last executing test programs: 23.799231734s ago: executing program 3 (id=2250): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x1, 0x800, 0xe69) getpeername$auto(0x3, 0x0, 0x0) fsetxattr$auto(r1, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x55) setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) mprotect$auto(0x0, 0x8000000000000001, 0x8) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x7aa02, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/122, 0x7a) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)=@test={r3, 0x9, 0x5, 0x2, 0x4, 0x1, 0x4, 0x9, 0x101, 0x200, 0x1, 0xef5, 0x7, 0x0, 0x1c9b262f}, 0x100) 20.876754608s ago: executing program 3 (id=2260): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x9, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sendfile$auto(r0, r0, &(0x7f0000000200)=0x4cd, 0x200) socket(0x2, 0x2, 0x0) sendmsg$auto_VDPA_CMD_DEV_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@VDPA_ATTR_DEV_QUEUE_INDEX={0x8, 0x11, 0x100}, @VDPA_ATTR_MGMTDEV_BUS_NAME={0x1a, 0x1, '/proc/fs/cifs/cifsFYI\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x41f1}, 0x24040010) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @private=0xa010101}, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 14.051707917s ago: executing program 3 (id=2275): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0xc0101, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getgroups$auto(0x7fd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/net/sctp/snmp\x00', 0x88000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/209, 0xd1) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) prctl$auto(0x2, 0x7, 0x0, 0x2, 0x1) mremap$auto(0x200001000000, 0x400000000004, 0x2, 0x3, 0x100000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x2020009, 0x4000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x0, 0x5, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x5, 0x84) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x57) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x55) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x80402, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f00000000c0)) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x209403, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) 9.862570899s ago: executing program 3 (id=2289): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) socket(0xa, 0x5, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x20002, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x1d7) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 8.943047222s ago: executing program 3 (id=2296): socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r0, 0x9, 0x0) getdents$auto(r0, 0x0, 0x62d4) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f00000001c0)="821ef1244d78f3696c8c2a7f19e10d12496f63c5723af9e32d2d6e5304de38624499dfde75d5d2e4e62b86e84ee135037738c772255922fbc6cc140d0268451dc5fd1465320a9f4696b9dac472d50cf284e3ff96a96c178540d42541aca59c1aaadc6f035236141e67200416f08f1c09fc15b4a04c862ffa04d06a23429941fd3cad3400f90805e40713bd5ec96238ceab767a9f258210431850203ca8aa499ebc0a144b44031d5ababff27862d9125cf994d86ff7", 0xb5) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') 8.738894924s ago: executing program 3 (id=2297): bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8200, 0x1, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "7829000000000000000200", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="7e7e81c2", @ANYRES16=0x0, @ANYBLOB="21022cbd7000ebdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x11, 0x0) sysfs$auto(0x1, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) read$auto(0x3, 0x0, 0x80) 8.458503661s ago: executing program 2 (id=2298): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r0 = socket(0x29, 0x2, 0x0) fcntl$auto_F_OFD_SETLKW(r0, 0x26, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x5, 0x0, 0x1fffff, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f1, 0x24) 7.409576718s ago: executing program 2 (id=2302): openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) write$auto(0x3, 0x0, 0xfdef) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/ip6gretap0/accept_source_route\x00', 0x20140, 0x0) read$auto(r0, 0x0, 0x1ff) read$auto(0x3, 0x0, 0xf34) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01236fc27994a3afbc19ff002dbd7000fedbdf250a000004000003800c00"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r4 = syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e14d7d") r5 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x7, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) r6 = getpgid$auto(0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="3405", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf25020000000800050007000000080006000300000008000400050000001001028075ff83876574dcf7444c53b88992e69a471bfa58053dc94ad66d0953fb1b9cb401c147df5f31671dfc0f9284424129a2c5ce70c649ade9aae6d814619bf71bbd80efe680cd9bc3e7aa59478b4e3e4d0ce05691deebfebdb666888d6f5549d48d92470028f2ccb239e0e683f1107459a18b09a092829949129087a8c782cb94fd36de9315f583a56ceee0e6023fa204fdb92ada8640c18311479406aa31ba39687f786747f4eaef95", @ANYRES32=0x0, @ANYBLOB="19e833e93fdf0b102a18ee6b8436634483ed5729eb26e2267dcf5d3a2eaf51db79c25d370c37cf662d480e08f268f1743cd215589548d9cb71", @ANYRES32=r4, @ANYBLOB="1800fd80040086807290395bf5dd39680400b5800400098021011a800400", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYBLOB="0800e300", @ANYRES32=r6, @ANYBLOB="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"], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0) ioctl$auto_TUNGETVNETBE2(r1, 0x800454df, &(0x7f0000000040)=0x2) 7.188755928s ago: executing program 2 (id=2303): mmap$auto(0x0, 0x4020009, 0xdf, 0x18, 0xffffffffffffffff, 0x8000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x9, 0x3, 0xffffffffffffffff, 0x100, 0x7fffffff) mmap$auto(0x0, 0x200006, 0x7, 0x40eb1, r0, 0x300000000000) mq_open$auto(0x0, 0x62, 0xfffc, 0x0) r1 = socket(0xa, 0x80803, 0x6) bind$auto(r1, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x1b) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c03, 0x0) waitid$auto(0x9, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000001c0)={{0x4, 0x4000000000002}, {0x3}, 0xffffffffffffff74, 0x3ff, 0x4, 0x3, 0x4, 0x3, 0x7c3, 0x6, 0x1, 0x3, 0x9, 0x2, 0x9, 0x200}) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd08, &(0x7f00000001c0)) poll$auto(0x0, 0x6, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/oss/sndstat\x00', 0x40441, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4004af07, r4) socket(0xa, 0x3, 0x3b) socket(0x10, 0x2, 0x4) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) ioctl$auto_EVIOCSREP(r5, 0x40084503, 0x0) 6.116056708s ago: executing program 2 (id=2306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x800, 0x0) ioctl$auto_OTPSELECT(r1, 0x80044d0d, &(0x7f0000000040)=0x1) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_RADIO_NAME={0xa, 0x11, '&@):()'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4880) 5.935919504s ago: executing program 1 (id=2307): mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x4000000000002) io_uring_setup$auto(0x101, 0x0) getgroups$auto(0xe, &(0x7f0000000000)=0x4a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop9\x00', 0x0, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = socket(0x23, 0x5, 0x0) bind$auto(r1, 0x0, 0x80) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, 0x110000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x2}) timerfd_settime$auto(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x2, 0x8000000000000000}, {0x2, 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() process_vm_readv$auto(r2, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) read$auto(r0, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x120822, 0x0) writev$auto(r3, &(0x7f00000001c0)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) io_uring_setup$auto(0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x5, 0x2) r5 = socket(0x1d, 0x2, 0x7) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$auto(r4, &(0x7f0000000040)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x206}, 0x6a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) 5.388734486s ago: executing program 0 (id=2308): bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8200, 0x1, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "7829000000000000000200", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="7e7e81c2", @ANYRES16=0x0, @ANYBLOB="21022cbd7000ebdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x11, 0x0) sysfs$auto(0x1, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) read$auto(0x3, 0x0, 0x80) 5.082699908s ago: executing program 0 (id=2309): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x220c00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x604a00, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto(0x3, 0xae41, r0) semget$auto(0x6, 0x1, 0xcb51) semget$auto(0x6, 0xb, 0x4) socket(0xa, 0x2, 0xa8) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) ioctl$auto_SG_SET_RESERVED_SIZE2(r3, 0x2275, &(0x7f0000000040)="d93ca7") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58e5820a18001000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250200000004000600"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) write$auto(0xffffffffffffffff, &(0x7f0000000080)='7\x00\xf4\x97\xff*\x8a\xeb+8A\x99\x17\xfc\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, 0x0, 0xffd8) mmap$auto(0x2, 0xe983, 0xe3, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) socket(0x2, 0x3, 0x2) socket(0x2, 0x4, 0x106) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x88) 4.617549121s ago: executing program 1 (id=2310): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) open(0x0, 0xaa4c0, 0x40) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x1000, 0x1, 0x2, 0x9faf}, "654c6dbc7a4d3098b281ed4f8207ed72d7e40000000000ebff0400000600"}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x82942, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x100000ffff}, 0x1) socket(0x2, 0x801, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x40815) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x4b68, r5) socketcall$auto(0xffe, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_MSG_STAT(0xffffffff, 0xb, &(0x7f0000000340)={{0x400, 0xffffffffffffffff, 0x0, 0x4, 0x447b, 0x4dc, 0x6c}, 0x0, &(0x7f00000001c0)=0xd6, 0x7, 0xdf, 0x80000001, 0x6, 0x5, 0xfff, 0x4, 0x101, @raw=0xf17}) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440), 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) read$auto(r7, &(0x7f0000000040)='/dev/snd/seq\x00', 0x7) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2242, 0x0) 4.551190246s ago: executing program 2 (id=2311): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) syz_clone3(&(0x7f0000000340)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x141401, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x20a000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000040)="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", 0x2ed) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/cards\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f00000000c0)=""/147, 0x93) mmap$auto(0x0, 0x8, 0x2, 0x7fffffff, 0xffffffffffffffff, 0x10c) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x3b, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.399593704s ago: executing program 0 (id=2312): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0xc000000) r0 = io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141800, 0x0) socket(0xf, 0x80805, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE2(r1, 0x4008af03, &(0x7f0000000380)={0x6, 0x0, [{0x4, 0xf61, 0x4}, {0x0, 0xa44, 0x5}]}) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r5}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x304}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f0000000000)="632d1bfe595046ab5c40bd7563307acb6d16baef6176e669a216aae183cccafdd80500ffffffff0600000000fe00"/56, 0x38) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) mbind$auto(0xf000, 0x8000000000000002, 0x100000000, 0x0, 0x6, 0x2) cachestat$auto(r1, &(0x7f0000000040)={0x6, 0xffffffffffffffc3}, &(0x7f0000000080)={0x4, 0x2b, 0xb99d, 0x7632, 0xfffffffffffffffc}, 0x2) open(0x0, 0x64842, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200c) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001000000080002", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) setsockopt$auto_SO_DONTROUTE(r0, 0x3, 0x5, &(0x7f00000000c0)='\x00', 0x1) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) 3.444104086s ago: executing program 1 (id=2313): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r1, 0x9, 0x0) getdents$auto(r1, 0x0, 0x62d4) write$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f00000001c0)="821ef1244d78f3696c8c2a7f19e10d12496f63c5723af9e32d2d6e5304de38624499dfde75d5d2e4e62b86e84ee135037738c772255922fbc6cc140d0268451dc5fd1465320a9f4696b9dac472d50cf284e3ff96a96c178540d42541aca59c1aaadc6f035236141e67200416f08f1c09fc15b4a04c862ffa04d06a23429941fd3cad3400f90805e40713bd5ec96238ceab767a9f258210431850203ca8aa499ebc0a144b44031d5ababff27862d9125cf994d86ff7", 0xb5) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'pim6reg0\x00'}) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) fchmodat2$auto(r1, &(0x7f0000000040)='}[,&*}\x00', 0x4, 0x2) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000100)={0xe, @raw=0x200, @inferred=r0, 0x6, 0x3dd0, '\x00', {0x0, 0xdc00, 0x5, 0xee01, 0x0, 0x9, 0x5, 0x8, {0x0, 0xb}, {0x6, 0x1}, {0x54, 0x47d}, 0x2, 0x1, 0x0, 0x0, 0x9688, 0xcb, 0xc, 0x9a83, 0x3, 0x4, '\x00', 0x6489, 0x0, 0x1, 0x4}}) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r3, 0x0, 0x62d4) 3.349946888s ago: executing program 0 (id=2314): socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r0, 0x9, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') 2.862857005s ago: executing program 0 (id=2315): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = prctl$auto_PR_SET_MM_ENV_START(0x665, 0xa, 0xffffffffffffffff, 0x8, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x3, 0x2) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) fanotify_init$auto(0x5, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x40401, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x540b, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002cbd7000fbdbdf25010000000500ee0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x37, &(0x7f0000000200)={0x0}}, 0x20000000) socket(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x8000, 0x63, 0x0, 0x0, 0x0, 0x8, 0x1fd, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 635.178201ms ago: executing program 2 (id=2316): sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000700)=ANY=[@ANYBLOB="1800b5fa", @ANYRES16=0x0, @ANYBLOB="010025bd7000fedbdf250200000004000200"], 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) r0 = pipe$auto(&(0x7f0000000140)=0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'dvmrp1\x00'}) mmap$auto(0x4000000000003, 0x810004, 0x9, 0x80000012, r1, 0x5) ioprio_get$auto(0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb5, 0x401, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) getsockopt$auto_SO_PEEK_OFF(r0, 0x5, 0x2a, &(0x7f00000000c0)='@(@\xc9\xe4#\\&)$\x00', &(0x7f00000001c0)=0x3) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x2c600, 0x0) ioctl$auto(r2, 0xab04, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0xc5, 0x3, 0xc115) getrusage$auto(0xfffffffd, &(0x7f0000000300)={{0x8000000000000000, 0x5}, {0x7, 0xfffffffefffffffc}, 0x3, 0x8000, 0x4, 0x9, 0xffffffffffffffff, 0x3ff, 0x6, 0xb9f, 0x3d6, 0x1, 0x3, 0x7, 0x8, 0x6}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) socket(0x10, 0x5, 0x6) accept$auto(0x3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000002, &(0x7f0000000280)={&(0x7f0000000040), 0x1ffffffff}, 0x6, 0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x5, 0x0, r4, 0x5, 0x1) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x1) mmap$auto(0x0, 0x8, 0xe1, 0x9b72, 0x2, 0x8001) setsockopt$auto(0xffffffffffffffff, 0x1, 0x12d2, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 633.400748ms ago: executing program 1 (id=2323): socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') 458.982083ms ago: executing program 1 (id=2317): fallocate$auto(0xffffffffffffffff, 0x0, 0x9, 0x4cbd5d) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x4000) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) r0 = pipe$auto(&(0x7f0000000140)=0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'dvmrp1\x00'}) mmap$auto(0x4000000000003, 0x810004, 0x9, 0x80000012, r1, 0x5) ioprio_get$auto(0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb5, 0x401, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) getsockopt$auto_SO_PEEK_OFF(r0, 0x5, 0x2a, &(0x7f00000000c0)='@(@\xc9\xe4#\\&)$\x00', &(0x7f00000001c0)=0x3) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x2c600, 0x0) ioctl$auto(r2, 0xab04, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0xc5, 0x3, 0xc115) getrusage$auto(0xfffffffd, &(0x7f0000000300)={{0x8000000000000000, 0x5}, {0x7, 0xfffffffefffffffc}, 0x3, 0x8000, 0x4, 0x9, 0xffffffffffffffff, 0x3ff, 0x6, 0xb9f, 0x3d6, 0x1, 0x3, 0x7, 0x8, 0x6}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) socket(0x10, 0x5, 0x6) accept$auto(0x3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x80) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000002, &(0x7f0000000280)={&(0x7f0000000040), 0x1ffffffff}, 0x6, 0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x5, 0x0, r4, 0x5, 0x1) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x1) mmap$auto(0x0, 0x8, 0xe1, 0x9b72, 0x2, 0x8001) setsockopt$auto(0xffffffffffffffff, 0x1, 0x12d2, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 124.526119ms ago: executing program 1 (id=2318): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(&(0x7f00000001c0)='./cgroup\x00', 0xa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') lsetxattr$auto(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000140)='\x00', &(0x7f00000003c0)="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", 0xa, 0x3) mkdir$auto(0x0, 0xfffd) r1 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) poll$auto(&(0x7f0000000280)={r1, 0xf06d, 0x4}, 0x84, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2c476942", 0x25) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffc, 0x7, 0x1, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0xc, 0xeb1, 0xffffffffffffffff, 0x8000) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) llistxattr$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='./cgroup/cgroup.type\x00', 0x3562) 0s ago: executing program 0 (id=2319): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x700000000000000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x800, 0x70bd2a, 0xa, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4f65f2a5}, @SEG6_ATTR_SECRET={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x24004010) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x28900, 0x0) ioctl$auto(r2, 0x64d0, 0x40) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) acct$auto(&(0x7f0000001580)='/dev/binderfs/binder1\x00') write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b2955", 0x5) acct$auto(&(0x7f0000000080)='/dev/binderfs/binder1\x00') syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), r1) stat$auto(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x5, 0x5, 0x4, 0x6, 0x0, 0xee00, 0x0, 0x80000001, 0x0, 0xf809, 0x6, 0xffffffff, 0xfffffffffffffff7, 0x3, 0x5, 0x10, 0xf4}) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f00000000c0)="c646c61ca87c", 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'caif0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netpci0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0\x00'}) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/controlC1\x00', 0x82200, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9"}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x80000000004, 0x7, 0x15b61f2, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x3638, 0x3, 0x4f3, 0xc, 0x4, 0x7, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x400000000084, 0xa, 0xfffffffbfffffffd, 0x6, 0x800, 0xfffffffffffffffd, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x8, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1fd, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x80000000a, 0x8000000000000001, 0x9, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0xf057, 0x40, 0x5, 0x7, 0xf8, 0x8, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) fsconfig$auto_XFS_DAX_INODE(r3, 0x7, &(0x7f0000000680)='*%[--\x00', &(0x7f0000000bc0)="40753a6599c5e85788aaace23ce020ebcee10fc465d7c26a16c553715852b7381f4ef2d9f7e8e0e25ef6cf38146d292300dffa8f1b8a7f22a1ad5187d38921c518766b956202a7390d33eda05c4a5fd13361fef5403750eb1169c6940578791d594b47d4b7edcb913a6a9390", 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan0\x00'}) capset$auto(&(0x7f0000000500)={0xfffffff7}, &(0x7f0000000540)={0x2, 0x5, 0x4}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'macvlan0\x00'}) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) kernel console output (not intermixed with test programs): 213][T13086] RIP: 0033:0x7f399a99c799 [ 581.301235][T13086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.301262][T13086] RSP: 002b:00007f399b83c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 581.301288][T13086] RAX: ffffffffffffffda RBX: 00007f399ac16090 RCX: 00007f399a99c799 [ 581.301305][T13086] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 581.301322][T13086] RBP: 00007f399b83c090 R08: 0000000000000000 R09: 0000000000000000 [ 581.301338][T13086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.301355][T13086] R13: 00007f399ac16128 R14: 00007f399ac16090 R15: 00007ffd1cdc75d8 [ 581.301391][T13086] [ 582.595101][T13113] FAULT_INJECTION: forcing a failure. [ 582.595101][T13113] name fail_futex, interval 1, probability 0, space 0, times 0 [ 582.651517][T13113] CPU: 1 UID: 0 PID: 13113 Comm: syz.1.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.651574][T13113] Tainted: [L]=SOFTLOCKUP [ 582.651585][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 582.651602][T13113] Call Trace: [ 582.651611][T13113] [ 582.651623][T13113] dump_stack_lvl+0x100/0x190 [ 582.651671][T13113] should_fail_ex.cold+0x5/0xa [ 582.651705][T13113] get_futex_key+0x1d2/0x1620 [ 582.651745][T13113] ? __pfx_get_futex_key+0x10/0x10 [ 582.651780][T13113] ? kernfs_fop_write_iter+0x1df/0x5f0 [ 582.651811][T13113] ? kasan_save_stack+0x3f/0x50 [ 582.651854][T13113] ? kasan_save_stack+0x30/0x50 [ 582.651895][T13113] ? kasan_save_track+0x14/0x30 [ 582.651937][T13113] ? kasan_save_free_info+0x3b/0x70 [ 582.651972][T13113] ? __kasan_slab_free+0x5f/0x80 [ 582.651997][T13113] ? kfree+0x1f6/0x6b0 [ 582.652029][T13113] ? kernfs_fop_write_iter+0x1df/0x5f0 [ 582.652064][T13113] futex_wait_setup+0x83/0x510 [ 582.652115][T13113] __futex_wait+0x19f/0x300 [ 582.652161][T13113] ? __pfx___futex_wait+0x10/0x10 [ 582.652212][T13113] ? __pfx_futex_wake_mark+0x10/0x10 [ 582.652260][T13113] ? futex_hash+0x2c5/0x380 [ 582.652305][T13113] futex_wait+0xed/0x380 [ 582.652347][T13113] ? __pfx_futex_wait+0x10/0x10 [ 582.652398][T13113] ? ksys_write+0x190/0x250 [ 582.652423][T13113] ? ksys_write+0x190/0x250 [ 582.652456][T13113] do_futex+0x1ef/0x350 [ 582.652492][T13113] ? __pfx_do_futex+0x10/0x10 [ 582.652546][T13113] __x64_sys_futex+0x34f/0x4d0 [ 582.652590][T13113] ? __pfx___x64_sys_futex+0x10/0x10 [ 582.652643][T13113] do_syscall_64+0x106/0xf80 [ 582.652683][T13113] ? clear_bhb_loop+0x40/0x90 [ 582.652719][T13113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.652748][T13113] RIP: 0033:0x7f1e1539c799 [ 582.652771][T13113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.652799][T13113] RSP: 002b:00007f1e161a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 582.652826][T13113] RAX: ffffffffffffffda RBX: 00007f1e15616098 RCX: 00007f1e1539c799 [ 582.652845][T13113] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e15616098 [ 582.652862][T13113] RBP: 00007f1e15616090 R08: 0000000000000000 R09: 0000000000000000 [ 582.652878][T13113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.652894][T13113] R13: 00007f1e15616128 R14: 00007ffc12169e00 R15: 00007ffc12169ee8 [ 582.652931][T13113] [ 582.941235][T13118] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 582.953550][T13118] FAULT_INJECTION: forcing a failure. [ 582.953550][T13118] name failslab, interval 1, probability 0, space 0, times 0 [ 582.966619][T13118] CPU: 0 UID: 0 PID: 13118 Comm: syz.0.1673 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.966657][T13118] Tainted: [L]=SOFTLOCKUP [ 582.966666][T13118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 582.966682][T13118] Call Trace: [ 582.966691][T13118] [ 582.966700][T13118] dump_stack_lvl+0x100/0x190 [ 582.966744][T13118] should_fail_ex.cold+0x5/0xa [ 582.966776][T13118] should_failslab+0xc2/0x120 [ 582.966806][T13118] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 582.966846][T13118] ? skb_clone+0x190/0x400 [ 582.966966][T13118] skb_clone+0x190/0x400 [ 582.967010][T13118] netlink_deliver_tap+0xaed/0xcc0 [ 582.967057][T13118] netlink_unicast+0x70c/0x870 [ 582.967100][T13118] ? __pfx_netlink_unicast+0x10/0x10 [ 582.967137][T13118] ? __alloc_skb+0x5b7/0x710 [ 582.967171][T13118] ? genl_rcv_msg+0x4be/0x800 [ 582.967206][T13118] netlink_ack+0x655/0xb80 [ 582.967255][T13118] netlink_rcv_skb+0x333/0x420 [ 582.967294][T13118] ? __pfx_genl_rcv_msg+0x10/0x10 [ 582.967323][T13118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 582.967378][T13118] ? netlink_deliver_tap+0x1ae/0xcc0 [ 582.967421][T13118] genl_rcv+0x28/0x40 [ 582.967443][T13118] netlink_unicast+0x5aa/0x870 [ 582.967487][T13118] ? __pfx_netlink_unicast+0x10/0x10 [ 582.967540][T13118] netlink_sendmsg+0x8b0/0xda0 [ 582.967585][T13118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.967625][T13118] ? __import_iovec+0x1d2/0x640 [ 582.967660][T13118] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 582.967706][T13118] ____sys_sendmsg+0x9e1/0xb70 [ 582.967731][T13118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.967773][T13118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.967816][T13118] ___sys_sendmsg+0x190/0x1e0 [ 582.967849][T13118] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.967927][T13118] __sys_sendmsg+0x170/0x220 [ 582.967965][T13118] ? __pfx___sys_sendmsg+0x10/0x10 [ 582.968034][T13118] do_syscall_64+0x106/0xf80 [ 582.968069][T13118] ? clear_bhb_loop+0x40/0x90 [ 582.968102][T13118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.968130][T13118] RIP: 0033:0x7f897859c799 [ 582.968151][T13118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.968177][T13118] RSP: 002b:00007f8979454028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.968202][T13118] RAX: ffffffffffffffda RBX: 00007f8978815fa0 RCX: 00007f897859c799 [ 582.968220][T13118] RDX: 0000000000040044 RSI: 0000200000000000 RDI: 0000000000000004 [ 582.968236][T13118] RBP: 00007f8979454090 R08: 0000000000000000 R09: 0000000000000000 [ 582.968252][T13118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.968267][T13118] R13: 00007f8978816038 R14: 00007f8978815fa0 R15: 00007fffe8f976a8 [ 582.968304][T13118] [ 584.922332][T13149] FAULT_INJECTION: forcing a failure. [ 584.922332][T13149] name failslab, interval 1, probability 0, space 0, times 0 [ 585.023990][T13149] CPU: 1 UID: 0 PID: 13149 Comm: syz.2.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.024036][T13149] Tainted: [L]=SOFTLOCKUP [ 585.024046][T13149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 585.024064][T13149] Call Trace: [ 585.024073][T13149] [ 585.024083][T13149] dump_stack_lvl+0x100/0x190 [ 585.024131][T13149] should_fail_ex.cold+0x5/0xa [ 585.024163][T13149] should_failslab+0xc2/0x120 [ 585.024194][T13149] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 585.024236][T13149] ? __d_alloc+0x34/0xa80 [ 585.024274][T13149] __d_alloc+0x34/0xa80 [ 585.024308][T13149] d_alloc_pseudo+0x1c/0xc0 [ 585.024357][T13149] alloc_file_pseudo+0xcf/0x230 [ 585.024396][T13149] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 585.024440][T13149] __shmem_file_setup+0x221/0x490 [ 585.024479][T13149] ? __pfx___shmem_file_setup+0x10/0x10 [ 585.024523][T13149] ? vm_area_alloc+0x1f/0x160 [ 585.024565][T13149] shmem_zero_setup+0x96/0x1b0 [ 585.024612][T13149] __mmap_region+0x2198/0x29e0 [ 585.024657][T13149] ? lockdep_hardirqs_on+0x78/0x100 [ 585.024696][T13149] ? __pfx___mmap_region+0x10/0x10 [ 585.024736][T13149] ? rcu_is_watching+0x12/0xc0 [ 585.024778][T13149] ? css_rstat_updated+0x1ce/0x5a0 [ 585.024808][T13149] ? trace_sched_exit_tp+0x13a/0x180 [ 585.024841][T13149] ? __pfx_css_rstat_updated+0x10/0x10 [ 585.024871][T13149] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 585.024917][T13149] ? __lock_acquire+0x4a5/0x2630 [ 585.024971][T13149] ? find_held_lock+0x2b/0x80 [ 585.024996][T13149] ? finish_task_switch.isra.0+0x200/0xb80 [ 585.025023][T13149] ? finish_task_switch.isra.0+0x200/0xb80 [ 585.025065][T13149] ? trace_sched_exit_tp+0x13a/0x180 [ 585.025095][T13149] ? __schedule+0x1000/0x6120 [ 585.025179][T13149] ? rcu_is_watching+0x12/0xc0 [ 585.025221][T13149] ? cap_capable+0x107/0x460 [ 585.025366][T13149] mmap_region+0x180/0x3e0 [ 585.025417][T13149] do_mmap+0xc63/0x12f0 [ 585.025457][T13149] ? __pfx_do_mmap+0x10/0x10 [ 585.025489][T13149] ? __pfx_down_write_killable+0x10/0x10 [ 585.025541][T13149] vm_mmap_pgoff+0x29e/0x470 [ 585.025581][T13149] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 585.025616][T13149] ? do_futex+0x192/0x350 [ 585.025652][T13149] ? __pfx_do_futex+0x10/0x10 [ 585.025686][T13149] ? __pfx_do_sys_openat2+0x10/0x10 [ 585.025729][T13149] ksys_mmap_pgoff+0xe1/0x650 [ 585.025760][T13149] ? __x64_sys_futex+0x34f/0x4d0 [ 585.025795][T13149] ? __x64_sys_futex+0x358/0x4d0 [ 585.025832][T13149] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 585.025862][T13149] ? xfd_validate_state+0x129/0x190 [ 585.025910][T13149] __x64_sys_mmap+0x125/0x190 [ 585.025956][T13149] do_syscall_64+0x106/0xf80 [ 585.025993][T13149] ? clear_bhb_loop+0x40/0x90 [ 585.026029][T13149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.026058][T13149] RIP: 0033:0x7fb4c0d9c799 [ 585.026082][T13149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.026110][T13149] RSP: 002b:00007fb4c1cf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 585.026135][T13149] RAX: ffffffffffffffda RBX: 00007fb4c1015fa0 RCX: 00007fb4c0d9c799 [ 585.026153][T13149] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 585.026171][T13149] RBP: 00007fb4c0e32c99 R08: 0000000000000002 R09: 0000000000008000 [ 585.026188][T13149] R10: 00000000000000f1 R11: 0000000000000246 R12: 0000000000000000 [ 585.026205][T13149] R13: 00007fb4c1016038 R14: 00007fb4c1015fa0 R15: 00007ffe9e638d18 [ 585.026244][T13149] [ 586.924138][ T5142] Bluetooth: hci2: unexpected event 0x04 length: 64 > 10 [ 586.924189][ T5142] Bluetooth: hci2: connection err: -111 [ 588.065293][T13208] FAULT_INJECTION: forcing a failure. [ 588.065293][T13208] name failslab, interval 1, probability 0, space 0, times 0 [ 588.120133][T13208] CPU: 1 UID: 0 PID: 13208 Comm: syz.1.1698 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.120178][T13208] Tainted: [L]=SOFTLOCKUP [ 588.120188][T13208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 588.120205][T13208] Call Trace: [ 588.120213][T13208] [ 588.120223][T13208] dump_stack_lvl+0x100/0x190 [ 588.120272][T13208] should_fail_ex.cold+0x5/0xa [ 588.120305][T13208] should_failslab+0xc2/0x120 [ 588.120334][T13208] __kvmalloc_node_noprof+0xfa/0xa00 [ 588.120376][T13208] ? vmemdup_user+0x2a/0xe0 [ 588.120411][T13208] vmemdup_user+0x2a/0xe0 [ 588.120437][T13208] path_setxattrat+0x29e/0x3b0 [ 588.120469][T13208] ? __pfx_path_setxattrat+0x10/0x10 [ 588.120505][T13208] ? __pfx_poll_select_finish+0x10/0x10 [ 588.120579][T13208] ? xfd_validate_state+0x129/0x190 [ 588.120636][T13208] __x64_sys_fsetxattr+0xc5/0x140 [ 588.120667][T13208] ? do_syscall_64+0x95/0xf80 [ 588.120705][T13208] ? lockdep_hardirqs_on+0x78/0x100 [ 588.120743][T13208] do_syscall_64+0x106/0xf80 [ 588.120780][T13208] ? clear_bhb_loop+0x40/0x90 [ 588.120815][T13208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.120844][T13208] RIP: 0033:0x7f1e1539c799 [ 588.120867][T13208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.120894][T13208] RSP: 002b:00007f1e161c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 588.120922][T13208] RAX: ffffffffffffffda RBX: 00007f1e15615fa0 RCX: 00007f1e1539c799 [ 588.120940][T13208] RDX: 0000000000000000 RSI: 0000200000002ac0 RDI: ffffffffffffffff [ 588.120957][T13208] RBP: 00007f1e15432c99 R08: 0000000000000000 R09: 0000000000000000 [ 588.120974][T13208] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 588.120991][T13208] R13: 00007f1e15616038 R14: 00007f1e15615fa0 R15: 00007ffc12169ee8 [ 588.121029][T13208] [ 588.585958][T13215] FAULT_INJECTION: forcing a failure. [ 588.585958][T13215] name failslab, interval 1, probability 0, space 0, times 0 [ 588.598908][T13215] CPU: 0 UID: 0 PID: 13215 Comm: syz.3.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.598952][T13215] Tainted: [L]=SOFTLOCKUP [ 588.598962][T13215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 588.598979][T13215] Call Trace: [ 588.598989][T13215] [ 588.599000][T13215] dump_stack_lvl+0x100/0x190 [ 588.599048][T13215] should_fail_ex.cold+0x5/0xa [ 588.599079][T13215] should_failslab+0xc2/0x120 [ 588.599110][T13215] __kmalloc_cache_noprof+0x7a/0x6f0 [ 588.599146][T13215] ? tipc_service_create+0xb1/0x340 [ 588.599270][T13215] tipc_service_create+0xb1/0x340 [ 588.599310][T13215] ? tipc_service_find+0x161/0x1c0 [ 588.599353][T13215] tipc_nametbl_subscribe+0x892/0xa80 [ 588.599405][T13215] ? __pfx_tipc_nametbl_subscribe+0x10/0x10 [ 588.599454][T13215] ? lockdep_init_map_type+0x5c/0x250 [ 588.599498][T13215] tipc_sub_subscribe+0x4ba/0x730 [ 588.599542][T13215] tipc_conn_rcv_sub+0x21e/0x3d0 [ 588.599616][T13215] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 588.599655][T13215] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 588.599694][T13215] ? net_generic+0xea/0x2a0 [ 588.599735][T13215] tipc_group_create+0x4ab/0x660 [ 588.599776][T13215] tipc_setsockopt+0x611/0xe30 [ 588.599822][T13215] ? __pfx_tipc_setsockopt+0x10/0x10 [ 588.599879][T13215] ? __pfx_tipc_setsockopt+0x10/0x10 [ 588.599923][T13215] do_sock_setsockopt+0xf3/0x1d0 [ 588.599971][T13215] __sys_setsockopt+0x119/0x190 [ 588.600015][T13215] __x64_sys_setsockopt+0xbd/0x160 [ 588.600050][T13215] ? do_syscall_64+0x95/0xf80 [ 588.600087][T13215] ? lockdep_hardirqs_on+0x78/0x100 [ 588.600126][T13215] do_syscall_64+0x106/0xf80 [ 588.600161][T13215] ? clear_bhb_loop+0x40/0x90 [ 588.600196][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.600225][T13215] RIP: 0033:0x7f399a99c799 [ 588.600247][T13215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.600275][T13215] RSP: 002b:00007f399b85d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 588.600302][T13215] RAX: ffffffffffffffda RBX: 00007f399ac15fa0 RCX: 00007f399a99c799 [ 588.600321][T13215] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 588.600338][T13215] RBP: 00007f399aa32c99 R08: 0000000000000014 R09: 0000000000000000 [ 588.600354][T13215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.600371][T13215] R13: 00007f399ac16038 R14: 00007f399ac15fa0 R15: 00007ffd1cdc75d8 [ 588.600408][T13215] [ 588.600419][T13215] tipc: Service creation failed, no memory [ 588.851147][T13215] tipc: Failed to subscribe for {2609240480,0,4294967295} [ 589.730100][T13232] zswap: compressor not available [ 590.697072][T13248] FAULT_INJECTION: forcing a failure. [ 590.697072][T13248] name failslab, interval 1, probability 0, space 0, times 0 [ 590.741730][T13248] CPU: 1 UID: 0 PID: 13248 Comm: syz.3.1706 Tainted: G L syzkaller #0 PREEMPT(full) [ 590.741778][T13248] Tainted: [L]=SOFTLOCKUP [ 590.741787][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 590.741804][T13248] Call Trace: [ 590.741812][T13248] [ 590.741823][T13248] dump_stack_lvl+0x100/0x190 [ 590.741871][T13248] should_fail_ex.cold+0x5/0xa [ 590.741905][T13248] ? tomoyo_encode2+0xfb/0x3c0 [ 590.741939][T13248] should_failslab+0xc2/0x120 [ 590.741970][T13248] __kmalloc_noprof+0xe0/0x850 [ 590.742011][T13248] ? d_absolute_path+0x136/0x1b0 [ 590.742056][T13248] tomoyo_encode2+0xfb/0x3c0 [ 590.742096][T13248] tomoyo_encode+0x29/0x50 [ 590.742131][T13248] tomoyo_realpath_from_path+0x18c/0x690 [ 590.742176][T13248] tomoyo_check_open_permission+0x2af/0x3c0 [ 590.742210][T13248] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 590.742279][T13248] ? do_raw_spin_lock+0x128/0x260 [ 590.742324][T13248] ? path_get+0x61/0x80 [ 590.742360][T13248] tomoyo_file_open+0x6b/0x90 [ 590.742404][T13248] security_file_open+0xb5/0x1e0 [ 590.742440][T13248] do_dentry_open+0x5aa/0x1660 [ 590.742481][T13248] ? security_inode_permission+0xbf/0x250 [ 590.742520][T13248] vfs_open+0x82/0x3f0 [ 590.742562][T13248] path_openat+0x208c/0x31a0 [ 590.742605][T13248] ? __pfx_path_openat+0x10/0x10 [ 590.742650][T13248] do_file_open+0x20e/0x430 [ 590.742683][T13248] ? __pfx_do_file_open+0x10/0x10 [ 590.742740][T13248] ? alloc_fd+0x476/0x790 [ 590.742773][T13248] ? do_getname+0x191/0x390 [ 590.742812][T13248] do_sys_openat2+0x10d/0x1e0 [ 590.742849][T13248] ? __pfx_do_sys_openat2+0x10/0x10 [ 590.742900][T13248] __x64_sys_openat+0x12d/0x210 [ 590.742939][T13248] ? __pfx___x64_sys_openat+0x10/0x10 [ 590.742992][T13248] do_syscall_64+0x106/0xf80 [ 590.743030][T13248] ? clear_bhb_loop+0x40/0x90 [ 590.743065][T13248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.743094][T13248] RIP: 0033:0x7f399a99c799 [ 590.743118][T13248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.743148][T13248] RSP: 002b:00007f399b85d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 590.743177][T13248] RAX: ffffffffffffffda RBX: 00007f399ac15fa0 RCX: 00007f399a99c799 [ 590.743196][T13248] RDX: 0000000000109440 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 590.743215][T13248] RBP: 00007f399aa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 590.743233][T13248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.743250][T13248] R13: 00007f399ac16038 R14: 00007f399ac15fa0 R15: 00007ffd1cdc75d8 [ 590.743290][T13248] [ 590.743358][T13248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 593.648226][T13285] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1712'. [ 594.060480][T13280] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1768304430.3171692.0), cmd(8) [ 595.118417][ T29] audit: type=1804 audit(1773375677.405:97): pid=13303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1717" name="/newroot/sys/kernel/debug/tracing/README" dev="tracefs" ino=3371 res=1 errno=0 [ 595.837203][T13316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1721'. [ 596.641994][T13322] NFSD: Failed to start, no listeners configured. [ 597.468016][T13340] FAULT_INJECTION: forcing a failure. [ 597.468016][T13340] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 597.481692][T13340] CPU: 1 UID: 0 PID: 13340 Comm: syz.3.1727 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.481736][T13340] Tainted: [L]=SOFTLOCKUP [ 597.481748][T13340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 597.481765][T13340] Call Trace: [ 597.481776][T13340] [ 597.481787][T13340] dump_stack_lvl+0x100/0x190 [ 597.481837][T13340] should_fail_ex.cold+0x5/0xa [ 597.481866][T13340] ? prepare_alloc_pages+0x16d/0x5f0 [ 597.481904][T13340] should_fail_alloc_page+0xeb/0x140 [ 597.481939][T13340] prepare_alloc_pages+0x1f0/0x5f0 [ 597.481978][T13340] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 597.482034][T13340] ? stack_trace_save+0x8e/0xc0 [ 597.482064][T13340] ? __pfx_stack_trace_save+0x10/0x10 [ 597.482092][T13340] ? is_bpf_text_address+0x94/0x1a0 [ 597.482136][T13340] ? stack_depot_save_flags+0x27/0x9d0 [ 597.482172][T13340] ? __kernel_text_address+0xd/0x30 [ 597.482215][T13340] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 597.482260][T13340] ? kasan_save_stack+0x3f/0x50 [ 597.482302][T13340] ? kasan_save_track+0x14/0x30 [ 597.482343][T13340] ? __kasan_kmalloc+0xaa/0xb0 [ 597.482383][T13340] ? snd_pcm_attach_substream+0x451/0xd60 [ 597.482568][T13340] ? snd_pcm_oss_open+0x735/0x1390 [ 597.482640][T13340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.482683][T13340] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 597.482734][T13340] ? policy_nodemask+0xed/0x4f0 [ 597.482767][T13340] alloc_pages_mpol+0x1fb/0x550 [ 597.482800][T13340] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 597.482831][T13340] ? __split_page_owner+0x1fe/0x350 [ 597.482867][T13340] alloc_pages_noprof+0x131/0x390 [ 597.482899][T13340] alloc_pages_exact_noprof+0x32/0xf0 [ 597.482937][T13340] snd_pcm_attach_substream+0x4cb/0xd60 [ 597.482985][T13340] snd_pcm_open_substream+0x90/0x1850 [ 597.483026][T13340] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 597.483077][T13340] snd_pcm_oss_open+0x735/0x1390 [ 597.483121][T13340] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 597.483151][T13340] ? __lock_acquire+0x4a5/0x2630 [ 597.483189][T13340] ? __pfx_default_wake_function+0x10/0x10 [ 597.483222][T13340] ? __lock_acquire+0x4a5/0x2630 [ 597.483267][T13340] ? do_raw_spin_lock+0x128/0x260 [ 597.483311][T13340] ? soundcore_open+0x231/0x5a0 [ 597.483426][T13340] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 597.483458][T13340] soundcore_open+0x2e3/0x5a0 [ 597.483521][T13340] ? __pfx_soundcore_open+0x10/0x10 [ 597.483568][T13340] chrdev_open+0x234/0x6a0 [ 597.483597][T13340] ? __pfx_apparmor_file_open+0x10/0x10 [ 597.483644][T13340] ? __pfx_chrdev_open+0x10/0x10 [ 597.483676][T13340] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 597.483726][T13340] do_dentry_open+0x6d8/0x1660 [ 597.483754][T13340] ? __pfx_chrdev_open+0x10/0x10 [ 597.483793][T13340] vfs_open+0x82/0x3f0 [ 597.483833][T13340] path_openat+0x208c/0x31a0 [ 597.483875][T13340] ? __pfx_path_openat+0x10/0x10 [ 597.483919][T13340] do_file_open+0x20e/0x430 [ 597.483951][T13340] ? __pfx_do_file_open+0x10/0x10 [ 597.484004][T13340] ? alloc_fd+0x476/0x790 [ 597.484037][T13340] ? do_getname+0x191/0x390 [ 597.484075][T13340] do_sys_openat2+0x10d/0x1e0 [ 597.484112][T13340] ? __pfx_do_sys_openat2+0x10/0x10 [ 597.484164][T13340] __x64_sys_openat+0x12d/0x210 [ 597.484203][T13340] ? __pfx___x64_sys_openat+0x10/0x10 [ 597.484257][T13340] do_syscall_64+0x106/0xf80 [ 597.484296][T13340] ? clear_bhb_loop+0x40/0x90 [ 597.484333][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.484364][T13340] RIP: 0033:0x7f399a99c799 [ 597.484388][T13340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.484418][T13340] RSP: 002b:00007f399b83c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 597.484446][T13340] RAX: ffffffffffffffda RBX: 00007f399ac16090 RCX: 00007f399a99c799 [ 597.484466][T13340] RDX: 0000000000020342 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 597.484493][T13340] RBP: 00007f399aa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 597.484512][T13340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.484530][T13340] R13: 00007f399ac16128 R14: 00007f399ac16090 R15: 00007ffd1cdc75d8 [ 597.484569][T13340] [ 598.409655][T13347] FAULT_INJECTION: forcing a failure. [ 598.409655][T13347] name failslab, interval 1, probability 0, space 0, times 0 [ 598.446838][T13347] CPU: 1 UID: 0 PID: 13347 Comm: syz.2.1730 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.446884][T13347] Tainted: [L]=SOFTLOCKUP [ 598.446894][T13347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 598.446911][T13347] Call Trace: [ 598.446920][T13347] [ 598.446932][T13347] dump_stack_lvl+0x100/0x190 [ 598.446982][T13347] should_fail_ex.cold+0x5/0xa [ 598.447017][T13347] should_failslab+0xc2/0x120 [ 598.447048][T13347] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 598.447093][T13347] ? sock_alloc_inode+0x25/0x1c0 [ 598.447142][T13347] ? __pfx_sock_alloc_inode+0x10/0x10 [ 598.447190][T13347] sock_alloc_inode+0x25/0x1c0 [ 598.447231][T13347] alloc_inode+0x68/0x250 [ 598.447269][T13347] sock_alloc+0x44/0x280 [ 598.447308][T13347] ? security_socket_create+0x7f/0x250 [ 598.447443][T13347] __sock_create+0xc2/0x860 [ 598.447480][T13347] __sys_socket+0x14d/0x260 [ 598.447510][T13347] ? exc_page_fault+0x6f/0xd0 [ 598.447547][T13347] ? __pfx___sys_socket+0x10/0x10 [ 598.447583][T13347] ? do_user_addr_fault+0x8d6/0x12f0 [ 598.447633][T13347] __x64_sys_socket+0x72/0xb0 [ 598.447663][T13347] ? lockdep_hardirqs_on+0x78/0x100 [ 598.447701][T13347] do_syscall_64+0x106/0xf80 [ 598.447738][T13347] ? clear_bhb_loop+0x40/0x90 [ 598.447774][T13347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.447804][T13347] RIP: 0033:0x7fb4c0d9e007 [ 598.447828][T13347] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.447866][T13347] RSP: 002b:00007fb4c1cf7f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 598.447894][T13347] RAX: ffffffffffffffda RBX: 00007fb4c1015fa0 RCX: 00007fb4c0d9e007 [ 598.447913][T13347] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 598.447929][T13347] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 598.447946][T13347] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 598.447963][T13347] R13: 00007fb4c1016038 R14: 00007fb4c1015fa0 R15: 00007ffe9e638d18 [ 598.447998][T13347] [ 598.448017][T13347] socket: no more sockets [ 598.770671][T13348] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 599.399593][T13360] zswap: compressor not available [ 602.269435][T13395] netlink: zone id is out of range [ 602.274729][T13395] netlink: zone id is out of range [ 602.294191][T13395] netlink: zone id is out of range [ 602.299653][T13395] netlink: zone id is out of range [ 602.341717][T13395] netlink: zone id is out of range [ 602.349006][T13395] netlink: zone id is out of range [ 602.436969][T13399] netlink: zone id is out of range [ 602.457066][T13399] netlink: zone id is out of range [ 602.498463][T13399] netlink: zone id is out of range [ 603.564874][T13416] FAULT_INJECTION: forcing a failure. [ 603.564874][T13416] name fail_futex, interval 1, probability 0, space 0, times 0 [ 603.591533][T13416] CPU: 0 UID: 0 PID: 13416 Comm: syz.3.1746 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.591580][T13416] Tainted: [L]=SOFTLOCKUP [ 603.591590][T13416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 603.591606][T13416] Call Trace: [ 603.591616][T13416] [ 603.591626][T13416] dump_stack_lvl+0x100/0x190 [ 603.591675][T13416] should_fail_ex.cold+0x5/0xa [ 603.591709][T13416] get_futex_key+0x1d2/0x1620 [ 603.591748][T13416] ? __pfx_get_futex_key+0x10/0x10 [ 603.591789][T13416] ? kasan_quarantine_put+0x104/0x240 [ 603.591833][T13416] ? lockdep_hardirqs_on+0x78/0x100 [ 603.591879][T13416] futex_wake+0xea/0x530 [ 603.591922][T13416] ? find_held_lock+0x2b/0x80 [ 603.591950][T13416] ? __pfx_futex_wake+0x10/0x10 [ 603.591995][T13416] ? ksys_write+0x190/0x250 [ 603.592020][T13416] ? ksys_write+0x190/0x250 [ 603.592066][T13416] do_futex+0x32b/0x350 [ 603.592104][T13416] ? __pfx_do_futex+0x10/0x10 [ 603.592152][T13416] __x64_sys_futex+0x34f/0x4d0 [ 603.592192][T13416] ? fput+0x79/0x100 [ 603.592225][T13416] ? __pfx___x64_sys_futex+0x10/0x10 [ 603.592260][T13416] ? ksys_write+0x1ac/0x250 [ 603.592286][T13416] ? __pfx_ksys_write+0x10/0x10 [ 603.592323][T13416] do_syscall_64+0x106/0xf80 [ 603.592359][T13416] ? clear_bhb_loop+0x40/0x90 [ 603.592395][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.592425][T13416] RIP: 0033:0x7f399a99c799 [ 603.592449][T13416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.592477][T13416] RSP: 002b:00007f399b83c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 603.592506][T13416] RAX: ffffffffffffffda RBX: 00007f399ac16098 RCX: 00007f399a99c799 [ 603.592526][T13416] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f399ac1609c [ 603.592545][T13416] RBP: 00007f399ac16090 R08: 0000000000000000 R09: 0000000000000000 [ 603.592563][T13416] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000000 [ 603.592580][T13416] R13: 00007f399ac16128 R14: 00007ffd1cdc74f0 R15: 00007ffd1cdc75d8 [ 603.592617][T13416] [ 605.669300][T13441] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1024.2), cmd(8) [ 605.692003][T13430] zswap: compressor not available [ 605.994972][T13443] zswap: compressor not available [ 607.134513][T13475] FAULT_INJECTION: forcing a failure. [ 607.134513][T13475] name fail_futex, interval 1, probability 0, space 0, times 0 [ 607.134561][T13475] CPU: 1 UID: 0 PID: 13475 Comm: syz.0.1761 Tainted: G L syzkaller #0 PREEMPT(full) [ 607.134604][T13475] Tainted: [L]=SOFTLOCKUP [ 607.134614][T13475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 607.134631][T13475] Call Trace: [ 607.134641][T13475] [ 607.134651][T13475] dump_stack_lvl+0x100/0x190 [ 607.134699][T13475] should_fail_ex.cold+0x5/0xa [ 607.134733][T13475] get_futex_key+0x1d2/0x1620 [ 607.134773][T13475] ? __pfx_get_futex_key+0x10/0x10 [ 607.134820][T13475] ? kasan_quarantine_put+0x104/0x240 [ 607.134865][T13475] ? lockdep_hardirqs_on+0x78/0x100 [ 607.134912][T13475] futex_wake+0xea/0x530 [ 607.134954][T13475] ? find_held_lock+0x2b/0x80 [ 607.134983][T13475] ? __pfx_futex_wake+0x10/0x10 [ 607.135029][T13475] ? ksys_write+0x190/0x250 [ 607.135054][T13475] ? ksys_write+0x190/0x250 [ 607.135088][T13475] do_futex+0x32b/0x350 [ 607.135124][T13475] ? __pfx_do_futex+0x10/0x10 [ 607.135170][T13475] __x64_sys_futex+0x34f/0x4d0 [ 607.135210][T13475] ? fput+0x79/0x100 [ 607.135241][T13475] ? __pfx___x64_sys_futex+0x10/0x10 [ 607.135278][T13475] ? ksys_write+0x1ac/0x250 [ 607.135302][T13475] ? __pfx_ksys_write+0x10/0x10 [ 607.135339][T13475] do_syscall_64+0x106/0xf80 [ 607.135375][T13475] ? clear_bhb_loop+0x40/0x90 [ 607.135410][T13475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.135440][T13475] RIP: 0033:0x7f897859c799 [ 607.135465][T13475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.135494][T13475] RSP: 002b:00007f89794540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 607.135523][T13475] RAX: ffffffffffffffda RBX: 00007f8978815fa8 RCX: 00007f897859c799 [ 607.135542][T13475] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8978815fac [ 607.135561][T13475] RBP: 00007f8978815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 607.135579][T13475] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000000 [ 607.135597][T13475] R13: 00007f8978816038 R14: 00007fffe8f975c0 R15: 00007fffe8f976a8 [ 607.135635][T13475] [ 608.301445][T13491] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [3]. [ 608.409406][T13498] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1024.2), cmd(8) [ 608.915295][T13506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1769'. [ 609.426126][ C1] sd 0:0:1:0: [sda] tag#1775 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 609.436639][ C1] sd 0:0:1:0: [sda] tag#1775 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 610.331734][T13533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1777'. [ 610.418237][T13533] netlink: 'syz.3.1777': attribute type 32 has an invalid length. [ 611.198089][T13536] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 611.283704][T13548] net_ratelimit: 5 callbacks suppressed [ 611.283725][T13548] openvswitch: netlink: IP tunnel dst address not specified [ 611.342911][T13548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.373084][T13548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.296466][T13568] FAULT_INJECTION: forcing a failure. [ 612.296466][T13568] name fail_futex, interval 1, probability 0, space 0, times 0 [ 612.343050][T13568] CPU: 1 UID: 0 PID: 13568 Comm: syz.0.1787 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.343097][T13568] Tainted: [L]=SOFTLOCKUP [ 612.343108][T13568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 612.343125][T13568] Call Trace: [ 612.343135][T13568] [ 612.343146][T13568] dump_stack_lvl+0x100/0x190 [ 612.343196][T13568] should_fail_ex.cold+0x5/0xa [ 612.343230][T13568] get_futex_key+0x1d2/0x1620 [ 612.343270][T13568] ? __pfx_get_futex_key+0x10/0x10 [ 612.343305][T13568] ? kernfs_fop_write_iter+0x1df/0x5f0 [ 612.343336][T13568] ? kasan_save_stack+0x3f/0x50 [ 612.343379][T13568] ? kasan_save_stack+0x30/0x50 [ 612.343420][T13568] ? kasan_save_track+0x14/0x30 [ 612.343462][T13568] ? kasan_save_free_info+0x3b/0x70 [ 612.343497][T13568] ? __kasan_slab_free+0x5f/0x80 [ 612.343523][T13568] ? kfree+0x1f6/0x6b0 [ 612.343557][T13568] ? kernfs_fop_write_iter+0x1df/0x5f0 [ 612.343593][T13568] futex_wait_setup+0x83/0x510 [ 612.343646][T13568] __futex_wait+0x19f/0x300 [ 612.343694][T13568] ? __pfx___futex_wait+0x10/0x10 [ 612.343744][T13568] ? __pfx_futex_wake_mark+0x10/0x10 [ 612.343792][T13568] ? futex_hash+0x2c5/0x380 [ 612.343838][T13568] futex_wait+0xed/0x380 [ 612.343888][T13568] ? __pfx_futex_wait+0x10/0x10 [ 612.343942][T13568] ? ksys_write+0x190/0x250 [ 612.343968][T13568] ? ksys_write+0x190/0x250 [ 612.344002][T13568] do_futex+0x1ef/0x350 [ 612.344039][T13568] ? __pfx_do_futex+0x10/0x10 [ 612.344086][T13568] __x64_sys_futex+0x34f/0x4d0 [ 612.344125][T13568] ? fput+0x79/0x100 [ 612.344156][T13568] ? __pfx___x64_sys_futex+0x10/0x10 [ 612.344192][T13568] ? ksys_write+0x1ac/0x250 [ 612.344218][T13568] ? __pfx_ksys_write+0x10/0x10 [ 612.344256][T13568] do_syscall_64+0x106/0xf80 [ 612.344293][T13568] ? clear_bhb_loop+0x40/0x90 [ 612.344327][T13568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.344357][T13568] RIP: 0033:0x7f897859c799 [ 612.344381][T13568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.344411][T13568] RSP: 002b:00007f89794540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 612.344441][T13568] RAX: ffffffffffffffda RBX: 00007f8978815fa8 RCX: 00007f897859c799 [ 612.344461][T13568] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8978815fa8 [ 612.344480][T13568] RBP: 00007f8978815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 612.344499][T13568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.344517][T13568] R13: 00007f8978816038 R14: 00007fffe8f975c0 R15: 00007fffe8f976a8 [ 612.344557][T13568] [ 614.178537][T13584] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 615.254989][T13608] FAULT_INJECTION: forcing a failure. [ 615.254989][T13608] name fail_futex, interval 1, probability 0, space 0, times 0 [ 615.329213][T13608] CPU: 0 UID: 0 PID: 13608 Comm: syz.1.1797 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.329259][T13608] Tainted: [L]=SOFTLOCKUP [ 615.329269][T13608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 615.329286][T13608] Call Trace: [ 615.329296][T13608] [ 615.329307][T13608] dump_stack_lvl+0x100/0x190 [ 615.329356][T13608] should_fail_ex.cold+0x5/0xa [ 615.329389][T13608] get_futex_key+0x1d2/0x1620 [ 615.329429][T13608] ? __pfx_get_futex_key+0x10/0x10 [ 615.329465][T13608] ? kasan_quarantine_put+0x104/0x240 [ 615.329507][T13608] ? lockdep_hardirqs_on+0x78/0x100 [ 615.329552][T13608] futex_wake+0xea/0x530 [ 615.329595][T13608] ? find_held_lock+0x2b/0x80 [ 615.329623][T13608] ? __pfx_futex_wake+0x10/0x10 [ 615.329668][T13608] ? ksys_write+0x190/0x250 [ 615.329693][T13608] ? ksys_write+0x190/0x250 [ 615.329727][T13608] do_futex+0x32b/0x350 [ 615.329764][T13608] ? __pfx_do_futex+0x10/0x10 [ 615.329809][T13608] __x64_sys_futex+0x34f/0x4d0 [ 615.329849][T13608] ? fput+0x79/0x100 [ 615.329880][T13608] ? __pfx___x64_sys_futex+0x10/0x10 [ 615.329915][T13608] ? ksys_write+0x1ac/0x250 [ 615.329941][T13608] ? __pfx_ksys_write+0x10/0x10 [ 615.329978][T13608] do_syscall_64+0x106/0xf80 [ 615.330016][T13608] ? clear_bhb_loop+0x40/0x90 [ 615.330053][T13608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.330082][T13608] RIP: 0033:0x7f1e1539c799 [ 615.330107][T13608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.330137][T13608] RSP: 002b:00007f1e161a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 615.330165][T13608] RAX: ffffffffffffffda RBX: 00007f1e15616098 RCX: 00007f1e1539c799 [ 615.330185][T13608] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e1561609c [ 615.330212][T13608] RBP: 00007f1e15616090 R08: 0000000000000000 R09: 0000000000000000 [ 615.330232][T13608] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000000 [ 615.330251][T13608] R13: 00007f1e15616128 R14: 00007ffc12169e00 R15: 00007ffc12169ee8 [ 615.330292][T13608] [ 615.334097][T13599] zswap: compressor not available [ 615.834312][T13613] zswap: compressor not available [ 616.355734][T13622] FAULT_INJECTION: forcing a failure. [ 616.355734][T13622] name failslab, interval 1, probability 0, space 0, times 0 [ 616.421475][T13622] CPU: 0 UID: 0 PID: 13622 Comm: syz.3.1800 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.421522][T13622] Tainted: [L]=SOFTLOCKUP [ 616.421533][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 616.421551][T13622] Call Trace: [ 616.421560][T13622] [ 616.421571][T13622] dump_stack_lvl+0x100/0x190 [ 616.421629][T13622] should_fail_ex.cold+0x5/0xa [ 616.421664][T13622] should_failslab+0xc2/0x120 [ 616.421695][T13622] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 616.421737][T13622] ? kvm_vm_ioctl+0x390/0x4080 [ 616.421793][T13622] ? kasan_save_stack+0x30/0x50 [ 616.421835][T13622] ? vmx_vcpu_precreate+0xc8/0x220 [ 616.421886][T13622] kvm_vm_ioctl+0x390/0x4080 [ 616.421929][T13622] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 616.421980][T13622] ? tomoyo_path_number_perm+0x46d/0x580 [ 616.422014][T13622] ? kasan_quarantine_put+0x104/0x240 [ 616.422055][T13622] ? lockdep_hardirqs_on+0x78/0x100 [ 616.422097][T13622] ? find_held_lock+0x2b/0x80 [ 616.422123][T13622] ? tomoyo_path_number_perm+0x28f/0x580 [ 616.422153][T13622] ? tomoyo_path_number_perm+0x28f/0x580 [ 616.422190][T13622] ? tomoyo_path_number_perm+0x188/0x580 [ 616.422221][T13622] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 616.422252][T13622] ? futex_wait+0x125/0x380 [ 616.422305][T13622] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 616.422352][T13622] ? do_vfs_ioctl+0x226/0x13e0 [ 616.422392][T13622] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 616.422440][T13622] ? find_held_lock+0x2b/0x80 [ 616.422467][T13622] ? __fget_files+0x215/0x3d0 [ 616.422490][T13622] ? hook_file_ioctl_common+0x146/0x410 [ 616.422528][T13622] ? __fget_files+0x21f/0x3d0 [ 616.422560][T13622] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 616.422592][T13622] __x64_sys_ioctl+0x18e/0x210 [ 616.422647][T13622] do_syscall_64+0x106/0xf80 [ 616.422685][T13622] ? clear_bhb_loop+0x40/0x90 [ 616.422721][T13622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.422751][T13622] RIP: 0033:0x7f399a99c799 [ 616.422775][T13622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.422805][T13622] RSP: 002b:00007f399b85d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.422833][T13622] RAX: ffffffffffffffda RBX: 00007f399ac15fa0 RCX: 00007f399a99c799 [ 616.422852][T13622] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 616.422871][T13622] RBP: 00007f399aa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 616.422889][T13622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.422906][T13622] R13: 00007f399ac16038 R14: 00007f399ac15fa0 R15: 00007ffd1cdc75d8 [ 616.422943][T13622] [ 617.505288][T13655] FAULT_INJECTION: forcing a failure. [ 617.505288][T13655] name fail_futex, interval 1, probability 0, space 0, times 0 [ 617.551783][T13655] CPU: 1 UID: 0 PID: 13655 Comm: syz.1.1809 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.551830][T13655] Tainted: [L]=SOFTLOCKUP [ 617.551841][T13655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 617.551859][T13655] Call Trace: [ 617.551869][T13655] [ 617.551880][T13655] dump_stack_lvl+0x100/0x190 [ 617.551930][T13655] should_fail_ex.cold+0x5/0xa [ 617.551964][T13655] get_futex_key+0x1d2/0x1620 [ 617.552003][T13655] ? __pfx_get_futex_key+0x10/0x10 [ 617.552041][T13655] ? kasan_quarantine_put+0x104/0x240 [ 617.552082][T13655] ? lockdep_hardirqs_on+0x78/0x100 [ 617.552127][T13655] futex_wake+0xea/0x530 [ 617.552170][T13655] ? find_held_lock+0x2b/0x80 [ 617.552199][T13655] ? __pfx_futex_wake+0x10/0x10 [ 617.552245][T13655] ? ksys_write+0x190/0x250 [ 617.552270][T13655] ? ksys_write+0x190/0x250 [ 617.552302][T13655] do_futex+0x32b/0x350 [ 617.552340][T13655] ? __pfx_do_futex+0x10/0x10 [ 617.552387][T13655] __x64_sys_futex+0x34f/0x4d0 [ 617.552427][T13655] ? fput+0x79/0x100 [ 617.552458][T13655] ? __pfx___x64_sys_futex+0x10/0x10 [ 617.552495][T13655] ? ksys_write+0x1ac/0x250 [ 617.552521][T13655] ? __pfx_ksys_write+0x10/0x10 [ 617.552565][T13655] do_syscall_64+0x106/0xf80 [ 617.552602][T13655] ? clear_bhb_loop+0x40/0x90 [ 617.552636][T13655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.552664][T13655] RIP: 0033:0x7f1e1539c799 [ 617.552688][T13655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.552715][T13655] RSP: 002b:00007f1e161a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 617.552742][T13655] RAX: ffffffffffffffda RBX: 00007f1e15616098 RCX: 00007f1e1539c799 [ 617.552761][T13655] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e1561609c [ 617.552782][T13655] RBP: 00007f1e15616090 R08: 0000000000000000 R09: 0000000000000000 [ 617.552800][T13655] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000000 [ 617.552819][T13655] R13: 00007f1e15616128 R14: 00007ffc12169e00 R15: 00007ffc12169ee8 [ 617.552852][T13655] [ 618.409606][T13669] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1814'. [ 618.981872][ T29] audit: type=1804 audit(1773377747.248:98): pid=13688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1815" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 619.069749][T13672] vmstat_refresh: nr_hugetlb -197632 [ 621.983693][ T5142] block nbd0: Receive control failed (result -32) [ 622.175769][T13752] zswap: compressor not available [ 622.841588][T13771] FAULT_INJECTION: forcing a failure. [ 622.841588][T13771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.969262][T13771] CPU: 0 UID: 0 PID: 13771 Comm: syz.2.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.969305][T13771] Tainted: [L]=SOFTLOCKUP [ 622.969315][T13771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 622.969331][T13771] Call Trace: [ 622.969340][T13771] [ 622.969351][T13771] dump_stack_lvl+0x100/0x190 [ 622.969400][T13771] should_fail_ex.cold+0x5/0xa [ 622.969433][T13771] _copy_from_iter+0x1f4/0x1690 [ 622.969471][T13771] ? __asan_memset+0x23/0x50 [ 622.969510][T13771] ? __pfx__copy_from_iter+0x10/0x10 [ 622.969541][T13771] ? __pfx___alloc_skb+0x10/0x10 [ 622.969577][T13771] ? __pfx___might_resched+0x10/0x10 [ 622.969617][T13771] ? __lock_acquire+0x4a5/0x2630 [ 622.969669][T13771] netlink_sendmsg+0x808/0xda0 [ 622.969715][T13771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.969751][T13771] ? __import_iovec+0x1d2/0x640 [ 622.969786][T13771] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 622.969834][T13771] ____sys_sendmsg+0x9e1/0xb70 [ 622.969860][T13771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.969902][T13771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.969947][T13771] ___sys_sendmsg+0x190/0x1e0 [ 622.969979][T13771] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.970041][T13771] ? __pfx_vfs_write+0x10/0x10 [ 622.970081][T13771] ? do_sys_openat2+0x157/0x1e0 [ 622.970122][T13771] __sys_sendmsg+0x170/0x220 [ 622.970158][T13771] ? __pfx___sys_sendmsg+0x10/0x10 [ 622.970215][T13771] do_syscall_64+0x106/0xf80 [ 622.970253][T13771] ? clear_bhb_loop+0x40/0x90 [ 622.970290][T13771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.970319][T13771] RIP: 0033:0x7fb4c0d9c799 [ 622.970343][T13771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.970370][T13771] RSP: 002b:00007fb4c1cf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.970396][T13771] RAX: ffffffffffffffda RBX: 00007fb4c1015fa0 RCX: 00007fb4c0d9c799 [ 622.970416][T13771] RDX: 0000000000064810 RSI: 0000200000000180 RDI: 0000000000000002 [ 622.970433][T13771] RBP: 00007fb4c1cf9090 R08: 0000000000000000 R09: 0000000000000000 [ 622.970451][T13771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.970468][T13771] R13: 00007fb4c1016038 R14: 00007fb4c1015fa0 R15: 00007ffe9e638d18 [ 622.970507][T13771] [ 624.179881][T13788] block nbd0: shutting down sockets [ 624.617978][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.624848][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.632095][T13793] FAULT_INJECTION: forcing a failure. [ 624.632095][T13793] name failslab, interval 1, probability 0, space 0, times 0 [ 624.714694][T13793] CPU: 0 UID: 0 PID: 13793 Comm: syz.0.1844 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.714738][T13793] Tainted: [L]=SOFTLOCKUP [ 624.714748][T13793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 624.714764][T13793] Call Trace: [ 624.714774][T13793] [ 624.714785][T13793] dump_stack_lvl+0x100/0x190 [ 624.714829][T13793] should_fail_ex.cold+0x5/0xa [ 624.714862][T13793] should_failslab+0xc2/0x120 [ 624.714892][T13793] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 624.714932][T13793] ? security_inode_alloc+0x3b/0x2c0 [ 624.714961][T13793] ? lockdep_init_map_type+0x5c/0x250 [ 624.715002][T13793] security_inode_alloc+0x3b/0x2c0 [ 624.715038][T13793] inode_init_always_gfp+0xced/0x1040 [ 624.715072][T13793] alloc_inode+0x8e/0x250 [ 624.715107][T13793] new_inode+0x22/0x1c0 [ 624.715145][T13793] shmem_get_inode+0x212/0x1040 [ 624.715183][T13793] ? __pfx_shmem_get_inode+0x10/0x10 [ 624.715217][T13793] ? map_id_range_up+0x2ce/0x3b0 [ 624.715244][T13793] ? make_vfsuid+0xec/0x140 [ 624.715278][T13793] ? __pfx_make_vfsuid+0x10/0x10 [ 624.715314][T13793] ? current_check_access_path+0x281/0x460 [ 624.715352][T13793] shmem_mknod+0x20c/0x470 [ 624.715390][T13793] ? __pfx_shmem_mknod+0x10/0x10 [ 624.715422][T13793] ? security_inode_permission+0xbf/0x250 [ 624.715453][T13793] ? inode_permission+0x374/0x620 [ 624.715495][T13793] shmem_mkdir+0x31/0x80 [ 624.715529][T13793] vfs_mkdir+0x361/0x850 [ 624.715569][T13793] filename_mkdirat+0x48b/0x5e0 [ 624.715604][T13793] ? __pfx_filename_mkdirat+0x10/0x10 [ 624.715633][T13793] ? strncpy_from_user+0x19d/0x2d0 [ 624.715669][T13793] ? do_getname+0x191/0x390 [ 624.715706][T13793] __x64_sys_mkdir+0x6b/0x90 [ 624.715736][T13793] do_syscall_64+0x106/0xf80 [ 624.715771][T13793] ? clear_bhb_loop+0x40/0x90 [ 624.715806][T13793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.715834][T13793] RIP: 0033:0x7f897859c799 [ 624.715858][T13793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.715884][T13793] RSP: 002b:00007f8979412028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 624.715911][T13793] RAX: ffffffffffffffda RBX: 00007f8978816180 RCX: 00007f897859c799 [ 624.715931][T13793] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000200000000100 [ 624.715949][T13793] RBP: 00007f8978632c99 R08: 0000000000000000 R09: 0000000000000000 [ 624.715966][T13793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.715983][T13793] R13: 00007f8978816218 R14: 00007f8978816180 R15: 00007fffe8f976a8 [ 624.716023][T13793] [ 627.544629][T13830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1853'. [ 627.603827][T13830] hsr_slave_0: left promiscuous mode [ 627.610348][T13830] hsr_slave_1: left promiscuous mode [ 627.634549][T13818] zswap: compressor not available [ 630.477764][T13878] zswap: compressor not available [ 630.530437][T13893] FAULT_INJECTION: forcing a failure. [ 630.530437][T13893] name failslab, interval 1, probability 0, space 0, times 0 [ 630.692740][T13893] CPU: 0 UID: 0 PID: 13893 Comm: syz.1.1866 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.692785][T13893] Tainted: [L]=SOFTLOCKUP [ 630.692795][T13893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 630.692811][T13893] Call Trace: [ 630.692821][T13893] [ 630.692832][T13893] dump_stack_lvl+0x100/0x190 [ 630.692877][T13893] should_fail_ex.cold+0x5/0xa [ 630.692910][T13893] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 630.692940][T13893] should_failslab+0xc2/0x120 [ 630.692970][T13893] __kmalloc_noprof+0xe0/0x850 [ 630.693008][T13893] ? trace_kmalloc+0x101/0x130 [ 630.693044][T13893] kernfs_fop_write_iter+0x26a/0x5f0 [ 630.693079][T13893] iter_file_splice_write+0x830/0x10a0 [ 630.693128][T13893] ? __pfx_iter_file_splice_write+0x10/0x10 [ 630.693164][T13893] ? __pfx_copy_splice_read+0x10/0x10 [ 630.693228][T13893] ? __pfx_iter_file_splice_write+0x10/0x10 [ 630.693260][T13893] direct_splice_actor+0x192/0x6c0 [ 630.693308][T13893] splice_direct_to_actor+0x345/0xa30 [ 630.693340][T13893] ? __pfx_direct_splice_actor+0x10/0x10 [ 630.693390][T13893] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 630.693430][T13893] do_splice_direct+0x174/0x240 [ 630.693459][T13893] ? __pfx_do_splice_direct+0x10/0x10 [ 630.693489][T13893] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 630.693538][T13893] ? rw_verify_area+0xce/0x6d0 [ 630.693581][T13893] do_sendfile+0xadc/0xe20 [ 630.693635][T13893] ? __pfx_do_sendfile+0x10/0x10 [ 630.693676][T13893] ? __fget_files+0x21f/0x3d0 [ 630.693713][T13893] __x64_sys_sendfile64+0x1d8/0x220 [ 630.693747][T13893] ? ksys_write+0x1ac/0x250 [ 630.693773][T13893] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 630.693816][T13893] do_syscall_64+0x106/0xf80 [ 630.693853][T13893] ? clear_bhb_loop+0x40/0x90 [ 630.693888][T13893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.693917][T13893] RIP: 0033:0x7f1e1539c799 [ 630.693940][T13893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.693968][T13893] RSP: 002b:00007f1e161c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 630.693995][T13893] RAX: ffffffffffffffda RBX: 00007f1e15615fa0 RCX: 00007f1e1539c799 [ 630.694014][T13893] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 630.694031][T13893] RBP: 00007f1e161c4090 R08: 0000000000000000 R09: 0000000000000000 [ 630.694049][T13893] R10: 0000000000000ef3 R11: 0000000000000246 R12: 0000000000000001 [ 630.694067][T13893] R13: 00007f1e15616038 R14: 00007f1e15615fa0 R15: 00007ffc12169ee8 [ 630.694105][T13893] [ 631.202054][ T29] audit: type=1800 audit(1773377759.462:99): pid=13898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1865" name="trace_pipe" dev="tracefs" ino=3314 res=0 errno=0 [ 632.400579][T13918] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 632.430452][T13918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 632.438825][T13918] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 632.445540][T13918] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 632.653970][T13936] warning: `syz.0.1873' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 632.928355][T13935] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 634.457699][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 634.466782][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 634.473214][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 634.479868][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 634.504149][T13979] [U] ^\ [ 634.520350][T13960] zswap: compressor not available [ 636.738423][T14016] zswap: compressor not available [ 636.848551][T14024] FAULT_INJECTION: forcing a failure. [ 636.848551][T14024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.889092][T14024] CPU: 0 UID: 0 PID: 14024 Comm: syz.2.1893 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.889138][T14024] Tainted: [L]=SOFTLOCKUP [ 636.889148][T14024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 636.889165][T14024] Call Trace: [ 636.889175][T14024] [ 636.889186][T14024] dump_stack_lvl+0x100/0x190 [ 636.889240][T14024] should_fail_ex.cold+0x5/0xa [ 636.889274][T14024] _copy_to_user+0x32/0xd0 [ 636.889308][T14024] simple_read_from_buffer+0xcb/0x170 [ 636.889351][T14024] proc_fail_nth_read+0x1af/0x230 [ 636.889386][T14024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.889419][T14024] ? rw_verify_area+0xce/0x6d0 [ 636.889455][T14024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.889490][T14024] vfs_read+0x1e4/0xb30 [ 636.889534][T14024] ? __pfx_vfs_read+0x10/0x10 [ 636.889570][T14024] ? __fget_files+0x215/0x3d0 [ 636.889603][T14024] ? __fget_files+0x21f/0x3d0 [ 636.889637][T14024] ksys_read+0x12a/0x250 [ 636.889678][T14024] ? __pfx_ksys_read+0x10/0x10 [ 636.889730][T14024] do_syscall_64+0x106/0xf80 [ 636.889768][T14024] ? clear_bhb_loop+0x40/0x90 [ 636.889802][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.889831][T14024] RIP: 0033:0x7fb4c0d5cfce [ 636.889854][T14024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 636.889881][T14024] RSP: 002b:00007fb4c1cf8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 636.889908][T14024] RAX: ffffffffffffffda RBX: 00007fb4c1cf96c0 RCX: 00007fb4c0d5cfce [ 636.889928][T14024] RDX: 000000000000000f RSI: 00007fb4c1cf90a0 RDI: 0000000000000004 [ 636.889945][T14024] RBP: 00007fb4c1cf9090 R08: 0000000000000000 R09: 0000000000000000 [ 636.889962][T14024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.889979][T14024] R13: 00007fb4c1016038 R14: 00007fb4c1015fa0 R15: 00007ffe9e638d18 [ 636.890018][T14024] [ 643.444908][T14068] FAULT_INJECTION: forcing a failure. [ 643.444908][T14068] name failslab, interval 1, probability 0, space 0, times 0 [ 643.551058][T14068] CPU: 1 UID: 0 PID: 14068 Comm: syz.1.1905 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.551110][T14068] Tainted: [L]=SOFTLOCKUP [ 643.551121][T14068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 643.551139][T14068] Call Trace: [ 643.551149][T14068] [ 643.551161][T14068] dump_stack_lvl+0x100/0x190 [ 643.551220][T14068] should_fail_ex.cold+0x5/0xa [ 643.551255][T14068] ? ima_alloc_init_template+0xb6/0x6d0 [ 643.551285][T14068] should_failslab+0xc2/0x120 [ 643.551317][T14068] __kmalloc_noprof+0xe0/0x850 [ 643.551360][T14068] ? find_held_lock+0x2b/0x80 [ 643.551388][T14068] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 643.551434][T14068] ima_alloc_init_template+0xb6/0x6d0 [ 643.551466][T14068] ? take_dentry_name_snapshot+0x310/0x7c0 [ 643.551512][T14068] ima_store_measurement+0x1e3/0x5b0 [ 643.551546][T14068] ? __pfx_ima_store_measurement+0x10/0x10 [ 643.551594][T14068] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 643.551645][T14068] process_measurement+0x19cc/0x2350 [ 643.551704][T14068] ? stack_trace_save+0x8e/0xc0 [ 643.551734][T14068] ? __pfx_process_measurement+0x10/0x10 [ 643.551778][T14068] ? __lock_acquire+0x4a5/0x2630 [ 643.551813][T14068] ? __kasan_slab_alloc+0x89/0x90 [ 643.551840][T14068] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 643.551882][T14068] ? init_file+0x95/0x480 [ 643.551911][T14068] ? alloc_empty_file+0x73/0x1c0 [ 643.551943][T14068] ? alloc_file_pseudo+0x13a/0x230 [ 643.551977][T14068] ? ksys_mmap_pgoff+0x232/0x650 [ 643.552006][T14068] ? __x64_sys_mmap+0x125/0x190 [ 643.552046][T14068] ? do_syscall_64+0x106/0xf80 [ 643.552121][T14068] ? __pfx_aa_file_perm+0x10/0x10 [ 643.552181][T14068] ima_file_mmap+0x1c4/0x1f0 [ 643.552229][T14068] ? __pfx_ima_file_mmap+0x10/0x10 [ 643.552285][T14068] security_mmap_file+0x278/0x9b0 [ 643.552322][T14068] vm_mmap_pgoff+0xec/0x470 [ 643.552360][T14068] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 643.552389][T14068] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 643.552428][T14068] ? hugetlbfs_get_inode+0x36e/0x750 [ 643.552471][T14068] ksys_mmap_pgoff+0x273/0x650 [ 643.552504][T14068] ? __x64_sys_futex+0x358/0x4d0 [ 643.552542][T14068] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 643.552575][T14068] ? xfd_validate_state+0x129/0x190 [ 643.552622][T14068] __x64_sys_mmap+0x125/0x190 [ 643.552668][T14068] do_syscall_64+0x106/0xf80 [ 643.552705][T14068] ? clear_bhb_loop+0x40/0x90 [ 643.552742][T14068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.552773][T14068] RIP: 0033:0x7f1e1539c799 [ 643.552797][T14068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.552825][T14068] RSP: 002b:00007f1e161c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 643.552854][T14068] RAX: ffffffffffffffda RBX: 00007f1e15615fa0 RCX: 00007f1e1539c799 [ 643.552875][T14068] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000040000 [ 643.552893][T14068] RBP: 00007f1e15432c99 R08: 0000000000000401 R09: 0000300000000000 [ 643.552911][T14068] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 643.552929][T14068] R13: 00007f1e15616038 R14: 00007f1e15615fa0 R15: 00007ffc12169ee8 [ 643.552970][T14068] [ 643.962652][ T29] audit: type=1804 audit(1773377772.196:100): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.1905" name="anon_hugepage" dev="hugetlbfs" ino=333234 res=0 errno=0 [ 644.393770][T14074] FAULT_INJECTION: forcing a failure. [ 644.393770][T14074] name fail_futex, interval 1, probability 0, space 0, times 0 [ 644.470854][T14074] CPU: 0 UID: 0 PID: 14074 Comm: syz.3.1906 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.470905][T14074] Tainted: [L]=SOFTLOCKUP [ 644.470917][T14074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 644.470936][T14074] Call Trace: [ 644.470946][T14074] [ 644.470958][T14074] dump_stack_lvl+0x100/0x190 [ 644.471009][T14074] should_fail_ex.cold+0x5/0xa [ 644.471044][T14074] get_futex_key+0x1d2/0x1620 [ 644.471085][T14074] ? __pfx_get_futex_key+0x10/0x10 [ 644.471131][T14074] ? kasan_quarantine_put+0x104/0x240 [ 644.471177][T14074] ? lockdep_hardirqs_on+0x78/0x100 [ 644.471224][T14074] futex_wake+0xea/0x530 [ 644.471267][T14074] ? find_held_lock+0x2b/0x80 [ 644.471297][T14074] ? __pfx_futex_wake+0x10/0x10 [ 644.471345][T14074] ? ksys_write+0x190/0x250 [ 644.471371][T14074] ? ksys_write+0x190/0x250 [ 644.471405][T14074] do_futex+0x32b/0x350 [ 644.471444][T14074] ? __pfx_do_futex+0x10/0x10 [ 644.471492][T14074] __x64_sys_futex+0x34f/0x4d0 [ 644.471533][T14074] ? fput+0x79/0x100 [ 644.471565][T14074] ? __pfx___x64_sys_futex+0x10/0x10 [ 644.471601][T14074] ? ksys_write+0x1ac/0x250 [ 644.471628][T14074] ? __pfx_ksys_write+0x10/0x10 [ 644.471667][T14074] do_syscall_64+0x106/0xf80 [ 644.471706][T14074] ? clear_bhb_loop+0x40/0x90 [ 644.471743][T14074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.471773][T14074] RIP: 0033:0x7f399a99c799 [ 644.471799][T14074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.471829][T14074] RSP: 002b:00007f399b83c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 644.471858][T14074] RAX: ffffffffffffffda RBX: 00007f399ac16098 RCX: 00007f399a99c799 [ 644.471882][T14074] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f399ac1609c [ 644.471902][T14074] RBP: 00007f399ac16090 R08: 0000000000000000 R09: 0000000000000000 [ 644.471920][T14074] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 644.471939][T14074] R13: 00007f399ac16128 R14: 00007ffd1cdc74f0 R15: 00007ffd1cdc75d8 [ 644.471979][T14074] [ 644.730497][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 645.926496][T14097] netlink: 'syz.2.1912': attribute type 1 has an invalid length. [ 646.597331][T14106] FAULT_INJECTION: forcing a failure. [ 646.597331][T14106] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 646.679232][T14106] CPU: 0 UID: 0 PID: 14106 Comm: syz.2.1915 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.679258][T14106] Tainted: [L]=SOFTLOCKUP [ 646.679263][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 646.679273][T14106] Call Trace: [ 646.679278][T14106] [ 646.679285][T14106] dump_stack_lvl+0x100/0x190 [ 646.679312][T14106] should_fail_ex.cold+0x5/0xa [ 646.679327][T14106] ? prepare_alloc_pages+0x16d/0x5f0 [ 646.679345][T14106] should_fail_alloc_page+0xeb/0x140 [ 646.679362][T14106] prepare_alloc_pages+0x1f0/0x5f0 [ 646.679378][T14106] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 646.679403][T14106] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 646.679429][T14106] ? cpa_flush+0x19c/0x980 [ 646.679444][T14106] ? __lock_acquire+0x4a5/0x2630 [ 646.679463][T14106] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 646.679492][T14106] ? pgprot2cachemode+0x9a/0x130 [ 646.679512][T14106] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 646.679544][T14106] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 646.679570][T14106] ? policy_nodemask+0xed/0x4f0 [ 646.679585][T14106] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 646.679610][T14106] ? policy_nodemask+0xed/0x4f0 [ 646.679626][T14106] alloc_pages_mpol+0x1fb/0x550 [ 646.679643][T14106] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 646.679660][T14106] ? alloc_pages_noprof+0x233/0x390 [ 646.679678][T14106] alloc_pages_noprof+0x131/0x390 [ 646.679694][T14106] kimage_alloc_pages+0x72/0x380 [ 646.679721][T14106] kimage_alloc_page+0x232/0x910 [ 646.679740][T14106] kimage_load_segment+0x507/0xde0 [ 646.679756][T14106] ? __pfx_kimage_crash_copy_vmcoreinfo+0x10/0x10 [ 646.679777][T14106] do_kexec_load+0x58d/0x810 [ 646.679795][T14106] ? __pfx_do_kexec_load+0x10/0x10 [ 646.679812][T14106] ? _copy_from_user+0x59/0xd0 [ 646.679831][T14106] __x64_sys_kexec_load+0x1bf/0x230 [ 646.679849][T14106] do_syscall_64+0x106/0xf80 [ 646.679870][T14106] ? clear_bhb_loop+0x40/0x90 [ 646.679888][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.679903][T14106] RIP: 0033:0x7fb4c0d9c799 [ 646.679916][T14106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.679930][T14106] RSP: 002b:00007fb4c1cf9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 646.679945][T14106] RAX: ffffffffffffffda RBX: 00007fb4c1015fa0 RCX: 00007fb4c0d9c799 [ 646.679955][T14106] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 646.679964][T14106] RBP: 00007fb4c1cf9090 R08: 0000000000000000 R09: 0000000000000000 [ 646.679973][T14106] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 646.679982][T14106] R13: 00007fb4c1016038 R14: 00007fb4c1015fa0 R15: 00007ffe9e638d18 [ 646.680001][T14106] [ 647.895837][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1918'. [ 649.812083][T14153] zswap: compressor not available [ 651.956186][T14182] zswap: compressor not available [ 652.640683][T14193] FAULT_INJECTION: forcing a failure. [ 652.640683][T14193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.672586][T14193] CPU: 1 UID: 0 PID: 14193 Comm: syz.1.1935 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.672630][T14193] Tainted: [L]=SOFTLOCKUP [ 652.672639][T14193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 652.672656][T14193] Call Trace: [ 652.672665][T14193] [ 652.672676][T14193] dump_stack_lvl+0x100/0x190 [ 652.672722][T14193] should_fail_ex.cold+0x5/0xa [ 652.672755][T14193] _copy_from_user+0x2e/0xd0 [ 652.672787][T14193] copy_msghdr_from_user+0x9f/0x4f0 [ 652.672819][T14193] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 652.672857][T14193] ? __pfx__kstrtoull+0x10/0x10 [ 652.672902][T14193] ___sys_sendmsg+0x106/0x1e0 [ 652.672935][T14193] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.672983][T14193] ? find_held_lock+0x2b/0x80 [ 652.673034][T14193] __sys_sendmmsg+0x205/0x430 [ 652.673078][T14193] ? __pfx___sys_sendmmsg+0x10/0x10 [ 652.673128][T14193] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 652.673185][T14193] ? fput+0x79/0x100 [ 652.673217][T14193] ? ksys_write+0x1ac/0x250 [ 652.673242][T14193] ? __pfx_ksys_write+0x10/0x10 [ 652.673275][T14193] __x64_sys_sendmmsg+0x9c/0x100 [ 652.673312][T14193] ? lockdep_hardirqs_on+0x78/0x100 [ 652.673350][T14193] do_syscall_64+0x106/0xf80 [ 652.673386][T14193] ? clear_bhb_loop+0x40/0x90 [ 652.673420][T14193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.673449][T14193] RIP: 0033:0x7f1e1539c799 [ 652.673473][T14193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.673500][T14193] RSP: 002b:00007f1e161c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 652.673533][T14193] RAX: ffffffffffffffda RBX: 00007f1e15615fa0 RCX: 00007f1e1539c799 [ 652.673552][T14193] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000002 [ 652.673570][T14193] RBP: 00007f1e161c4090 R08: 0000000000000000 R09: 0000000000000000 [ 652.673588][T14193] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 652.673606][T14193] R13: 00007f1e15616038 R14: 00007f1e15615fa0 R15: 00007ffc12169ee8 [ 652.673644][T14193] [ 654.041287][T14207] zswap: compressor not available [ 654.600504][T14227] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 654.697219][T14227] FAULT_INJECTION: forcing a failure. [ 654.697219][T14227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.817595][T14227] CPU: 0 UID: 0 PID: 14227 Comm: syz.2.1942 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.817638][T14227] Tainted: [L]=SOFTLOCKUP [ 654.817647][T14227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 654.817663][T14227] Call Trace: [ 654.817672][T14227] [ 654.817683][T14227] dump_stack_lvl+0x100/0x190 [ 654.817729][T14227] should_fail_ex.cold+0x5/0xa [ 654.817762][T14227] _copy_to_user+0x32/0xd0 [ 654.817797][T14227] simple_read_from_buffer+0xcb/0x170 [ 654.817842][T14227] proc_fail_nth_read+0x1af/0x230 [ 654.817877][T14227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 654.817912][T14227] ? rw_verify_area+0xce/0x6d0 [ 654.817950][T14227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 654.817983][T14227] vfs_read+0x1e4/0xb30 [ 654.818030][T14227] ? __pfx_vfs_read+0x10/0x10 [ 654.818070][T14227] ? __fget_files+0x215/0x3d0 [ 654.818108][T14227] ? __fget_files+0x21f/0x3d0 [ 654.818145][T14227] ksys_read+0x12a/0x250 [ 654.818186][T14227] ? __pfx_ksys_read+0x10/0x10 [ 654.818238][T14227] do_syscall_64+0x106/0xf80 [ 654.818274][T14227] ? clear_bhb_loop+0x40/0x90 [ 654.818308][T14227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.818337][T14227] RIP: 0033:0x7fb4c0d5cfce [ 654.818360][T14227] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 654.818393][T14227] RSP: 002b:00007fb4c1cf8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 654.818419][T14227] RAX: ffffffffffffffda RBX: 00007fb4c1cf96c0 RCX: 00007fb4c0d5cfce [ 654.818437][T14227] RDX: 000000000000000f RSI: 00007fb4c1cf90a0 RDI: 0000000000000005 [ 654.818455][T14227] RBP: 00007fb4c1cf9090 R08: 0000000000000000 R09: 0000000000000000 [ 654.818473][T14227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 654.818490][T14227] R13: 00007fb4c1016038 R14: 00007fb4c1015fa0 R15: 00007ffe9e638d18 [ 654.818529][T14227] [ 655.733420][T14237] FAULT_INJECTION: forcing a failure. [ 655.733420][T14237] name failslab, interval 1, probability 0, space 0, times 0 [ 655.788020][T14237] CPU: 1 UID: 0 PID: 14237 Comm: syz.2.1945 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.788067][T14237] Tainted: [L]=SOFTLOCKUP [ 655.788078][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 655.788095][T14237] Call Trace: [ 655.788105][T14237] [ 655.788117][T14237] dump_stack_lvl+0x100/0x190 [ 655.788164][T14237] should_fail_ex.cold+0x5/0xa [ 655.788198][T14237] ? tomoyo_encode2+0xfb/0x3c0 [ 655.788234][T14237] should_failslab+0xc2/0x120 [ 655.788265][T14237] __kmalloc_noprof+0xe0/0x850 [ 655.788305][T14237] ? d_absolute_path+0x136/0x1b0 [ 655.788350][T14237] tomoyo_encode2+0xfb/0x3c0 [ 655.788390][T14237] tomoyo_encode+0x29/0x50 [ 655.788424][T14237] tomoyo_realpath_from_path+0x18c/0x690 [ 655.788467][T14237] tomoyo_path_number_perm+0x23c/0x580 [ 655.788486][T14237] ? tomoyo_path_number_perm+0x22e/0x580 [ 655.788503][T14237] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 655.788521][T14237] ? rcu_read_unlock+0x17/0x60 [ 655.788542][T14237] ? do_raw_spin_lock+0x128/0x260 [ 655.788573][T14237] ? find_held_lock+0x2b/0x80 [ 655.788586][T14237] ? __pfx_d_add+0x10/0x10 [ 655.788603][T14237] ? d_alloc+0x176/0x1e0 [ 655.788619][T14237] ? current_check_access_path+0x281/0x460 [ 655.788639][T14237] ? __pfx_current_check_access_path+0x10/0x10 [ 655.788659][T14237] ? simple_lookup+0x105/0x1d0 [ 655.788684][T14237] tomoyo_path_mknod+0x164/0x190 [ 655.788705][T14237] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 655.788728][T14237] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 655.788755][T14237] security_path_mknod+0x161/0x300 [ 655.788776][T14237] filename_mknodat+0x241/0x7f0 [ 655.788795][T14237] ? __pfx_filename_mknodat+0x10/0x10 [ 655.788811][T14237] ? strncpy_from_user+0x19d/0x2d0 [ 655.788830][T14237] ? do_getname+0x191/0x390 [ 655.788850][T14237] __x64_sys_mknod+0x8f/0xc0 [ 655.788867][T14237] do_syscall_64+0x106/0xf80 [ 655.788896][T14237] ? clear_bhb_loop+0x40/0x90 [ 655.788915][T14237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.788931][T14237] RIP: 0033:0x7fb4c0d9c799 [ 655.788946][T14237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.788961][T14237] RSP: 002b:00007fb4c1cf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 655.788976][T14237] RAX: ffffffffffffffda RBX: 00007fb4c1015fa0 RCX: 00007fb4c0d9c799 [ 655.788987][T14237] RDX: 00000000fffffffa RSI: 00000000000000c9 RDI: 0000200000000180 [ 655.788996][T14237] RBP: 00007fb4c0e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 655.789006][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.789015][T14237] R13: 00007fb4c1016038 R14: 00007fb4c1015fa0 R15: 00007ffe9e638d18 [ 655.789035][T14237] [ 655.789053][T14237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 656.118070][ T29] audit: type=1806 audit(1773377784.350:101): xattr="/sys/devices/LNXSYSTM:00/L" res=-22 [ 656.205400][T14235] futex_wake_op: syz.3.1943 tries to shift op by -2048; fix this program [ 656.268409][T14235] futex_wake_op: syz.3.1943 tries to shift op by -2048; fix this program [ 656.535152][T14237] binder: 14236:14237 ioctl c0306201 2000000000c0 returned -14 [ 658.149612][ T29] audit: type=1800 audit(1773377786.399:102): pid=14260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1950" name="file0" dev="tmpfs" ino=2622 res=0 errno=0 [ 658.867606][T13981] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 659.187741][T14295] FAULT_INJECTION: forcing a failure. [ 659.187741][T14295] name fail_futex, interval 1, probability 0, space 0, times 0 [ 659.239831][T14295] CPU: 1 UID: 0 PID: 14295 Comm: syz.1.1958 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.239860][T14295] Tainted: [L]=SOFTLOCKUP [ 659.239866][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 659.239876][T14295] Call Trace: [ 659.239882][T14295] [ 659.239888][T14295] dump_stack_lvl+0x100/0x190 [ 659.239916][T14295] should_fail_ex.cold+0x5/0xa [ 659.239936][T14295] get_futex_key+0x107c/0x1620 [ 659.239957][T14295] ? __pfx_get_futex_key+0x10/0x10 [ 659.239981][T14295] futex_wait_setup+0x83/0x510 [ 659.240009][T14295] __futex_wait+0x19f/0x300 [ 659.240034][T14295] ? __pfx___futex_wait+0x10/0x10 [ 659.240059][T14295] ? __pfx_futex_wake_mark+0x10/0x10 [ 659.240083][T14295] ? __hrtimer_setup+0x178/0x280 [ 659.240108][T14295] ? ktime_add_safe+0x60/0x70 [ 659.240129][T14295] futex_wait+0xed/0x380 [ 659.240151][T14295] ? __pfx_futex_wait+0x10/0x10 [ 659.240170][T14295] ? __lock_acquire+0x4a5/0x2630 [ 659.240195][T14295] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 659.240241][T14295] do_futex+0x1ef/0x350 [ 659.240277][T14295] ? __pfx_do_futex+0x10/0x10 [ 659.240299][T14295] ? ktime_get+0x200/0x300 [ 659.240314][T14295] ? lockdep_hardirqs_on+0x78/0x100 [ 659.240335][T14295] ? read_tsc+0x9/0x20 [ 659.240354][T14295] __x64_sys_futex+0x34f/0x4d0 [ 659.240376][T14295] ? __pfx___x64_sys_futex+0x10/0x10 [ 659.240403][T14295] do_syscall_64+0x106/0xf80 [ 659.240423][T14295] ? clear_bhb_loop+0x40/0x90 [ 659.240441][T14295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.240457][T14295] RIP: 0033:0x7f1e1539c799 [ 659.240471][T14295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.240486][T14295] RSP: 002b:00007f1e161c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 659.240502][T14295] RAX: ffffffffffffffda RBX: 00007f1e15615fa0 RCX: 00007f1e1539c799 [ 659.240512][T14295] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000200000000080 [ 659.240521][T14295] RBP: 00007f1e15432c99 R08: 0000200000000100 R09: 00000000000000ff [ 659.240531][T14295] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 659.240541][T14295] R13: 00007f1e15616038 R14: 00007f1e15615fa0 R15: 00007ffc12169ee8 [ 659.240561][T14295] [ 665.955486][ T29] audit: type=1804 audit(1773377794.205:103): pid=14382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1983" name="/newroot/sys/kernel/debug/tracing/README" dev="tracefs" ino=3371 res=1 errno=0 [ 666.553511][T14389] zswap: compressor not available [ 666.831477][T14399] FAULT_INJECTION: forcing a failure. [ 666.831477][T14399] name failslab, interval 1, probability 0, space 0, times 0 [ 666.863570][T14399] CPU: 0 UID: 0 PID: 14399 Comm: syz.1.1986 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.863617][T14399] Tainted: [L]=SOFTLOCKUP [ 666.863628][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 666.863645][T14399] Call Trace: [ 666.863655][T14399] [ 666.863666][T14399] dump_stack_lvl+0x100/0x190 [ 666.863716][T14399] should_fail_ex.cold+0x5/0xa [ 666.863751][T14399] should_failslab+0xc2/0x120 [ 666.863782][T14399] __kmalloc_cache_noprof+0x7a/0x6f0 [ 666.863819][T14399] ? nci_hci_allocate+0x45/0x330 [ 666.863973][T14399] ? mutex_init_lockep+0x110/0x150 [ 666.864016][T14399] nci_hci_allocate+0x45/0x330 [ 666.864062][T14399] nci_allocate_device+0x26f/0x410 [ 666.864097][T14399] virtual_ncidev_open+0x6f/0x220 [ 666.864190][T14399] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 666.864229][T14399] misc_open+0x26d/0x450 [ 666.864263][T14399] ? __pfx_misc_open+0x10/0x10 [ 666.864294][T14399] chrdev_open+0x234/0x6a0 [ 666.864321][T14399] ? __pfx_apparmor_file_open+0x10/0x10 [ 666.864370][T14399] ? __pfx_chrdev_open+0x10/0x10 [ 666.864400][T14399] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 666.864439][T14399] do_dentry_open+0x6d8/0x1660 [ 666.864468][T14399] ? __pfx_chrdev_open+0x10/0x10 [ 666.864507][T14399] vfs_open+0x82/0x3f0 [ 666.864546][T14399] path_openat+0x208c/0x31a0 [ 666.864588][T14399] ? __pfx_path_openat+0x10/0x10 [ 666.864632][T14399] do_file_open+0x20e/0x430 [ 666.864667][T14399] ? __pfx_do_file_open+0x10/0x10 [ 666.864725][T14399] ? alloc_fd+0x476/0x790 [ 666.864756][T14399] ? do_getname+0x191/0x390 [ 666.864794][T14399] do_sys_openat2+0x10d/0x1e0 [ 666.864831][T14399] ? __pfx_do_sys_openat2+0x10/0x10 [ 666.864883][T14399] __x64_sys_openat+0x12d/0x210 [ 666.864921][T14399] ? __pfx___x64_sys_openat+0x10/0x10 [ 666.864973][T14399] do_syscall_64+0x106/0xf80 [ 666.865013][T14399] ? clear_bhb_loop+0x40/0x90 [ 666.865051][T14399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.865090][T14399] RIP: 0033:0x7f1e1539c799 [ 666.865114][T14399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.865144][T14399] RSP: 002b:00007f1e161c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 666.865172][T14399] RAX: ffffffffffffffda RBX: 00007f1e15615fa0 RCX: 00007f1e1539c799 [ 666.865193][T14399] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 666.865210][T14399] RBP: 00007f1e15432c99 R08: 0000000000000000 R09: 0000000000000000 [ 666.865228][T14399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.865245][T14399] R13: 00007f1e15616038 R14: 00007f1e15615fa0 R15: 00007ffc12169ee8 [ 666.865284][T14399] [ 666.937086][T13981] Bluetooth: hci3: Malformed LE Event: 0x1b [ 670.740601][T14450] FAULT_INJECTION: forcing a failure. [ 670.740601][T14450] name failslab, interval 1, probability 0, space 0, times 0 [ 670.841722][T14450] CPU: 0 UID: 0 PID: 14450 Comm: syz.2.1997 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.841774][T14450] Tainted: [L]=SOFTLOCKUP [ 670.841782][T14450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 670.841798][T14450] Call Trace: [ 670.841807][T14450] [ 670.841816][T14450] dump_stack_lvl+0x100/0x190 [ 670.841858][T14450] should_fail_ex.cold+0x5/0xa [ 670.841889][T14450] should_failslab+0xc2/0x120 [ 670.841915][T14450] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 670.841951][T14450] ? alloc_empty_file+0x55/0x1c0 [ 670.841988][T14450] alloc_empty_file+0x55/0x1c0 [ 670.842021][T14450] alloc_file_pseudo+0x13a/0x230 [ 670.842057][T14450] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 670.842099][T14450] __shmem_file_setup+0x221/0x490 [ 670.842136][T14450] ? __pfx___shmem_file_setup+0x10/0x10 [ 670.842178][T14450] ? vm_area_alloc+0x1f/0x160 [ 670.842216][T14450] shmem_zero_setup+0x96/0x1b0 [ 670.842256][T14450] __mmap_region+0x2198/0x29e0 [ 670.842301][T14450] ? __pfx___mmap_region+0x10/0x10 [ 670.842335][T14450] ? process_measurement+0x1f4/0x2350 [ 670.842380][T14450] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 670.842410][T14450] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 670.842472][T14450] ? sched_clock+0x38/0x60 [ 670.842524][T14450] ? lockdep_hardirqs_on+0x78/0x100 [ 670.842560][T14450] ? finish_task_switch.isra.0+0x205/0xb80 [ 670.842591][T14450] ? rcu_is_watching+0x12/0xc0 [ 670.842672][T14450] ? rcu_is_watching+0x12/0xc0 [ 670.842732][T14450] ? cap_capable+0x107/0x460 [ 670.842784][T14450] mmap_region+0x180/0x3e0 [ 670.842830][T14450] do_mmap+0xc63/0x12f0 [ 670.842868][T14450] ? __pfx_do_mmap+0x10/0x10 [ 670.842898][T14450] ? __pfx_down_write_killable+0x10/0x10 [ 670.842945][T14450] vm_mmap_pgoff+0x29e/0x470 [ 670.842981][T14450] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 670.843012][T14450] ? do_futex+0x192/0x350 [ 670.843043][T14450] ? __pfx_do_futex+0x10/0x10 [ 670.843079][T14450] ksys_mmap_pgoff+0xe1/0x650 [ 670.843108][T14450] ? __x64_sys_futex+0x34f/0x4d0 [ 670.843139][T14450] ? __x64_sys_futex+0x358/0x4d0 [ 670.843173][T14450] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 670.843201][T14450] ? xfd_validate_state+0x129/0x190 [ 670.843245][T14450] __x64_sys_mmap+0x125/0x190 [ 670.843286][T14450] do_syscall_64+0x106/0xf80 [ 670.843320][T14450] ? clear_bhb_loop+0x40/0x90 [ 670.843353][T14450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.843382][T14450] RIP: 0033:0x7fb4c0d9c799 [ 670.843406][T14450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.843431][T14450] RSP: 002b:00007fb4c1cf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 670.843456][T14450] RAX: ffffffffffffffda RBX: 00007fb4c1015fa0 RCX: 00007fb4c0d9c799 [ 670.843475][T14450] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 670.843492][T14450] RBP: 00007fb4c0e32c99 R08: fffffffffffffffa R09: 0000000000008000 [ 670.843510][T14450] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 670.843527][T14450] R13: 00007fb4c1016038 R14: 00007fb4c1015fa0 R15: 00007ffe9e638d18 [ 670.843566][T14450] [ 671.888259][T14453] openvswitch: netlink: Key type 261 is out of range max 32 [ 671.895847][T14460] openvswitch: netlink: Key type 261 is out of range max 32 [ 672.846556][ T29] audit: type=1804 audit(1773378824.082:104): pid=14476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2004" name="/newroot/sys/kernel/debug/tracing/README" dev="tracefs" ino=3371 res=1 errno=0 [ 675.910061][T13981] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 675.910105][T13981] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 675.925237][T13981] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 675.925267][T13981] Bluetooth: hci3: Unknown advertising packet type: 0x5d [ 675.932358][T13981] Bluetooth: hci3: Unknown advertising packet type: 0x3f [ 675.946343][T13981] Bluetooth: hci3: adv larger than maximum supported [ 675.953997][T13981] Bluetooth: hci3: Unknown advertising packet type: 0x72 [ 675.962094][T13981] Bluetooth: hci3: Malformed LE Event: 0x0d [ 677.441954][T14555] netlink: zone id is out of range [ 677.468149][T14555] netlink: zone id is out of range [ 677.538454][T14555] netlink: zone id is out of range [ 677.563414][T14555] netlink: zone id is out of range [ 677.616692][T14555] netlink: zone id is out of range [ 677.849744][T14555] netlink: set zone limit has 8 unknown bytes [ 677.946671][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2021'. [ 679.714817][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2019'. [ 680.477233][T14589] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2028'. [ 681.281134][T14598] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 681.314648][T14598] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 682.595943][T14620] FAULT_INJECTION: forcing a failure. [ 682.595943][T14620] name fail_futex, interval 1, probability 0, space 0, times 0 [ 682.609067][T14620] CPU: 0 UID: 0 PID: 14620 Comm: syz.1.2036 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.609117][T14620] Tainted: [L]=SOFTLOCKUP [ 682.609127][T14620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 682.609144][T14620] Call Trace: [ 682.609153][T14620] [ 682.609165][T14620] dump_stack_lvl+0x100/0x190 [ 682.609213][T14620] should_fail_ex.cold+0x5/0xa [ 682.609242][T14620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.609277][T14620] get_futex_key+0x1d2/0x1620 [ 682.609316][T14620] ? __pfx_get_futex_key+0x10/0x10 [ 682.609365][T14620] futex_wake+0xea/0x530 [ 682.609420][T14620] ? __pfx_futex_wake+0x10/0x10 [ 682.609468][T14620] ? __pfx___might_resched+0x10/0x10 [ 682.609511][T14620] ? __kasan_slab_alloc+0x89/0x90 [ 682.609546][T14620] do_futex+0x32b/0x350 [ 682.609583][T14620] ? __pfx_do_futex+0x10/0x10 [ 682.609619][T14620] ? errseq_sample+0x51/0x70 [ 682.609659][T14620] __x64_sys_futex+0x34f/0x4d0 [ 682.609700][T14620] ? fd_install+0x223/0x580 [ 682.609727][T14620] ? __pfx___x64_sys_futex+0x10/0x10 [ 682.609780][T14620] do_syscall_64+0x106/0xf80 [ 682.609821][T14620] ? clear_bhb_loop+0x40/0x90 [ 682.609857][T14620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.609887][T14620] RIP: 0033:0x7f1e1539c799 [ 682.609912][T14620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.609940][T14620] RSP: 002b:00007f1e161c40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 682.609968][T14620] RAX: ffffffffffffffda RBX: 00007f1e15615fa8 RCX: 00007f1e1539c799 [ 682.609989][T14620] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e15615fac [ 682.610008][T14620] RBP: 00007f1e15615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 682.610028][T14620] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 682.610046][T14620] R13: 00007f1e15616038 R14: 00007ffc12169e00 R15: 00007ffc12169ee8 [ 682.610085][T14620] [ 683.888935][T14631] zswap: compressor not available [ 684.903429][T14650] FAULT_INJECTION: forcing a failure. [ 684.903429][T14650] name failslab, interval 1, probability 0, space 0, times 0 [ 684.970898][T14650] CPU: 1 UID: 0 PID: 14650 Comm: syz.3.2044 Tainted: G L syzkaller #0 PREEMPT(full) [ 684.970943][T14650] Tainted: [L]=SOFTLOCKUP [ 684.970954][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 684.970971][T14650] Call Trace: [ 684.970980][T14650] [ 684.970991][T14650] dump_stack_lvl+0x100/0x190 [ 684.971038][T14650] should_fail_ex.cold+0x5/0xa [ 684.971073][T14650] should_failslab+0xc2/0x120 [ 684.971103][T14650] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 684.971143][T14650] ? __alloc_skb+0x140/0x710 [ 684.971182][T14650] __alloc_skb+0x140/0x710 [ 684.971211][T14650] ? __alloc_skb+0x5b7/0x710 [ 684.971243][T14650] ? __pfx___alloc_skb+0x10/0x10 [ 684.971286][T14650] netlink_dump+0x19b/0xd30 [ 684.971331][T14650] ? __pfx_netlink_dump+0x10/0x10 [ 684.971386][T14650] ? __asan_memset+0x23/0x50 [ 684.971424][T14650] ? genl_start+0x67a/0x970 [ 684.971457][T14650] __netlink_dump_start+0x6d6/0x990 [ 684.971503][T14650] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 684.971535][T14650] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 684.971563][T14650] ? consume_skb+0xd6/0x110 [ 684.971640][T14650] ? __dev_queue_xmit+0x8a0/0x4800 [ 684.971787][T14650] ? __pfx_genl_get_cmd+0x10/0x10 [ 684.971825][T14650] ? __pfx_genl_start+0x10/0x10 [ 684.971849][T14650] ? __pfx_genl_dumpit+0x10/0x10 [ 684.971873][T14650] ? __pfx_genl_done+0x10/0x10 [ 684.971904][T14650] ? __dev_queue_xmit+0x5af/0x4800 [ 684.971933][T14650] ? __radix_tree_lookup+0x217/0x2b0 [ 684.971976][T14650] genl_rcv_msg+0x471/0x800 [ 684.972010][T14650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 684.972040][T14650] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 684.972105][T14650] netlink_rcv_skb+0x159/0x420 [ 684.972145][T14650] ? __pfx_genl_rcv_msg+0x10/0x10 [ 684.972174][T14650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 684.972230][T14650] ? netlink_deliver_tap+0x1ae/0xcc0 [ 684.972275][T14650] genl_rcv+0x28/0x40 [ 684.972299][T14650] netlink_unicast+0x5aa/0x870 [ 684.972346][T14650] ? __pfx_netlink_unicast+0x10/0x10 [ 684.972400][T14650] netlink_sendmsg+0x8b0/0xda0 [ 684.972448][T14650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.972484][T14650] ? __import_iovec+0x1d2/0x640 [ 684.972518][T14650] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 684.972564][T14650] ____sys_sendmsg+0x9e1/0xb70 [ 684.972589][T14650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.972628][T14650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 684.972673][T14650] ___sys_sendmsg+0x190/0x1e0 [ 684.972705][T14650] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.972788][T14650] __sys_sendmsg+0x170/0x220 [ 684.972827][T14650] ? __pfx___sys_sendmsg+0x10/0x10 [ 684.972887][T14650] do_syscall_64+0x106/0xf80 [ 684.972922][T14650] ? clear_bhb_loop+0x40/0x90 [ 684.972956][T14650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.972984][T14650] RIP: 0033:0x7f399a99c799 [ 684.973008][T14650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.973034][T14650] RSP: 002b:00007f399b85d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.973061][T14650] RAX: ffffffffffffffda RBX: 00007f399ac15fa0 RCX: 00007f399a99c799 [ 684.973080][T14650] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 684.973098][T14650] RBP: 00007f399b85d090 R08: 0000000000000000 R09: 0000000000000000 [ 684.973115][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.973131][T14650] R13: 00007f399ac16038 R14: 00007f399ac15fa0 R15: 00007ffd1cdc75d8 [ 684.973170][T14650] [ 685.930411][T14654] netlink: 346 bytes leftover after parsing attributes in process `syz.3.2045'. [ 686.095444][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.101802][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.643814][T14656] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 688.702003][T14676] zswap: compressor not available [ 691.422098][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2061'. [ 693.244374][T14746] netlink: 'syz.0.2066': attribute type 8 has an invalid length. [ 693.657593][T14742] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [65496]. [ 693.975358][ T29] audit: type=1807 audit(1773379868.200:105): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 694.038222][ T29] audit: type=1802 audit(1773379868.200:106): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2069" res=0 errno=0 [ 694.097842][T14754] ima: policy update failed [ 694.130498][ T29] audit: type=1802 audit(1773379868.330:107): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2069" res=0 errno=0 [ 696.041192][T14772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2073'. [ 700.382370][T14869] FAULT_INJECTION: forcing a failure. [ 700.382370][T14869] name failslab, interval 1, probability 0, space 0, times 0 [ 700.504264][T14869] CPU: 0 UID: 0 PID: 14869 Comm: syz.3.2099 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.504308][T14869] Tainted: [L]=SOFTLOCKUP [ 700.504317][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 700.504333][T14869] Call Trace: [ 700.504353][T14869] [ 700.504363][T14869] dump_stack_lvl+0x100/0x190 [ 700.504408][T14869] should_fail_ex.cold+0x5/0xa [ 700.504441][T14869] should_failslab+0xc2/0x120 [ 700.504470][T14869] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 700.504509][T14869] ? skb_clone+0x190/0x400 [ 700.504553][T14869] skb_clone+0x190/0x400 [ 700.504591][T14869] netlink_deliver_tap+0xaed/0xcc0 [ 700.504638][T14869] netlink_unicast+0x650/0x870 [ 700.504683][T14869] ? __pfx_netlink_unicast+0x10/0x10 [ 700.504732][T14869] netlink_sendmsg+0x8b0/0xda0 [ 700.504784][T14869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.504821][T14869] ? __import_iovec+0x1d2/0x640 [ 700.504858][T14869] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 700.504907][T14869] ____sys_sendmsg+0x9e1/0xb70 [ 700.504933][T14869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.504975][T14869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.505010][T14869] ? __pfx__kstrtoull+0x10/0x10 [ 700.505054][T14869] ___sys_sendmsg+0x190/0x1e0 [ 700.505087][T14869] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.505134][T14869] ? find_held_lock+0x2b/0x80 [ 700.505183][T14869] __sys_sendmmsg+0x205/0x430 [ 700.505234][T14869] ? __pfx___sys_sendmmsg+0x10/0x10 [ 700.505281][T14869] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 700.505338][T14869] ? fput+0x79/0x100 [ 700.505368][T14869] ? ksys_write+0x1ac/0x250 [ 700.505391][T14869] ? __pfx_ksys_write+0x10/0x10 [ 700.505423][T14869] __x64_sys_sendmmsg+0x9c/0x100 [ 700.505455][T14869] ? lockdep_hardirqs_on+0x78/0x100 [ 700.505489][T14869] do_syscall_64+0x106/0xf80 [ 700.505521][T14869] ? clear_bhb_loop+0x40/0x90 [ 700.505556][T14869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.505584][T14869] RIP: 0033:0x7f399a99c799 [ 700.505607][T14869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.505631][T14869] RSP: 002b:00007f399b85d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 700.505658][T14869] RAX: ffffffffffffffda RBX: 00007f399ac15fa0 RCX: 00007f399a99c799 [ 700.505677][T14869] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 700.505693][T14869] RBP: 00007f399b85d090 R08: 0000000000000000 R09: 0000000000000000 [ 700.505710][T14869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.505727][T14869] R13: 00007f399ac16038 R14: 00007f399ac15fa0 R15: 00007ffd1cdc75d8 [ 700.505766][T14869] [ 701.282576][T14878] FAULT_INJECTION: forcing a failure. [ 701.282576][T14878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.338749][T14878] CPU: 1 UID: 0 PID: 14878 Comm: syz.2.2104 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.338793][T14878] Tainted: [L]=SOFTLOCKUP [ 701.338803][T14878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 701.338819][T14878] Call Trace: [ 701.338828][T14878] [ 701.338838][T14878] dump_stack_lvl+0x100/0x190 [ 701.338885][T14878] should_fail_ex.cold+0x5/0xa [ 701.338916][T14878] _copy_from_user+0x2e/0xd0 [ 701.338948][T14878] input_event_from_user+0xb9/0x290 [ 701.338991][T14878] ? __pfx_input_event_from_user+0x10/0x10 [ 701.339031][T14878] ? __pfx___might_resched+0x10/0x10 [ 701.339068][T14878] ? input_inject_event+0x1c9/0x3b0 [ 701.339113][T14878] evdev_write+0x27a/0x430 [ 701.339155][T14878] ? __pfx_evdev_write+0x10/0x10 [ 701.339196][T14878] ? bpf_lsm_file_permission+0x9/0x10 [ 701.339238][T14878] ? security_file_permission+0x76/0x210 [ 701.339272][T14878] ? rw_verify_area+0xce/0x6d0 [ 701.339314][T14878] vfs_write+0x2aa/0x1070 [ 701.339355][T14878] ? __pfx_evdev_write+0x10/0x10 [ 701.339396][T14878] ? __pfx_vfs_write+0x10/0x10 [ 701.339432][T14878] ? find_held_lock+0x2b/0x80 [ 701.339457][T14878] ? __fget_files+0x215/0x3d0 [ 701.339482][T14878] ? __fget_files+0x215/0x3d0 [ 701.339515][T14878] ? __fget_files+0x21f/0x3d0 [ 701.339551][T14878] ksys_write+0x1f8/0x250 [ 701.339577][T14878] ? __pfx_ksys_write+0x10/0x10 [ 701.339614][T14878] do_syscall_64+0x106/0xf80 [ 701.339658][T14878] ? clear_bhb_loop+0x40/0x90 [ 701.339692][T14878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.339720][T14878] RIP: 0033:0x7fb4c0d9c799 [ 701.339744][T14878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.339770][T14878] RSP: 002b:00007fb4c1cf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 701.339797][T14878] RAX: ffffffffffffffda RBX: 00007fb4c1015fa0 RCX: 00007fb4c0d9c799 [ 701.339816][T14878] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 701.339834][T14878] RBP: 00007fb4c1cf9090 R08: 0000000000000000 R09: 0000000000000000 [ 701.339851][T14878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.339867][T14878] R13: 00007fb4c1016038 R14: 00007fb4c1015fa0 R15: 00007ffe9e638d18 [ 701.339905][T14878] [ 703.241910][T14904] can: request_module (can-proto-5) failed. [ 703.655386][T14913] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 703.670847][T14913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 703.686280][T14913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 703.723727][T14913] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 704.080469][T14929] FAULT_INJECTION: forcing a failure. [ 704.080469][T14929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.159533][T14929] CPU: 0 UID: 0 PID: 14929 Comm: syz.1.2116 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.159579][T14929] Tainted: [L]=SOFTLOCKUP [ 704.159590][T14929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 704.159606][T14929] Call Trace: [ 704.159616][T14929] [ 704.159627][T14929] dump_stack_lvl+0x100/0x190 [ 704.159673][T14929] should_fail_ex.cold+0x5/0xa [ 704.159706][T14929] _copy_from_user+0x2e/0xd0 [ 704.159739][T14929] ip6_mroute_setsockopt+0x269e/0x36d0 [ 704.159913][T14929] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 704.159945][T14929] ? is_bpf_text_address+0x8a/0x1a0 [ 704.159986][T14929] ? is_bpf_text_address+0x8a/0x1a0 [ 704.160030][T14929] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 704.160062][T14929] ? is_bpf_text_address+0x94/0x1a0 [ 704.160102][T14929] ? kernel_text_address+0x8d/0x100 [ 704.160142][T14929] ? __kernel_text_address+0xd/0x30 [ 704.160181][T14929] ? unwind_get_return_address+0x59/0xa0 [ 704.160212][T14929] ? arch_stack_walk+0xa6/0xf0 [ 704.160252][T14929] ? _parse_integer_limit+0x17f/0x1d0 [ 704.160295][T14929] ? do_ipv6_setsockopt+0x551/0x4400 [ 704.160356][T14929] do_ipv6_setsockopt+0x551/0x4400 [ 704.160406][T14929] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 704.160446][T14929] ? aa_label_sk_perm+0x194/0x5f0 [ 704.160484][T14929] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 704.160528][T14929] ? find_held_lock+0x2b/0x80 [ 704.160555][T14929] ? get_pid_task+0xfc/0x250 [ 704.160587][T14929] ? get_pid_task+0xfc/0x250 [ 704.160632][T14929] ? __pfx___might_resched+0x10/0x10 [ 704.160672][T14929] ? __lock_acquire+0x4a5/0x2630 [ 704.160714][T14929] ? aa_sk_perm+0x309/0xaa0 [ 704.160747][T14929] ? ipv6_setsockopt+0xcb/0x170 [ 704.160786][T14929] ipv6_setsockopt+0xcb/0x170 [ 704.160832][T14929] rawv6_setsockopt+0xee/0x5a0 [ 704.160872][T14929] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 704.160917][T14929] ? aa_sock_opt_perm+0xfe/0x1b0 [ 704.160956][T14929] ? sock_common_setsockopt+0x2e/0xf0 [ 704.161000][T14929] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 704.161047][T14929] do_sock_setsockopt+0xf3/0x1d0 [ 704.161094][T14929] __sys_setsockopt+0x119/0x190 [ 704.161138][T14929] __x64_sys_setsockopt+0xbd/0x160 [ 704.161172][T14929] ? do_syscall_64+0x95/0xf80 [ 704.161209][T14929] ? lockdep_hardirqs_on+0x78/0x100 [ 704.161245][T14929] do_syscall_64+0x106/0xf80 [ 704.161280][T14929] ? clear_bhb_loop+0x40/0x90 [ 704.161314][T14929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.161343][T14929] RIP: 0033:0x7f1e1539c799 [ 704.161365][T14929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.161391][T14929] RSP: 002b:00007f1e161a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 704.161417][T14929] RAX: ffffffffffffffda RBX: 00007f1e15616090 RCX: 00007f1e1539c799 [ 704.161436][T14929] RDX: 00000000000000cd RSI: 0000000000000029 RDI: 0400000000000003 [ 704.161454][T14929] RBP: 00007f1e161a3090 R08: 0000000000000567 R09: 0000000000000000 [ 704.161472][T14929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.161490][T14929] R13: 00007f1e15616128 R14: 00007f1e15616090 R15: 00007ffc12169ee8 [ 704.161528][T14929] [ 705.694137][T13981] Bluetooth: hci1: command 0x0406 tx timeout [ 705.700354][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 705.708569][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 705.773295][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 707.408764][T14990] zswap: compressor G not available [ 708.484764][ T29] audit: type=1806 audit(1773379882.712:108): xattr="" res=-22 [ 708.862438][T15016] zswap: compressor not available [ 709.073137][T15014] zswap: compressor not available [ 712.201329][T15084] block nbd0: NBD_DISCONNECT [ 715.126733][T15142] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 715.247640][T15142] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 715.306268][T15142] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 715.363842][T15142] page_type: f5(slab) [ 715.422952][T15143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.491076][T15142] raw: 00fff00000000040 ffff88813fe3d140 dead000000000100 dead000000000122 [ 715.537213][T15143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.554830][T15142] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 715.617374][T15142] head: 00fff00000000040 ffff88813fe3d140 dead000000000100 dead000000000122 [ 715.677873][T15142] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 715.736784][T15142] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 715.777927][T15142] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 715.880549][T15142] page dumped because: unmovable page [ 715.905781][T15142] page_owner tracks the page as allocated [ 715.979360][T15142] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5203, tgid 5203 (udevd), ts 48089227555, free_ts 47854195211 [ 716.025485][T15142] post_alloc_hook+0x153/0x170 [ 716.091246][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2178'. [ 716.101471][T15165] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2178'. [ 716.129505][T15142] get_page_from_freelist+0x111d/0x3140 [ 716.229914][T15142] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 716.235903][T15142] new_slab+0xa6/0x6c0 [ 716.305436][T15142] refill_objects+0x26b/0x400 [ 716.310363][T15142] __pcs_replace_empty_main+0x1ab/0x600 [ 716.315957][T15142] __kmalloc_noprof+0x688/0x850 [ 716.320960][T15142] tomoyo_realpath_from_path+0xb6/0x690 [ 716.326550][T15142] tomoyo_check_open_permission+0x2af/0x3c0 [ 716.332957][T15142] tomoyo_file_open+0x6b/0x90 [ 716.337692][T15142] security_file_open+0xb5/0x1e0 [ 716.376092][T15142] do_dentry_open+0x5aa/0x1660 [ 716.388639][T15142] vfs_open+0x82/0x3f0 [ 716.405880][T15142] path_openat+0x208c/0x31a0 [ 716.434707][T15142] do_file_open+0x20e/0x430 [ 716.485037][T15142] do_sys_openat2+0x10d/0x1e0 [ 716.525156][T15142] page last free pid 5192 tgid 5192 stack trace: [ 716.586320][T15142] __free_frozen_pages+0x7e1/0x10d0 [ 716.625433][T15142] qlist_free_all+0x47/0xe0 [ 716.630241][T15142] kasan_quarantine_reduce+0x1a0/0x1f0 [ 716.635878][T15142] __kasan_slab_alloc+0x69/0x90 [ 716.641191][T15142] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 716.648036][T15142] __alloc_skb+0x140/0x710 [ 716.652671][T15142] netlink_alloc_large_skb+0x69/0x150 [ 716.658549][T15142] netlink_sendmsg+0x680/0xda0 [ 716.663462][T15142] ____sys_sendmsg+0x9e1/0xb70 [ 716.670779][T15142] ___sys_sendmsg+0x190/0x1e0 [ 716.675788][T15142] __sys_sendmsg+0x170/0x220 [ 716.680580][T15142] do_syscall_64+0x106/0xf80 [ 716.685318][T15142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.656368][T15185] FAULT_INJECTION: forcing a failure. [ 717.656368][T15185] name failslab, interval 1, probability 0, space 0, times 0 [ 717.703413][T15185] CPU: 1 UID: 0 PID: 15185 Comm: syz.0.2184 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.703456][T15185] Tainted: [L]=SOFTLOCKUP [ 717.703466][T15185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 717.703482][T15185] Call Trace: [ 717.703492][T15185] [ 717.703502][T15185] dump_stack_lvl+0x100/0x190 [ 717.703549][T15185] should_fail_ex.cold+0x5/0xa [ 717.703582][T15185] should_failslab+0xc2/0x120 [ 717.703612][T15185] __kmalloc_cache_noprof+0x7a/0x6f0 [ 717.703647][T15185] ? proc_thread_self_get_link+0x1a6/0x210 [ 717.703694][T15185] proc_thread_self_get_link+0x1a6/0x210 [ 717.703735][T15185] pick_link+0xac2/0x13c0 [ 717.703772][T15185] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 717.703815][T15185] step_into_slowpath+0x9ba/0xf90 [ 717.703862][T15185] ? __pfx_step_into_slowpath+0x10/0x10 [ 717.703907][T15185] ? lookup_fast+0x2da/0x600 [ 717.703941][T15185] ? inode_permission+0x374/0x620 [ 717.703979][T15185] link_path_walk+0xf28/0x1cc0 [ 717.704031][T15185] path_openat+0x1be/0x31a0 [ 717.704058][T15185] ? kasan_save_stack+0x3f/0x50 [ 717.704096][T15185] ? kasan_save_stack+0x30/0x50 [ 717.704133][T15185] ? kasan_save_track+0x14/0x30 [ 717.704170][T15185] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 717.704217][T15185] ? __pfx_path_openat+0x10/0x10 [ 717.704259][T15185] do_file_open+0x20e/0x430 [ 717.704291][T15185] ? __pfx_do_file_open+0x10/0x10 [ 717.704347][T15185] ? alloc_fd+0x476/0x790 [ 717.704378][T15185] ? do_getname+0x191/0x390 [ 717.704438][T15185] do_sys_openat2+0x10d/0x1e0 [ 717.704474][T15185] ? __pfx_do_sys_openat2+0x10/0x10 [ 717.704522][T15185] __x64_sys_openat+0x12d/0x210 [ 717.704558][T15185] ? __pfx___x64_sys_openat+0x10/0x10 [ 717.704608][T15185] do_syscall_64+0x106/0xf80 [ 717.704644][T15185] ? clear_bhb_loop+0x40/0x90 [ 717.704678][T15185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.704706][T15185] RIP: 0033:0x7f897855cfce [ 717.704730][T15185] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.704756][T15185] RSP: 002b:00007f8979453f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 717.704783][T15185] RAX: ffffffffffffffda RBX: 00007f89794546c0 RCX: 00007f897855cfce [ 717.704802][T15185] RDX: 0000000000000002 RSI: 00007f89786325a0 RDI: ffffffffffffff9c [ 717.704821][T15185] RBP: 00007f8978632c99 R08: 0000000000000000 R09: 0000000000000000 [ 717.704838][T15185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.704855][T15185] R13: 00007f8978816038 R14: 00007f8978815fa0 R15: 00007fffe8f976a8 [ 717.704894][T15185] [ 717.970034][T15185] FAULT_INJECTION: forcing a failure. [ 717.970034][T15185] name failslab, interval 1, probability 0, space 0, times 0 [ 717.984527][T15185] CPU: 0 UID: 0 PID: 15185 Comm: syz.0.2184 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.984572][T15185] Tainted: [L]=SOFTLOCKUP [ 717.984582][T15185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 717.984598][T15185] Call Trace: [ 717.984608][T15185] [ 717.984619][T15185] dump_stack_lvl+0x100/0x190 [ 717.984665][T15185] should_fail_ex.cold+0x5/0xa [ 717.984697][T15185] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 717.984726][T15185] should_failslab+0xc2/0x120 [ 717.984756][T15185] __kmalloc_noprof+0xe0/0x850 [ 717.984804][T15185] kernfs_fop_write_iter+0x26a/0x5f0 [ 717.984840][T15185] vfs_write+0x6ac/0x1070 [ 717.984891][T15185] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 717.984925][T15185] ? __pfx_vfs_write+0x10/0x10 [ 717.984993][T15185] ksys_write+0x12a/0x250 [ 717.985019][T15185] ? __pfx_ksys_write+0x10/0x10 [ 717.985056][T15185] do_syscall_64+0x106/0xf80 [ 717.985093][T15185] ? clear_bhb_loop+0x40/0x90 [ 717.985128][T15185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.985157][T15185] RIP: 0033:0x7f897859c799 [ 717.985181][T15185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.985207][T15185] RSP: 002b:00007f8979454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.985233][T15185] RAX: ffffffffffffffda RBX: 00007f8978815fa0 RCX: 00007f897859c799 [ 717.985253][T15185] RDX: 0000000000000081 RSI: 0000200000000140 RDI: 0000000000000002 [ 717.985270][T15185] RBP: 00007f8979454090 R08: 0000000000000000 R09: 0000000000000000 [ 717.985288][T15185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.985305][T15185] R13: 00007f8978816038 R14: 00007f8978815fa0 R15: 00007fffe8f976a8 [ 717.985343][T15185] [ 718.981530][T15211] FAULT_INJECTION: forcing a failure. [ 718.981530][T15211] name fail_futex, interval 1, probability 0, space 0, times 0 [ 719.045987][T15211] CPU: 0 UID: 0 PID: 15211 Comm: syz.0.2190 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.046015][T15211] Tainted: [L]=SOFTLOCKUP [ 719.046021][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 719.046031][T15211] Call Trace: [ 719.046036][T15211] [ 719.046042][T15211] dump_stack_lvl+0x100/0x190 [ 719.046071][T15211] should_fail_ex.cold+0x5/0xa [ 719.046089][T15211] get_futex_key+0x1d2/0x1620 [ 719.046110][T15211] ? __pfx_get_futex_key+0x10/0x10 [ 719.046129][T15211] ? kasan_quarantine_put+0x104/0x240 [ 719.046152][T15211] ? lockdep_hardirqs_on+0x78/0x100 [ 719.046176][T15211] futex_wake+0xea/0x530 [ 719.046199][T15211] ? find_held_lock+0x2b/0x80 [ 719.046214][T15211] ? __pfx_futex_wake+0x10/0x10 [ 719.046238][T15211] ? ksys_write+0x190/0x250 [ 719.046251][T15211] ? ksys_write+0x190/0x250 [ 719.046273][T15211] do_futex+0x32b/0x350 [ 719.046301][T15211] ? __pfx_do_futex+0x10/0x10 [ 719.046327][T15211] __x64_sys_futex+0x34f/0x4d0 [ 719.046351][T15211] ? __pfx___x64_sys_futex+0x10/0x10 [ 719.046378][T15211] do_syscall_64+0x106/0xf80 [ 719.046398][T15211] ? clear_bhb_loop+0x40/0x90 [ 719.046416][T15211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.046432][T15211] RIP: 0033:0x7f897859c799 [ 719.046446][T15211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.046460][T15211] RSP: 002b:00007f89794330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 719.046475][T15211] RAX: ffffffffffffffda RBX: 00007f8978816098 RCX: 00007f897859c799 [ 719.046486][T15211] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f897881609c [ 719.046496][T15211] RBP: 00007f8978816090 R08: 0000000000000000 R09: 0000000000000000 [ 719.046506][T15211] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000000 [ 719.046515][T15211] R13: 00007f8978816128 R14: 00007fffe8f975c0 R15: 00007fffe8f976a8 [ 719.046534][T15211] [ 724.221434][T15288] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 724.227541][T15288] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 724.293205][T15288] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 724.299385][T15288] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 725.795465][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 726.263150][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 726.376354][ T5142] Bluetooth: hci3: command 0x0406 tx timeout [ 726.376363][T13981] Bluetooth: hci1: command 0x0406 tx timeout [ 728.889023][ T29] audit: type=1804 audit(1773379903.092:109): pid=15378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2228" name="/newroot/sys/kernel/debug/tracing/README" dev="tracefs" ino=3371 res=1 errno=0 [ 733.631716][T15433] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078004000 pfn:0x78000 [ 733.741506][T15435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.766904][T15433] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 733.779606][T15435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.836264][T15433] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 733.897466][T15433] page_type: f5(slab) [ 733.901520][T15433] raw: 00fff00000000240 ffff88813fe3d140 ffffea0000dab610 ffffea0001f23210 [ 733.936517][T15433] raw: ffff888078004000 0000000800040001 00000000f5000000 0000000000000000 [ 734.047176][T15433] head: 00fff00000000240 ffff88813fe3d140 ffffea0000dab610 ffffea0001f23210 [ 734.085854][T15433] head: ffff888078004000 0000000800040001 00000000f5000000 0000000000000000 [ 734.117544][T15433] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 734.317178][T15433] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 734.325920][T15433] page dumped because: unmovable page [ 734.432330][T15433] page_owner tracks the page as allocated [ 734.473291][T15433] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5203, tgid 5203 (udevd), ts 48089227555, free_ts 47854195211 [ 734.617277][T15433] post_alloc_hook+0x153/0x170 [ 734.644568][T15433] get_page_from_freelist+0x111d/0x3140 [ 734.661646][T15445] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2247'. [ 734.677336][T15433] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 734.705480][T15433] new_slab+0xa6/0x6c0 [ 734.752447][T15433] refill_objects+0x26b/0x400 [ 734.815047][T15433] __pcs_replace_empty_main+0x1ab/0x600 [ 734.869002][T15433] __kmalloc_noprof+0x688/0x850 [ 734.920137][T15433] tomoyo_realpath_from_path+0xb6/0x690 [ 734.996571][T15433] tomoyo_check_open_permission+0x2af/0x3c0 [ 735.060314][T15433] tomoyo_file_open+0x6b/0x90 [ 735.116929][T15433] security_file_open+0xb5/0x1e0 [ 735.217658][T15433] do_dentry_open+0x5aa/0x1660 [ 735.222501][T15433] vfs_open+0x82/0x3f0 [ 735.226606][T15433] path_openat+0x208c/0x31a0 [ 735.297728][T15433] do_file_open+0x20e/0x430 [ 735.302303][T15433] do_sys_openat2+0x10d/0x1e0 [ 735.307015][T15433] page last free pid 5192 tgid 5192 stack trace: [ 735.418091][T15433] __free_frozen_pages+0x7e1/0x10d0 [ 735.438693][T15433] qlist_free_all+0x47/0xe0 [ 735.443266][T15433] kasan_quarantine_reduce+0x1a0/0x1f0 [ 735.519596][T15433] __kasan_slab_alloc+0x69/0x90 [ 735.555814][T15433] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 735.627890][T15433] __alloc_skb+0x140/0x710 [ 735.632387][T15433] netlink_alloc_large_skb+0x69/0x150 [ 735.697894][T15433] netlink_sendmsg+0x680/0xda0 [ 735.737893][T15433] ____sys_sendmsg+0x9e1/0xb70 [ 735.763028][T15433] ___sys_sendmsg+0x190/0x1e0 [ 735.767775][T15433] __sys_sendmsg+0x170/0x220 [ 735.833518][T15433] do_syscall_64+0x106/0xf80 [ 735.887914][T15433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.970964][T15514] FAULT_INJECTION: forcing a failure. [ 740.970964][T15514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.044811][T15514] CPU: 1 UID: 0 PID: 15514 Comm: syz.0.2263 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.044840][T15514] Tainted: [L]=SOFTLOCKUP [ 741.044845][T15514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 741.044855][T15514] Call Trace: [ 741.044861][T15514] [ 741.044868][T15514] dump_stack_lvl+0x100/0x190 [ 741.044897][T15514] should_fail_ex.cold+0x5/0xa [ 741.044917][T15514] _copy_from_user+0x2e/0xd0 [ 741.044937][T15514] core_sys_select+0x2d0/0xbb0 [ 741.044967][T15514] ? __pfx_core_sys_select+0x10/0x10 [ 741.045009][T15514] ? __pfx_set_user_sigmask+0x10/0x10 [ 741.045035][T15514] ? __pfx_do_futex+0x10/0x10 [ 741.045057][T15514] do_pselect.constprop.0+0x238/0x270 [ 741.045083][T15514] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 741.045106][T15514] ? __x64_sys_futex+0x358/0x4d0 [ 741.045126][T15514] ? xfd_validate_state+0x129/0x190 [ 741.045151][T15514] __x64_sys_pselect6+0x149/0x1c0 [ 741.045168][T15514] do_syscall_64+0x106/0xf80 [ 741.045190][T15514] ? clear_bhb_loop+0x40/0x90 [ 741.045209][T15514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.045226][T15514] RIP: 0033:0x7f897859c799 [ 741.045239][T15514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.045265][T15514] RSP: 002b:00007f8979454028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 741.045281][T15514] RAX: ffffffffffffffda RBX: 00007f8978815fa0 RCX: 00007f897859c799 [ 741.045292][T15514] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000400 [ 741.045302][T15514] RBP: 00007f8978632c99 R08: 0000000000000000 R09: 0000000000000000 [ 741.045312][T15514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.045321][T15514] R13: 00007f8978816038 R14: 00007f8978815fa0 R15: 00007fffe8f976a8 [ 741.045341][T15514] [ 743.960210][T15551] FAULT_INJECTION: forcing a failure. [ 743.960210][T15551] name fail_futex, interval 1, probability 0, space 0, times 0 [ 744.102088][T15551] CPU: 0 UID: 0 PID: 15551 Comm: syz.0.2271 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.102114][T15551] Tainted: [L]=SOFTLOCKUP [ 744.102119][T15551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 744.102129][T15551] Call Trace: [ 744.102134][T15551] [ 744.102140][T15551] dump_stack_lvl+0x100/0x190 [ 744.102167][T15551] should_fail_ex.cold+0x5/0xa [ 744.102185][T15551] get_futex_key+0x1d2/0x1620 [ 744.102207][T15551] ? __pfx_get_futex_key+0x10/0x10 [ 744.102223][T15551] ? lock_acquire+0x1cf/0x380 [ 744.102249][T15551] futex_wake+0xea/0x530 [ 744.102272][T15551] ? __pfx_futex_wake+0x10/0x10 [ 744.102294][T15551] ? exit_mm_release+0x19/0x30 [ 744.102318][T15551] do_futex+0x32b/0x350 [ 744.102337][T15551] ? __pfx_do_futex+0x10/0x10 [ 744.102355][T15551] ? __might_fault+0xc5/0x140 [ 744.102382][T15551] mm_release+0x24a/0x2f0 [ 744.102397][T15551] do_exit+0x704/0x2b60 [ 744.102419][T15551] ? __pfx_do_exit+0x10/0x10 [ 744.102438][T15551] ? do_raw_spin_lock+0x128/0x260 [ 744.102458][T15551] ? find_held_lock+0x2b/0x80 [ 744.102472][T15551] ? get_signal+0x7e0/0x21e0 [ 744.102489][T15551] do_group_exit+0xd5/0x2a0 [ 744.102510][T15551] get_signal+0x1ec7/0x21e0 [ 744.102535][T15551] ? __local_bh_enable_ip+0x9e/0x120 [ 744.102552][T15551] ? tipc_setsockopt+0x412/0xe30 [ 744.102577][T15551] ? __pfx_get_signal+0x10/0x10 [ 744.102594][T15551] ? do_futex+0x192/0x350 [ 744.102615][T15551] arch_do_signal_or_restart+0x91/0x770 [ 744.102633][T15551] ? kfree+0x2ec/0x6b0 [ 744.102653][T15551] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 744.102676][T15551] ? __pfx___x64_sys_futex+0x10/0x10 [ 744.102700][T15551] exit_to_user_mode_loop+0x86/0x4a0 [ 744.102722][T15551] do_syscall_64+0x668/0xf80 [ 744.102742][T15551] ? clear_bhb_loop+0x40/0x90 [ 744.102760][T15551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.102776][T15551] RIP: 0033:0x7f897859c799 [ 744.102789][T15551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.102804][T15551] RSP: 002b:00007f89794540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 744.102819][T15551] RAX: fffffffffffffe00 RBX: 00007f8978815fa8 RCX: 00007f897859c799 [ 744.102829][T15551] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8978815fa8 [ 744.102838][T15551] RBP: 00007f8978815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 744.102847][T15551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.102856][T15551] R13: 00007f8978816038 R14: 00007fffe8f975c0 R15: 00007fffe8f976a8 [ 744.102875][T15551] [ 747.560455][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.567382][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.994433][ T29] audit: type=1804 audit(1773379926.191:110): pid=15675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2301" name="/newroot/sys/kernel/debug/tracing/README" dev="tracefs" ino=3371 res=1 errno=0 [ 752.223044][T13981] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 752.246639][T13981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 752.255860][T13981] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 752.265005][T13981] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 752.278640][T13981] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 753.021046][T15690] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 754.099950][T15680] chnl_net:caif_netlink_parms(): no params data found [ 754.357857][T13981] Bluetooth: hci4: command tx timeout [ 754.460745][T15707] FAULT_INJECTION: forcing a failure. [ 754.460745][T15707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.543528][T15707] CPU: 0 UID: 0 PID: 15707 Comm: syz.1.2307 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.543573][T15707] Tainted: [L]=SOFTLOCKUP [ 754.543591][T15707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 754.543611][T15707] Call Trace: [ 754.543620][T15707] [ 754.543631][T15707] dump_stack_lvl+0x100/0x190 [ 754.543677][T15707] should_fail_ex.cold+0x5/0xa [ 754.543710][T15707] _copy_from_user+0x2e/0xd0 [ 754.543743][T15707] get_timespec64+0x8b/0x1b0 [ 754.543772][T15707] ? __pfx_get_timespec64+0x10/0x10 [ 754.543812][T15707] __x64_sys_futex+0x21a/0x4d0 [ 754.543850][T15707] ? __pfx___x64_sys_futex+0x10/0x10 [ 754.543898][T15707] do_syscall_64+0x106/0xf80 [ 754.543933][T15707] ? clear_bhb_loop+0x40/0x90 [ 754.543967][T15707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.543995][T15707] RIP: 0033:0x7f1e1539c799 [ 754.544019][T15707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.544047][T15707] RSP: 002b:00007ffc1216a048 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 754.544074][T15707] RAX: ffffffffffffffda RBX: 00000000000b8225 RCX: 00007f1e1539c799 [ 754.544093][T15707] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e1561627c [ 754.544111][T15707] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 754.544128][T15707] R10: 00007ffc1216a150 R11: 0000000000000246 R12: 00007ffc1216a170 [ 754.544146][T15707] R13: 00007f1e1561627c R14: 00000000000b8257 R15: 00007ffc1216a150 [ 754.544184][T15707] [ 754.964731][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.910548][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.112933][T15680] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.166123][T15680] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.219328][T15680] bridge_slave_0: entered allmulticast mode [ 756.320309][T15680] bridge_slave_0: entered promiscuous mode [ 756.438510][T13981] Bluetooth: hci4: command tx timeout [ 756.534206][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.638925][T15680] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.646106][T15680] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.703413][T15680] bridge_slave_1: entered allmulticast mode [ 756.730919][T15680] bridge_slave_1: entered promiscuous mode [ 756.796744][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.995591][T15680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.049754][T15680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.202139][T15680] team0: Port device team_slave_0 added [ 757.225438][T15680] team0: Port device team_slave_1 added [ 757.378179][T15680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.402588][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.531536][T15680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.560889][T15680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.569409][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.738887][T15680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.064227][T15680] hsr_slave_0: entered promiscuous mode [ 758.096435][T15680] hsr_slave_1: entered promiscuous mode [ 758.522856][T13981] Bluetooth: hci4: command tx timeout [ 758.839578][T15773] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2315'. [ 758.921958][T15773] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2315'. [ 759.438551][T15763] slcan: can't register candev [ 759.550812][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.730458][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.758079][ T58] bond0 (unregistering): Released all slaves [ 759.916884][ T58] HfR: left promiscuous mode [ 759.922571][T15796] [ 759.924922][T15796] ====================================================== [ 759.931993][T15796] WARNING: possible circular locking dependency detected [ 759.939043][T15796] syzkaller #0 Tainted: G L [ 759.945020][T15796] ------------------------------------------------------ [ 759.952029][T15796] syz.1.2318/15796 is trying to acquire lock: [ 759.958091][T15796] ffff88805b260148 (&type->i_mutex_dir_key#6){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 759.967611][T15796] [ 759.967611][T15796] but task is already holding lock: [ 759.974971][T15796] ffffffff8e69df08 (param_lock){+.+.}-{4:4}, at: param_attr_store+0xec/0x300 [ 759.983781][T15796] [ 759.983781][T15796] which lock already depends on the new lock. [ 759.983781][T15796] [ 759.994174][T15796] [ 759.994174][T15796] the existing dependency chain (in reverse order) is: [ 760.003179][T15796] [ 760.003179][T15796] -> #3 (param_lock){+.+.}-{4:4}: [ 760.010403][T15796] __mutex_lock+0x1a2/0x1b90 [ 760.015548][T15796] ieee80211_init_rate_ctrl_alg+0x1df/0x3b0 [ 760.022085][T15796] ieee80211_register_hw+0x2950/0x4140 [ 760.028144][T15796] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 760.034473][T15796] init_mac80211_hwsim+0x6db/0x7f0 [ 760.040191][T15796] do_one_initcall+0x11d/0x760 [ 760.045491][T15796] kernel_init_freeable+0x6e5/0x7a0 [ 760.051312][T15796] kernel_init+0x1f/0x1e0 [ 760.056180][T15796] ret_from_fork+0x754/0xd80 [ 760.061305][T15796] ret_from_fork_asm+0x1a/0x30 [ 760.066597][T15796] [ 760.066597][T15796] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 760.073818][T15796] __mutex_lock+0x1a2/0x1b90 [ 760.078971][T15796] cgrp_css_online+0xa1/0x1f0 [ 760.084269][T15796] online_css+0xb2/0x350 [ 760.089047][T15796] cgroup_apply_control_enable+0x8bd/0xbd0 [ 760.095387][T15796] cgroup_mkdir+0x57f/0x1330 [ 760.100518][T15796] kernfs_iop_mkdir+0x111/0x190 [ 760.105916][T15796] vfs_mkdir+0x361/0x850 [ 760.110700][T15796] filename_mkdirat+0x48b/0x5e0 [ 760.116081][T15796] __x64_sys_mkdirat+0x89/0xc0 [ 760.121372][T15796] do_syscall_64+0x106/0xf80 [ 760.126501][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.132920][T15796] [ 760.132920][T15796] -> #1 (cgroup_mutex){+.+.}-{4:4}: [ 760.140319][T15796] __mutex_lock+0x1a2/0x1b90 [ 760.145446][T15796] cgroup_kn_lock_live+0x116/0x520 [ 760.151092][T15796] cgroup_rmdir+0x22/0x2e0 [ 760.156046][T15796] kernfs_iop_rmdir+0x106/0x170 [ 760.161446][T15796] vfs_rmdir+0x328/0x8a0 [ 760.166221][T15796] filename_rmdir+0x31a/0x5c0 [ 760.171431][T15796] __x64_sys_rmdir+0x46/0x70 [ 760.176560][T15796] do_syscall_64+0x106/0xf80 [ 760.181685][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.188106][T15796] [ 760.188106][T15796] -> #0 (&type->i_mutex_dir_key#6){++++}-{4:4}: [ 760.196560][T15796] __lock_acquire+0x14b8/0x2630 [ 760.201950][T15796] lock_acquire+0x1cf/0x380 [ 760.206991][T15796] down_read+0x99/0x460 [ 760.211687][T15796] lookup_slow+0x42/0x70 [ 760.216475][T15796] path_lookupat+0x5e8/0xc40 [ 760.221600][T15796] filename_lookup+0x202/0x590 [ 760.226904][T15796] kern_path+0x37/0x50 [ 760.231516][T15796] lookup_bdev+0xd8/0x280 [ 760.236460][T15796] bdev_file_open_by_path+0x82/0x330 [ 760.242277][T15796] block2mtd_setup2.isra.0+0x2ee/0xc70 [ 760.248373][T15796] block2mtd_setup+0xbd/0xd0 [ 760.253494][T15796] param_attr_store+0x199/0x300 [ 760.258874][T15796] module_attr_store+0x58/0x80 [ 760.264171][T15796] sysfs_kf_write+0xf2/0x150 [ 760.269290][T15796] kernfs_fop_write_iter+0x3e0/0x5f0 [ 760.275098][T15796] vfs_write+0x6ac/0x1070 [ 760.279963][T15796] ksys_write+0x12a/0x250 [ 760.284814][T15796] do_syscall_64+0x106/0xf80 [ 760.289942][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.296364][T15796] [ 760.296364][T15796] other info that might help us debug this: [ 760.296364][T15796] [ 760.306586][T15796] Chain exists of: [ 760.306586][T15796] &type->i_mutex_dir_key#6 --> rtnl_mutex --> param_lock [ 760.306586][T15796] [ 760.319566][T15796] Possible unsafe locking scenario: [ 760.319566][T15796] [ 760.327014][T15796] CPU0 CPU1 [ 760.332414][T15796] ---- ---- [ 760.337783][T15796] lock(param_lock); [ 760.341774][T15796] lock(rtnl_mutex); [ 760.348277][T15796] lock(param_lock); [ 760.354789][T15796] rlock(&type->i_mutex_dir_key#6); [ 760.360090][T15796] [ 760.360090][T15796] *** DEADLOCK *** [ 760.360090][T15796] [ 760.368229][T15796] 5 locks held by syz.1.2318/15796: [ 760.373422][T15796] #0: ffff88807c19a478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 760.382506][T15796] #1: ffff88803474e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 760.391499][T15796] #2: ffff88805b437888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 760.401308][T15796] #3: ffff888034c840f8 (kn->active#4){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 760.411263][T15796] #4: ffffffff8e69df08 (param_lock){+.+.}-{4:4}, at: param_attr_store+0xec/0x300 [ 760.420517][T15796] [ 760.420517][T15796] stack backtrace: [ 760.426410][T15796] CPU: 0 UID: 0 PID: 15796 Comm: syz.1.2318 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.426451][T15796] Tainted: [L]=SOFTLOCKUP [ 760.426460][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 760.426477][T15796] Call Trace: [ 760.426486][T15796] [ 760.426495][T15796] dump_stack_lvl+0x100/0x190 [ 760.426536][T15796] print_circular_bug.cold+0x178/0x1c7 [ 760.426578][T15796] check_noncircular+0x146/0x160 [ 760.426613][T15796] __lock_acquire+0x14b8/0x2630 [ 760.426648][T15796] ? __up_read+0x2c5/0x700 [ 760.426685][T15796] lock_acquire+0x1cf/0x380 [ 760.426715][T15796] ? lookup_slow+0x42/0x70 [ 760.426747][T15796] ? __pfx___might_resched+0x10/0x10 [ 760.426785][T15796] ? find_held_lock+0x2b/0x80 [ 760.426810][T15796] down_read+0x99/0x460 [ 760.426854][T15796] ? lookup_slow+0x42/0x70 [ 760.426885][T15796] ? __pfx_down_read+0x10/0x10 [ 760.426922][T15796] ? __d_lookup+0x266/0x4a0 [ 760.426961][T15796] lookup_slow+0x42/0x70 [ 760.426993][T15796] path_lookupat+0x5e8/0xc40 [ 760.427031][T15796] filename_lookup+0x202/0x590 [ 760.427072][T15796] ? __pfx_filename_lookup+0x10/0x10 [ 760.427124][T15796] ? __asan_memcpy+0x3c/0x60 [ 760.427162][T15796] kern_path+0x37/0x50 [ 760.427199][T15796] lookup_bdev+0xd8/0x280 [ 760.427228][T15796] ? __pfx_lookup_bdev+0x10/0x10 [ 760.427261][T15796] bdev_file_open_by_path+0x82/0x330 [ 760.427295][T15796] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 760.427334][T15796] block2mtd_setup2.isra.0+0x2ee/0xc70 [ 760.427373][T15796] ? __pfx_block2mtd_setup2.isra.0+0x10/0x10 [ 760.427409][T15796] ? rcu_is_watching+0x12/0xc0 [ 760.427455][T15796] ? trace_contention_end+0x140/0x180 [ 760.427506][T15796] block2mtd_setup+0xbd/0xd0 [ 760.427540][T15796] param_attr_store+0x199/0x300 [ 760.427566][T15796] ? __pfx_param_attr_store+0x10/0x10 [ 760.427591][T15796] module_attr_store+0x58/0x80 [ 760.427628][T15796] ? __pfx_module_attr_store+0x10/0x10 [ 760.427665][T15796] sysfs_kf_write+0xf2/0x150 [ 760.427697][T15796] kernfs_fop_write_iter+0x3e0/0x5f0 [ 760.427724][T15796] ? __pfx_sysfs_kf_write+0x10/0x10 [ 760.427756][T15796] vfs_write+0x6ac/0x1070 [ 760.427797][T15796] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 760.427826][T15796] ? __pfx_vfs_write+0x10/0x10 [ 760.427879][T15796] ksys_write+0x12a/0x250 [ 760.427902][T15796] ? __pfx_ksys_write+0x10/0x10 [ 760.427930][T15796] do_syscall_64+0x106/0xf80 [ 760.427964][T15796] ? clear_bhb_loop+0x40/0x90 [ 760.427994][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.428021][T15796] RIP: 0033:0x7f1e1539c799 [ 760.428044][T15796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.428071][T15796] RSP: 002b:00007f1e161c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 760.428097][T15796] RAX: ffffffffffffffda RBX: 00007f1e15615fa0 RCX: 00007f1e1539c799 [ 760.428116][T15796] RDX: 0000000000000025 RSI: 0000200000000000 RDI: 0000000000000006 [ 760.428134][T15796] RBP: 00007f1e15432c99 R08: 0000000000000000 R09: 0000000000000000 [ 760.428151][T15796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.428169][T15796] R13: 00007f1e15616038 R14: 00007f1e15615fa0 R15: 00007ffc12169ee8 [ 760.428195][T15796] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 760.882070][T15796] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 760.905568][T13981] Bluetooth: hci4: command tx timeout [ 762.695952][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.721768][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.742277][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.749674][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.784574][ T58] veth1_macvtap: left promiscuous mode [ 762.790077][ T58] veth0_macvtap: left promiscuous mode [ 762.811622][ T58] veth1_vlan: left promiscuous mode [ 762.816934][ T58] veth0_vlan: left promiscuous mode [ 763.080919][ T58] team0 (unregistering): Port device team_slave_1 removed [ 763.114056][ T58] team0 (unregistering): Port device team_slave_0 removed [ 763.520549][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.557295][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.605536][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.646630][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.745629][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.809677][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.864834][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.897184][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.019480][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.063852][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.119450][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.189349][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.271886][ T58] bridge_slave_1: left allmulticast mode [ 764.277621][ T58] bridge_slave_1: left promiscuous mode [ 764.288489][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.297475][ T58] bridge_slave_0: left allmulticast mode [ 764.303190][ T58] bridge_slave_0: left promiscuous mode [ 764.309155][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.317653][ T58] gretap0: left allmulticast mode [ 764.322755][ T58] gretap0: left promiscuous mode [ 764.327898][ T58] bridge0: port 3(gretap0) entered disabled state [ 764.336117][ T58] bridge_slave_1: left allmulticast mode [ 764.341751][ T58] bridge_slave_1: left promiscuous mode [ 764.348088][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.356562][ T58] bridge_slave_0: left allmulticast mode [ 764.362299][ T58] bridge_slave_0: left promiscuous mode [ 764.367915][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.376435][ T58] gretap0: left allmulticast mode [ 764.381539][ T58] bridge0: port 3(gretap0) entered disabled state [ 764.389477][ T58] bridge_slave_1: left allmulticast mode [ 764.395228][ T58] bridge_slave_1: left promiscuous mode [ 764.400850][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.408714][ T58] bridge_slave_0: left allmulticast mode [ 764.414669][ T58] bridge_slave_0: left promiscuous mode [ 764.420291][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.531774][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.541296][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.551273][ T58] bond0 (unregistering): Released all slaves [ 764.629368][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.638977][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.648368][ T58] bond0 (unregistering): Released all slaves [ 764.683100][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.694593][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.704719][ T58] bond0 (unregistering): Released all slaves [ 764.771666][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.781211][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.790535][ T58] bond0 (unregistering): Released all slaves [ 764.905161][ T58] tipc: Left network mode [ 766.161645][ T58] hsr_slave_0: left promiscuous mode [ 766.167315][ T58] hsr_slave_1: left promiscuous mode [ 766.173408][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.181228][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.190534][ T58] hsr_slave_0: left promiscuous mode [ 766.196197][ T58] hsr_slave_1: left promiscuous mode [ 766.201780][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.209455][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.216982][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.224416][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.233806][ T58] hsr_slave_0: left promiscuous mode [ 766.239385][ T58] hsr_slave_1: left promiscuous mode [ 766.245007][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.252389][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.259871][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.267285][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.276695][ T58] hsr_slave_0: left promiscuous mode [ 766.282285][ T58] hsr_slave_1: left promiscuous mode [ 766.288258][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.295684][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.303193][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.310593][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.323577][ T58] veth1_macvtap: left promiscuous mode [ 766.329039][ T58] veth0_macvtap: left promiscuous mode [ 766.335029][ T58] veth1_vlan: left promiscuous mode [ 766.340262][ T58] veth0_vlan: left promiscuous mode [ 766.346162][ T58] veth1_macvtap: left promiscuous mode [ 766.351638][ T58] veth0_macvtap: left promiscuous mode [ 766.358415][ T58] veth1_vlan: left promiscuous mode [ 766.363672][ T58] veth0_vlan: left promiscuous mode [ 766.369408][ T58] veth1_macvtap: left promiscuous mode [ 766.374921][ T58] veth0_macvtap: left promiscuous mode [ 766.380408][ T58] veth1_vlan: left promiscuous mode [ 766.385745][ T58] veth0_vlan: left promiscuous mode [ 766.536452][ T58] team0 (unregistering): Port device team_slave_1 removed [ 766.546374][ T58] team0 (unregistering): Port device team_slave_0 removed [ 766.647116][ T58] team0 (unregistering): Port device team_slave_1 removed [ 766.657485][ T58] team0 (unregistering): Port device team_slave_0 removed [ 766.748029][ T58] team0 (unregistering): Port device team_slave_1 removed [ 766.758395][ T58] team0 (unregistering): Port device team_slave_0 removed [ 766.847277][ T58] team0 (unregistering): Port device team_slave_1 removed [ 766.857433][ T58] team0 (unregistering): Port device team_slave_0 removed