last executing test programs: 1m13.044723706s ago: executing program 0 (id=2436): unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r1 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x3, 0xb, 0x13, 0x4008df3, 0x0) sched_setaffinity$auto(0x0, 0x9899, &(0x7f00000000c0)=0xf19d) clone$auto(0x20003b46, 0x80000001, 0x0, 0x0, 0x2) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/186, 0xba) r4 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r4, &(0x7f0000000400)={{&(0x7f00000002c0)="6d95714bb6e5600319987f5e8c3886faa5465596c67b9a186d9650f2e1663841ad61aa64fd17c25f6a2d527624aee87f777254375f50b6b4cfc3349810272282bf5fee9908460aded2f86ae1672c01", 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0cbd4aeb2ca218", 0x49}, 0x1, &(0x7f0000000080)="523b7dfa05fc0c7fd8", 0x5, 0x3}, 0x5}, 0x2, 0x100) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5) 1m8.828056059s ago: executing program 0 (id=2445): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x4000, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8000, 0x0) 1m7.419145792s ago: executing program 0 (id=2448): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x103040, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, 0x0, 0x81) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1441, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd10, &(0x7f00000001c0)) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd02, &(0x7f00000001c0)) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000010c0)=""/22, 0x16) socket(0x2, 0xa, 0x1) r4 = bpf$auto(0x0, 0x0, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r4, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x0) r5 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) getsockopt$auto_SO_LOCK_FILTER(r3, 0x9, 0x2c, &(0x7f0000000000)=')$\x00', &(0x7f0000000040)=0x7) io_uring_register$auto(r5, 0x17, 0x0, 0x9) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) ioctl$auto_EVIOCGMASK(r6, 0x80104592, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m6.82738917s ago: executing program 0 (id=2451): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x100, 0x0) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) mount$auto(0x0, 0x0, 0x0, 0x4, 0x0) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$auto(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='/dev/ttynull\x00', &(0x7f0000000140)="ef65321320ebdf0e", 0x1, 0xbd3b) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x40, 0x9, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x1ff, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x2000003, 0x8, 0x4, 0x10, 0xe5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, [0x2, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x2d24, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xadc4}, 0x8}, 0x7, 0x4008) ioctl$auto(r0, 0x921064a1, 0x9) r2 = fcntl$getown(r0, 0x9) capset$auto(&(0x7f00000004c0)={0x7, r2}, &(0x7f0000000500)={0x1, 0x7, 0x80000001}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) close_range$auto(0x0, 0x5, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x1, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m6.339467508s ago: executing program 2 (id=2452): mmap$auto(0x0, 0x402000c, 0xdf, 0xeb1, 0x401, 0x8002) close_range$auto(0x0, 0x5, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x4000, 0x0) shmctl$auto_IPC_STAT(0x2, 0x2, &(0x7f00000011c0)={{0xffff7fff, 0x0, 0xee01, 0x100, 0x36, 0x119, 0xfff4}, 0x6de9, 0x4, 0x0, 0x4, @inferred=0xffffffffffffffff, @raw=0x2, 0x3ff, 0x0, 0x0, &(0x7f00000001c0)="39b9a325f12804f80aef1c6673beaedc87cc61d078cbadcd4bace1f1a6aae71deebdbcf39fbb78d6d851a360df00141e38ca6a3b61eddb4ef32c94a5866026f8c3f645b7774d819626e7d0c901330144dbd21a7f5f12f217139b6a8d263cf8367932a3d2bc581b6877b65df109b5702e26671ed4cff238450f955bfeea291ce05c74df66c9d4fa41990840c9435ab607730c83dde331bb2a7214f308de2128b0d0ae92caaa9e3caf8b6eda5908683b401bd116817592ad84a6aaa8e4b1b4777a542cb46ae5896bb1711b6e2091bbfa0140fa32f0b4533e5ab605f5fe8cea7e915ab6a180ec8dab773e0a6c69e321048fa72c8e3db0200f7bac7ff3aebc3849b404f5ac184b8488183bdfcf5490d27b9a9acb3a15b047653b78fb6da5c6e1f97dbe56a1646955dfab681704365c38de1e99f29aa523f347eff271bee78c360b550ff989a1a3fe243f1057b1bcba6be30a5f0362d266d7b7a17f3ec023e6a830eb94b19e794858350283c8ae01386472e2a5b4e411aa5c85317a8926fcd7209df221a86a232584c13d274cbfe77ca34a086848bacad58278a2ec7acf1c95bf56422a288484e8227cf1b7fe832a8553e50e384a6f017071039740c5a110b1de58ca5e14348cce8232e50025a8a5302629bf4258ac3929bdb5ba12cd47898e88ae11bfd33a4583b72fc526dc3bc18e82296dd75216e12ec24be6130bfd43f5c47e087e68159e8ac22f77518ee6666f633691b4f8ce40b4162cb75d6c219adc66b38f4c92d452d70617fa681a00e2f95e8b69f45cdf92c99d227d3f765915ef0447e092783892fe779a929e0ea1438888f83430b6027f8efe64ea9864c0564c120f1cc4022853fa6ad0c2909ca533e19584b8b8f5821645f52680ae65b954ac1f82609f61a883cd22335d821ee905fdec3fd5bd8ce3cc1000d3b469bcf14548a29b0effaeff321756199e89bd43d0509603311444a7e496da398f8c228ca9667e8a5f41db1d2b598cda7b4e9eb7abc6220c7f317ce8047e06c7417b5b2393cf4c06863321be750e24fe4ec253978ae3448f221d42b11e773fe1a2d91ae41ae3b732fa1b6a1cc07f6a71d754ed6406ab300599d994e98b313746d621f973971be7de8bbe6863b3c91fc89ed3cc8cb355d767f38a7f8388a61660ceff5d198ccc78f0e61f96ddcc2074156187abe03d37f493ef0d21b6e8b20ef2461191bc5d7cd23cfc29ddce4d0317179fca68b95029c8acaae7fe17d99b60a648befd426b14db13420f595aec6c24a08e97b39b168d8a3e1c533a06cb77151125ce4005753b08414fcf462e87cb3440e30c1a79acb12badfa1161806609cff799"}) socket(0x10, 0x2, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80502, 0x0) socket(0x2, 0x5, 0x0) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) socket(0x1e, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02", @ANYRES32=r0], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socket(0x2, 0xa, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x972, 0x0) ioctl$auto(0x1, 0x890b, 0x8) umount2$auto(&(0x7f0000000040)='/dev/vbi22\x00', 0x2) 1m6.130023679s ago: executing program 2 (id=2453): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x4000, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8000, 0x0) 1m5.855878723s ago: executing program 0 (id=2454): mmap$auto(0x700, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) move_mount$auto(r0, 0x0, r0, 0x0, 0xc) 1m5.505139114s ago: executing program 2 (id=2455): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1, 0x0) writev$auto(r0, &(0x7f0000000140)={0x0, 0x2}, 0x6) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) sysfs$auto(0x2, 0xd, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) 1m5.0345243s ago: executing program 2 (id=2457): r0 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x5, &(0x7f0000000280)="63a69a28d298a1dd099c9e75ca43cbb5570ae0ca593dfa4920189cc3cab3bebce4eb3cdf8398a13a9192685bd6841a8c0dd2151560f1b8cc61245ca817df8529e03e17fc4a887809f403acd0fca2e9e2abdeb400274489c2330ca0843e61c759f6582d8375e6bcd151681fea438c40b6542d378b70623f034687401b4d28fc3e231b66adcae5b8350323bdcd") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) read$auto(0x3, 0x0, 0x80) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmmsg$auto(0x3, 0x0, 0x9, 0x7400000) setresuid$auto(0x0, 0x0, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_VHOST_SET_VRING_KICK2(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) bpf$auto(0x0, &(0x7f00000001c0)=@link_update={0xffffffffffffffff, @new_map_fd=r0, 0x6, @old_map_fd=r3}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000804) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r5) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0c4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(0xffffffffffffffff, 0x7b9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) read$auto(0x4, 0x0, 0xfdef) 1m4.463713915s ago: executing program 2 (id=2458): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x4000, 0x0) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8000, 0x0) 1m3.567126314s ago: executing program 2 (id=2460): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x7, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r4}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m3.015495494s ago: executing program 3 (id=2462): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3) getitimer$auto(0x8, &(0x7f0000000040)={{0xfffffffffffffff8, 0xc36}, {0x6b44, 0xc}}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) 1m2.808486138s ago: executing program 3 (id=2463): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x100, 0x0) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) mount$auto(0x0, 0x0, 0x0, 0x4, 0x0) mkdir$auto(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$auto(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='/dev/ttynull\x00', &(0x7f0000000140)="ef65321320ebdf0e6b9c8169", 0x1, 0xbd3b) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000003c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x40, 0x9, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x1ff, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x2000003, 0x8, 0x4, 0x10, 0xe5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, [0x2, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x2d24, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xadc4}, 0x8}, 0x7, 0x4008) ioctl$auto(r0, 0x921064a1, 0x9) r2 = fcntl$getown(r0, 0x9) capset$auto(&(0x7f00000004c0)={0x7, r2}, &(0x7f0000000500)={0x1, 0x7, 0x80000001}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) close_range$auto(0x0, 0x5, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x1, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m2.719099624s ago: executing program 0 (id=2464): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x7, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900), 0x0) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r4}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m1.856390977s ago: executing program 3 (id=2467): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r2 = io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) r3 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$auto_WG_CMD_GET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYRES16=r5, @ANYBLOB="030727bd7000fcd9df250000000008000100", @ANYRES32=r6, @ANYBLOB="6e1a75dbfb422c90c2101ee89c7af7e6b127217fcf1ca58aab6f1e98984ef68cf89631891a1daa832797b1164ebdf12114fa9c8680705e74910653f50606d07652620854091b8ac6e663d3c2c3b4ce9a2a1b0e00007922cbddf61eeb0f9697a590b555eda4f620a67d82a43073cf3983550c2175721ec8"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x15c, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x134, 0x8, 0x0, 0x1, [@nested={0x12f, 0x13, 0x0, 0x1, [@generic="85f6d68a721ea319d4873e8824bc725ab7a226c0e1798ab23bb50757a4c191701c0a777456b22e381c8708dd14d5b4b4841b2ce939ce0517cd8c43da6f49220517d857eaa4956855fab2e960e994f9bc22680b91e1d776d129c7489475f79d8c52fb36b1351301ad7dd86cb614fe3db6185aa5ac1e17afd2f65b0175612fb9009f3fbb0a0e7338", @generic="0b3819ab384d752653a5d2c98e928904d1acccb009e3e6be971592edd0e4122785d238a9b48c7b5c78ceb42b", @typed={0x4, 0xf1}, @generic="cca903af83addcfabd291f9ae55ba6524b243d1a980fdea763ec3d67a0f2b39a8632352f015a72f9c8c44682961a9f090c91f7da794ee36d382466041c6202690bcb14690f7f786c483310800a689857d012b7ec10afec2851e0df4aea03da33c26508462abac5bbf5b5372009b8808f", @nested={0x4, 0xf3}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x8001) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x2, 0x0) r7 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000000)={@_si_pad}, 0x7, &(0x7f0000000140)={{0x4, 0x5}, {0x633, 0x8001}, 0x10001, 0x6, 0x4, 0x9, 0x0, 0x5, 0x0, 0xd, 0x1, 0xfffffffffffffbb7, 0x3, 0x8, 0xd, 0x5}) wait4$auto(r7, &(0x7f0000000080), 0x7, &(0x7f0000000200)={{0x9, 0x2}, {0x4224, 0x1}, 0x8fdd, 0x4, 0x0, 0x9, 0x7, 0x2, 0x1, 0xfffffffffffffffa, 0x9f, 0x80000001, 0xde, 0x5, 0x5, 0x100000000}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) read$auto(0xffffffffffffffff, 0x0, 0x538) sendmsg$auto_NL80211_CMD_REMOVE_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(0xffffffffffffffff, 0x5420, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_int=0x81, 0x1}}}) socket(0x11, 0x3, 0x9) socket(0x11, 0x3, 0x6) 1m0.853643443s ago: executing program 3 (id=2471): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000100), 0x0) close_range$auto(0x2, 0x8, 0x0) 1m0.722553982s ago: executing program 3 (id=2472): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) (fail_nth: 2) 1m0.407506927s ago: executing program 3 (id=2473): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x7, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r4}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 47.50185229s ago: executing program 32 (id=2464): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x7, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900), 0x0) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r4}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 45.171435587s ago: executing program 33 (id=2473): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x7, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r4}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.749991638s ago: executing program 1 (id=2625): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_UDF_GETEABLOCK(r0, 0x80086c41, &(0x7f0000000280)=&(0x7f0000000180)="8b75ec727e6b927ebac46c7d7052707833eb838bdbf719e34d0aeb6d37399f9f92f8cfa0339eec5bf704d548c996d9639af0b7e543a210dec98c5a1e9d1c063ed09f361ed3831925ddcc91acf120c8c13d482021f5442978a98a3abf54c1fa4b7de8734176e39ec4f05ebb60217d45fd68e2b53eb9bc304485ca40381caf26a11c31cf26dba006461a3a13ec9f07c0df7beca3346783316188f603d2d86d836dae67a38764989600fdf9402994c4d9fa09cf38ccd86b5c5a6286ffbd7affe7009b6fc3386666adfb0b803cefaaa833433af4a17f655a5f857b2c232a7f615c014c6f840e977f") close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/005/001\x00', 0x100, 0x0) socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) write$auto(0x6, 0x0, 0x100000001) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) 2.571850369s ago: executing program 1 (id=2626): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_NET_DM_CMD_STATS_GET(0xffffffffffffffff, 0x0, 0x40) listen$auto(0x3, 0x81) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2a, 0x800, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0xffffffffffffffff, 0x20007, 0x0, 0x0, 0x0, 0xffffffff) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x408040, 0x0) shmctl$auto_SHM_STAT(0x1, 0xd, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) (fail_nth: 1) 2.239231562s ago: executing program 1 (id=2627): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) syz_clone(0xba238800, 0x0, 0x34, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) read$auto(0xffffffffffffffff, 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x20000003) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x6, 0x0, 0x2, 0xb}, 0x800008}, 0x1ff, 0x1ffffff8) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0) r2 = semctl$auto(0x0, 0x9, 0x0, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x0, 0x13, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x48050) r5 = setfsuid$auto(0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002800)={&(0x7f0000000340)={0x24ac, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x24, 0xa, '/\x0e\xd5.\xf8\xbb\x8f\n\x95Y\x89lx\x14proc/self/oom_adj\x00'}, @NBD_ATTR_DEVICE_LIST={0x2450, 0x9, 0x0, 0x1, [@nested={0x10ca, 0xeb, 0x0, 0x1, [@typed={0x50, 0x14a, 0x0, 0x0, @binary="d9337a728fc58e1eac55402570ff4a313bb8cd0f378f94953e3d4d3f224acc52a90020bb920bd3522795b8d3e2171312254cdf9264219559d9e2218948b72ac7ebf4c58e489ad4ee06e9e9e5"}, @generic="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", @typed={0xc, 0x60, 0x0, 0x0, @u64=0xa}, @typed={0x8, 0x29, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x5a, 0x0, 0x0, @uid}, @generic="b4283707ae3537f0125f57609b292fa08320739dd32c9de3925249baa34e43af8d91c52c5daca6641ef0a7f20323bafeb646e0d0662bba946b007106e530fda2886a010bdeca7a2c095612a0d68d3b3c0604", @nested={0x4, 0x5f}, @nested={0x4, 0x27}]}, @nested={0x28, 0xc4, 0x0, 0x1, [@nested={0x4, 0x53}, @typed={0x14, 0x12c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @nested={0x4, 0x118}, @typed={0x8, 0x15c, 0x0, 0x0, @u32=0x9}]}, @nested={0x30, 0x99, 0x0, 0x1, [@nested={0x4, 0x92}, @nested={0x4, 0x4a}, @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0xad, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x7, 0x44, 0x0, 0x0, @str='\\(\x00'}]}, @generic="48698f3cabf558da6d29eae7424a2fb701d3496da8c4a5855e33a3ba76e657c9833c753274440441fbf365fc7ec5860c037324e6c3693be3df8da9d627c23d45dc9a7b512e44212c4a9032727d004fdb221c588699cc11633e631a76ffce0c0e29fdcbba67cec8eb7f0669417fb56ae12f673555637dc57e44a14058d23eb3c7", @generic="0f61ba68d03af2846a7dd08eac2fc47551f43b3cee5bf43fc8b01491adb044c520b6ae757ed04f4cbc2165f09e594857b96d731bb6a9c79b0e94c7f7c80923e2", @nested={0x1225, 0x6f, 0x0, 0x1, [@generic="03f2df2da58e55102c18a7c649b4d170352cdfe022ad0b69baa3296c48e9a002ef54340bcf1f7cbf6b4f49b8cbf4a09b30c5346b98f7855b159a579d6decdae264ff89ecdb88c899126bf45853d5874fa61b92f6d19ec41f8f723cd1a746a2038d7d1df6e09522242f449404ca20c0c7f6a49c93a13da3087496f2d0079532709891c3b259dc79581d5def89d3192a7f7ba53ccc236df9ae47d0b56330a21c4fbdb78e91e7c57a6f4f9ef6103482d924e0e6ae1626caa88012b0a1b25eb86fb0696cba411a3f84e3fd4448970b535ecae936c9ecd9e4e8dbd6397d21f9048a4a72956501071702b3bfeba6c9cc152ad9d48342ae6f1f783c09ae", @generic="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", @typed={0x8, 0x10b, 0x0, 0x0, @fd}, @typed={0x8, 0x1a, 0x0, 0x0, @fd=r0}, @generic="bcd81fba3ca1c86a16a2b5d288cca82cee14b5c5de487501e23710324c36b7d2ad7e90898b69f0aa3a1a082834e7f29f7e124c4012de5e8c1d37e0d5c165f16b7e18211720c5b9d3486727dd435368261974e7991c54f1683d21269f9314745d2c401bd36b5b1705d43964b0dd859a02d8b285a5d7de716001fb3f62904e13be8ef86cd286057c991907555aa12e7195e8583c0adb22eb2f68442538612f4ebad9c40bc5d24ee73ad49969df0549a8c29e6ba833eafc92b789e818af033e509ec52338b43413b7b2c3bbfc21ea300e8feae6f6ffc024", @generic="9ac53c8fef5b7874dbe638fea5649f98c47e8c4573de577a9930ae6ab9b40d603244da09d5f14358d5ecc56145f8e0a1b509c419694daa4247d8e50816", @nested={0x4, 0x17}]}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@loopback}, @nested={0x38, 0x60, 0x0, 0x1, [@typed={0x4, 0x41}, @typed={0x8, 0xa8, 0x0, 0x0, @fd=r1}, @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x25, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x4b}, @nested={0x4, 0x9b}, @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x73}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x24ac}, 0x1, 0x0, 0x0, 0x80}, 0x4080) read$auto(r3, 0x0, 0x1f40) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) setsockopt$auto(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x108) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x48, r7, 0x51c, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}, @NFSD_A_SERVER_SCOPE={0x21, 0x4, '/\x0e\xd5.\xf8\xbb\x8f\n\x95Y\x89lx\x14proc/self/oom_adj\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x4000}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x20004885) read$auto(0x3, 0x0, 0x8080) 1.887551231s ago: executing program 1 (id=2628): mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x1, 0x1, 0x0) ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, 0x0) semctl$auto(0x2, 0x24000000, 0x2, 0x1) (fail_nth: 4) 897.691559ms ago: executing program 1 (id=2629): socket(0x11, 0xa, 0x300) bpf$auto(0x0, &(0x7f0000000100)=@query={@target_ifindex=0x0, 0x0, 0x8, 0x9, 0x0, @prog_cnt, 0x0, 0x3, 0x5a3522aa, 0xffffffff, 0x9}, 0x6f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x4a800, 0x0) r2 = socket(0xa, 0x3, 0x3b) mmap$auto(0x1, 0x8, 0xdf, 0x7d, r1, 0x3) sysfs$auto(0x2, 0x24, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) gettid() prctl$auto(0x3e, 0x7, 0x0, 0x40000a2be, 0x0) mmap$auto(0x0, 0x81, 0x3, 0x12, r3, 0x8000) recvmmsg$auto(r2, 0x0, 0x10000, 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder0\x00', 0x189160, 0x0) ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x129041, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xd, 0x2007d48, 0x948b, 0x4, 0x0, 0x4b, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x1890}, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESHEX=r4, @ANYRESHEX=r0, @ANYBLOB="b77a44bb49f5d45b529bbdee19ef15a5ade88ad81744d64020c53ac0ad957b04ca374b252351f4410c67fe01fc353049419db6286dfb20f55acff2d479213d7948e9725e61188fd093d4c225b5b2789abde9c4c07fa83a92d825310760a0d40eb03f0cbb808974b4c5acdf016a7cb46b824d69b99d23d3c99104d83bb362cde1110205c1940df4714cae6388801e95bf3d7422ed3390dcc85949bd502e5ff9f3499f440e239e9d1a92c327eeca3e"], 0x2c}, 0x1, 0x0, 0x0, 0x40895}, 0x20008000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/nfsd.fh/flush\x00', 0x8a402, 0x0) 0s ago: executing program 1 (id=2630): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2000804}, 0x20000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) msgctl$auto_MSG_INFO(0x10, 0xc, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{}, 0x4}}, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(0x0, 0x401, 0x9, r1, 0x0) ioctl$auto_VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000000c0)={0x4, 0x3}) sysfs$auto(0x2, 0x1f, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1d0, 0x0, 0x9, 0x0, 0x1, 0x9}, 0xfffffffb}, 0x52a9b308, 0x10f5) r3 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) ioctl$auto_FS_IOC_GETFLAGS(r3, 0x80086601, 0x7fffffffbfffffff) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) kernel console output (not intermixed with test programs): 3e syscall=231 compat=0 ip=0x7f0432b9c799 code=0x0 [ 740.275852][ T29] audit: type=1326 audit(1843104787.555:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16270 comm="syz.3.2187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4da1b9c799 code=0x0 [ 740.465205][T16276] bond0: invalid ARP target specified [ 742.085809][T16325] FAULT_INJECTION: forcing a failure. [ 742.085809][T16325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.213270][T16325] CPU: 0 UID: 0 PID: 16325 Comm: syz.2.2194 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.213295][T16325] Tainted: [L]=SOFTLOCKUP [ 742.213300][T16325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.213309][T16325] Call Trace: [ 742.213314][T16325] [ 742.213320][T16325] dump_stack_lvl+0x100/0x190 [ 742.213347][T16325] should_fail_ex.cold+0x5/0xa [ 742.213364][T16325] _copy_to_user+0x32/0xd0 [ 742.213384][T16325] rng_dev_read+0x223/0x910 [ 742.213482][T16325] ? __pfx_virtio_read+0x10/0x10 [ 742.213520][T16325] ? __pfx_rng_dev_read+0x10/0x10 [ 742.213537][T16325] ? bpf_lsm_file_permission+0x9/0x10 [ 742.213551][T16325] ? security_file_permission+0x76/0x210 [ 742.213570][T16325] ? rw_verify_area+0xce/0x6d0 [ 742.213591][T16325] ? __pfx_rng_dev_read+0x10/0x10 [ 742.213604][T16325] vfs_readv+0x5d8/0x8d0 [ 742.213629][T16325] ? __pfx_vfs_readv+0x10/0x10 [ 742.213650][T16325] ? find_held_lock+0x2b/0x80 [ 742.213676][T16325] ? __fget_files+0x21f/0x3d0 [ 742.213694][T16325] ? do_readv+0x13e/0x340 [ 742.213713][T16325] do_readv+0x13e/0x340 [ 742.213733][T16325] ? __pfx_do_readv+0x10/0x10 [ 742.213758][T16325] do_syscall_64+0x106/0xf80 [ 742.213778][T16325] ? clear_bhb_loop+0x40/0x90 [ 742.213795][T16325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.213810][T16325] RIP: 0033:0x7fc403f9c799 [ 742.213823][T16325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.213837][T16325] RSP: 002b:00007fc404e0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 742.213851][T16325] RAX: ffffffffffffffda RBX: 00007fc404215fa0 RCX: 00007fc403f9c799 [ 742.213860][T16325] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 742.213868][T16325] RBP: 00007fc404e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 742.213877][T16325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.213885][T16325] R13: 00007fc404216038 R14: 00007fc404215fa0 R15: 00007ffd0299ba98 [ 742.213903][T16325] [ 743.040141][T16342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2200'. [ 744.057692][T16361] can: request_module (can-proto-0) failed. [ 744.281022][T16355] can: request_module (can-proto-0) failed. [ 745.460491][T16391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2211'. [ 745.874955][T16406] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2214'. [ 746.374626][T16415] binder: 16414:16415 ioctl c0306201 0 returned -14 [ 747.193909][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 747.203282][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 747.211197][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 747.220046][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 747.227556][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 747.482497][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.488860][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.295645][ T993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.661881][ T993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.887492][ T993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.193370][ T993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.252670][T16432] chnl_net:caif_netlink_parms(): no params data found [ 749.321396][T12797] Bluetooth: hci4: command tx timeout [ 749.992180][T16432] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.999279][T16432] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.071794][T16432] bridge_slave_0: entered allmulticast mode [ 750.113497][T16432] bridge_slave_0: entered promiscuous mode [ 750.203406][ T993] gretap0: left allmulticast mode [ 750.208615][ T993] gretap0: left promiscuous mode [ 750.251041][ T993] bridge0: port 3(gretap0) entered disabled state [ 750.308335][ T993] bridge_slave_1: left allmulticast mode [ 750.347791][ T993] bridge_slave_1: left promiscuous mode [ 750.369999][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.430425][ T993] bridge_slave_0: left allmulticast mode [ 750.436617][T16462] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2225'. [ 750.459729][ T993] bridge_slave_0: left promiscuous mode [ 750.483202][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.267800][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.320801][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.363439][ T993] bond0 (unregistering): Released all slaves [ 751.402449][T12797] Bluetooth: hci4: command tx timeout [ 751.411041][T16432] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.471924][T16432] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.507616][T16432] bridge_slave_1: entered allmulticast mode [ 751.537321][T16432] bridge_slave_1: entered promiscuous mode [ 751.778719][T16432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.819620][T16432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.073203][T16432] team0: Port device team_slave_0 added [ 752.243096][T16432] team0: Port device team_slave_1 added [ 752.525948][T16432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.557425][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.696927][T16432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.769107][T16432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.815977][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.962675][T16432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.444487][T16507] can: request_module (can-proto-0) failed. [ 753.482310][ T5837] Bluetooth: hci4: command tx timeout [ 753.510932][T16432] hsr_slave_0: entered promiscuous mode [ 753.534551][T16432] hsr_slave_1: entered promiscuous mode [ 753.556198][T16432] debugfs: 'hsr0' already exists in 'hsr' [ 753.576345][T16432] Cannot create hsr debugfs directory [ 755.003982][T12797] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 755.563561][T12797] Bluetooth: hci4: command tx timeout [ 755.768499][ T993] hsr_slave_0: left promiscuous mode [ 755.793092][ T993] hsr_slave_1: left promiscuous mode [ 755.837002][ T993] veth0_macvtap: left promiscuous mode [ 755.862311][ T993] veth1_vlan: left promiscuous mode [ 755.877398][ T993] veth0_vlan: left promiscuous mode [ 756.385705][ T993] team0 (unregistering): Port device team_slave_1 removed [ 756.437178][ T993] team0 (unregistering): Port device team_slave_0 removed [ 757.189576][T16432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 757.243596][T16432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 757.298720][T16432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 757.357563][T16432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 757.698399][T16432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.805091][T16432] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.868078][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.875221][ T4553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.968817][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.975990][ T4553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.656997][T16432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.844208][ T29] audit: type=1326 audit(1843104806.116:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16612 comm="syz.3.2241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4da1b9c799 code=0x0 [ 758.904221][T16432] veth0_vlan: entered promiscuous mode [ 758.951942][T16617] bond0: invalid ARP target specified [ 759.003706][T16432] veth1_vlan: entered promiscuous mode [ 759.018806][T16617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2241'. [ 759.399420][T16432] veth0_macvtap: entered promiscuous mode [ 759.644375][T16432] veth1_macvtap: entered promiscuous mode [ 759.768865][T16432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.831212][T16432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.942575][ T4553] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.987741][ T4553] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.055144][ T4553] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.155788][ T4553] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.340435][T16654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2246'. [ 760.626429][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.677667][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.815750][ T4553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.835120][ T4553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.015332][T16668] FAULT_INJECTION: forcing a failure. [ 761.015332][T16668] name failslab, interval 1, probability 0, space 0, times 0 [ 761.085595][T16668] CPU: 0 UID: 0 PID: 16668 Comm: syz.1.2220 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.085623][T16668] Tainted: [L]=SOFTLOCKUP [ 761.085629][T16668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 761.085638][T16668] Call Trace: [ 761.085644][T16668] [ 761.085650][T16668] dump_stack_lvl+0x100/0x190 [ 761.085681][T16668] should_fail_ex.cold+0x5/0xa [ 761.085700][T16668] should_failslab+0xc2/0x120 [ 761.085718][T16668] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 761.085740][T16668] ? ptlock_alloc+0x1f/0x70 [ 761.085764][T16668] ptlock_alloc+0x1f/0x70 [ 761.085784][T16668] pte_alloc_one+0x82/0x3d0 [ 761.085802][T16668] __pte_alloc+0x6d/0x3e0 [ 761.085817][T16668] ? __pfx___pte_alloc+0x10/0x10 [ 761.085835][T16668] ? __lock_acquire+0x4a5/0x2630 [ 761.085855][T16668] do_anonymous_page+0x13cc/0x1fb0 [ 761.085878][T16668] ? __lock_acquire+0x4a5/0x2630 [ 761.085899][T16668] __handle_mm_fault+0x1d42/0x2b60 [ 761.085922][T16668] ? reacquire_held_locks+0xce/0x1e0 [ 761.085942][T16668] ? __pfx___handle_mm_fault+0x10/0x10 [ 761.085965][T16668] ? lock_vma_under_rcu+0x17c/0x590 [ 761.085999][T16668] handle_mm_fault+0x36d/0xa20 [ 761.086024][T16668] do_user_addr_fault+0x5a3/0x12f0 [ 761.086045][T16668] exc_page_fault+0x6f/0xd0 [ 761.086068][T16668] asm_exc_page_fault+0x26/0x30 [ 761.086083][T16668] RIP: 0033:0x7fc0fa95e6c2 [ 761.086096][T16668] Code: 8d 15 e5 08 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 f8 e6 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 761.086110][T16668] RSP: 002b:00007fc0fb7efd20 EFLAGS: 00010286 [ 761.086123][T16668] RAX: ffffffffffffffff RBX: 00007fc0f4000000 RCX: 00007fc0fa99c597 [ 761.086134][T16668] RDX: 00007fc0faa4ef83 RSI: 0000000000021000 RDI: 00007fc0f4000000 [ 761.086143][T16668] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 761.086152][T16668] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 761.086160][T16668] R13: 0000000000001000 R14: 00007fc0f8000000 R15: 0000000003600000 [ 761.086180][T16668] [ 762.110218][T16668] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 762.119289][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 762.125626][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.281887][T12797] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9 [ 763.586649][T16694] [U] ^@ [ 764.091076][T16715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2259'. [ 764.147989][T16715] veth1_macvtap: left promiscuous mode [ 764.654071][ T29] audit: type=1326 audit(1843104811.923:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.2.2263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc403f9c799 code=0x0 [ 764.781632][T16735] bond0: invalid ARP target specified [ 766.300394][T16766] FAULT_INJECTION: forcing a failure. [ 766.300394][T16766] name fail_futex, interval 1, probability 0, space 0, times 0 [ 766.313316][T16766] CPU: 0 UID: 0 PID: 16766 Comm: syz.1.2270 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.313341][T16766] Tainted: [L]=SOFTLOCKUP [ 766.313347][T16766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 766.313356][T16766] Call Trace: [ 766.313363][T16766] [ 766.313369][T16766] dump_stack_lvl+0x100/0x190 [ 766.313401][T16766] should_fail_ex.cold+0x5/0xa [ 766.313421][T16766] should_fail_futex+0x4c/0x60 [ 766.313441][T16766] futex_lock_pi_atomic+0x12d/0xaf0 [ 766.313479][T16766] futex_lock_pi+0x246/0x7b0 [ 766.313505][T16766] ? __pfx_futex_lock_pi+0x10/0x10 [ 766.313528][T16766] ? __pfx___futex_wait+0x10/0x10 [ 766.313551][T16766] ? lockdep_hardirqs_on+0x78/0x100 [ 766.313591][T16766] ? __pfx_futex_wake_mark+0x10/0x10 [ 766.313617][T16766] ? ksys_write+0x190/0x250 [ 766.313633][T16766] ? ksys_write+0x190/0x250 [ 766.313652][T16766] do_futex+0x18a/0x350 [ 766.313671][T16766] ? __pfx_do_futex+0x10/0x10 [ 766.313694][T16766] __x64_sys_futex+0x34f/0x4d0 [ 766.313716][T16766] ? __pfx___x64_sys_futex+0x10/0x10 [ 766.313742][T16766] do_syscall_64+0x106/0xf80 [ 766.313763][T16766] ? clear_bhb_loop+0x40/0x90 [ 766.313782][T16766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.313797][T16766] RIP: 0033:0x7fc0fa99c799 [ 766.313811][T16766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.313825][T16766] RSP: 002b:00007fc0fb7d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 766.313840][T16766] RAX: ffffffffffffffda RBX: 00007fc0fac16090 RCX: 00007fc0fa99c799 [ 766.313850][T16766] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 766.313859][T16766] RBP: 00007fc0faa32c99 R08: 0000000000000000 R09: 000000008000fff5 [ 766.313869][T16766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.313877][T16766] R13: 00007fc0fac16128 R14: 00007fc0fac16090 R15: 00007ffc334ae518 [ 766.313897][T16766] [ 767.652601][ T29] audit: type=1326 audit(1843104814.921:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.1.2276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0fa99c799 code=0x0 [ 767.789986][T16786] bond0: invalid ARP target specified [ 771.249150][T16821] FAULT_INJECTION: forcing a failure. [ 771.249150][T16821] name fail_futex, interval 1, probability 0, space 0, times 0 [ 771.262136][T16821] CPU: 0 UID: 0 PID: 16821 Comm: syz.0.2285 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.262161][T16821] Tainted: [L]=SOFTLOCKUP [ 771.262167][T16821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 771.262176][T16821] Call Trace: [ 771.262181][T16821] [ 771.262187][T16821] dump_stack_lvl+0x100/0x190 [ 771.262215][T16821] should_fail_ex.cold+0x5/0xa [ 771.262235][T16821] should_fail_futex+0x4c/0x60 [ 771.262253][T16821] futex_lock_pi_atomic+0x12d/0xaf0 [ 771.262279][T16821] futex_lock_pi+0x246/0x7b0 [ 771.262303][T16821] ? __pfx_futex_lock_pi+0x10/0x10 [ 771.262326][T16821] ? __pfx___futex_wait+0x10/0x10 [ 771.262348][T16821] ? lockdep_hardirqs_on+0x78/0x100 [ 771.262386][T16821] ? __pfx_futex_wake_mark+0x10/0x10 [ 771.262413][T16821] ? ksys_write+0x190/0x250 [ 771.262427][T16821] ? ksys_write+0x190/0x250 [ 771.262445][T16821] do_futex+0x18a/0x350 [ 771.262464][T16821] ? __pfx_do_futex+0x10/0x10 [ 771.262490][T16821] __x64_sys_futex+0x34f/0x4d0 [ 771.262511][T16821] ? __pfx___x64_sys_futex+0x10/0x10 [ 771.262537][T16821] do_syscall_64+0x106/0xf80 [ 771.262557][T16821] ? clear_bhb_loop+0x40/0x90 [ 771.262575][T16821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.262590][T16821] RIP: 0033:0x7fcd65d9c799 [ 771.262604][T16821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.262618][T16821] RSP: 002b:00007fcd66bd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 771.262633][T16821] RAX: ffffffffffffffda RBX: 00007fcd66016090 RCX: 00007fcd65d9c799 [ 771.262643][T16821] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 771.262651][T16821] RBP: 00007fcd65e32c99 R08: 0000000000000000 R09: 000000008000fff5 [ 771.262660][T16821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.262668][T16821] R13: 00007fcd66016128 R14: 00007fcd66016090 R15: 00007ffdc34e33b8 [ 771.262688][T16821] [ 774.788806][ T29] audit: type=1326 audit(1843104822.058:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16854 comm="syz.3.2295" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4da1b9c799 code=0x0 [ 774.938021][T16861] bond0: invalid ARP target specified [ 775.770094][T16872] can: request_module (can-proto-0) failed. [ 776.022836][T16877] can: request_module (can-proto-0) failed. [ 776.977942][T16890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2302'. [ 777.739751][ T29] audit: type=1326 audit(1843104825.006:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16897 comm="syz.3.2304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4da1b9c799 code=0x0 [ 777.916497][T16903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2304'. [ 778.472062][T16914] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 779.376921][T16925] can: request_module (can-proto-0) failed. [ 780.212996][T16928] [U] ^@ [ 780.543233][T16946] vivid-007: ================= START STATUS ================= [ 780.581482][T16946] vivid-007: Generate PTS: true [ 780.611003][T16946] vivid-007: Generate SCR: true [ 780.675601][T16946] tpg source WxH: 320x240 (Y'CbCr) [ 780.773120][T16946] tpg field: 1 [ 780.849828][T16952] FAULT_INJECTION: forcing a failure. [ 780.849828][T16952] name failslab, interval 1, probability 0, space 0, times 0 [ 780.866053][T16946] tpg crop: (0,0)/320x240 [ 780.870415][T16946] tpg compose: (0,0)/320x240 [ 780.968311][T16946] tpg colorspace: 8 [ 780.978601][T16946] tpg transfer function: 0/0 [ 781.015726][T16946] tpg Y'CbCr encoding: 0/0 [ 781.022932][T16952] CPU: 0 UID: 0 PID: 16952 Comm: syz.1.2316 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.022956][T16952] Tainted: [L]=SOFTLOCKUP [ 781.022961][T16952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 781.022970][T16952] Call Trace: [ 781.022975][T16952] [ 781.022981][T16952] dump_stack_lvl+0x100/0x190 [ 781.023008][T16952] should_fail_ex.cold+0x5/0xa [ 781.023025][T16952] ? tomoyo_encode2+0xfb/0x3c0 [ 781.023046][T16952] should_failslab+0xc2/0x120 [ 781.023062][T16952] __kmalloc_noprof+0xe0/0x850 [ 781.023083][T16952] ? d_absolute_path+0x136/0x1b0 [ 781.023107][T16952] tomoyo_encode2+0xfb/0x3c0 [ 781.023128][T16952] tomoyo_encode+0x29/0x50 [ 781.023145][T16952] tomoyo_realpath_from_path+0x18c/0x690 [ 781.023168][T16952] tomoyo_check_open_permission+0x2af/0x3c0 [ 781.023186][T16952] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 781.023221][T16952] ? do_raw_spin_lock+0x128/0x260 [ 781.023244][T16952] ? path_get+0x61/0x80 [ 781.023262][T16952] tomoyo_file_open+0x6b/0x90 [ 781.023283][T16952] security_file_open+0xb5/0x1e0 [ 781.023302][T16952] do_dentry_open+0x5aa/0x1660 [ 781.023318][T16952] ? security_inode_permission+0xbf/0x250 [ 781.023338][T16952] vfs_open+0x82/0x3f0 [ 781.023358][T16952] path_openat+0x208c/0x31a0 [ 781.023380][T16952] ? __pfx_path_openat+0x10/0x10 [ 781.023402][T16952] do_file_open+0x20e/0x430 [ 781.023418][T16952] ? __pfx_do_file_open+0x10/0x10 [ 781.023447][T16952] ? alloc_fd+0x476/0x790 [ 781.023463][T16952] ? do_getname+0x191/0x390 [ 781.023482][T16952] do_sys_openat2+0x10d/0x1e0 [ 781.023500][T16952] ? __pfx_do_sys_openat2+0x10/0x10 [ 781.023518][T16952] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 781.023542][T16952] ? __fget_files+0x21f/0x3d0 [ 781.023559][T16952] __x64_sys_openat+0x12d/0x210 [ 781.023578][T16952] ? __pfx___x64_sys_openat+0x10/0x10 [ 781.023595][T16952] ? ksys_write+0x1ac/0x250 [ 781.023615][T16952] do_syscall_64+0x106/0xf80 [ 781.023635][T16952] ? clear_bhb_loop+0x40/0x90 [ 781.023652][T16952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.023666][T16952] RIP: 0033:0x7fc0fa99c799 [ 781.023679][T16952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.023692][T16952] RSP: 002b:00007fc0fb7f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 781.023706][T16952] RAX: ffffffffffffffda RBX: 00007fc0fac15fa0 RCX: 00007fc0fa99c799 [ 781.023715][T16952] RDX: 000000000002aa01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 781.023724][T16952] RBP: 00007fc0fb7f1090 R08: 0000000000000000 R09: 0000000000000000 [ 781.023733][T16952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.023741][T16952] R13: 00007fc0fac16038 R14: 00007fc0fac15fa0 R15: 00007ffc334ae518 [ 781.023760][T16952] [ 781.023776][T16952] ERROR: Out of memory at tomoyo_realpath_from_path. [ 781.346252][T16946] tpg quantization: 0/0 [ 781.382367][T16946] tpg RGB range: 0/2 [ 781.406262][T16946] vivid-007: ================== END STATUS ================== [ 781.710805][ T29] audit: type=1326 audit(1843104828.894:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16958 comm="syz.0.2319" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd65d9c799 code=0x0 [ 781.894553][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2319'. [ 782.109697][T16966] bond0: invalid ARP target specified [ 784.813512][T17019] FAULT_INJECTION: forcing a failure. [ 784.813512][T17019] name fail_futex, interval 1, probability 0, space 0, times 0 [ 784.990207][T17019] CPU: 0 UID: 0 PID: 17019 Comm: syz.0.2332 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.990235][T17019] Tainted: [L]=SOFTLOCKUP [ 784.990240][T17019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 784.990249][T17019] Call Trace: [ 784.990255][T17019] [ 784.990261][T17019] dump_stack_lvl+0x100/0x190 [ 784.990291][T17019] should_fail_ex.cold+0x5/0xa [ 784.990310][T17019] get_futex_key+0x295/0x1620 [ 784.990332][T17019] ? __pfx_get_futex_key+0x10/0x10 [ 784.990352][T17019] ? kasan_save_track+0x14/0x30 [ 784.990365][T17019] ? __kasan_kmalloc+0xaa/0xb0 [ 784.990391][T17019] futex_lock_pi+0x1d3/0x7b0 [ 784.990415][T17019] ? __pfx_futex_lock_pi+0x10/0x10 [ 784.990437][T17019] ? __pfx___futex_wait+0x10/0x10 [ 784.990458][T17019] ? lockdep_hardirqs_on+0x78/0x100 [ 784.990496][T17019] ? __pfx_futex_wake_mark+0x10/0x10 [ 784.990522][T17019] ? __lock_acquire+0x4a5/0x2630 [ 784.990546][T17019] do_futex+0x18a/0x350 [ 784.990564][T17019] ? __pfx_do_futex+0x10/0x10 [ 784.990584][T17019] ? find_held_lock+0x2b/0x80 [ 784.990601][T17019] __x64_sys_futex+0x34f/0x4d0 [ 784.990626][T17019] ? __pfx___x64_sys_futex+0x10/0x10 [ 784.990653][T17019] do_syscall_64+0x106/0xf80 [ 784.990673][T17019] ? clear_bhb_loop+0x40/0x90 [ 784.990691][T17019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.990707][T17019] RIP: 0033:0x7fcd65d9c799 [ 784.990720][T17019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.990735][T17019] RSP: 002b:00007fcd66bd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 784.990750][T17019] RAX: ffffffffffffffda RBX: 00007fcd66016090 RCX: 00007fcd65d9c799 [ 784.990760][T17019] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 784.990768][T17019] RBP: 00007fcd65e32c99 R08: 0000000000000000 R09: 000000008000fff5 [ 784.990778][T17019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.990789][T17019] R13: 00007fcd66016128 R14: 00007fcd66016090 R15: 00007ffdc34e33b8 [ 784.990808][T17019] [ 786.580898][T17045] zswap: compressor not available [ 786.676754][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 787.232483][T17062] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2342'. [ 789.127944][T17085] FAULT_INJECTION: forcing a failure. [ 789.127944][T17085] name fail_futex, interval 1, probability 0, space 0, times 0 [ 789.270338][T17085] CPU: 0 UID: 0 PID: 17085 Comm: syz.2.2347 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.270365][T17085] Tainted: [L]=SOFTLOCKUP [ 789.270370][T17085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 789.270379][T17085] Call Trace: [ 789.270385][T17085] [ 789.270391][T17085] dump_stack_lvl+0x100/0x190 [ 789.270420][T17085] should_fail_ex.cold+0x5/0xa [ 789.270440][T17085] get_futex_key+0x295/0x1620 [ 789.270461][T17085] ? __pfx_get_futex_key+0x10/0x10 [ 789.270480][T17085] ? kasan_save_track+0x14/0x30 [ 789.270494][T17085] ? __kasan_kmalloc+0xaa/0xb0 [ 789.270518][T17085] futex_lock_pi+0x1d3/0x7b0 [ 789.270542][T17085] ? __pfx_futex_lock_pi+0x10/0x10 [ 789.270565][T17085] ? __pfx___futex_wait+0x10/0x10 [ 789.270586][T17085] ? lockdep_hardirqs_on+0x78/0x100 [ 789.270631][T17085] ? __pfx_futex_wake_mark+0x10/0x10 [ 789.270658][T17085] ? __lock_acquire+0x4a5/0x2630 [ 789.270689][T17085] do_futex+0x18a/0x350 [ 789.270709][T17085] ? __pfx_do_futex+0x10/0x10 [ 789.270731][T17085] ? find_held_lock+0x2b/0x80 [ 789.270748][T17085] __x64_sys_futex+0x34f/0x4d0 [ 789.270770][T17085] ? __pfx___x64_sys_futex+0x10/0x10 [ 789.270798][T17085] do_syscall_64+0x106/0xf80 [ 789.270819][T17085] ? clear_bhb_loop+0x40/0x90 [ 789.270837][T17085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.270853][T17085] RIP: 0033:0x7fc403f9c799 [ 789.270865][T17085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.270879][T17085] RSP: 002b:00007fc404dec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 789.270894][T17085] RAX: ffffffffffffffda RBX: 00007fc404216090 RCX: 00007fc403f9c799 [ 789.270904][T17085] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 789.270912][T17085] RBP: 00007fc404032c99 R08: 0000000000000000 R09: 000000008000fff5 [ 789.270921][T17085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.270930][T17085] R13: 00007fc404216128 R14: 00007fc404216090 R15: 00007ffd0299ba98 [ 789.270949][T17085] [ 794.700075][T17125] FAULT_INJECTION: forcing a failure. [ 794.700075][T17125] name failslab, interval 1, probability 0, space 0, times 0 [ 794.809237][T17125] CPU: 0 UID: 0 PID: 17125 Comm: syz.1.2356 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.809265][T17125] Tainted: [L]=SOFTLOCKUP [ 794.809271][T17125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 794.809281][T17125] Call Trace: [ 794.809286][T17125] [ 794.809293][T17125] dump_stack_lvl+0x100/0x190 [ 794.809322][T17125] should_fail_ex.cold+0x5/0xa [ 794.809341][T17125] should_failslab+0xc2/0x120 [ 794.809360][T17125] __kmalloc_cache_noprof+0x7a/0x6f0 [ 794.809379][T17125] ? alloc_tty_struct+0x96/0x8c0 [ 794.809408][T17125] alloc_tty_struct+0x96/0x8c0 [ 794.809432][T17125] ? __pfx_alloc_tty_struct+0x10/0x10 [ 794.809461][T17125] tty_init_dev.part.0+0x20/0x470 [ 794.809487][T17125] tty_open+0xa63/0xfa0 [ 794.809504][T17125] ? __pfx_tty_open+0x10/0x10 [ 794.809516][T17125] ? chrdev_open+0x10b/0x6a0 [ 794.809531][T17125] ? chrdev_open+0x10b/0x6a0 [ 794.809549][T17125] ? __pfx_tty_open+0x10/0x10 [ 794.809562][T17125] chrdev_open+0x234/0x6a0 [ 794.809577][T17125] ? __pfx_apparmor_file_open+0x10/0x10 [ 794.809594][T17125] ? __pfx_chrdev_open+0x10/0x10 [ 794.809610][T17125] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 794.809631][T17125] do_dentry_open+0x6d8/0x1660 [ 794.809646][T17125] ? __pfx_chrdev_open+0x10/0x10 [ 794.809667][T17125] vfs_open+0x82/0x3f0 [ 794.809689][T17125] path_openat+0x208c/0x31a0 [ 794.809711][T17125] ? __pfx_path_openat+0x10/0x10 [ 794.809734][T17125] do_file_open+0x20e/0x430 [ 794.809751][T17125] ? __pfx_do_file_open+0x10/0x10 [ 794.809780][T17125] ? alloc_fd+0x476/0x790 [ 794.809797][T17125] ? do_getname+0x191/0x390 [ 794.809817][T17125] do_sys_openat2+0x10d/0x1e0 [ 794.809836][T17125] ? __pfx_do_sys_openat2+0x10/0x10 [ 794.809857][T17125] ? __fget_files+0x21f/0x3d0 [ 794.809875][T17125] __x64_sys_openat+0x12d/0x210 [ 794.809895][T17125] ? __pfx___x64_sys_openat+0x10/0x10 [ 794.809922][T17125] do_syscall_64+0x106/0xf80 [ 794.809943][T17125] ? clear_bhb_loop+0x40/0x90 [ 794.809962][T17125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.809977][T17125] RIP: 0033:0x7fc0fa99c799 [ 794.809991][T17125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.810005][T17125] RSP: 002b:00007fc0fb7f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 794.810020][T17125] RAX: ffffffffffffffda RBX: 00007fc0fac15fa0 RCX: 00007fc0fa99c799 [ 794.810029][T17125] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 794.810047][T17125] RBP: 00007fc0faa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 794.810057][T17125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.810066][T17125] R13: 00007fc0fac16038 R14: 00007fc0fac15fa0 R15: 00007ffc334ae518 [ 794.810086][T17125] [ 795.920819][T17129] [U] ^@ [ 797.211647][ T29] audit: type=1326 audit(1843104844.467:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17163 comm="syz.2.2364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc403f9c799 code=0x0 [ 797.424101][T17167] bond0: invalid ARP target specified [ 797.447226][T17170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2364'. [ 798.967779][T17178] [U] ^@ [ 802.376520][T17240] [U] ^@ [ 802.852711][T17264] FAULT_INJECTION: forcing a failure. [ 802.852711][T17264] name failslab, interval 1, probability 0, space 0, times 0 [ 802.971644][T17264] CPU: 0 UID: 0 PID: 17264 Comm: syz.1.2383 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.971671][T17264] Tainted: [L]=SOFTLOCKUP [ 802.971677][T17264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 802.971686][T17264] Call Trace: [ 802.971691][T17264] [ 802.971698][T17264] dump_stack_lvl+0x100/0x190 [ 802.971727][T17264] should_fail_ex.cold+0x5/0xa [ 802.971746][T17264] should_failslab+0xc2/0x120 [ 802.971763][T17264] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 802.971785][T17264] ? skb_clone+0x190/0x400 [ 802.971811][T17264] skb_clone+0x190/0x400 [ 802.971833][T17264] netlink_deliver_tap+0xaed/0xcc0 [ 802.971861][T17264] netlink_unicast+0x650/0x870 [ 802.971886][T17264] ? __pfx_netlink_unicast+0x10/0x10 [ 802.971916][T17264] netlink_sendmsg+0x8b0/0xda0 [ 802.971934][T17264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.971950][T17264] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 802.971977][T17264] __sys_sendto+0x468/0x4b0 [ 802.971996][T17264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.972011][T17264] ? __pfx___sys_sendto+0x10/0x10 [ 802.972036][T17264] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 802.972052][T17264] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 802.972081][T17264] __x64_sys_sendto+0xe0/0x1c0 [ 802.972099][T17264] ? do_syscall_64+0x95/0xf80 [ 802.972121][T17264] ? lockdep_hardirqs_on+0x78/0x100 [ 802.972141][T17264] do_syscall_64+0x106/0xf80 [ 802.972161][T17264] ? clear_bhb_loop+0x40/0x90 [ 802.972181][T17264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.972196][T17264] RIP: 0033:0x7fc0fa95cfce [ 802.972209][T17264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 802.972224][T17264] RSP: 002b:00007fc0fb7ade88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 802.972239][T17264] RAX: ffffffffffffffda RBX: 00007fc0fb7af6c0 RCX: 00007fc0fa95cfce [ 802.972248][T17264] RDX: 0000000000000020 RSI: 00007fc0fb7ae000 RDI: 0000000000000008 [ 802.972257][T17264] RBP: 0000000000000000 R08: 00007fc0fb7adf04 R09: 000000000000000c [ 802.972266][T17264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 802.972279][T17264] R13: 00007fc0fb7adf58 R14: 00007fc0fb7ae000 R15: 0000000000000000 [ 802.972305][T17264] [ 805.037022][T17286] FAULT_INJECTION: forcing a failure. [ 805.037022][T17286] name failslab, interval 1, probability 0, space 0, times 0 [ 805.111744][T17286] CPU: 0 UID: 0 PID: 17286 Comm: syz.1.2390 Tainted: G L syzkaller #0 PREEMPT(full) [ 805.111771][T17286] Tainted: [L]=SOFTLOCKUP [ 805.111777][T17286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 805.111786][T17286] Call Trace: [ 805.111792][T17286] [ 805.111798][T17286] dump_stack_lvl+0x100/0x190 [ 805.111826][T17286] should_fail_ex.cold+0x5/0xa [ 805.111845][T17286] should_failslab+0xc2/0x120 [ 805.111861][T17286] __kmalloc_cache_node_noprof+0x7d/0x770 [ 805.111886][T17286] ? sbitmap_queue_init_node+0x291/0x4a0 [ 805.111990][T17286] sbitmap_queue_init_node+0x291/0x4a0 [ 805.112021][T17286] blk_mq_init_tags+0x1ba/0x300 [ 805.112081][T17286] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 805.112133][T17286] ? blk_mq_update_queue_map+0x227/0x3a0 [ 805.112159][T17286] blk_mq_alloc_tag_set+0x848/0x1330 [ 805.112190][T17286] loop_add+0x3b7/0xb60 [ 805.112270][T17286] ? __pfx_loop_add+0x10/0x10 [ 805.112307][T17286] loop_control_ioctl+0xae/0x620 [ 805.112329][T17286] ? __pfx_loop_control_ioctl+0x10/0x10 [ 805.112350][T17286] ? xfd_validate_state+0x129/0x190 [ 805.112374][T17286] ? __pfx_loop_control_ioctl+0x10/0x10 [ 805.112396][T17286] __x64_sys_ioctl+0x18e/0x210 [ 805.112419][T17286] do_syscall_64+0x106/0xf80 [ 805.112441][T17286] ? clear_bhb_loop+0x40/0x90 [ 805.112459][T17286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.112475][T17286] RIP: 0033:0x7fc0fa99c799 [ 805.112488][T17286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.112503][T17286] RSP: 002b:00007fc0fb7f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 805.112518][T17286] RAX: ffffffffffffffda RBX: 00007fc0fac15fa0 RCX: 00007fc0fa99c799 [ 805.112528][T17286] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000003 [ 805.112537][T17286] RBP: 00007fc0faa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 805.112546][T17286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.112555][T17286] R13: 00007fc0fac16038 R14: 00007fc0fac15fa0 R15: 00007ffc334ae518 [ 805.112575][T17286] [ 805.113095][T17286] blk-mq: reduced tag depth (128 -> 64) [ 805.546109][T17287] Process accounting resumed [ 806.351077][T17312] FAULT_INJECTION: forcing a failure. [ 806.351077][T17312] name failslab, interval 1, probability 0, space 0, times 0 [ 806.396262][T17312] CPU: 0 UID: 0 PID: 17312 Comm: syz.3.2395 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.396291][T17312] Tainted: [L]=SOFTLOCKUP [ 806.396296][T17312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 806.396305][T17312] Call Trace: [ 806.396311][T17312] [ 806.396317][T17312] dump_stack_lvl+0x100/0x190 [ 806.396346][T17312] should_fail_ex.cold+0x5/0xa [ 806.396366][T17312] should_failslab+0xc2/0x120 [ 806.396383][T17312] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 806.396405][T17312] ? skb_clone+0x190/0x400 [ 806.396431][T17312] skb_clone+0x190/0x400 [ 806.396453][T17312] netlink_deliver_tap+0xaed/0xcc0 [ 806.396480][T17312] netlink_unicast+0x650/0x870 [ 806.396506][T17312] ? __pfx_netlink_unicast+0x10/0x10 [ 806.396535][T17312] netlink_sendmsg+0x8b0/0xda0 [ 806.396552][T17312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.396569][T17312] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 806.396596][T17312] __sys_sendto+0x468/0x4b0 [ 806.396614][T17312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.396629][T17312] ? __pfx___sys_sendto+0x10/0x10 [ 806.396655][T17312] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 806.396671][T17312] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 806.396701][T17312] __x64_sys_sendto+0xe0/0x1c0 [ 806.396719][T17312] ? do_syscall_64+0x95/0xf80 [ 806.396741][T17312] ? lockdep_hardirqs_on+0x78/0x100 [ 806.396762][T17312] do_syscall_64+0x106/0xf80 [ 806.396782][T17312] ? clear_bhb_loop+0x40/0x90 [ 806.396799][T17312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.396815][T17312] RIP: 0033:0x7f4da1b5cfce [ 806.396828][T17312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 806.396843][T17312] RSP: 002b:00007f4da29b9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 806.396873][T17312] RAX: ffffffffffffffda RBX: 00007f4da29bb6c0 RCX: 00007f4da1b5cfce [ 806.396883][T17312] RDX: 0000000000000020 RSI: 00007f4da29ba000 RDI: 0000000000000008 [ 806.396893][T17312] RBP: 0000000000000000 R08: 00007f4da29b9f04 R09: 000000000000000c [ 806.396902][T17312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 806.396911][T17312] R13: 00007f4da29b9f58 R14: 00007f4da29ba000 R15: 0000000000000000 [ 806.396932][T17312] [ 808.953632][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.960029][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.355475][T17360] [U] ^@ [ 810.698485][T17393] FAULT_INJECTION: forcing a failure. [ 810.698485][T17393] name failslab, interval 1, probability 0, space 0, times 0 [ 810.752721][T17393] CPU: 0 UID: 0 PID: 17393 Comm: syz.3.2415 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.752748][T17393] Tainted: [L]=SOFTLOCKUP [ 810.752754][T17393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 810.752763][T17393] Call Trace: [ 810.752769][T17393] [ 810.752774][T17393] dump_stack_lvl+0x100/0x190 [ 810.752803][T17393] should_fail_ex.cold+0x5/0xa [ 810.752822][T17393] ? sk_prot_alloc+0x10b/0x2a0 [ 810.752838][T17393] should_failslab+0xc2/0x120 [ 810.752855][T17393] __kmalloc_noprof+0xe0/0x850 [ 810.752881][T17393] sk_prot_alloc+0x10b/0x2a0 [ 810.752899][T17393] sk_alloc+0x36/0xe80 [ 810.752920][T17393] __netlink_create+0x5e/0x2c0 [ 810.752938][T17393] ? __wake_up+0x3f/0x60 [ 810.752956][T17393] netlink_create+0x293/0x610 [ 810.752976][T17393] ? __pfx_genl_bind+0x10/0x10 [ 810.752989][T17393] ? __pfx_genl_unbind+0x10/0x10 [ 810.753002][T17393] ? __pfx_genl_release+0x10/0x10 [ 810.753019][T17393] __sock_create+0x339/0x860 [ 810.753041][T17393] __sys_socket+0x14d/0x260 [ 810.753058][T17393] ? __pfx___sys_socket+0x10/0x10 [ 810.753081][T17393] __x64_sys_socket+0x72/0xb0 [ 810.753097][T17393] ? lockdep_hardirqs_on+0x78/0x100 [ 810.753119][T17393] do_syscall_64+0x106/0xf80 [ 810.753139][T17393] ? clear_bhb_loop+0x40/0x90 [ 810.753157][T17393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.753173][T17393] RIP: 0033:0x7f4da1b9c799 [ 810.753186][T17393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.753201][T17393] RSP: 002b:00007f4da29fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 810.753216][T17393] RAX: ffffffffffffffda RBX: 00007f4da1e15fa0 RCX: 00007f4da1b9c799 [ 810.753225][T17393] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 810.753234][T17393] RBP: 00007f4da1c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 810.753243][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.753251][T17393] R13: 00007f4da1e16038 R14: 00007f4da1e15fa0 R15: 00007ffc56548b38 [ 810.753270][T17393] [ 811.186799][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2413'. [ 811.246795][T17402] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2413'. [ 811.513166][T17407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2416'. [ 813.162646][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 813.171713][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 813.180705][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 813.191623][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 813.199453][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 813.874548][T17441] [U] [ 813.877260][T17441] [U] [ 813.879935][T17441] [U] [ 813.882610][T17441] [U] [ 814.096709][T17441] [U] [ 814.099429][T17441] [U] [ 814.102104][T17441] [U] [ 814.104781][T17441] [U] [ 814.343261][T17441] [U] [ 814.842518][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.279572][T12797] Bluetooth: hci2: command tx timeout [ 815.421862][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.005815][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.195220][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.248742][T17437] chnl_net:caif_netlink_parms(): no params data found [ 817.003605][T17437] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.036930][T17437] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.064466][T17437] bridge_slave_0: entered allmulticast mode [ 817.095845][T17437] bridge_slave_0: entered promiscuous mode [ 817.126853][T17437] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.133940][T17437] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.196606][T17437] bridge_slave_1: entered allmulticast mode [ 817.236232][T17437] bridge_slave_1: entered promiscuous mode [ 817.354726][T12797] Bluetooth: hci2: command tx timeout [ 817.436042][T17437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.496587][T17437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.798469][ T36] bond0: left allmulticast mode [ 817.804957][ T36] bond_slave_0: left allmulticast mode [ 817.838908][ T36] bond_slave_1: left allmulticast mode [ 817.873540][ T36] bond0: left promiscuous mode [ 817.894469][ T36] bond_slave_0: left promiscuous mode [ 817.909998][ T29] audit: type=1326 audit(1843104865.146:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17487 comm="syz.2.2432" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc403f9c799 code=0x0 [ 817.964843][ T36] bond_slave_1: left promiscuous mode [ 817.970484][ T36] bridge0: port 4(bond0) entered disabled state [ 818.251140][ T36] gretap0: left allmulticast mode [ 818.288900][ T36] gretap0: left promiscuous mode [ 818.314155][ T36] bridge0: port 3(gretap0) entered disabled state [ 818.403774][ T36] bridge_slave_1: left allmulticast mode [ 818.424709][ T36] bridge_slave_1: left promiscuous mode [ 818.430418][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.569857][ T36] bridge_slave_0: left allmulticast mode [ 818.598772][ T36] bridge_slave_0: left promiscuous mode [ 818.604483][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.015016][ T29] audit: type=1326 audit(1843104866.256:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17503 comm="syz.0.2434" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd65d9c799 code=0x0 [ 819.288966][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.338974][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.359864][ T36] bond0 (unregistering): Released all slaves [ 819.387575][T17437] team0: Port device team_slave_0 added [ 819.437172][T12797] Bluetooth: hci2: command tx timeout [ 819.447644][T17437] team0: Port device team_slave_1 added [ 819.496307][ T36] HSR: left promiscuous mode [ 819.628391][T17437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.643414][T17437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.702805][T17437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.763836][T17437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.781545][T17437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.839597][T17437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.387730][T17437] hsr_slave_0: entered promiscuous mode [ 820.416080][T17437] hsr_slave_1: entered promiscuous mode [ 821.058679][T17542] FAULT_INJECTION: forcing a failure. [ 821.058679][T17542] name failslab, interval 1, probability 0, space 0, times 0 [ 821.081733][T17542] CPU: 0 UID: 0 PID: 17542 Comm: syz.1.2439 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.081759][T17542] Tainted: [L]=SOFTLOCKUP [ 821.081763][T17542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 821.081772][T17542] Call Trace: [ 821.081777][T17542] [ 821.081783][T17542] dump_stack_lvl+0x100/0x190 [ 821.081811][T17542] should_fail_ex.cold+0x5/0xa [ 821.081829][T17542] should_failslab+0xc2/0x120 [ 821.081846][T17542] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 821.081866][T17542] ? __pmd_alloc+0xbf/0x950 [ 821.081887][T17542] __pmd_alloc+0xbf/0x950 [ 821.081904][T17542] __handle_mm_fault+0xa99/0x2b60 [ 821.081926][T17542] ? mt_find+0x45e/0x8e0 [ 821.081942][T17542] ? __pfx___handle_mm_fault+0x10/0x10 [ 821.081959][T17542] ? __pfx_mt_find+0x10/0x10 [ 821.081983][T17542] ? find_vma+0xbf/0x140 [ 821.081996][T17542] ? __pfx_find_vma+0x10/0x10 [ 821.082012][T17542] handle_mm_fault+0x36d/0xa20 [ 821.082034][T17542] do_user_addr_fault+0x74c/0x12f0 [ 821.082055][T17542] exc_page_fault+0x6f/0xd0 [ 821.082076][T17542] asm_exc_page_fault+0x26/0x30 [ 821.082090][T17542] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 821.082106][T17542] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 821.082120][T17542] RSP: 0018:ffffc90003587da0 EFLAGS: 00050206 [ 821.082132][T17542] RAX: 0000000000000001 RBX: 0000000000000068 RCX: 0000000000000068 [ 821.082141][T17542] RDX: 0000000000000001 RSI: ffffc90003587e20 RDI: 0000000000000001 [ 821.082149][T17542] RBP: 0000000000000001 R08: 0000000000000000 R09: fffff520006b0fd0 [ 821.082157][T17542] R10: ffffc90003587e87 R11: 0000000000000000 R12: ffffc90003587e20 [ 821.082166][T17542] R13: 0000000000000069 R14: 00007ffffffff000 R15: 0000000000000000 [ 821.082184][T17542] _copy_to_user+0xa4/0xd0 [ 821.082204][T17542] ksys_semctl.constprop.0+0x299/0x2e0 [ 821.082223][T17542] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 821.082251][T17542] do_syscall_64+0x106/0xf80 [ 821.082270][T17542] ? clear_bhb_loop+0x40/0x90 [ 821.082287][T17542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.082301][T17542] RIP: 0033:0x7fc0fa99c799 [ 821.082313][T17542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.082326][T17542] RSP: 002b:00007fc0fb7f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 821.082339][T17542] RAX: ffffffffffffffda RBX: 00007fc0fac15fa0 RCX: 00007fc0fa99c799 [ 821.082348][T17542] RDX: 0000000000000002 RSI: 0000000024000000 RDI: 0000000000000002 [ 821.082356][T17542] RBP: 00007fc0fb7f1090 R08: 0000000000000000 R09: 0000000000000000 [ 821.082364][T17542] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 821.082372][T17542] R13: 00007fc0fac16038 R14: 00007fc0fac15fa0 R15: 00007ffc334ae518 [ 821.082391][T17542] [ 821.516267][T12797] Bluetooth: hci2: command tx timeout [ 822.632197][T17554] FAULT_INJECTION: forcing a failure. [ 822.632197][T17554] name fail_futex, interval 1, probability 0, space 0, times 0 [ 822.678328][T17554] CPU: 0 UID: 0 PID: 17554 Comm: syz.2.2442 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.678356][T17554] Tainted: [L]=SOFTLOCKUP [ 822.678362][T17554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 822.678371][T17554] Call Trace: [ 822.678376][T17554] [ 822.678382][T17554] dump_stack_lvl+0x100/0x190 [ 822.678412][T17554] should_fail_ex.cold+0x5/0xa [ 822.678431][T17554] get_futex_key+0x295/0x1620 [ 822.678452][T17554] ? __pfx_get_futex_key+0x10/0x10 [ 822.678473][T17554] ? kasan_save_track+0x14/0x30 [ 822.678494][T17554] ? __kasan_kmalloc+0xaa/0xb0 [ 822.678520][T17554] futex_lock_pi+0x1d3/0x7b0 [ 822.678545][T17554] ? __pfx_futex_lock_pi+0x10/0x10 [ 822.678568][T17554] ? __pfx___futex_wait+0x10/0x10 [ 822.678606][T17554] ? __pfx_futex_wake_mark+0x10/0x10 [ 822.678632][T17554] ? __lock_acquire+0x4a5/0x2630 [ 822.678656][T17554] do_futex+0x18a/0x350 [ 822.678676][T17554] ? __pfx_do_futex+0x10/0x10 [ 822.678695][T17554] ? find_held_lock+0x2b/0x80 [ 822.678712][T17554] __x64_sys_futex+0x34f/0x4d0 [ 822.678734][T17554] ? __pfx___x64_sys_futex+0x10/0x10 [ 822.678760][T17554] do_syscall_64+0x106/0xf80 [ 822.678781][T17554] ? clear_bhb_loop+0x40/0x90 [ 822.678800][T17554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.678815][T17554] RIP: 0033:0x7fc403f9c799 [ 822.678828][T17554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.678843][T17554] RSP: 002b:00007fc404dec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 822.678857][T17554] RAX: ffffffffffffffda RBX: 00007fc404216090 RCX: 00007fc403f9c799 [ 822.678867][T17554] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 822.678875][T17554] RBP: 00007fc404032c99 R08: 0000000000000000 R09: 000000008000fff5 [ 822.678884][T17554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.678893][T17554] R13: 00007fc404216128 R14: 00007fc404216090 R15: 00007ffd0299ba98 [ 822.678912][T17554] [ 824.156953][T17437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 824.211074][T17581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2444'. [ 824.291398][T17437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 824.370370][T17437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 824.529692][T17437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 825.355638][T17437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.622492][T17437] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.737374][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.744531][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.794776][T17621] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 825.815106][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.822244][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.862977][T17625] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 825.910754][ T36] hsr_slave_0: left promiscuous mode [ 825.971220][ T36] hsr_slave_1: left promiscuous mode [ 826.034460][ T36] veth0_macvtap: left promiscuous mode [ 826.062605][ T36] veth1_vlan: left promiscuous mode [ 826.093935][ T36] veth0_vlan: left promiscuous mode [ 826.263775][T17639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2451'. [ 826.584386][ T36] team0 (unregistering): Port device team_slave_1 removed [ 826.654433][ T36] team0 (unregistering): Port device team_slave_0 removed [ 826.756971][T17648] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2452'. [ 827.779999][T17437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.041989][T17437] veth0_vlan: entered promiscuous mode [ 828.087417][T17437] veth1_vlan: entered promiscuous mode [ 828.289328][T17437] veth0_macvtap: entered promiscuous mode [ 828.363986][T17437] veth1_macvtap: entered promiscuous mode [ 828.456893][T17437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.522593][T17437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.601345][ T149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.660196][ T149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.872784][ T149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.958813][ T149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.258010][ T4553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.307682][ T4553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.407973][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.450434][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.524588][ T29] audit: type=1326 audit(1843104876.761:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17708 comm="syz.2.2460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc403f9c799 code=0x0 [ 829.662417][T17715] bond0: invalid ARP target specified [ 829.690398][ T29] audit: type=1326 audit(1843104876.930:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17713 comm="syz.1.2461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0fa99c799 code=0x0 [ 829.797471][T17719] bond0: invalid ARP target specified [ 830.096936][T17723] zswap: compressor not available [ 830.257992][T17729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2463'. [ 830.279957][T17729] veth1_macvtap: left promiscuous mode [ 830.748748][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 830.759575][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 830.768162][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 830.777962][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 830.786732][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 831.300705][ T29] audit: type=1326 audit(1843104878.540:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17742 comm="syz.0.2464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd65d9c799 code=0x0 [ 831.447850][ T4553] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.499991][T17735] chnl_net:caif_netlink_parms(): no params data found [ 831.573213][ T4553] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.630479][ T4553] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.736292][ T4553] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.855765][T17735] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.884287][T17735] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.908937][T17735] bridge_slave_0: entered allmulticast mode [ 831.933609][T17735] bridge_slave_0: entered promiscuous mode [ 831.957608][T17735] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.984971][T17735] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.010735][T17735] bridge_slave_1: entered allmulticast mode [ 832.036615][T17735] bridge_slave_1: entered promiscuous mode [ 832.170176][T17735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.206898][T17735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.311293][T17735] team0: Port device team_slave_0 added [ 832.344293][T17735] team0: Port device team_slave_1 added [ 832.423892][T17735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.434310][T17770] zswap: compressor not available [ 832.461868][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.554424][T17735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.571825][ T29] audit: type=1326 audit(1843104879.809:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17774 comm="syz.3.2473" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b7cb9c799 code=0x0 [ 832.606103][T17735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.620483][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.681959][T17735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.786432][T17735] hsr_slave_0: entered promiscuous mode [ 832.802073][ T5837] Bluetooth: hci3: command tx timeout [ 832.814716][T17735] hsr_slave_1: entered promiscuous mode [ 832.832566][T17735] debugfs: 'hsr0' already exists in 'hsr' [ 832.838396][T17735] Cannot create hsr debugfs directory [ 832.900456][T17779] bond0: invalid ARP target specified [ 834.883744][ T5837] Bluetooth: hci3: command tx timeout [ 835.202179][T17805] FAULT_INJECTION: forcing a failure. [ 835.202179][T17805] name fail_futex, interval 1, probability 0, space 0, times 0 [ 835.244252][T17805] CPU: 0 UID: 0 PID: 17805 Comm: syz.1.2480 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.244280][T17805] Tainted: [L]=SOFTLOCKUP [ 835.244285][T17805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.244295][T17805] Call Trace: [ 835.244301][T17805] [ 835.244307][T17805] dump_stack_lvl+0x100/0x190 [ 835.244335][T17805] should_fail_ex.cold+0x5/0xa [ 835.244354][T17805] get_futex_key+0x1d2/0x1620 [ 835.244375][T17805] ? __pfx_get_futex_key+0x10/0x10 [ 835.244400][T17805] futex_wake+0xea/0x530 [ 835.244424][T17805] ? __pfx_futex_wake+0x10/0x10 [ 835.244448][T17805] ? __lock_acquire+0x4a5/0x2630 [ 835.244471][T17805] do_futex+0x32b/0x350 [ 835.244490][T17805] ? __pfx_do_futex+0x10/0x10 [ 835.244510][T17805] ? find_held_lock+0x2b/0x80 [ 835.244527][T17805] __x64_sys_futex+0x34f/0x4d0 [ 835.244548][T17805] ? __pfx___x64_sys_futex+0x10/0x10 [ 835.244574][T17805] do_syscall_64+0x106/0xf80 [ 835.244595][T17805] ? clear_bhb_loop+0x40/0x90 [ 835.244613][T17805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.244628][T17805] RIP: 0033:0x7fc0fa99c799 [ 835.244641][T17805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.244656][T17805] RSP: 002b:00007fc0fb7d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 835.244670][T17805] RAX: ffffffffffffffda RBX: 00007fc0fac16098 RCX: 00007fc0fa99c799 [ 835.244680][T17805] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc0fac1609c [ 835.244689][T17805] RBP: 00007fc0fac16090 R08: 0000000000000000 R09: 0000000000000000 [ 835.244698][T17805] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 835.244707][T17805] R13: 00007fc0fac16128 R14: 00007ffc334ae430 R15: 00007ffc334ae518 [ 835.244726][T17805] [ 836.758114][T17815] FAULT_INJECTION: forcing a failure. [ 836.758114][T17815] name failslab, interval 1, probability 0, space 0, times 0 [ 836.783819][T17815] CPU: 0 UID: 0 PID: 17815 Comm: syz.1.2483 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.783846][T17815] Tainted: [L]=SOFTLOCKUP [ 836.783852][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 836.783862][T17815] Call Trace: [ 836.783867][T17815] [ 836.783873][T17815] dump_stack_lvl+0x100/0x190 [ 836.783902][T17815] should_fail_ex.cold+0x5/0xa [ 836.783922][T17815] should_failslab+0xc2/0x120 [ 836.783939][T17815] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 836.783960][T17815] ? skb_clone+0x190/0x400 [ 836.783993][T17815] skb_clone+0x190/0x400 [ 836.784016][T17815] netlink_deliver_tap+0xaed/0xcc0 [ 836.784044][T17815] netlink_unicast+0x650/0x870 [ 836.784069][T17815] ? __pfx_netlink_unicast+0x10/0x10 [ 836.784100][T17815] netlink_sendmsg+0x8b0/0xda0 [ 836.784117][T17815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.784134][T17815] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 836.784162][T17815] __sys_sendto+0x468/0x4b0 [ 836.784180][T17815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 836.784195][T17815] ? __pfx___sys_sendto+0x10/0x10 [ 836.784220][T17815] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 836.784237][T17815] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 836.784265][T17815] __x64_sys_sendto+0xe0/0x1c0 [ 836.784284][T17815] ? do_syscall_64+0x95/0xf80 [ 836.784306][T17815] ? lockdep_hardirqs_on+0x78/0x100 [ 836.784327][T17815] do_syscall_64+0x106/0xf80 [ 836.784347][T17815] ? clear_bhb_loop+0x40/0x90 [ 836.784366][T17815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.784382][T17815] RIP: 0033:0x7fc0fa95cfce [ 836.784395][T17815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 836.784410][T17815] RSP: 002b:00007fc0fb7cee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 836.784425][T17815] RAX: ffffffffffffffda RBX: 00007fc0fb7d06c0 RCX: 00007fc0fa95cfce [ 836.784435][T17815] RDX: 0000000000000020 RSI: 00007fc0fb7cf000 RDI: 0000000000000008 [ 836.784444][T17815] RBP: 0000000000000000 R08: 00007fc0fb7cef04 R09: 000000000000000c [ 836.784452][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 836.784462][T17815] R13: 00007fc0fb7cef58 R14: 00007fc0fb7cf000 R15: 0000000000000000 [ 836.784481][T17815] [ 837.011403][ T5837] Bluetooth: hci3: command tx timeout [ 839.045556][ T5837] Bluetooth: hci3: command tx timeout [ 840.489197][T17844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2492'. [ 842.538894][T17887] FAULT_INJECTION: forcing a failure. [ 842.538894][T17887] name fail_futex, interval 1, probability 0, space 0, times 0 [ 842.551896][T17887] CPU: 0 UID: 0 PID: 17887 Comm: syz.1.2496 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.551921][T17887] Tainted: [L]=SOFTLOCKUP [ 842.551927][T17887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 842.551936][T17887] Call Trace: [ 842.551942][T17887] [ 842.551948][T17887] dump_stack_lvl+0x100/0x190 [ 842.551977][T17887] should_fail_ex.cold+0x5/0xa [ 842.551996][T17887] should_fail_futex+0x4c/0x60 [ 842.552015][T17887] lock_pi_update_atomic+0x20/0x130 [ 842.552038][T17887] futex_lock_pi_atomic+0x3fb/0xaf0 [ 842.552064][T17887] futex_lock_pi+0x246/0x7b0 [ 842.552087][T17887] ? __pfx_futex_lock_pi+0x10/0x10 [ 842.552107][T17887] ? preempt_schedule_common+0x42/0xc0 [ 842.552129][T17887] ? preempt_schedule_thunk+0x16/0x30 [ 842.552155][T17887] ? __pfx_try_to_wake_up+0x10/0x10 [ 842.552175][T17887] ? futex_private_hash_put+0x107/0x1c0 [ 842.552197][T17887] ? __pfx_futex_wake_mark+0x10/0x10 [ 842.552225][T17887] ? ksys_write+0x190/0x250 [ 842.552239][T17887] ? ksys_write+0x190/0x250 [ 842.552256][T17887] do_futex+0x18a/0x350 [ 842.552275][T17887] ? __pfx_do_futex+0x10/0x10 [ 842.552299][T17887] __x64_sys_futex+0x34f/0x4d0 [ 842.552321][T17887] ? __pfx___x64_sys_futex+0x10/0x10 [ 842.552347][T17887] do_syscall_64+0x106/0xf80 [ 842.552368][T17887] ? clear_bhb_loop+0x40/0x90 [ 842.552386][T17887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.552401][T17887] RIP: 0033:0x7fc0fa99c799 [ 842.552414][T17887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.552429][T17887] RSP: 002b:00007fc0fb7f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 842.552443][T17887] RAX: ffffffffffffffda RBX: 00007fc0fac15fa0 RCX: 00007fc0fa99c799 [ 842.552453][T17887] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 842.552461][T17887] RBP: 00007fc0faa32c99 R08: 0000000000000000 R09: 000000008000fff5 [ 842.552470][T17887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.552478][T17887] R13: 00007fc0fac16038 R14: 00007fc0fac15fa0 R15: 00007ffc334ae518 [ 842.552497][T17887] [ 843.763360][T17894] NFSD: Failed to start, no listeners configured. [ 844.420719][T17905] FAULT_INJECTION: forcing a failure. [ 844.420719][T17905] name fail_futex, interval 1, probability 0, space 0, times 0 [ 844.454537][T17905] CPU: 0 UID: 0 PID: 17905 Comm: syz.1.2501 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.454564][T17905] Tainted: [L]=SOFTLOCKUP [ 844.454569][T17905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 844.454578][T17905] Call Trace: [ 844.454583][T17905] [ 844.454589][T17905] dump_stack_lvl+0x100/0x190 [ 844.454619][T17905] should_fail_ex.cold+0x5/0xa [ 844.454639][T17905] get_futex_key+0x295/0x1620 [ 844.454660][T17905] ? __pfx_get_futex_key+0x10/0x10 [ 844.454679][T17905] ? kasan_save_track+0x14/0x30 [ 844.454694][T17905] ? __kasan_kmalloc+0xaa/0xb0 [ 844.454719][T17905] futex_lock_pi+0x1d3/0x7b0 [ 844.454743][T17905] ? __pfx_futex_lock_pi+0x10/0x10 [ 844.454765][T17905] ? __pfx___futex_wait+0x10/0x10 [ 844.454786][T17905] ? lockdep_hardirqs_on+0x78/0x100 [ 844.454825][T17905] ? __pfx_futex_wake_mark+0x10/0x10 [ 844.454851][T17905] ? __lock_acquire+0x4a5/0x2630 [ 844.454875][T17905] do_futex+0x18a/0x350 [ 844.454896][T17905] ? __pfx_do_futex+0x10/0x10 [ 844.454932][T17905] ? find_held_lock+0x2b/0x80 [ 844.454949][T17905] __x64_sys_futex+0x34f/0x4d0 [ 844.454972][T17905] ? __pfx___x64_sys_futex+0x10/0x10 [ 844.454999][T17905] do_syscall_64+0x106/0xf80 [ 844.455022][T17905] ? clear_bhb_loop+0x40/0x90 [ 844.455041][T17905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.455056][T17905] RIP: 0033:0x7fc0fa99c799 [ 844.455069][T17905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.455084][T17905] RSP: 002b:00007fc0fb7d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 844.455100][T17905] RAX: ffffffffffffffda RBX: 00007fc0fac16090 RCX: 00007fc0fa99c799 [ 844.455110][T17905] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 844.455118][T17905] RBP: 00007fc0faa32c99 R08: 0000000000000000 R09: 000000008000fff5 [ 844.455127][T17905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.455136][T17905] R13: 00007fc0fac16128 R14: 00007fc0fac16090 R15: 00007ffc334ae518 [ 844.455156][T17905] [ 845.634340][T12797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 845.644421][T12797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 845.653688][T12797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 845.662821][T12797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 845.672055][T12797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 845.936319][T17929] chnl_net:caif_netlink_parms(): no params data found [ 846.074288][T17929] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.090340][T17929] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.110396][T17929] bridge_slave_0: entered allmulticast mode [ 846.127649][T17929] bridge_slave_0: entered promiscuous mode [ 846.136726][T17929] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.152394][T17929] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.167482][T17929] bridge_slave_1: entered allmulticast mode [ 846.183442][T17929] bridge_slave_1: entered promiscuous mode [ 846.239071][T17929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.263344][T17929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.323508][T17929] team0: Port device team_slave_0 added [ 846.341487][T17929] team0: Port device team_slave_1 added [ 846.391831][T17929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.407579][T17929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.463937][T17929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.490437][T17929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.505734][T17929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.561832][T17929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.641478][T17929] hsr_slave_0: entered promiscuous mode [ 846.658005][T17929] hsr_slave_1: entered promiscuous mode [ 846.677530][T17929] debugfs: 'hsr0' already exists in 'hsr' [ 846.688969][T17929] Cannot create hsr debugfs directory [ 847.689676][T12797] Bluetooth: hci1: command tx timeout [ 848.029299][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 848.038359][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 848.047521][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 848.055409][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 848.063544][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 848.394459][T17950] chnl_net:caif_netlink_parms(): no params data found [ 848.542736][T17950] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.560879][T17950] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.568085][T17950] bridge_slave_0: entered allmulticast mode [ 848.591557][T17950] bridge_slave_0: entered promiscuous mode [ 848.609502][T17950] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.627155][T17950] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.639587][T17950] bridge_slave_1: entered allmulticast mode [ 848.658493][T17950] bridge_slave_1: entered promiscuous mode [ 848.712602][T17950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.732361][T17950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.791133][T17950] team0: Port device team_slave_0 added [ 848.809069][T17950] team0: Port device team_slave_1 added [ 848.864488][T17950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.880124][T17950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.926631][T17950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.951622][T17950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.966947][T17950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.023508][T17950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.111548][T17950] hsr_slave_0: entered promiscuous mode [ 849.124399][T17950] hsr_slave_1: entered promiscuous mode [ 849.137528][T17950] debugfs: 'hsr0' already exists in 'hsr' [ 849.148937][T17950] Cannot create hsr debugfs directory [ 849.772730][T12797] Bluetooth: hci1: command tx timeout [ 849.943875][T17975] FAULT_INJECTION: forcing a failure. [ 849.943875][T17975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.958736][T17975] CPU: 0 UID: 0 PID: 17975 Comm: syz.1.2516 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.958761][T17975] Tainted: [L]=SOFTLOCKUP [ 849.958772][T17975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 849.958781][T17975] Call Trace: [ 849.958786][T17975] [ 849.958792][T17975] dump_stack_lvl+0x100/0x190 [ 849.958820][T17975] should_fail_ex.cold+0x5/0xa [ 849.958838][T17975] strncpy_from_user+0x3b/0x2d0 [ 849.958857][T17975] do_getname+0x78/0x390 [ 849.958877][T17975] do_sys_openat2+0xc5/0x1e0 [ 849.958896][T17975] ? __pfx_do_sys_openat2+0x10/0x10 [ 849.958912][T17975] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 849.958938][T17975] ? __fget_files+0x21f/0x3d0 [ 849.958955][T17975] __x64_sys_openat+0x12d/0x210 [ 849.958973][T17975] ? __pfx___x64_sys_openat+0x10/0x10 [ 849.958991][T17975] ? ksys_write+0x1ac/0x250 [ 849.959011][T17975] do_syscall_64+0x106/0xf80 [ 849.959030][T17975] ? clear_bhb_loop+0x40/0x90 [ 849.959047][T17975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.959061][T17975] RIP: 0033:0x7fc0fa99c799 [ 849.959074][T17975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.959088][T17975] RSP: 002b:00007fc0fb7f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 849.959102][T17975] RAX: ffffffffffffffda RBX: 00007fc0fac15fa0 RCX: 00007fc0fa99c799 [ 849.959111][T17975] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 849.959120][T17975] RBP: 00007fc0fb7f1090 R08: 0000000000000000 R09: 0000000000000000 [ 849.959128][T17975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.959137][T17975] R13: 00007fc0fac16038 R14: 00007fc0fac15fa0 R15: 00007ffc334ae518 [ 849.959155][T17975] [ 850.170803][T12797] Bluetooth: hci5: command tx timeout [ 851.852020][T12797] Bluetooth: hci1: command tx timeout [ 852.252384][T12797] Bluetooth: hci5: command tx timeout [ 853.932573][T12797] Bluetooth: hci1: command tx timeout [ 854.333067][T12797] Bluetooth: hci5: command tx timeout [ 855.986608][T18043] [U] [ 855.989325][T18043] [U] [ 855.991998][T18043] [U] [ 855.994670][T18043] [U] [ 856.019647][T18043] [U] [ 856.022368][T18043] [U] [ 856.025045][T18043] [U] [ 856.027721][T18043] [U] [ 856.131625][T18040] [U] [ 856.414093][T12797] Bluetooth: hci5: command tx timeout [ 857.152597][T18054] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 857.203545][T18054] smpboot: CPU 1 is now offline [ 859.561716][T18073] FAULT_INJECTION: forcing a failure. [ 859.561716][T18073] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 859.580628][T18073] CPU: 0 UID: 0 PID: 18073 Comm: syz.1.2539 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.580656][T18073] Tainted: [L]=SOFTLOCKUP [ 859.580662][T18073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 859.580671][T18073] Call Trace: [ 859.580676][T18073] [ 859.580682][T18073] dump_stack_lvl+0x100/0x190 [ 859.580711][T18073] should_fail_ex.cold+0x5/0xa [ 859.580727][T18073] ? prepare_alloc_pages+0x16d/0x5f0 [ 859.580754][T18073] should_fail_alloc_page+0xeb/0x140 [ 859.580772][T18073] prepare_alloc_pages+0x1f0/0x5f0 [ 859.580794][T18073] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 859.580821][T18073] ? lock_acquire+0x1cf/0x380 [ 859.580842][T18073] ? find_held_lock+0x2b/0x80 [ 859.580856][T18073] ? free_unref_folios+0xd3f/0x1790 [ 859.580876][T18073] ? free_unref_folios+0xd3f/0x1790 [ 859.580899][T18073] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 859.580931][T18073] ? lock_acquire+0x1cf/0x380 [ 859.580950][T18073] ? find_held_lock+0x2b/0x80 [ 859.580963][T18073] ? page_table_check_set+0x49a/0xa10 [ 859.580978][T18073] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 859.580995][T18073] ? policy_nodemask+0xed/0x4f0 [ 859.581013][T18073] alloc_pages_mpol+0x1fb/0x550 [ 859.581030][T18073] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 859.581051][T18073] folio_alloc_mpol_noprof+0x36/0x340 [ 859.581071][T18073] vma_alloc_folio_noprof+0xed/0x1d0 [ 859.581088][T18073] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 859.581113][T18073] do_anonymous_page+0xb3a/0x1fb0 [ 859.581139][T18073] __handle_mm_fault+0x1d42/0x2b60 [ 859.581165][T18073] ? __pfx___handle_mm_fault+0x10/0x10 [ 859.581186][T18073] ? pte_offset_map_lock+0x174/0x320 [ 859.581202][T18073] ? find_held_lock+0x2b/0x80 [ 859.581222][T18073] ? follow_page_pte+0x5b3/0x1400 [ 859.581243][T18073] handle_mm_fault+0x36d/0xa20 [ 859.581267][T18073] __get_user_pages+0xf9c/0x34d0 [ 859.581291][T18073] ? __pfx___get_user_pages+0x10/0x10 [ 859.581314][T18073] populate_vma_page_range+0x267/0x3f0 [ 859.581334][T18073] ? __pfx_populate_vma_page_range+0x10/0x10 [ 859.581351][T18073] ? __pfx_find_vma_intersection+0x10/0x10 [ 859.581368][T18073] ? do_mmap+0x93f/0x12f0 [ 859.581386][T18073] __mm_populate+0x107/0x3a0 [ 859.581405][T18073] ? __pfx___mm_populate+0x10/0x10 [ 859.581424][T18073] ? up_write+0x290/0x4f0 [ 859.581446][T18073] vm_mmap_pgoff+0x37f/0x470 [ 859.581466][T18073] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 859.581485][T18073] ? do_futex+0x192/0x350 [ 859.581505][T18073] ? __pfx_do_futex+0x10/0x10 [ 859.581527][T18073] ksys_mmap_pgoff+0xe1/0x650 [ 859.581543][T18073] ? __x64_sys_futex+0x34f/0x4d0 [ 859.581561][T18073] ? __x64_sys_futex+0x358/0x4d0 [ 859.581580][T18073] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 859.581596][T18073] ? xfd_validate_state+0x129/0x190 [ 859.581621][T18073] __x64_sys_mmap+0x125/0x190 [ 859.581645][T18073] do_syscall_64+0x106/0xf80 [ 859.581666][T18073] ? clear_bhb_loop+0x40/0x90 [ 859.581685][T18073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.581701][T18073] RIP: 0033:0x7fc0fa99c799 [ 859.581716][T18073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.581730][T18073] RSP: 002b:00007fc0fb7f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 859.581750][T18073] RAX: ffffffffffffffda RBX: 00007fc0fac15fa0 RCX: 00007fc0fa99c799 [ 859.581760][T18073] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 859.581769][T18073] RBP: 00007fc0faa32c99 R08: 0000000000000002 R09: 0000000000008000 [ 859.581778][T18073] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 859.581787][T18073] R13: 00007fc0fac16038 R14: 00007fc0fac15fa0 R15: 00007ffc334ae518 [ 859.581808][T18073] [ 859.962243][T18078] zero sized request [ 860.248473][T18081] FAULT_INJECTION: forcing a failure. [ 860.248473][T18081] name failslab, interval 1, probability 0, space 0, times 0 [ 860.265028][T18081] CPU: 0 UID: 0 PID: 18081 Comm: syz.1.2540 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.265054][T18081] Tainted: [L]=SOFTLOCKUP [ 860.265059][T18081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.265067][T18081] Call Trace: [ 860.265073][T18081] [ 860.265078][T18081] dump_stack_lvl+0x100/0x190 [ 860.265106][T18081] should_fail_ex.cold+0x5/0xa [ 860.265124][T18081] should_failslab+0xc2/0x120 [ 860.265140][T18081] __kmalloc_cache_noprof+0x7a/0x6f0 [ 860.265159][T18081] ? proc_thread_self_get_link+0x1a6/0x210 [ 860.265186][T18081] proc_thread_self_get_link+0x1a6/0x210 [ 860.265207][T18081] pick_link+0xac2/0x13c0 [ 860.265227][T18081] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 860.265250][T18081] step_into_slowpath+0x9ba/0xf90 [ 860.265274][T18081] ? __pfx_step_into_slowpath+0x10/0x10 [ 860.265297][T18081] ? lookup_fast+0x2da/0x600 [ 860.265314][T18081] ? inode_permission+0x374/0x620 [ 860.265342][T18081] link_path_walk+0xf28/0x1cc0 [ 860.265369][T18081] path_openat+0x1be/0x31a0 [ 860.265382][T18081] ? kasan_save_stack+0x3f/0x50 [ 860.265403][T18081] ? kasan_save_stack+0x30/0x50 [ 860.265423][T18081] ? kasan_save_track+0x14/0x30 [ 860.265435][T18081] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 860.265460][T18081] ? __pfx_path_openat+0x10/0x10 [ 860.265481][T18081] do_file_open+0x20e/0x430 [ 860.265498][T18081] ? __pfx_do_file_open+0x10/0x10 [ 860.265526][T18081] ? alloc_fd+0x476/0x790 [ 860.265542][T18081] ? do_getname+0x191/0x390 [ 860.265564][T18081] do_sys_openat2+0x10d/0x1e0 [ 860.265583][T18081] ? __pfx_do_sys_openat2+0x10/0x10 [ 860.265600][T18081] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 860.265625][T18081] ? __fget_files+0x21f/0x3d0 [ 860.265642][T18081] __x64_sys_openat+0x12d/0x210 [ 860.265661][T18081] ? __pfx___x64_sys_openat+0x10/0x10 [ 860.265678][T18081] ? ksys_write+0x1ac/0x250 [ 860.265698][T18081] do_syscall_64+0x106/0xf80 [ 860.265718][T18081] ? clear_bhb_loop+0x40/0x90 [ 860.265735][T18081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.265750][T18081] RIP: 0033:0x7fc0fa99c799 [ 860.265762][T18081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.265776][T18081] RSP: 002b:00007fc0fb7d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 860.265791][T18081] RAX: ffffffffffffffda RBX: 00007fc0fac16090 RCX: 00007fc0fa99c799 [ 860.265800][T18081] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 860.265809][T18081] RBP: 00007fc0fb7d0090 R08: 0000000000000000 R09: 0000000000000000 [ 860.265817][T18081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.265825][T18081] R13: 00007fc0fac16128 R14: 00007fc0fac16090 R15: 00007ffc334ae518 [ 860.265844][T18081] [ 862.102140][T18121] FAULT_INJECTION: forcing a failure. [ 862.102140][T18121] name failslab, interval 1, probability 0, space 0, times 0 [ 862.137000][T18121] CPU: 0 UID: 0 PID: 18121 Comm: syz.1.2552 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.137024][T18121] Tainted: [L]=SOFTLOCKUP [ 862.137030][T18121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 862.137038][T18121] Call Trace: [ 862.137043][T18121] [ 862.137048][T18121] dump_stack_lvl+0x100/0x190 [ 862.137074][T18121] should_fail_ex.cold+0x5/0xa [ 862.137093][T18121] should_failslab+0xc2/0x120 [ 862.137110][T18121] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 862.137131][T18121] ? __d_alloc+0x34/0xa80 [ 862.137151][T18121] __d_alloc+0x34/0xa80 [ 862.137169][T18121] d_alloc_pseudo+0x1c/0xc0 [ 862.137188][T18121] alloc_file_pseudo+0xcf/0x230 [ 862.137208][T18121] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 862.137231][T18121] __shmem_file_setup+0x221/0x490 [ 862.137252][T18121] ? __pfx___shmem_file_setup+0x10/0x10 [ 862.137274][T18121] ? vm_area_alloc+0x1f/0x160 [ 862.137294][T18121] shmem_zero_setup+0x96/0x1b0 [ 862.137309][T18121] __mmap_region+0x2198/0x29e0 [ 862.137332][T18121] ? __pfx___mmap_region+0x10/0x10 [ 862.137357][T18121] ? set_next_entity+0x11e/0x9c0 [ 862.137380][T18121] ? __lock_acquire+0x4a5/0x2630 [ 862.137407][T18121] ? find_held_lock+0x2b/0x80 [ 862.137420][T18121] ? finish_task_switch.isra.0+0x200/0xb80 [ 862.137435][T18121] ? finish_task_switch.isra.0+0x200/0xb80 [ 862.137459][T18121] ? trace_sched_exit_tp+0x13a/0x180 [ 862.137476][T18121] ? __schedule+0x1000/0x6120 [ 862.137527][T18121] ? rcu_is_watching+0x12/0xc0 [ 862.137550][T18121] ? cap_capable+0x107/0x460 [ 862.137575][T18121] mmap_region+0x180/0x3e0 [ 862.137599][T18121] do_mmap+0xc63/0x12f0 [ 862.137619][T18121] ? __pfx_do_mmap+0x10/0x10 [ 862.137635][T18121] ? __pfx_down_write_killable+0x10/0x10 [ 862.137654][T18121] vm_mmap_pgoff+0x29e/0x470 [ 862.137679][T18121] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 862.137696][T18121] ? do_futex+0x192/0x350 [ 862.137715][T18121] ? __pfx_do_futex+0x10/0x10 [ 862.137736][T18121] ksys_mmap_pgoff+0xe1/0x650 [ 862.137752][T18121] ? __x64_sys_futex+0x34f/0x4d0 [ 862.137769][T18121] ? __x64_sys_futex+0x358/0x4d0 [ 862.137787][T18121] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 862.137802][T18121] ? xfd_validate_state+0x129/0x190 [ 862.137827][T18121] __x64_sys_mmap+0x125/0x190 [ 862.137850][T18121] do_syscall_64+0x106/0xf80 [ 862.137870][T18121] ? clear_bhb_loop+0x40/0x90 [ 862.137887][T18121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.137902][T18121] RIP: 0033:0x7fc0fa99c799 [ 862.137915][T18121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.137928][T18121] RSP: 002b:00007fc0fb78e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 862.137942][T18121] RAX: ffffffffffffffda RBX: 00007fc0fac16270 RCX: 00007fc0fa99c799 [ 862.137952][T18121] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 862.137960][T18121] RBP: 00007fc0faa32c99 R08: fffffffffffffff7 R09: 0000000000008000 [ 862.137969][T18121] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 862.137977][T18121] R13: 00007fc0fac16308 R14: 00007fc0fac16270 R15: 00007ffc334ae518 [ 862.137996][T18121] [ 865.888966][T18160] [U] [ 865.891681][T18160] [U] [ 865.894354][T18160] [U] [ 865.897026][T18160] [U] [ 865.916805][T18160] [U] [ 865.919518][T18160] [U] [ 865.922209][T18160] [U] [ 865.924941][T18160] [U] [ 866.026051][T18159] [U] [ 867.019123][ T29] audit: type=1107 audit(1843104914.242:97): pid=18170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 867.335840][T18182] FAULT_INJECTION: forcing a failure. [ 867.335840][T18182] name fail_futex, interval 1, probability 0, space 0, times 0 [ 867.348828][T18182] CPU: 0 UID: 0 PID: 18182 Comm: syz.1.2564 Tainted: G L syzkaller #0 PREEMPT(full) [ 867.348854][T18182] Tainted: [L]=SOFTLOCKUP [ 867.348860][T18182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 867.348870][T18182] Call Trace: [ 867.348877][T18182] [ 867.348884][T18182] dump_stack_lvl+0x100/0x190 [ 867.348913][T18182] should_fail_ex.cold+0x5/0xa [ 867.348933][T18182] should_fail_futex+0x4c/0x60 [ 867.348954][T18182] futex_lock_pi_atomic+0x12d/0xaf0 [ 867.348980][T18182] futex_lock_pi+0x246/0x7b0 [ 867.349005][T18182] ? __pfx_futex_lock_pi+0x10/0x10 [ 867.349029][T18182] ? __pfx___futex_wait+0x10/0x10 [ 867.349052][T18182] ? lockdep_hardirqs_on+0x78/0x100 [ 867.349094][T18182] ? __pfx_futex_wake_mark+0x10/0x10 [ 867.349121][T18182] ? ksys_write+0x190/0x250 [ 867.349141][T18182] ? ksys_write+0x190/0x250 [ 867.349160][T18182] do_futex+0x18a/0x350 [ 867.349180][T18182] ? __pfx_do_futex+0x10/0x10 [ 867.349206][T18182] __x64_sys_futex+0x34f/0x4d0 [ 867.349229][T18182] ? __pfx___x64_sys_futex+0x10/0x10 [ 867.349257][T18182] do_syscall_64+0x106/0xf80 [ 867.349279][T18182] ? clear_bhb_loop+0x40/0x90 [ 867.349297][T18182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.349313][T18182] RIP: 0033:0x7fc0fa99c799 [ 867.349327][T18182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.349342][T18182] RSP: 002b:00007fc0fb7f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 867.349358][T18182] RAX: ffffffffffffffda RBX: 00007fc0fac15fa0 RCX: 00007fc0fa99c799 [ 867.349368][T18182] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 867.349377][T18182] RBP: 00007fc0faa32c99 R08: 0000000000000000 R09: 000000008000fff5 [ 867.349387][T18182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.349397][T18182] R13: 00007fc0fac16038 R14: 00007fc0fac15fa0 R15: 00007ffc334ae518 [ 867.349417][T18182] [ 868.959768][T18201] bridge0: port 3(gretap0) entered blocking state [ 868.971996][T18201] bridge0: port 3(gretap0) entered disabled state [ 868.988759][T18201] gretap0: entered allmulticast mode [ 868.999903][T18201] gretap0: entered promiscuous mode [ 869.005889][T18201] bridge0: port 3(gretap0) entered blocking state [ 869.012440][T18201] bridge0: port 3(gretap0) entered forwarding state [ 870.333248][T18215] FAULT_INJECTION: forcing a failure. [ 870.333248][T18215] name fail_futex, interval 1, probability 0, space 0, times 0 [ 870.346479][T18215] CPU: 0 UID: 0 PID: 18215 Comm: syz.1.2571 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.346504][T18215] Tainted: [L]=SOFTLOCKUP [ 870.346510][T18215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 870.346520][T18215] Call Trace: [ 870.346526][T18215] [ 870.346532][T18215] dump_stack_lvl+0x100/0x190 [ 870.346561][T18215] should_fail_ex.cold+0x5/0xa [ 870.346580][T18215] should_fail_futex+0x4c/0x60 [ 870.346599][T18215] futex_lock_pi_atomic+0x12d/0xaf0 [ 870.346625][T18215] futex_lock_pi+0x246/0x7b0 [ 870.346650][T18215] ? __pfx_futex_lock_pi+0x10/0x10 [ 870.346672][T18215] ? __pfx___futex_wait+0x10/0x10 [ 870.346694][T18215] ? lockdep_hardirqs_on+0x78/0x100 [ 870.346733][T18215] ? __pfx_futex_wake_mark+0x10/0x10 [ 870.346760][T18215] ? ksys_write+0x190/0x250 [ 870.346775][T18215] ? ksys_write+0x190/0x250 [ 870.346793][T18215] do_futex+0x18a/0x350 [ 870.346814][T18215] ? __pfx_do_futex+0x10/0x10 [ 870.346838][T18215] __x64_sys_futex+0x34f/0x4d0 [ 870.346861][T18215] ? __pfx___x64_sys_futex+0x10/0x10 [ 870.346887][T18215] do_syscall_64+0x106/0xf80 [ 870.346907][T18215] ? clear_bhb_loop+0x40/0x90 [ 870.346926][T18215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.346941][T18215] RIP: 0033:0x7fc0fa99c799 [ 870.346955][T18215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.346970][T18215] RSP: 002b:00007fc0fb7d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 870.346985][T18215] RAX: ffffffffffffffda RBX: 00007fc0fac16090 RCX: 00007fc0fa99c799 [ 870.346995][T18215] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 870.347004][T18215] RBP: 00007fc0faa32c99 R08: 0000000000000000 R09: 000000008000fff5 [ 870.347013][T18215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.347022][T18215] R13: 00007fc0fac16128 R14: 00007fc0fac16090 R15: 00007ffc334ae518 [ 870.347042][T18215] [ 870.553572][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.559863][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.583875][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 874.387952][T18242] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 874.387973][T18242] CIFS mount error: No usable UNC path provided in device string! [ 874.387973][T18242] [ 874.388133][T18242] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 874.628366][T18245] [U] [ 874.631079][T18245] [U] [ 874.633752][T18245] [U] [ 874.636421][T18245] [U] [ 874.662120][T18245] [U] [ 874.664864][T18245] [U] [ 874.667541][T18245] [U] [ 874.670210][T18245] [U] [ 874.703717][T18243] [U] [ 875.704773][T18266] [U] [ 875.707510][T18266] [U] [ 875.710207][T18266] [U] [ 875.712901][T18266] [U] [ 875.717025][T18266] [U] [ 875.719716][T18266] [U] [ 875.722391][T18266] [U] [ 875.725066][T18266] [U] [ 875.729455][T18265] [U] [ 876.788329][T18277] syz.1.2588 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 877.039284][T18286] [U] [ 877.042013][T18286] [U] [ 877.044691][T18286] [U] [ 877.047359][T18286] [U] [ 877.051081][T18286] [U] [ 877.053772][T18286] [U] [ 877.056452][T18286] [U] [ 877.059129][T18286] [U] [ 877.066072][T18285] [U] [ 877.194867][T18292] FAULT_INJECTION: forcing a failure. [ 877.194867][T18292] name fail_futex, interval 1, probability 0, space 0, times 0 [ 877.207803][T18292] CPU: 0 UID: 0 PID: 18292 Comm: syz.1.2593 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.207829][T18292] Tainted: [L]=SOFTLOCKUP [ 877.207835][T18292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 877.207845][T18292] Call Trace: [ 877.207851][T18292] [ 877.207857][T18292] dump_stack_lvl+0x100/0x190 [ 877.207886][T18292] should_fail_ex.cold+0x5/0xa [ 877.207906][T18292] should_fail_futex+0x4c/0x60 [ 877.207925][T18292] futex_lock_pi_atomic+0x12d/0xaf0 [ 877.207951][T18292] futex_lock_pi+0x246/0x7b0 [ 877.207975][T18292] ? __pfx_futex_lock_pi+0x10/0x10 [ 877.207998][T18292] ? __pfx___futex_wait+0x10/0x10 [ 877.208049][T18292] ? lockdep_hardirqs_on+0x78/0x100 [ 877.208090][T18292] ? __pfx_futex_wake_mark+0x10/0x10 [ 877.208117][T18292] ? ksys_write+0x190/0x250 [ 877.208131][T18292] ? ksys_write+0x190/0x250 [ 877.208150][T18292] do_futex+0x18a/0x350 [ 877.208170][T18292] ? __pfx_do_futex+0x10/0x10 [ 877.208194][T18292] __x64_sys_futex+0x34f/0x4d0 [ 877.208216][T18292] ? __pfx___x64_sys_futex+0x10/0x10 [ 877.208243][T18292] do_syscall_64+0x106/0xf80 [ 877.208264][T18292] ? clear_bhb_loop+0x40/0x90 [ 877.208282][T18292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.208298][T18292] RIP: 0033:0x7fc0fa99c799 [ 877.208312][T18292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.208327][T18292] RSP: 002b:00007fc0fb7f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 877.208341][T18292] RAX: ffffffffffffffda RBX: 00007fc0fac15fa0 RCX: 00007fc0fa99c799 [ 877.208352][T18292] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 877.208360][T18292] RBP: 00007fc0faa32c99 R08: 0000000000000000 R09: 000000008000fff5 [ 877.208370][T18292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.208379][T18292] R13: 00007fc0fac16038 R14: 00007fc0fac15fa0 R15: 00007ffc334ae518 [ 877.208399][T18292] [ 878.308852][T18305] FAULT_INJECTION: forcing a failure. [ 878.308852][T18305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.322690][T18305] CPU: 0 UID: 0 PID: 18305 Comm: syz.1.2595 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.322715][T18305] Tainted: [L]=SOFTLOCKUP [ 878.322720][T18305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 878.322730][T18305] Call Trace: [ 878.322735][T18305] [ 878.322740][T18305] dump_stack_lvl+0x100/0x190 [ 878.322767][T18305] should_fail_ex.cold+0x5/0xa [ 878.322786][T18305] core_sys_select+0x5d1/0xbb0 [ 878.322805][T18305] ? __pfx_core_sys_select+0x10/0x10 [ 878.322818][T18305] ? get_pid_task+0xfc/0x250 [ 878.322840][T18305] ? get_pid_task+0x106/0x250 [ 878.322870][T18305] ? __mutex_unlock_slowpath+0x15c/0x790 [ 878.322893][T18305] ? __fget_files+0x215/0x3d0 [ 878.322907][T18305] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 878.322939][T18305] kern_select+0x20c/0x270 [ 878.322955][T18305] ? __pfx_kern_select+0x10/0x10 [ 878.322972][T18305] ? __pfx_ksys_write+0x10/0x10 [ 878.322989][T18305] __x64_sys_select+0xbd/0x160 [ 878.323002][T18305] ? do_syscall_64+0x95/0xf80 [ 878.323022][T18305] ? lockdep_hardirqs_on+0x78/0x100 [ 878.323042][T18305] do_syscall_64+0x106/0xf80 [ 878.323062][T18305] ? clear_bhb_loop+0x40/0x90 [ 878.323079][T18305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.323094][T18305] RIP: 0033:0x7fc0fa99c799 [ 878.323107][T18305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.323121][T18305] RSP: 002b:00007fc0fb7d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 878.323135][T18305] RAX: ffffffffffffffda RBX: 00007fc0fac16090 RCX: 00007fc0fa99c799 [ 878.323145][T18305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 878.323153][T18305] RBP: 00007fc0fb7d0090 R08: 0000000000000000 R09: 0000000000000000 [ 878.323162][T18305] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 878.323170][T18305] R13: 00007fc0fac16128 R14: 00007fc0fac16090 R15: 00007ffc334ae518 [ 878.323189][T18305] [ 884.276180][T18364] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 885.465515][T18375] [U] [ 885.468240][T18375] [U] [ 885.470918][T18375] [U] [ 885.473601][T18375] [U] [ 885.478067][T18375] [U] [ 885.480769][T18375] [U] [ 885.483442][T18375] [U] [ 885.486114][T18375] [U] [ 885.490978][T18374] [U] [ 886.579705][T18387] synth uevent: /bus/mei: unknown uevent action string [ 888.620116][T18402] [U] [ 888.622832][T18402] [U] [ 888.625506][T18402] [U] [ 888.628177][T18402] [U] [ 888.631785][T18402] [U] [ 888.634476][T18402] [U] [ 888.637148][T18402] [U] [ 888.639818][T18402] [U] [ 888.647127][T18401] [U] [ 888.807567][T18410] FAULT_INJECTION: forcing a failure. [ 888.807567][T18410] name failslab, interval 1, probability 0, space 0, times 0 [ 888.821615][T18410] CPU: 0 UID: 0 PID: 18410 Comm: syz.1.2622 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.821642][T18410] Tainted: [L]=SOFTLOCKUP [ 888.821648][T18410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.821657][T18410] Call Trace: [ 888.821664][T18410] [ 888.821671][T18410] dump_stack_lvl+0x100/0x190 [ 888.821702][T18410] should_fail_ex.cold+0x5/0xa [ 888.821723][T18410] should_failslab+0xc2/0x120 [ 888.821742][T18410] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 888.821765][T18410] ? vm_area_alloc+0x1f/0x160 [ 888.821784][T18410] ? vma_merge_new_range+0x38b/0xa30 [ 888.821806][T18410] ? __pfx___sanitizer_cov_trace_const_cmp8+0x10/0x10 [ 888.821826][T18410] vm_area_alloc+0x1f/0x160 [ 888.821846][T18410] __mmap_region+0x10cc/0x29e0 [ 888.821871][T18410] ? __pfx___mmap_region+0x10/0x10 [ 888.821897][T18410] ? set_next_entity+0x11e/0x9c0 [ 888.821923][T18410] ? __lock_acquire+0x4a5/0x2630 [ 888.821951][T18410] ? find_held_lock+0x2b/0x80 [ 888.821976][T18410] ? finish_task_switch.isra.0+0x200/0xb80 [ 888.821994][T18410] ? finish_task_switch.isra.0+0x200/0xb80 [ 888.822019][T18410] ? trace_sched_exit_tp+0x13a/0x180 [ 888.822039][T18410] ? __schedule+0x1000/0x6120 [ 888.822086][T18410] ? rcu_is_watching+0x12/0xc0 [ 888.822111][T18410] ? cap_capable+0x107/0x460 [ 888.822139][T18410] mmap_region+0x180/0x3e0 [ 888.822164][T18410] do_mmap+0xc63/0x12f0 [ 888.822185][T18410] ? __pfx_do_mmap+0x10/0x10 [ 888.822202][T18410] ? __pfx_down_write_killable+0x10/0x10 [ 888.822222][T18410] vm_mmap_pgoff+0x29e/0x470 [ 888.822243][T18410] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 888.822262][T18410] ? do_futex+0x192/0x350 [ 888.822282][T18410] ? __pfx_do_futex+0x10/0x10 [ 888.822305][T18410] ksys_mmap_pgoff+0xe1/0x650 [ 888.822321][T18410] ? __x64_sys_futex+0x34f/0x4d0 [ 888.822340][T18410] ? __x64_sys_futex+0x358/0x4d0 [ 888.822359][T18410] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 888.822376][T18410] ? xfd_validate_state+0x129/0x190 [ 888.822402][T18410] __x64_sys_mmap+0x125/0x190 [ 888.822426][T18410] do_syscall_64+0x106/0xf80 [ 888.822447][T18410] ? clear_bhb_loop+0x40/0x90 [ 888.822466][T18410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.822481][T18410] RIP: 0033:0x7fc0fa99c799 [ 888.822495][T18410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.822510][T18410] RSP: 002b:00007fc0fb7f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 888.822524][T18410] RAX: ffffffffffffffda RBX: 00007fc0fac15fa0 RCX: 00007fc0fa99c799 [ 888.822535][T18410] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 888.822544][T18410] RBP: 00007fc0faa32c99 R08: 0000000000000002 R09: 0000000000008000 [ 888.822553][T18410] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 888.822563][T18410] R13: 00007fc0fac16038 R14: 00007fc0fac15fa0 R15: 00007ffc334ae518 [ 888.822584][T18410] [ 889.138899][ C0] sd 0:0:1:0: [sda] tag#691 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 889.149415][ C0] sd 0:0:1:0: [sda] tag#691 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 890.293187][T18425] [U] [ 890.295902][T18425] [U] [ 890.298573][T18425] [U] [ 890.301243][T18425] [U] [ 890.304576][T18425] [U] [ 890.307263][T18425] [U] [ 890.309936][T18425] [U] [ 890.312634][T18425] [U] [ 890.317394][T18424] [U] [ 890.415904][T18433] FAULT_INJECTION: forcing a failure. [ 890.415904][T18433] name failslab, interval 1, probability 0, space 0, times 0 [ 890.428764][T18433] CPU: 0 UID: 0 PID: 18433 Comm: syz.1.2626 Tainted: G L syzkaller #0 PREEMPT(full) [ 890.428788][T18433] Tainted: [L]=SOFTLOCKUP [ 890.428793][T18433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.428802][T18433] Call Trace: [ 890.428809][T18433] [ 890.428816][T18433] dump_stack_lvl+0x100/0x190 [ 890.428844][T18433] should_fail_ex.cold+0x5/0xa [ 890.428862][T18433] ? tomoyo_realpath_from_path+0xb6/0x690 [ 890.428884][T18433] should_failslab+0xc2/0x120 [ 890.428901][T18433] __kmalloc_noprof+0xe0/0x850 [ 890.428927][T18433] tomoyo_realpath_from_path+0xb6/0x690 [ 890.428950][T18433] tomoyo_path_number_perm+0x23c/0x580 [ 890.428966][T18433] ? tomoyo_path_number_perm+0x22e/0x580 [ 890.428984][T18433] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 890.429007][T18433] ? rcu_read_lock_any_held+0x6a/0xa0 [ 890.429033][T18433] ? fd_install+0x24f/0x580 [ 890.429047][T18433] ? hook_file_ioctl_common+0x146/0x410 [ 890.429073][T18433] security_file_ioctl+0xd3/0x230 [ 890.429092][T18433] __x64_sys_ioctl+0xb7/0x210 [ 890.429115][T18433] do_syscall_64+0x106/0xf80 [ 890.429136][T18433] ? clear_bhb_loop+0x40/0x90 [ 890.429154][T18433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.429169][T18433] RIP: 0033:0x7fc0fa99c799 [ 890.429183][T18433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.429197][T18433] RSP: 002b:00007fc0fb7f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 890.429211][T18433] RAX: ffffffffffffffda RBX: 00007fc0fac15fa0 RCX: 00007fc0fa99c799 [ 890.429221][T18433] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000002 [ 890.429230][T18433] RBP: 00007fc0fb7f1090 R08: 0000000000000000 R09: 0000000000000000 [ 890.429239][T18433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.429247][T18433] R13: 00007fc0fac16038 R14: 00007fc0fac15fa0 R15: 00007ffc334ae518 [ 890.429267][T18433] [ 890.429273][T18433] ERROR: Out of memory at tomoyo_realpath_from_path. [ 890.847417][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 890.859224][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 890.868759][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 890.877317][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 890.887422][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 891.095019][T18446] FAULT_INJECTION: forcing a failure. [ 891.095019][T18446] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 891.120622][T18446] CPU: 0 UID: 0 PID: 18446 Comm: syz.1.2628 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.120647][T18446] Tainted: [L]=SOFTLOCKUP [ 891.120652][T18446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.120661][T18446] Call Trace: [ 891.120667][T18446] [ 891.120672][T18446] dump_stack_lvl+0x100/0x190 [ 891.120700][T18446] should_fail_ex.cold+0x5/0xa [ 891.120715][T18446] ? prepare_alloc_pages+0x16d/0x5f0 [ 891.120734][T18446] should_fail_alloc_page+0xeb/0x140 [ 891.120751][T18446] prepare_alloc_pages+0x1f0/0x5f0 [ 891.120768][T18446] ? unwind_get_return_address+0x59/0xa0 [ 891.120794][T18446] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 891.120821][T18446] ? stack_trace_save+0x8e/0xc0 [ 891.120836][T18446] ? __pfx_stack_trace_save+0x10/0x10 [ 891.120851][T18446] ? stack_depot_save_flags+0x27/0x9d0 [ 891.120872][T18446] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 891.120894][T18446] ? kasan_save_stack+0x30/0x50 [ 891.120916][T18446] ? __kasan_slab_alloc+0x89/0x90 [ 891.120929][T18446] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 891.120949][T18446] ? __pmd_alloc+0xbf/0x950 [ 891.120967][T18446] ? __handle_mm_fault+0xa99/0x2b60 [ 891.120985][T18446] ? handle_mm_fault+0x36d/0xa20 [ 891.121002][T18446] ? do_user_addr_fault+0x74c/0x12f0 [ 891.121016][T18446] ? exc_page_fault+0x6f/0xd0 [ 891.121035][T18446] ? asm_exc_page_fault+0x26/0x30 [ 891.121049][T18446] ? rep_movs_alternative+0x4a/0x90 [ 891.121072][T18446] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 891.121088][T18446] ? policy_nodemask+0xed/0x4f0 [ 891.121106][T18446] alloc_pages_mpol+0x1fb/0x550 [ 891.121123][T18446] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 891.121143][T18446] ? __pfx_filemap_map_pages+0x10/0x10 [ 891.121164][T18446] alloc_pages_noprof+0x131/0x390 [ 891.121181][T18446] pte_alloc_one+0x1c/0x3d0 [ 891.121197][T18446] __do_fault+0x359/0x550 [ 891.121214][T18446] ? __pfx_filemap_map_pages+0x10/0x10 [ 891.121234][T18446] do_fault+0x2db/0x1990 [ 891.121250][T18446] ? __pmd_alloc+0x3fb/0x950 [ 891.121268][T18446] __handle_mm_fault+0x180f/0x2b60 [ 891.121290][T18446] ? mt_find+0x45e/0x8e0 [ 891.121305][T18446] ? __pfx___handle_mm_fault+0x10/0x10 [ 891.121323][T18446] ? __pfx_mt_find+0x10/0x10 [ 891.121347][T18446] ? find_vma+0xbf/0x140 [ 891.121361][T18446] ? __pfx_find_vma+0x10/0x10 [ 891.121377][T18446] handle_mm_fault+0x36d/0xa20 [ 891.121401][T18446] do_user_addr_fault+0x74c/0x12f0 [ 891.121420][T18446] exc_page_fault+0x6f/0xd0 [ 891.121441][T18446] asm_exc_page_fault+0x26/0x30 [ 891.121455][T18446] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 891.121472][T18446] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 891.121486][T18446] RSP: 0018:ffffc90004fafda0 EFLAGS: 00050206 [ 891.121499][T18446] RAX: 0000000000000001 RBX: 0000000000000068 RCX: 0000000000000068 [ 891.121508][T18446] RDX: 0000000000000001 RSI: ffffc90004fafe20 RDI: 0000000000000001 [ 891.121517][T18446] RBP: 0000000000000001 R08: 0000000000000000 R09: fffff520009f5fd0 [ 891.121526][T18446] R10: ffffc90004fafe87 R11: 0000000000000000 R12: ffffc90004fafe20 [ 891.121535][T18446] R13: 0000000000000069 R14: 00007ffffffff000 R15: 0000000000000000 [ 891.121554][T18446] _copy_to_user+0xa4/0xd0 [ 891.121574][T18446] ksys_semctl.constprop.0+0x299/0x2e0 [ 891.121592][T18446] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 891.121621][T18446] do_syscall_64+0x106/0xf80 [ 891.121640][T18446] ? clear_bhb_loop+0x40/0x90 [ 891.121658][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.121672][T18446] RIP: 0033:0x7fc0fa99c799 [ 891.121684][T18446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.121698][T18446] RSP: 002b:00007fc0fb7f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 891.121711][T18446] RAX: ffffffffffffffda RBX: 00007fc0fac15fa0 RCX: 00007fc0fa99c799 [ 891.121720][T18446] RDX: 0000000000000002 RSI: 0000000024000000 RDI: 0000000000000002 [ 891.121729][T18446] RBP: 00007fc0fb7f1090 R08: 0000000000000000 R09: 0000000000000000 [ 891.121738][T18446] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 891.121746][T18446] R13: 00007fc0fac16038 R14: 00007fc0fac15fa0 R15: 00007ffc334ae518 [ 891.121765][T18446] [ 891.599231][T18438] chnl_net:caif_netlink_parms(): no params data found [ 891.685274][T18438] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.692442][T18438] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.699807][T18438] bridge_slave_0: entered allmulticast mode [ 891.707009][T18438] bridge_slave_0: entered promiscuous mode [ 891.715533][T18438] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.722651][T18438] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.729839][T18438] bridge_slave_1: entered allmulticast mode [ 891.736926][T18438] bridge_slave_1: entered promiscuous mode [ 891.762910][T18438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.775092][T18438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.803141][T18438] team0: Port device team_slave_0 added [ 891.810949][T18438] team0: Port device team_slave_1 added [ 891.834965][T18438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.842008][T18438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.867958][T18438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.880552][T18438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.887544][T18438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.914212][T18438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.953552][T18438] hsr_slave_0: entered promiscuous mode [ 891.959918][T18438] hsr_slave_1: entered promiscuous mode [ 891.966112][T18438] debugfs: 'hsr0' already exists in 'hsr' [ 891.971886][T18438] Cannot create hsr debugfs directory [ 892.912026][T12797] Bluetooth: hci6: command tx timeout [ 894.993053][T12797] Bluetooth: hci6: command tx timeout [ 897.074131][T12797] Bluetooth: hci6: command tx timeout [ 899.155295][T12797] Bluetooth: hci6: command tx timeout [ 906.525742][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 906.535735][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 906.546402][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 906.554237][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 906.563915][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 906.712116][T18460] chnl_net:caif_netlink_parms(): no params data found [ 906.782665][T18460] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.789945][T18460] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.797188][T18460] bridge_slave_0: entered allmulticast mode [ 906.804869][T18460] bridge_slave_0: entered promiscuous mode [ 906.812966][T18460] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.820399][T18460] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.827635][T18460] bridge_slave_1: entered allmulticast mode [ 906.835969][T18460] bridge_slave_1: entered promiscuous mode [ 906.866735][T18460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.879474][T18460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.907259][T18460] team0: Port device team_slave_0 added [ 906.915172][T18460] team0: Port device team_slave_1 added [ 906.940858][T18460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.947837][T18460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.976734][T18460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.989911][T18460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.996894][T18460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.023382][T18460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.065576][T18460] hsr_slave_0: entered promiscuous mode [ 907.072809][T18460] hsr_slave_1: entered promiscuous mode [ 907.081396][T18460] debugfs: 'hsr0' already exists in 'hsr' [ 907.087123][T18460] Cannot create hsr debugfs directory [ 908.530940][T12797] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 908.540718][T12797] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 908.549031][T12797] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 908.557749][T12797] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 908.565391][T12797] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 908.601430][T12797] Bluetooth: hci7: command tx timeout [ 908.716976][T18471] chnl_net:caif_netlink_parms(): no params data found [ 908.786925][T18471] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.795437][T18471] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.803221][T18471] bridge_slave_0: entered allmulticast mode [ 908.810753][T18471] bridge_slave_0: entered promiscuous mode [ 908.818686][T18471] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.826332][T18471] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.833878][T18471] bridge_slave_1: entered allmulticast mode [ 908.843841][T18471] bridge_slave_1: entered promiscuous mode [ 908.872183][T18471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.884737][T18471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.914505][T18471] team0: Port device team_slave_0 added [ 908.923393][T18471] team0: Port device team_slave_1 added [ 908.947515][T18471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.956512][T18471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.983909][T18471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.996199][T18471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.004527][T18471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.030987][T18471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.074615][T18471] hsr_slave_0: entered promiscuous mode [ 909.081576][T18471] hsr_slave_1: entered promiscuous mode [ 909.088440][T18471] debugfs: 'hsr0' already exists in 'hsr' [ 909.094675][T18471] Cannot create hsr debugfs directory [ 910.600956][T12797] Bluetooth: hci8: command tx timeout [ 910.680973][T12797] Bluetooth: hci7: command tx timeout [ 912.681972][T12797] Bluetooth: hci8: command tx timeout [ 912.762051][ T5837] Bluetooth: hci7: command tx timeout [ 914.762922][ T5837] Bluetooth: hci8: command tx timeout [ 914.843044][ T5837] Bluetooth: hci7: command tx timeout [ 916.844001][ T5837] Bluetooth: hci8: command tx timeout [ 931.894376][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.900668][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.104065][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 951.602119][T18486] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 951.612475][T18486] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 951.626255][T18486] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 951.635580][T18486] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 951.643410][T18486] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 951.811036][T18483] chnl_net:caif_netlink_parms(): no params data found [ 951.968298][T18483] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.991687][T18483] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.998999][T18483] bridge_slave_0: entered allmulticast mode [ 952.022824][T18483] bridge_slave_0: entered promiscuous mode [ 952.032292][T18483] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.040834][T18483] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.063120][T18483] bridge_slave_1: entered allmulticast mode [ 952.071868][T18483] bridge_slave_1: entered promiscuous mode [ 952.134584][T18483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.164248][T18483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.233971][T18483] team0: Port device team_slave_0 added [ 952.252919][T18483] team0: Port device team_slave_1 added [ 952.298121][T18483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.313656][T18483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.371772][T18483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.411991][T18483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.419001][T18483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.481816][T18483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.566437][T18483] hsr_slave_0: entered promiscuous mode [ 952.582891][T18483] hsr_slave_1: entered promiscuous mode [ 952.592094][T18483] debugfs: 'hsr0' already exists in 'hsr' [ 952.597823][T18483] Cannot create hsr debugfs directory [ 953.742434][T12797] Bluetooth: hci9: command tx timeout [ 954.469110][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 955.823431][ T5837] Bluetooth: hci9: command tx timeout [ 957.904543][ T5837] Bluetooth: hci9: command tx timeout [ 959.985563][ T5837] Bluetooth: hci9: command tx timeout [ 966.604067][T12797] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 966.613032][T12797] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 966.620858][T12797] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 966.630341][T12797] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 966.638197][T12797] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 966.804869][T18499] chnl_net:caif_netlink_parms(): no params data found [ 966.874397][T18499] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.881718][T18499] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.890305][T18499] bridge_slave_0: entered allmulticast mode [ 966.897699][T18499] bridge_slave_0: entered promiscuous mode [ 966.906109][T18499] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.913590][T18499] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.921159][T18499] bridge_slave_1: entered allmulticast mode [ 966.928365][T18499] bridge_slave_1: entered promiscuous mode [ 966.958841][T18499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.974272][T18499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.003844][T18499] team0: Port device team_slave_0 added [ 967.011821][T18499] team0: Port device team_slave_1 added [ 967.036486][T18499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.043855][T18499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.070806][T18499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.085330][T18499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.093613][T18499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.120746][T18499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.160999][T18499] hsr_slave_0: entered promiscuous mode [ 967.167467][T18499] hsr_slave_1: entered promiscuous mode [ 967.174163][T18499] debugfs: 'hsr0' already exists in 'hsr' [ 967.181145][T18499] Cannot create hsr debugfs directory [ 968.610464][T18486] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 968.619159][T18486] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 968.631350][T18486] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 968.639094][T18486] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 968.647010][T18486] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 968.710420][T18510] Bluetooth: hci10: command tx timeout [ 968.804967][T18512] chnl_net:caif_netlink_parms(): no params data found [ 968.876736][T18512] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.884099][T18512] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.891750][T18512] bridge_slave_0: entered allmulticast mode [ 968.899001][T18512] bridge_slave_0: entered promiscuous mode [ 968.907437][T18512] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.914813][T18512] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.923091][T18512] bridge_slave_1: entered allmulticast mode [ 968.930556][T18512] bridge_slave_1: entered promiscuous mode [ 968.963705][T18512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.975909][T18512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.004699][T18512] team0: Port device team_slave_0 added [ 969.012968][T18512] team0: Port device team_slave_1 added [ 969.041702][T18512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.048658][T18512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.077109][T18512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.089551][T18512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.096855][T18512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.124769][T18512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.166663][T18512] hsr_slave_0: entered promiscuous mode [ 969.173371][T18512] hsr_slave_1: entered promiscuous mode [ 969.179493][T18512] debugfs: 'hsr0' already exists in 'hsr' [ 969.187815][T18512] Cannot create hsr debugfs directory [ 969.835505][T12797] Bluetooth: hci1: command 0x0406 tx timeout [ 970.711058][T12797] Bluetooth: hci11: command tx timeout [ 970.791253][T12797] Bluetooth: hci10: command tx timeout [ 972.792014][T12797] Bluetooth: hci11: command tx timeout [ 972.873575][T18510] Bluetooth: hci10: command tx timeout [ 974.873052][T18510] Bluetooth: hci11: command tx timeout [ 974.953481][T18510] Bluetooth: hci5: command 0x0406 tx timeout [ 974.959692][T18510] Bluetooth: hci10: command tx timeout [ 976.954198][T18510] Bluetooth: hci11: command tx timeout [ 977.995114][ T31] INFO: task kworker/u8:9:4553 blocked for more than 143 seconds. [ 978.002954][ T31] Tainted: G L syzkaller #0 [ 978.012560][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 978.021497][ T31] task:kworker/u8:9 state:D stack:23512 pid:4553 tgid:4553 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 978.034369][ T31] Workqueue: netns cleanup_net [ 978.039936][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 978.043242][ T31] [ 978.051455][ T31] __schedule+0xfee/0x6120 [ 978.064550][ T31] ? __lock_acquire+0x4a5/0x2630 [ 978.069548][ T31] ? __pfx___schedule+0x10/0x10 [ 978.084807][ T31] ? find_held_lock+0x2b/0x80 [ 978.089509][ T31] ? schedule+0x2bf/0x390 [ 978.093860][ T31] schedule+0xdd/0x390 [ 978.114504][ T31] schedule_timeout+0x1b2/0x280 [ 978.119388][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 978.134683][ T31] __wait_for_common+0x2e7/0x4c0 [ 978.144603][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 978.150056][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 978.174553][ T31] remove_one+0x312/0x420 [ 978.179067][ T31] ? find_next_child+0x18f/0x280 [ 978.184001][ T31] __simple_recursive_removal+0x148/0x5c0 [ 978.206185][ T31] ? __pfx_remove_one+0x10/0x10 [ 978.211111][ T31] debugfs_remove+0x5d/0x80 [ 978.224659][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 978.229892][ T31] nsim_dev_reload_destroy+0x144/0x4a0 [ 978.244801][ T31] nsim_dev_reload_down+0x66/0xd0 [ 978.249862][ T31] devlink_reload+0x173/0x790 [ 978.265430][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 978.270684][ T31] devlink_pernet_pre_exit+0x222/0x330 [ 978.294598][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 978.300614][ T31] ? kobject_put+0xb9/0x640 [ 978.316838][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 978.322865][ T31] ops_undo_list+0x187/0xab0 [ 978.334844][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 978.339978][ T31] ? cleanup_net+0x332/0x920 [ 978.354627][ T31] ? cleanup_net+0x332/0x920 [ 978.364871][ T31] ? idr_destroy+0x62/0x2e0 [ 978.369471][ T31] cleanup_net+0x499/0x920 [ 978.373902][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 978.447138][ T31] ? rcu_is_watching+0x12/0xc0 [ 978.451954][ T31] process_one_work+0xa23/0x19a0 [ 978.478102][ T31] ? __pfx_process_one_work+0x10/0x10 [ 978.483623][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 978.489016][ T31] worker_thread+0x5ef/0xe50 [ 978.493676][ T31] ? __pfx_worker_thread+0x10/0x10 [ 978.499497][ T31] ? kthread+0x13a/0x450 [ 978.503769][ T31] ? __pfx_worker_thread+0x10/0x10 [ 978.509278][ T31] kthread+0x370/0x450 [ 978.513373][ T31] ? __pfx_kthread+0x10/0x10 [ 978.518314][ T31] ret_from_fork+0x754/0xd80 [ 978.522910][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 978.528423][ T31] ? __switch_to+0x7b4/0x1120 [ 978.533102][ T31] ? __pfx_kthread+0x10/0x10 [ 978.539527][ T31] ret_from_fork_asm+0x1a/0x30 [ 978.544327][ T31] [ 978.577221][ T31] INFO: task syz-executor:17735 blocked for more than 143 seconds. [ 978.594762][ T31] Tainted: G L syzkaller #0 [ 978.601275][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 978.640112][ T31] task:syz-executor state:D stack:24984 pid:17735 tgid:17735 ppid:1 task_flags:0x400140 flags:0x00080002 [ 978.665826][ T31] Call Trace: [ 978.669131][ T31] [ 978.672054][ T31] __schedule+0xfee/0x6120 [ 978.685184][ T31] ? __lock_acquire+0x4a5/0x2630 [ 978.690171][ T31] ? __pfx___schedule+0x10/0x10 [ 978.705102][ T31] ? find_held_lock+0x2b/0x80 [ 978.709805][ T31] ? schedule+0x2bf/0x390 [ 978.714160][ T31] schedule+0xdd/0x390 [ 978.734827][ T31] schedule_preempt_disabled+0x13/0x30 [ 978.740320][ T31] __mutex_lock+0xc9a/0x1b90 [ 978.756409][ T31] ? device_del+0xa0/0x9b0 [ 978.760884][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 978.784918][ T31] ? mark_held_locks+0x40/0x70 [ 978.789717][ T31] ? device_del+0xa0/0x9b0 [ 978.794143][ T31] device_del+0xa0/0x9b0 [ 978.811638][ T31] ? __pfx_ida_free+0x10/0x10 [ 978.816984][ T31] ? __pfx_device_del+0x10/0x10 [ 978.821840][ T31] ? __lock_acquire+0x4a5/0x2630 [ 978.829316][ T31] device_unregister+0x1d/0xe0 [ 978.834130][ T31] del_device_store+0x346/0x480 [ 978.839621][ T31] ? __pfx_del_device_store+0x10/0x10 [ 978.845347][ T31] ? find_held_lock+0x2b/0x80 [ 978.850019][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 978.855795][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 978.860720][ T31] ? __pfx_del_device_store+0x10/0x10 [ 978.868048][ T31] bus_attr_store+0x74/0xb0 [ 978.873606][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 978.880433][ T31] sysfs_kf_write+0xf2/0x150 [ 978.885341][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 978.890626][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 978.896219][ T31] vfs_write+0x6ac/0x1070 [ 978.900556][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 978.906793][ T31] ? __pfx_vfs_write+0x10/0x10 [ 978.911586][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 978.917036][ T31] ksys_write+0x12a/0x250 [ 978.921363][ T31] ? __pfx_ksys_write+0x10/0x10 [ 978.926572][ T31] do_syscall_64+0x106/0xf80 [ 978.931188][ T31] ? clear_bhb_loop+0x40/0x90 [ 978.936211][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.942105][ T31] RIP: 0033:0x7f6718d5cfce [ 978.947161][ T31] RSP: 002b:00007ffe92292648 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 978.962934][ T31] RAX: ffffffffffffffda RBX: 0000555555624500 RCX: 00007f6718d5cfce [ 978.971210][ T31] RDX: 0000000000000001 RSI: 00007ffe922926d0 RDI: 0000000000000005 [ 978.982671][ T31] RBP: 00007f6718e3351c R08: 0000000000000000 R09: 0000000000000000 [ 978.991005][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.999190][ T31] R13: 00007ffe922926d0 R14: 00007f6719b44620 R15: 0000000000000003 [ 979.007411][ T31] [ 979.033874][ T31] INFO: task syz.0.2464:17751 blocked for more than 144 seconds. [ 979.050720][ T31] Tainted: G L syzkaller #0 [ 979.058091][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 979.067733][ T31] task:syz.0.2464 state:D stack:26792 pid:17751 tgid:17742 ppid:5822 task_flags:0x400140 flags:0x00080002 [ 979.080877][ T31] Call Trace: [ 979.084161][ T31] [ 979.089027][ T31] __schedule+0xfee/0x6120 [ 979.093479][ T31] ? __lock_acquire+0x4a5/0x2630 [ 979.098713][ T31] ? __pfx___schedule+0x10/0x10 [ 979.103592][ T31] ? find_held_lock+0x2b/0x80 [ 979.108763][ T31] ? schedule+0x2bf/0x390 [ 979.113125][ T31] schedule+0xdd/0x390 [ 979.118084][ T31] schedule_preempt_disabled+0x13/0x30 [ 979.123569][ T31] __mutex_lock+0xc9a/0x1b90 [ 979.128652][ T31] ? netlink_has_listeners+0x20f/0x430 [ 979.134167][ T31] ? devlink_health_report+0x681/0xb50 [ 979.140075][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 979.145456][ T31] ? devlink_recover_notify.constprop.0+0x200/0x670 [ 979.152046][ T31] ? __lock_acquire+0x441/0x2630 [ 979.157449][ T31] ? devlink_health_report+0x681/0xb50 [ 979.163573][ T31] devlink_health_report+0x681/0xb50 [ 979.169545][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 979.175552][ T31] ? _copy_from_user+0x59/0xd0 [ 979.181340][ T31] nsim_dev_health_break_write+0x166/0x210 [ 979.188370][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 979.194739][ T31] full_proxy_write+0x135/0x1a0 [ 979.201734][ T31] vfs_write+0x2aa/0x1070 [ 979.206294][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 979.211692][ T31] ? __pfx_vfs_write+0x10/0x10 [ 979.216801][ T31] ? __fget_files+0x215/0x3d0 [ 979.221490][ T31] ? __fget_files+0x21f/0x3d0 [ 979.226529][ T31] ksys_write+0x12a/0x250 [ 979.230902][ T31] ? __pfx_ksys_write+0x10/0x10 [ 979.236121][ T31] do_syscall_64+0x106/0xf80 [ 979.240723][ T31] ? clear_bhb_loop+0x40/0x90 [ 979.245777][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.251671][ T31] RIP: 0033:0x7fcd65d9c799 [ 979.256405][ T31] RSP: 002b:00007fcd66baf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 979.265970][ T31] RAX: ffffffffffffffda RBX: 00007fcd66016180 RCX: 00007fcd65d9c799 [ 979.273964][ T31] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000008 [ 979.285519][ T31] RBP: 00007fcd65e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 979.293538][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.301925][ T31] R13: 00007fcd66016218 R14: 00007fcd66016180 R15: 00007ffdc34e33b8 [ 979.311787][ T31] [ 979.327498][ T31] INFO: task syz.3.2473:17778 blocked for more than 144 seconds. [ 979.336023][ T31] Tainted: G L syzkaller #0 [ 979.342528][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 979.351807][ T31] task:syz.3.2473 state:D stack:26792 pid:17778 tgid:17774 ppid:17437 task_flags:0x400140 flags:0x00080002 [ 979.365603][ T31] Call Trace: [ 979.369500][ T31] [ 979.372446][ T31] __schedule+0xfee/0x6120 [ 979.377364][ T31] ? __lock_acquire+0x4a5/0x2630 [ 979.383300][ T31] ? __pfx___schedule+0x10/0x10 [ 979.388429][ T31] ? find_held_lock+0x2b/0x80 [ 979.393136][ T31] ? schedule+0x2bf/0x390 [ 979.399739][ T31] schedule+0xdd/0x390 [ 979.403822][ T31] schedule_preempt_disabled+0x13/0x30 [ 979.409783][ T31] rwsem_down_read_slowpath+0x5dc/0xb30 [ 979.417121][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 979.423198][ T31] ? __pfx___might_resched+0x10/0x10 [ 979.428869][ T31] down_read+0xed/0x460 [ 979.433022][ T31] ? __pfx_down_read+0x10/0x10 [ 979.439224][ T31] ? mnt_get_write_access+0x1e9/0x2f0 [ 979.444633][ T31] path_openat+0xa16/0x31a0 [ 979.449470][ T31] ? __pfx_path_openat+0x10/0x10 [ 979.454414][ T31] do_file_open+0x20e/0x430 [ 979.459193][ T31] ? __pfx_do_file_open+0x10/0x10 [ 979.464260][ T31] ? alloc_fd+0x476/0x790 [ 979.469547][ T31] ? do_getname+0x191/0x390 [ 979.474091][ T31] do_sys_openat2+0x10d/0x1e0 [ 979.479219][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 979.485705][ T31] __x64_sys_openat+0x12d/0x210 [ 979.490561][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 979.496282][ T31] do_syscall_64+0x106/0xf80 [ 979.500881][ T31] ? clear_bhb_loop+0x40/0x90 [ 979.506205][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.512126][ T31] RIP: 0033:0x7f9b7cb9c799 [ 979.518584][ T31] RSP: 002b:00007f9b7d9ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 979.529020][ T31] RAX: ffffffffffffffda RBX: 00007f9b7ce16180 RCX: 00007f9b7cb9c799 [ 979.537279][ T31] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 979.545502][ T31] RBP: 00007f9b7cc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 979.553464][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.561835][ T31] R13: 00007f9b7ce16218 R14: 00007f9b7ce16180 R15: 00007ffe4bcbbe78 [ 979.570116][ T31] [ 979.573798][ T31] [ 979.573798][ T31] Showing all locks held in the system: [ 979.586325][ T31] 1 lock held by khungtaskd/31: [ 979.605573][ T31] #0: ffffffff8e7e7720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 979.625338][ T31] 6 locks held by kworker/u8:9/4553: [ 979.630679][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 979.655511][ T31] #1: ffffc9000f23fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 979.674699][ T31] #2: ffffffff905fca90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 979.692368][ T31] #3: ffff8880782e5130 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x185/0x330 [ 979.702780][ T31] #4: ffff888079958250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x18f/0x330 [ 979.713943][ T31] #5: ffff88805b475a70 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 979.726299][ T31] 2 locks held by getty/12834: [ 979.731076][ T31] #0: ffff8880379010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 979.741248][ T31] #1: ffffc9000338b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 979.753382][ T31] 5 locks held by syz-executor/17735: [ 979.759344][ T31] #0: ffff88803615e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 979.768617][ T31] #1: ffff88805a6c0888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 979.779200][ T31] #2: ffff88802973d3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 979.789509][ T31] #3: ffffffff8fb6d868 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 979.800949][ T31] #4: ffff8880782e5130 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9b0 [ 979.810052][ T31] 3 locks held by syz.0.2464/17751: [ 979.815262][ T31] #0: ffff88807a988478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 979.824613][ T31] #1: ffff8880202e2420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 979.834047][ T31] #2: ffff888079958250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_health_report+0x681/0xb50 [ 979.846214][ T31] 2 locks held by syz.3.2473/17778: [ 979.851410][ T31] #0: ffff8880202e2420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 979.862512][ T31] #1: ffff88805b475a70 (&sb->s_type->i_mutex_key#18){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 979.873273][ T31] 4 locks held by syz-executor/17929: [ 979.879428][ T31] #0: ffff88803615e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 979.888716][ T31] #1: ffff888033f58488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 979.899767][ T31] #2: ffff88802973d3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 979.910179][ T31] #3: ffffffff8fb6d868 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 979.921600][ T31] 4 locks held by syz-executor/17950: [ 979.927404][ T31] #0: ffff88803615e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 979.936582][ T31] #1: ffff88801e748c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 979.946616][ T31] #2: ffff88802973d3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 979.957236][ T31] #3: ffffffff8fb6d868 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 979.969637][ T31] 4 locks held by syz-executor/18438: [ 979.975010][ T31] #0: ffff88803615e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 979.984895][ T31] #1: ffff88808bdc1488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 979.994983][ T31] #2: ffff88802973d3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 980.012699][ T31] #3: ffffffff8fb6d868 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 980.023268][ T31] 4 locks held by syz-executor/18460: [ 980.028914][ T31] #0: ffff88803615e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 980.038198][ T31] #1: ffff888060bafc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 980.048345][ T31] #2: ffff88802973d3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 980.058598][ T31] #3: ffffffff8fb6d868 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 980.069535][ T31] 4 locks held by syz-executor/18471: [ 980.074904][ T31] #0: ffff88803615e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 980.086830][ T31] #1: ffff888034c98c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 980.096834][ T31] #2: ffff88802973d3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 980.108125][ T31] #3: ffffffff8fb6d868 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 980.118666][ T31] 4 locks held by syz-executor/18483: [ 980.124026][ T31] #0: ffff88803615e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 980.133380][ T31] #1: ffff888040680c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 980.143333][ T31] #2: ffff88802973d3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 980.153665][ T31] #3: ffffffff8fb6d868 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 980.164232][ T31] 4 locks held by syz-executor/18499: [ 980.169924][ T31] #0: ffff88803615e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 980.179420][ T31] #1: ffff888096763c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 980.190768][ T31] #2: ffff88802973d3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 980.203082][ T31] #3: ffffffff8fb6d868 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 980.214170][ T31] 4 locks held by syz-executor/18512: [ 980.219763][ T31] #0: ffff88803615e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 980.229048][ T31] #1: ffff888096590088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 980.239629][ T31] #2: ffff88802973d3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 980.250044][ T31] #3: ffffffff8fb6d868 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 980.260685][ T31] [ 980.263000][ T31] ============================================= [ 980.263000][ T31] [ 980.273226][ T31] NMI backtrace for cpu 0 [ 980.273243][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 980.273264][ T31] Tainted: [L]=SOFTLOCKUP [ 980.273269][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 980.273278][ T31] Call Trace: [ 980.273284][ T31] [ 980.273290][ T31] dump_stack_lvl+0x100/0x190 [ 980.273318][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 980.273341][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 980.273363][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 980.273383][ T31] sys_info+0x141/0x190 [ 980.273397][ T31] watchdog+0xd25/0x1050 [ 980.273417][ T31] ? __pfx_watchdog+0x10/0x10 [ 980.273432][ T31] ? __kthread_parkme+0x18c/0x230 [ 980.273451][ T31] ? kthread+0x13a/0x450 [ 980.273468][ T31] ? __pfx_watchdog+0x10/0x10 [ 980.273480][ T31] kthread+0x370/0x450 [ 980.273498][ T31] ? __pfx_kthread+0x10/0x10 [ 980.273517][ T31] ret_from_fork+0x754/0xd80 [ 980.273538][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 980.273560][ T31] ? __switch_to+0x7b4/0x1120 [ 980.273575][ T31] ? __pfx_kthread+0x10/0x10 [ 980.273594][ T31] ret_from_fork_asm+0x1a/0x30 [ 980.273618][ T31] [ 980.401789][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 980.408732][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 980.419391][ T31] Tainted: [L]=SOFTLOCKUP [ 980.423693][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 980.433753][ T31] Call Trace: [ 980.437017][ T31] [ 980.439943][ T31] dump_stack_lvl+0x100/0x190 [ 980.444630][ T31] vpanic+0x552/0x970 [ 980.448599][ T31] ? __pfx_vpanic+0x10/0x10 [ 980.453089][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 980.459254][ T31] panic+0xd1/0xe0 [ 980.462960][ T31] ? __pfx_panic+0x10/0x10 [ 980.467362][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 980.473501][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 980.479661][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 980.485868][ T31] ? watchdog.cold+0x198/0x1ca [ 980.490636][ T31] ? watchdog+0xd35/0x1050 [ 980.495039][ T31] watchdog.cold+0x1a9/0x1ca [ 980.499628][ T31] ? __pfx_watchdog+0x10/0x10 [ 980.504290][ T31] ? __kthread_parkme+0x18c/0x230 [ 980.509303][ T31] ? kthread+0x13a/0x450 [ 980.513532][ T31] ? __pfx_watchdog+0x10/0x10 [ 980.518189][ T31] kthread+0x370/0x450 [ 980.522244][ T31] ? __pfx_kthread+0x10/0x10 [ 980.526821][ T31] ret_from_fork+0x754/0xd80 [ 980.531404][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 980.536503][ T31] ? __switch_to+0x7b4/0x1120 [ 980.541165][ T31] ? __pfx_kthread+0x10/0x10 [ 980.545741][ T31] ret_from_fork_asm+0x1a/0x30 [ 980.550505][ T31] [ 980.553566][ T31] Kernel Offset: disabled [ 980.557880][ T31] Rebooting in 86400 seconds..