last executing test programs: 7m51.736352664s ago: executing program 2 (id=917): accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 7m51.372160349s ago: executing program 2 (id=919): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) io_uring_setup$auto(0x6, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x183000, 0x0) io_uring_setup$auto(0xa, 0x0) open(0x0, 0x161342, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x80502, 0x0) sysfs$auto(0x2, 0x24, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0x252, 0x2007d48, 0x948b, 0x5, 0x0, 0x4b, 0x3, 0xfffffffffffffffd, 0x80000005, 0x9, 0x4, 0x5, 0x1, 0x5]}, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) 7m50.535424248s ago: executing program 2 (id=922): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) ioctl$auto(0xffffffffffffffff, 0x8936, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r0, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) 7m47.126345015s ago: executing program 2 (id=928): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) ioctl$auto(0xffffffffffffffff, 0x8936, 0x1) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) read$auto_msr_fops_msr(0xffffffffffffffff, &(0x7f0000000ac0)=""/4096, 0x1000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x200300) sendto$auto(0x3, 0x0, 0x2, 0xf035, &(0x7f0000000340)=@hci={0x1f, 0x5865, 0x3}, 0x22) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x8, 0x0, 0x4000006) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x52) write$auto(0x3, 0x0, 0x5c8) socket(0x22, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r0, 0xfffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x3000000) 7m43.416870567s ago: executing program 2 (id=937): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001800)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x80000001, &(0x7f0000000280)={{0x2, 0x7}, {0x9, 0x400}, 0x10000, 0x7, 0x100000001, 0x2, 0x80, 0xfffffffffffff801, 0x6, 0x1, 0x100000000, 0x9, 0x8, 0x8, 0x4, 0x1}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={&(0x7f0000000800)=ANY=[@ANYBLOB="ec0c0100", @ANYRES8=r1, @ANYBLOB="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", @ANYRES8=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0xcec}, 0x1, 0x0, 0x0, 0x800d808}, 0x20040871) write$auto(0x3, 0x0, 0x100000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r3, 0x5646, r3) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) mmap$auto(0x1, 0x22, 0x4000000000df, 0xeb1, r4, 0x7f) gettid() socket(0x10, 0x2, 0x0) brk$auto(0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x8000000000000001, &(0x7f00000007c0)=0x1) timer_gettime$auto(0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) mmap$auto(0x0, 0x2c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) 7m41.405713128s ago: executing program 2 (id=941): timer_settime$auto(0x1, 0x3, 0x0, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) socket(0xa, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 64) ioctl$auto(r0, 0x400454ca, 0x38) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (rerun: 32) symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') (async) r1 = fcntl$getown(r0, 0x9) prctl$auto(0x79, 0x7, r1, 0x4d, 0x1) (async) getrlimit$auto(0x3, 0x0) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) (async) socket(0xa, 0x1, 0x84) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket(0x2, 0x1, 0x6) setsockopt$auto(0x3, 0x6, 0x20, 0x0, 0xfb3) 7m26.263180783s ago: executing program 32 (id=941): timer_settime$auto(0x1, 0x3, 0x0, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) socket(0xa, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 64) ioctl$auto(r0, 0x400454ca, 0x38) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (rerun: 32) symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') (async) r1 = fcntl$getown(r0, 0x9) prctl$auto(0x79, 0x7, r1, 0x4d, 0x1) (async) getrlimit$auto(0x3, 0x0) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) (async) socket(0xa, 0x1, 0x84) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket(0x2, 0x1, 0x6) setsockopt$auto(0x3, 0x6, 0x20, 0x0, 0xfb3) 28.115361435s ago: executing program 3 (id=2288): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) shmctl$auto(0x1, 0x6b9, &(0x7f0000000180)={{0xfa, 0xee01, 0x0, 0x4, 0x80000000, 0x18d, 0x7fff}, 0x1, 0x5, 0x6, 0x7f, @inferred=0xffffffffffffffff, @raw=0x8, 0x5, 0x0, &(0x7f0000000040)="cae8f59d1981766cca5442c0b19c2da8c75684c31fb043befd5125c5c974dce363d2be5a0806ea0e4f693f9ebf845cbd689869dd852d276e97263cc8624cf6c7a1ed3a929be048", &(0x7f00000000c0)="72616e59e93826554f4645ed7008a93666e91ca0a94586659e008ddaeeca375fc937dfacf4a6adc141a89be50d002157018c55b71f37ddad8d5e0306e1761c4a78c30c6281d37e20cf5912611d4ffa2945715beeb9f9f664fa2090181736a0f4aaca074fdb08f65dda86f08715b4da1b9eaab4d552a24d3770a1c46561b780f9e9dc3dabf90542dd"}) setreuid$auto(r0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 27.872081249s ago: executing program 3 (id=2290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0xfc}, @NL80211_ATTR_IE={0xbb, 0x2a, "c487902c7954c3382a58d878ff3ddcd9cfb6c1745187ff2a06f76a865987f7456dfa716f8917f4e6a7f58341809c52c471077c2f115fbae44cd7316d50ec2b5d1e86f8506e0f141d960308de51cb65320149ce306f3a6f7ad876f71393d30533cbed27666d83ff5b27580b1266928a6370c77cc21510ad1ce291792138d915315521592224030b163bae8cc05bf25150b76530ee56c6451e7487cb04befdbe4ed9bff3263043d0955f2232e686bd82082d761aa789550c"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/rose1/phys_port_name\x00', 0x406000, 0x0) sendmsg$auto_NL80211_CMD_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x48}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x6}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}]}, 0x38}}, 0x1) syslog$auto_SYSLOG_ACTION_OPEN(0x1, &(0x7f0000000340)='{^\x00', 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/fail-nth\x00', 0x303601, 0x0) sendmsg$auto_VDPA_CMD_MGMTDEV_GET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040) r2 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f00000004c0), 0x20400, 0x0) r3 = fcntl$auto_F_GETOWN(r0, 0x9, 0x8) r4 = prctl$auto(0xfffffff1, 0x6, r3, 0x9, 0x2) r5 = fanotify_init$auto(0x6, 0x5) r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000540), r0) sendmsg$auto_IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r6, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0xafe}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "ff252490582215ee65068a7bf6df4b2a"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_SMC_NETLINK_GET_LINK_SMCR(r0, &(0x7f0000001700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000016c0)={&(0x7f0000000680)={0x1014, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, "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"}, 0x1014}, 0x1, 0x0, 0x0, 0x4000850}, 0x90) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001740), r5) shmctl$auto_SHM_UNLOCK(0x1, 0xc, &(0x7f0000001900)={{0xd9a, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x5, 0x8, 0x1}, 0x8, 0x9, 0x7, 0x7, @inferred=r3, @inferred=r3, 0x8000, 0x0, &(0x7f0000001780)="787186de149ce46d01966d4ba6288c4bed43d51b6dae8c11eb7a10565f840ff5165dcbe96ead77ce07d0e14fe8a6a3e8ba7faad0590af18489106a6fb6528cb985bf01e02883b8bdaea31a6b20b4396efa2aff690d8f9885db856640f26e2a1e9ebed6cd91bbd07e9813389dfabc34592d44d4dde57d64e18d9f712f549c1149f559fd876869865668baa6f8fdf91bd9d9ce5d3ec24fca7b2f237b6222403f759804e73e40cececc821b5e807d11912eaa40ff077cef7c2cc94af6f15bc9679e7e2598eb2e72d637f1ad8eedddb563d1661e034e37", &(0x7f0000001880)="9f4a99484b1187a102aeff5994c66efc386cf1371a67841133b5c0dbd76f5a8d54259b6dca46998e6f5b274b909e48b714ffff4d37ff2f29149be7a243cc0f55b1"}) msgctl$auto_IPC_STAT(0x81, 0x2, &(0x7f0000001a00)={{0x1, 0xee00, 0xffffffffffffffff, 0x2f5, 0x8, 0x3, 0x8001}, &(0x7f0000001980)=0x2, &(0x7f00000019c0)=0x7, 0x8000000000000000, 0x90, 0x7, 0x6, 0x7, 0xfff7, 0x5, 0x7ff, @inferred=r3, @raw=0x8}) msgctl$auto_MSG_STAT_ANY(0x5, 0xd, &(0x7f0000001b00)={{0x80, 0xee01, 0xee01, 0x4, 0x5, 0x9, 0x1}, &(0x7f0000001a80)=0x1, &(0x7f0000001ac0)=0x5, 0x3, 0x980b, 0x3, 0x800, 0xb30c, 0x2, 0x9, 0xe12, @raw, @raw=0x3}) keyctl$auto(0x3, r7, r10, r12, 0x2eb) msgctl$auto_MSG_STAT_ANY(0xea8, 0xd, &(0x7f0000001c00)={{0x2, r7, r12, 0x9, 0x9, 0x0, 0xff}, &(0x7f0000001b80)=0x6, &(0x7f0000001bc0)=0xe, 0x1, 0x100000001, 0x0, 0x6, 0x9, 0x9, 0x9, 0xff, @raw=0x400, @raw=0x5}) fcntl$auto_F_GETSIG(r4, 0xb, 0x8000000000000001) r14 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001cc0), r2) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, r14, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c884}, 0x44) ioctl$auto_XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000001dc0)={0x7, @inferred=r5, @raw=0x8, 0x4, 0x6d5, '\x00', {0x7, 0x1, 0x7, r13, r8, 0x2, 0xe00, 0x1, {0x0, 0xfffff2c1}, {0x6}, {0x7, 0x3}, 0xfffffffffffffff7, 0x6, 0x10001, 0x4, 0x5, 0x8, 0x9, 0x0, 0x0, 0xe, '\x00', 0x2, 0xd, 0xfff, 0x5}}) msgctl$auto(0x10, 0x4, &(0x7f0000001f00)={{0x1ac, r7, r15, 0x8, 0x4, 0x9}, &(0x7f0000001e80)=0xe, &(0x7f0000001ec0)=0xfc, 0x5734, 0x5000000, 0x9, 0xf44, 0x1, 0x7fff, 0xe, 0x6e, @inferred=r3, @inferred=r11}) io_setup$auto(0xc, &(0x7f0000001f80)=0x9) r17 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000001fc0)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x0, 0x0) ioctl$auto_FITRIM(r17, 0xc0185879, &(0x7f0000002000)={0xfffffffffffffffb, 0x9, 0x8}) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000003600)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000035c0)={&(0x7f0000002300)={0x12b8, r14, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xfb}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4038}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xe631}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x237, 0x19, 0x0, 0x1, [@typed={0x7, 0xfd, 0x0, 0x0, @str='!)\x00'}, @typed={0x18, 0x4b, 0x0, 0x0, @binary="f784b6ef61db9c5abe5e73364a690b7322bc6c3b"}, @generic="c57a2426aa17ea2052dd522c861be7b568cc87aafd93d9ebdf8f64de838e83f882c7ae3424e4fd4dfbd8903b07bae0e55e4b3630b74bfea96f2555cddc3b607358633b13d1b2f0121c5c1570cd5c13a1ff3daa7a4757ea960e6d19ee4ed7034136521410e1cd7fc00527503fed9eb99d987cf3775d5e086df8f4948395d4e31699c23e81d1eee47d11f5", @generic="7980e7a83f2512cc69dbb70ed188aa506ced1dfdfb9658ab431215d1f0e0c8832e3b511165e095ca6ee9a00a6f9b76c07121abd89140ade1dedd61bb2a5d198645d1f1826418b880172b27bb00cd2e6b184a1cc0ce0b9a178053ac618b2458c650329b19d48d2438ae4b08a946943d8fae26ea09e72cdc05c5a52505a6aceafa0b65a31b5e54", @typed={0x8, 0x19, 0x0, 0x0, @fd=r4}, @generic="ee6e015e7b92f1fd9f062ba916d89ac1ad0734003c3363578391d47a53b59caaec594799564df15943509c023d0d2a15ba0437ed844a57707e5b88f91e3a0e8ad5b8e2dc7fe326301d6e6279b568316c29485d8563579c486d12db5eeef902183c668636365766b8f5ed50b77a8fa0b6bd0c580000c228dc268fad07912f9c7d9d11366551a1b627fb895f2b3811666c9d62368f2ef0d198d0a4b2f11bf2db38a616f8be7e7ed78da7e560fdd47144a2147c3f0c5e88eb4bf8ae92173b7a075e318b9fe4c0f5e5c85e936683cd84036b2721606f39aef857730950ad27ce82ffd34e68ef7449354c6beeb98a67d0d4226dc86873f78c7b2220e790"]}, @NL802154_ATTR_WPAN_PHY_CAPS={0x1044, 0x18, 0x0, 0x1, [@nested={0x1028, 0x9c, 0x0, 0x1, [@nested={0x4, 0xd3}, @typed={0x8, 0x71, 0x0, 0x0, @uid=r16}, @generic="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", @typed={0x8, 0x14c, 0x0, 0x0, @pid}, @nested={0x4, 0x114}, @typed={0x8, 0xd6, 0x0, 0x0, @pid=r9}, @nested={0x4, 0x72}]}, @generic="71c191bf645fcad6fed0bddd422ed5c7a4c170d3c72bee37"]}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x6}]}, 0x12b8}, 0x1, 0x0, 0x0, 0x10}, 0x200000c1) 27.650749825s ago: executing program 3 (id=2291): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x109802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffc, 0x0, 0x0, 0x5bd, r1, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x21, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) r3 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000ed03"], 0x5f}, 0x1, 0x0, 0x0, 0x20008804}, 0x40) 26.118192099s ago: executing program 3 (id=2294): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/button/parameters/lid_init_state\x00', 0x169882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr0\x00', 0x10000, 0x0) socket(0x15, 0x5, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyv8\x00', 0x480, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setresuid$auto(0xd, 0x0, 0x221) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, 0x0, 0x55) tgkill$auto_SIGCONT(r1, r1, 0x12) 25.449447787s ago: executing program 3 (id=2296): mmap$auto(0x6, 0x3fffff, 0x7, 0x11, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x22240, 0x154) r1 = bpf$auto(0x5, &(0x7f0000000100)=@iter_create={r0, 0x5d62}, 0x103) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) rseq$auto(0x0, 0x8000, 0x0, 0x6) clock_gettime$auto(0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) write$auto(r1, 0x0, 0x5) write$auto(0x1, 0x0, 0x80000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_TUNGETVNETBE2(r0, 0x800454df, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) mmap$auto(0x0, 0x28009, 0x4000000000df, 0xeb2, 0x401, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) 22.172661336s ago: executing program 3 (id=2303): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000180)=@iter_create={0xffffffffffffffff, 0xf5d}, 0x81) mmap$auto(0xffffffffffffffff, 0x2, 0x2, 0xb61b, r0, 0x8000) socket(0x2, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x3, 0x894b, 0x38) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r2, 0x40087543, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x181f82, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f00000001c0)) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0x80000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf2715d200000c00018008000100", @ANYRES32=r5], 0x20}}, 0x40000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) clone3$auto(&(0x7f00000000c0)={0xd, 0xb2, 0x0, 0x5, 0x5, 0xc, 0x1, 0xfffffffffffffff9, 0x3, 0x480000, 0x81}, 0x9) socket(0x29, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x2}, 0xa}, 0x1, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xfffffff8, 0xbce, 0x8, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r0, 0x37bc, 0x8001, &(0x7f0000000140)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB="01002cbd7400fcdbdf25140000000c00018008000100", @ANYRES32=r9, @ANYBLOB="0500180007000000080002000600000005001900e9000000"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0) 8.803903619s ago: executing program 4 (id=2330): openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) read$auto_sco_debugfs_fops_(0xffffffffffffffff, &(0x7f00000003c0)=""/229, 0xe5) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) mmap$auto(0x1, 0x2020009, 0x1, 0xebd, 0xffffffffffffffff, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1cb603, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x100000007fffffff, 0x40000b, 0xa, 0x109b72, 0xffffffffffffffff, 0x7ffffffffffffffa) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x454502, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) setns(r0, 0x60020000) mknod$auto(0x0, 0x1081, 0x3) open(0x0, 0xa00, 0x100) socket(0xa, 0x6, 0x83) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) 8.667878341s ago: executing program 1 (id=2331): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/teql0/statistics/tx_aborted_errors\x00', 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) read$auto(r0, 0x0, 0x85) r1 = socket(0xa, 0xa, 0x3) setsockopt$auto_SO_WIFI_STATUS(r1, 0x0, 0x30, 0x0, 0x8f) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/geneve0/drop_unicast_in_l2_multicast\x00', 0xc1e13b61f74943c7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) keyctl$auto(0x21, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x5, 0x4, 0x6, 0x17) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x309801, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r2, 0x0, 0xfffffdef) mseal$auto(0x0, 0x7dda, 0x2000000) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(r2, 0x0, 0x8) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) 7.121036303s ago: executing program 4 (id=2332): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/8/affinity_hint\x00', 0x81, 0x0) fremovexattr$auto(r0, &(0x7f00000000c0)='/dev/snd/controlC0\x00') io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080)="ea8b4f8dc7ac89969ff3b7bd5c2705119eedd2090950614a3ff564d100"/39, 0x7) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x5, 0x6) mmap$auto(0x0, 0x8002, 0xffffffffffffffff, 0x7fffffff, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffe) unshare$auto(0x40000080) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 6.724015322s ago: executing program 1 (id=2333): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0x2, 0x10000000004, 0x9) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8932, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sda\x00', 0x200000, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x10, 0x80002, 0x8) pipe$auto(0x0) 6.713951123s ago: executing program 0 (id=2334): syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card2/oss_mixer\x00', 0xe0182, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000480)="f21a9a3c5c3e006e163bb154d7886d87a5c2574c58e9867ecec3371cadbc48770d", 0x21) readv$auto(0x3, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000000c0)=0x8) getsockopt$auto(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x24800, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1, 0x0) ioctl$auto_FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000040)) 6.288991781s ago: executing program 0 (id=2335): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x1e9a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r2 = io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r1, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x808e3, 0x0) write$auto(r3, &(0x7f0000000200)='\x00'/14, 0x2) unshare$auto(0x40000080) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES64=r5, @ANYBLOB="00000a00004e8f0bc0c6e581f3"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) madvise$auto(0x1000, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 5.463871033s ago: executing program 4 (id=2336): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0) read$auto_ftrace_event_filter_fops_trace_events(r0, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)="2bb5abdb977cf4ebec604e719e3bc8d34ed9b8b0b8032cc19c0c8bf6a4e969e38390edbf66cd1cb6501458ef76fc5bb39e5c945d2153ea364bd19f6a4ab35e5031b541e5fb3fbafb67432a1a9ef0a8bbecca0a"}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x82401, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) 4.007062639s ago: executing program 0 (id=2337): socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x9) r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x49ff01, 0x0) ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000000)={@padding, 0xbb}) mmap$auto(0x0, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000100)=@rc={0x1f, @none, 0x80}, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x4, 0x5, 0x7) sysfs$auto(0xc, 0x4000000000000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x2, 0x4, "790eaa00ff0002001f00000000010043eeb0b053030001ffff000e000000000500", @raw=0x5}, 0x4, 0x966, 0x3, @inferred, @reserved="ed2e90cfe82d30a9aa8864ce2499d0bdbd47b1cba6d17b649a101edefdc527dc7e50b8cc8e517e397f7485391abffc0e3645f859d6c6b384d73b9c710e7ed5b4f99625fc3e501265c339f6944fc1fed41bca29f2215626ad616b7ab3cffdb4dc4f287aabf1d89be68d0aa27ce5ffb1ab5cfba7034592de1fca9aa95416844df6", "6cc1292e63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bede5311121c760cb9611c78e6947a998070c00"}) mmap$auto(0xc, 0x4020009, 0x2df, 0xeb1, 0x401, 0x5) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/usb/usbmon/17u\x00', 0x60f00, 0x0) read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x0) msync$auto(0x200000, 0x2000000005, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/mtu\x00', 0x2062, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40, 0x100) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) 4.006812888s ago: executing program 1 (id=2338): r0 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r2, 0x301, 0x70bd29, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x20008810}, 0x880) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/nfsd.fh/flush\x00', 0xaa902, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_DONTROUTE(r3, 0x7ff, 0x5, &(0x7f0000000000)='net-shaper\x00', &(0x7f0000000040)=0x2) mmap$auto(0x7ffffffffffffffd, 0xb3b7, 0x4000000000e1, 0x2000000001a, 0x401, 0x7ffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, 0xfffffffffffffffd) semctl$auto_SETALL(0x0, 0xc, 0x11, 0x81) unshare$auto(0x40000080) umount2$auto(0x0, 0x4) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0xc81, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1302, 0x0) sendfile$auto(r5, r5, 0x0, 0x43) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x400, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r6 = gettid() rt_sigqueueinfo$auto_SIGCONT(r6, 0x12, 0x0) writev$auto(0x3, 0x0, 0x8) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3) 3.847105789s ago: executing program 4 (id=2339): close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) eventfd$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x1f, 0x0) 3.333069317s ago: executing program 0 (id=2340): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) r1 = getsockopt$auto(r0, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r1, r1, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred=0xffffffffffffffff, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @inferred=0x0}, 0x2, 0x5, 0x4, @raw, @enumerated={0x2, 0x4, "23f7b11944d233964b2a5f32b66b0fe18e5b2d4edd0d9d16061791173f5412f21386d28cc66faa7a2336ad4b912a17fed2d89f48eefdf686b94fbc1bd2580477", 0x7fffffff, 0x2}, "7adec199a16a2311eacf2fc7ae6e9858eeb78db8d04fdd73340238d212b6debe0eda71bdd709254592b67f9ca1adb17884a16f7ce8cbce0bb32791702b8d7c38"}) rt_sigqueueinfo$auto(r2, 0x7e, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x41, 0x7e73, @_sigfault={0x0, @_perf={0xc, 0x40009, 0x9}}}}) r3 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x11}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000300ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r8 = wait4$auto(r7, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0x6, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r8, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457ffe68b8d432bb"], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r8}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r8, 0xc, 0x6) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) 1.965101837s ago: executing program 0 (id=2341): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x40842, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/saved_tgids\x00', 0x241842, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0xf3) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r0 = open(&(0x7f0000000100)='./file0\x00', 0x149443, 0xc8) r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000000c0)={r0, 0x8, 0x2000000, 0x8000}) (fail_nth: 2) 1.958495367s ago: executing program 4 (id=2342): socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x16bd00, 0x0) pread64$auto(r0, 0x0, 0x7, 0x7ff) sysfs$auto(0x2, 0x40, 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b49, 0x1) r2 = socket(0x10, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd13/trace/pid\x00', 0x62142, 0x0) write$auto(r3, &(0x7f0000000480)='/Eev/audio1\x00VI#\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbb5`\xa4m\xffb\xc0d\xfer()M7K\xb2\xeb\x17\xbb\x7f\xea!*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaIQ`}|\xdc\xb1\xdd\xa8\xbb\xbf\xe3\b\xcc\xf1.\xd3v\x98\xe1\xd1\x84~\xa2{\xc5\x13\x8b0&\xd9\xb9\f\xd9\xfb\xcb\xbaG\xee\xf3\xd41\xa6Y\x19~\x92\xea\xdc\xd7\x06~\x89+\xe8\xd3\xf7\xf5\\\xaa\xfa\xa3\x95j!\x8a\x8d\x1c\xf9\x0eS|\xc0\xb1\x04\xbd\xfbn\x82\xb2h\xad/\xf4\xa2L\xf7\xe5\xec\xfe\xd7\x91Tt\xe2\xe5H\xd5M5S\xc7\x91^\x8b\x0e\xa4\xed\xe0\xd9^B\x1as\x8d\x1d\x0f-\x0f\xd1\x139\x91\x84\xdb\xa6TW\xe3A\xd9\x0f\xb6m\x80\xff|\xc3\xe1\'\x8c\xc5\xa7\x17l\xbd\xca\xfc\x8c\x12\xb3`D=l8\x9dW\xa4\x87\x05\xc0\xfb\xa5\x01:\xcfa\xccd\xe4\xcf\x04\xc9\x17\x18\xae7n\x03UQ\xa5\x85\xb50\x06\v\xdc\xe2\xdc\xeeY\x92\xd7\x0e\xfa\xe8K\xcb\xa3\xb8\xe0TQ\xc6\x00'/364, 0x9886) r4 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000100), 0xa200, 0x0) pread64$auto(r4, 0x0, 0x393a, 0x100000001) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/rtc\x00', 0x88000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd700002dcdf25030000000400080014000180100010800400080008000b00", @ANYRES32=0x0, @ANYBLOB="004f05ba8e9ffc1ecb05ed6904000803"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x6, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r8 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x303100, 0x0) r9 = getpid() process_vm_readv$auto(r9, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r8, 0x400454ca, 0x38) r10 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r10, 0x400454ca, 0x38) socket(0x29, 0x2, 0x0) 1.812438775s ago: executing program 1 (id=2343): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0x80040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001080)=""/4143, 0x102f) mmap$auto(0x0, 0x400000000020009, 0x4, 0xeb1, 0xffffffffffffffff, 0x2000008004) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200542, 0x51c) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r2, 0x80045505, 0xffffffffffffffff) symlink$auto(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') lstat$auto(&(0x7f0000000000)='./file0/../file0\x00', 0x0) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) unlink$auto(&(0x7f0000000380)='./file0\x00') socket(0x26, 0x4, 0xe8) 1.271270914s ago: executing program 1 (id=2344): close_range$auto(0x2, 0x8, 0x0) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x8000000000000001}, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x21, 0x0) r2 = socket(0x1d, 0xa, 0x7fff) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x1) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, r2) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r4, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) setsockopt$auto_SO_ERROR(r4, 0x7ff, 0x4, 0x0, 0x7f) mremap$auto(0x200001000000, 0x4, 0x4, 0x3, 0x100000000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r5, 0x8000) mremap$auto(0x7fffffffffffffff, 0xf, 0xffffffffffffffff, 0x3ff, 0x828f) madvise$auto(0x0, 0x400053, 0x9) madvise$auto(0x0, 0xfffeffffffff0001, 0x2) futex$auto(&(0x7f00000000c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) r6 = socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'geneve1\x00'}) 1.102564593s ago: executing program 4 (id=2345): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r3 = ioctl$auto_TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=0xe64f) setsockopt$auto_SO_RCVLOWAT(r3, 0x1, 0x12, &(0x7f0000000080)='/[::\x00', 0xfffff0b9) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_FRAME(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_DISABLE_HT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x800) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f00000002c0)=""/190, 0xfffffe39) 198.459086ms ago: executing program 1 (id=2346): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) (async) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto(0x4000008, 0x6, 0x4, 0xdba, 0x7) (async) prctl$auto(0x4000008, 0x6, 0x4, 0xdba, 0x7) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) 0s ago: executing program 0 (id=2347): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x109802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffc, 0x0, 0x0, 0x5bd, r1, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x21, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/hugetlb_optimize_vmemmap\x00', 0xa0202, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fffe000) r4 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000ed"], 0x5f}, 0x1, 0x0, 0x0, 0x20008804}, 0x40) kernel console output (not intermixed with test programs): qs_on+0x78/0x100 [ 711.398142][T14736] do_syscall_64+0x115/0x840 [ 711.398175][T14736] ? clear_bhb_loop+0x40/0x90 [ 711.398204][T14736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.398229][T14736] RIP: 0033:0x7f179899ce59 [ 711.398248][T14736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.398271][T14736] RSP: 002b:00007f17997da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 711.398294][T14736] RAX: ffffffffffffffda RBX: 00007f1798c15fa0 RCX: 00007f179899ce59 [ 711.398310][T14736] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 711.398324][T14736] RBP: 00007f17997da090 R08: 0000000000000000 R09: 0000000000000000 [ 711.398345][T14736] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000002 [ 711.398360][T14736] R13: 00007f1798c16038 R14: 00007f1798c15fa0 R15: 00007ffcca1fd498 [ 711.398390][T14736] [ 713.087921][T14759] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2048'. [ 713.166919][T14759] FAULT_INJECTION: forcing a failure. [ 713.166919][T14759] name failslab, interval 1, probability 0, space 0, times 0 [ 713.268087][T14759] CPU: 0 UID: 0 PID: 14759 Comm: syz.0.2048 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.268127][T14759] Tainted: [L]=SOFTLOCKUP [ 713.268135][T14759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 713.268151][T14759] Call Trace: [ 713.268159][T14759] [ 713.268169][T14759] dump_stack_lvl+0x100/0x190 [ 713.268199][T14759] should_fail_ex.cold+0x5/0xa [ 713.268231][T14759] should_failslab+0xc2/0x120 [ 713.268267][T14759] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 713.268308][T14759] ? security_file_alloc+0x34/0x2c0 [ 713.268341][T14759] ? trace_kmem_cache_alloc+0xd5/0x100 [ 713.268376][T14759] security_file_alloc+0x34/0x2c0 [ 713.268409][T14759] init_file+0x95/0x480 [ 713.268446][T14759] alloc_empty_file+0x79/0x1c0 [ 713.268484][T14759] alloc_file_pseudo+0x13a/0x230 [ 713.268523][T14759] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 713.268560][T14759] ? alloc_fd+0x476/0x790 [ 713.268591][T14759] ? do_raw_spin_unlock+0x145/0x1e0 [ 713.268623][T14759] __anon_inode_getfile+0xe8/0x280 [ 713.268665][T14759] anon_inode_getfile_fmode+0x37/0xa0 [ 713.268704][T14759] __do_sys_fanotify_init+0xab8/0xe80 [ 713.268738][T14759] do_syscall_64+0x115/0x840 [ 713.268773][T14759] ? clear_bhb_loop+0x40/0x90 [ 713.268803][T14759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.268829][T14759] RIP: 0033:0x7fb20819ce59 [ 713.268849][T14759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.268874][T14759] RSP: 002b:00007fb208fc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 713.268898][T14759] RAX: ffffffffffffffda RBX: 00007fb208416090 RCX: 00007fb20819ce59 [ 713.268915][T14759] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 713.268930][T14759] RBP: 00007fb208232d6f R08: 0000000000000000 R09: 0000000000000000 [ 713.268945][T14759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.268960][T14759] R13: 00007fb208416128 R14: 00007fb208416090 R15: 00007fff7d8f42f8 [ 713.268992][T14759] [ 716.278385][T14795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2054'. [ 716.305349][T14797] futex_wake_op: syz.1.2055 tries to shift op by -2048; fix this program [ 716.323101][T14795] openvswitch: netlink: Multiple metadata blocks provided [ 716.338074][T14797] futex_wake_op: syz.1.2055 tries to shift op by -2048; fix this program [ 716.902275][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 717.331404][T14817] capability: warning: `syz.0.2060' uses 32-bit capabilities (legacy support in use) [ 719.002115][T14834] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2064'. [ 719.096224][T14839] FAULT_INJECTION: forcing a failure. [ 719.096224][T14839] name failslab, interval 1, probability 0, space 0, times 0 [ 719.131520][T14841] block nbd0: Unsupported socket: should be TCP or UNIX. [ 719.206059][T14839] CPU: 0 UID: 0 PID: 14839 Comm: syz.4.2064 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.206099][T14839] Tainted: [L]=SOFTLOCKUP [ 719.206108][T14839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 719.206124][T14839] Call Trace: [ 719.206132][T14839] [ 719.206142][T14839] dump_stack_lvl+0x100/0x190 [ 719.206173][T14839] should_fail_ex.cold+0x5/0xa [ 719.206205][T14839] should_failslab+0xc2/0x120 [ 719.206235][T14839] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 719.206275][T14839] ? alloc_empty_file+0x5b/0x1c0 [ 719.206319][T14839] alloc_empty_file+0x5b/0x1c0 [ 719.206357][T14839] alloc_file_pseudo+0x13a/0x230 [ 719.206401][T14839] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 719.206437][T14839] ? alloc_fd+0x476/0x790 [ 719.206469][T14839] ? do_raw_spin_unlock+0x145/0x1e0 [ 719.206500][T14839] __anon_inode_getfile+0xe8/0x280 [ 719.206541][T14839] anon_inode_getfile_fmode+0x37/0xa0 [ 719.206580][T14839] __do_sys_fanotify_init+0xab8/0xe80 [ 719.206613][T14839] do_syscall_64+0x115/0x840 [ 719.206649][T14839] ? clear_bhb_loop+0x40/0x90 [ 719.206679][T14839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.206704][T14839] RIP: 0033:0x7f7d3859ce59 [ 719.206732][T14839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.206758][T14839] RSP: 002b:00007f7d39386028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 719.206781][T14839] RAX: ffffffffffffffda RBX: 00007f7d38816180 RCX: 00007f7d3859ce59 [ 719.206798][T14839] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 719.206813][T14839] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 719.206829][T14839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.206846][T14839] R13: 00007f7d38816218 R14: 00007f7d38816180 R15: 00007ffee016dfc8 [ 719.206878][T14839] [ 719.793959][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'. [ 720.920454][T14868] futex_wake_op: syz.1.2071 tries to shift op by -2048; fix this program [ 721.007498][T14868] futex_wake_op: syz.1.2071 tries to shift op by -2048; fix this program [ 721.079062][T14872] 0x000000000001-0x000000020000 : "" [ 721.151342][T14872] ftl_cs: FTL header corrupt! [ 721.419724][T14878] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2074'. [ 721.432516][T14819] Process accounting paused [ 723.264777][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 723.315680][T14899] openvswitch: netlink: Multiple metadata blocks provided [ 723.411842][T14901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2081'. [ 723.458998][T14901] openvswitch: netlink: Multiple metadata blocks provided [ 724.318765][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2086'. [ 726.003838][T14941] FAULT_INJECTION: forcing a failure. [ 726.003838][T14941] name failslab, interval 1, probability 0, space 0, times 0 [ 726.081420][T14941] CPU: 0 UID: 0 PID: 14941 Comm: syz.3.2091 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.081457][T14941] Tainted: [L]=SOFTLOCKUP [ 726.081466][T14941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.081480][T14941] Call Trace: [ 726.081488][T14941] [ 726.081497][T14941] dump_stack_lvl+0x100/0x190 [ 726.081533][T14941] should_fail_ex.cold+0x5/0xa [ 726.081568][T14941] should_failslab+0xc2/0x120 [ 726.081598][T14941] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 726.081637][T14941] ? security_inode_alloc+0x3b/0x2c0 [ 726.081664][T14941] ? lockdep_init_map_type+0x5c/0x250 [ 726.081707][T14941] security_inode_alloc+0x3b/0x2c0 [ 726.081735][T14941] inode_init_always_gfp+0xc77/0xfb0 [ 726.081770][T14941] alloc_inode+0x8e/0x250 [ 726.081807][T14941] sock_alloc+0x44/0x280 [ 726.081836][T14941] do_accept+0xf9/0x530 [ 726.081869][T14941] ? 0xffffffff81000000 [ 726.081887][T14941] ? do_raw_spin_lock+0x128/0x260 [ 726.081914][T14941] ? __pfx_do_accept+0x10/0x10 [ 726.081966][T14941] ? 0xffffffff81000000 [ 726.081982][T14941] __sys_accept4+0x108/0x200 [ 726.082019][T14941] ? __pfx___sys_accept4+0x10/0x10 [ 726.082053][T14941] ? ksys_write+0x1ac/0x250 [ 726.082080][T14941] ? __pfx_ksys_write+0x10/0x10 [ 726.082114][T14941] __x64_sys_accept+0x74/0xb0 [ 726.082148][T14941] ? lockdep_hardirqs_on+0x78/0x100 [ 726.082183][T14941] do_syscall_64+0x115/0x840 [ 726.082215][T14941] ? clear_bhb_loop+0x40/0x90 [ 726.082245][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.082270][T14941] RIP: 0033:0x7f179899ce59 [ 726.082288][T14941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.082312][T14941] RSP: 002b:00007f17997da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 726.082335][T14941] RAX: ffffffffffffffda RBX: 00007f1798c15fa0 RCX: 00007f179899ce59 [ 726.082351][T14941] RDX: ffffffff81000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 726.082366][T14941] RBP: 00007f17997da090 R08: 0000000000000000 R09: 0000000000000000 [ 726.082380][T14941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.082395][T14941] R13: 00007f1798c16038 R14: 00007f1798c15fa0 R15: 00007ffcca1fd498 [ 726.082418][T14941] ? 0xffffffff81000000 [ 726.082440][T14941] [ 726.792878][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'. [ 727.778408][T14967] FAULT_INJECTION: forcing a failure. [ 727.778408][T14967] name failslab, interval 1, probability 0, space 0, times 0 [ 727.839222][T14967] CPU: 0 UID: 0 PID: 14967 Comm: syz.4.2098 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.839262][T14967] Tainted: [L]=SOFTLOCKUP [ 727.839271][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 727.839287][T14967] Call Trace: [ 727.839295][T14967] [ 727.839305][T14967] dump_stack_lvl+0x100/0x190 [ 727.839335][T14967] should_fail_ex.cold+0x5/0xa [ 727.839367][T14967] should_failslab+0xc2/0x120 [ 727.839398][T14967] __kmalloc_cache_noprof+0x7a/0x6f0 [ 727.839434][T14967] ? ip_vs_protocol_net_init+0xbe/0x300 [ 727.839479][T14967] ip_vs_protocol_net_init+0xbe/0x300 [ 727.839521][T14967] __ip_vs_init+0x239/0x520 [ 727.839549][T14967] ? __pfx___ip_vs_init+0x10/0x10 [ 727.839575][T14967] ops_init+0x1e2/0x5f0 [ 727.839609][T14967] setup_net+0x118/0x3a0 [ 727.839636][T14967] ? __pfx_setup_net+0x10/0x10 [ 727.839664][T14967] ? mutex_init_lockdep+0xf1/0x120 [ 727.839693][T14967] copy_net_ns+0x46f/0x7c0 [ 727.839726][T14967] create_new_namespaces+0x3ea/0xac0 [ 727.839764][T14967] unshare_nsproxy_namespaces+0xf2/0x220 [ 727.839799][T14967] ksys_unshare+0x438/0xab0 [ 727.839836][T14967] ? __pfx_ksys_unshare+0x10/0x10 [ 727.839870][T14967] ? xfd_validate_state+0x129/0x190 [ 727.839912][T14967] __x64_sys_unshare+0x31/0x40 [ 727.839949][T14967] do_syscall_64+0x115/0x840 [ 727.839985][T14967] ? clear_bhb_loop+0x40/0x90 [ 727.840016][T14967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.840041][T14967] RIP: 0033:0x7f7d3859ce59 [ 727.840062][T14967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.840087][T14967] RSP: 002b:00007f7d393c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 727.840111][T14967] RAX: ffffffffffffffda RBX: 00007f7d38815fa0 RCX: 00007f7d3859ce59 [ 727.840128][T14967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 727.840144][T14967] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 727.840159][T14967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.840174][T14967] R13: 00007f7d38816038 R14: 00007f7d38815fa0 R15: 00007ffee016dfc8 [ 727.840205][T14967] [ 728.173608][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2099'. [ 728.720911][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'. [ 728.803591][T14981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2101'. [ 729.399021][T14990] FAULT_INJECTION: forcing a failure. [ 729.399021][T14990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.502859][T14990] CPU: 0 UID: 0 PID: 14990 Comm: syz.4.2103 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.502903][T14990] Tainted: [L]=SOFTLOCKUP [ 729.502913][T14990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 729.502933][T14990] Call Trace: [ 729.502944][T14990] [ 729.502953][T14990] dump_stack_lvl+0x100/0x190 [ 729.502990][T14990] should_fail_ex.cold+0x5/0xa [ 729.503022][T14990] _copy_to_user+0x32/0xd0 [ 729.503058][T14990] simple_read_from_buffer+0xcb/0x170 [ 729.503088][T14990] proc_fail_nth_read+0x1af/0x230 [ 729.503128][T14990] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 729.503170][T14990] ? rw_verify_area+0xce/0x6d0 [ 729.503196][T14990] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 729.503234][T14990] vfs_read+0x1e4/0xb30 [ 729.503265][T14990] ? __pfx_vfs_read+0x10/0x10 [ 729.503291][T14990] ? __fget_files+0x215/0x3d0 [ 729.503325][T14990] ? __fget_files+0x21f/0x3d0 [ 729.503361][T14990] ksys_read+0x12a/0x250 [ 729.503388][T14990] ? __pfx_ksys_read+0x10/0x10 [ 729.503417][T14990] ? rcu_is_watching+0x12/0xc0 [ 729.503449][T14990] do_syscall_64+0x115/0x840 [ 729.503482][T14990] ? clear_bhb_loop+0x40/0x90 [ 729.503512][T14990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.503537][T14990] RIP: 0033:0x7f7d3855d68e [ 729.503564][T14990] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 729.503589][T14990] RSP: 002b:00007f7d393a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 729.503612][T14990] RAX: ffffffffffffffda RBX: 00007f7d393a76c0 RCX: 00007f7d3855d68e [ 729.503628][T14990] RDX: 000000000000000f RSI: 00007f7d393a70a0 RDI: 0000000000000004 [ 729.503643][T14990] RBP: 00007f7d393a7090 R08: 0000000000000000 R09: 0000000000000000 [ 729.503658][T14990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.503672][T14990] R13: 00007f7d38816128 R14: 00007f7d38816090 R15: 00007ffee016dfc8 [ 729.503702][T14990] [ 730.663998][T14998] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input19 [ 731.123988][T15009] netlink: 306 bytes leftover after parsing attributes in process `syz.0.2108'. [ 733.245165][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2113'. [ 733.282173][T15033] openvswitch: netlink: Multiple metadata blocks provided [ 733.913996][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2115'. [ 734.265971][T15051] FAULT_INJECTION: forcing a failure. [ 734.265971][T15051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.352745][T15051] CPU: 0 UID: 0 PID: 15051 Comm: syz.4.2118 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.352781][T15051] Tainted: [L]=SOFTLOCKUP [ 734.352790][T15051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 734.352804][T15051] Call Trace: [ 734.352812][T15051] [ 734.352821][T15051] dump_stack_lvl+0x100/0x190 [ 734.352850][T15051] should_fail_ex.cold+0x5/0xa [ 734.352880][T15051] _copy_from_user+0x2e/0xd0 [ 734.352927][T15051] snd_pcm_oss_write2+0x1c2/0x400 [ 734.352965][T15051] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 734.352997][T15051] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 734.353028][T15051] snd_pcm_oss_write+0x729/0xa30 [ 734.353064][T15051] ? security_file_permission+0x76/0x210 [ 734.353101][T15051] vfs_write+0x2aa/0x1070 [ 734.353128][T15051] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 734.353164][T15051] ? __pfx_vfs_write+0x10/0x10 [ 734.353196][T15051] ? find_held_lock+0x2b/0x80 [ 734.353224][T15051] ? __fget_files+0x215/0x3d0 [ 734.353251][T15051] ? __fget_files+0x215/0x3d0 [ 734.353282][T15051] ? __fget_files+0x21f/0x3d0 [ 734.353316][T15051] ksys_write+0x12a/0x250 [ 734.353343][T15051] ? __pfx_ksys_write+0x10/0x10 [ 734.353371][T15051] ? rcu_is_watching+0x12/0xc0 [ 734.353402][T15051] do_syscall_64+0x115/0x840 [ 734.353434][T15051] ? clear_bhb_loop+0x40/0x90 [ 734.353462][T15051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.353485][T15051] RIP: 0033:0x7f7d3859ce59 [ 734.353504][T15051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.353526][T15051] RSP: 002b:00007f7d393a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 734.353548][T15051] RAX: ffffffffffffffda RBX: 00007f7d38816090 RCX: 00007f7d3859ce59 [ 734.353564][T15051] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 734.353578][T15051] RBP: 00007f7d393a7090 R08: 0000000000000000 R09: 0000000000000000 [ 734.353592][T15051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 734.353605][T15051] R13: 00007f7d38816128 R14: 00007f7d38816090 R15: 00007ffee016dfc8 [ 734.353634][T15051] [ 735.943361][T15081] FAULT_INJECTION: forcing a failure. [ 735.943361][T15081] name failslab, interval 1, probability 0, space 0, times 0 [ 736.033086][T15081] CPU: 0 UID: 0 PID: 15081 Comm: syz.3.2128 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.033125][T15081] Tainted: [L]=SOFTLOCKUP [ 736.033134][T15081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 736.033149][T15081] Call Trace: [ 736.033157][T15081] [ 736.033167][T15081] dump_stack_lvl+0x100/0x190 [ 736.033197][T15081] should_fail_ex.cold+0x5/0xa [ 736.033227][T15081] should_failslab+0xc2/0x120 [ 736.033258][T15081] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 736.033297][T15081] ? __proc_create+0x2cb/0x8c0 [ 736.033334][T15081] __proc_create+0x2cb/0x8c0 [ 736.033367][T15081] ? __pfx___proc_create+0x10/0x10 [ 736.033397][T15081] ? do_syscall_64+0x115/0x840 [ 736.033442][T15081] proc_create_reg+0x75/0x170 [ 736.033477][T15081] proc_create_net_data+0x8e/0x1c0 [ 736.033510][T15081] ? __pfx_proc_create_net_data+0x10/0x10 [ 736.033552][T15081] xt_proto_init+0x24e/0xb80 [ 736.033604][T15081] ? __pfx_xt_proto_init+0x10/0x10 [ 736.033637][T15081] ? trace_kmalloc+0xe3/0x110 [ 736.033668][T15081] ? __kmalloc_noprof+0x320/0x850 [ 736.033694][T15081] ? __pfx_arp_tables_net_init+0x10/0x10 [ 736.033722][T15081] ops_init+0x1e2/0x5f0 [ 736.033751][T15081] setup_net+0x118/0x3a0 [ 736.033777][T15081] ? __pfx_setup_net+0x10/0x10 [ 736.033803][T15081] ? mutex_init_lockdep+0xf1/0x120 [ 736.033832][T15081] copy_net_ns+0x46f/0x7c0 [ 736.033864][T15081] create_new_namespaces+0x3ea/0xac0 [ 736.033901][T15081] unshare_nsproxy_namespaces+0xf2/0x220 [ 736.033941][T15081] ksys_unshare+0x438/0xab0 [ 736.033977][T15081] ? __pfx_ksys_unshare+0x10/0x10 [ 736.034011][T15081] ? xfd_validate_state+0x129/0x190 [ 736.034044][T15081] __x64_sys_unshare+0x31/0x40 [ 736.034083][T15081] do_syscall_64+0x115/0x840 [ 736.034116][T15081] ? clear_bhb_loop+0x40/0x90 [ 736.034145][T15081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.034170][T15081] RIP: 0033:0x7f179899ce59 [ 736.034189][T15081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.034213][T15081] RSP: 002b:00007f17997da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 736.034235][T15081] RAX: ffffffffffffffda RBX: 00007f1798c15fa0 RCX: 00007f179899ce59 [ 736.034251][T15081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 736.034266][T15081] RBP: 00007f1798a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 736.034280][T15081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.034295][T15081] R13: 00007f1798c16038 R14: 00007f1798c15fa0 R15: 00007ffcca1fd498 [ 736.034325][T15081] [ 736.706809][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2129'. [ 736.934207][T15092] FAULT_INJECTION: forcing a failure. [ 736.934207][T15092] name failslab, interval 1, probability 0, space 0, times 0 [ 737.033611][T15092] CPU: 0 UID: 0 PID: 15092 Comm: syz.0.2130 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.033650][T15092] Tainted: [L]=SOFTLOCKUP [ 737.033659][T15092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 737.033674][T15092] Call Trace: [ 737.033682][T15092] [ 737.033691][T15092] dump_stack_lvl+0x100/0x190 [ 737.033720][T15092] should_fail_ex.cold+0x5/0xa [ 737.033751][T15092] should_failslab+0xc2/0x120 [ 737.033781][T15092] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 737.033814][T15092] ? __ip_vs_lblc_init+0x77/0x340 [ 737.033841][T15092] ? lockdep_init_map_type+0x5c/0x250 [ 737.033885][T15092] ? __pfx___ip_vs_lblc_init+0x10/0x10 [ 737.033913][T15092] kmemdup_noprof+0x29/0x60 [ 737.033939][T15092] __ip_vs_lblc_init+0x77/0x340 [ 737.033967][T15092] ? __pfx___ip_vs_lblc_init+0x10/0x10 [ 737.033993][T15092] ops_init+0x1e2/0x5f0 [ 737.034023][T15092] setup_net+0x118/0x3a0 [ 737.034049][T15092] ? __pfx_setup_net+0x10/0x10 [ 737.034076][T15092] ? mutex_init_lockdep+0xf1/0x120 [ 737.034104][T15092] copy_net_ns+0x46f/0x7c0 [ 737.034135][T15092] create_new_namespaces+0x3ea/0xac0 [ 737.034172][T15092] unshare_nsproxy_namespaces+0xf2/0x220 [ 737.034205][T15092] ksys_unshare+0x438/0xab0 [ 737.034241][T15092] ? __pfx_ksys_unshare+0x10/0x10 [ 737.034274][T15092] ? xfd_validate_state+0x129/0x190 [ 737.034307][T15092] __x64_sys_unshare+0x31/0x40 [ 737.034341][T15092] do_syscall_64+0x115/0x840 [ 737.034375][T15092] ? clear_bhb_loop+0x40/0x90 [ 737.034403][T15092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.034428][T15092] RIP: 0033:0x7fb20819ce59 [ 737.034447][T15092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.034471][T15092] RSP: 002b:00007fb208fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 737.034493][T15092] RAX: ffffffffffffffda RBX: 00007fb208415fa0 RCX: 00007fb20819ce59 [ 737.034510][T15092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 737.034524][T15092] RBP: 00007fb208232d6f R08: 0000000000000000 R09: 0000000000000000 [ 737.034539][T15092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.034553][T15092] R13: 00007fb208416038 R14: 00007fb208415fa0 R15: 00007fff7d8f42f8 [ 737.034583][T15092] [ 738.030654][T15105] blktrace: Concurrent blktraces are not allowed on loop2 [ 740.106746][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2140'. [ 741.077878][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2142'. [ 741.642504][T13109] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 741.650431][T13109] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 741.660581][T13109] CPU: 0 UID: 0 PID: 13109 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.660619][T13109] Tainted: [L]=SOFTLOCKUP [ 741.660627][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 741.660667][T13109] Workqueue: hci3 hci_rx_work [ 741.660773][T13109] Call Trace: [ 741.660782][T13109] [ 741.660792][T13109] dump_stack_lvl+0x100/0x190 [ 741.660821][T13109] sysfs_warn_dup.cold+0x1c/0x28 [ 741.660865][T13109] sysfs_create_dir_ns+0x24b/0x2b0 [ 741.660893][T13109] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 741.660919][T13109] ? find_held_lock+0x2b/0x80 [ 741.660951][T13109] ? kobject_add_internal+0x25f/0x930 [ 741.660976][T13109] ? kobject_add_internal+0x25f/0x930 [ 741.661003][T13109] ? do_raw_spin_unlock+0x145/0x1e0 [ 741.661034][T13109] kobject_add_internal+0x2c8/0x930 [ 741.661064][T13109] kobject_add+0x16a/0x1e0 [ 741.661088][T13109] ? __pfx_kobject_add+0x10/0x10 [ 741.661111][T13109] ? class_to_subsys+0x10f/0x150 [ 741.661185][T13109] ? kobject_put+0xb9/0x640 [ 741.661223][T13109] ? _raw_spin_unlock+0x28/0x50 [ 741.661262][T13109] device_add+0x294/0x1950 [ 741.661307][T13109] ? __pfx_dev_set_name+0x10/0x10 [ 741.661357][T13109] ? __pfx_device_add+0x10/0x10 [ 741.661384][T13109] ? mgmt_send_event_skb+0x2fb/0x460 [ 741.661509][T13109] hci_conn_add_sysfs+0x1a3/0x260 [ 741.661579][T13109] le_conn_complete_evt+0x11eb/0x1f60 [ 741.661654][T13109] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 741.661685][T13109] ? __pfx_bt_warn+0x10/0x10 [ 741.661738][T13109] hci_le_conn_complete_evt+0x23c/0x3a0 [ 741.661772][T13109] ? skb_pull_data+0x15f/0x1e0 [ 741.661809][T13109] hci_le_meta_evt+0x34a/0x5f0 [ 741.661861][T13109] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 741.661899][T13109] hci_event_packet+0x51c/0xcd0 [ 741.661931][T13109] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 741.661967][T13109] ? __pfx_hci_event_packet+0x10/0x10 [ 741.662002][T13109] ? kcov_remote_start+0x374/0x660 [ 741.662038][T13109] ? lockdep_hardirqs_on+0x78/0x100 [ 741.662081][T13109] hci_rx_work+0x451/0xfc0 [ 741.662118][T13109] process_one_work+0xa0e/0x1980 [ 741.662154][T13109] ? __pfx_process_one_work+0x10/0x10 [ 741.662187][T13109] ? __pfx_hci_rx_work+0x10/0x10 [ 741.662221][T13109] worker_thread+0x5ef/0xe50 [ 741.662253][T13109] ? __pfx_worker_thread+0x10/0x10 [ 741.662278][T13109] ? kthread+0x13a/0x450 [ 741.662313][T13109] ? __pfx_worker_thread+0x10/0x10 [ 741.662336][T13109] kthread+0x370/0x450 [ 741.662372][T13109] ? __pfx_kthread+0x10/0x10 [ 741.662412][T13109] ret_from_fork+0x72b/0xd50 [ 741.662447][T13109] ? __pfx_ret_from_fork+0x10/0x10 [ 741.662475][T13109] ? __switch_to+0x800/0x1100 [ 741.662515][T13109] ? __switch_to_asm+0x39/0x70 [ 741.662546][T13109] ? __pfx_kthread+0x10/0x10 [ 741.662585][T13109] ret_from_fork_asm+0x1a/0x30 [ 741.662633][T13109] [ 741.662687][T13109] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 741.975276][T13109] Bluetooth: hci3: failed to register connection device [ 742.036070][T15150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2144'. [ 743.343128][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2148'. [ 743.383901][T15169] openvswitch: netlink: Multiple metadata blocks provided [ 743.474128][T15172] Console: switching to colour frame buffer device 128x48 [ 743.990829][ T5640] Bluetooth: hci3: command 0x2016 tx timeout [ 744.035203][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2152'. [ 746.073299][T13109] Bluetooth: hci3: command 0x2016 tx timeout [ 747.292495][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2160'. [ 747.354451][T15213] openvswitch: netlink: Multiple metadata blocks provided [ 747.431229][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.439443][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.842776][T15218] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2161'. [ 747.941884][T15219] FAULT_INJECTION: forcing a failure. [ 747.941884][T15219] name failslab, interval 1, probability 0, space 0, times 0 [ 748.107253][T15219] CPU: 0 UID: 0 PID: 15219 Comm: syz.4.2161 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.107293][T15219] Tainted: [L]=SOFTLOCKUP [ 748.107303][T15219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 748.107318][T15219] Call Trace: [ 748.107326][T15219] [ 748.107336][T15219] dump_stack_lvl+0x100/0x190 [ 748.107369][T15219] should_fail_ex.cold+0x5/0xa [ 748.107400][T15219] should_failslab+0xc2/0x120 [ 748.107431][T15219] __kmalloc_cache_noprof+0x7a/0x6f0 [ 748.107469][T15219] ? __do_sys_fanotify_init+0x547/0xe80 [ 748.107497][T15219] ? get_mem_cgroup_from_mm+0x69/0x5e0 [ 748.107520][T15219] ? get_mem_cgroup_from_mm+0x113/0x5e0 [ 748.107549][T15219] __do_sys_fanotify_init+0x547/0xe80 [ 748.107582][T15219] do_syscall_64+0x115/0x840 [ 748.107617][T15219] ? clear_bhb_loop+0x40/0x90 [ 748.107647][T15219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.107673][T15219] RIP: 0033:0x7f7d3859ce59 [ 748.107693][T15219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.107718][T15219] RSP: 002b:00007f7d39386028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 748.107741][T15219] RAX: ffffffffffffffda RBX: 00007f7d38816180 RCX: 00007f7d3859ce59 [ 748.107757][T15219] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 748.107773][T15219] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 748.107788][T15219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.107803][T15219] R13: 00007f7d38816218 R14: 00007f7d38816180 R15: 00007ffee016dfc8 [ 748.107834][T15219] [ 748.506395][T15225] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2159'. [ 749.310942][T15233] FAULT_INJECTION: forcing a failure. [ 749.310942][T15233] name failslab, interval 1, probability 0, space 0, times 0 [ 749.448183][T15233] CPU: 0 UID: 0 PID: 15233 Comm: syz.4.2170 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.448224][T15233] Tainted: [L]=SOFTLOCKUP [ 749.448233][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 749.448248][T15233] Call Trace: [ 749.448257][T15233] [ 749.448266][T15233] dump_stack_lvl+0x100/0x190 [ 749.448296][T15233] should_fail_ex.cold+0x5/0xa [ 749.448327][T15233] should_failslab+0xc2/0x120 [ 749.448358][T15233] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 749.448399][T15233] ? __d_alloc+0x34/0xa40 [ 749.448439][T15233] __d_alloc+0x34/0xa40 [ 749.448476][T15233] d_alloc_pseudo+0x1c/0xc0 [ 749.448500][T15233] alloc_file_pseudo+0xcf/0x230 [ 749.448549][T15233] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 749.448586][T15233] ? alloc_fd+0x476/0x790 [ 749.448619][T15233] ? do_raw_spin_unlock+0x145/0x1e0 [ 749.448651][T15233] __anon_inode_getfile+0xe8/0x280 [ 749.448693][T15233] anon_inode_getfile_fmode+0x37/0xa0 [ 749.448733][T15233] __do_sys_fanotify_init+0xab8/0xe80 [ 749.448766][T15233] do_syscall_64+0x115/0x840 [ 749.448801][T15233] ? clear_bhb_loop+0x40/0x90 [ 749.448831][T15233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.448857][T15233] RIP: 0033:0x7f7d3859ce59 [ 749.448877][T15233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.448902][T15233] RSP: 002b:00007f7d393a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 749.448925][T15233] RAX: ffffffffffffffda RBX: 00007f7d38816090 RCX: 00007f7d3859ce59 [ 749.448941][T15233] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 749.448956][T15233] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 749.448971][T15233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.448986][T15233] R13: 00007f7d38816128 R14: 00007f7d38816090 R15: 00007ffee016dfc8 [ 749.449018][T15233] [ 750.164653][T15243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2163'. [ 750.501971][T15253] FAULT_INJECTION: forcing a failure. [ 750.501971][T15253] name failslab, interval 1, probability 0, space 0, times 0 [ 750.591132][T15253] CPU: 0 UID: 0 PID: 15253 Comm: syz.4.2175 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.591171][T15253] Tainted: [L]=SOFTLOCKUP [ 750.591180][T15253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 750.591196][T15253] Call Trace: [ 750.591204][T15253] [ 750.591213][T15253] dump_stack_lvl+0x100/0x190 [ 750.591243][T15253] should_fail_ex.cold+0x5/0xa [ 750.591275][T15253] should_failslab+0xc2/0x120 [ 750.591307][T15253] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 750.591347][T15253] ? __d_alloc+0x34/0xa40 [ 750.591390][T15253] __d_alloc+0x34/0xa40 [ 750.591436][T15253] d_alloc_pseudo+0x1c/0xc0 [ 750.591461][T15253] alloc_file_pseudo+0xcf/0x230 [ 750.591501][T15253] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 750.591538][T15253] ? alloc_fd+0x476/0x790 [ 750.591569][T15253] ? do_raw_spin_unlock+0x145/0x1e0 [ 750.591601][T15253] __anon_inode_getfile+0xe8/0x280 [ 750.591642][T15253] anon_inode_getfile_fmode+0x37/0xa0 [ 750.591681][T15253] __do_sys_fanotify_init+0xab8/0xe80 [ 750.591714][T15253] do_syscall_64+0x115/0x840 [ 750.591749][T15253] ? clear_bhb_loop+0x40/0x90 [ 750.591780][T15253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.591805][T15253] RIP: 0033:0x7f7d3859ce59 [ 750.591825][T15253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.591850][T15253] RSP: 002b:00007f7d393a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 750.591874][T15253] RAX: ffffffffffffffda RBX: 00007f7d38816090 RCX: 00007f7d3859ce59 [ 750.591890][T15253] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 750.591906][T15253] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 750.591921][T15253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.591936][T15253] R13: 00007f7d38816128 R14: 00007f7d38816090 R15: 00007ffee016dfc8 [ 750.591970][T15253] [ 750.965066][T15254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2166'. [ 751.063569][T15243] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 751.116775][T15243] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 751.170273][T15243] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 751.380649][T15254] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 751.405390][T15254] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 751.447615][T15254] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 751.988470][T15262] FAULT_INJECTION: forcing a failure. [ 751.988470][T15262] name failslab, interval 1, probability 0, space 0, times 0 [ 752.046002][T15252] Process accounting resumed [ 752.066106][T15262] CPU: 0 UID: 0 PID: 15262 Comm: syz.1.2168 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.066146][T15262] Tainted: [L]=SOFTLOCKUP [ 752.066154][T15262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 752.066170][T15262] Call Trace: [ 752.066178][T15262] [ 752.066187][T15262] dump_stack_lvl+0x100/0x190 [ 752.066218][T15262] should_fail_ex.cold+0x5/0xa [ 752.066250][T15262] should_failslab+0xc2/0x120 [ 752.066280][T15262] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 752.066320][T15262] ? __proc_create+0x2cb/0x8c0 [ 752.066358][T15262] __proc_create+0x2cb/0x8c0 [ 752.066391][T15262] ? __pfx___proc_create+0x10/0x10 [ 752.066430][T15262] ? _raw_write_unlock+0x28/0x50 [ 752.066464][T15262] ? proc_register+0x559/0x8a0 [ 752.066500][T15262] proc_create_reg+0x75/0x170 [ 752.066536][T15262] proc_create_seq_private+0x8e/0x180 [ 752.066573][T15262] ? __pfx_proc_create_seq_private+0x10/0x10 [ 752.066618][T15262] xt_proto_init+0x3ab/0xb80 [ 752.066657][T15262] ? __pfx_xt_proto_init+0x10/0x10 [ 752.066694][T15262] ? kasan_save_track+0x14/0x30 [ 752.066719][T15262] ? __kasan_kmalloc+0xaa/0xb0 [ 752.066747][T15262] ? __pfx_ip_tables_net_init+0x10/0x10 [ 752.066785][T15262] ops_init+0x1e2/0x5f0 [ 752.066815][T15262] setup_net+0x118/0x3a0 [ 752.066850][T15262] ? __pfx_setup_net+0x10/0x10 [ 752.066881][T15262] ? mutex_init_lockdep+0xf1/0x120 [ 752.066911][T15262] copy_net_ns+0x46f/0x7c0 [ 752.066944][T15262] create_new_namespaces+0x3ea/0xac0 [ 752.066983][T15262] unshare_nsproxy_namespaces+0xf2/0x220 [ 752.067018][T15262] ksys_unshare+0x438/0xab0 [ 752.067055][T15262] ? __pfx_ksys_unshare+0x10/0x10 [ 752.067090][T15262] ? xfd_validate_state+0x129/0x190 [ 752.067124][T15262] __x64_sys_unshare+0x31/0x40 [ 752.067160][T15262] do_syscall_64+0x115/0x840 [ 752.067194][T15262] ? clear_bhb_loop+0x40/0x90 [ 752.067225][T15262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.067251][T15262] RIP: 0033:0x7fb34e79ce59 [ 752.067271][T15262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.067296][T15262] RSP: 002b:00007fb34f697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 752.067319][T15262] RAX: ffffffffffffffda RBX: 00007fb34ea15fa0 RCX: 00007fb34e79ce59 [ 752.067335][T15262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 752.067350][T15262] RBP: 00007fb34e832d6f R08: 0000000000000000 R09: 0000000000000000 [ 752.067365][T15262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.067380][T15262] R13: 00007fb34ea16038 R14: 00007fb34ea15fa0 R15: 00007ffea76759e8 [ 752.067411][T15262] [ 752.372080][T15265] FAULT_INJECTION: forcing a failure. [ 752.372080][T15265] name failslab, interval 1, probability 0, space 0, times 0 [ 752.384784][T15265] CPU: 0 UID: 0 PID: 15265 Comm: syz.4.2169 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.384824][T15265] Tainted: [L]=SOFTLOCKUP [ 752.384833][T15265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 752.384849][T15265] Call Trace: [ 752.384858][T15265] [ 752.384875][T15265] dump_stack_lvl+0x100/0x190 [ 752.384905][T15265] should_fail_ex.cold+0x5/0xa [ 752.384937][T15265] should_failslab+0xc2/0x120 [ 752.384967][T15265] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 752.385007][T15265] ? security_inode_alloc+0x3b/0x2c0 [ 752.385036][T15265] ? lockdep_init_map_type+0x5c/0x250 [ 752.385081][T15265] security_inode_alloc+0x3b/0x2c0 [ 752.385110][T15265] inode_init_always_gfp+0xc77/0xfb0 [ 752.385147][T15265] alloc_inode+0x8e/0x250 [ 752.385186][T15265] sock_alloc+0x44/0x280 [ 752.385220][T15265] ? security_socket_create+0x7f/0x250 [ 752.385248][T15265] sock_create_lite+0x82/0x120 [ 752.385280][T15265] __netlink_kernel_create+0xbd/0x750 [ 752.385314][T15265] ? _raw_write_unlock+0x28/0x50 [ 752.385349][T15265] ? __pfx___netlink_kernel_create+0x10/0x10 [ 752.385386][T15265] ? proc_create_reg+0xd7/0x170 [ 752.385424][T15265] xfrm_user_net_init+0xc6/0x190 [ 752.385458][T15265] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 752.385492][T15265] ? __pfx_xfrm_netlink_rcv+0x10/0x10 [ 752.385526][T15265] ? __pfx_tls_init_net+0x10/0x10 [ 752.385552][T15265] ? tls_proc_init+0x59/0x70 [ 752.385586][T15265] ? __pfx_xfrm_user_net_init+0x10/0x10 [ 752.385618][T15265] ops_init+0x1e2/0x5f0 [ 752.385648][T15265] setup_net+0x118/0x3a0 [ 752.385675][T15265] ? __pfx_setup_net+0x10/0x10 [ 752.385702][T15265] ? mutex_init_lockdep+0xf1/0x120 [ 752.385731][T15265] copy_net_ns+0x46f/0x7c0 [ 752.385764][T15265] create_new_namespaces+0x3ea/0xac0 [ 752.385802][T15265] unshare_nsproxy_namespaces+0xf2/0x220 [ 752.385837][T15265] ksys_unshare+0x438/0xab0 [ 752.385874][T15265] ? __pfx_ksys_unshare+0x10/0x10 [ 752.385909][T15265] ? xfd_validate_state+0x129/0x190 [ 752.385943][T15265] __x64_sys_unshare+0x31/0x40 [ 752.385979][T15265] do_syscall_64+0x115/0x840 [ 752.386013][T15265] ? clear_bhb_loop+0x40/0x90 [ 752.386043][T15265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.386069][T15265] RIP: 0033:0x7f7d3859ce59 [ 752.386090][T15265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.386115][T15265] RSP: 002b:00007f7d393c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 752.386138][T15265] RAX: ffffffffffffffda RBX: 00007f7d38815fa0 RCX: 00007f7d3859ce59 [ 752.386155][T15265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 752.386170][T15265] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 752.386186][T15265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.386201][T15265] R13: 00007f7d38816038 R14: 00007f7d38815fa0 R15: 00007ffee016dfc8 [ 752.386276][T15265] [ 752.889688][T15269] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2172'. [ 752.904133][T15269] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2172'. [ 755.609061][T13109] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 756.632601][T15313] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2182'. [ 756.718657][T15316] FAULT_INJECTION: forcing a failure. [ 756.718657][T15316] name failslab, interval 1, probability 0, space 0, times 0 [ 756.847424][T15316] CPU: 0 UID: 0 PID: 15316 Comm: syz.3.2182 Tainted: G L syzkaller #0 PREEMPT(full) [ 756.847465][T15316] Tainted: [L]=SOFTLOCKUP [ 756.847474][T15316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 756.847490][T15316] Call Trace: [ 756.847499][T15316] [ 756.847508][T15316] dump_stack_lvl+0x100/0x190 [ 756.847539][T15316] should_fail_ex.cold+0x5/0xa [ 756.847571][T15316] should_failslab+0xc2/0x120 [ 756.847603][T15316] __kmalloc_cache_noprof+0x7a/0x6f0 [ 756.847640][T15316] ? __do_sys_fanotify_init+0x547/0xe80 [ 756.847668][T15316] ? get_mem_cgroup_from_mm+0x69/0x5e0 [ 756.847693][T15316] ? get_mem_cgroup_from_mm+0x113/0x5e0 [ 756.847722][T15316] __do_sys_fanotify_init+0x547/0xe80 [ 756.847755][T15316] do_syscall_64+0x115/0x840 [ 756.847789][T15316] ? clear_bhb_loop+0x40/0x90 [ 756.847828][T15316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.847854][T15316] RIP: 0033:0x7f179899ce59 [ 756.847875][T15316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.847900][T15316] RSP: 002b:00007f1799798028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 756.847923][T15316] RAX: ffffffffffffffda RBX: 00007f1798c16180 RCX: 00007f179899ce59 [ 756.847939][T15316] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 756.847955][T15316] RBP: 00007f1798a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 756.847970][T15316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.847985][T15316] R13: 00007f1798c16218 R14: 00007f1798c16180 R15: 00007ffcca1fd498 [ 756.848015][T15316] [ 757.693494][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 758.373716][T15338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2189'. [ 758.418517][T15338] openvswitch: netlink: Multiple metadata blocks provided [ 759.297631][T15343] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5637] was attempted by ""[15343] [ 759.750101][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 760.000770][T15336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2188'. [ 762.637864][T15392] FAULT_INJECTION: forcing a failure. [ 762.637864][T15392] name failslab, interval 1, probability 0, space 0, times 0 [ 762.704961][T15392] CPU: 0 UID: 0 PID: 15392 Comm: syz.3.2201 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.704999][T15392] Tainted: [L]=SOFTLOCKUP [ 762.705008][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.705023][T15392] Call Trace: [ 762.705030][T15392] [ 762.705040][T15392] dump_stack_lvl+0x100/0x190 [ 762.705070][T15392] should_fail_ex.cold+0x5/0xa [ 762.705100][T15392] should_failslab+0xc2/0x120 [ 762.705130][T15392] __kmalloc_cache_noprof+0x7a/0x6f0 [ 762.705165][T15392] ? shrinker_alloc+0xf5/0xc30 [ 762.705197][T15392] shrinker_alloc+0xf5/0xc30 [ 762.705224][T15392] ? mark_held_locks+0x40/0x70 [ 762.705276][T15392] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 762.705311][T15392] ? rcu_is_watching+0x12/0xc0 [ 762.705340][T15392] ? __pfx_shrinker_alloc+0x10/0x10 [ 762.705370][T15392] ? lockdep_init_map_type+0x5c/0x250 [ 762.705408][T15392] ? lockdep_init_map_type+0x5c/0x250 [ 762.705448][T15392] ? __raw_spin_lock_init+0x3a/0x110 [ 762.705473][T15392] ? __init_rwsem+0x10e/0x180 [ 762.705501][T15392] alloc_super+0x7c7/0xd20 [ 762.705529][T15392] ? __pfx_test_keyed_super+0x10/0x10 [ 762.705567][T15392] sget_fc+0x117/0xc70 [ 762.705592][T15392] ? __pfx_set_anon_super_fc+0x10/0x10 [ 762.705617][T15392] ? __pfx_rpc_fill_super+0x10/0x10 [ 762.705650][T15392] get_tree_keyed+0x59/0x1d0 [ 762.705677][T15392] vfs_get_tree+0x92/0x320 [ 762.705700][T15392] vfs_cmd_create+0xd7/0x2a0 [ 762.705745][T15392] __do_sys_fsconfig+0x55a/0xcb0 [ 762.705785][T15392] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 762.705822][T15392] ? fput+0x79/0x100 [ 762.705860][T15392] ? rcu_is_watching+0x12/0xc0 [ 762.705892][T15392] do_syscall_64+0x115/0x840 [ 762.705924][T15392] ? clear_bhb_loop+0x40/0x90 [ 762.705954][T15392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.705979][T15392] RIP: 0033:0x7f179899ce59 [ 762.705998][T15392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.706022][T15392] RSP: 002b:00007f17997da028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 762.706045][T15392] RAX: ffffffffffffffda RBX: 00007f1798c15fa0 RCX: 00007f179899ce59 [ 762.706061][T15392] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 762.706075][T15392] RBP: 00007f17997da090 R08: 0000000000000000 R09: 0000000000000000 [ 762.706089][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.706103][T15392] R13: 00007f1798c16038 R14: 00007f1798c15fa0 R15: 00007ffcca1fd498 [ 762.706133][T15392] getty: ttyS0: read error: Resource temporarily unavailable [ 764.132048][T15403] FAULT_INJECTION: forcing a failure. [ 764.132048][T15403] name failslab, interval 1, probability 0, space 0, times 0 [ 764.150402][T15418] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 764.213629][T15403] CPU: 0 UID: 0 PID: 15403 Comm: syz.1.2204 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.213675][T15403] Tainted: [L]=SOFTLOCKUP [ 764.213685][T15403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.213701][T15403] Call Trace: [ 764.213709][T15403] [ 764.213719][T15403] dump_stack_lvl+0x100/0x190 [ 764.213749][T15403] should_fail_ex.cold+0x5/0xa [ 764.213781][T15403] should_failslab+0xc2/0x120 [ 764.213813][T15403] __kmalloc_cache_noprof+0x7a/0x6f0 [ 764.213849][T15403] ? drm_atomic_state_alloc+0xb8/0x120 [ 764.213972][T15403] drm_atomic_state_alloc+0xb8/0x120 [ 764.214010][T15403] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 764.214078][T15403] ? rcu_is_watching+0x12/0xc0 [ 764.214115][T15403] ? trace_contention_end+0x122/0x170 [ 764.214142][T15403] ? __mutex_lock+0x26d/0x1b10 [ 764.214182][T15403] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 764.214221][T15403] ? drm_master_internal_acquire+0x21/0x80 [ 764.214283][T15403] drm_client_modeset_commit_locked+0x14d/0x580 [ 764.214328][T15403] drm_client_modeset_commit+0x4f/0x80 [ 764.214367][T15403] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 764.214459][T15403] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 764.214498][T15403] drm_fbdev_client_restore+0x1b/0x30 [ 764.214541][T15403] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 764.214568][T15403] drm_client_dev_restore+0x205/0x2a0 [ 764.214610][T15403] drm_release+0x2c6/0x360 [ 764.214665][T15403] ? __pfx_drm_release+0x10/0x10 [ 764.214697][T15403] __fput+0x3ff/0xb50 [ 764.214740][T15403] task_work_run+0x150/0x240 [ 764.214766][T15403] ? __pfx_task_work_run+0x10/0x10 [ 764.214792][T15403] ? rcu_is_watching+0x12/0xc0 [ 764.214825][T15403] exit_to_user_mode_loop+0x157/0x670 [ 764.214866][T15403] ? rcu_is_watching+0x12/0xc0 [ 764.214897][T15403] do_syscall_64+0x652/0x840 [ 764.214932][T15403] ? clear_bhb_loop+0x40/0x90 [ 764.214963][T15403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.214989][T15403] RIP: 0033:0x7fb34e79ce59 [ 764.215011][T15403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.215036][T15403] RSP: 002b:00007fb34f697028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 764.215060][T15403] RAX: 0000000000000000 RBX: 00007fb34ea15fa0 RCX: 00007fb34e79ce59 [ 764.215076][T15403] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 764.215097][T15403] RBP: 00007fb34e832d6f R08: 0000000000000000 R09: 0000000000000000 [ 764.215113][T15403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.215128][T15403] R13: 00007fb34ea16038 R14: 00007fb34ea15fa0 R15: 00007ffea76759e8 [ 764.215161][T15403] [ 765.848009][T15437] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 766.581209][T15455] FAULT_INJECTION: forcing a failure. [ 766.581209][T15455] name failslab, interval 1, probability 0, space 0, times 0 [ 766.581249][T15455] CPU: 0 UID: 0 PID: 15455 Comm: syz.0.2217 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.581283][T15455] Tainted: [L]=SOFTLOCKUP [ 766.581292][T15455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 766.581308][T15455] Call Trace: [ 766.581316][T15455] [ 766.581326][T15455] dump_stack_lvl+0x100/0x190 [ 766.581355][T15455] should_fail_ex.cold+0x5/0xa [ 766.581387][T15455] should_failslab+0xc2/0x120 [ 766.581418][T15455] __kmalloc_cache_noprof+0x7a/0x6f0 [ 766.581454][T15455] ? __do_sys_fanotify_init+0x547/0xe80 [ 766.581482][T15455] ? get_mem_cgroup_from_mm+0x69/0x5e0 [ 766.581507][T15455] ? get_mem_cgroup_from_mm+0x113/0x5e0 [ 766.581534][T15455] __do_sys_fanotify_init+0x547/0xe80 [ 766.581567][T15455] do_syscall_64+0x115/0x840 [ 766.581603][T15455] ? clear_bhb_loop+0x40/0x90 [ 766.581632][T15455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.581658][T15455] RIP: 0033:0x7fb20819ce59 [ 766.581678][T15455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.581703][T15455] RSP: 002b:00007fb208fc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 766.581727][T15455] RAX: ffffffffffffffda RBX: 00007fb208416090 RCX: 00007fb20819ce59 [ 766.581743][T15455] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 766.581759][T15455] RBP: 00007fb208232d6f R08: 0000000000000000 R09: 0000000000000000 [ 766.581774][T15455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.581789][T15455] R13: 00007fb208416128 R14: 00007fb208416090 R15: 00007fff7d8f42f8 [ 766.581828][T15455] [ 767.669535][T15477] ovs_: entered promiscuous mode [ 767.705851][T15477] futex_wake_op: syz.1.2222 tries to shift op by -1; fix this program [ 769.555115][T15505] FAULT_INJECTION: forcing a failure. [ 769.555115][T15505] name failslab, interval 1, probability 0, space 0, times 0 [ 769.683504][T15505] CPU: 0 UID: 0 PID: 15505 Comm: syz.4.2228 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.683544][T15505] Tainted: [L]=SOFTLOCKUP [ 769.683553][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 769.683569][T15505] Call Trace: [ 769.683577][T15505] [ 769.683587][T15505] dump_stack_lvl+0x100/0x190 [ 769.683622][T15505] should_fail_ex.cold+0x5/0xa [ 769.683681][T15505] should_failslab+0xc2/0x120 [ 769.683714][T15505] __kmalloc_cache_noprof+0x7a/0x6f0 [ 769.683752][T15505] ? __do_sys_fanotify_init+0x608/0xe80 [ 769.683787][T15505] __do_sys_fanotify_init+0x608/0xe80 [ 769.683820][T15505] do_syscall_64+0x115/0x840 [ 769.683855][T15505] ? clear_bhb_loop+0x40/0x90 [ 769.683886][T15505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.683912][T15505] RIP: 0033:0x7f7d3859ce59 [ 769.683932][T15505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.683957][T15505] RSP: 002b:00007f7d393a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 769.683980][T15505] RAX: ffffffffffffffda RBX: 00007f7d38816090 RCX: 00007f7d3859ce59 [ 769.683997][T15505] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 769.684013][T15505] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 769.684028][T15505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.684043][T15505] R13: 00007f7d38816128 R14: 00007f7d38816090 R15: 00007ffee016dfc8 [ 769.684074][T15505] [ 770.604811][ T5640] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 770.856062][ T29] audit: type=1800 audit(4294967703.320:14): pid=15528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2229" name="dbroot" dev="configfs" ino=71457 res=0 errno=0 [ 772.858384][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 772.872381][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 772.884719][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 772.907848][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 772.917027][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.772096][T15570] FAULT_INJECTION: forcing a failure. [ 774.772096][T15570] name failslab, interval 1, probability 0, space 0, times 0 [ 774.812929][T15570] CPU: 0 UID: 0 PID: 15570 Comm: syz.0.2241 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.812969][T15570] Tainted: [L]=SOFTLOCKUP [ 774.812978][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 774.812994][T15570] Call Trace: [ 774.813003][T15570] [ 774.813012][T15570] dump_stack_lvl+0x100/0x190 [ 774.813041][T15570] should_fail_ex.cold+0x5/0xa [ 774.813074][T15570] should_failslab+0xc2/0x120 [ 774.813104][T15570] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 774.813151][T15570] ? __d_alloc+0x34/0xa40 [ 774.813191][T15570] __d_alloc+0x34/0xa40 [ 774.813227][T15570] d_alloc_pseudo+0x1c/0xc0 [ 774.813251][T15570] alloc_file_pseudo+0xcf/0x230 [ 774.813291][T15570] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 774.813328][T15570] ? alloc_fd+0x476/0x790 [ 774.813360][T15570] ? do_raw_spin_unlock+0x145/0x1e0 [ 774.813393][T15570] __anon_inode_getfile+0xe8/0x280 [ 774.813434][T15570] anon_inode_getfile_fmode+0x37/0xa0 [ 774.813473][T15570] __do_sys_fanotify_init+0xab8/0xe80 [ 774.813506][T15570] do_syscall_64+0x115/0x840 [ 774.813542][T15570] ? clear_bhb_loop+0x40/0x90 [ 774.813573][T15570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.813599][T15570] RIP: 0033:0x7fb20819ce59 [ 774.813619][T15570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.813645][T15570] RSP: 002b:00007fb208fc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 774.813671][T15570] RAX: ffffffffffffffda RBX: 00007fb208416090 RCX: 00007fb20819ce59 [ 774.813688][T15570] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 774.813703][T15570] RBP: 00007fb208232d6f R08: 0000000000000000 R09: 0000000000000000 [ 774.813719][T15570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.813734][T15570] R13: 00007fb208416128 R14: 00007fb208416090 R15: 00007fff7d8f42f8 [ 774.813765][T15570] [ 775.019347][ T50] Bluetooth: hci0: command tx timeout [ 775.099712][ T8340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.008211][ T8340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.513890][ T8340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.925254][ T8340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.031155][ T50] Bluetooth: hci0: command tx timeout [ 777.127954][T15603] FAULT_INJECTION: forcing a failure. [ 777.127954][T15603] name failslab, interval 1, probability 0, space 0, times 0 [ 777.168477][T15603] CPU: 0 UID: 0 PID: 15603 Comm: syz.3.2250 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.168516][T15603] Tainted: [L]=SOFTLOCKUP [ 777.168526][T15603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 777.168542][T15603] Call Trace: [ 777.168550][T15603] [ 777.168560][T15603] dump_stack_lvl+0x100/0x190 [ 777.168590][T15603] should_fail_ex.cold+0x5/0xa [ 777.168622][T15603] should_failslab+0xc2/0x120 [ 777.168653][T15603] __kmalloc_cache_noprof+0x7a/0x6f0 [ 777.168690][T15603] ? __do_sys_fanotify_init+0x547/0xe80 [ 777.168717][T15603] ? get_mem_cgroup_from_mm+0x69/0x5e0 [ 777.168765][T15603] ? get_mem_cgroup_from_mm+0x113/0x5e0 [ 777.168794][T15603] __do_sys_fanotify_init+0x547/0xe80 [ 777.168827][T15603] do_syscall_64+0x115/0x840 [ 777.168864][T15603] ? clear_bhb_loop+0x40/0x90 [ 777.168895][T15603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.168920][T15603] RIP: 0033:0x7f179899ce59 [ 777.168940][T15603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.168964][T15603] RSP: 002b:00007f17997b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 777.168988][T15603] RAX: ffffffffffffffda RBX: 00007f1798c16090 RCX: 00007f179899ce59 [ 777.169005][T15603] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 777.169020][T15603] RBP: 00007f1798a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 777.169036][T15603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.169055][T15603] R13: 00007f1798c16128 R14: 00007f1798c16090 R15: 00007ffcca1fd498 [ 777.169087][T15603] [ 777.527295][T15607] FAULT_INJECTION: forcing a failure. [ 777.527295][T15607] name failslab, interval 1, probability 0, space 0, times 0 [ 777.605559][T15607] CPU: 0 UID: 0 PID: 15607 Comm: syz.4.2251 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.605600][T15607] Tainted: [L]=SOFTLOCKUP [ 777.605610][T15607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 777.605636][T15607] Call Trace: [ 777.605645][T15607] [ 777.605654][T15607] dump_stack_lvl+0x100/0x190 [ 777.605685][T15607] should_fail_ex.cold+0x5/0xa [ 777.605715][T15607] should_failslab+0xc2/0x120 [ 777.605745][T15607] __kmalloc_cache_noprof+0x7a/0x6f0 [ 777.605786][T15607] ? ip_vs_protocol_net_init+0xbe/0x300 [ 777.605829][T15607] ip_vs_protocol_net_init+0xbe/0x300 [ 777.605870][T15607] __ip_vs_init+0x239/0x520 [ 777.605897][T15607] ? __pfx___ip_vs_init+0x10/0x10 [ 777.605922][T15607] ops_init+0x1e2/0x5f0 [ 777.605951][T15607] setup_net+0x118/0x3a0 [ 777.605978][T15607] ? __pfx_setup_net+0x10/0x10 [ 777.606004][T15607] ? mutex_init_lockdep+0xf1/0x120 [ 777.606033][T15607] copy_net_ns+0x46f/0x7c0 [ 777.606064][T15607] create_new_namespaces+0x3ea/0xac0 [ 777.606101][T15607] unshare_nsproxy_namespaces+0xf2/0x220 [ 777.606135][T15607] ksys_unshare+0x438/0xab0 [ 777.606171][T15607] ? __pfx_ksys_unshare+0x10/0x10 [ 777.606204][T15607] ? xfd_validate_state+0x129/0x190 [ 777.606238][T15607] __x64_sys_unshare+0x31/0x40 [ 777.606272][T15607] do_syscall_64+0x115/0x840 [ 777.606306][T15607] ? clear_bhb_loop+0x40/0x90 [ 777.606335][T15607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.606360][T15607] RIP: 0033:0x7f7d3859ce59 [ 777.606379][T15607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.606403][T15607] RSP: 002b:00007f7d393c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 777.606425][T15607] RAX: ffffffffffffffda RBX: 00007f7d38815fa0 RCX: 00007f7d3859ce59 [ 777.606441][T15607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 777.606456][T15607] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 777.606471][T15607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.606485][T15607] R13: 00007f7d38816038 R14: 00007f7d38815fa0 R15: 00007ffee016dfc8 [ 777.606516][T15607] [ 778.067139][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 778.082860][T15613] openvswitch: netlink: Multiple metadata blocks provided [ 778.456988][T15547] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.492404][T15547] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.517122][T15547] bridge_slave_0: entered allmulticast mode [ 778.541771][T15547] bridge_slave_0: entered promiscuous mode [ 778.673935][T15547] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.713406][T15547] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.756433][T15547] bridge_slave_1: entered allmulticast mode [ 778.805270][T15547] bridge_slave_1: entered promiscuous mode [ 779.110096][ T50] Bluetooth: hci0: command tx timeout [ 779.146933][T15547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.228451][T15547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.795686][T15547] team0: Port device team_slave_0 added [ 780.047199][T15547] team0: Port device team_slave_1 added [ 780.272623][ T8340] bond0: left allmulticast mode [ 780.279617][ T8340] bond_slave_0: left allmulticast mode [ 780.301088][ T8340] bond_slave_1: left allmulticast mode [ 780.331857][ T8340] bond0: left promiscuous mode [ 780.346928][ T8340] bond_slave_0: left promiscuous mode [ 780.367162][ T8340] bond_slave_1: left promiscuous mode [ 780.386933][ T8340] bridge0: port 3(bond0) entered disabled state [ 780.425921][ T8340] bridge_slave_1: left allmulticast mode [ 780.440033][ T8340] bridge_slave_1: left promiscuous mode [ 780.462737][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.500879][ T8340] bridge_slave_0: left allmulticast mode [ 780.512477][ T8340] bridge_slave_0: left promiscuous mode [ 780.533391][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.987284][ T8340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.003604][ T8340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.014776][ T8340] bond0 (unregistering): Released all slaves [ 781.092192][ T5298] 8021q: adding VLAN 0 to HW filter on device eth5 [ 781.104464][T15547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.125132][T15547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.156438][T15547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.190177][ T50] Bluetooth: hci0: command tx timeout [ 781.224961][ T8340] ovs_: left promiscuous mode [ 781.241483][T15547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.248606][T15547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.297146][T15547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.546237][T15547] hsr_slave_0: entered promiscuous mode [ 781.576473][T15547] hsr_slave_1: entered promiscuous mode [ 781.594498][T15547] debugfs: 'hsr0' already exists in 'hsr' [ 781.609991][T15547] Cannot create hsr debugfs directory [ 782.267820][T15664] FAULT_INJECTION: forcing a failure. [ 782.267820][T15664] name failslab, interval 1, probability 0, space 0, times 0 [ 782.378303][T15664] CPU: 0 UID: 0 PID: 15664 Comm: syz.0.2259 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.378342][T15664] Tainted: [L]=SOFTLOCKUP [ 782.378352][T15664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 782.378367][T15664] Call Trace: [ 782.378376][T15664] [ 782.378385][T15664] dump_stack_lvl+0x100/0x190 [ 782.378416][T15664] should_fail_ex.cold+0x5/0xa [ 782.378448][T15664] should_failslab+0xc2/0x120 [ 782.378479][T15664] __kmalloc_cache_noprof+0x7a/0x6f0 [ 782.378515][T15664] ? ipv4_sysctl_init_net+0x170/0x360 [ 782.378562][T15664] ipv4_sysctl_init_net+0x170/0x360 [ 782.378602][T15664] ? __pfx_ipv4_sysctl_init_net+0x10/0x10 [ 782.378641][T15664] ops_init+0x1e2/0x5f0 [ 782.378671][T15664] setup_net+0x118/0x3a0 [ 782.378698][T15664] ? __pfx_setup_net+0x10/0x10 [ 782.378726][T15664] ? mutex_init_lockdep+0xf1/0x120 [ 782.378756][T15664] copy_net_ns+0x46f/0x7c0 [ 782.378788][T15664] create_new_namespaces+0x3ea/0xac0 [ 782.378826][T15664] unshare_nsproxy_namespaces+0xf2/0x220 [ 782.378861][T15664] ksys_unshare+0x438/0xab0 [ 782.378898][T15664] ? __pfx_ksys_unshare+0x10/0x10 [ 782.378945][T15664] ? xfd_validate_state+0x129/0x190 [ 782.378978][T15664] __x64_sys_unshare+0x31/0x40 [ 782.379012][T15664] do_syscall_64+0x115/0x840 [ 782.379046][T15664] ? clear_bhb_loop+0x40/0x90 [ 782.379075][T15664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.379100][T15664] RIP: 0033:0x7fb20819ce59 [ 782.379119][T15664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.379142][T15664] RSP: 002b:00007fb208fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 782.379165][T15664] RAX: ffffffffffffffda RBX: 00007fb208415fa0 RCX: 00007fb20819ce59 [ 782.379181][T15664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 782.379196][T15664] RBP: 00007fb208232d6f R08: 0000000000000000 R09: 0000000000000000 [ 782.379210][T15664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.379225][T15664] R13: 00007fb208416038 R14: 00007fb208415fa0 R15: 00007fff7d8f42f8 [ 782.379255][T15664] [ 782.799254][T15672] Process accounting paused [ 782.916400][T15675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2261'. [ 782.929981][T15675] openvswitch: netlink: Multiple metadata blocks provided [ 783.930370][T15684] FAULT_INJECTION: forcing a failure. [ 783.930370][T15684] name failslab, interval 1, probability 0, space 0, times 0 [ 783.973100][T15684] CPU: 0 UID: 0 PID: 15684 Comm: syz.0.2263 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.973141][T15684] Tainted: [L]=SOFTLOCKUP [ 783.973151][T15684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 783.973167][T15684] Call Trace: [ 783.973176][T15684] [ 783.973186][T15684] dump_stack_lvl+0x100/0x190 [ 783.973218][T15684] should_fail_ex.cold+0x5/0xa [ 783.973249][T15684] should_failslab+0xc2/0x120 [ 783.973280][T15684] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 783.973307][T15684] ? __ip_vs_lblc_init+0x77/0x340 [ 783.973333][T15684] ? lockdep_init_map_type+0x5c/0x250 [ 783.973378][T15684] ? __pfx___ip_vs_lblc_init+0x10/0x10 [ 783.973406][T15684] kmemdup_noprof+0x29/0x60 [ 783.973434][T15684] __ip_vs_lblc_init+0x77/0x340 [ 783.973463][T15684] ? __pfx___ip_vs_lblc_init+0x10/0x10 [ 783.973490][T15684] ops_init+0x1e2/0x5f0 [ 783.973520][T15684] setup_net+0x118/0x3a0 [ 783.973548][T15684] ? __pfx_setup_net+0x10/0x10 [ 783.973575][T15684] ? mutex_init_lockdep+0xf1/0x120 [ 783.973605][T15684] copy_net_ns+0x46f/0x7c0 [ 783.973637][T15684] create_new_namespaces+0x3ea/0xac0 [ 783.973675][T15684] unshare_nsproxy_namespaces+0xf2/0x220 [ 783.973709][T15684] ksys_unshare+0x438/0xab0 [ 783.973748][T15684] ? __pfx_ksys_unshare+0x10/0x10 [ 783.973783][T15684] ? xfd_validate_state+0x129/0x190 [ 783.973817][T15684] __x64_sys_unshare+0x31/0x40 [ 783.973853][T15684] do_syscall_64+0x115/0x840 [ 783.973887][T15684] ? clear_bhb_loop+0x40/0x90 [ 783.973918][T15684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.973953][T15684] RIP: 0033:0x7fb20819ce59 [ 783.973974][T15684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.973998][T15684] RSP: 002b:00007fb208fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 783.974022][T15684] RAX: ffffffffffffffda RBX: 00007fb208415fa0 RCX: 00007fb20819ce59 [ 783.974038][T15684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 783.974053][T15684] RBP: 00007fb208232d6f R08: 0000000000000000 R09: 0000000000000000 [ 783.974081][T15684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.974104][T15684] R13: 00007fb208416038 R14: 00007fb208415fa0 R15: 00007fff7d8f42f8 [ 783.974135][T15684] [ 787.206184][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 787.268104][T15733] openvswitch: netlink: Multiple metadata blocks provided [ 787.347934][T15547] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 787.393096][T15547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.426248][T15740] FAULT_INJECTION: forcing a failure. [ 787.426248][T15740] name failslab, interval 1, probability 0, space 0, times 0 [ 787.496695][T15547] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 787.503687][T15740] CPU: 0 UID: 0 PID: 15740 Comm: syz.0.2271 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.503732][T15740] Tainted: [L]=SOFTLOCKUP [ 787.503740][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 787.503756][T15740] Call Trace: [ 787.503764][T15740] [ 787.503774][T15740] dump_stack_lvl+0x100/0x190 [ 787.503803][T15740] should_fail_ex.cold+0x5/0xa [ 787.503835][T15740] ? __register_sysctl_table+0xac/0x1650 [ 787.503868][T15740] should_failslab+0xc2/0x120 [ 787.503898][T15740] __kmalloc_noprof+0xe0/0x850 [ 787.503927][T15740] __register_sysctl_table+0xac/0x1650 [ 787.503960][T15740] ? is_module_address+0x5f/0xf0 [ 787.503989][T15740] ? __pfx___register_sysctl_table+0x10/0x10 [ 787.504021][T15740] ? is_module_address+0x69/0xf0 [ 787.504043][T15740] ? register_net_sysctl_sz+0x222/0x430 [ 787.504086][T15740] ? __asan_memcpy+0x3c/0x60 [ 787.504127][T15740] __ip_vs_lblc_init+0x159/0x340 [ 787.504157][T15740] ? __pfx___ip_vs_lblc_init+0x10/0x10 [ 787.504184][T15740] ops_init+0x1e2/0x5f0 [ 787.504214][T15740] setup_net+0x118/0x3a0 [ 787.504242][T15740] ? __pfx_setup_net+0x10/0x10 [ 787.504270][T15740] ? mutex_init_lockdep+0xf1/0x120 [ 787.504299][T15740] copy_net_ns+0x46f/0x7c0 [ 787.504332][T15740] create_new_namespaces+0x3ea/0xac0 [ 787.504370][T15740] unshare_nsproxy_namespaces+0xf2/0x220 [ 787.504405][T15740] ksys_unshare+0x438/0xab0 [ 787.504443][T15740] ? __pfx_ksys_unshare+0x10/0x10 [ 787.504477][T15740] ? xfd_validate_state+0x129/0x190 [ 787.504512][T15740] __x64_sys_unshare+0x31/0x40 [ 787.504547][T15740] do_syscall_64+0x115/0x840 [ 787.504582][T15740] ? clear_bhb_loop+0x40/0x90 [ 787.504613][T15740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.504638][T15740] RIP: 0033:0x7fb20819ce59 [ 787.504658][T15740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.504683][T15740] RSP: 002b:00007fb208fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 787.504707][T15740] RAX: ffffffffffffffda RBX: 00007fb208415fa0 RCX: 00007fb20819ce59 [ 787.504734][T15740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 787.504749][T15740] RBP: 00007fb208232d6f R08: 0000000000000000 R09: 0000000000000000 [ 787.504764][T15740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.504778][T15740] R13: 00007fb208416038 R14: 00007fb208415fa0 R15: 00007fff7d8f42f8 [ 787.504810][T15740] [ 787.806166][T15547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.814105][T15547] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 787.834029][T15547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.064885][ T8340] hsr_slave_0: left promiscuous mode [ 788.091805][ T8340] hsr_slave_1: left promiscuous mode [ 788.129516][ T8340] veth1_macvtap: left promiscuous mode [ 788.145539][ T8340] veth0_macvtap: left promiscuous mode [ 788.159963][ T8340] veth1_vlan: left promiscuous mode [ 788.171557][ T8340] veth0_vlan: left promiscuous mode [ 788.207598][T15738] Process accounting resumed [ 788.647187][ T8340] team0 (unregistering): Port device team_slave_1 removed [ 788.689118][ T8340] team0 (unregistering): Port device team_slave_0 removed [ 789.014334][T15547] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 789.026976][T15547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 789.578409][T15547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.359062][T15547] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.436799][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.444066][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.465010][T15781] FAULT_INJECTION: forcing a failure. [ 790.465010][T15781] name failslab, interval 1, probability 0, space 0, times 0 [ 790.562991][T15781] CPU: 0 UID: 0 PID: 15781 Comm: syz.4.2279 Tainted: G L syzkaller #0 PREEMPT(full) [ 790.563042][T15781] Tainted: [L]=SOFTLOCKUP [ 790.563054][T15781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 790.563074][T15781] Call Trace: [ 790.563093][T15781] [ 790.563103][T15781] dump_stack_lvl+0x100/0x190 [ 790.563134][T15781] should_fail_ex.cold+0x5/0xa [ 790.563166][T15781] should_failslab+0xc2/0x120 [ 790.563197][T15781] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 790.563239][T15781] ? shmem_alloc_inode+0x25/0x50 [ 790.563275][T15781] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 790.563308][T15781] shmem_alloc_inode+0x25/0x50 [ 790.563338][T15781] alloc_inode+0x68/0x250 [ 790.563382][T15781] new_inode+0x22/0x1c0 [ 790.563424][T15781] shmem_get_inode+0x1e3/0xfb0 [ 790.563460][T15781] ? __pfx_shmem_get_inode+0x10/0x10 [ 790.563497][T15781] ? make_vfsgid+0xf1/0x140 [ 790.563524][T15781] shmem_mknod+0x217/0x480 [ 790.563561][T15781] ? __pfx_shmem_mknod+0x10/0x10 [ 790.563602][T15781] vfs_mknod+0x3a5/0x7f0 [ 790.563632][T15781] filename_mknodat+0x5aa/0x7f0 [ 790.563670][T15781] ? __pfx_filename_mknodat+0x10/0x10 [ 790.563703][T15781] ? strncpy_from_user+0x19d/0x2d0 [ 790.563746][T15781] ? do_getname+0x191/0x390 [ 790.563786][T15781] __x64_sys_mknod+0x8f/0xc0 [ 790.563826][T15781] do_syscall_64+0x115/0x840 [ 790.563862][T15781] ? clear_bhb_loop+0x40/0x90 [ 790.563893][T15781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.563920][T15781] RIP: 0033:0x7f7d3859ce59 [ 790.563939][T15781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.563964][T15781] RSP: 002b:00007f7d393c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 790.563995][T15781] RAX: ffffffffffffffda RBX: 00007f7d38815fa0 RCX: 00007f7d3859ce59 [ 790.564012][T15781] RDX: 0000000000000007 RSI: 0000000000001e20 RDI: 0000200000000040 [ 790.564027][T15781] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 790.564046][T15781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.564062][T15781] R13: 00007f7d38816038 R14: 00007f7d38815fa0 R15: 00007ffee016dfc8 [ 790.564101][T15781] [ 791.360749][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.367937][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.569469][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2282'. [ 791.619599][T15791] openvswitch: netlink: Multiple metadata blocks provided [ 792.078027][T15796] FAULT_INJECTION: forcing a failure. [ 792.078027][T15796] name failslab, interval 1, probability 0, space 0, times 0 [ 792.165950][T15796] CPU: 0 UID: 0 PID: 15796 Comm: syz.4.2283 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.165989][T15796] Tainted: [L]=SOFTLOCKUP [ 792.165998][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.166013][T15796] Call Trace: [ 792.166022][T15796] [ 792.166032][T15796] dump_stack_lvl+0x100/0x190 [ 792.166063][T15796] should_fail_ex.cold+0x5/0xa [ 792.166094][T15796] ? __register_sysctl_table+0xac/0x1650 [ 792.166128][T15796] should_failslab+0xc2/0x120 [ 792.166158][T15796] __kmalloc_noprof+0xe0/0x850 [ 792.166187][T15796] __register_sysctl_table+0xac/0x1650 [ 792.166221][T15796] ? is_module_address+0x5f/0xf0 [ 792.166249][T15796] ? __pfx___register_sysctl_table+0x10/0x10 [ 792.166286][T15796] ? is_module_address+0x69/0xf0 [ 792.166316][T15796] ? register_net_sysctl_sz+0x222/0x430 [ 792.166358][T15796] ? __asan_memcpy+0x3c/0x60 [ 792.166400][T15796] __ip_vs_lblcr_init+0x150/0x330 [ 792.166432][T15796] ? __pfx___ip_vs_lblcr_init+0x10/0x10 [ 792.166460][T15796] ops_init+0x1e2/0x5f0 [ 792.166490][T15796] setup_net+0x118/0x3a0 [ 792.166518][T15796] ? __pfx_setup_net+0x10/0x10 [ 792.166545][T15796] ? mutex_init_lockdep+0xf1/0x120 [ 792.166575][T15796] copy_net_ns+0x46f/0x7c0 [ 792.166608][T15796] create_new_namespaces+0x3ea/0xac0 [ 792.166647][T15796] unshare_nsproxy_namespaces+0xf2/0x220 [ 792.166681][T15796] ksys_unshare+0x438/0xab0 [ 792.166719][T15796] ? __pfx_ksys_unshare+0x10/0x10 [ 792.166753][T15796] ? xfd_validate_state+0x129/0x190 [ 792.166787][T15796] __x64_sys_unshare+0x31/0x40 [ 792.166823][T15796] do_syscall_64+0x115/0x840 [ 792.166857][T15796] ? clear_bhb_loop+0x40/0x90 [ 792.166887][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.166912][T15796] RIP: 0033:0x7f7d3859ce59 [ 792.166932][T15796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.166956][T15796] RSP: 002b:00007f7d393c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 792.166980][T15796] RAX: ffffffffffffffda RBX: 00007f7d38815fa0 RCX: 00007f7d3859ce59 [ 792.166996][T15796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 792.167012][T15796] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 792.167027][T15796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.167042][T15796] R13: 00007f7d38816038 R14: 00007f7d38815fa0 R15: 00007ffee016dfc8 [ 792.167073][T15796] [ 792.444990][T15800] FAULT_INJECTION: forcing a failure. [ 792.444990][T15800] name failslab, interval 1, probability 0, space 0, times 0 [ 792.457691][T15800] CPU: 0 UID: 0 PID: 15800 Comm: syz.3.2284 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.457730][T15800] Tainted: [L]=SOFTLOCKUP [ 792.457739][T15800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.457754][T15800] Call Trace: [ 792.457763][T15800] [ 792.457772][T15800] dump_stack_lvl+0x100/0x190 [ 792.457802][T15800] should_fail_ex.cold+0x5/0xa [ 792.457834][T15800] should_failslab+0xc2/0x120 [ 792.457865][T15800] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 792.457905][T15800] ? __proc_create+0x2cb/0x8c0 [ 792.457943][T15800] __proc_create+0x2cb/0x8c0 [ 792.457976][T15800] ? __pfx___proc_create+0x10/0x10 [ 792.458007][T15800] ? copy_net_ns+0x46f/0x7c0 [ 792.458037][T15800] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 792.458067][T15800] ? ksys_unshare+0x438/0xab0 [ 792.458101][T15800] ? __x64_sys_unshare+0x31/0x40 [ 792.458145][T15800] proc_create_reg+0x75/0x170 [ 792.458181][T15800] proc_create_net_data+0x8e/0x1c0 [ 792.458216][T15800] ? __pfx_proc_create_net_data+0x10/0x10 [ 792.458259][T15800] xt_proto_init+0x24e/0xb80 [ 792.458304][T15800] ? __pfx_xt_proto_init+0x10/0x10 [ 792.458341][T15800] ? kasan_save_track+0x14/0x30 [ 792.458366][T15800] ? __kasan_kmalloc+0xaa/0xb0 [ 792.458394][T15800] ? __pfx_ip_tables_net_init+0x10/0x10 [ 792.458432][T15800] ops_init+0x1e2/0x5f0 [ 792.458461][T15800] setup_net+0x118/0x3a0 [ 792.458489][T15800] ? __pfx_setup_net+0x10/0x10 [ 792.458517][T15800] ? mutex_init_lockdep+0xf1/0x120 [ 792.458547][T15800] copy_net_ns+0x46f/0x7c0 [ 792.458579][T15800] create_new_namespaces+0x3ea/0xac0 [ 792.458617][T15800] unshare_nsproxy_namespaces+0xf2/0x220 [ 792.458652][T15800] ksys_unshare+0x438/0xab0 [ 792.458689][T15800] ? __pfx_ksys_unshare+0x10/0x10 [ 792.458723][T15800] ? xfd_validate_state+0x129/0x190 [ 792.458758][T15800] __x64_sys_unshare+0x31/0x40 [ 792.458794][T15800] do_syscall_64+0x115/0x840 [ 792.458829][T15800] ? clear_bhb_loop+0x40/0x90 [ 792.458859][T15800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.458885][T15800] RIP: 0033:0x7f179899ce59 [ 792.458906][T15800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.458931][T15800] RSP: 002b:00007f17997da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 792.458955][T15800] RAX: ffffffffffffffda RBX: 00007f1798c15fa0 RCX: 00007f179899ce59 [ 792.458971][T15800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 792.458986][T15800] RBP: 00007f1798a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 792.459001][T15800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.459016][T15800] R13: 00007f1798c16038 R14: 00007f1798c15fa0 R15: 00007ffcca1fd498 [ 792.459047][T15800] [ 793.277443][T15813] FAULT_INJECTION: forcing a failure. [ 793.277443][T15813] name failslab, interval 1, probability 0, space 0, times 0 [ 793.356804][T15813] CPU: 0 UID: 0 PID: 15813 Comm: syz.4.2286 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.356845][T15813] Tainted: [L]=SOFTLOCKUP [ 793.356854][T15813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 793.356875][T15813] Call Trace: [ 793.356883][T15813] [ 793.356893][T15813] dump_stack_lvl+0x100/0x190 [ 793.356924][T15813] should_fail_ex.cold+0x5/0xa [ 793.356956][T15813] should_failslab+0xc2/0x120 [ 793.356986][T15813] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 793.357039][T15813] ? __proc_create+0x2cb/0x8c0 [ 793.357076][T15813] __proc_create+0x2cb/0x8c0 [ 793.357127][T15813] ? __pfx___proc_create+0x10/0x10 [ 793.357158][T15813] ? lockdep_hardirqs_on+0x78/0x100 [ 793.357199][T15813] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 793.357242][T15813] proc_create_reg+0x75/0x170 [ 793.357279][T15813] proc_create_net_data+0x8e/0x1c0 [ 793.357314][T15813] ? __pfx_proc_create_net_data+0x10/0x10 [ 793.357349][T15813] ? lockdep_init_map_type+0x5c/0x250 [ 793.357390][T15813] ? timer_init_key+0x155/0x330 [ 793.357430][T15813] ip_vs_conn_net_init+0x326/0x4e0 [ 793.357460][T15813] __ip_vs_init+0x27d/0x520 [ 793.357488][T15813] ? __pfx___ip_vs_init+0x10/0x10 [ 793.357514][T15813] ops_init+0x1e2/0x5f0 [ 793.357544][T15813] setup_net+0x118/0x3a0 [ 793.357571][T15813] ? __pfx_setup_net+0x10/0x10 [ 793.357598][T15813] ? mutex_init_lockdep+0xf1/0x120 [ 793.357628][T15813] copy_net_ns+0x46f/0x7c0 [ 793.357660][T15813] create_new_namespaces+0x3ea/0xac0 [ 793.357699][T15813] unshare_nsproxy_namespaces+0xf2/0x220 [ 793.357733][T15813] ksys_unshare+0x438/0xab0 [ 793.357771][T15813] ? __pfx_ksys_unshare+0x10/0x10 [ 793.357805][T15813] ? xfd_validate_state+0x129/0x190 [ 793.357844][T15813] __x64_sys_unshare+0x31/0x40 [ 793.357879][T15813] do_syscall_64+0x115/0x840 [ 793.357913][T15813] ? clear_bhb_loop+0x40/0x90 [ 793.357944][T15813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.357970][T15813] RIP: 0033:0x7f7d3859ce59 [ 793.357990][T15813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.358016][T15813] RSP: 002b:00007f7d393c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 793.358039][T15813] RAX: ffffffffffffffda RBX: 00007f7d38815fa0 RCX: 00007f7d3859ce59 [ 793.358057][T15813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 793.358072][T15813] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 793.358088][T15813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.358103][T15813] R13: 00007f7d38816038 R14: 00007f7d38815fa0 R15: 00007ffee016dfc8 [ 793.358135][T15813] [ 794.804499][T15547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.946164][T15547] veth0_vlan: entered promiscuous mode [ 795.006739][T15547] veth1_vlan: entered promiscuous mode [ 795.125754][T15830] FAULT_INJECTION: forcing a failure. [ 795.125754][T15830] name failslab, interval 1, probability 0, space 0, times 0 [ 795.156418][T15547] veth0_macvtap: entered promiscuous mode [ 795.190956][T15830] CPU: 0 UID: 0 PID: 15830 Comm: syz.3.2291 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.191048][T15830] Tainted: [L]=SOFTLOCKUP [ 795.191057][T15830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 795.191072][T15830] Call Trace: [ 795.191081][T15830] [ 795.191090][T15830] dump_stack_lvl+0x100/0x190 [ 795.191120][T15830] should_fail_ex.cold+0x5/0xa [ 795.191152][T15830] should_failslab+0xc2/0x120 [ 795.191183][T15830] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 795.191222][T15830] ? __proc_create+0x2cb/0x8c0 [ 795.191261][T15830] __proc_create+0x2cb/0x8c0 [ 795.191294][T15830] ? __pfx___proc_create+0x10/0x10 [ 795.191325][T15830] ? lockdep_hardirqs_on+0x78/0x100 [ 795.191361][T15830] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 795.191403][T15830] proc_create_reg+0x75/0x170 [ 795.191440][T15830] proc_create_net_data+0x8e/0x1c0 [ 795.191474][T15830] ? __pfx_proc_create_net_data+0x10/0x10 [ 795.191509][T15830] ? lockdep_init_map_type+0x5c/0x250 [ 795.191551][T15830] ? timer_init_key+0x155/0x330 [ 795.191591][T15830] ip_vs_conn_net_init+0x326/0x4e0 [ 795.191622][T15830] __ip_vs_init+0x27d/0x520 [ 795.191650][T15830] ? __pfx___ip_vs_init+0x10/0x10 [ 795.191676][T15830] ops_init+0x1e2/0x5f0 [ 795.191706][T15830] setup_net+0x118/0x3a0 [ 795.191733][T15830] ? __pfx_setup_net+0x10/0x10 [ 795.191760][T15830] ? mutex_init_lockdep+0xf1/0x120 [ 795.191790][T15830] copy_net_ns+0x46f/0x7c0 [ 795.191823][T15830] create_new_namespaces+0x3ea/0xac0 [ 795.191861][T15830] unshare_nsproxy_namespaces+0xf2/0x220 [ 795.191896][T15830] ksys_unshare+0x438/0xab0 [ 795.191936][T15830] ? __pfx_ksys_unshare+0x10/0x10 [ 795.191978][T15830] ? xfd_validate_state+0x129/0x190 [ 795.192013][T15830] __x64_sys_unshare+0x31/0x40 [ 795.192049][T15830] do_syscall_64+0x115/0x840 [ 795.192084][T15830] ? clear_bhb_loop+0x40/0x90 [ 795.192115][T15830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.192141][T15830] RIP: 0033:0x7f179899ce59 [ 795.192161][T15830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.192186][T15830] RSP: 002b:00007f17997da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 795.192210][T15830] RAX: ffffffffffffffda RBX: 00007f1798c15fa0 RCX: 00007f179899ce59 [ 795.192227][T15830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 795.192242][T15830] RBP: 00007f1798a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 795.192257][T15830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.192272][T15830] R13: 00007f1798c16038 R14: 00007f1798c15fa0 R15: 00007ffcca1fd498 [ 795.192304][T15830] [ 795.194636][T15547] veth1_macvtap: entered promiscuous mode [ 795.586562][T15833] FAULT_INJECTION: forcing a failure. [ 795.586562][T15833] name failslab, interval 1, probability 0, space 0, times 0 [ 795.619953][T15833] CPU: 0 UID: 0 PID: 15833 Comm: syz.4.2292 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.619992][T15833] Tainted: [L]=SOFTLOCKUP [ 795.620001][T15833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 795.620016][T15833] Call Trace: [ 795.620024][T15833] [ 795.620033][T15833] dump_stack_lvl+0x100/0x190 [ 795.620069][T15833] should_fail_ex.cold+0x5/0xa [ 795.620100][T15833] should_failslab+0xc2/0x120 [ 795.620129][T15833] __kmalloc_cache_noprof+0x7a/0x6f0 [ 795.620164][T15833] ? __do_sys_fanotify_init+0x608/0xe80 [ 795.620199][T15833] __do_sys_fanotify_init+0x608/0xe80 [ 795.620231][T15833] do_syscall_64+0x115/0x840 [ 795.620265][T15833] ? clear_bhb_loop+0x40/0x90 [ 795.620294][T15833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.620319][T15833] RIP: 0033:0x7f7d3859ce59 [ 795.620337][T15833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.620361][T15833] RSP: 002b:00007f7d393c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 795.620384][T15833] RAX: ffffffffffffffda RBX: 00007f7d38815fa0 RCX: 00007f7d3859ce59 [ 795.620401][T15833] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 795.620415][T15833] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 795.620430][T15833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.620444][T15833] R13: 00007f7d38816038 R14: 00007f7d38815fa0 R15: 00007ffee016dfc8 [ 795.620473][T15833] [ 796.424363][T15547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.516842][T15547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.580268][ T1182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.589427][ T1182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.647022][ T1182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.700361][ T1182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.246666][ T8338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.300537][ T8338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.489574][ T8338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.553965][ T8338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.934222][T15868] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 798.022815][T15865] ubi0: attaching mtd0 [ 798.210606][T15865] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 798.275687][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'. [ 798.320696][T15865] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 8 [ 798.417854][T15865] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 798.524030][T15865] eraseblock attaching information dump: [ 798.576306][T15865] ec -1 [ 798.602859][T15865] pnum 0 [ 798.631499][T15865] lnum 0 [ 798.656665][T15865] scrub 1 [ 798.678687][T15865] sqnum 1 [ 798.700682][T15865] Volume identifier header dump: [ 798.770529][T15865] magic 55424921 [ 798.804198][T15865] version 1 [ 798.834140][T15865] vol_type 1 [ 798.865299][T15865] copy_flag 0 [ 798.881628][T15865] compat 5 [ 798.905497][T15865] vol_id 2147479551 [ 798.933994][T15865] lnum 0 [ 798.963467][T15865] data_size 0 [ 798.991791][T15865] used_ebs 0 [ 799.024349][T15865] data_pad 0 [ 799.045748][T15865] sqnum 1 [ 799.072426][T15865] hdr_crc 65b3bd2d [ 799.124005][T15865] Volume identifier header hexdump: [ 799.435578][T15865] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 799.767097][T15882] FAULT_INJECTION: forcing a failure. [ 799.767097][T15882] name failslab, interval 1, probability 0, space 0, times 0 [ 799.837479][T15882] CPU: 0 UID: 0 PID: 15882 Comm: syz.1.2300 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.837518][T15882] Tainted: [L]=SOFTLOCKUP [ 799.837528][T15882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 799.837543][T15882] Call Trace: [ 799.837551][T15882] [ 799.837561][T15882] dump_stack_lvl+0x100/0x190 [ 799.837592][T15882] should_fail_ex.cold+0x5/0xa [ 799.837624][T15882] should_failslab+0xc2/0x120 [ 799.837655][T15882] __kmalloc_cache_noprof+0x7a/0x6f0 [ 799.837702][T15882] ? __do_sys_fanotify_init+0x608/0xe80 [ 799.837738][T15882] __do_sys_fanotify_init+0x608/0xe80 [ 799.837772][T15882] do_syscall_64+0x115/0x840 [ 799.837807][T15882] ? clear_bhb_loop+0x40/0x90 [ 799.837840][T15882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.837889][T15882] RIP: 0033:0x7fd700f9ce59 [ 799.837924][T15882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.837967][T15882] RSP: 002b:00007fd701e76028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 799.837991][T15882] RAX: ffffffffffffffda RBX: 00007fd701215fa0 RCX: 00007fd700f9ce59 [ 799.838009][T15882] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 799.838024][T15882] RBP: 00007fd701032d6f R08: 0000000000000000 R09: 0000000000000000 [ 799.838040][T15882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.838055][T15882] R13: 00007fd701216038 R14: 00007fd701215fa0 R15: 00007ffc7683dfa8 [ 799.838086][T15882] [ 800.316578][T15886] FAULT_INJECTION: forcing a failure. [ 800.316578][T15886] name failslab, interval 1, probability 0, space 0, times 0 [ 800.423967][T15886] CPU: 0 UID: 0 PID: 15886 Comm: syz.4.2301 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.424007][T15886] Tainted: [L]=SOFTLOCKUP [ 800.424016][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 800.424031][T15886] Call Trace: [ 800.424039][T15886] [ 800.424049][T15886] dump_stack_lvl+0x100/0x190 [ 800.424080][T15886] should_fail_ex.cold+0x5/0xa [ 800.424113][T15886] should_failslab+0xc2/0x120 [ 800.424144][T15886] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 800.424184][T15886] ? __proc_create+0x2cb/0x8c0 [ 800.424223][T15886] __proc_create+0x2cb/0x8c0 [ 800.424256][T15886] ? __pfx___proc_create+0x10/0x10 [ 800.424292][T15886] ? _raw_write_unlock+0x28/0x50 [ 800.424326][T15886] ? proc_register+0x559/0x8a0 [ 800.424374][T15886] proc_create_reg+0x75/0x170 [ 800.424410][T15886] proc_create_seq_private+0x8e/0x180 [ 800.424447][T15886] ? __pfx_proc_create_seq_private+0x10/0x10 [ 800.424492][T15886] xt_proto_init+0x3ab/0xb80 [ 800.424532][T15886] ? __pfx_xt_proto_init+0x10/0x10 [ 800.424571][T15886] ? trace_kmalloc+0xe3/0x110 [ 800.424604][T15886] ? __kmalloc_noprof+0x320/0x850 [ 800.424630][T15886] ? __pfx_arp_tables_net_init+0x10/0x10 [ 800.424659][T15886] ops_init+0x1e2/0x5f0 [ 800.424689][T15886] setup_net+0x118/0x3a0 [ 800.424717][T15886] ? __pfx_setup_net+0x10/0x10 [ 800.424745][T15886] ? mutex_init_lockdep+0xf1/0x120 [ 800.424774][T15886] copy_net_ns+0x46f/0x7c0 [ 800.424807][T15886] create_new_namespaces+0x3ea/0xac0 [ 800.424846][T15886] unshare_nsproxy_namespaces+0xf2/0x220 [ 800.424881][T15886] ksys_unshare+0x438/0xab0 [ 800.424918][T15886] ? __pfx_ksys_unshare+0x10/0x10 [ 800.424953][T15886] ? xfd_validate_state+0x129/0x190 [ 800.424992][T15886] __x64_sys_unshare+0x31/0x40 [ 800.425028][T15886] do_syscall_64+0x115/0x840 [ 800.425062][T15886] ? clear_bhb_loop+0x40/0x90 [ 800.425093][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.425118][T15886] RIP: 0033:0x7f7d3859ce59 [ 800.425139][T15886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.425164][T15886] RSP: 002b:00007f7d393c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 800.425188][T15886] RAX: ffffffffffffffda RBX: 00007f7d38815fa0 RCX: 00007f7d3859ce59 [ 800.425204][T15886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 800.425220][T15886] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 800.425235][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.425251][T15886] R13: 00007f7d38816038 R14: 00007f7d38815fa0 R15: 00007ffee016dfc8 [ 800.425282][T15886] [ 801.454191][T15894] FAULT_INJECTION: forcing a failure. [ 801.454191][T15894] name failslab, interval 1, probability 0, space 0, times 0 [ 801.496917][T15894] CPU: 0 UID: 0 PID: 15894 Comm: syz.0.2305 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.496955][T15894] Tainted: [L]=SOFTLOCKUP [ 801.496964][T15894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 801.496978][T15894] Call Trace: [ 801.496986][T15894] [ 801.496996][T15894] dump_stack_lvl+0x100/0x190 [ 801.497025][T15894] should_fail_ex.cold+0x5/0xa [ 801.497055][T15894] should_failslab+0xc2/0x120 [ 801.497085][T15894] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 801.497124][T15894] ? __d_alloc+0x34/0xa40 [ 801.497162][T15894] __d_alloc+0x34/0xa40 [ 801.497192][T15894] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 801.497230][T15894] ? security_inode_alloc+0x3b/0x2c0 [ 801.497260][T15894] d_alloc_pseudo+0x1c/0xc0 [ 801.497283][T15894] alloc_file_pseudo+0xcf/0x230 [ 801.497332][T15894] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 801.497367][T15894] ? inode_init_always_gfp+0xc98/0xfb0 [ 801.497404][T15894] sock_alloc_file+0x50/0x210 [ 801.497433][T15894] do_accept+0x242/0x530 [ 801.497467][T15894] ? 0xffffffff81000000 [ 801.497484][T15894] ? do_raw_spin_lock+0x128/0x260 [ 801.497511][T15894] ? __pfx_do_accept+0x10/0x10 [ 801.497563][T15894] ? 0xffffffff81000000 [ 801.497579][T15894] __sys_accept4+0x108/0x200 [ 801.497616][T15894] ? __pfx___sys_accept4+0x10/0x10 [ 801.497650][T15894] ? ksys_write+0x1ac/0x250 [ 801.497677][T15894] ? __pfx_ksys_write+0x10/0x10 [ 801.497709][T15894] __x64_sys_accept+0x74/0xb0 [ 801.497745][T15894] ? lockdep_hardirqs_on+0x78/0x100 [ 801.497779][T15894] do_syscall_64+0x115/0x840 [ 801.497811][T15894] ? clear_bhb_loop+0x40/0x90 [ 801.497840][T15894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.497865][T15894] RIP: 0033:0x7fb20819ce59 [ 801.497883][T15894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.497908][T15894] RSP: 002b:00007fb208fe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 801.497931][T15894] RAX: ffffffffffffffda RBX: 00007fb208415fa0 RCX: 00007fb20819ce59 [ 801.497947][T15894] RDX: ffffffff81000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 801.497962][T15894] RBP: 00007fb208fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 801.497977][T15894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.497991][T15894] R13: 00007fb208416038 R14: 00007fb208415fa0 R15: 00007fff7d8f42f8 [ 801.498015][T15894] ? 0xffffffff81000000 [ 801.498038][T15894] [ 803.317968][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 803.343610][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 803.356883][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 803.375958][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 803.387271][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 803.526070][T15924] FAULT_INJECTION: forcing a failure. [ 803.526070][T15924] name failslab, interval 1, probability 0, space 0, times 0 [ 803.599458][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2309'. [ 803.622128][T15924] CPU: 0 UID: 0 PID: 15924 Comm: syz.0.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 803.622174][T15924] Tainted: [L]=SOFTLOCKUP [ 803.622183][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.622199][T15924] Call Trace: [ 803.622208][T15924] [ 803.622217][T15924] dump_stack_lvl+0x100/0x190 [ 803.622247][T15924] should_fail_ex.cold+0x5/0xa [ 803.622279][T15924] should_failslab+0xc2/0x120 [ 803.622309][T15924] __kmalloc_cache_noprof+0x7a/0x6f0 [ 803.622346][T15924] ? __do_sys_fanotify_init+0x608/0xe80 [ 803.622381][T15924] __do_sys_fanotify_init+0x608/0xe80 [ 803.622414][T15924] do_syscall_64+0x115/0x840 [ 803.622449][T15924] ? clear_bhb_loop+0x40/0x90 [ 803.622479][T15924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.622505][T15924] RIP: 0033:0x7fb20819ce59 [ 803.622525][T15924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.622551][T15924] RSP: 002b:00007fb208fe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 803.622575][T15924] RAX: ffffffffffffffda RBX: 00007fb208415fa0 RCX: 00007fb20819ce59 [ 803.622592][T15924] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 803.622606][T15924] RBP: 00007fb208232d6f R08: 0000000000000000 R09: 0000000000000000 [ 803.622621][T15924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.622636][T15924] R13: 00007fb208416038 R14: 00007fb208415fa0 R15: 00007fff7d8f42f8 [ 803.622667][T15924] [ 805.187796][ T8338] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.339405][T15935] FAULT_INJECTION: forcing a failure. [ 805.339405][T15935] name failslab, interval 1, probability 0, space 0, times 0 [ 805.414838][T15935] CPU: 0 UID: 0 PID: 15935 Comm: syz.0.2319 Tainted: G L syzkaller #0 PREEMPT(full) [ 805.414877][T15935] Tainted: [L]=SOFTLOCKUP [ 805.414886][T15935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 805.414902][T15935] Call Trace: [ 805.414910][T15935] [ 805.414927][T15935] dump_stack_lvl+0x100/0x190 [ 805.414958][T15935] should_fail_ex.cold+0x5/0xa [ 805.414990][T15935] should_failslab+0xc2/0x120 [ 805.415021][T15935] __kmalloc_cache_noprof+0x7a/0x6f0 [ 805.415058][T15935] ? ip_vs_protocol_net_init+0xbe/0x300 [ 805.415102][T15935] ip_vs_protocol_net_init+0xbe/0x300 [ 805.415144][T15935] __ip_vs_init+0x239/0x520 [ 805.415173][T15935] ? __pfx___ip_vs_init+0x10/0x10 [ 805.415199][T15935] ops_init+0x1e2/0x5f0 [ 805.415229][T15935] setup_net+0x118/0x3a0 [ 805.415256][T15935] ? __pfx_setup_net+0x10/0x10 [ 805.415284][T15935] ? mutex_init_lockdep+0xf1/0x120 [ 805.415314][T15935] copy_net_ns+0x46f/0x7c0 [ 805.415347][T15935] create_new_namespaces+0x3ea/0xac0 [ 805.415385][T15935] unshare_nsproxy_namespaces+0xf2/0x220 [ 805.415420][T15935] ksys_unshare+0x438/0xab0 [ 805.415458][T15935] ? __pfx_ksys_unshare+0x10/0x10 [ 805.415496][T15935] ? xfd_validate_state+0x129/0x190 [ 805.415531][T15935] __x64_sys_unshare+0x31/0x40 [ 805.415567][T15935] do_syscall_64+0x115/0x840 [ 805.415602][T15935] ? clear_bhb_loop+0x40/0x90 [ 805.415632][T15935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.415658][T15935] RIP: 0033:0x7fb20819ce59 [ 805.415679][T15935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.415703][T15935] RSP: 002b:00007fb208fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 805.415727][T15935] RAX: ffffffffffffffda RBX: 00007fb208415fa0 RCX: 00007fb20819ce59 [ 805.415743][T15935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 805.415759][T15935] RBP: 00007fb208232d6f R08: 0000000000000000 R09: 0000000000000000 [ 805.415774][T15935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.415789][T15935] R13: 00007fb208416038 R14: 00007fb208415fa0 R15: 00007fff7d8f42f8 [ 805.415821][T15935] [ 805.929906][ T5640] Bluetooth: hci3: command tx timeout [ 806.055045][ T8338] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.245064][ T8338] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.486952][ T8338] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.454388][T15962] FAULT_INJECTION: forcing a failure. [ 807.454388][T15962] name failslab, interval 1, probability 0, space 0, times 0 [ 807.542507][T15962] CPU: 0 UID: 0 PID: 15962 Comm: syz.0.2318 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.542548][T15962] Tainted: [L]=SOFTLOCKUP [ 807.542557][T15962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 807.542571][T15962] Call Trace: [ 807.542579][T15962] [ 807.542589][T15962] dump_stack_lvl+0x100/0x190 [ 807.542620][T15962] should_fail_ex.cold+0x5/0xa [ 807.542651][T15962] should_failslab+0xc2/0x120 [ 807.542682][T15962] __kmalloc_cache_noprof+0x7a/0x6f0 [ 807.542718][T15962] ? __do_sys_fanotify_init+0x547/0xe80 [ 807.542746][T15962] ? get_mem_cgroup_from_mm+0x69/0x5e0 [ 807.542785][T15962] ? get_mem_cgroup_from_mm+0x113/0x5e0 [ 807.542812][T15962] __do_sys_fanotify_init+0x547/0xe80 [ 807.542846][T15962] do_syscall_64+0x115/0x840 [ 807.542881][T15962] ? clear_bhb_loop+0x40/0x90 [ 807.542911][T15962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.542937][T15962] RIP: 0033:0x7fb20819ce59 [ 807.542957][T15962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.542981][T15962] RSP: 002b:00007fb208fe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 807.543005][T15962] RAX: ffffffffffffffda RBX: 00007fb208415fa0 RCX: 00007fb20819ce59 [ 807.543022][T15962] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 807.543037][T15962] RBP: 00007fb208232d6f R08: 0000000000000000 R09: 0000000000000000 [ 807.543052][T15962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.543067][T15962] R13: 00007fb208416038 R14: 00007fb208415fa0 R15: 00007fff7d8f42f8 [ 807.543097][T15962] [ 808.031829][ T50] Bluetooth: hci3: command tx timeout [ 808.223392][T15970] snd_virmidi snd_virmidi.0: control 61678:2:4:yª:5 is already present [ 808.430267][T15965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2320'. [ 808.453114][ T8338] bridge_slave_1: left allmulticast mode [ 808.479504][ T8338] bridge_slave_1: left promiscuous mode [ 808.501625][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.557131][ T8338] bridge_slave_0: left allmulticast mode [ 808.581186][ T8338] bridge_slave_0: left promiscuous mode [ 808.605902][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.876981][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.889578][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.296970][ T8338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.337970][ T8338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.385209][ T8338] bond0 (unregistering): Released all slaves [ 809.471936][T15965] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 809.652478][T15965] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 809.664469][T15988] FAULT_INJECTION: forcing a failure. [ 809.664469][T15988] name failslab, interval 1, probability 0, space 0, times 0 [ 809.716839][T15965] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 809.744675][T15988] CPU: 0 UID: 0 PID: 15988 Comm: syz.4.2321 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.744732][T15988] Tainted: [L]=SOFTLOCKUP [ 809.744742][T15988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 809.744757][T15988] Call Trace: [ 809.744765][T15988] [ 809.744775][T15988] dump_stack_lvl+0x100/0x190 [ 809.744804][T15988] should_fail_ex.cold+0x5/0xa [ 809.744836][T15988] should_failslab+0xc2/0x120 [ 809.744867][T15988] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 809.744907][T15988] ? __proc_create+0x2cb/0x8c0 [ 809.744945][T15988] __proc_create+0x2cb/0x8c0 [ 809.744977][T15988] ? __pfx___proc_create+0x10/0x10 [ 809.745021][T15988] proc_create_reg+0x75/0x170 [ 809.745057][T15988] proc_create_net_data+0x8e/0x1c0 [ 809.745092][T15988] ? __pfx_proc_create_net_data+0x10/0x10 [ 809.745127][T15988] ? __kasan_kmalloc+0xaa/0xb0 [ 809.745163][T15988] ip_vs_app_net_init+0xc8/0x110 [ 809.745197][T15988] __ip_vs_init+0x25b/0x520 [ 809.745224][T15988] ? __pfx___ip_vs_init+0x10/0x10 [ 809.745250][T15988] ops_init+0x1e2/0x5f0 [ 809.745281][T15988] setup_net+0x118/0x3a0 [ 809.745308][T15988] ? __pfx_setup_net+0x10/0x10 [ 809.745335][T15988] ? mutex_init_lockdep+0xf1/0x120 [ 809.745365][T15988] copy_net_ns+0x46f/0x7c0 [ 809.745397][T15988] create_new_namespaces+0x3ea/0xac0 [ 809.745436][T15988] unshare_nsproxy_namespaces+0xf2/0x220 [ 809.745470][T15988] ksys_unshare+0x438/0xab0 [ 809.745508][T15988] ? __pfx_ksys_unshare+0x10/0x10 [ 809.745552][T15988] ? xfd_validate_state+0x129/0x190 [ 809.745586][T15988] __x64_sys_unshare+0x31/0x40 [ 809.745622][T15988] do_syscall_64+0x115/0x840 [ 809.745658][T15988] ? clear_bhb_loop+0x40/0x90 [ 809.745688][T15988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.745714][T15988] RIP: 0033:0x7f7d3859ce59 [ 809.745734][T15988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.745765][T15988] RSP: 002b:00007f7d393c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 809.745789][T15988] RAX: ffffffffffffffda RBX: 00007f7d38815fa0 RCX: 00007f7d3859ce59 [ 809.745806][T15988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 809.745821][T15988] RBP: 00007f7d38632d6f R08: 0000000000000000 R09: 0000000000000000 [ 809.745837][T15988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.745852][T15988] R13: 00007f7d38816038 R14: 00007f7d38815fa0 R15: 00007ffee016dfc8 [ 809.745883][T15988] [ 810.137857][ T50] Bluetooth: hci3: command tx timeout [ 810.227313][ T5298] 8021q: adding VLAN 0 to HW filter on device eth5 [ 810.483142][T15919] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.529760][T15919] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.555641][T15919] bridge_slave_0: entered allmulticast mode [ 810.593010][T15919] bridge_slave_0: entered promiscuous mode [ 810.668415][T15919] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.732617][T15919] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.779774][T15919] bridge_slave_1: entered allmulticast mode [ 810.818112][T15919] bridge_slave_1: entered promiscuous mode [ 811.078639][T15919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.184935][T15919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.519508][T15919] team0: Port device team_slave_0 added [ 811.615370][T15919] team0: Port device team_slave_1 added [ 811.862228][T15919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.909676][T15919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.049365][T15919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.142182][T15919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.149941][ T5640] Bluetooth: hci3: command tx timeout [ 812.214545][T15919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.401689][T15919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.755327][T15919] hsr_slave_0: entered promiscuous mode [ 812.776223][T15919] hsr_slave_1: entered promiscuous mode [ 812.884584][ T8338] hsr_slave_0: left promiscuous mode [ 812.905565][ T8338] hsr_slave_1: left promiscuous mode [ 812.923543][ T8338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.944617][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.961655][ T8338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.979344][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.009026][ T8338] veth1_macvtap: left promiscuous mode [ 813.022964][ T8338] veth0_macvtap: left promiscuous mode [ 813.034707][ T8338] veth1_vlan: left promiscuous mode [ 813.047051][ T8338] veth0_vlan: left promiscuous mode [ 813.319671][T16032] FAULT_INJECTION: forcing a failure. [ 813.319671][T16032] name failslab, interval 1, probability 0, space 0, times 0 [ 813.373574][T16032] CPU: 0 UID: 0 PID: 16032 Comm: syz.1.2328 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.373614][T16032] Tainted: [L]=SOFTLOCKUP [ 813.373623][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 813.373638][T16032] Call Trace: [ 813.373647][T16032] [ 813.373657][T16032] dump_stack_lvl+0x100/0x190 [ 813.373688][T16032] should_fail_ex.cold+0x5/0xa [ 813.373719][T16032] should_failslab+0xc2/0x120 [ 813.373750][T16032] __kmalloc_cache_noprof+0x7a/0x6f0 [ 813.373786][T16032] ? __do_sys_fanotify_init+0x547/0xe80 [ 813.373814][T16032] ? get_mem_cgroup_from_mm+0x69/0x5e0 [ 813.373838][T16032] ? get_mem_cgroup_from_mm+0x113/0x5e0 [ 813.373867][T16032] __do_sys_fanotify_init+0x547/0xe80 [ 813.373900][T16032] do_syscall_64+0x115/0x840 [ 813.373935][T16032] ? clear_bhb_loop+0x40/0x90 [ 813.373966][T16032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.373991][T16032] RIP: 0033:0x7fd700f9ce59 [ 813.374011][T16032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.374035][T16032] RSP: 002b:00007fd701e76028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 813.374059][T16032] RAX: ffffffffffffffda RBX: 00007fd701215fa0 RCX: 00007fd700f9ce59 [ 813.374076][T16032] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 813.374091][T16032] RBP: 00007fd701032d6f R08: 0000000000000000 R09: 0000000000000000 [ 813.374106][T16032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.374128][T16032] R13: 00007fd701216038 R14: 00007fd701215fa0 R15: 00007ffc7683dfa8 [ 813.374160][T16032] [ 813.641570][T16033] vcan0: tx drop: invalid da for name 0x0003ffff0000003f [ 813.778814][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 814.249651][ T8338] team0 (unregistering): Port device team_slave_1 removed [ 814.331790][ T8338] team0 (unregistering): Port device team_slave_0 removed [ 814.916659][ T5298] 8021q: adding VLAN 0 to HW filter on device eth6 [ 818.659557][T16092] Process accounting paused [ 818.844282][T16105] snd_virmidi snd_virmidi.0: control 61678:2:4:yª:5 is already present [ 819.445579][T16120] blktrace: Concurrent blktraces are not allowed on loop2 [ 819.486516][T16120] FAULT_INJECTION: forcing a failure. [ 819.486516][T16120] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 819.551225][T16120] CPU: 0 UID: 0 PID: 16120 Comm: syz.0.2340 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.551264][T16120] Tainted: [L]=SOFTLOCKUP [ 819.551274][T16120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 819.551290][T16120] Call Trace: [ 819.551298][T16120] [ 819.551308][T16120] dump_stack_lvl+0x100/0x190 [ 819.551338][T16120] should_fail_ex.cold+0x5/0xa [ 819.551365][T16120] ? prepare_alloc_pages+0x16d/0x5f0 [ 819.551401][T16120] should_fail_alloc_page+0xeb/0x140 [ 819.551433][T16120] prepare_alloc_pages+0x1f0/0x5f0 [ 819.551473][T16120] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 819.551551][T16120] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 819.551605][T16120] ? rcu_is_watching+0x12/0xc0 [ 819.551633][T16120] ? trace_kmalloc+0xe3/0x110 [ 819.551660][T16120] ? __kasan_kmalloc+0xaa/0xb0 [ 819.551685][T16120] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 819.551711][T16120] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 819.551747][T16120] ? policy_nodemask+0xed/0x4f0 [ 819.551809][T16120] alloc_pages_mpol+0x1fb/0x540 [ 819.551839][T16120] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 819.551866][T16120] ? __alloc_skb+0x5b7/0x710 [ 819.551889][T16120] ? __pfx___alloc_skb+0x10/0x10 [ 819.551912][T16120] ? rcu_is_watching+0x12/0xc0 [ 819.551942][T16120] alloc_pages_noprof+0x1a/0x160 [ 819.551977][T16120] alloc_skb_with_frags+0x4e7/0x760 [ 819.552013][T16120] sock_alloc_send_pskb+0x801/0x980 [ 819.552060][T16120] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 819.552112][T16120] tun_get_user+0x904/0x3c20 [ 819.552150][T16120] ? __pfx_tun_get_user+0x10/0x10 [ 819.552176][T16120] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 819.552210][T16120] ? find_held_lock+0x2b/0x80 [ 819.552240][T16120] ? tun_get+0x191/0x370 [ 819.552259][T16120] ? tun_get+0x191/0x370 [ 819.552287][T16120] tun_chr_write_iter+0xdc/0x200 [ 819.552315][T16120] vfs_write+0x6ac/0x1070 [ 819.552345][T16120] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 819.552373][T16120] ? __pfx_vfs_write+0x10/0x10 [ 819.552398][T16120] ? find_held_lock+0x2b/0x80 [ 819.552445][T16120] __x64_sys_pwrite64+0x1eb/0x250 [ 819.552476][T16120] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 819.552508][T16120] ? rcu_is_watching+0x12/0xc0 [ 819.552545][T16120] do_syscall_64+0x115/0x840 [ 819.552598][T16120] ? clear_bhb_loop+0x40/0x90 [ 819.552629][T16120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.552655][T16120] RIP: 0033:0x7fb20819ce59 [ 819.552675][T16120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.552700][T16120] RSP: 002b:00007fb208fc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 819.552723][T16120] RAX: ffffffffffffffda RBX: 00007fb208416090 RCX: 00007fb20819ce59 [ 819.552740][T16120] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 819.552755][T16120] RBP: 00007fb208232d6f R08: 0000000000000000 R09: 0000000000000000 [ 819.552771][T16120] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 819.552786][T16120] R13: 00007fb208416128 R14: 00007fb208416090 R15: 00007fff7d8f42f8 [ 819.552817][T16120] [ 820.038093][T15919] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 820.211971][T15919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 820.357782][T15919] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 820.377602][T15919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 820.422535][T15919] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 820.468268][T15919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 820.499670][T15919] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 820.568620][T15919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 820.862194][T16145] FAULT_INJECTION: forcing a failure. [ 820.862194][T16145] name failslab, interval 1, probability 0, space 0, times 0 [ 820.888446][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 820.928532][T16144] openvswitch: netlink: Multiple metadata blocks provided [ 821.013907][T16145] CPU: 0 UID: 0 PID: 16145 Comm: syz.0.2341 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.013942][T16145] Tainted: [L]=SOFTLOCKUP [ 821.013950][T16145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 821.013963][T16145] Call Trace: [ 821.013970][T16145] [ 821.013978][T16145] dump_stack_lvl+0x100/0x190 [ 821.014006][T16145] should_fail_ex.cold+0x5/0xa [ 821.014033][T16145] ? tomoyo_encode2+0xfb/0x3c0 [ 821.014065][T16145] should_failslab+0xc2/0x120 [ 821.014092][T16145] __kmalloc_noprof+0xe0/0x850 [ 821.014111][T16145] ? d_absolute_path+0x136/0x1b0 [ 821.014136][T16145] tomoyo_encode2+0xfb/0x3c0 [ 821.014190][T16145] tomoyo_encode+0x29/0x50 [ 821.014221][T16145] tomoyo_realpath_from_path+0x18c/0x690 [ 821.014262][T16145] tomoyo_path_number_perm+0x23c/0x580 [ 821.014290][T16145] ? tomoyo_path_number_perm+0x22e/0x580 [ 821.014320][T16145] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 821.014376][T16145] ? find_held_lock+0x2b/0x80 [ 821.014404][T16145] ? __fget_files+0x215/0x3d0 [ 821.014430][T16145] ? hook_file_ioctl_common+0x149/0x410 [ 821.014458][T16145] ? __fget_files+0x215/0x3d0 [ 821.014490][T16145] ? __fget_files+0x21f/0x3d0 [ 821.014528][T16145] security_file_ioctl+0xd3/0x230 [ 821.014558][T16145] __x64_sys_ioctl+0xb7/0x210 [ 821.014584][T16145] do_syscall_64+0x115/0x840 [ 821.014616][T16145] ? clear_bhb_loop+0x40/0x90 [ 821.014644][T16145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.014668][T16145] RIP: 0033:0x7fb20819ce59 [ 821.014686][T16145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.014709][T16145] RSP: 002b:00007fb208fc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 821.014731][T16145] RAX: ffffffffffffffda RBX: 00007fb208416090 RCX: 00007fb20819ce59 [ 821.014746][T16145] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000005 [ 821.014760][T16145] RBP: 00007fb208fc5090 R08: 0000000000000000 R09: 0000000000000000 [ 821.014774][T16145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.014788][T16145] R13: 00007fb208416128 R14: 00007fb208416090 R15: 00007fff7d8f42f8 [ 821.014818][T16145] [ 821.014837][T16145] ERROR: Out of memory at tomoyo_realpath_from_path. [ 821.267787][T15919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.312418][T15919] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.428145][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.435342][ T8338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.582771][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.589978][ T8338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.897489][T16182] FAULT_INJECTION: forcing a failure. [ 822.897489][T16182] name failslab, interval 1, probability 0, space 0, times 0 [ 823.006446][T16182] CPU: 0 UID: 0 PID: 16182 Comm: syz.0.2347 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.006486][T16182] Tainted: [L]=SOFTLOCKUP [ 823.006496][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.006511][T16182] Call Trace: [ 823.006520][T16182] [ 823.006529][T16182] dump_stack_lvl+0x100/0x190 [ 823.006559][T16182] should_fail_ex.cold+0x5/0xa [ 823.006591][T16182] should_failslab+0xc2/0x120 [ 823.006622][T16182] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 823.006662][T16182] ? __proc_create+0x2cb/0x8c0 [ 823.006700][T16182] __proc_create+0x2cb/0x8c0 [ 823.006733][T16182] ? __pfx___proc_create+0x10/0x10 [ 823.006769][T16182] ? _raw_write_unlock+0x28/0x50 [ 823.006803][T16182] ? proc_register+0x559/0x8a0 [ 823.006838][T16182] proc_create_reg+0x75/0x170 [ 823.006875][T16182] proc_create_net_data+0x8e/0x1c0 [ 823.006916][T16182] ? __pfx_proc_create_net_data+0x10/0x10 [ 823.006950][T16182] ? lockdep_init_map_type+0x5c/0x250 [ 823.006992][T16182] ? timer_init_key+0x155/0x330 [ 823.007032][T16182] ip_vs_conn_net_init+0x39d/0x4e0 [ 823.007062][T16182] __ip_vs_init+0x27d/0x520 [ 823.007089][T16182] ? __pfx___ip_vs_init+0x10/0x10 [ 823.007116][T16182] ops_init+0x1e2/0x5f0 [ 823.007145][T16182] setup_net+0x118/0x3a0 [ 823.007173][T16182] ? __pfx_setup_net+0x10/0x10 [ 823.007200][T16182] ? mutex_init_lockdep+0xf1/0x120 [ 823.007229][T16182] copy_net_ns+0x46f/0x7c0 [ 823.007269][T16182] create_new_namespaces+0x3ea/0xac0 [ 823.007308][T16182] unshare_nsproxy_namespaces+0xf2/0x220 [ 823.007342][T16182] ksys_unshare+0x438/0xab0 [ 823.007379][T16182] ? __pfx_ksys_unshare+0x10/0x10 [ 823.007414][T16182] ? xfd_validate_state+0x129/0x190 [ 823.007448][T16182] __x64_sys_unshare+0x31/0x40 [ 823.007483][T16182] do_syscall_64+0x115/0x840 [ 823.007518][T16182] ? clear_bhb_loop+0x40/0x90 [ 823.007548][T16182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.007573][T16182] RIP: 0033:0x7fb20819ce59 [ 823.007593][T16182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.007617][T16182] RSP: 002b:00007fb208fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 823.007641][T16182] RAX: ffffffffffffffda RBX: 00007fb208415fa0 RCX: 00007fb20819ce59 [ 823.007657][T16182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 823.007673][T16182] RBP: 00007fb208232d6f R08: 0000000000000000 R09: 0000000000000000 [ 823.007689][T16182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.007704][T16182] R13: 00007fb208416038 R14: 00007fb208415fa0 R15: 00007fff7d8f42f8 [ 823.007735][T16182] [ 823.660386][T16188] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 823.704626][T16188] ================================================================== [ 823.712752][T16188] BUG: KASAN: slab-use-after-free in dvb_device_put.part.0+0x22/0x90 [ 823.720934][T16188] Write of size 4 at addr ffff88802cf34a10 by task syz.1.2346/16188 [ 823.728925][T16188] [ 823.731283][T16188] CPU: 0 UID: 0 PID: 16188 Comm: syz.1.2346 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.731318][T16188] Tainted: [L]=SOFTLOCKUP [ 823.731326][T16188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.731342][T16188] Call Trace: [ 823.731351][T16188] [ 823.731361][T16188] dump_stack_lvl+0x100/0x190 [ 823.731388][T16188] print_report+0x13d/0x4b0 [ 823.731423][T16188] ? __virt_addr_valid+0x239/0x430 [ 823.731477][T16188] ? dvb_device_put.part.0+0x22/0x90 [ 823.731513][T16188] kasan_report+0xdf/0x1d0 [ 823.731541][T16188] ? dvb_device_put.part.0+0x22/0x90 [ 823.731580][T16188] kasan_check_range+0x10f/0x1e0 [ 823.731612][T16188] dvb_device_put.part.0+0x22/0x90 [ 823.731649][T16188] dvb_device_open+0x2ba/0x3b0 [ 823.731685][T16188] ? __pfx_dvb_device_open+0x10/0x10 [ 823.731721][T16188] chrdev_open+0x234/0x6a0 [ 823.731751][T16188] ? __pfx_apparmor_file_open+0x10/0x10 [ 823.731778][T16188] ? __pfx_chrdev_open+0x10/0x10 [ 823.731808][T16188] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 823.731843][T16188] do_dentry_open+0x6ab/0x14d0 [ 823.731871][T16188] ? __pfx_chrdev_open+0x10/0x10 [ 823.731902][T16188] vfs_open+0x82/0x3f0 [ 823.731938][T16188] path_openat+0x208c/0x31a0 [ 823.731972][T16188] ? __pfx_path_openat+0x10/0x10 [ 823.732007][T16188] do_file_open+0x20e/0x430 [ 823.732036][T16188] ? __pfx_do_file_open+0x10/0x10 [ 823.732076][T16188] ? alloc_fd+0x476/0x790 [ 823.732105][T16188] ? do_getname+0x191/0x390 [ 823.732141][T16188] do_sys_openat2+0x10d/0x1e0 [ 823.732176][T16188] ? __pfx_do_sys_openat2+0x10/0x10 [ 823.732226][T16188] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 823.732254][T16188] ? rcu_is_watching+0x12/0xc0 [ 823.732281][T16188] ? _raw_spin_unlock_irq+0x23/0x50 [ 823.732312][T16188] ? lockdep_hardirqs_on+0x78/0x100 [ 823.732348][T16188] __x64_sys_openat+0x12d/0x210 [ 823.732385][T16188] ? __pfx___x64_sys_openat+0x10/0x10 [ 823.732424][T16188] ? rcu_is_watching+0x12/0xc0 [ 823.732453][T16188] do_syscall_64+0x115/0x840 [ 823.732485][T16188] ? clear_bhb_loop+0x40/0x90 [ 823.732513][T16188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.732537][T16188] RIP: 0033:0x7fd700f9ce59 [ 823.732556][T16188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.732579][T16188] RSP: 002b:00007fd701e13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 823.732602][T16188] RAX: ffffffffffffffda RBX: 00007fd701216270 RCX: 00007fd700f9ce59 [ 823.732619][T16188] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 823.732634][T16188] RBP: 00007fd701032d6f R08: 0000000000000000 R09: 0000000000000000 [ 823.732649][T16188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.732664][T16188] R13: 00007fd701216308 R14: 00007fd701216270 R15: 00007ffc7683dfa8 [ 823.732688][T16188] [ 823.732696][T16188] [ 824.014387][T16188] Allocated by task 1: [ 824.018511][T16188] kasan_save_stack+0x30/0x50 [ 824.023204][T16188] kasan_save_track+0x14/0x30 [ 824.027891][T16188] __kasan_kmalloc+0xaa/0xb0 [ 824.032488][T16188] dvb_register_device+0x1d6/0x1e20 [ 824.037707][T16188] dvb_register_frontend+0x552/0x820 [ 824.043055][T16188] vidtv_bridge_probe+0x44b/0xa30 [ 824.048130][T16188] platform_probe+0x106/0x1d0 [ 824.052832][T16188] really_probe+0x241/0xa60 [ 824.057354][T16188] __driver_probe_device+0x22e/0x480 [ 824.062657][T16188] driver_probe_device+0x4c/0x1b0 [ 824.067704][T16188] __driver_attach+0x21f/0x5d0 [ 824.072487][T16188] bus_for_each_dev+0x13e/0x1d0 [ 824.077352][T16188] bus_add_driver+0x305/0x5b0 [ 824.082045][T16188] driver_register+0x1e2/0x360 [ 824.086817][T16188] vidtv_bridge_init+0x38/0x70 [ 824.091707][T16188] do_one_initcall+0x121/0x750 [ 824.096485][T16188] kernel_init_freeable+0x6ea/0x7b0 [ 824.101727][T16188] kernel_init+0x1f/0x1e0 [ 824.106067][T16188] ret_from_fork+0x72b/0xd50 [ 824.110674][T16188] ret_from_fork_asm+0x1a/0x30 [ 824.115455][T16188] [ 824.117784][T16188] Freed by task 16189: [ 824.121852][T16188] kasan_save_stack+0x30/0x50 [ 824.126540][T16188] kasan_save_track+0x14/0x30 [ 824.131233][T16188] kasan_save_free_info+0x3b/0x70 [ 824.136279][T16188] __kasan_slab_free+0x5f/0x80 [ 824.141050][T16188] kfree+0x223/0x6c0 [ 824.144965][T16188] dvb_device_put.part.0+0x57/0x90 [ 824.150123][T16188] dvb_device_open+0x2ba/0x3b0 [ 824.154919][T16188] chrdev_open+0x234/0x6a0 [ 824.159353][T16188] do_dentry_open+0x6ab/0x14d0 [ 824.164131][T16188] vfs_open+0x82/0x3f0 [ 824.168340][T16188] path_openat+0x208c/0x31a0 [ 824.172947][T16188] do_file_open+0x20e/0x430 [ 824.177488][T16188] do_sys_openat2+0x10d/0x1e0 [ 824.182190][T16188] __x64_sys_openat+0x12d/0x210 [ 824.187063][T16188] do_syscall_64+0x115/0x840 [ 824.191672][T16188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.197574][T16188] [ 824.199902][T16188] The buggy address belongs to the object at ffff88802cf34a00 [ 824.199902][T16188] which belongs to the cache kmalloc-256 of size 256 [ 824.213984][T16188] The buggy address is located 16 bytes inside of [ 824.213984][T16188] freed 256-byte region [ffff88802cf34a00, ffff88802cf34b00) [ 824.227705][T16188] [ 824.230032][T16188] The buggy address belongs to the physical page: [ 824.236451][T16188] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cf34 [ 824.245232][T16188] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 824.253735][T16188] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 824.261419][T16188] page_type: f5(slab) [ 824.265412][T16188] raw: 00fff00000000040 ffff88813fe30b40 dead000000000122 0000000000000000 [ 824.274101][T16188] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 824.282705][T16188] head: 00fff00000000040 ffff88813fe30b40 dead000000000122 0000000000000000 [ 824.291392][T16188] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 824.300073][T16188] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 824.308753][T16188] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 824.317429][T16188] page dumped because: kasan: bad access detected [ 824.323864][T16188] page_owner tracks the page as allocated [ 824.329599][T16188] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18843127211, free_ts 0 [ 824.349324][T16188] post_alloc_hook+0xfd/0x120 [ 824.354026][T16188] get_page_from_freelist+0x11a6/0x3410 [ 824.359598][T16188] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 824.365518][T16188] new_slab+0xa6/0x6c0 [ 824.369605][T16188] refill_objects+0x277/0x420 [ 824.374304][T16188] __pcs_replace_empty_main+0x375/0x650 [ 824.379874][T16188] __kmalloc_cache_noprof+0x493/0x6f0 [ 824.385268][T16188] bus_add_driver+0x92/0x5b0 [ 824.389897][T16188] driver_register+0x1e2/0x360 [ 824.394675][T16188] usb_register_driver+0x21c/0x3e0 [ 824.400067][T16188] uvc_init+0x24/0x50 [ 824.404062][T16188] do_one_initcall+0x121/0x750 [ 824.408862][T16188] kernel_init_freeable+0x6ea/0x7b0 [ 824.414069][T16188] kernel_init+0x1f/0x1e0 [ 824.418410][T16188] ret_from_fork+0x72b/0xd50 [ 824.423019][T16188] ret_from_fork_asm+0x1a/0x30 [ 824.427835][T16188] page_owner free stack trace missing [ 824.433207][T16188] [ 824.435535][T16188] Memory state around the buggy address: [ 824.441171][T16188] ffff88802cf34900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 824.449241][T16188] ffff88802cf34980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 824.457310][T16188] >ffff88802cf34a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 824.465393][T16188] ^ [ 824.469985][T16188] ffff88802cf34a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 824.478072][T16188] ffff88802cf34b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 824.486161][T16188] ================================================================== [ 825.851767][T16188] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 825.859046][T16188] CPU: 0 UID: 0 PID: 16188 Comm: syz.1.2346 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.870094][T16188] Tainted: [L]=SOFTLOCKUP [ 825.874426][T16188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 825.884491][T16188] Call Trace: [ 825.887778][T16188] [ 825.890724][T16188] dump_stack_lvl+0x100/0x190 [ 825.895415][T16188] vpanic+0x552/0x970 [ 825.899412][T16188] ? __pfx_vpanic+0x10/0x10 [ 825.903931][T16188] ? rcu_is_watching+0x12/0xc0 [ 825.908729][T16188] ? dvb_device_put.part.0+0x22/0x90 [ 825.914042][T16188] panic+0xd1/0xe0 [ 825.917777][T16188] ? __pfx_panic+0x10/0x10 [ 825.922200][T16188] ? dvb_device_put.part.0+0x22/0x90 [ 825.927527][T16188] ? preempt_schedule_common+0x42/0xc0 [ 825.933010][T16188] ? check_panic_on_warn+0x1f/0x90 [ 825.938150][T16188] check_panic_on_warn.cold+0x19/0x34 [ 825.943548][T16188] end_report.part.0+0x3a/0x90 [ 825.948332][T16188] kasan_report.cold+0xe/0x18 [ 825.953034][T16188] ? dvb_device_put.part.0+0x22/0x90 [ 825.958349][T16188] kasan_check_range+0x10f/0x1e0 [ 825.963332][T16188] dvb_device_put.part.0+0x22/0x90 [ 825.968473][T16188] dvb_device_open+0x2ba/0x3b0 [ 825.973262][T16188] ? __pfx_dvb_device_open+0x10/0x10 [ 825.978572][T16188] chrdev_open+0x234/0x6a0 [ 825.983017][T16188] ? __pfx_apparmor_file_open+0x10/0x10 [ 825.988671][T16188] ? __pfx_chrdev_open+0x10/0x10 [ 825.993667][T16188] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 826.000021][T16188] do_dentry_open+0x6ab/0x14d0 [ 826.004801][T16188] ? __pfx_chrdev_open+0x10/0x10 [ 826.009769][T16188] vfs_open+0x82/0x3f0 [ 826.013863][T16188] path_openat+0x208c/0x31a0 [ 826.018487][T16188] ? __pfx_path_openat+0x10/0x10 [ 826.023467][T16188] do_file_open+0x20e/0x430 [ 826.028008][T16188] ? __pfx_do_file_open+0x10/0x10 [ 826.033059][T16188] ? alloc_fd+0x476/0x790 [ 826.037415][T16188] ? do_getname+0x191/0x390 [ 826.041943][T16188] do_sys_openat2+0x10d/0x1e0 [ 826.046658][T16188] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.051877][T16188] ? __x64_sys_rt_sigprocmask+0x28f/0x410 [ 826.057617][T16188] ? rcu_is_watching+0x12/0xc0 [ 826.062398][T16188] ? _raw_spin_unlock_irq+0x23/0x50 [ 826.067615][T16188] ? lockdep_hardirqs_on+0x78/0x100 [ 826.072845][T16188] __x64_sys_openat+0x12d/0x210 [ 826.077754][T16188] ? __pfx___x64_sys_openat+0x10/0x10 [ 826.083162][T16188] ? rcu_is_watching+0x12/0xc0 [ 826.087949][T16188] do_syscall_64+0x115/0x840 [ 826.092560][T16188] ? clear_bhb_loop+0x40/0x90 [ 826.097254][T16188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.103246][T16188] RIP: 0033:0x7fd700f9ce59 [ 826.107678][T16188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.127299][T16188] RSP: 002b:00007fd701e13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 826.135724][T16188] RAX: ffffffffffffffda RBX: 00007fd701216270 RCX: 00007fd700f9ce59 [ 826.143705][T16188] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 826.151687][T16188] RBP: 00007fd701032d6f R08: 0000000000000000 R09: 0000000000000000 [ 826.159663][T16188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.167643][T16188] R13: 00007fd701216308 R14: 00007fd701216270 R15: 00007ffc7683dfa8 [ 826.175679][T16188] [ 826.178784][T16188] Kernel Offset: disabled [ 826.183118][T16188] Rebooting in 86400 seconds..