) setsockopt$auto_SO_TIMESTAMPING_OLD(r2, 0x6, 0x25, &(0x7f00000003c0)='macsec\x00', 0x3ff) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) 39.929957624s ago: executing program 0 (id=728): r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/prev\x00', 0x101002, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/tracing/options/markers\x00', 0x101200, 0x0) pwrite64$auto(r1, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfffffffffd, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/nbd12\x00', 0x44003, 0x0) ioctl$auto_BLKPG(r4, 0x1269, 0x300) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r5, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dedbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0xb, 0x0) write$auto_proc_pid_attr_operations_base(r0, &(0x7f0000000000)="e065b5d69eb41c5a77c3ca821edfc08707747e7e7a7929d402833ce89a459419346ca8ed8ab17b141dee5cdd72a11e31faa8fe8d826c27114a417acc88ee0b8ebdb9f9a5f5c9d5829482fca65166cc36fccc68c01f1080ea93d1da85e9d19de049151638533d972700db14d1d580a3cf7edeca6f9f6683577933364726910776f1c785616dd1bedad0649942c085d90535fcf3c17aa86841cea027ebf7a7c28ffc5e44b768a503e878825e2cc2c88367c5e4a9a3332330b34ce8781c884a7d3f8f6c9b34cb339c7738c94d081f66e92116e7c818e7be9e78cb85365530cc7811fa2a95925763215f7073d49638b701440ee49c51f211", 0xf6) getdents$auto(0xffffffffffffffff, &(0x7f0000001480)={0x10001, 0x81, 0xa01, "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"}, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x6, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r7, 0x0) accept$auto(r7, &(0x7f0000000100)=@llc={0x1a, 0x104, 0x4, 0x7, 0x89, 0x88}, &(0x7f00000001c0)=0x12) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r8) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x78, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x7f}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x0, 0x66, 0x4e20}, @NL80211_ATTR_REG_ALPHA2={0x27, 0x21, "d0efe53e4af2e79b8ab9f2b02d3c94ca5aed15071c333cc5ad91e59b1f5a37cb1e778c"}, @NL80211_ATTR_HE_CAPABILITY={0x6f, 0x10d, "eee9b8c7e2a16e90d1329dfdebe82cc2a99b7cc1b3e616"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_BSS_BASIC_RATES={0x0, 0x24, "44691794cda304c7655f111adec3bf9339ee99ed4258772ff50bac"}]}, 0x78}, 0x1, 0x0, 0x0, 0x841}, 0x1) ioctl$auto_KVM_GET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x22, 0x0, [{0xc1, 0x1, 0x2}]}) preadv$auto(r0, &(0x7f0000000180)={0x0, 0x8}, 0x8, 0x6, 0x9f4b) 39.228653992s ago: executing program 0 (id=733): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram1/trace/start_lba\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff8, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3034, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b6}, {0x4000, 0xfc, 0x9, 0x0, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/block/nullb0/queue/atomic_write_unit_max_bytes\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001180)=""/4095, 0xfff) 39.094417081s ago: executing program 0 (id=734): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r0, 0x540a, 0x0) r1 = socket(0xa, 0x5, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) timer_create$auto(0x0, 0x0, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) (async) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) (async) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40000) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) memfd_create$auto(0x0, 0xd) (async) ftruncate$auto(0x0, 0x8800000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) (async) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) set_mempolicy_home_node$auto(0xb67, 0x7, 0x9, 0x7f) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) shutdown$auto(r1, 0xfff) (async) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) (async) setuid$auto(0x0) 30.52333671s ago: executing program 32 (id=703): write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x110007, 0x4008) memfd_create$auto(0x0, 0xe) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x81, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x80000000000006}) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000180), 0x305000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0) read$auto(r3, 0x0, 0x4) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x6c000000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r2, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) timerfd_settime$auto(r1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23.946587127s ago: executing program 33 (id=734): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r0, 0x540a, 0x0) r1 = socket(0xa, 0x5, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) timer_create$auto(0x0, 0x0, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) (async) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) (async) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40000) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) memfd_create$auto(0x0, 0xd) (async) ftruncate$auto(0x0, 0x8800000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) (async) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) set_mempolicy_home_node$auto(0xb67, 0x7, 0x9, 0x7f) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) shutdown$auto(r1, 0xfff) (async) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) (async) setuid$auto(0x0) 16.941031369s ago: executing program 5 (id=774): socket(0x10, 0x2, 0x9) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/raw6\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000f9dbdf250100000006000200000000000500070080000000080009000100000008000a000800000008001700", @ANYRES32], 0x3c}}, 0x4000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x7d, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r5 = socket(0xa, 0x2, 0x0) setsockopt$auto(r5, 0x29, 0x37, 0x0, 0xb00) (async) unshare$auto(0x40000080) (async) r6 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x2200, 0x0) sendmsg$auto_NFC_CMD_GET_SE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x144, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x101}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x34}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '+'}, @NFC_ATTR_LLC_SDP={0xe5, 0x13, 0x0, 0x1, [@generic="bfdd3e90d33dfabc9ad32d5012bf7840bbf4ac3a19c8a4390de45170765ef36e2ce15587e5b98969f4975be0b49f2aec622bca107b56e6ea499661340965f36771df57a9abda8a3b827378a74f0c79a55f697379e00727dcf0ace3048a097da63c430b8925700f202c0c3cc771046e7d43ce5187867398af730fe9f17046ad7149b08668151cfed72b708184c2d928cb7c032dad599f9b8127bbb70c2a3beb8241cd3083f62179fc97165f715dc824eaae5260c59b2429d7a3348f31dae6acbf48f9dbae144c3ad5b002d4a96a6e969314", @typed={0x8, 0x97, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6d}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '\''}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3d55, 0x0) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0x0) mknod$auto(0x0, 0x1001, 0x4) open(0x0, 0x163340, 0x2a) socket(0x2a, 0x2, 0x1) 9.23410819s ago: executing program 4 (id=822): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x2, 0x0, 0xd) r0 = gettid() rt_sigqueueinfo$auto(r0, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={r0, 0x0, @sival_ptr=0x0}}}) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r1 = prctl$auto(0x42, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000005c0)={{r1, &(0x7f0000000180)="19000000422c1cae541d81656233f654c390edc7aa714848e1ce95c6f14a4c08028ef8579013b0f2637a3fc537c4b45657ba87ef070000000000000062cb8f56985be4339af52873046007f2bc78bf1d0497701cd06f64394a464dbe1b9f7e571c5559581726", 0xfd, 0x0, 0x3, 0x0, 0x0}, {[0x1, 0xfffffffd, 0x9, 0x5]}, 0x14, 0x6, &(0x7f00000004c0)="852dd6a7b259d974ac697cd21ee6065f7f2a9058eed931d9b0c0d805052cd988c92166a90e294d94a568efb6f43e267a720745ddb7a6dd3667d63cf0a0446995e3f0fe3f976d21b67165901c14425fcaeb4f411a50a5a7a3f23e1aae0a582de63d8ce514ba277b9fa21aabb0990ae4611ad972ff8b46770b7191ac4b107c808c7f000000"}) socket(0x2, 0x80000, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000010c0)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, 0x0, 0x261) mmap$auto(0x0, 0x20805, 0x4000000000df, 0x4000000eb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x9, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000300)) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) write$auto(r2, &(0x7f0000000140)='1\x00\\\xa0\x04t\x9f\xfd)m|E\x19\xf8\xd0\xba]\xb1\xb5\xba\xf3\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x188\x9a }\f\xf6\xdb,\xd0\x03~\x1eS\xe6', 0x5) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) 8.888429725s ago: executing program 3 (id=823): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000300), 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r0, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r0, 0x80204d01, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) semget$auto(0x0, 0x0, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mkdir$auto(&(0x7f0000000000)='./file0\x00', 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bdi/7:8/read_ahead_kb\x00', 0x82942, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r2, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), r1) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r4, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), r1) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000200), r1) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 8.369043389s ago: executing program 3 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto_PR_SET_MM_END_DATA(0xbe, 0x4, 0x0, 0x0, 0x80000000) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) (rerun: 32) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_HT_CAPABILITY={0xa0, 0x1f, "9f116867a18fd57e958ea24698808acb1d8d78e9a778754a370932b660d4114287b78a9f79a81067836932b9c7f9a0850922b6e3df3cd46872e30ebb07aead1c682db00f02c4236e8ad605136639075034a2362c05d151005f3f918efc5161a98b63e7950142c8b45beccd9a15a6c16bd50830bdd83979b0ca861f116f91bb3f7e0ed51a9a3918ca9ce0ae5edb70854cd2c32ab265dc684d9cd45adb"}, @NL80211_ATTR_PBSS={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4010}, 0x1) (async, rerun: 32) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) (rerun: 32) madvise$auto(0x0, 0x2000040080000004, 0xe) (async, rerun: 64) r3 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/smaps\x00', 0x8000, 0x0) (rerun: 64) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f0000000080)=""/71, 0x47) syz_clone(0x30109891, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) poll$auto(&(0x7f0000003640)={r4, 0x7, 0x6}, 0x4, 0x100000) (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, 0x0, 0xc4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8) (async, rerun: 64) read$auto(0x3, 0x0, 0x80) (async, rerun: 64) write$auto_hwsim_fops_rx_rssi_(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) (async, rerun: 64) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4140aecd, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2000d, 0x4000000000dc, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socket(0x2, 0x1, 0x0) 8.231508821s ago: executing program 4 (id=825): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xfffffffffffffffc) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_uring_register$auto_IORING_UNREGISTER_BUFFERS(r1, 0x1, &(0x7f0000000180)="4bd85bec0092c281d1da4effa8bc81257941302071b445712803868cf2795031fb6c9ca7a116c1abc2082a6a19d1b8344b77b6ff280ab2e692a9246a4dc8a2bb36583f5a484c9bbe8430da8bc38d744f89b23767152d210eb75649111914f02ac9013047be25ffb1cc5bf38194f4b84d8acbe22f29ace2f93a03fc31dd9891ca3f8d3bc1e6808433a43419ff08337226", 0x0) r2 = getpid() r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000380)=""/11, 0xb) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ioctl$auto(r0, 0x40246f4c, 0x38) 7.46031402s ago: executing program 4 (id=827): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x8, @old_prog_fd=r2}, 0xa3) bpf$auto(0x2, 0x0, 0x9) (async) bpf$auto(0x2, 0x0, 0x9) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x4d0, 0x400, 0x2}]}) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x4d0, 0x400, 0x2}]}) 6.86902513s ago: executing program 3 (id=828): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x6, 0x4, &(0x7f00000001c0), 0x9, 0xeb8e, 0x1200000, @number_of_packets=0xfffffff7, 0x7, 0x800476, 0x0}) 6.831367094s ago: executing program 4 (id=829): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x8, 0x4, 0x4, 0xb9, 0x8, 0xc, 0xffffffffffffffff, 0x2, 0x7ff}, 0x6f4) (async) setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) timer_create$auto(0x0, 0x0, &(0x7f0000000200)=0x1000004) (async, rerun: 64) timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}}) msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="7c65b349a3b93064d74c8bed7bfc3fe3db28bd430700ecfd84c83a3aa2"], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) (async) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r0, 0x0, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r4, @raw=0x5, 0x5, 0x0, 0x0, 0x0}) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x10000, 0x0) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (rerun: 32) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) (async) r6 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x220000, 0x0) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd=r6, @target_ifindex=r5, 0x3, 0x5, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x7}}, 0x8e) 6.606067972s ago: executing program 4 (id=830): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/neigh/veth0_to_team/base_reachable_time_ms\x00', 0x40601, 0x0) write$auto(r0, 0x0, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0) mbind$auto(0xf000, 0xfffffffffffffffa, 0x100002002, 0x0, 0x3cc033db, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_FS_IOC_FSSETXATTR(r2, 0x401c5820, 0x35c) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x3, 0x6, "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"}) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) fsopen$auto(0x0, 0x1) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x400000, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0xc0000, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/0000:00:02.0/internal_clients\x00', 0x200040, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000100)={0x0, 0x6, 0x5}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) 4.905260274s ago: executing program 4 (id=832): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/ext4/sda1/options\x00', 0x80000, 0x0) unshare$auto(0x40000080) r0 = inotify_init1$auto(0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto(0x20003b, 0x2, 0x0, 0x4, 0x0) splice$auto(r1, &(0x7f0000000000)=0x9, r1, 0x0, 0xb, 0x5) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000580)='\x04>\x01\x01\x00\x00\x00\x00\x01T\x9eQ\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc7\xa1\x90s\x1d\xfe\x04\b\xacO\x99\x96\xbdf\x05z4~I<@B\x1d]\xbabB\xdc\xff\x03\x00\x00\x00\x00\x00\x00\xa5\xd86\x14\xe5\xfa\x88XCu\x17\xd0\xc58\xa9\xcc\x03I\xff\x13]\xe0\x10\x83hN\x04\xaf\xa8\xfe;$\x81\xb5\'?\xbc\x82\xf6-\xe0\x97\xbe\xba(\xf3\xf4h\x85\xfb\x97\xcd\xb9JS\xf3a\x01\xca\xdb\xb6\xf5\x96\x04\x00\x00\x00\x00\x00\x00\x92\xfc\xe4\xd7\xf4\xaeU\xae\x1aB\xee\xfeTL\xfa\x17Y\xacz\xda\xd4\x9d\xecX@\x1e\x1e\xd2\xc1^\x1d\x80\x10\xca=F\xeb(\x16\xa0B\x1e\xfb\xaa\x87RVdVc:\xb0\x9e\x05\x10\xe1YLP\xe0\xa0\x1d\x8b\x13U\x16\xd9\xde\x8d\xd61\xaef\x9aZ\xecyb\xa4<\x11K\x8dG*\xbb\x06\xb7\x80\xe4\xf8eS\xf4\xd0\x96\x7f\xeaK\xff}O:\x15x\x11\xc1\v\xffW\xeb\xf6\x7f\xd6\xcc\xc8\x99\x92\x8b\x9cg\xf7#\xc8\x0e\x98\xe4\x83\xd0;?\x00\x00\x00\x00\x00\xca_\x05\")7\xdb\xff];oI,\\Y\xd6eL\x90\rb\xe5\xf4\x116O\xd1\x92C\n\x14\xac\x95\xf4m\x92\xb2\xe0\x89O\fdO\x86\x96r\xaa\xcf,\x90\xb0\xcds\x85\xbc\xbc)(\xaa_\x0f\xa6\x8e\x17\x88\xb0\x1c\x15\xbc)\xcc\xcb\xf6\x91\x11\xa9\xe7\xc9 H\xcel\xe9\xcdm/H\x83gJ%I\xd1 q\x92f\xd8f\xa8\x1b\xd7\x1c\x8aMeP\xc1\xfb\xfd\x85\x86\xc4r\xe4!\x06?\x12\xb0:\x88\\)d+\xfa`.\x8e\x8e\x1b\xba1\x13\x10\xd9n\xea0\x11\xc1l\xb10K\r\x13C#tj', 0x7) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xffffffffffffff5b, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x300, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000010) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r4, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x60, 0x0, 0x2000c040}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r5, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x2, 0x1, 0x0) getsockopt$auto(r7, 0x6, 0x25, 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x200403, 0x0) 4.778976848s ago: executing program 1 (id=833): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x2, 0x0, 0xd) r0 = gettid() rt_sigqueueinfo$auto(r0, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={r0, 0x0, @sival_ptr=0x0}}}) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r1 = prctl$auto(0x42, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000005c0)={{r1, &(0x7f0000000180)="19000000422c1cae541d81656233f654c390edc7aa714848e1ce95c6f14a4c08028ef8579013b0f2637a3fc537c4b45657ba87ef070000000000000062cb8f56985be4339af52873046007f2bc78bf1d0497701cd06f64394a464dbe1b9f7e571c5559581726", 0xfd, 0x0, 0x3, 0x0, 0x0}, {[0x1, 0xfffffffd, 0x9, 0x5]}, 0x14, 0x6, &(0x7f00000004c0)="852dd6a7b259d974ac697cd21ee6065f7f2a9058eed931d9b0c0d805052cd988c92166a90e294d94a568efb6f43e267a720745ddb7a6dd3667d63cf0a0446995e3f0fe3f976d21b67165901c14425fcaeb4f411a50a5a7a3f23e1aae0a582de63d8ce514ba277b9fa21aabb0990ae4611ad972ff8b46770b7191ac4b107c808c7f000000"}) socket(0x2, 0x80000, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000010c0)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, 0x0, 0x261) mmap$auto(0x0, 0x20805, 0x4000000000df, 0x4000000eb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x9, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000300)) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) write$auto(r2, &(0x7f0000000140)='1\x00\\\xa0\x04t\x9f\xfd)m|E\x19\xf8\xd0\xba]\xb1\xb5\xba\xf3\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x188\x9a }\f\xf6\xdb,\xd0\x03~\x1eS\xe6', 0x5) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) 4.777442147s ago: executing program 3 (id=834): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/pci_bus/0000:00/cpuaffinity\x00', 0x20800, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0x7}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x8, 0x5) preadv$auto(r1, &(0x7f0000000040)={&(0x7f0000000100)="3382f7521de8017189447283e175cb591e4f0a6d023ce6a0c429a3d7d12cb2d4d95c56a22d2fdd453e113d7e605d9730a5614a4f27d5c6fe5ab57603c30a0391a5b95f4f0ee0e5542fd05f126e0447a97aa62125e89324a358c5ad5abe7ca63527eaa8fdc2df75fae531062c7677c0ac63c9a97a6526f8cef9ab0c94b0ab95c3d3d76e377fcb61800600000000000000c9b91fd0afe412a5b06868c99f45464c6895cb3b9708bffd3a377f03f4b7bc73b956d7b0ee117ad41d51e7af9ac1878e48b8188b9842d8df046318bdddf19c", 0x9}, 0x8, 0x702a74d5, 0x1ff) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), r1) sendmsg$auto_NFC_CMD_DEV_DOWN(r1, &(0x7f0000002900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="d851330ad6b94171250000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x25d8}, 0x1, 0x0, 0x0, 0x8008880}, 0x20008000) read$auto(r0, &(0x7f00000000c0)='/sys/devices/~latform/vhci_hc$.7/usb23/23-0:1.0/~\xda=\x8eep_81/inver', 0x6864a34) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x101082, 0x0) ioctl$auto(r3, 0xc0045543, 0xffffffffffffffff) 3.455814421s ago: executing program 1 (id=835): r0 = socket(0xb, 0x80002, 0x2073) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x50743, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x6c840, 0x0) socket(0xa, 0x1, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d000000000300", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d, 0x0}) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) madvise$auto(0x0, 0x5, 0x15) clock_getres$auto(0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000200)={{0x7ff, 0x0, 0xee00, 0x1, 0x1ff, 0x7, 0x9}, &(0x7f0000000180)=0x40, 0x0, 0x1, 0x8000003, 0x400, 0x5, 0x6, 0x7, 0x101, 0x5, @inferred=r4, @raw=0x3}) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r6, @ANYRES64=r5, @ANYRES32=0x4, @ANYRES8, @ANYRES32=0x9, @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r7, 0x107, 0x5, 0x0, 0x8004) close_range$auto(0x2, r1, 0x1) open(0x0, 0xa0000, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x402, 0x0) 3.453330113s ago: executing program 3 (id=836): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = pipe$auto(0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000040), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x20) mmap$auto(0x0, 0x4020009, 0xdf, 0x7fff, 0x401, 0x7ffc) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x3, 0xb, 0x13, 0x4008df3, 0x0) sched_setaffinity$auto(0x0, 0x9899, &(0x7f00000000c0)=0xf19c) clone$auto(0x20003b46, 0x80000001, 0x0, 0x0, 0x2) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, 0x0) mmap$auto(0x0, 0x4000a, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socketcall$auto(0x5, &(0x7f00000000c0)=0x4) r2 = socket(0x11, 0x3, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) flock$auto(r3, 0x6) r4 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r4, 0x1) r5 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r5, 0x2) flock$auto(r5, 0x2) close_range$auto(r2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x59, 0x0) 2.4825784s ago: executing program 1 (id=837): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) socket(0x2, 0x1, 0x106) listmount$auto(&(0x7f0000000040)={0x200, @inferred, 0x7f, 0x81, 0x400}, 0x0, 0xf, 0x5) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/options/record-cmd\x00', 0x2802, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x1) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8301, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x8f, 0x400, 0x2}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) sysfs$auto(0x2, 0x10, 0x0) fsopen$auto(0x0, 0x1) r5 = socket(0x2, 0x5, 0x0) setsockopt$auto(r5, 0xa6a, 0x4, 0x0, 0x0) fcntl$auto_F_SET_RW_HINT(r5, 0x40c, 0x1) 2.216779896s ago: executing program 3 (id=838): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = fanotify_init$auto(0x1f53, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$auto_NS_GET_PID_IN_PIDNS(r0, 0x8004b708, &(0x7f0000000000)=0xa) recvmmsg$auto(r1, &(0x7f0000000240)={{&(0x7f0000000040)="da5b34c9f0db8242dfad0b4b774791f915188cf3d497c131d57f9768eeabdfc1cf17d0fea012f40e26b8251bead325f2f0643a2d7892e8adbcef5a31be7da2d5bbf176062a6a02594f6b0cc0ad58ab3a4636d34a2f513e5eb4a200e016393dfd5651811ceaecf763cbf4c9f10288ee8faaec2652b2570e6ea820ae258bbcb4a3d6f8c4c1fdc87c4780dea24188f70c509132cee3594e7f2d95f4481a924c74f15fbaadd7fe5e6a8cb5abd0aaa42c4414ada8dd3f7c98ec48fd7e636b0d4a0fb874ffd69bd30ce14e5bacc81e835fad597b24dd57e4b56faa2a1a2e3a54d3cb81461bafe1e9", 0x3, &(0x7f00000001c0)={&(0x7f0000000140)="3beab8ad5d5824ead5fef15ae8f0026e3a598e3faf37ca62c515a66c501baba57e8c63e5f16b75036c2f07e8cb36065e4a8a079b3a08fb4e88e42728527eb1a7a2905ee7e9211bd22de3ab0b5e8f28cfec6c42ec9c30de9484e945db", 0x3}, 0xd, &(0x7f0000000200)="02a1d64b16720293cafdc434a06d8352b054751a148e785e522f107d28e079f3", 0x100000000, 0xff}, 0x3}, 0xe7, 0x5, &(0x7f0000000280)={0xfccd, 0x5fa}) fanotify_mark$auto(0x0, 0x401, 0x4, 0x4, 0x0) fanotify_mark$auto(0x400000000000, 0x6, 0x9, 0x4, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200081, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) mremap$auto(0xb6a3, 0x4, 0xfffffffffffffffe, 0x3, 0x100000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x3, 0x3a) semctl$auto_IPC_INFO(0x1000, 0x9, 0x3, 0xb) ioctl$auto(r2, 0x8916, 0x1) 1.901416711s ago: executing program 34 (id=774): socket(0x10, 0x2, 0x9) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/raw6\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000f9dbdf250100000006000200000000000500070080000000080009000100000008000a000800000008001700", @ANYRES32], 0x3c}}, 0x4000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x7d, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r5 = socket(0xa, 0x2, 0x0) setsockopt$auto(r5, 0x29, 0x37, 0x0, 0xb00) (async) unshare$auto(0x40000080) (async) r6 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x2200, 0x0) sendmsg$auto_NFC_CMD_GET_SE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x144, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x101}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x34}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x8}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '+'}, @NFC_ATTR_LLC_SDP={0xe5, 0x13, 0x0, 0x1, [@generic="bfdd3e90d33dfabc9ad32d5012bf7840bbf4ac3a19c8a4390de45170765ef36e2ce15587e5b98969f4975be0b49f2aec622bca107b56e6ea499661340965f36771df57a9abda8a3b827378a74f0c79a55f697379e00727dcf0ace3048a097da63c430b8925700f202c0c3cc771046e7d43ce5187867398af730fe9f17046ad7149b08668151cfed72b708184c2d928cb7c032dad599f9b8127bbb70c2a3beb8241cd3083f62179fc97165f715dc824eaae5260c59b2429d7a3348f31dae6acbf48f9dbae144c3ad5b002d4a96a6e969314", @typed={0x8, 0x97, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6d}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '\''}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3d55, 0x0) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0x0) mknod$auto(0x0, 0x1001, 0x4) open(0x0, 0x163340, 0x2a) socket(0x2a, 0x2, 0x1) 1.132996613s ago: executing program 1 (id=840): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0xc, 0x400208, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0xb, 0x2, 0x9) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x5, 0x0, 0x1, 0x9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) (async) pwrite64$auto(r0, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x3, 0x3) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/ip6_vti0/queues/rx-0/rps_flow_cnt\x00', 0x88242, 0x0) (async) preadv$auto(0x3, &(0x7f0000000140)={0x0, 0x40}, 0x3, 0x4, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x54b) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x37594403107c4a8f, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) r3 = ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) close_range$auto(r3, 0x8, 0xffffffff) io_uring_setup$auto(0x5, &(0x7f0000000080)={0xffffff3b, 0xfffefeff, 0x2, 0x6, 0x8, 0x9, 0xffffffffffffffff, [0x0, 0x0, 0xfffffffe], {0x20000000, 0x4, 0x7, 0x129d, 0xfffffffe, 0x83, 0x1101, 0x4, 0x4}, {0x3, 0x1, 0x52, 0x5, 0x2001, 0x40, 0x4, 0x9, 0x6}}) (async) io_uring_register$auto(0x2, 0x1d, 0x0, 0x0) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x800040eb2, 0xd, 0x300000000000) mremap$auto(0x1, 0x7, 0x3fd6, 0x3, 0xbb) (async) mremap$auto(0x1, 0x4, 0x3, 0x50a, 0x6) (async) socket(0x2, 0x1, 0x0) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 650.273813ms ago: executing program 1 (id=841): set_mempolicy$auto(0x4006, &(0x7f0000000000)=0x6, 0x7) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) socket(0xa, 0x1, 0x84) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r0 = inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.6/usb21/idVendor\x00', 0x101143, 0x0) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000080), 0x76fc00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) inotify_init1$auto(0x3000000000000) socketpair$auto(0x7, 0x3, 0xa0, 0x0) close_range$auto(r2, 0xffffffffffffffff, 0x2) sendmsg$auto_NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_VERSION={0x8, 0x3, 0xffffffff}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x6}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '/dev/mtd0\x00'}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x8}]}, 0x3c}}, 0x801) open(0x0, 0xe6603, 0x158) open(&(0x7f0000000100)='./file0\x00', 0x101701, 0x24) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyc4\x00', 0x0, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) 0s ago: executing program 1 (id=842): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000000), 0x205ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x4}, 0x20000005}, 0x5, 0xcae) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r0, 0x7) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x4, 0x9, 0x4, 0x9, 0xf, @raw=0x9}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000053c0), 0x41, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080), 0x321800, 0x0) kernel console output (not intermixed with test programs): ll) [ 234.704045][ T8115] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 234.704057][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.704076][ T8115] Call Trace: [ 234.704086][ T8115] [ 234.704099][ T8115] dump_stack_lvl+0x16c/0x1f0 [ 234.704152][ T8115] should_fail_ex+0x512/0x640 [ 234.704187][ T8115] ? kmem_cache_alloc_noprof+0x62/0x770 [ 234.704231][ T8115] should_failslab+0xc2/0x120 [ 234.704279][ T8115] kmem_cache_alloc_noprof+0x83/0x770 [ 234.704318][ T8115] ? ptlock_alloc+0x1f/0x70 [ 234.704358][ T8115] ? ptlock_alloc+0x1f/0x70 [ 234.704388][ T8115] ptlock_alloc+0x1f/0x70 [ 234.704429][ T8115] pte_alloc_one+0x84/0x3d0 [ 234.704475][ T8115] __do_fault+0x320/0x490 [ 234.704517][ T8115] do_fault+0x302/0x1ad0 [ 234.704562][ T8115] ? __pfx_filemap_map_pages+0x10/0x10 [ 234.704599][ T8115] ? __pmd_alloc+0x6aa/0x9c0 [ 234.704651][ T8115] __handle_mm_fault+0x1919/0x2bb0 [ 234.704697][ T8115] ? __pfx___handle_mm_fault+0x10/0x10 [ 234.704757][ T8115] ? find_vma+0xbf/0x140 [ 234.704799][ T8115] ? __pfx_find_vma+0x10/0x10 [ 234.704848][ T8115] handle_mm_fault+0x3fe/0xad0 [ 234.704889][ T8115] do_user_addr_fault+0x7a6/0x1370 [ 234.704931][ T8115] ? rcu_is_watching+0x12/0xc0 [ 234.704980][ T8115] exc_page_fault+0x64/0xc0 [ 234.705028][ T8115] asm_exc_page_fault+0x26/0x30 [ 234.705057][ T8115] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 234.705095][ T8115] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 234.705126][ T8115] RSP: 0018:ffffc9000bc5fd90 EFLAGS: 00050246 [ 234.705153][ T8115] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 234.705172][ T8115] RDX: fffff5200178bfc5 RSI: ffffc9000bc5fe20 RDI: 000000000000556d [ 234.705192][ T8115] RBP: 000000000000556d R08: 0000000000000000 R09: fffff5200178bfc4 [ 234.705212][ T8115] R10: ffffc9000bc5fe27 R11: ffff88802ca3c830 R12: ffffc9000bc5fe20 [ 234.705232][ T8115] R13: 0000000000005575 R14: 00007ffffffff000 R15: 0000000000000000 [ 234.705273][ T8115] _copy_to_user+0xbb/0xd0 [ 234.705311][ T8115] do_fcntl+0x13f4/0x1660 [ 234.705347][ T8115] ? __pfx_do_fcntl+0x10/0x10 [ 234.705396][ T8115] ? tomoyo_file_fcntl+0x6c/0xc0 [ 234.705460][ T8115] __x64_sys_fcntl+0x163/0x200 [ 234.705500][ T8115] do_syscall_64+0xcd/0xf80 [ 234.705550][ T8115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.705588][ T8115] RIP: 0033:0x7ff84db8f7c9 [ 234.705612][ T8115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.705641][ T8115] RSP: 002b:00007ff84bdcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 234.705668][ T8115] RAX: ffffffffffffffda RBX: 00007ff84dde6090 RCX: 00007ff84db8f7c9 [ 234.705689][ T8115] RDX: 000000000000556d RSI: 000000000000040b RDI: 0000000000000002 [ 234.705708][ T8115] RBP: 00007ff84dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 234.705728][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.705747][ T8115] R13: 00007ff84dde6128 R14: 00007ff84dde6090 R15: 00007ffd9fd5dbc8 [ 234.705791][ T8115] [ 235.576246][ T7826] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 237.109521][ T8151] zswap: compressor not available [ 237.629940][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 237.880860][ T7826] Bluetooth: hci3: unexpected event 0x20 length: 123 > 7 [ 237.925974][ T7826] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7 [ 238.252277][ T8192] [U] 0="­/ [ 238.284793][ T8192] [U] [ 238.299699][ T8192] [U] EÇeÅQ‰Í@’ [ 238.323895][ T8192] [U]  [ 238.865888][ T7826] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 238.873985][ T7826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 238.883699][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: kworker/u11:3 Tainted: G U L syzkaller #0 PREEMPT(full) [ 238.883756][ T7826] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 238.883768][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.883788][ T7826] Workqueue: hci0 hci_rx_work [ 238.883831][ T7826] Call Trace: [ 238.883841][ T7826] [ 238.883853][ T7826] dump_stack_lvl+0x16c/0x1f0 [ 238.883901][ T7826] sysfs_warn_dup+0x7f/0xa0 [ 238.883938][ T7826] sysfs_create_dir_ns+0x24b/0x2b0 [ 238.883974][ T7826] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 238.884007][ T7826] ? find_held_lock+0x2b/0x80 [ 238.884055][ T7826] ? do_raw_spin_unlock+0x172/0x230 [ 238.884095][ T7826] kobject_add_internal+0x2c4/0x9d0 [ 238.884133][ T7826] kobject_add+0x16e/0x240 [ 238.884164][ T7826] ? __pfx_kobject_add+0x10/0x10 [ 238.884201][ T7826] ? kobject_put+0xaf/0x6f0 [ 238.884225][ T7826] ? _raw_spin_unlock+0x28/0x50 [ 238.884269][ T7826] device_add+0x288/0x1980 [ 238.884303][ T7826] ? __pfx_dev_set_name+0x10/0x10 [ 238.884348][ T7826] ? __pfx_device_add+0x10/0x10 [ 238.884384][ T7826] ? mgmt_send_event_skb+0x2fb/0x460 [ 238.884426][ T7826] hci_conn_add_sysfs+0x1a8/0x260 [ 238.884464][ T7826] le_conn_complete_evt+0x11ed/0x1fa0 [ 238.884505][ T7826] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 238.884535][ T7826] ? __pfx_bt_warn+0x10/0x10 [ 238.884573][ T7826] hci_le_conn_complete_evt+0x23c/0x3a0 [ 238.884615][ T7826] hci_le_meta_evt+0x357/0x610 [ 238.884648][ T7826] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 238.884685][ T7826] hci_event_packet+0x685/0x1210 [ 238.884717][ T7826] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 238.884752][ T7826] ? __pfx_hci_event_packet+0x10/0x10 [ 238.884788][ T7826] ? kcov_remote_start+0x399/0x680 [ 238.884823][ T7826] ? lockdep_hardirqs_on+0x7c/0x110 [ 238.884866][ T7826] hci_rx_work+0x2c9/0x1020 [ 238.884903][ T7826] process_one_work+0x9ba/0x1b20 [ 238.884944][ T7826] ? __pfx_process_one_work+0x10/0x10 [ 238.884981][ T7826] ? assign_work+0x1a0/0x250 [ 238.885008][ T7826] worker_thread+0x6c8/0xf10 [ 238.885045][ T7826] ? __kthread_parkme+0x19e/0x250 [ 238.885082][ T7826] ? __pfx_worker_thread+0x10/0x10 [ 238.885108][ T7826] kthread+0x3c5/0x780 [ 238.885133][ T7826] ? __pfx_kthread+0x10/0x10 [ 238.885159][ T7826] ? rcu_is_watching+0x12/0xc0 [ 238.885192][ T7826] ? __pfx_kthread+0x10/0x10 [ 238.885217][ T7826] ret_from_fork+0x983/0xb10 [ 238.885243][ T7826] ? __pfx_ret_from_fork+0x10/0x10 [ 238.885270][ T7826] ? __switch_to+0x7af/0x10d0 [ 238.885301][ T7826] ? __pfx_kthread+0x10/0x10 [ 238.885326][ T7826] ret_from_fork_asm+0x1a/0x30 [ 238.885388][ T7826] [ 238.885426][ T7826] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 238.961437][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 238.964540][ T7826] Bluetooth: hci0: failed to register connection device [ 239.840456][ T8229] FAULT_INJECTION: forcing a failure. [ 239.840456][ T8229] name failslab, interval 1, probability 0, space 0, times 0 [ 239.863992][ T8229] CPU: 0 UID: 0 PID: 8229 Comm: syz.2.495 Tainted: G U L syzkaller #0 PREEMPT(full) [ 239.864049][ T8229] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 239.864063][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.864083][ T8229] Call Trace: [ 239.864093][ T8229] [ 239.864105][ T8229] dump_stack_lvl+0x16c/0x1f0 [ 239.864158][ T8229] should_fail_ex+0x512/0x640 [ 239.864191][ T8229] ? __kmalloc_cache_noprof+0x5f/0x800 [ 239.864232][ T8229] should_failslab+0xc2/0x120 [ 239.864290][ T8229] __kmalloc_cache_noprof+0x80/0x800 [ 239.864327][ T8229] ? __do_sys_memfd_create+0x18e/0xba0 [ 239.864365][ T8229] ? __pfx___x64_sys_futex+0x10/0x10 [ 239.864403][ T8229] ? __do_sys_memfd_create+0x18e/0xba0 [ 239.864435][ T8229] __do_sys_memfd_create+0x18e/0xba0 [ 239.864478][ T8229] do_syscall_64+0xcd/0xf80 [ 239.864528][ T8229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.864558][ T8229] RIP: 0033:0x7f25e238f7c9 [ 239.864585][ T8229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.864616][ T8229] RSP: 002b:00007f25e32d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 239.864647][ T8229] RAX: ffffffffffffffda RBX: 00007f25e25e5fa0 RCX: 00007f25e238f7c9 [ 239.864668][ T8229] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 239.864686][ T8229] RBP: 00007f25e2413f91 R08: 0000000000000000 R09: 0000000000000000 [ 239.864705][ T8229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.864724][ T8229] R13: 00007f25e25e6038 R14: 00007f25e25e5fa0 R15: 00007ffc8c392dd8 [ 239.864766][ T8229] [ 240.394087][ T7826] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 240.851627][ T8250] netlink: 'syz.3.500': attribute type 11 has an invalid length. [ 240.979253][ T8250] FAULT_INJECTION: forcing a failure. [ 240.979253][ T8250] name failslab, interval 1, probability 0, space 0, times 0 [ 241.019678][ T8250] CPU: 0 UID: 0 PID: 8250 Comm: syz.3.500 Tainted: G U L syzkaller #0 PREEMPT(full) [ 241.019735][ T8250] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 241.019748][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.019767][ T8250] Call Trace: [ 241.019778][ T8250] [ 241.019790][ T8250] dump_stack_lvl+0x16c/0x1f0 [ 241.019844][ T8250] should_fail_ex+0x512/0x640 [ 241.019879][ T8250] ? kmem_cache_alloc_noprof+0x62/0x770 [ 241.019922][ T8250] should_failslab+0xc2/0x120 [ 241.019972][ T8250] kmem_cache_alloc_noprof+0x83/0x770 [ 241.020009][ T8250] ? futex_wait+0xe0/0x380 [ 241.020051][ T8250] ? do_epoll_ctl+0x1170/0x3790 [ 241.020111][ T8250] ? do_epoll_ctl+0x1170/0x3790 [ 241.020161][ T8250] do_epoll_ctl+0x1170/0x3790 [ 241.020212][ T8250] ? io_uring_setup+0x137/0x1f60 [ 241.020270][ T8250] ? __pfx_do_epoll_ctl+0x10/0x10 [ 241.020362][ T8250] ? find_held_lock+0x2b/0x80 [ 241.020402][ T8250] ? __might_fault+0xe3/0x190 [ 241.020438][ T8250] ? __might_fault+0xe3/0x190 [ 241.020492][ T8250] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 241.020540][ T8250] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 241.020590][ T8250] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 241.020655][ T8250] do_syscall_64+0xcd/0xf80 [ 241.020707][ T8250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.020739][ T8250] RIP: 0033:0x7f7f2b78f7c9 [ 241.020765][ T8250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.020797][ T8250] RSP: 002b:00007f7f2c584038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 241.020828][ T8250] RAX: ffffffffffffffda RBX: 00007f7f2b9e5fa0 RCX: 00007f7f2b78f7c9 [ 241.020849][ T8250] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 241.020868][ T8250] RBP: 00007f7f2b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 241.020887][ T8250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.020906][ T8250] R13: 00007f7f2b9e6038 R14: 00007f7f2b9e5fa0 R15: 00007ffeb9e4e688 [ 241.020950][ T8250] [ 241.243806][ T7826] Bluetooth: hci0: command 0x0406 tx timeout [ 241.258111][ T8254] FAULT_INJECTION: forcing a failure. [ 241.258111][ T8254] name failslab, interval 1, probability 0, space 0, times 0 [ 241.271159][ T8254] CPU: 1 UID: 0 PID: 8254 Comm: syz.0.502 Tainted: G U L syzkaller #0 PREEMPT(full) [ 241.271212][ T8254] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 241.271224][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.271241][ T8254] Call Trace: [ 241.271252][ T8254] [ 241.271265][ T8254] dump_stack_lvl+0x16c/0x1f0 [ 241.271315][ T8254] should_fail_ex+0x512/0x640 [ 241.271350][ T8254] ? kmem_cache_alloc_noprof+0x62/0x770 [ 241.271394][ T8254] should_failslab+0xc2/0x120 [ 241.271440][ T8254] kmem_cache_alloc_noprof+0x83/0x770 [ 241.271478][ T8254] ? __proc_create+0x2c8/0x8d0 [ 241.271525][ T8254] ? __proc_create+0x2c8/0x8d0 [ 241.271573][ T8254] __proc_create+0x2c8/0x8d0 [ 241.271608][ T8254] ? __pfx___proc_create+0x10/0x10 [ 241.271653][ T8254] _proc_mkdir+0xb9/0x210 [ 241.271686][ T8254] ? __pfx__proc_mkdir+0x10/0x10 [ 241.271717][ T8254] ? kmem_cache_alloc_noprof+0x2af/0x770 [ 241.271745][ T8254] ? proc_net_ns_init+0x42/0x420 [ 241.271785][ T8254] proc_net_ns_init+0x273/0x420 [ 241.271826][ T8254] ? __pfx_proc_net_ns_init+0x10/0x10 [ 241.271859][ T8254] ops_init+0x1e2/0x5f0 [ 241.271896][ T8254] setup_net+0x11d/0x3a0 [ 241.271929][ T8254] ? __pfx_setup_net+0x10/0x10 [ 241.271960][ T8254] ? lockdep_init_map_type+0x5c/0x270 [ 241.271986][ T8254] ? mutex_init_lockep+0x110/0x150 [ 241.272016][ T8254] copy_net_ns+0x351/0x7c0 [ 241.272055][ T8254] create_new_namespaces+0x3ea/0xab0 [ 241.272097][ T8254] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 241.272134][ T8254] ksys_unshare+0x45b/0xa40 [ 241.272172][ T8254] ? __pfx_ksys_unshare+0x10/0x10 [ 241.272214][ T8254] ? syscall_user_dispatch+0x78/0x140 [ 241.272252][ T8254] __x64_sys_unshare+0x31/0x40 [ 241.272273][ T8254] do_syscall_64+0xcd/0xf80 [ 241.272312][ T8254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.272336][ T8254] RIP: 0033:0x7ff84db8f7c9 [ 241.272356][ T8254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.272381][ T8254] RSP: 002b:00007ff84bdee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 241.272406][ T8254] RAX: ffffffffffffffda RBX: 00007ff84dde5fa0 RCX: 00007ff84db8f7c9 [ 241.272422][ T8254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 241.272437][ T8254] RBP: 00007ff84dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 241.272451][ T8254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.272465][ T8254] R13: 00007ff84dde6038 R14: 00007ff84dde5fa0 R15: 00007ffd9fd5dbc8 [ 241.272499][ T8254] [ 241.559587][ T8258] netlink: 'syz.1.504': attribute type 11 has an invalid length. [ 241.650861][ T8259] netlink: 'syz.2.503': attribute type 11 has an invalid length. [ 241.699342][ T8261] FAULT_INJECTION: forcing a failure. [ 241.699342][ T8261] name failslab, interval 1, probability 0, space 0, times 0 [ 241.714487][ T8261] CPU: 1 UID: 0 PID: 8261 Comm: syz.1.504 Tainted: G U L syzkaller #0 PREEMPT(full) [ 241.714550][ T8261] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 241.714562][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.714580][ T8261] Call Trace: [ 241.714589][ T8261] [ 241.714600][ T8261] dump_stack_lvl+0x16c/0x1f0 [ 241.714651][ T8261] should_fail_ex+0x512/0x640 [ 241.714684][ T8261] ? kmem_cache_alloc_noprof+0x62/0x770 [ 241.714724][ T8261] should_failslab+0xc2/0x120 [ 241.714770][ T8261] kmem_cache_alloc_noprof+0x83/0x770 [ 241.714804][ T8261] ? futex_wait+0xe0/0x380 [ 241.714843][ T8261] ? do_epoll_ctl+0x1170/0x3790 [ 241.714900][ T8261] ? do_epoll_ctl+0x1170/0x3790 [ 241.714946][ T8261] do_epoll_ctl+0x1170/0x3790 [ 241.714996][ T8261] ? io_uring_setup+0x137/0x1f60 [ 241.715049][ T8261] ? __pfx_do_epoll_ctl+0x10/0x10 [ 241.715096][ T8261] ? find_held_lock+0x2b/0x80 [ 241.715134][ T8261] ? __might_fault+0xe3/0x190 [ 241.715168][ T8261] ? __might_fault+0xe3/0x190 [ 241.715216][ T8261] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 241.715258][ T8261] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 241.715304][ T8261] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 241.715365][ T8261] do_syscall_64+0xcd/0xf80 [ 241.715412][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.715441][ T8261] RIP: 0033:0x7f22bb58f7c9 [ 241.715466][ T8261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.715493][ T8261] RSP: 002b:00007f22bc424038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 241.715533][ T8261] RAX: ffffffffffffffda RBX: 00007f22bb7e6090 RCX: 00007f22bb58f7c9 [ 241.715552][ T8261] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 241.715569][ T8261] RBP: 00007f22bb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 241.715590][ T8261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.715608][ T8261] R13: 00007f22bb7e6128 R14: 00007f22bb7e6090 R15: 00007ffe30f1a5a8 [ 241.715648][ T8261] [ 241.929253][ T8265] FAULT_INJECTION: forcing a failure. [ 241.929253][ T8265] name failslab, interval 1, probability 0, space 0, times 0 [ 241.941992][ T8265] CPU: 1 UID: 0 PID: 8265 Comm: syz.2.503 Tainted: G U L syzkaller #0 PREEMPT(full) [ 241.942044][ T8265] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 241.942056][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.942073][ T8265] Call Trace: [ 241.942084][ T8265] [ 241.942096][ T8265] dump_stack_lvl+0x16c/0x1f0 [ 241.942149][ T8265] should_fail_ex+0x512/0x640 [ 241.942181][ T8265] ? kmem_cache_alloc_noprof+0x62/0x770 [ 241.942221][ T8265] should_failslab+0xc2/0x120 [ 241.942269][ T8265] kmem_cache_alloc_noprof+0x83/0x770 [ 241.942314][ T8265] ? futex_wait+0xe0/0x380 [ 241.942355][ T8265] ? do_epoll_ctl+0x1170/0x3790 [ 241.942413][ T8265] ? do_epoll_ctl+0x1170/0x3790 [ 241.942463][ T8265] do_epoll_ctl+0x1170/0x3790 [ 241.942509][ T8265] ? io_uring_setup+0x137/0x1f60 [ 241.942562][ T8265] ? __pfx_do_epoll_ctl+0x10/0x10 [ 241.942608][ T8265] ? find_held_lock+0x2b/0x80 [ 241.942648][ T8265] ? __might_fault+0xe3/0x190 [ 241.942682][ T8265] ? __might_fault+0xe3/0x190 [ 241.942734][ T8265] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 241.942789][ T8265] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 241.942838][ T8265] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 241.942902][ T8265] do_syscall_64+0xcd/0xf80 [ 241.942953][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.942985][ T8265] RIP: 0033:0x7f25e238f7c9 [ 241.943008][ T8265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.943039][ T8265] RSP: 002b:00007f25e32af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 241.943069][ T8265] RAX: ffffffffffffffda RBX: 00007f25e25e6090 RCX: 00007f25e238f7c9 [ 241.943091][ T8265] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 241.943109][ T8265] RBP: 00007f25e2413f91 R08: 0000000000000000 R09: 0000000000000000 [ 241.943128][ T8265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.943147][ T8265] R13: 00007f25e25e6128 R14: 00007f25e25e6090 R15: 00007ffc8c392dd8 [ 241.943191][ T8265] [ 242.394925][ T8268] ======================================================= [ 242.394925][ T8268] WARNING: The mand mount option has been deprecated and [ 242.394925][ T8268] and is ignored by this kernel. Remove the mand [ 242.394925][ T8268] option from the mount to silence this warning. [ 242.394925][ T8268] ======================================================= [ 242.446562][ T8270] scsi_strcpy_devinfo: vendor string 'íÙ/&cžÀ~n] ò | [ 242.446562][ T8270] MÅ' is too long [ 242.496911][ T8272] sp0: Synchronizing with TNC [ 242.501719][ T8270] scsi_strcpy_devinfo: model string '’Dd5‚ ÕK€2bÛ [ 242.501719][ T8270] ††½WÏõ›ú «ú' is too long [ 242.529245][ T8276] FAULT_INJECTION: forcing a failure. [ 242.529245][ T8276] name failslab, interval 1, probability 0, space 0, times 0 [ 242.564221][ T8276] CPU: 1 UID: 0 PID: 8276 Comm: syz.1.507 Tainted: G U L syzkaller #0 PREEMPT(full) [ 242.564254][ T8276] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 242.564269][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.564280][ T8276] Call Trace: [ 242.564286][ T8276] [ 242.564294][ T8276] dump_stack_lvl+0x16c/0x1f0 [ 242.564326][ T8276] should_fail_ex+0x512/0x640 [ 242.564347][ T8276] ? fs_reclaim_acquire+0xae/0x150 [ 242.564379][ T8276] should_failslab+0xc2/0x120 [ 242.564407][ T8276] __kmalloc_noprof+0xeb/0x910 [ 242.564427][ T8276] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 242.564458][ T8276] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 242.564482][ T8276] tomoyo_realpath_from_path+0xc2/0x6e0 [ 242.564510][ T8276] ? tomoyo_profile+0x47/0x60 [ 242.564543][ T8276] tomoyo_path_number_perm+0x245/0x580 [ 242.564563][ T8276] ? tomoyo_path_number_perm+0x237/0x580 [ 242.564586][ T8276] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 242.564609][ T8276] ? find_held_lock+0x2b/0x80 [ 242.564653][ T8276] ? find_held_lock+0x2b/0x80 [ 242.564676][ T8276] ? hook_file_ioctl_common+0x144/0x410 [ 242.564703][ T8276] ? __fget_files+0x20e/0x3c0 [ 242.564732][ T8276] security_file_ioctl+0x9b/0x240 [ 242.564756][ T8276] __x64_sys_ioctl+0xb7/0x210 [ 242.564780][ T8276] do_syscall_64+0xcd/0xf80 [ 242.564810][ T8276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.564828][ T8276] RIP: 0033:0x7f22bb58f7c9 [ 242.564844][ T8276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.564861][ T8276] RSP: 002b:00007f22bc424038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.564879][ T8276] RAX: ffffffffffffffda RBX: 00007f22bb7e6090 RCX: 00007f22bb58f7c9 [ 242.564891][ T8276] RDX: 0000200000000300 RSI: 0000000000005412 RDI: 0000000000000007 [ 242.564902][ T8276] RBP: 00007f22bc424090 R08: 0000000000000000 R09: 0000000000000000 [ 242.564913][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.564923][ T8276] R13: 00007f22bb7e6128 R14: 00007f22bb7e6090 R15: 00007ffe30f1a5a8 [ 242.564946][ T8276] [ 242.564953][ T8276] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.794462][ T7826] Bluetooth: hci1: command 0x0406 tx timeout [ 242.815911][ T7279] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 242.935500][ T8278] FAULT_INJECTION: forcing a failure. [ 242.935500][ T8278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.956048][ T8278] CPU: 0 UID: 0 PID: 8278 Comm: syz.2.509 Tainted: G U L syzkaller #0 PREEMPT(full) [ 242.956101][ T8278] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 242.956113][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.956133][ T8278] Call Trace: [ 242.956142][ T8278] [ 242.956154][ T8278] dump_stack_lvl+0x16c/0x1f0 [ 242.956208][ T8278] should_fail_ex+0x512/0x640 [ 242.956248][ T8278] core_sys_select+0x9cf/0xc20 [ 242.956301][ T8278] ? __pfx_core_sys_select+0x10/0x10 [ 242.956354][ T8278] ? futex_wait+0x120/0x380 [ 242.956427][ T8278] ? __pfx_do_futex+0x10/0x10 [ 242.956474][ T8278] kern_select+0x15d/0x1e0 [ 242.956516][ T8278] ? __pfx_kern_select+0x10/0x10 [ 242.956573][ T8278] ? xfd_validate_state+0x61/0x180 [ 242.956601][ T8278] ? __pfx_ksys_write+0x10/0x10 [ 242.956652][ T8278] __x64_sys_select+0xbd/0x160 [ 242.956694][ T8278] ? do_syscall_64+0x91/0xf80 [ 242.956739][ T8278] ? lockdep_hardirqs_on+0x7c/0x110 [ 242.956785][ T8278] do_syscall_64+0xcd/0xf80 [ 242.956835][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.956868][ T8278] RIP: 0033:0x7f25e238f7c9 [ 242.956893][ T8278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.956924][ T8278] RSP: 002b:00007f25e32d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 242.956954][ T8278] RAX: ffffffffffffffda RBX: 00007f25e25e5fa0 RCX: 00007f25e238f7c9 [ 242.956975][ T8278] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 242.956993][ T8278] RBP: 00007f25e2413f91 R08: 0000000000000000 R09: 0000000000000000 [ 242.957012][ T8278] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 242.957031][ T8278] R13: 00007f25e25e6038 R14: 00007f25e25e5fa0 R15: 00007ffc8c392dd8 [ 242.957072][ T8278] [ 243.391245][ T7279] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 243.564171][ T7279] Bluetooth: hci0: command 0x0406 tx timeout [ 245.482957][ T7826] Bluetooth: hci1: command 0x0406 tx timeout [ 246.235624][ T8340] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 246.557361][ T8349] Invalid ELF header magic: != ELF [ 247.563735][ T7289] Bluetooth: hci1: command 0x0406 tx timeout syzkaller syzkaller login: [ 247.840548][ T30] audit: type=1800 audit(1766424844.285:3): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.536" name="lu_gp_id" dev="configfs" ino=34974 res=0 errno=0 [ 248.085377][ T7826] Bluetooth: hci2: unexpected event 0x20 length: 123 > 7 [ 248.672661][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 249.023578][ T8421] netlink: 334 bytes leftover after parsing attributes in process `syz.0.546'. [ 250.113512][ T7826] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 252.522360][ T8512] FAULT_INJECTION: forcing a failure. [ 252.522360][ T8512] name failslab, interval 1, probability 0, space 0, times 0 [ 252.555635][ T8512] CPU: 1 UID: 0 PID: 8512 Comm: syz.2.567 Tainted: G U L syzkaller #0 PREEMPT(full) [ 252.555693][ T8512] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 252.555705][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.555724][ T8512] Call Trace: [ 252.555733][ T8512] [ 252.555745][ T8512] dump_stack_lvl+0x16c/0x1f0 [ 252.555797][ T8512] should_fail_ex+0x512/0x640 [ 252.555833][ T8512] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 252.555884][ T8512] should_failslab+0xc2/0x120 [ 252.555932][ T8512] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 252.555973][ T8512] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 252.556031][ T8512] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 252.556079][ T8512] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 252.556129][ T8512] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 252.556180][ T8512] alloc_inode+0x64/0x240 [ 252.556217][ T8512] new_inode+0x22/0x1c0 [ 252.556256][ T8512] hugetlbfs_get_inode+0x354/0x700 [ 252.556293][ T8512] hugetlb_file_setup+0x15b/0x620 [ 252.556330][ T8512] ksys_mmap_pgoff+0x189/0x5c0 [ 252.556391][ T8512] __x64_sys_mmap+0x125/0x190 [ 252.556430][ T8512] do_syscall_64+0xcd/0xf80 [ 252.556482][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.556514][ T8512] RIP: 0033:0x7f25e238f7c9 [ 252.556541][ T8512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.556572][ T8512] RSP: 002b:00007f25e32d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 252.556604][ T8512] RAX: ffffffffffffffda RBX: 00007f25e25e5fa0 RCX: 00007f25e238f7c9 [ 252.556626][ T8512] RDX: 0000000000000002 RSI: 0000000000200006 RDI: 0000000000000000 [ 252.556645][ T8512] RBP: 00007f25e2413f91 R08: 0000000000000602 R09: 0000300000000000 [ 252.556664][ T8512] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 252.556683][ T8512] R13: 00007f25e25e6038 R14: 00007f25e25e5fa0 R15: 00007ffc8c392dd8 [ 252.556726][ T8512] [ 252.963660][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 253.472299][ T8533] FAULT_INJECTION: forcing a failure. [ 253.472299][ T8533] name failslab, interval 1, probability 0, space 0, times 0 [ 253.498739][ T8533] CPU: 1 UID: 0 PID: 8533 Comm: syz.0.571 Tainted: G U L syzkaller #0 PREEMPT(full) [ 253.498795][ T8533] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 253.498807][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.498826][ T8533] Call Trace: [ 253.498836][ T8533] [ 253.498847][ T8533] dump_stack_lvl+0x16c/0x1f0 [ 253.498900][ T8533] should_fail_ex+0x512/0x640 [ 253.498934][ T8533] ? __kmalloc_cache_noprof+0x5f/0x800 [ 253.498975][ T8533] should_failslab+0xc2/0x120 [ 253.499023][ T8533] __kmalloc_cache_noprof+0x80/0x800 [ 253.499059][ T8533] ? __do_sys_memfd_create+0x18e/0xba0 [ 253.499102][ T8533] ? __do_sys_memfd_create+0x18e/0xba0 [ 253.499137][ T8533] __do_sys_memfd_create+0x18e/0xba0 [ 253.499182][ T8533] do_syscall_64+0xcd/0xf80 [ 253.499232][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.499271][ T8533] RIP: 0033:0x7ff84db8f7c9 [ 253.499297][ T8533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.499328][ T8533] RSP: 002b:00007ff84bdee038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 253.499359][ T8533] RAX: ffffffffffffffda RBX: 00007ff84dde5fa0 RCX: 00007ff84db8f7c9 [ 253.499386][ T8533] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 253.499405][ T8533] RBP: 00007ff84dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 253.499424][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.499442][ T8533] R13: 00007ff84dde6038 R14: 00007ff84dde5fa0 R15: 00007ffd9fd5dbc8 [ 253.499485][ T8533] [ 253.972375][ T8543] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3383192691 (6766385382 ns) > initial count (131074 ns). Using initial count to start timer. [ 254.162942][ T8562] FAULT_INJECTION: forcing a failure. [ 254.162942][ T8562] name failslab, interval 1, probability 0, space 0, times 0 [ 254.176803][ T8562] CPU: 0 UID: 0 PID: 8562 Comm: syz.3.576 Tainted: G U L syzkaller #0 PREEMPT(full) [ 254.176855][ T8562] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 254.176868][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.176887][ T8562] Call Trace: [ 254.176897][ T8562] [ 254.176909][ T8562] dump_stack_lvl+0x16c/0x1f0 [ 254.176962][ T8562] should_fail_ex+0x512/0x640 [ 254.176997][ T8562] ? __kmalloc_cache_noprof+0x5f/0x800 [ 254.177037][ T8562] should_failslab+0xc2/0x120 [ 254.177092][ T8562] __kmalloc_cache_noprof+0x80/0x800 [ 254.177127][ T8562] ? net_alloc_generic+0x1e/0x70 [ 254.177169][ T8562] ? copy_net_ns+0xe8/0x7c0 [ 254.177210][ T8562] ? copy_net_ns+0x135/0x7c0 [ 254.177262][ T8562] ? copy_net_ns+0x135/0x7c0 [ 254.177305][ T8562] copy_net_ns+0x135/0x7c0 [ 254.177347][ T8562] ? copy_cgroup_ns+0x71/0x980 [ 254.177383][ T8562] create_new_namespaces+0x3ea/0xab0 [ 254.177436][ T8562] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 254.177483][ T8562] ksys_unshare+0x45b/0xa40 [ 254.177532][ T8562] ? __pfx_ksys_unshare+0x10/0x10 [ 254.177582][ T8562] ? xfd_validate_state+0x61/0x180 [ 254.177623][ T8562] __x64_sys_unshare+0x31/0x40 [ 254.177650][ T8562] do_syscall_64+0xcd/0xf80 [ 254.177700][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.177732][ T8562] RIP: 0033:0x7f7f2b78f7c9 [ 254.177756][ T8562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.177787][ T8562] RSP: 002b:00007f7f2c584038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 254.177818][ T8562] RAX: ffffffffffffffda RBX: 00007f7f2b9e5fa0 RCX: 00007f7f2b78f7c9 [ 254.177838][ T8562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 254.177857][ T8562] RBP: 00007f7f2b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 254.177876][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.177895][ T8562] R13: 00007f7f2b9e6038 R14: 00007f7f2b9e5fa0 R15: 00007ffeb9e4e688 [ 254.177937][ T8562] [ 254.610424][ T8555] sock: sock_timestamping_bind_phc: sock not bind to device [ 255.719674][ T7826] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7 [ 255.753871][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 256.134573][ T8608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.582'. [ 256.351187][ T8614] FAULT_INJECTION: forcing a failure. [ 256.351187][ T8614] name failslab, interval 1, probability 0, space 0, times 0 [ 256.448424][ T8614] CPU: 1 UID: 0 PID: 8614 Comm: syz.2.583 Tainted: G U L syzkaller #0 PREEMPT(full) [ 256.448483][ T8614] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 256.448496][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.448516][ T8614] Call Trace: [ 256.448526][ T8614] [ 256.448539][ T8614] dump_stack_lvl+0x16c/0x1f0 [ 256.448591][ T8614] should_fail_ex+0x512/0x640 [ 256.448623][ T8614] ? __kmalloc_cache_noprof+0x5f/0x800 [ 256.448663][ T8614] should_failslab+0xc2/0x120 [ 256.448713][ T8614] __kmalloc_cache_noprof+0x80/0x800 [ 256.448752][ T8614] ? __do_sys_memfd_create+0x18e/0xba0 [ 256.448793][ T8614] ? __do_sys_memfd_create+0x18e/0xba0 [ 256.448828][ T8614] __do_sys_memfd_create+0x18e/0xba0 [ 256.448872][ T8614] do_syscall_64+0xcd/0xf80 [ 256.448920][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.448952][ T8614] RIP: 0033:0x7f25e238f7c9 [ 256.448979][ T8614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.449011][ T8614] RSP: 002b:00007f25e32d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 256.449044][ T8614] RAX: ffffffffffffffda RBX: 00007f25e25e5fa0 RCX: 00007f25e238f7c9 [ 256.449065][ T8614] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 256.449085][ T8614] RBP: 00007f25e2413f91 R08: 0000000000000000 R09: 0000000000000000 [ 256.449113][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.449132][ T8614] R13: 00007f25e25e6038 R14: 00007f25e25e5fa0 R15: 00007ffc8c392dd8 [ 256.449175][ T8614] [ 258.031010][ T8651] FAULT_INJECTION: forcing a failure. [ 258.031010][ T8651] name fail_futex, interval 1, probability 0, space 0, times 0 [ 258.113931][ T8651] CPU: 1 UID: 0 PID: 8651 Comm: syz.3.590 Tainted: G U L syzkaller #0 PREEMPT(full) [ 258.113989][ T8651] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 258.114001][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.114019][ T8651] Call Trace: [ 258.114030][ T8651] [ 258.114042][ T8651] dump_stack_lvl+0x16c/0x1f0 [ 258.114090][ T8651] should_fail_ex+0x512/0x640 [ 258.114131][ T8651] get_futex_key+0x1d0/0x15f0 [ 258.114168][ T8651] ? mark_held_locks+0x49/0x80 [ 258.114199][ T8651] ? __pfx_get_futex_key+0x10/0x10 [ 258.114230][ T8651] ? __pfx_flush_tlb_func+0x10/0x10 [ 258.114265][ T8651] ? smp_call_function_many_cond+0x457/0x15e0 [ 258.114328][ T8651] ? __pfx_should_flush_tlb+0x10/0x10 [ 258.114381][ T8651] futex_wait_setup+0x9d/0x570 [ 258.114437][ T8651] __futex_wait+0x193/0x2f0 [ 258.114482][ T8651] ? __pfx___futex_wait+0x10/0x10 [ 258.114532][ T8651] ? __pfx_futex_wake_mark+0x10/0x10 [ 258.114581][ T8651] ? futex_hash+0x2c5/0x380 [ 258.114619][ T8651] ? futex_private_hash_put+0x160/0x1b0 [ 258.114657][ T8651] futex_wait+0xe8/0x380 [ 258.114699][ T8651] ? __pfx_futex_wait+0x10/0x10 [ 258.114764][ T8651] do_futex+0x229/0x350 [ 258.114801][ T8651] ? __pfx_do_futex+0x10/0x10 [ 258.114847][ T8651] __x64_sys_futex+0x1e0/0x4c0 [ 258.114890][ T8651] ? __pfx___x64_sys_futex+0x10/0x10 [ 258.114933][ T8651] ? xfd_validate_state+0x61/0x180 [ 258.114960][ T8651] ? __pfx_ksys_write+0x10/0x10 [ 258.115020][ T8651] do_syscall_64+0xcd/0xf80 [ 258.115072][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.115103][ T8651] RIP: 0033:0x7f7f2b78f7c9 [ 258.115129][ T8651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.115159][ T8651] RSP: 002b:00007f7f2c5840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 258.115189][ T8651] RAX: ffffffffffffffda RBX: 00007f7f2b9e5fa8 RCX: 00007f7f2b78f7c9 [ 258.115209][ T8651] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7f2b9e5fa8 [ 258.115229][ T8651] RBP: 00007f7f2b9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 258.115248][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.115266][ T8651] R13: 00007f7f2b9e6038 R14: 00007ffeb9e4e5a0 R15: 00007ffeb9e4e688 [ 258.115306][ T8651] [ 258.724276][ T8662] FAULT_INJECTION: forcing a failure. [ 258.724276][ T8662] name failslab, interval 1, probability 0, space 0, times 0 [ 258.772271][ T8662] CPU: 1 UID: 0 PID: 8662 Comm: syz.0.600 Tainted: G U L syzkaller #0 PREEMPT(full) [ 258.772306][ T8662] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 258.772313][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.772324][ T8662] Call Trace: [ 258.772330][ T8662] [ 258.772338][ T8662] dump_stack_lvl+0x16c/0x1f0 [ 258.772371][ T8662] should_fail_ex+0x512/0x640 [ 258.772393][ T8662] ? __kmalloc_noprof+0xca/0x910 [ 258.772415][ T8662] should_failslab+0xc2/0x120 [ 258.772444][ T8662] __kmalloc_noprof+0xeb/0x910 [ 258.772464][ T8662] ? __pfx_inc_ucount+0x10/0x10 [ 258.772481][ T8662] ? net_alloc_generic+0x1e/0x70 [ 258.772509][ T8662] ? net_alloc_generic+0x1e/0x70 [ 258.772533][ T8662] net_alloc_generic+0x1e/0x70 [ 258.772557][ T8662] copy_net_ns+0xc6/0x7c0 [ 258.772583][ T8662] ? copy_cgroup_ns+0x71/0x980 [ 258.772604][ T8662] create_new_namespaces+0x3ea/0xab0 [ 258.772634][ T8662] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 258.772662][ T8662] ksys_unshare+0x45b/0xa40 [ 258.772691][ T8662] ? __pfx_ksys_unshare+0x10/0x10 [ 258.772721][ T8662] ? xfd_validate_state+0x61/0x180 [ 258.772744][ T8662] __x64_sys_unshare+0x31/0x40 [ 258.772761][ T8662] do_syscall_64+0xcd/0xf80 [ 258.772809][ T8662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.772840][ T8662] RIP: 0033:0x7ff84db8f7c9 [ 258.772865][ T8662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.772894][ T8662] RSP: 002b:00007ff84bdee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 258.772925][ T8662] RAX: ffffffffffffffda RBX: 00007ff84dde5fa0 RCX: 00007ff84db8f7c9 [ 258.772946][ T8662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 258.772966][ T8662] RBP: 00007ff84dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 258.772985][ T8662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.773004][ T8662] R13: 00007ff84dde6038 R14: 00007ff84dde5fa0 R15: 00007ffd9fd5dbc8 [ 258.773056][ T8662] [ 259.849722][ T8674] futex_wake_op: syz.1.594 tries to shift op by -2048; fix this program [ 259.858316][ T8674] futex_wake_op: syz.1.594 tries to shift op by -2048; fix this program [ 260.951521][ T8693] FAULT_INJECTION: forcing a failure. [ 260.951521][ T8693] name failslab, interval 1, probability 0, space 0, times 0 [ 261.001697][ T8693] CPU: 1 UID: 0 PID: 8693 Comm: syz.1.599 Tainted: G U L syzkaller #0 PREEMPT(full) [ 261.001757][ T8693] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 261.001768][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.001783][ T8693] Call Trace: [ 261.001791][ T8693] [ 261.001801][ T8693] dump_stack_lvl+0x16c/0x1f0 [ 261.001846][ T8693] should_fail_ex+0x512/0x640 [ 261.001874][ T8693] ? kmem_cache_alloc_noprof+0x62/0x770 [ 261.001909][ T8693] should_failslab+0xc2/0x120 [ 261.001946][ T8693] kmem_cache_alloc_noprof+0x83/0x770 [ 261.001977][ T8693] ? security_file_alloc+0x34/0x2b0 [ 261.002013][ T8693] ? security_file_alloc+0x34/0x2b0 [ 261.002042][ T8693] security_file_alloc+0x34/0x2b0 [ 261.002073][ T8693] init_file+0x93/0x4c0 [ 261.002098][ T8693] alloc_empty_file+0x73/0x1e0 [ 261.002125][ T8693] alloc_file_pseudo+0x13a/0x230 [ 261.002154][ T8693] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 261.002190][ T8693] __shmem_file_setup+0x1a8/0x350 [ 261.002241][ T8693] shmem_zero_setup+0x93/0x1b0 [ 261.002273][ T8693] __mmap_region+0x2271/0x2a00 [ 261.002306][ T8693] ? __pfx___mmap_region+0x10/0x10 [ 261.002343][ T8693] ? kvm_sched_clock_read+0x11/0x20 [ 261.002379][ T8693] ? sched_clock+0x38/0x60 [ 261.002431][ T8693] ? rcu_is_watching+0x12/0xc0 [ 261.002531][ T8693] ? rcu_is_watching+0x12/0xc0 [ 261.002573][ T8693] mmap_region+0x1ab/0x3f0 [ 261.002603][ T8693] ? __get_unmapped_area+0x267/0x3f0 [ 261.002643][ T8693] do_mmap+0xa3e/0x1210 [ 261.002704][ T8693] ? __pfx_do_mmap+0x10/0x10 [ 261.002742][ T8693] ? __pfx_down_write_killable+0x10/0x10 [ 261.002779][ T8693] vm_mmap_pgoff+0x29e/0x470 [ 261.002826][ T8693] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 261.002878][ T8693] ? __x64_sys_futex+0x1e0/0x4c0 [ 261.002913][ T8693] ? __x64_sys_futex+0x1e9/0x4c0 [ 261.002955][ T8693] ksys_mmap_pgoff+0x7d/0x5c0 [ 261.002997][ T8693] ? xfd_validate_state+0x61/0x180 [ 261.003025][ T8693] ? __pfx_ksys_write+0x10/0x10 [ 261.003075][ T8693] __x64_sys_mmap+0x125/0x190 [ 261.003112][ T8693] do_syscall_64+0xcd/0xf80 [ 261.003160][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.003193][ T8693] RIP: 0033:0x7f22bb58f7c9 [ 261.003227][ T8693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.003257][ T8693] RSP: 002b:00007f22bc445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 261.003286][ T8693] RAX: ffffffffffffffda RBX: 00007f22bb7e5fa0 RCX: 00007f22bb58f7c9 [ 261.003304][ T8693] RDX: 00000000000000e2 RSI: 0000000000020009 RDI: 0000000000000000 [ 261.003321][ T8693] RBP: 00007f22bb613f91 R08: 0000000000000405 R09: 0000000000008000 [ 261.003339][ T8693] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 261.003357][ T8693] R13: 00007f22bb7e6038 R14: 00007f22bb7e5fa0 R15: 00007ffe30f1a5a8 [ 261.003401][ T8693] [ 261.290141][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.299808][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.417440][ T8699] futex_wake_op: syz.2.602 tries to shift op by -1; fix this program [ 261.773395][ T8707] FAULT_INJECTION: forcing a failure. [ 261.773395][ T8707] name failslab, interval 1, probability 0, space 0, times 0 [ 261.833044][ T8707] CPU: 1 UID: 0 PID: 8707 Comm: syz.0.605 Tainted: G U L syzkaller #0 PREEMPT(full) [ 261.833100][ T8707] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 261.833113][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.833132][ T8707] Call Trace: [ 261.833142][ T8707] [ 261.833155][ T8707] dump_stack_lvl+0x16c/0x1f0 [ 261.833208][ T8707] should_fail_ex+0x512/0x640 [ 261.833242][ T8707] ? __kmalloc_noprof+0xca/0x910 [ 261.833280][ T8707] should_failslab+0xc2/0x120 [ 261.833327][ T8707] __kmalloc_noprof+0xeb/0x910 [ 261.833360][ T8707] ? __pfx_inc_ucount+0x10/0x10 [ 261.833388][ T8707] ? net_alloc_generic+0x1e/0x70 [ 261.833438][ T8707] ? net_alloc_generic+0x1e/0x70 [ 261.833478][ T8707] net_alloc_generic+0x1e/0x70 [ 261.833520][ T8707] copy_net_ns+0xc6/0x7c0 [ 261.833563][ T8707] ? copy_cgroup_ns+0x71/0x980 [ 261.833599][ T8707] create_new_namespaces+0x3ea/0xab0 [ 261.833651][ T8707] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 261.833699][ T8707] ksys_unshare+0x45b/0xa40 [ 261.833750][ T8707] ? __pfx_ksys_unshare+0x10/0x10 [ 261.833799][ T8707] ? xfd_validate_state+0x61/0x180 [ 261.833841][ T8707] __x64_sys_unshare+0x31/0x40 [ 261.833874][ T8707] do_syscall_64+0xcd/0xf80 [ 261.833925][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.833958][ T8707] RIP: 0033:0x7ff84db8f7c9 [ 261.833982][ T8707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.834021][ T8707] RSP: 002b:00007ff84bdee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 261.834051][ T8707] RAX: ffffffffffffffda RBX: 00007ff84dde5fa0 RCX: 00007ff84db8f7c9 [ 261.834072][ T8707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 261.834090][ T8707] RBP: 00007ff84dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 261.834110][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.834129][ T8707] R13: 00007ff84dde6038 R14: 00007ff84dde5fa0 R15: 00007ffd9fd5dbc8 [ 261.834172][ T8707] [ 262.715507][ T8725] netlink: 'syz.1.610': attribute type 11 has an invalid length. [ 262.799437][ T8725] FAULT_INJECTION: forcing a failure. [ 262.799437][ T8725] name failslab, interval 1, probability 0, space 0, times 0 [ 262.838668][ T8725] CPU: 1 UID: 0 PID: 8725 Comm: syz.1.610 Tainted: G U L syzkaller #0 PREEMPT(full) [ 262.838725][ T8725] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 262.838738][ T8725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 262.838757][ T8725] Call Trace: [ 262.838769][ T8725] [ 262.838781][ T8725] dump_stack_lvl+0x16c/0x1f0 [ 262.838833][ T8725] should_fail_ex+0x512/0x640 [ 262.838868][ T8725] ? kmem_cache_alloc_noprof+0x62/0x770 [ 262.838912][ T8725] should_failslab+0xc2/0x120 [ 262.838959][ T8725] kmem_cache_alloc_noprof+0x83/0x770 [ 262.838993][ T8725] ? futex_wait+0xe0/0x380 [ 262.839034][ T8725] ? do_epoll_ctl+0x1170/0x3790 [ 262.839091][ T8725] ? do_epoll_ctl+0x1170/0x3790 [ 262.839138][ T8725] do_epoll_ctl+0x1170/0x3790 [ 262.839188][ T8725] ? io_uring_setup+0x137/0x1f60 [ 262.839252][ T8725] ? __pfx_do_epoll_ctl+0x10/0x10 [ 262.839299][ T8725] ? find_held_lock+0x2b/0x80 [ 262.839338][ T8725] ? __might_fault+0xe3/0x190 [ 262.839374][ T8725] ? __might_fault+0xe3/0x190 [ 262.839429][ T8725] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 262.839477][ T8725] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 262.839530][ T8725] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 262.839594][ T8725] do_syscall_64+0xcd/0xf80 [ 262.839644][ T8725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.839676][ T8725] RIP: 0033:0x7f22bb58f7c9 [ 262.839702][ T8725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.839732][ T8725] RSP: 002b:00007f22bc445038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 262.839763][ T8725] RAX: ffffffffffffffda RBX: 00007f22bb7e5fa0 RCX: 00007f22bb58f7c9 [ 262.839783][ T8725] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 262.839802][ T8725] RBP: 00007f22bb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 262.839821][ T8725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.839839][ T8725] R13: 00007f22bb7e6038 R14: 00007f22bb7e5fa0 R15: 00007ffe30f1a5a8 [ 262.839883][ T8725] [ 263.293392][ T8730] FAULT_INJECTION: forcing a failure. [ 263.293392][ T8730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.334100][ T8730] CPU: 0 UID: 0 PID: 8730 Comm: syz.0.611 Tainted: G U L syzkaller #0 PREEMPT(full) [ 263.334156][ T8730] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 263.334168][ T8730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.334185][ T8730] Call Trace: [ 263.334194][ T8730] [ 263.334206][ T8730] dump_stack_lvl+0x16c/0x1f0 [ 263.334270][ T8730] should_fail_ex+0x512/0x640 [ 263.334310][ T8730] strncpy_from_user+0x3b/0x2e0 [ 263.334346][ T8730] __do_sys_memfd_create+0x1c5/0xba0 [ 263.334392][ T8730] do_syscall_64+0xcd/0xf80 [ 263.334439][ T8730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.334469][ T8730] RIP: 0033:0x7ff84db8f7c9 [ 263.334493][ T8730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.334522][ T8730] RSP: 002b:00007ff84bdee038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 263.334552][ T8730] RAX: ffffffffffffffda RBX: 00007ff84dde5fa0 RCX: 00007ff84db8f7c9 [ 263.334573][ T8730] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 263.334591][ T8730] RBP: 00007ff84dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 263.334609][ T8730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.334628][ T8730] R13: 00007ff84dde6038 R14: 00007ff84dde5fa0 R15: 00007ffd9fd5dbc8 [ 263.334670][ T8730] [ 263.516593][ T8732] sp0: Synchronizing with TNC [ 263.962138][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 264.365147][ T8761] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 264.450147][ T8766] i2c i2c-0: new_device: Invalid device name [ 265.453531][ T8781] FAULT_INJECTION: forcing a failure. [ 265.453531][ T8781] name failslab, interval 1, probability 0, space 0, times 0 [ 265.500483][ T8781] CPU: 1 UID: 0 PID: 8781 Comm: syz.0.622 Tainted: G U L syzkaller #0 PREEMPT(full) [ 265.500516][ T8781] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 265.500523][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.500534][ T8781] Call Trace: [ 265.500540][ T8781] [ 265.500547][ T8781] dump_stack_lvl+0x16c/0x1f0 [ 265.500579][ T8781] should_fail_ex+0x512/0x640 [ 265.500600][ T8781] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 265.500626][ T8781] should_failslab+0xc2/0x120 [ 265.500655][ T8781] kmem_cache_alloc_noprof+0x83/0x770 [ 265.500677][ T8781] ? skb_clone+0x190/0x3f0 [ 265.500705][ T8781] ? skb_clone+0x190/0x3f0 [ 265.500727][ T8781] skb_clone+0x190/0x3f0 [ 265.500751][ T8781] netlink_deliver_tap+0xabd/0xd30 [ 265.500781][ T8781] netlink_unicast+0x64c/0x870 [ 265.500811][ T8781] ? __pfx_netlink_unicast+0x10/0x10 [ 265.500846][ T8781] netlink_sendmsg+0x8c8/0xdd0 [ 265.500876][ T8781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.500906][ T8781] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 265.500944][ T8781] ____sys_sendmsg+0xa5d/0xc30 [ 265.500974][ T8781] ? copy_msghdr_from_user+0x10a/0x160 [ 265.500998][ T8781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.501037][ T8781] ___sys_sendmsg+0x134/0x1d0 [ 265.501062][ T8781] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.501111][ T8781] __sys_sendmsg+0x16d/0x220 [ 265.501135][ T8781] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.501181][ T8781] do_syscall_64+0xcd/0xf80 [ 265.501211][ T8781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.501230][ T8781] RIP: 0033:0x7ff84db8f7c9 [ 265.501247][ T8781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.501265][ T8781] RSP: 002b:00007ff84bdee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.501282][ T8781] RAX: ffffffffffffffda RBX: 00007ff84dde5fa0 RCX: 00007ff84db8f7c9 [ 265.501294][ T8781] RDX: 0000000004048000 RSI: 0000200000000180 RDI: 0000000000000003 [ 265.501306][ T8781] RBP: 00007ff84bdee090 R08: 0000000000000000 R09: 0000000000000000 [ 265.501316][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.501327][ T8781] R13: 00007ff84dde6038 R14: 00007ff84dde5fa0 R15: 00007ffd9fd5dbc8 [ 265.501350][ T8781] [ 266.109099][ T8792] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 266.702068][ T7826] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 266.719531][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 266.894782][ T8805] random: crng reseeded on system resumption [ 266.937498][ T8806] hub 1-0:1.0: USB hub found [ 266.981713][ T8806] hub 1-0:1.0: 1 port detected [ 267.485913][ T8818] FAULT_INJECTION: forcing a failure. [ 267.485913][ T8818] name failslab, interval 1, probability 0, space 0, times 0 [ 267.521159][ T8818] CPU: 1 UID: 0 PID: 8818 Comm: syz.0.631 Tainted: G U L syzkaller #0 PREEMPT(full) [ 267.521194][ T8818] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 267.521202][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.521214][ T8818] Call Trace: [ 267.521221][ T8818] [ 267.521229][ T8818] dump_stack_lvl+0x16c/0x1f0 [ 267.521261][ T8818] should_fail_ex+0x512/0x640 [ 267.521283][ T8818] ? __kmalloc_cache_noprof+0x5f/0x800 [ 267.521308][ T8818] should_failslab+0xc2/0x120 [ 267.521338][ T8818] __kmalloc_cache_noprof+0x80/0x800 [ 267.521360][ T8818] ? drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 267.521387][ T8818] ? drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 267.521409][ T8818] ? _raw_spin_unlock+0x28/0x50 [ 267.521433][ T8818] drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 267.521464][ T8818] drm_atomic_helper_commit+0xa9/0x380 [ 267.521487][ T8818] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 267.521510][ T8818] drm_atomic_commit+0x234/0x300 [ 267.521530][ T8818] ? __pfx_drm_atomic_commit+0x10/0x10 [ 267.521550][ T8818] ? __pfx___drm_printfn_info+0x10/0x10 [ 267.521586][ T8818] ? drm_client_rotation+0x4da/0x6a0 [ 267.521613][ T8818] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 267.521643][ T8818] ? __mutex_lock+0x27b/0x1ca0 [ 267.521672][ T8818] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 267.521696][ T8818] ? trace_contention_end+0xdd/0x110 [ 267.521737][ T8818] drm_client_modeset_commit_locked+0x14d/0x580 [ 267.521766][ T8818] drm_client_modeset_commit+0x4f/0x80 [ 267.521790][ T8818] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 267.521816][ T8818] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 267.521842][ T8818] drm_fbdev_client_restore+0x1b/0x30 [ 267.521871][ T8818] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 267.521908][ T8818] drm_client_dev_restore+0x200/0x2a0 [ 267.521936][ T8818] drm_release+0x2c6/0x360 [ 267.521959][ T8818] ? __pfx_drm_release+0x10/0x10 [ 267.521979][ T8818] __fput+0x402/0xb70 [ 267.522005][ T8818] task_work_run+0x150/0x240 [ 267.522027][ T8818] ? __pfx_task_work_run+0x10/0x10 [ 267.522046][ T8818] ? __do_sys_close_range+0x278/0x730 [ 267.522082][ T8818] exit_to_user_mode_loop+0xfb/0x540 [ 267.522108][ T8818] do_syscall_64+0x4ee/0xf80 [ 267.522138][ T8818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.522159][ T8818] RIP: 0033:0x7ff84db8f7c9 [ 267.522175][ T8818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.522193][ T8818] RSP: 002b:00007ff84bdee038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 267.522211][ T8818] RAX: 0000000000000000 RBX: 00007ff84dde5fa0 RCX: 00007ff84db8f7c9 [ 267.522223][ T8818] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 267.522233][ T8818] RBP: 00007ff84dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 267.522244][ T8818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.522255][ T8818] R13: 00007ff84dde6038 R14: 00007ff84dde5fa0 R15: 00007ffd9fd5dbc8 [ 267.522280][ T8818] [ 267.842874][ T8820] FAULT_INJECTION: forcing a failure. [ 267.842874][ T8820] name failslab, interval 1, probability 0, space 0, times 0 [ 267.855705][ T8820] CPU: 0 UID: 0 PID: 8820 Comm: syz.2.633 Tainted: G U L syzkaller #0 PREEMPT(full) [ 267.855762][ T8820] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 267.855775][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.855794][ T8820] Call Trace: [ 267.855805][ T8820] [ 267.855817][ T8820] dump_stack_lvl+0x16c/0x1f0 [ 267.855872][ T8820] should_fail_ex+0x512/0x640 [ 267.855905][ T8820] ? __kmalloc_noprof+0xca/0x910 [ 267.855945][ T8820] should_failslab+0xc2/0x120 [ 267.855993][ T8820] __kmalloc_noprof+0xeb/0x910 [ 267.856028][ T8820] ? __pfx_inc_ucount+0x10/0x10 [ 267.856055][ T8820] ? net_alloc_generic+0x1e/0x70 [ 267.856105][ T8820] ? net_alloc_generic+0x1e/0x70 [ 267.856145][ T8820] net_alloc_generic+0x1e/0x70 [ 267.856196][ T8820] copy_net_ns+0xc6/0x7c0 [ 267.856241][ T8820] ? copy_cgroup_ns+0x71/0x980 [ 267.856276][ T8820] create_new_namespaces+0x3ea/0xab0 [ 267.856329][ T8820] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 267.856378][ T8820] ksys_unshare+0x45b/0xa40 [ 267.856429][ T8820] ? __pfx_ksys_unshare+0x10/0x10 [ 267.856481][ T8820] ? xfd_validate_state+0x61/0x180 [ 267.856523][ T8820] __x64_sys_unshare+0x31/0x40 [ 267.856551][ T8820] do_syscall_64+0xcd/0xf80 [ 267.856601][ T8820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.856633][ T8820] RIP: 0033:0x7f25e238f7c9 [ 267.856658][ T8820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.856690][ T8820] RSP: 002b:00007f25e32d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 267.856721][ T8820] RAX: ffffffffffffffda RBX: 00007f25e25e5fa0 RCX: 00007f25e238f7c9 [ 267.856742][ T8820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 267.856761][ T8820] RBP: 00007f25e2413f91 R08: 0000000000000000 R09: 0000000000000000 [ 267.856780][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.856798][ T8820] R13: 00007f25e25e6038 R14: 00007f25e25e5fa0 R15: 00007ffc8c392dd8 [ 267.856841][ T8820] [ 268.627886][ T8838] FAULT_INJECTION: forcing a failure. [ 268.627886][ T8838] name failslab, interval 1, probability 0, space 0, times 0 [ 268.642867][ T8838] CPU: 0 UID: 0 PID: 8838 Comm: syz.0.636 Tainted: G U L syzkaller #0 PREEMPT(full) [ 268.642929][ T8838] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 268.642943][ T8838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.642962][ T8838] Call Trace: [ 268.642973][ T8838] [ 268.642984][ T8838] dump_stack_lvl+0x16c/0x1f0 [ 268.643045][ T8838] should_fail_ex+0x512/0x640 [ 268.643087][ T8838] ? kmem_cache_alloc_noprof+0x62/0x770 [ 268.643131][ T8838] should_failslab+0xc2/0x120 [ 268.643180][ T8838] kmem_cache_alloc_noprof+0x83/0x770 [ 268.643218][ T8838] ? net_alloc_generic+0x1e/0x70 [ 268.643258][ T8838] ? copy_net_ns+0xe8/0x7c0 [ 268.643310][ T8838] ? copy_net_ns+0xe8/0x7c0 [ 268.643354][ T8838] copy_net_ns+0xe8/0x7c0 [ 268.643398][ T8838] ? copy_cgroup_ns+0x71/0x980 [ 268.643434][ T8838] create_new_namespaces+0x3ea/0xab0 [ 268.643488][ T8838] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 268.643537][ T8838] ksys_unshare+0x45b/0xa40 [ 268.643588][ T8838] ? __pfx_ksys_unshare+0x10/0x10 [ 268.643639][ T8838] ? xfd_validate_state+0x61/0x180 [ 268.643681][ T8838] __x64_sys_unshare+0x31/0x40 [ 268.643708][ T8838] do_syscall_64+0xcd/0xf80 [ 268.643758][ T8838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.643790][ T8838] RIP: 0033:0x7ff84db8f7c9 [ 268.643818][ T8838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.643850][ T8838] RSP: 002b:00007ff84bdee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 268.643881][ T8838] RAX: ffffffffffffffda RBX: 00007ff84dde5fa0 RCX: 00007ff84db8f7c9 [ 268.643910][ T8838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 268.643930][ T8838] RBP: 00007ff84dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.643949][ T8838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.643968][ T8838] R13: 00007ff84dde6038 R14: 00007ff84dde5fa0 R15: 00007ffd9fd5dbc8 [ 268.644010][ T8838] [ 268.790295][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 269.554297][ T7826] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7 [ 271.154283][ T8873] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.196073][ T8873] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 271.283848][ T8873] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 271.318111][ T30] audit: type=1800 audit(1766424867.765:4): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.642" name="lu_gp_id" dev="configfs" ino=38351 res=0 errno=0 [ 271.381696][ T8873] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 271.421702][ T8873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.445428][ T8873] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 271.539601][ T8873] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.554312][ T8873] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 271.593094][ T8873] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.617953][ T8873] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 271.734007][ T8891] ecryptfs_parse_packet_length: Error parsing packet length [ 271.834523][ T8891] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 272.774748][ T8928] FAULT_INJECTION: forcing a failure. [ 272.774748][ T8928] name fail_futex, interval 1, probability 0, space 0, times 0 [ 272.936757][ T8928] CPU: 1 UID: 0 PID: 8928 Comm: syz.0.649 Tainted: G U L syzkaller #0 PREEMPT(full) [ 272.936815][ T8928] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 272.936828][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.936854][ T8928] Call Trace: [ 272.936865][ T8928] [ 272.936878][ T8928] dump_stack_lvl+0x16c/0x1f0 [ 272.936931][ T8928] should_fail_ex+0x512/0x640 [ 272.936974][ T8928] get_futex_key+0x1d0/0x15f0 [ 272.937014][ T8928] ? __pfx_get_futex_key+0x10/0x10 [ 272.937044][ T8928] ? kasan_save_stack+0x33/0x60 [ 272.937086][ T8928] ? kasan_save_free_info+0x3b/0x60 [ 272.937119][ T8928] ? __kasan_slab_free+0x5f/0x80 [ 272.937163][ T8928] ? kfree+0x2f8/0x6e0 [ 272.937193][ T8928] ? __do_sys_memfd_create+0x3f7/0xba0 [ 272.937228][ T8928] ? do_syscall_64+0xcd/0xf80 [ 272.937274][ T8928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.937316][ T8928] futex_wake+0xea/0x530 [ 272.937363][ T8928] ? __pfx_futex_wake+0x10/0x10 [ 272.937425][ T8928] do_futex+0x1e3/0x350 [ 272.937462][ T8928] ? __pfx_do_futex+0x10/0x10 [ 272.937498][ T8928] ? rcu_is_watching+0x12/0xc0 [ 272.937542][ T8928] ? kasan_quarantine_put+0x10a/0x240 [ 272.937589][ T8928] __x64_sys_futex+0x1e0/0x4c0 [ 272.937628][ T8928] ? __do_sys_memfd_create+0x3f7/0xba0 [ 272.937666][ T8928] ? __pfx___x64_sys_futex+0x10/0x10 [ 272.937708][ T8928] ? __do_sys_memfd_create+0x3fc/0xba0 [ 272.937751][ T8928] do_syscall_64+0xcd/0xf80 [ 272.937801][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.937833][ T8928] RIP: 0033:0x7ff84db8f7c9 [ 272.937865][ T8928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.937901][ T8928] RSP: 002b:00007ff84bdee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 272.937933][ T8928] RAX: ffffffffffffffda RBX: 00007ff84dde5fa8 RCX: 00007ff84db8f7c9 [ 272.937954][ T8928] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff84dde5fac [ 272.937974][ T8928] RBP: 00007ff84dde5fa0 R08: 00007ff84d9f8000 R09: 0000000000000000 [ 272.937994][ T8928] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 272.938014][ T8928] R13: 00007ff84dde6038 R14: 00007ffd9fd5dae0 R15: 00007ffd9fd5dbc8 [ 272.938055][ T8928] [ 273.213415][ T7826] Bluetooth: hci0: command 0x0406 tx timeout [ 273.366188][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.651'. [ 273.388567][ T8936] FAULT_INJECTION: forcing a failure. [ 273.388567][ T8936] name failslab, interval 1, probability 0, space 0, times 0 [ 273.401688][ T8933] nbd: must specify at least one socket [ 273.428172][ T8933] FAULT_INJECTION: forcing a failure. [ 273.428172][ T8933] name failslab, interval 1, probability 0, space 0, times 0 [ 273.445584][ T8936] CPU: 0 UID: 0 PID: 8936 Comm: syz.1.650 Tainted: G U L syzkaller #0 PREEMPT(full) [ 273.445643][ T8936] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 273.445656][ T8936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.445676][ T8936] Call Trace: [ 273.445686][ T8936] [ 273.445699][ T8936] dump_stack_lvl+0x16c/0x1f0 [ 273.445753][ T8936] should_fail_ex+0x512/0x640 [ 273.445796][ T8936] ? __kmalloc_noprof+0xca/0x910 [ 273.445836][ T8936] should_failslab+0xc2/0x120 [ 273.445884][ T8936] __kmalloc_noprof+0xeb/0x910 [ 273.445918][ T8936] ? __pfx_inc_ucount+0x10/0x10 [ 273.445947][ T8936] ? net_alloc_generic+0x1e/0x70 [ 273.446006][ T8936] ? net_alloc_generic+0x1e/0x70 [ 273.446043][ T8936] net_alloc_generic+0x1e/0x70 [ 273.446087][ T8936] copy_net_ns+0xc6/0x7c0 [ 273.446131][ T8936] ? copy_cgroup_ns+0x71/0x980 [ 273.446167][ T8936] create_new_namespaces+0x3ea/0xab0 [ 273.446221][ T8936] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 273.446269][ T8936] ksys_unshare+0x45b/0xa40 [ 273.446321][ T8936] ? __pfx_ksys_unshare+0x10/0x10 [ 273.446372][ T8936] ? xfd_validate_state+0x61/0x180 [ 273.446414][ T8936] __x64_sys_unshare+0x31/0x40 [ 273.446443][ T8936] do_syscall_64+0xcd/0xf80 [ 273.446494][ T8936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.446528][ T8936] RIP: 0033:0x7f22bb58f7c9 [ 273.446564][ T8936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.446596][ T8936] RSP: 002b:00007f22bc445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 273.446628][ T8936] RAX: ffffffffffffffda RBX: 00007f22bb7e5fa0 RCX: 00007f22bb58f7c9 [ 273.446648][ T8936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 273.446665][ T8936] RBP: 00007f22bb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 273.446682][ T8936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.446700][ T8936] R13: 00007f22bb7e6038 R14: 00007f22bb7e5fa0 R15: 00007ffe30f1a5a8 [ 273.446742][ T8936] [ 273.612944][ T8933] CPU: 1 UID: 0 PID: 8933 Comm: syz.3.651 Tainted: G U L syzkaller #0 PREEMPT(full) [ 273.612993][ T8933] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 273.613004][ T8933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.613020][ T8933] Call Trace: [ 273.613029][ T8933] [ 273.613040][ T8933] dump_stack_lvl+0x16c/0x1f0 [ 273.613087][ T8933] should_fail_ex+0x512/0x640 [ 273.613117][ T8933] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 273.613155][ T8933] should_failslab+0xc2/0x120 [ 273.613197][ T8933] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 273.613233][ T8933] ? __d_alloc+0x35/0xa80 [ 273.613264][ T8933] ? __d_alloc+0x35/0xa80 [ 273.613288][ T8933] __d_alloc+0x35/0xa80 [ 273.613317][ T8933] d_alloc_pseudo+0x1c/0xc0 [ 273.613348][ T8933] alloc_file_pseudo+0xcf/0x230 [ 273.613382][ T8933] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 273.613413][ T8933] ? alloc_fd+0x471/0x7d0 [ 273.613457][ T8933] sock_alloc_file+0x50/0x210 [ 273.613494][ T8933] __sys_socket+0x1c0/0x260 [ 273.613521][ T8933] ? __pfx___sys_socket+0x10/0x10 [ 273.613547][ T8933] ? xfd_validate_state+0x61/0x180 [ 273.613571][ T8933] ? __task_pid_nr_ns+0x1f5/0x500 [ 273.613604][ T8933] __x64_sys_socket+0x72/0xb0 [ 273.613628][ T8933] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.613668][ T8933] do_syscall_64+0xcd/0xf80 [ 273.613710][ T8933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.613738][ T8933] RIP: 0033:0x7f7f2b7916e7 [ 273.613761][ T8933] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.613787][ T8933] RSP: 002b:00007f7f2c582fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 273.613814][ T8933] RAX: ffffffffffffffda RBX: 00007f7f2b9e5fa0 RCX: 00007f7f2b7916e7 [ 273.613832][ T8933] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 273.613856][ T8933] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 273.613873][ T8933] R10: 0000200000000100 R11: 0000000000000286 R12: 0000000000000000 [ 273.613890][ T8933] R13: 00007f7f2b9e6038 R14: 00007f7f2b9e5fa0 R15: 00007ffeb9e4e688 [ 273.613927][ T8933] [ 273.919993][ T7279] Bluetooth: hci1: command 0x0406 tx timeout [ 273.926221][ T7826] Bluetooth: hci2: command 0x0406 tx timeout [ 273.933311][ T7289] Bluetooth: hci3: command 0x0406 tx timeout [ 275.242904][ T7289] Bluetooth: hci0: command 0x0406 tx timeout [ 275.268234][ T8965] sp0: Synchronizing with TNC [ 275.437001][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 275.970822][ T7826] Bluetooth: hci2: command 0x0406 tx timeout [ 275.976985][ T7279] Bluetooth: hci1: command 0x0406 tx timeout [ 275.983120][ T7289] Bluetooth: hci3: command 0x0406 tx timeout [ 277.228045][ T8997] FAULT_INJECTION: forcing a failure. [ 277.228045][ T8997] name failslab, interval 1, probability 0, space 0, times 0 [ 277.266716][ T8997] CPU: 0 UID: 0 PID: 8997 Comm: syz.1.664 Tainted: G U L syzkaller #0 PREEMPT(full) [ 277.266772][ T8997] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 277.266784][ T8997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.266804][ T8997] Call Trace: [ 277.266814][ T8997] [ 277.266826][ T8997] dump_stack_lvl+0x16c/0x1f0 [ 277.266889][ T8997] should_fail_ex+0x512/0x640 [ 277.266925][ T8997] ? __kmalloc_cache_noprof+0x5f/0x800 [ 277.266966][ T8997] should_failslab+0xc2/0x120 [ 277.267015][ T8997] __kmalloc_cache_noprof+0x80/0x800 [ 277.267054][ T8997] ? __do_sys_memfd_create+0x18e/0xba0 [ 277.267099][ T8997] ? __pfx___x64_sys_futex+0x10/0x10 [ 277.267142][ T8997] ? __do_sys_memfd_create+0x18e/0xba0 [ 277.267178][ T8997] __do_sys_memfd_create+0x18e/0xba0 [ 277.267221][ T8997] do_syscall_64+0xcd/0xf80 [ 277.267271][ T8997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.267303][ T8997] RIP: 0033:0x7f22bb58f7c9 [ 277.267328][ T8997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.267359][ T8997] RSP: 002b:00007f22bc445038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 277.267391][ T8997] RAX: ffffffffffffffda RBX: 00007f22bb7e5fa0 RCX: 00007f22bb58f7c9 [ 277.267411][ T8997] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 277.267430][ T8997] RBP: 00007f22bb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 277.267449][ T8997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.267467][ T8997] R13: 00007f22bb7e6038 R14: 00007f22bb7e5fa0 R15: 00007ffe30f1a5a8 [ 277.267510][ T8997] [ 277.351343][ T8999] FAULT_INJECTION: forcing a failure. [ 277.351343][ T8999] name failslab, interval 1, probability 0, space 0, times 0 [ 277.351393][ T8999] CPU: 1 UID: 0 PID: 8999 Comm: syz.1.664 Tainted: G U L syzkaller #0 PREEMPT(full) [ 277.351438][ T8999] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 277.351449][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.351465][ T8999] Call Trace: [ 277.351475][ T8999] [ 277.351485][ T8999] dump_stack_lvl+0x16c/0x1f0 [ 277.351531][ T8999] should_fail_ex+0x512/0x640 [ 277.351561][ T8999] ? __kmalloc_noprof+0xca/0x910 [ 277.351594][ T8999] should_failslab+0xc2/0x120 [ 277.351636][ T8999] __kmalloc_noprof+0xeb/0x910 [ 277.351666][ T8999] ? memcg_list_lru_alloc+0x4e9/0x740 [ 277.351704][ T8999] ? memcg_list_lru_alloc+0x4e9/0x740 [ 277.351737][ T8999] memcg_list_lru_alloc+0x4e9/0x740 [ 277.351780][ T8999] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 277.351823][ T8999] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 277.351872][ T8999] __memcg_slab_post_alloc_hook+0x133/0x880 [ 277.351921][ T8999] ? kasan_save_track+0x14/0x30 [ 277.351961][ T8999] kmem_cache_alloc_lru_noprof+0x58f/0x770 [ 277.351997][ T8999] ? mqueue_alloc_inode+0x25/0x50 [ 277.352044][ T8999] ? __pfx_mqueue_fill_super+0x10/0x10 [ 277.352085][ T8999] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 277.352124][ T8999] ? mqueue_alloc_inode+0x25/0x50 [ 277.352168][ T8999] ? lockdep_init_map_type+0x5c/0x270 [ 277.352194][ T8999] mqueue_alloc_inode+0x25/0x50 [ 277.352232][ T8999] alloc_inode+0x64/0x240 [ 277.352262][ T8999] new_inode+0x22/0x1c0 [ 277.352293][ T8999] ? __pfx_mqueue_fill_super+0x10/0x10 [ 277.352333][ T8999] mqueue_get_inode+0x2e/0xdd0 [ 277.352371][ T8999] ? sget_fc+0x808/0xc20 [ 277.352408][ T8999] ? __pfx_mqueue_fill_super+0x10/0x10 [ 277.352447][ T8999] mqueue_fill_super+0x14d/0x260 [ 277.352488][ T8999] get_tree_nodev+0xdd/0x190 [ 277.352527][ T8999] mqueue_get_tree+0xf1/0x130 [ 277.352568][ T8999] vfs_get_tree+0x8e/0x330 [ 277.352598][ T8999] fc_mount_longterm+0x1a/0x270 [ 277.352633][ T8999] mq_init_ns+0x482/0x810 [ 277.352665][ T8999] copy_ipcs+0x3db/0x7d0 [ 277.352696][ T8999] create_new_namespaces+0x20a/0xab0 [ 277.352732][ T8999] ? security_capable+0x7e/0x260 [ 277.352779][ T8999] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 277.352819][ T8999] ksys_unshare+0x45b/0xa40 [ 277.352869][ T8999] ? __pfx_ksys_unshare+0x10/0x10 [ 277.352912][ T8999] ? xfd_validate_state+0x61/0x180 [ 277.352948][ T8999] __x64_sys_unshare+0x31/0x40 [ 277.352971][ T8999] do_syscall_64+0xcd/0xf80 [ 277.353013][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.353041][ T8999] RIP: 0033:0x7f22bb58f7c9 [ 277.353065][ T8999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.353091][ T8999] RSP: 002b:00007f22bc424038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 277.353118][ T8999] RAX: ffffffffffffffda RBX: 00007f22bb7e6090 RCX: 00007f22bb58f7c9 [ 277.353135][ T8999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 277.353152][ T8999] RBP: 00007f22bb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 277.353169][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.353185][ T8999] R13: 00007f22bb7e6128 R14: 00007f22bb7e6090 R15: 00007ffe30f1a5a8 [ 277.353223][ T8999] [ 277.783354][ T7279] Bluetooth: hci0: command 0x0406 tx timeout [ 278.175502][ T9010] sp0: Synchronizing with TNC [ 278.558919][ T9020] FAULT_INJECTION: forcing a failure. [ 278.558919][ T9020] name failslab, interval 1, probability 0, space 0, times 0 [ 278.573200][ T9020] CPU: 0 UID: 0 PID: 9020 Comm: syz.3.669 Tainted: G U L syzkaller #0 PREEMPT(full) [ 278.573249][ T9020] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 278.573260][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.573276][ T9020] Call Trace: [ 278.573285][ T9020] [ 278.573295][ T9020] dump_stack_lvl+0x16c/0x1f0 [ 278.573342][ T9020] should_fail_ex+0x512/0x640 [ 278.573378][ T9020] ? kmem_cache_alloc_noprof+0x62/0x770 [ 278.573418][ T9020] should_failslab+0xc2/0x120 [ 278.573461][ T9020] kmem_cache_alloc_noprof+0x83/0x770 [ 278.573494][ T9020] ? security_file_alloc+0x34/0x2b0 [ 278.573537][ T9020] ? security_file_alloc+0x34/0x2b0 [ 278.573571][ T9020] security_file_alloc+0x34/0x2b0 [ 278.573606][ T9020] init_file+0x93/0x4c0 [ 278.573636][ T9020] alloc_empty_file+0x73/0x1e0 [ 278.573669][ T9020] alloc_file_pseudo+0x13a/0x230 [ 278.573702][ T9020] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 278.573731][ T9020] ? alloc_fd+0x471/0x7d0 [ 278.573777][ T9020] sock_alloc_file+0x50/0x210 [ 278.573815][ T9020] __sys_socket+0x1c0/0x260 [ 278.573839][ T9020] ? __x64_sys_openat+0x174/0x210 [ 278.573870][ T9020] ? __pfx___sys_socket+0x10/0x10 [ 278.573896][ T9020] ? xfd_validate_state+0x61/0x180 [ 278.573931][ T9020] __x64_sys_socket+0x72/0xb0 [ 278.573957][ T9020] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.574000][ T9020] do_syscall_64+0xcd/0xf80 [ 278.574044][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.574079][ T9020] RIP: 0033:0x7f7f2b78f7c9 [ 278.574104][ T9020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.574133][ T9020] RSP: 002b:00007f7f2c542038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 278.574161][ T9020] RAX: ffffffffffffffda RBX: 00007f7f2b9e6180 RCX: 00007f7f2b78f7c9 [ 278.574179][ T9020] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 278.574197][ T9020] RBP: 00007f7f2b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 278.574214][ T9020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.574231][ T9020] R13: 00007f7f2b9e6218 R14: 00007f7f2b9e6180 R15: 00007ffeb9e4e688 [ 278.574270][ T9020] [ 279.142962][ T9025] sd 0:0:1:0: PR command failed: 1026 [ 279.148464][ T9025] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 279.217023][ T9025] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 279.802869][ T7289] Bluetooth: hci0: command 0x0406 tx timeout [ 280.230025][ T9051] [U] 0="­/ [ 280.273941][ T9051] [U] [ 280.276778][ T9051] [U] EÇeÅQ‰Í@’ [ 280.330149][ T9052] [U]  [ 280.636762][ T9055] FAULT_INJECTION: forcing a failure. [ 280.636762][ T9055] name failslab, interval 1, probability 0, space 0, times 0 [ 280.700325][ T9055] CPU: 1 UID: 0 PID: 9055 Comm: syz.1.675 Tainted: G U L syzkaller #0 PREEMPT(full) [ 280.700383][ T9055] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 280.700396][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.700416][ T9055] Call Trace: [ 280.700426][ T9055] [ 280.700439][ T9055] dump_stack_lvl+0x16c/0x1f0 [ 280.700493][ T9055] should_fail_ex+0x512/0x640 [ 280.700529][ T9055] ? __kmalloc_cache_noprof+0x5f/0x800 [ 280.700569][ T9055] should_failslab+0xc2/0x120 [ 280.700619][ T9055] __kmalloc_cache_noprof+0x80/0x800 [ 280.700659][ T9055] ? __do_sys_memfd_create+0x18e/0xba0 [ 280.700703][ T9055] ? __do_sys_memfd_create+0x18e/0xba0 [ 280.700739][ T9055] __do_sys_memfd_create+0x18e/0xba0 [ 280.700782][ T9055] do_syscall_64+0xcd/0xf80 [ 280.700834][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.700867][ T9055] RIP: 0033:0x7f22bb58f7c9 [ 280.700893][ T9055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.700923][ T9055] RSP: 002b:00007f22bc445038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 280.700955][ T9055] RAX: ffffffffffffffda RBX: 00007f22bb7e5fa0 RCX: 00007f22bb58f7c9 [ 280.700986][ T9055] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 280.701005][ T9055] RBP: 00007f22bb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 280.701023][ T9055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.701042][ T9055] R13: 00007f22bb7e6038 R14: 00007f22bb7e5fa0 R15: 00007ffe30f1a5a8 [ 280.701080][ T9055] [ 281.294182][ T7289] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7 [ 281.550397][ T9074] sp0: Synchronizing with TNC [ 283.125123][ T7289] Bluetooth: hci3: unexpected subevent 0x01 length: 3 < 18 [ 283.535082][ T9127] netlink: zone id is out of range [ 283.665617][ T9127] netlink: del zone limit has 4 unknown bytes [ 283.705936][ T9124] netlink: set zone limit has 8 unknown bytes [ 283.802917][ T30] audit: type=1800 audit(1766424880.235:5): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.685" name="lu_gp_id" dev="configfs" ino=39120 res=0 errno=0 [ 286.597771][ T7279] Bluetooth: hci0: unexpected event 0x20 length: 123 > 7 [ 287.109987][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 287.323451][ T7289] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 288.055410][ T9210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.079938][ T9210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.105078][ T9210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.140400][ T9210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.159642][ T9223] FAULT_INJECTION: forcing a failure. [ 288.159642][ T9223] name fail_futex, interval 1, probability 0, space 0, times 0 [ 288.233032][ T9223] CPU: 1 UID: 0 PID: 9223 Comm: syz.2.703 Tainted: G U L syzkaller #0 PREEMPT(full) [ 288.233068][ T9223] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 288.233075][ T9223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.233086][ T9223] Call Trace: [ 288.233092][ T9223] [ 288.233100][ T9223] dump_stack_lvl+0x16c/0x1f0 [ 288.233133][ T9223] should_fail_ex+0x512/0x640 [ 288.233159][ T9223] get_futex_key+0x1d0/0x15f0 [ 288.233182][ T9223] ? __pfx_get_futex_key+0x10/0x10 [ 288.233199][ T9223] ? kasan_save_stack+0x33/0x60 [ 288.233225][ T9223] ? kasan_save_free_info+0x3b/0x60 [ 288.233244][ T9223] ? __kasan_slab_free+0x5f/0x80 [ 288.233269][ T9223] ? kfree+0x2f8/0x6e0 [ 288.233286][ T9223] ? __do_sys_memfd_create+0x3f7/0xba0 [ 288.233306][ T9223] ? do_syscall_64+0xcd/0xf80 [ 288.233333][ T9223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.233357][ T9223] futex_wake+0xea/0x530 [ 288.233384][ T9223] ? __pfx_futex_wake+0x10/0x10 [ 288.233417][ T9223] do_futex+0x1e3/0x350 [ 288.233439][ T9223] ? __pfx_do_futex+0x10/0x10 [ 288.233460][ T9223] ? rcu_is_watching+0x12/0xc0 [ 288.233485][ T9223] ? kasan_quarantine_put+0x10a/0x240 [ 288.233513][ T9223] __x64_sys_futex+0x1e0/0x4c0 [ 288.233535][ T9223] ? __do_sys_memfd_create+0x3f7/0xba0 [ 288.233556][ T9223] ? __pfx___x64_sys_futex+0x10/0x10 [ 288.233580][ T9223] ? __do_sys_memfd_create+0x3fc/0xba0 [ 288.233605][ T9223] do_syscall_64+0xcd/0xf80 [ 288.233634][ T9223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.233652][ T9223] RIP: 0033:0x7f25e238f7c9 [ 288.233674][ T9223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.233692][ T9223] RSP: 002b:00007f25e32d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 288.233711][ T9223] RAX: ffffffffffffffda RBX: 00007f25e25e5fa8 RCX: 00007f25e238f7c9 [ 288.233723][ T9223] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f25e25e5fac [ 288.233734][ T9223] RBP: 00007f25e25e5fa0 R08: 00007f25e32d1000 R09: 0000000000000000 [ 288.233745][ T9223] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 288.233756][ T9223] R13: 00007f25e25e6038 R14: 00007ffc8c392cf0 R15: 00007ffc8c392dd8 [ 288.233778][ T9223] [ 289.236343][ T9252] [U] [ 289.239220][ T9252] [U] [ 289.241962][ T9252] [U] [ 289.244705][ T9252] [U] [ 289.283114][ T9252] [U] [ 289.285906][ T9252] [U] [ 289.288669][ T9252] [U] [ 289.291419][ T9252] [U] [ 289.319427][ T9252] [U] [ 289.322289][ T9252] [U] [ 289.325039][ T9252] [U] [ 289.327775][ T9252] [U] [ 289.366664][ T9252] [U] [ 289.369477][ T9252] [U] [ 289.372222][ T9252] [U] [ 289.374969][ T9252] [U] [ 289.403281][ T9252] [U] [ 289.406067][ T9252] [U] [ 289.408819][ T9252] [U] [ 289.411567][ T9252] [U] [ 289.425801][ T9258] netlink: 'syz.1.709': attribute type 11 has an invalid length. [ 289.432728][ T9252] [U] [ 289.436329][ T9252] [U] [ 289.439080][ T9252] [U] [ 289.441821][ T9252] [U] [ 289.443015][ T9258] netlink: 'syz.1.709': attribute type 11 has an invalid length. [ 289.455347][ T9252] [U] [ 289.458108][ T9252] [U] [ 289.460845][ T9252] [U] [ 289.463584][ T9252] [U] [ 289.477170][ T9258] FAULT_INJECTION: forcing a failure. [ 289.477170][ T9258] name failslab, interval 1, probability 0, space 0, times 0 [ 289.486985][ T9252] [U] [ 289.490294][ T9258] CPU: 1 UID: 0 PID: 9258 Comm: syz.1.709 Tainted: G U L syzkaller #0 PREEMPT(full) [ 289.490339][ T9258] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 289.490350][ T9258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.490366][ T9258] Call Trace: [ 289.490375][ T9258] [ 289.490386][ T9258] dump_stack_lvl+0x16c/0x1f0 [ 289.490439][ T9258] should_fail_ex+0x512/0x640 [ 289.490469][ T9258] ? kmem_cache_alloc_noprof+0x62/0x770 [ 289.490506][ T9258] should_failslab+0xc2/0x120 [ 289.490547][ T9258] kmem_cache_alloc_noprof+0x83/0x770 [ 289.490578][ T9258] ? __lock_acquire+0x436/0x2890 [ 289.490603][ T9258] ? ep_ptable_queue_proc+0x5b/0x280 [ 289.490664][ T9258] ? ep_ptable_queue_proc+0x5b/0x280 [ 289.490702][ T9258] ep_ptable_queue_proc+0x5b/0x280 [ 289.490742][ T9258] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 289.490781][ T9258] snd_seq_oss_readq_poll+0x56/0xb0 [ 289.490827][ T9258] snd_seq_oss_poll+0x122/0x1d0 [ 289.490855][ T9258] ? __pfx_odev_poll+0x10/0x10 [ 289.490892][ T9258] odev_poll+0x4a/0x90 [ 289.490930][ T9258] ep_item_poll+0x141/0x1f0 [ 289.490984][ T9258] do_epoll_ctl+0x1fae/0x3790 [ 289.491042][ T9258] ? __pfx_do_epoll_ctl+0x10/0x10 [ 289.491082][ T9258] ? find_held_lock+0x2b/0x80 [ 289.491115][ T9258] ? __might_fault+0xe3/0x190 [ 289.491147][ T9258] ? __might_fault+0xe3/0x190 [ 289.491177][ T9258] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 289.491230][ T9258] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 289.491272][ T9258] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 289.491315][ T9258] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 289.491368][ T9258] do_syscall_64+0xcd/0xf80 [ 289.491412][ T9258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.491440][ T9258] RIP: 0033:0x7f22bb58f7c9 [ 289.491463][ T9258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.491489][ T9258] RSP: 002b:00007f22bc445038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 289.491516][ T9258] RAX: ffffffffffffffda RBX: 00007f22bb7e5fa0 RCX: 00007f22bb58f7c9 [ 289.491535][ T9258] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 289.491552][ T9258] RBP: 00007f22bb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 289.491568][ T9258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.491584][ T9258] R13: 00007f22bb7e6038 R14: 00007f22bb7e5fa0 R15: 00007ffe30f1a5a8 [ 289.491620][ T9258] [ 289.730990][ T9252] [U] [ 289.733704][ T9252] [U] [ 289.736413][ T9252] [U] [ 289.773689][ T9252] [U] [ 289.776470][ T9252] [U] [ 289.779214][ T9252] [U] [ 289.781961][ T9252] [U] [ 289.785151][ T9252] [U] [ 289.787902][ T9252] [U] [ 289.790638][ T9252] [U] [ 289.793396][ T9252] [U] [ 289.796648][ T9252] [U] [ 289.799393][ T9252] [U] [ 289.802137][ T9252] [U] [ 289.804891][ T9252] [U] [ 289.808249][ T9252] [U] [ 289.810999][ T9252] [U] [ 289.813747][ T9252] [U] [ 289.816489][ T9252] [U] [ 289.832693][ T9252] [U] [ 289.835460][ T9252] [U] [ 289.838176][ T9252] [U] [ 289.840892][ T9252] [U] [ 289.883410][ T9252] [U] [ 289.886195][ T9252] [U] [ 289.888944][ T9252] [U] [ 289.891688][ T9252] [U] [ 289.913367][ T9252] [U] [ 289.916157][ T9252] [U] [ 289.918905][ T9252] [U] [ 289.921657][ T9252] [U] [ 289.931471][ T9252] [U] [ 289.934244][ T9252] [U] [ 289.936987][ T9252] [U] [ 289.939731][ T9252] [U] [ 289.951396][ T9252] [U] [ 289.954173][ T9252] [U] [ 289.956905][ T9252] [U] [ 289.959631][ T9252] [U] [ 289.984919][ T9252] [U] [ 289.987700][ T9252] [U] [ 289.990446][ T9252] [U] [ 289.993174][ T9252] [U] [ 290.007402][ T9252] [U] [ 290.010177][ T9252] [U] [ 290.012921][ T9252] [U] [ 290.015661][ T9252] [U] [ 290.073177][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 290.109782][ T9252] [U] [ 290.125329][ T7826] Bluetooth: hci0: command 0x0406 tx timeout [ 290.131542][ T7289] Bluetooth: hci2: command 0x0406 tx timeout [ 290.140849][ T7279] Bluetooth: hci3: command 0x0406 tx timeout [ 290.208030][ T7279] Bluetooth: hci1: command 0x0406 tx timeout [ 290.507694][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 291.717781][ T9310] netlink: 'syz.3.719': attribute type 11 has an invalid length. [ 291.737454][ T9310] netlink: 'syz.3.719': attribute type 11 has an invalid length. [ 291.832135][ T9310] FAULT_INJECTION: forcing a failure. [ 291.832135][ T9310] name failslab, interval 1, probability 0, space 0, times 0 [ 291.845797][ T9310] CPU: 1 UID: 0 PID: 9310 Comm: syz.3.719 Tainted: G U L syzkaller #0 PREEMPT(full) [ 291.845849][ T9310] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 291.845861][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.845885][ T9310] Call Trace: [ 291.845896][ T9310] [ 291.845908][ T9310] dump_stack_lvl+0x16c/0x1f0 [ 291.845961][ T9310] should_fail_ex+0x512/0x640 [ 291.845996][ T9310] ? kmem_cache_alloc_noprof+0x62/0x770 [ 291.846041][ T9310] should_failslab+0xc2/0x120 [ 291.846091][ T9310] kmem_cache_alloc_noprof+0x83/0x770 [ 291.846127][ T9310] ? futex_wait+0xe0/0x380 [ 291.846170][ T9310] ? do_epoll_ctl+0x1170/0x3790 [ 291.846227][ T9310] ? do_epoll_ctl+0x1170/0x3790 [ 291.846274][ T9310] do_epoll_ctl+0x1170/0x3790 [ 291.846333][ T9310] ? io_uring_setup+0x137/0x1f60 [ 291.846388][ T9310] ? __pfx_do_epoll_ctl+0x10/0x10 [ 291.846435][ T9310] ? find_held_lock+0x2b/0x80 [ 291.846474][ T9310] ? __might_fault+0xe3/0x190 [ 291.846510][ T9310] ? __might_fault+0xe3/0x190 [ 291.846570][ T9310] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 291.846619][ T9310] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 291.846670][ T9310] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 291.846735][ T9310] do_syscall_64+0xcd/0xf80 [ 291.846785][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.846815][ T9310] RIP: 0033:0x7f7f2b78f7c9 [ 291.846840][ T9310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.846870][ T9310] RSP: 002b:00007f7f2c584038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 291.846900][ T9310] RAX: ffffffffffffffda RBX: 00007f7f2b9e5fa0 RCX: 00007f7f2b78f7c9 [ 291.846921][ T9310] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 291.846940][ T9310] RBP: 00007f7f2b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.846958][ T9310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.846977][ T9310] R13: 00007f7f2b9e6038 R14: 00007f7f2b9e5fa0 R15: 00007ffeb9e4e688 [ 291.847021][ T9310] [ 292.498014][ T9319] FAULT_INJECTION: forcing a failure. [ 292.498014][ T9319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 292.523090][ T9319] CPU: 1 UID: 0 PID: 9319 Comm: syz.1.721 Tainted: G U L syzkaller #0 PREEMPT(full) [ 292.523146][ T9319] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 292.523157][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.523175][ T9319] Call Trace: [ 292.523185][ T9319] [ 292.523195][ T9319] dump_stack_lvl+0x16c/0x1f0 [ 292.523249][ T9319] should_fail_ex+0x512/0x640 [ 292.523290][ T9319] should_fail_alloc_page+0xe7/0x130 [ 292.523342][ T9319] prepare_alloc_pages+0x401/0x670 [ 292.523398][ T9319] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 292.523446][ T9319] ? rcu_is_watching+0x12/0xc0 [ 292.523491][ T9319] ? trace_sched_exit_tp+0xd1/0x110 [ 292.523540][ T9319] ? __schedule+0x10b9/0x6150 [ 292.523590][ T9319] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 292.523635][ T9319] ? aa_file_perm+0x29e/0x1560 [ 292.523686][ T9319] ? aa_file_perm+0x2ad/0x1560 [ 292.523735][ T9319] ? futex_unqueue+0x133/0x2c0 [ 292.523766][ T9319] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 292.523824][ T9319] ? policy_nodemask+0xea/0x4e0 [ 292.523876][ T9319] alloc_pages_mpol+0x1fb/0x550 [ 292.523927][ T9319] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 292.523978][ T9319] ? iovec_from_user+0xbb/0x140 [ 292.524020][ T9319] alloc_pages_noprof+0x131/0x390 [ 292.524070][ T9319] get_free_pages_noprof+0x10/0xb0 [ 292.524116][ T9319] environ_read+0xe8/0x450 [ 292.524163][ T9319] ? rw_verify_area+0xcf/0x6c0 [ 292.524205][ T9319] ? __pfx_environ_read+0x10/0x10 [ 292.524249][ T9319] vfs_readv+0x5c1/0x8b0 [ 292.524297][ T9319] ? __pfx_vfs_readv+0x10/0x10 [ 292.524367][ T9319] ? __fget_files+0x20e/0x3c0 [ 292.524422][ T9319] ? do_preadv+0x1a6/0x270 [ 292.524461][ T9319] do_preadv+0x1a6/0x270 [ 292.524503][ T9319] ? __pfx_do_preadv+0x10/0x10 [ 292.524555][ T9319] do_syscall_64+0xcd/0xf80 [ 292.524604][ T9319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.524636][ T9319] RIP: 0033:0x7f22bb58f7c9 [ 292.524661][ T9319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.524691][ T9319] RSP: 002b:00007f22bc445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 292.524721][ T9319] RAX: ffffffffffffffda RBX: 00007f22bb7e5fa0 RCX: 00007f22bb58f7c9 [ 292.524742][ T9319] RDX: 0000000000000008 RSI: 00002000000001c0 RDI: 000000000000000b [ 292.524761][ T9319] RBP: 00007f22bb613f91 R08: 0000000000000008 R09: 0000000000000000 [ 292.524788][ T9319] R10: 0000000000000d2d R11: 0000000000000246 R12: 0000000000000000 [ 292.524807][ T9319] R13: 00007f22bb7e6038 R14: 00007f22bb7e5fa0 R15: 00007ffe30f1a5a8 [ 292.524849][ T9319] [ 293.780324][ T9345] netlink: 'syz.1.729': attribute type 11 has an invalid length. [ 293.803306][ T9345] netlink: 'syz.1.729': attribute type 11 has an invalid length. [ 293.841791][ T9345] FAULT_INJECTION: forcing a failure. [ 293.841791][ T9345] name failslab, interval 1, probability 0, space 0, times 0 [ 293.857069][ T9345] CPU: 1 UID: 0 PID: 9345 Comm: syz.1.729 Tainted: G U L syzkaller #0 PREEMPT(full) [ 293.857123][ T9345] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 293.857135][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.857154][ T9345] Call Trace: [ 293.857164][ T9345] [ 293.857176][ T9345] dump_stack_lvl+0x16c/0x1f0 [ 293.857227][ T9345] should_fail_ex+0x512/0x640 [ 293.857262][ T9345] ? kmem_cache_alloc_noprof+0x62/0x770 [ 293.857303][ T9345] should_failslab+0xc2/0x120 [ 293.857352][ T9345] kmem_cache_alloc_noprof+0x83/0x770 [ 293.857388][ T9345] ? futex_wait+0xe0/0x380 [ 293.857429][ T9345] ? do_epoll_ctl+0x1170/0x3790 [ 293.857486][ T9345] ? do_epoll_ctl+0x1170/0x3790 [ 293.857547][ T9345] do_epoll_ctl+0x1170/0x3790 [ 293.857597][ T9345] ? io_uring_setup+0x137/0x1f60 [ 293.857654][ T9345] ? __pfx_do_epoll_ctl+0x10/0x10 [ 293.857712][ T9345] ? find_held_lock+0x2b/0x80 [ 293.857752][ T9345] ? __might_fault+0xe3/0x190 [ 293.857786][ T9345] ? __might_fault+0xe3/0x190 [ 293.857837][ T9345] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 293.857884][ T9345] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 293.857935][ T9345] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 293.857998][ T9345] do_syscall_64+0xcd/0xf80 [ 293.858050][ T9345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.858081][ T9345] RIP: 0033:0x7f22bb58f7c9 [ 293.858107][ T9345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.858139][ T9345] RSP: 002b:00007f22bc445038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 293.858169][ T9345] RAX: ffffffffffffffda RBX: 00007f22bb7e5fa0 RCX: 00007f22bb58f7c9 [ 293.858190][ T9345] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 293.858208][ T9345] RBP: 00007f22bb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 293.858226][ T9345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.858245][ T9345] R13: 00007f22bb7e6038 R14: 00007f22bb7e5fa0 R15: 00007ffe30f1a5a8 [ 293.858288][ T9345] [ 294.404875][ T9354] openvswitch: netlink: Flow key attr not present in new flow. [ 297.762023][ T9381] kexec: Could not allocate control_code_buffer [ 297.935697][ T9394] netlink: 'syz.3.740': attribute type 11 has an invalid length. [ 297.944628][ T9394] netlink: 'syz.3.740': attribute type 11 has an invalid length. [ 297.987386][ T9394] FAULT_INJECTION: forcing a failure. [ 297.987386][ T9394] name failslab, interval 1, probability 0, space 0, times 0 [ 298.000939][ T9394] CPU: 1 UID: 0 PID: 9394 Comm: syz.3.740 Tainted: G U L syzkaller #0 PREEMPT(full) [ 298.000997][ T9394] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 298.001009][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.001028][ T9394] Call Trace: [ 298.001039][ T9394] [ 298.001051][ T9394] dump_stack_lvl+0x16c/0x1f0 [ 298.001104][ T9394] should_fail_ex+0x512/0x640 [ 298.001139][ T9394] ? kmem_cache_alloc_noprof+0x62/0x770 [ 298.001181][ T9394] should_failslab+0xc2/0x120 [ 298.001229][ T9394] kmem_cache_alloc_noprof+0x83/0x770 [ 298.001264][ T9394] ? futex_wait+0xe0/0x380 [ 298.001305][ T9394] ? do_epoll_ctl+0x1170/0x3790 [ 298.001361][ T9394] ? do_epoll_ctl+0x1170/0x3790 [ 298.001409][ T9394] do_epoll_ctl+0x1170/0x3790 [ 298.001459][ T9394] ? io_uring_setup+0x137/0x1f60 [ 298.001522][ T9394] ? __pfx_do_epoll_ctl+0x10/0x10 [ 298.001568][ T9394] ? find_held_lock+0x2b/0x80 [ 298.001606][ T9394] ? __might_fault+0xe3/0x190 [ 298.001641][ T9394] ? __might_fault+0xe3/0x190 [ 298.001694][ T9394] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 298.001740][ T9394] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 298.001790][ T9394] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 298.001853][ T9394] do_syscall_64+0xcd/0xf80 [ 298.001905][ T9394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.001937][ T9394] RIP: 0033:0x7f7f2b78f7c9 [ 298.001960][ T9394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.001991][ T9394] RSP: 002b:00007f7f2c584038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 298.002023][ T9394] RAX: ffffffffffffffda RBX: 00007f7f2b9e5fa0 RCX: 00007f7f2b78f7c9 [ 298.002044][ T9394] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 298.002062][ T9394] RBP: 00007f7f2b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 298.002080][ T9394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.002098][ T9394] R13: 00007f7f2b9e6038 R14: 00007f7f2b9e5fa0 R15: 00007ffeb9e4e688 [ 298.002141][ T9394] [ 300.264813][ T9415] Line length is too long: Should be less than 4094 [ 301.669590][ T9438] random: crng reseeded on system resumption [ 303.293418][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 303.293433][ T7289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.312350][ T7289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.313124][ T7289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.314308][ T7289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.315070][ T7289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.579608][ T9493] zswap: compressor not available [ 303.791855][ T9488] chnl_net:caif_netlink_parms(): no params data found [ 304.048066][ T9488] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.123467][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.131136][ T9488] bridge_slave_0: entered allmulticast mode [ 304.140642][ T9488] bridge_slave_0: entered promiscuous mode [ 304.236011][ T9488] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.246457][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.300557][ T9488] bridge_slave_1: entered allmulticast mode [ 304.318679][ T9488] bridge_slave_1: entered promiscuous mode [ 304.496094][ T9488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.528016][ T9488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.590248][ T9488] team0: Port device team_slave_0 added [ 304.600441][ T9488] team0: Port device team_slave_1 added [ 304.646642][ T9488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.653879][ T9488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.681639][ T9488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.709032][ T9488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.709057][ T9488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.709095][ T9488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.754335][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'. [ 304.862280][ T9488] hsr_slave_0: entered promiscuous mode [ 304.865517][ T9488] hsr_slave_1: entered promiscuous mode [ 304.874101][ T9488] debugfs: 'hsr0' already exists in 'hsr' [ 304.874134][ T9488] Cannot create hsr debugfs directory [ 305.180253][ T9488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.217017][ T9488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.234726][ T9488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.251268][ T9488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.403294][ T7289] Bluetooth: hci4: command tx timeout [ 305.560147][ T9488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.671161][ T9488] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.735102][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.742350][ T7293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.796244][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.803653][ T7293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.357561][ T9549] netlink: 326 bytes leftover after parsing attributes in process `syz.3.765'. [ 306.498671][ T9488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.696103][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 307.058133][ T9488] veth0_vlan: entered promiscuous mode [ 307.113196][ T9488] veth1_vlan: entered promiscuous mode [ 307.199190][ T9488] veth0_macvtap: entered promiscuous mode [ 307.250285][ T9488] veth1_macvtap: entered promiscuous mode [ 307.314003][ T9488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.348383][ T9488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.427822][ T7293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.493470][ T7289] Bluetooth: hci4: command tx timeout [ 307.519965][ T7293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.558015][ T7293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.577871][ T7293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.767560][ T8567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.777686][ T8567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.819290][ T8567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.827493][ T8567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.582854][ T7289] Bluetooth: hci4: command tx timeout [ 309.822284][ T7279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.843037][ T7279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.843681][ T9606] FAULT_INJECTION: forcing a failure. [ 309.843681][ T9606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.863392][ T7279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.871690][ T7279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.881373][ T7279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.931690][ T9606] CPU: 1 UID: 0 PID: 9606 Comm: syz.4.775 Tainted: G U L syzkaller #0 PREEMPT(full) [ 309.931738][ T9606] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 309.931749][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.931766][ T9606] Call Trace: [ 309.931775][ T9606] [ 309.931786][ T9606] dump_stack_lvl+0x16c/0x1f0 [ 309.931838][ T9606] should_fail_ex+0x512/0x640 [ 309.931879][ T9606] _copy_to_user+0x32/0xd0 [ 309.931915][ T9606] simple_read_from_buffer+0xcb/0x170 [ 309.931958][ T9606] proc_fail_nth_read+0x197/0x240 [ 309.932005][ T9606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.932056][ T9606] ? rw_verify_area+0xcf/0x6c0 [ 309.932092][ T9606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.932141][ T9606] vfs_read+0x1e4/0xcf0 [ 309.932184][ T9606] ? __pfx___mutex_lock+0x10/0x10 [ 309.932234][ T9606] ? __pfx_vfs_read+0x10/0x10 [ 309.932287][ T9606] ? __fget_files+0x20e/0x3c0 [ 309.932342][ T9606] ksys_read+0x12a/0x250 [ 309.932385][ T9606] ? __pfx_ksys_read+0x10/0x10 [ 309.932439][ T9606] do_syscall_64+0xcd/0xf80 [ 309.932486][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.932517][ T9606] RIP: 0033:0x7f934878e1dc [ 309.932549][ T9606] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 309.932579][ T9606] RSP: 002b:00007f934963a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.932608][ T9606] RAX: ffffffffffffffda RBX: 00007f93489e5fa0 RCX: 00007f934878e1dc [ 309.932628][ T9606] RDX: 000000000000000f RSI: 00007f934963a0a0 RDI: 0000000000000003 [ 309.932646][ T9606] RBP: 00007f934963a090 R08: 0000000000000000 R09: 0000000000000000 [ 309.932664][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.932681][ T9606] R13: 00007f93489e6038 R14: 00007f93489e5fa0 R15: 00007ffc9b5907f8 [ 309.932723][ T9606] [ 310.536469][ T9604] chnl_net:caif_netlink_parms(): no params data found [ 310.871402][ T9622] futex_wake_op: syz.4.778 tries to shift op by -2048; fix this program [ 310.893003][ T9622] futex_wake_op: syz.4.778 tries to shift op by -2048; fix this program [ 310.918499][ T9622] 0x000000000001-0x000000020000 : "" [ 311.040975][ T9622] ftl_cs: FTL header corrupt! [ 311.206580][ T9604] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.253031][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.328196][ T9604] bridge_slave_0: entered allmulticast mode [ 311.370898][ T9604] bridge_slave_0: entered promiscuous mode [ 311.391802][ T9604] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.446737][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.484136][ T9604] bridge_slave_1: entered allmulticast mode [ 311.498047][ T9604] bridge_slave_1: entered promiscuous mode [ 311.643103][ T7289] Bluetooth: hci4: command tx timeout [ 311.675260][ T30] audit: type=1800 audit(1766424908.125:6): pid=9633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.780" name="dbroot" dev="configfs" ino=42510 res=0 errno=0 [ 311.721298][ T9604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.738043][ T9604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.804573][ T9604] team0: Port device team_slave_0 added [ 311.817377][ T9604] team0: Port device team_slave_1 added [ 311.914681][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.964496][ T7279] Bluetooth: hci5: command tx timeout [ 311.980969][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.050134][ T9604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.086752][ T9604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.113286][ T9604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.168518][ T9604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.400496][ T9604] hsr_slave_0: entered promiscuous mode [ 312.419869][ T9604] hsr_slave_1: entered promiscuous mode [ 312.433359][ T9604] debugfs: 'hsr0' already exists in 'hsr' [ 312.449863][ T9604] Cannot create hsr debugfs directory [ 312.774122][ T9650] hub 8-0:1.0: USB hub found [ 312.779374][ T9650] hub 8-0:1.0: 1 port detected [ 313.110622][ T7279] Bluetooth: hci2: unexpected event 0x20 length: 123 > 7 [ 313.737692][ T9604] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.799949][ T9604] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.848552][ T9604] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.902449][ T9604] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.043009][ T7279] Bluetooth: hci5: command tx timeout [ 314.179618][ T9674] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 314.278415][ T9604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.346588][ T9604] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.400774][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.407951][ T7283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.511549][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.518709][ T7312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.528607][ T7279] Bluetooth: hci1: Malformed LE Event: 0x0b [ 315.241906][ T9604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.933398][ T9604] veth0_vlan: entered promiscuous mode [ 315.991082][ T9604] veth1_vlan: entered promiscuous mode [ 316.105978][ T9604] veth0_macvtap: entered promiscuous mode [ 316.118078][ T9604] veth1_macvtap: entered promiscuous mode [ 316.124131][ T7289] Bluetooth: hci5: command tx timeout [ 316.151666][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 316.167887][ T9604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.190136][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 316.205890][ T9604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.232247][ T7305] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.232291][ T7305] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.232322][ T7305] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.232351][ T7305] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.452649][ T8567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.452673][ T8567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.531048][ T8567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.531072][ T8567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.142967][ T9721] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 317.362061][ T9726] FAULT_INJECTION: forcing a failure. [ 317.362061][ T9726] name failslab, interval 1, probability 0, space 0, times 0 [ 317.404317][ T9726] CPU: 1 UID: 0 PID: 9726 Comm: syz.1.795 Tainted: G U L syzkaller #0 PREEMPT(full) [ 317.404376][ T9726] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 317.404388][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.404406][ T9726] Call Trace: [ 317.404416][ T9726] [ 317.404429][ T9726] dump_stack_lvl+0x16c/0x1f0 [ 317.404481][ T9726] should_fail_ex+0x512/0x640 [ 317.404526][ T9726] ? __kmalloc_noprof+0xca/0x910 [ 317.404566][ T9726] should_failslab+0xc2/0x120 [ 317.404615][ T9726] __kmalloc_noprof+0xeb/0x910 [ 317.404649][ T9726] ? __pfx___might_resched+0x10/0x10 [ 317.404693][ T9726] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 317.404757][ T9726] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 317.404812][ T9726] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 317.404875][ T9726] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 317.404928][ T9726] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 317.404976][ T9726] ? genl_get_cmd+0x194/0x580 [ 317.405033][ T9726] ? __radix_tree_lookup+0x21f/0x2c0 [ 317.405082][ T9726] genl_rcv_msg+0x55c/0x800 [ 317.405118][ T9726] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.405149][ T9726] ? __pfx_ctrl_getfamily+0x10/0x10 [ 317.405197][ T9726] netlink_rcv_skb+0x158/0x420 [ 317.405242][ T9726] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.405281][ T9726] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.405346][ T9726] ? netlink_deliver_tap+0x1ae/0xd30 [ 317.405397][ T9726] genl_rcv+0x28/0x40 [ 317.405441][ T9726] netlink_unicast+0x5aa/0x870 [ 317.405497][ T9726] ? __pfx_netlink_unicast+0x10/0x10 [ 317.405560][ T9726] netlink_sendmsg+0x8c8/0xdd0 [ 317.405613][ T9726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.405666][ T9726] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 317.405727][ T9726] __sys_sendto+0x4a3/0x520 [ 317.405765][ T9726] ? __pfx___sys_sendto+0x10/0x10 [ 317.405818][ T9726] ? fd_install+0x223/0x570 [ 317.405879][ T9726] ? __pfx___sys_socket+0x10/0x10 [ 317.405910][ T9726] ? xfd_validate_state+0x61/0x180 [ 317.405939][ T9726] ? __task_pid_nr_ns+0x1f5/0x500 [ 317.405975][ T9726] __x64_sys_sendto+0xe0/0x1c0 [ 317.406010][ T9726] ? do_syscall_64+0x91/0xf80 [ 317.406056][ T9726] ? lockdep_hardirqs_on+0x7c/0x110 [ 317.406103][ T9726] do_syscall_64+0xcd/0xf80 [ 317.406154][ T9726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.406186][ T9726] RIP: 0033:0x7f22bb59165c [ 317.406212][ T9726] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 317.406241][ T9726] RSP: 002b:00007f22bc443ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 317.406271][ T9726] RAX: ffffffffffffffda RBX: 00007f22bc443fc0 RCX: 00007f22bb59165c [ 317.406291][ T9726] RDX: 0000000000000020 RSI: 00007f22bc444010 RDI: 0000000000000005 [ 317.406310][ T9726] RBP: 0000000000000000 R08: 00007f22bc443f14 R09: 000000000000000c [ 317.406329][ T9726] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 317.406348][ T9726] R13: 00007f22bc443f68 R14: 00007f22bc444010 R15: 0000000000000000 [ 317.406391][ T9726] [ 318.106839][ T9734] netlink: 'syz.3.796': attribute type 11 has an invalid length. [ 318.149307][ T9734] netlink: 'syz.3.796': attribute type 11 has an invalid length. [ 318.203445][ T7279] Bluetooth: hci5: command tx timeout [ 318.228823][ T9734] FAULT_INJECTION: forcing a failure. [ 318.228823][ T9734] name failslab, interval 1, probability 0, space 0, times 0 [ 318.243442][ T9734] CPU: 1 UID: 0 PID: 9734 Comm: syz.3.796 Tainted: G U L syzkaller #0 PREEMPT(full) [ 318.243500][ T9734] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 318.243512][ T9734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.243530][ T9734] Call Trace: [ 318.243541][ T9734] [ 318.243554][ T9734] dump_stack_lvl+0x16c/0x1f0 [ 318.243607][ T9734] should_fail_ex+0x512/0x640 [ 318.243643][ T9734] ? kmem_cache_alloc_noprof+0x62/0x770 [ 318.243687][ T9734] should_failslab+0xc2/0x120 [ 318.243736][ T9734] kmem_cache_alloc_noprof+0x83/0x770 [ 318.243773][ T9734] ? futex_wait+0xe0/0x380 [ 318.243816][ T9734] ? do_epoll_ctl+0x24d7/0x3790 [ 318.243875][ T9734] ? do_epoll_ctl+0x24d7/0x3790 [ 318.243924][ T9734] do_epoll_ctl+0x24d7/0x3790 [ 318.243992][ T9734] ? __pfx_do_epoll_ctl+0x10/0x10 [ 318.244041][ T9734] ? find_held_lock+0x2b/0x80 [ 318.244081][ T9734] ? __might_fault+0xe3/0x190 [ 318.244118][ T9734] ? __might_fault+0xe3/0x190 [ 318.244171][ T9734] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 318.244220][ T9734] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 318.244282][ T9734] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 318.244348][ T9734] do_syscall_64+0xcd/0xf80 [ 318.244400][ T9734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.244433][ T9734] RIP: 0033:0x7f7f2b78f7c9 [ 318.244459][ T9734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.244491][ T9734] RSP: 002b:00007f7f2c584038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 318.244521][ T9734] RAX: ffffffffffffffda RBX: 00007f7f2b9e5fa0 RCX: 00007f7f2b78f7c9 [ 318.244542][ T9734] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 318.244561][ T9734] RBP: 00007f7f2b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 318.244580][ T9734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.244598][ T9734] R13: 00007f7f2b9e6038 R14: 00007f7f2b9e5fa0 R15: 00007ffeb9e4e688 [ 318.244642][ T9734] [ 318.564917][ T9736] FAULT_INJECTION: forcing a failure. [ 318.564917][ T9736] name failslab, interval 1, probability 0, space 0, times 0 [ 318.577761][ T9736] CPU: 1 UID: 0 PID: 9736 Comm: syz.1.797 Tainted: G U L syzkaller #0 PREEMPT(full) [ 318.577814][ T9736] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 318.577826][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.577845][ T9736] Call Trace: [ 318.577855][ T9736] [ 318.577867][ T9736] dump_stack_lvl+0x16c/0x1f0 [ 318.577921][ T9736] should_fail_ex+0x512/0x640 [ 318.577956][ T9736] ? kmem_cache_alloc_noprof+0x62/0x770 [ 318.578001][ T9736] should_failslab+0xc2/0x120 [ 318.578050][ T9736] kmem_cache_alloc_noprof+0x83/0x770 [ 318.578087][ T9736] ? futex_wait+0xe0/0x380 [ 318.578128][ T9736] ? do_epoll_ctl+0x1170/0x3790 [ 318.578186][ T9736] ? do_epoll_ctl+0x1170/0x3790 [ 318.578244][ T9736] do_epoll_ctl+0x1170/0x3790 [ 318.578295][ T9736] ? io_uring_setup+0x137/0x1f60 [ 318.578353][ T9736] ? __pfx_do_epoll_ctl+0x10/0x10 [ 318.578400][ T9736] ? find_held_lock+0x2b/0x80 [ 318.578439][ T9736] ? __might_fault+0xe3/0x190 [ 318.578473][ T9736] ? __might_fault+0xe3/0x190 [ 318.578525][ T9736] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 318.578574][ T9736] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 318.578626][ T9736] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 318.578690][ T9736] do_syscall_64+0xcd/0xf80 [ 318.578741][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.578773][ T9736] RIP: 0033:0x7f22bb58f7c9 [ 318.578800][ T9736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.578831][ T9736] RSP: 002b:00007f22bc445038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 318.578863][ T9736] RAX: ffffffffffffffda RBX: 00007f22bb7e5fa0 RCX: 00007f22bb58f7c9 [ 318.578883][ T9736] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 318.578900][ T9736] RBP: 00007f22bb613f91 R08: 0000000000000000 R09: 0000000000000000 [ 318.578919][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.578937][ T9736] R13: 00007f22bb7e6038 R14: 00007f22bb7e5fa0 R15: 00007ffe30f1a5a8 [ 318.578980][ T9736] [ 319.092958][ T7279] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7 [ 320.938009][ T9777] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 321.828033][ T9796] futex_wake_op: syz.1.811 tries to shift op by -2048; fix this program [ 321.836891][ T9796] futex_wake_op: syz.1.811 tries to shift op by -2048; fix this program [ 321.849635][ T9796] 0x000000000001-0x000000020000 : "" [ 321.903579][ T9796] ftl_cs: FTL header corrupt! [ 322.485304][ T9809] FAULT_INJECTION: forcing a failure. [ 322.485304][ T9809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.498989][ T9809] CPU: 1 UID: 0 PID: 9809 Comm: syz.4.813 Tainted: G U L syzkaller #0 PREEMPT(full) [ 322.499041][ T9809] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 322.499054][ T9809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.499072][ T9809] Call Trace: [ 322.499083][ T9809] [ 322.499094][ T9809] dump_stack_lvl+0x16c/0x1f0 [ 322.499148][ T9809] should_fail_ex+0x512/0x640 [ 322.499187][ T9809] _copy_from_user+0x2e/0xd0 [ 322.499222][ T9809] move_addr_to_kernel+0x65/0x170 [ 322.499254][ T9809] __sys_sendto+0x1be/0x520 [ 322.499290][ T9809] ? __pfx___sys_sendto+0x10/0x10 [ 322.499338][ T9809] ? fd_install+0x223/0x570 [ 322.499397][ T9809] ? __pfx___sys_socket+0x10/0x10 [ 322.499435][ T9809] ? xfd_validate_state+0x61/0x180 [ 322.499463][ T9809] ? __task_pid_nr_ns+0x1f5/0x500 [ 322.499497][ T9809] __x64_sys_sendto+0xe0/0x1c0 [ 322.499530][ T9809] ? do_syscall_64+0x91/0xf80 [ 322.499575][ T9809] ? lockdep_hardirqs_on+0x7c/0x110 [ 322.499620][ T9809] do_syscall_64+0xcd/0xf80 [ 322.499667][ T9809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.499698][ T9809] RIP: 0033:0x7f934879165c [ 322.499724][ T9809] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 322.499754][ T9809] RSP: 002b:00007f9349638ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 322.499784][ T9809] RAX: ffffffffffffffda RBX: 00007f9349638fc0 RCX: 00007f934879165c [ 322.499803][ T9809] RDX: 0000000000000020 RSI: 00007f9349639010 RDI: 000000000000000b [ 322.499822][ T9809] RBP: 0000000000000000 R08: 00007f9349638f14 R09: 000000000000000c [ 322.499839][ T9809] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 322.499857][ T9809] R13: 00007f9349638f68 R14: 00007f9349639010 R15: 0000000000000000 [ 322.499898][ T9809] [ 322.693540][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.699918][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.709676][ T7279] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 322.992031][ T9811] [U] ^\ [ 323.979200][ T9827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.818'. [ 324.703796][ T9842] futex_wake_op: syz.3.823 tries to shift op by -2048; fix this program [ 324.712522][ T9842] futex_wake_op: syz.3.823 tries to shift op by -2048; fix this program [ 324.722726][ T9842] 0x000000000001-0x000000020000 : "" [ 324.756077][ T9842] ftl_cs: FTL header corrupt! [ 325.077751][ T9846] sp0: Synchronizing with TNC [ 325.466146][ T9863] FAULT_INJECTION: forcing a failure. [ 325.466146][ T9863] name failslab, interval 1, probability 0, space 0, times 0 [ 325.513005][ T9855] cgroup: fork rejected by pids controller in /syz3 [ 325.554040][ T9863] CPU: 1 UID: 0 PID: 9863 Comm: syz.4.825 Tainted: G U L syzkaller #0 PREEMPT(full) [ 325.554096][ T9863] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 325.554109][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 325.554128][ T9863] Call Trace: [ 325.554140][ T9863] [ 325.554152][ T9863] dump_stack_lvl+0x16c/0x1f0 [ 325.554205][ T9863] should_fail_ex+0x512/0x640 [ 325.554240][ T9863] ? kmem_cache_alloc_noprof+0x62/0x770 [ 325.554284][ T9863] should_failslab+0xc2/0x120 [ 325.554343][ T9863] kmem_cache_alloc_noprof+0x83/0x770 [ 325.554379][ T9863] ? stack_depot_save_flags+0x29/0x9b0 [ 325.554411][ T9863] ? alloc_empty_file+0x55/0x1e0 [ 325.554451][ T9863] ? alloc_empty_file+0x55/0x1e0 [ 325.554480][ T9863] ? kasan_save_track+0x14/0x30 [ 325.554519][ T9863] alloc_empty_file+0x55/0x1e0 [ 325.554553][ T9863] path_openat+0xde/0x3140 [ 325.554597][ T9863] ? do_syscall_64+0xcd/0xf80 [ 325.554639][ T9863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.554684][ T9863] ? __pfx_path_openat+0x10/0x10 [ 325.554746][ T9863] do_filp_open+0x20b/0x470 [ 325.554795][ T9863] ? __pfx_do_filp_open+0x10/0x10 [ 325.554873][ T9863] ? alloc_fd+0x471/0x7d0 [ 325.554931][ T9863] do_sys_openat2+0x121/0x290 [ 325.554967][ T9863] ? __pfx_do_sys_openat2+0x10/0x10 [ 325.555019][ T9863] __x64_sys_openat+0x174/0x210 [ 325.555056][ T9863] ? __pfx___x64_sys_openat+0x10/0x10 [ 325.555107][ T9863] do_syscall_64+0xcd/0xf80 [ 325.555158][ T9863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.555189][ T9863] RIP: 0033:0x7f934878f7c9 [ 325.555215][ T9863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.555245][ T9863] RSP: 002b:00007f934963a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 325.555278][ T9863] RAX: ffffffffffffffda RBX: 00007f93489e5fa0 RCX: 00007f934878f7c9 [ 325.555300][ T9863] RDX: 0000000000000040 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 325.555328][ T9863] RBP: 00007f9348813f91 R08: 0000000000000000 R09: 0000000000000000 [ 325.555348][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.555367][ T9863] R13: 00007f93489e6038 R14: 00007f93489e5fa0 R15: 00007ffc9b5907f8 [ 325.555410][ T9863] [ 325.937790][ T9887] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 328.857113][ T7279] Bluetooth: hci4: unexpected subevent 0x01 length: 3 < 18 [ 329.094467][T10048] netlink: zone id is out of range [ 329.131395][T10048] netlink: del zone limit has 4 unknown bytes [ 329.261886][T10041] netlink: set zone limit has 8 unknown bytes [ 329.386793][T10046] sp0: Synchronizing with TNC [ 331.241780][T10081] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 331.997528][ T7289] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.010470][ T7289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.021753][ T7289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.030633][ T7289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.038126][ T7289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.725844][T10086] chnl_net:caif_netlink_parms(): no params data found [ 333.272172][T10086] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.401792][T10086] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.410184][T10086] bridge_slave_0: entered allmulticast mode [ 333.435481][T10086] bridge_slave_0: entered promiscuous mode [ 333.712710][T10086] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.725058][T10086] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.732469][T10086] bridge_slave_1: entered allmulticast mode [ 333.755730][T10086] bridge_slave_1: entered promiscuous mode [ 334.044361][ T31] INFO: task kworker/u10:6:7297 blocked for more than 143 seconds. [ 334.061675][ T31] Tainted: G U L syzkaller #0 [ 334.070921][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 334.100071][ T31] task:kworker/u10:6 state:D stack:26776 pid:7297 tgid:7297 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 334.124130][ T7289] Bluetooth: hci6: command tx timeout [ 334.131339][T10086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.143201][ T31] Workqueue: netns cleanup_net [ 334.148050][ T31] Call Trace: [ 334.151531][ T31] [ 334.172499][ T31] ? __schedule+0x10b9/0x6150 [ 334.182681][ T31] __schedule+0x1139/0x6150 [ 334.198672][ T31] ? __pfx___schedule+0x10/0x10 [ 334.214462][ T31] ? find_held_lock+0x2b/0x80 [ 334.217861][T10086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.219274][ T31] ? schedule+0x2d7/0x3a0 [ 334.235746][ T31] schedule+0xe7/0x3a0 [ 334.239894][ T31] schedule_timeout+0x257/0x290 [ 334.261625][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 334.283006][ T31] ? mark_held_locks+0x49/0x80 [ 334.287848][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.348909][ T31] __wait_for_common+0x2fc/0x4e0 [ 334.364816][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 334.412435][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 334.445417][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.475400][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 334.483547][ T31] __flush_workqueue+0x3e2/0x1230 [ 334.489164][ T31] ? __lock_acquire+0x436/0x2890 [ 334.510370][ T31] ? __lock_acquire+0x436/0x2890 [ 334.553241][T10086] team0: Port device team_slave_0 added [ 334.566571][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 334.580619][T10086] team0: Port device team_slave_1 added [ 334.586251][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 334.591554][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 334.631853][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 334.643225][ T31] rds_tcp_listen_stop+0x104/0x150 [ 334.648422][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 334.751920][ T31] rds_tcp_exit_net+0xcb/0x810 [ 334.782865][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 334.788348][ T31] ? __pfx___might_resched+0x10/0x10 [ 334.832936][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 334.838417][ T31] ops_undo_list+0x2ee/0xab0 [ 334.852833][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 334.858050][ T31] ? cleanup_net+0x347/0x830 [ 334.862697][ T31] ? idr_destroy+0x62/0x2e0 [ 334.883612][ T31] cleanup_net+0x41b/0x830 [ 334.888114][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 334.912844][ T31] ? rcu_is_watching+0x12/0xc0 [ 334.917710][ T31] process_one_work+0x9ba/0x1b20 [ 334.922706][ T31] ? __pfx_process_one_work+0x10/0x10 [ 334.938253][ T31] ? assign_work+0x1a0/0x250 [ 334.953149][ T31] worker_thread+0x6c8/0xf10 [ 334.957847][ T31] ? __pfx_worker_thread+0x10/0x10 [ 334.981523][ T31] kthread+0x3c5/0x780 [ 334.985962][ T31] ? __pfx_kthread+0x10/0x10 [ 334.990568][ T31] ? rcu_is_watching+0x12/0xc0 [ 335.012820][ T31] ? __pfx_kthread+0x10/0x10 [ 335.017524][ T31] ret_from_fork+0x983/0xb10 [ 335.022183][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 335.043013][ T31] ? __switch_to+0x7af/0x10d0 [ 335.047790][ T31] ? __pfx_kthread+0x10/0x10 [ 335.052436][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.083617][ T31] [ 335.086885][ T31] [ 335.086885][ T31] Showing all locks held in the system: [ 335.102837][ T31] 1 lock held by khungtaskd/31: [ 335.107798][ T31] #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 335.122830][ T31] 1 lock held by syz-executor/6252: [ 335.128072][ T31] 2 locks held by kworker/u10:2/7283: [ 335.142806][ T31] #0: ffff88801dfc3148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 335.162848][ T31] #1: ffffc9000bdd7c90 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 335.192888][ T31] 3 locks held by kworker/u10:6/7297: [ 335.198351][ T31] #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 335.222839][ T31] #1: ffffc900050efc90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 335.243098][ T31] #2: ffffffff9012e890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 335.252636][ T31] 4 locks held by kworker/u10:16/7379: [ 335.272872][ T31] #0: ffff88813ff69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 335.312822][ T31] #1: ffffc90005267c90 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 335.342814][ T31] #2: ffffffff90145068 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 335.351997][ T31] #3: ffffffff8e3d4c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 335.362462][ T31] 2 locks held by getty/8376: [ 335.367218][ T31] #0: ffff8880318210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 335.379625][ T31] #1: ffffc9000474b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 335.399332][ T31] 2 locks held by syz.3.598/8712: [ 335.404490][ T31] 1 lock held by syz.2.703/9223: [ 335.409450][ T31] #0: ffffffff9012e890 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 335.419434][ T31] 1 lock held by syz.0.734/9363: [ 335.424712][ T31] #0: ffffffff9012e890 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 335.434343][ T31] 2 locks held by syz.3.765/9552: [ 335.439399][ T31] 2 locks held by syz.3.768/9569: [ 335.444544][ T31] 1 lock held by syz.5.774/9719: [ 335.449510][ T31] #0: ffffffff9012e890 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 335.459138][ T31] 2 locks held by syz.3.824/9856: [ 335.464326][ T31] 1 lock held by syz.3.824/9859: [ 335.469302][ T31] no locks held by syz.3.824/9860. [ 335.474561][ T31] 1 lock held by syz.3.824/9880: [ 335.479530][ T31] 1 lock held by syz.3.824/9882: [ 335.508014][ T31] 1 lock held by syz.4.832/10039: [ 335.513216][ T31] #0: ffffffff9012e890 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 335.522706][ T31] 1 lock held by syz.3.836/10078: [ 335.527831][ T31] 2 locks held by syz.3.838/10085: [ 335.533603][ T31] #0: ffffffff9012e890 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 335.543178][ T31] #1: ffffffff90145068 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 335.552319][ T31] 2 locks held by syz.1.842/10110: [ 335.565944][ T31] #0: ffffffff9012e890 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 335.582801][ T31] #1: ffffffff90145068 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21d/0x7d0 [ 335.599562][ T31] [ 335.625714][ T31] ============================================= [ 335.625714][ T31] [ 335.643365][ T31] NMI backtrace for cpu 0 [ 335.643393][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 335.643441][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 335.643452][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.643469][ T31] Call Trace: [ 335.643479][ T31] [ 335.643489][ T31] dump_stack_lvl+0x116/0x1f0 [ 335.643538][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 335.643574][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 335.643606][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 335.643644][ T31] sys_info+0x133/0x180 [ 335.643672][ T31] watchdog+0xe66/0x1180 [ 335.643724][ T31] ? rcu_is_watching+0x12/0xc0 [ 335.643766][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.643806][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 335.643854][ T31] ? __kthread_parkme+0x19e/0x250 [ 335.643901][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.643944][ T31] kthread+0x3c5/0x780 [ 335.643973][ T31] ? __pfx_kthread+0x10/0x10 [ 335.644007][ T31] ? rcu_is_watching+0x12/0xc0 [ 335.644048][ T31] ? __pfx_kthread+0x10/0x10 [ 335.644078][ T31] ret_from_fork+0x983/0xb10 [ 335.644110][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 335.644144][ T31] ? __switch_to+0x7af/0x10d0 [ 335.644184][ T31] ? __pfx_kthread+0x10/0x10 [ 335.644223][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.644287][ T31] [ 335.644297][ T31] Sending NMI from CPU 0 to CPUs 1: [ 335.789071][ C1] NMI backtrace for cpu 1 [ 335.789097][ C1] CPU: 1 UID: 0 PID: 10097 Comm: syz.1.840 Tainted: G U L syzkaller #0 PREEMPT(full) [ 335.789133][ C1] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 335.789141][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.789155][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 335.789196][ C1] Code: 00 00 5b e9 62 16 ec 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 68 e7 f3 11 <65> 8b 05 79 e7 f3 11 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 [ 335.789218][ C1] RSP: 0018:ffffc9000d1c70d0 EFLAGS: 00000246 [ 335.789238][ C1] RAX: 0000000000000000 RBX: 1ffff92001a38e1b RCX: ffffffff8231c3c8 [ 335.789253][ C1] RDX: ffff888026e35b80 RSI: ffffffff8231c31c RDI: ffff888026e36150 [ 335.789269][ C1] RBP: 0000000000140278 R08: 0000000000000005 R09: 0000000000000000 [ 335.789283][ C1] R10: 0000000000140278 R11: 0000000000007d15 R12: ffff888026e35b80 [ 335.789304][ C1] R13: 0000000000002000 R14: dffffc0000000000 R15: 0000000003180317 [ 335.789319][ C1] FS: 0000000000000000(0000) GS:ffff8881249fc000(0000) knlGS:0000000000000000 [ 335.789343][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.789358][ C1] CR2: 00005626cf99f000 CR3: 0000000028164000 CR4: 00000000003526f0 [ 335.789373][ C1] Call Trace: [ 335.789381][ C1] [ 335.789389][ C1] save_stack+0xcc/0x1f0 [ 335.789420][ C1] ? __pfx_save_stack+0x10/0x10 [ 335.789449][ C1] ? free_unref_folios+0xa22/0x1610 [ 335.789474][ C1] ? folios_put_refs+0x4be/0x750 [ 335.789500][ C1] ? shmem_undo_range+0x58f/0x1140 [ 335.789525][ C1] ? shmem_evict_inode+0x39e/0xbe0 [ 335.789549][ C1] ? evict+0x3c2/0xad0 [ 335.789570][ C1] ? iput.part.0+0x621/0x1190 [ 335.789592][ C1] ? iput+0x35/0x40 [ 335.789613][ C1] ? dentry_unlink_inode+0x29c/0x480 [ 335.789632][ C1] ? __dentry_kill+0x1d0/0x600 [ 335.789654][ C1] ? finish_dput+0x76/0x480 [ 335.789676][ C1] ? dput.part.0+0x451/0x570 [ 335.789699][ C1] ? dput+0x1f/0x30 [ 335.789720][ C1] ? __fput+0x51c/0xb70 [ 335.789740][ C1] ? task_work_run+0x150/0x240 [ 335.789763][ C1] ? do_exit+0x87f/0x2bd0 [ 335.789784][ C1] ? do_group_exit+0xd3/0x2a0 [ 335.789806][ C1] ? page_ext_put+0x3e/0xd0 [ 335.789839][ C1] __reset_page_owner+0x84/0x1a0 [ 335.789871][ C1] free_unref_folios+0xa22/0x1610 [ 335.789899][ C1] ? rcu_is_watching+0x12/0xc0 [ 335.789929][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 335.789963][ C1] folios_put_refs+0x4be/0x750 [ 335.789998][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 335.790028][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 335.790062][ C1] shmem_undo_range+0x58f/0x1140 [ 335.790091][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 335.790131][ C1] ? find_held_lock+0x2b/0x80 [ 335.790176][ C1] shmem_evict_inode+0x39e/0xbe0 [ 335.790203][ C1] ? inode_wait_for_writeback+0x170/0x390 [ 335.790234][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 335.790260][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 335.790291][ C1] ? find_held_lock+0x2b/0x80 [ 335.790318][ C1] ? evict+0x37e/0xad0 [ 335.790341][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 335.790367][ C1] evict+0x3c2/0xad0 [ 335.790388][ C1] ? find_held_lock+0x2b/0x80 [ 335.790416][ C1] ? __pfx_evict+0x10/0x10 [ 335.790441][ C1] ? iput.part.0+0x619/0x1190 [ 335.790466][ C1] iput.part.0+0x621/0x1190 [ 335.790492][ C1] iput+0x35/0x40 [ 335.790513][ C1] dentry_unlink_inode+0x29c/0x480 [ 335.790535][ C1] __dentry_kill+0x1d0/0x600 [ 335.790559][ C1] finish_dput+0x76/0x480 [ 335.790583][ C1] dput.part.0+0x451/0x570 [ 335.790608][ C1] dput+0x1f/0x30 [ 335.790630][ C1] __fput+0x51c/0xb70 [ 335.790654][ C1] task_work_run+0x150/0x240 [ 335.790678][ C1] ? __pfx_task_work_run+0x10/0x10 [ 335.790707][ C1] do_exit+0x87f/0x2bd0 [ 335.790730][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 335.790766][ C1] ? __pfx_do_exit+0x10/0x10 [ 335.790791][ C1] do_group_exit+0xd3/0x2a0 [ 335.790814][ C1] get_signal+0x2671/0x26d0 [ 335.790848][ C1] ? __pfx_get_signal+0x10/0x10 [ 335.790877][ C1] ? find_held_lock+0x2b/0x80 [ 335.790903][ C1] ? fixup_vdso_exception+0x34b/0x400 [ 335.790941][ C1] arch_do_signal_or_restart+0x8f/0x7a0 [ 335.790975][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 335.791018][ C1] ? do_user_addr_fault+0xa62/0x1370 [ 335.791049][ C1] irqentry_exit+0x38a/0x8c0 [ 335.791084][ C1] asm_exc_page_fault+0x26/0x30 [ 335.791105][ C1] RIP: 0033:0x0 [ 335.791121][ C1] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 335.791132][ C1] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 335.791149][ C1] RAX: 0000000000000000 RBX: 00007f22bb7e6180 RCX: 00007f22bb58f7c9 [ 335.791164][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 335.791177][ C1] RBP: 00007f22bb613f91 R08: 0000000000000002 R09: 0000000000000000 [ 335.791191][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.791205][ C1] R13: 00007f22bb7e6218 R14: 00007f22bb7e6180 R15: 00007ffe30f1a5a8 [ 335.791229][ C1] [ 336.365252][ T7279] Bluetooth: hci6: command tx timeout [ 336.377360][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 336.384270][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 336.395022][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 336.400417][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.410596][ T31] Call Trace: [ 336.413904][ T31] [ 336.416864][ T31] dump_stack_lvl+0x3d/0x1f0 [ 336.421516][ T31] vpanic+0x640/0x6f0 [ 336.425712][ T31] panic+0xca/0xd0 [ 336.429469][ T31] ? __pfx_panic+0x10/0x10 [ 336.433917][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 336.439940][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 336.446140][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 336.452336][ T31] ? watchdog+0xe83/0x1180 [ 336.456809][ T31] ? watchdog+0xe76/0x1180 [ 336.461278][ T31] watchdog+0xe94/0x1180 [ 336.465588][ T31] ? rcu_is_watching+0x12/0xc0 [ 336.470414][ T31] ? __pfx_watchdog+0x10/0x10 [ 336.475149][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.480418][ T31] ? __kthread_parkme+0x19e/0x250 [ 336.485500][ T31] ? __pfx_watchdog+0x10/0x10 [ 336.490241][ T31] kthread+0x3c5/0x780 [ 336.494350][ T31] ? __pfx_kthread+0x10/0x10 [ 336.498983][ T31] ? rcu_is_watching+0x12/0xc0 [ 336.503795][ T31] ? __pfx_kthread+0x10/0x10 [ 336.508425][ T31] ret_from_fork+0x983/0xb10 [ 336.513058][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 336.518212][ T31] ? __switch_to+0x7af/0x10d0 [ 336.522928][ T31] ? __pfx_kthread+0x10/0x10 [ 336.527571][ T31] ret_from_fork_asm+0x1a/0x30 [ 336.532411][ T31] [ 336.535721][ T31] Kernel Offset: disabled [ 336.540052][ T31] Rebooting in 86400 seconds..