last executing test programs: 2m7.838885445s ago: executing program 2 (id=447): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000780), r0) unshare$auto(0xe) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_NAME={0xe, 0x3, 'ovs_vport\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8100) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x7f, 0x0, 0x1c) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) ioctl$auto(r2, 0x401870cb, r2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40, @remote}, 0x7fff) r3 = socket(0xa, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000180)={{&(0x7f0000000040), 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008) close_range$auto(0x2, 0x8, 0x0) 2m5.647781227s ago: executing program 2 (id=452): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x7, 0x6, 0xdf, 0x9b72, 0x2, 0xe8) sysfs$auto(0x2, 0x4d, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r0, 0x4, &(0x7f00000001c0)='\x00\x14\x86\x12/\xdd\x1d\xd9iu\xd7_\xd8\xde\x89\xea|d\xac\x11\x06\x9f\t\x9f\x91\xeb\xaf\x8d\x8d$\x19\x13\xa1\x97\xaey\xf9\x1b_g\xb0\x8bN\xe1c[\x01\x10\x97\xcd\xdf\xc1^(\x9b\xd9EC\xb3R\xdfDC\xcdt\x17\xefS\xe1\x85\x8a\x87f\xa3]\xc0\xac\x86\xc8*;\nD\x92\x9f\xf3\x90\xb0\xd8Y\xbep\xb1\x14\x89\xb1\n!b\x10\xedS\xca\x8c&\xbf\xca\x1d\xccnw\xd9T\x044\xc6\x96\xfc\x02j!\x00\x00\x00\x00\x00\x00', &(0x7f0000000140), 0xffffff9c) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x684882, 0x0) sysfs$auto(0x1, 0x1, 0xf1) read$auto_proc_single_file_operations_base(r2, &(0x7f00000001c0)=""/164, 0xa4) ioctl$auto(r1, 0x540a, 0x0) r3 = socket(0xa, 0x5, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) timer_create$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x35e], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x6, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x7, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) set_mempolicy_home_node$auto(0xb67, 0x7, 0x9, 0x7f) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) shutdown$auto(r3, 0xfff) socket(0x2, 0x1, 0x0) 2m4.212727461s ago: executing program 2 (id=458): r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) socketpair$auto(0x6, 0x4, 0x491a, &(0x7f0000000000)=0x5) write$auto_ftrace_event_filter_fops_trace_events(r0, &(0x7f0000000300)="2baf82c1a5bc872318c266c40109c6b2b8e16198d96732ec3515702f77291f", 0x1f) mmap$auto(0x200000003, 0x6b7, 0x20000001000009, 0x17, 0xffffffffffffffff, 0x304000000000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) getsockopt$auto(r1, 0x0, 0xd0, 0x0, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SCHED_CORE_GET(0x476, 0x0, 0x0, 0x5, 0x7) r3 = socket(0xa, 0x1, 0x84) socket(0xf, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xf, &(0x7f0000000100)=@bpf_attr_11={0xb2, 0x7, 0xfffffffe, 0x3264, 0xb, 0x4b, 0x3}, 0xa3) close_range$auto(r3, 0x8, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) mmap$auto(0x2, 0x400008, 0xdf, 0x49b72, 0xffffffffffffffff, 0x6) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x100001, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x111800, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) 2m1.783687468s ago: executing program 2 (id=463): unshare$auto(0x40000080) (async) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) (async) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) (async) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) arch_prctl$auto(0x5003, 0x800000000800) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) (async) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r2, 0x80204d01, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) (async) r3 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(r3, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) (async) getsockopt$auto_SO_SNDBUF(r3, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/aircable/uevent\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000180)=""/248, 0xf8) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x3) ioctl$auto(0x3, 0x402c542b, 0x38) (async) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) (async) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m58.899676385s ago: executing program 2 (id=472): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x401, 0x0) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0xffffffffffffffff, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setfsuid$auto(0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) io_uring_setup$auto(0x85, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x3b72, 0x0) r2 = socket(0x1e, 0x5, 0x0) ioctl$auto(r2, 0x8941, 0x8) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video39\x00', 0x22281, 0x0) ioctl$auto(r3, 0xc0905664, r3) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x1, &(0x7f0000000300), 0x20, 0x8000000}, 0xed7138c}, 0x6, 0x0) 1m58.371783135s ago: executing program 2 (id=475): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x5, 0x2) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x8000000000000201, 0x9, 0x3, 0x6, 0x7, 0xd886, 0x5e58296b, 0x341, 0x41, 0x7, 0x200, 0x8, 0xc]}, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) execve$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) creat$auto(0x0, 0x7) 1m46.862711894s ago: executing program 1 (id=501): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x24000000) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff7}, 0x4, 0x0, 0xa, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6db, 0x0, 0x3ff, 0x0, 0x3, 0x697b}, 0xed7138c}, 0x9a6, 0xc01) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 1m44.186145427s ago: executing program 1 (id=507): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = socket(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FS_IOC_UNRESVSP64(r1, 0x4030582b, 0x2) socket(0x1d, 0x3, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) getsockopt$auto_SO_NO_CHECK(r2, 0x3ff, 0xb, &(0x7f0000000040)='*%\x00', &(0x7f00000000c0)=0xc9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x80401, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x84080801}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fedbdf25020000000800010010000000080003002000000008000200010000000800010048000003000000000004002f6465762f7474793000000008000200020000000000000000"], 0x36}}, 0x14000014) write$auto(r3, 0x0, 0x800f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000300)={'\x00', 0x7, 0x77, 0x1, 0x4, 0x2, "17ac1bffa6dae494eae3a0eecef41b", "fbcbed61", "09f9abf8", "404da8fb", ["aa1c0321183ca593c1e2db91", "34864d3d6b5ab550f58b7d18", "ee143090c321017daf8c9491", "6a377a79102f3fd37ed75847"]}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fstat$auto(r4, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r6 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_11={0x7, 0x3d, 0x16d7, 0x1000, 0xecb, 0x8, 0x3}, 0x9) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x23, &(0x7f00000000c0), 0x0) write$auto(r6, 0x0, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000001bc0)="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", 0xd4f) 1m43.007538014s ago: executing program 32 (id=475): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x5, 0x2) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x0, 0x8000000000000201, 0x9, 0x3, 0x6, 0x7, 0xd886, 0x5e58296b, 0x341, 0x41, 0x7, 0x200, 0x8, 0xc]}, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) execve$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) creat$auto(0x0, 0x7) 1m42.630776414s ago: executing program 1 (id=512): syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x1000000, 0x0, 0x40}, 0x8094) (fail_nth: 5) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x395) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r2) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, 0x0, 0xc040810) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000000eb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/hid\x00', 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x0, 0x0, 0x0) timer_settime$auto(0x0, 0x9, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, 0x0, 0x42400, 0x0) getsockopt$auto_SO_BUF_LOCK(0xffffffffffffffff, 0x1, 0x48, 0x0, &(0x7f0000000100)=0x6) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) 1m41.089894422s ago: executing program 1 (id=515): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) poll$auto(&(0x7f0000000d40)={0x3, 0xffff, 0xa}, 0x5, 0x400) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FIONCLEX(r1, 0x5450, 0xfffffffffffffffa) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getpid() 1m39.896028749s ago: executing program 1 (id=517): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x20000, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim5/ports/1/pp_hold\x00', 0x101500, 0x0) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa902, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x801, 0x106) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) write$auto(r1, &(0x7f0000000240)='.G\x1f*@sy\b\x00\xe7\xc9 \x8f\x10!\x11\xd4\x9by\xa8\xb2\x89c\xf8\xc41\xd4\x0f\x82\x8d\xd2\x04\x0f\xf6\xa0\xf7,O\x1d\t8\xb9H\xd5\xc4\xbb\x8f\x13\x94%\xcc\x0e\x9eT\xc1}+\x02J\xb9\x80\xe7\xb3<\x9a\xf1B\x13\xb7P\x9b\xce~\xff&zQ\xa8\x97\n\xb2\xf7\x15Z\x05\x8cl\x04\xca\x954\xdd3\xf9\xa3\x1e#,\xb7\xd2\xa6\x8d\x13\xd0\xf0\x14\x9a\xfa\xed\x9d\xa1\x98P.\'\xccA\x8b\xff\x82\xf8\xc3\xa9\xb6\xc3\x80E\xfc\xe3\xc6\x8d\xb8uh\x9f\xd1!\xa3\xe0dR\xda?\xdc:\xbd\x15X%\x84\xd2yL\x05\xaeV$\xda\xcd\xa1}_\xe0\x9c\x87\xaa\xa1\x1f\x93(\x96}\"sU.2\x1e\xb8\x01U\x8f\xe5\x7f]L\xca\xa2\x9b\x92ZYE\xd2\xe1<4\x9c\x85\x04\x86l2\x8e\xb2\x9e\x11\x82s\xd7\xe3\xdd\xdb\x041\xb2\x1c\xac@\x16\xb3sn\xec\r\x11J*\xbb\xd6\xde\x86v\x83T\xb1\xae\x91{_\xd7JK\xda\x01i#\xe89\x17\xaf\x03j5\r\xce\a\x1dl/#\x96If\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1c/sub7/sw_params\x00', 0x280c60, 0x0) pread64$auto(r4, 0x0, 0x5, 0x2000000000006573) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 10.666083635s ago: executing program 4 (id=701): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x9) madvise$auto(0x20000, 0x6, 0xfffffe00) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x15, 0x3, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mouse0\x00', 0x181502, 0x0) socket(0xa, 0x80803, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) 9.942385274s ago: executing program 0 (id=702): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = socket(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FS_IOC_UNRESVSP64(r1, 0x4030582b, 0x2) socket(0x1d, 0x3, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) getsockopt$auto_SO_NO_CHECK(r2, 0x3ff, 0xb, &(0x7f0000000040)='*%\x00', &(0x7f00000000c0)=0xc9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x80401, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x84080801}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fedbdf25020000000800010010000000080003002000000008000200010000000800010048000003000000000004002f6465762f7474793000000008000200020000000000000000"], 0x36}}, 0x14000014) write$auto(r3, 0x0, 0x800f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000300)={'\x00', 0x7, 0x77, 0x1, 0x4, 0x2, "17ac1bffa6dae494eae3a0eecef41b", "fbcbed61", "09f9abf8", "404da8fb", ["aa1c0321183ca593c1e2db91", "34864d3d6b5ab550f58b7d18", "ee143090c321017daf8c9491", "6a377a79102f3fd37ed75847"]}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_11={0x7, 0x3d, 0x16d7, 0x1000, 0xecb, 0x8, 0x3}, 0x9) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x23, &(0x7f00000000c0), 0x0) 9.707826674s ago: executing program 3 (id=703): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x25, 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x400008, 0x8008, 0xfdfffffffffffffb, 0x2, 0x8000) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) (async) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) (async) fsopen$auto(0x0, 0x1) (async) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) (async) r3 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r3, 0x65, 0x6, 0xffffffffffffffff, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) socket(0x10, 0x3, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 8.311884955s ago: executing program 4 (id=705): write$auto(0xffffffffffffffff, &(0x7f00000002c0)='1\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) (async) unshare$auto(0x40000080) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101041, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745500, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42000, 0x0) r2 = io_uring_setup$auto(0x59, 0x0) openat$auto_lsm_ops_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) connect$auto(r1, &(0x7f0000000100)=@nfc={0x27, r3, 0xffffffffffffffff, 0x4}, 0x55) (async) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x8000) (async) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r5, &(0x7f0000000440)="0a1bab5c30595644f93bb154d7886d8ec5eacee8d3371cadb82b2606381300770dc8f745b5c76eedaa0ec76b0a8b", 0x2e) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x0) (async) ioctl$auto_XFS_IOC_FREESP(r2, 0x4030580b, &(0x7f0000000040)={0xffb0, 0x8, 0x8000000000000000, 0xd4e0000000, 0x9, 0xffffffffffffffff}) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0x91f5}, 0x800000001, &(0x7f0000001080)={&(0x7f00000010c0)="837c43558323d5db424689e7e6cb5c40ad091e4374c10000000025", 0x1ffffffff}, 0x2, 0x0) (async) r8 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x800, 0x0) kcmp$auto(r6, r7, 0x8, r8, r0) timer_create$auto_CLOCK_BOOTTIME(0x7, 0x0, 0x0) (async) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r9, r9, 0x0, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4ab00, 0x0) (async) ioctl$auto_SNAPSHOT_FREE(r4, 0x3314, 0x0) (async) ioctl$auto_NVRAM_INIT(r2, 0x7040, 0x0) 6.763656541s ago: executing program 3 (id=708): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x7fffffff, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/try_direct_io\x00', 0x121000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x7, 0xa, 0x800000000000004, 0x10000001, 0x948c, 0x6, 0x95f4da0a, 0xfffe, 0x900, 0xd64, 0x80000001, 0x9, 0x6d40, 0x5, 0x7ff, 0x9]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x3, 0x2) mincore$auto(0x1000, 0x4000000, 0x0) 6.404284942s ago: executing program 4 (id=709): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000100)={@_si_pad}, 0x9, &(0x7f0000000180)={{0x7}, {0x10000, 0x91}, 0x4, 0x0, 0xd33, 0x83, 0x100000001, 0x6, 0x7, 0x1, 0x6b1, 0x9, 0x3, 0x4, 0x8, 0x6}) mmap$auto(0x0, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x408) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(0x0, 0x64842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mprotect$auto(0x200000000000, 0x1f, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000003c0)='4', 0x1) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0x7, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r3 = socket(0xa, 0x3, 0x3a) socket(0x3, 0x5, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/005/001\x00', 0x100, 0x0) poll$auto(&(0x7f00000004c0)={r4, 0x5, 0x2}, 0x3, 0x8) ioctl$auto(r3, 0x8982, 0x1) r5 = prctl$auto(0x3a, 0x2, r0, 0x5, 0x800007) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r6, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r7 = prctl$auto(0x5, 0x39a, r0, 0x9, 0x20000000000001ff) ioctl$auto_BLKROSET(r7, 0x125d, 0x0) 4.861591487s ago: executing program 5 (id=712): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) mmap$auto(0x7, 0x400008, 0xdf, 0x91, 0x7, 0x800008000) socket(0xa, 0x3, 0x3a) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x1) lseek$auto(r0, 0x9, 0x0) getdents$auto(r0, 0x0, 0x62d4) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x2, 0x0) 4.734883978s ago: executing program 3 (id=713): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x10, 0x2, 0xc) (rerun: 64) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r0, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) (async, rerun: 64) r1 = userfaultfd$auto(0x1) (rerun: 64) getxattrat$auto(r1, 0x0, 0x2, 0x0, 0x0, 0x1000) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) (async, rerun: 64) io_uring_setup$auto(0x1000, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x28, 0x1, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x20008804) (async) sendto$auto(0xffffffffffffffff, 0x0, 0x8000000000000000, 0x7, 0x0, 0x5) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x4f4, 0x8]}, 0x0) (async, rerun: 32) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x1]}, 0x0) (async, rerun: 32) mmap$auto(0x4, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x40601, 0x0) (rerun: 32) write$auto(r3, 0x0, 0x0) (async, rerun: 64) setrlimit$auto(0x1000000007, 0x0) (async, rerun: 64) userfaultfd$auto(0x1) 4.717230498s ago: executing program 0 (id=714): mmap$auto(0xb, 0x2000c, 0x147b, 0x11, 0x40000000000a5, 0x8000) r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) io_cancel$auto(0x40000f659, &(0x7f0000000340)={0xb2b6, 0x8009, 0x9, 0x7ff, 0x6, r0, 0x8000000000000001, 0x9, 0x1, 0x0, 0x6, r0}, &(0x7f0000000380)={0xfffffffffffff2a1, 0x800, 0x0, 0x20000000008}) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) connect$auto(r1, &(0x7f0000000080)=@can={0x1d, r2}, 0x3) r3 = socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101001, 0x0) lseek$auto(r4, 0xffffffffffffbaeb, 0xcd06) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r3, 0x0, 0x4048010) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x80000000000) write$auto(r5, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0xd, 0x40009, 0xdf, 0x16, 0x7, 0x1) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000040)={0xffff, 0x0}) ioctl$auto_PPPIOCSPASS(r7, 0x40107447, &(0x7f00000000c0)={0x8a, &(0x7f0000000000)={0x28, 0xf3, 0x6}}) write$auto(r7, 0x0, 0x6) mremap$auto(0x800000000000080, 0x7, 0x6, 0x0, 0x1) process_vm_readv$auto(0x0, &(0x7f0000000180)={0x0, 0x4}, 0x3fffffffffe, &(0x7f0000000100)={&(0x7f00000001c0)="91d04987a19757812fbdb6db03347f6aaee89e8ac11f7775e9ea495cee156d0dc6f75fb1417c663a75c133c23cf585c90c18d5ff4bd7751b9abff424fd08bb67455464c3d31a775c24f35f50124395125a806e9cc938903fecb6ce122a424beb1d7f4fa8abf5dc3ea60ed2784bdd9ad7f69a85b14e613b7144fb9d2fe154f6bc6780183fa4061c2a1de30ab681f3e5a0dd", 0x40000000001243}, 0xb, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r6, &(0x7f0000000280)='\x90\x96\xd1\x00\xe4\xd2\xab1\xc7\xe8\xad\x83\xb7=\x89Z;\xa3\f\x13A\x1c\xdc\x9a\x89\x98\x12\xb4\xbb\'\x1eu@\xe1=A\xbe\xaaa\xabA\xea\x147\xa6\xb2\x1d,\xafD\xcd\xa1\x8c\xd2\xc1R\xeb\x01\x86\xf8\x92ys&\xcf\x83\b&s\x04\x9b\xd6\xe9\xb0\x82_\xd2\xb9\x8a\xcd\x87jY\x03\xe7\xedW\x17<\xca\xef\xc2\x97\xdb\x91Pk\xd3\x01!\xba\x04\x951B\xa1\xc7ue&vU\xbc\xcesG\xea\x01\xd1\x8c\xca\xb3{\x1c7^gk&\x85\x95k4\xc3\xf4\x1fC\xceN\xcc\x16@\x1f\x0e\r', 0x80000000) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) 4.504752563s ago: executing program 5 (id=715): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x5}) clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103) (fail_nth: 9) 3.729250571s ago: executing program 5 (id=716): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x100, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/oom_adj\x00', 0xe0c42, 0x0) clone$auto(0xffffffffffffc767, 0xb, 0x0, &(0x7f0000000140)=0x9, 0x81) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x6, &(0x7f0000000000)=@bpf_attr_3={0x1, 0x9067, 0x40000080018c, 0xf3, 0x0, 0x8, 0x5, 0x57b8, 0xf, "63ac0600000033ebc15774e816ef77cf", 0x0, 0x100543, r1, 0x207, 0x3, 0x1009, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd, 0x5, 0x7fb, 0x6, 0xa, 0x48000000}, 0x10) writev$auto(0xc8, &(0x7f00000028c0)={0x0, 0x200}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/sctp/snmp\x00', 0x0, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x803, &(0x7f0000000180)={@siginfo_0_0={0x8, 0x7, 0x8000, @_sigpoll={0x8000000000000000}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x22, 0xa, 0xe) move_pages$auto(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) unshare$auto(0x40000080) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x400000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fdatasync$auto(r2) waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x3, 0x1, 0x3, 0x0, 0x9, 0x80000000, 0x7, 0xb7, 0x5d9, 0x8, 0x7ff, 0x2055}) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) socket(0xa, 0x3, 0x3a) 3.635273584s ago: executing program 0 (id=717): openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) madvise$auto(0x5, 0xffffffffffff0005, 0x17) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) clock_nanosleep$auto(0x8, 0x6, &(0x7f0000001040)={0x8000, 0x100000000}, &(0x7f0000001080)={0xfffffffffffffc00, 0x8000000000000001}) sysfs$auto(0x2, 0x100000008000034, 0xfffffffffffffffd) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) fcntl$auto_F_GETOWNER_UIDS(r0, 0x11, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0xfa93) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x1f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) futimesat$auto(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0xa, 0x1000}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x28001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = fcntl$auto(0x3, 0x401, 0x3) io_uring_setup$auto(0x4, 0x0) ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setpgid$auto(0x0, 0x0) 3.51445083s ago: executing program 3 (id=718): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) mmap$auto(0x7f, 0x8202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x75581f51) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r2 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r2, 0x0, 0x8fb5) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) lseek$auto(0xffffffffffffffff, 0x0, 0x2) readv$auto(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x803, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x200000000008, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x7fff}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000180)=@info={r1, 0x0, 0x7ff}, 0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 2.457798321s ago: executing program 5 (id=719): mmap$auto(0x4, 0x2, 0xdf, 0x9b72, 0x2, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)="ff03") (async) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)="ff03") ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000580)={{0xffffffffffffffff, &(0x7f0000000000)="830264aa9a714112fe57effb122a619379d54890f614", 0x2, &(0x7f0000000440)="b5c7a7e41b4ffb8cb6800803ceccb23c4adffc9dce380c81f7233f3949e4a70c4712fb3f7d9b04dd97c449ad1d42fb20a958ddcf591febf996c7bda3008306b1834448891689bc8b9bdeabb0a11f2b830b6f877a9797e28f082db62473a881a4044919554183015eefb35ca9fb115fab66f316f7225f91710c2c0ecf1688308da5ce64bd76180722", 0xa, &(0x7f0000000280)="fc1c0add76e6a1c48f6822837ee9478a11989495bc3c1617c9ca8fd3a49cf059c47e8e1301037f97e34d46d7f0", &(0x7f0000000300)=0x80000000}, {[0x8, 0x6, 0x58a1, 0x9]}, 0x7, 0x2, &(0x7f0000000500)="034f8f61bf897d8cee2ad99b795b71278f22ce0270469b39b7aa12ad9214db8be88cdee9c94a75ca1d6b12cd8d8d58184944795df34916aaecb48d92f4e5c91f320f28daeedbaef8c70352f73af0fff54f29d4141d5f5b9fa121bfeaec62451b35f37d4c62ad7b93cc7a"}) r2 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000600)=@bpf_attr_7={@btf_id=0xf1, 0x10}, 0x7fff) ioctl$auto_XFS_IOC_FREESP(r2, 0x4030580b, &(0x7f0000000340)={0xcb, 0x8, 0x3, 0x1, 0x4, 0xffffffffffffffff}) (async) ioctl$auto_XFS_IOC_FREESP(r2, 0x4030580b, &(0x7f0000000340)={0xcb, 0x8, 0x3, 0x1, 0x4, 0xffffffffffffffff}) r4 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={r3, r0, 0x7, 0x7, 0x6dad, 0x254f, r1, 0x2d, 0x1000}, 0x10) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x0, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r4}, 0x92) socket(0xa, 0x5, 0x0) (async) r5 = socket(0xa, 0x5, 0x0) writev$auto(r5, &(0x7f0000000100)={&(0x7f0000000080)="0d24c3d8456e33252772a97ea23163029b0af04651826ef4c36b09611510613aca4996e948e02213985a47824e9a4c219c4a48f62bc41e0fa094cb77de856dc6a99ae44147cdde583c55044b7e1b1dc523eef3c169927dad1a38e97c77c75866e3d24ce4becdab2b57", 0x3}, 0xc2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x200400, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x200400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x2, 0x4) r6 = socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0xfff, 0x7ff, 0x0, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x12, 0x6, 0x7}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.250279123s ago: executing program 4 (id=720): statmount$auto(0x0, &(0x7f0000000380)={0x3, 0x1, 0x9, 0x7352, 0x41, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x7fffffffffffffff, 0x7ff, 0x84, 0x4, 0xfffffffd, 0x4, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0x0, 0x0, 0x0, 0x81, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x800, 0x0, 0x0, 0x80000000, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x7e30e0be], "ba714e8019191f689ef2348dc498f3c44263cec7ed9bc0ca8441e72f000001b60f97718d84bec93235058bb0188c194ab1327a4619c53ce26b8eae1f22b64f3b58dce947b43afd754d7cdd7613221c5302d31062600b8e064ae81fff7586d82833e3d49b1bf7512bd937d1d603daf81baf5df030ec11186984827afe16d881b71635801e83e9eb599070d10b9eaa237ad998c67e965f88"}, 0x1fe, 0x11) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x20006, 0x4000000000dc, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/9u\x00', 0x40000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48980, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x4, 0x7, 0x0, 0x400, 0x9a, "077c1315ff06c9cc9ff4956913870ef95ebcd43e985b110210346f7f05f8bd5d8b4458e71254da2aab17208e518d2a9b3c20bd53a710ce119b1b61b0"}) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec19\x00', 0x80840, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 2.006252306s ago: executing program 0 (id=721): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram3\x00', 0x44000, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000040)={@sival_int=0x375, @inferred, 0x1}) sysfs$auto(0x2, 0x10000000000002f, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) sendmmsg$auto(r0, 0x0, 0x9a6, 0xe000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) connect$auto(0x3, &(0x7f0000000080)=@xdp={0x2c, 0x4, 0x0, 0xc}, 0x54) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r1, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) mmap$auto(0x0, 0xe983, 0xdf, 0x400000000000eb1, 0xffffffffffffffff, 0x8000) 1.85146061s ago: executing program 5 (id=722): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000e500", @ANYRES16=r2, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000980080001808847338012000100898771f1c19f17790485908286dd000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresgid$auto(0x800, 0x0, 0xffffffffffffffff) setresgid$auto(0x0, 0xffffffffffffffff, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x22b40, 0x0) read$auto(r5, 0x0, 0x100000000) close_range$auto(r3, r5, 0x5) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8080, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x1a481, 0x0) write$auto_proc_mem_operations_base(r6, &(0x7f0000001100)="a7c1f7", 0x3) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0xfff, &(0x7f00000000c0)={0x0, 0x1feff}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) 1.204369095s ago: executing program 4 (id=723): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x100000, 0x2b1, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x6) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xc834, 0xfffffffffffffffa, 0x8000) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r1) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r2, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x4}, @NL802154_ATTR_COORDINATOR={0x8, 0x1e, 0x0, 0x1, [@generic="25d3500a"]}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x4000040) prctl$auto_SECCOMP_MODE_STRICT(0x3, 0x1, 0x0, 0x9, 0x1) 934.70799ms ago: executing program 5 (id=724): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) mmap$auto(0x7, 0x400008, 0xdf, 0x91, 0x7, 0x800008000) socket(0xa, 0x3, 0x3a) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) io_uring_setup$auto(0x2, 0x0) lseek$auto(0xffffffffffffffff, 0x9, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) unshare$auto(0x40000080) pread64$auto(0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0xffff, 0xb2) close_range$auto(0x2, 0x8, 0x0) 765.889117ms ago: executing program 3 (id=725): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = socket(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FS_IOC_UNRESVSP64(r1, 0x4030582b, 0x2) socket(0x1d, 0x3, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) getsockopt$auto_SO_NO_CHECK(r2, 0x3ff, 0xb, &(0x7f0000000040)='*%\x00', &(0x7f00000000c0)=0xc9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x80401, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x84080801}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fedbdf25020000000800010010000000080003002000000008000200010000000800010048000003000000000004002f6465762f7474793000000008000200020000000000000000"], 0x36}}, 0x14000014) write$auto(r3, 0x0, 0x800f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000300)={'\x00', 0x7, 0x77, 0x1, 0x4, 0x2, "17ac1bffa6dae494eae3a0eecef41b", "fbcbed61", "09f9abf8", "404da8fb", ["aa1c0321183ca593c1e2db91", "34864d3d6b5ab550f58b7d18", "ee143090c321017daf8c9491", "6a377a79102f3fd37ed75847"]}) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_11={0x7, 0x3d, 0x16d7, 0x1000, 0xecb, 0x8, 0x3}, 0x9) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x23, &(0x7f00000000c0), 0x0) 0s ago: executing program 4 (id=726): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x207f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x5}) clone$auto(0x2000020003b4a, 0x6, 0x0, 0x0, 0x103) (fail_nth: 10) kernel console output (not intermixed with test programs): /0x1270 [ 155.933079][ T6722] kernfs_fop_read_iter+0x46c/0x610 [ 155.933117][ T6722] ? rw_verify_area+0xce/0x6d0 [ 155.933148][ T6722] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 155.933189][ T6722] vfs_read+0x825/0xb30 [ 155.933251][ T6722] ? __pfx_vfs_read+0x10/0x10 [ 155.933286][ T6722] ? find_held_lock+0x2b/0x80 [ 155.933348][ T6722] ksys_read+0x12a/0x250 [ 155.933387][ T6722] ? __pfx_ksys_read+0x10/0x10 [ 155.933438][ T6722] do_syscall_64+0xc9/0xf80 [ 155.933485][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.933520][ T6722] RIP: 0033:0x7fb365d9af79 [ 155.933546][ T6722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.933577][ T6722] RSP: 002b:00007fb366cfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.933608][ T6722] RAX: ffffffffffffffda RBX: 00007fb366016090 RCX: 00007fb365d9af79 [ 155.933630][ T6722] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000003 [ 155.933649][ T6722] RBP: 00007fb365e316e0 R08: 0000000000000000 R09: 0000000000000000 [ 155.933668][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.933687][ T6722] R13: 00007fb366016128 R14: 00007fb366016090 R15: 00007ffe270a7828 [ 155.933730][ T6722] [ 156.303061][ T6722] ACPI Error: ffff8880780c9000 walk still has a scope list (20250807/dswstate-694) [ 157.294074][ T6745] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 158.552437][ T6760] FAULT_INJECTION: forcing a failure. [ 158.552437][ T6760] name fail_futex, interval 1, probability 0, space 0, times 1 [ 158.576067][ T6760] CPU: 0 UID: 0 PID: 6760 Comm: syz.2.150 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.576116][ T6760] Tainted: [L]=SOFTLOCKUP [ 158.576127][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 158.576145][ T6760] Call Trace: [ 158.576155][ T6760] [ 158.576166][ T6760] dump_stack_lvl+0x100/0x190 [ 158.576210][ T6760] should_fail_ex.cold+0x5/0xa [ 158.576261][ T6760] get_futex_key+0x295/0x1620 [ 158.576307][ T6760] ? __pfx_get_futex_key+0x10/0x10 [ 158.576363][ T6760] futex_wake+0xea/0x530 [ 158.576422][ T6760] ? __pfx_futex_wake+0x10/0x10 [ 158.576472][ T6760] ? exit_mm_release+0x19/0x30 [ 158.576526][ T6760] do_futex+0x32b/0x350 [ 158.576575][ T6760] ? __pfx_do_futex+0x10/0x10 [ 158.576616][ T6760] ? __might_fault+0xc5/0x140 [ 158.576663][ T6760] mm_release+0x24a/0x2f0 [ 158.576702][ T6760] do_exit+0x675/0x2a30 [ 158.576760][ T6760] ? __pfx_do_exit+0x10/0x10 [ 158.576807][ T6760] ? do_raw_spin_lock+0x128/0x260 [ 158.576854][ T6760] ? find_held_lock+0x2b/0x80 [ 158.576885][ T6760] ? get_signal+0x7e0/0x21e0 [ 158.576926][ T6760] do_group_exit+0xd5/0x2a0 [ 158.576978][ T6760] get_signal+0x1ec7/0x21e0 [ 158.577031][ T6760] ? __pfx_get_signal+0x10/0x10 [ 158.577071][ T6760] ? do_futex+0x192/0x350 [ 158.577118][ T6760] arch_do_signal_or_restart+0x91/0x770 [ 158.577166][ T6760] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 158.577223][ T6760] ? __pfx___x64_sys_futex+0x10/0x10 [ 158.577277][ T6760] exit_to_user_mode_loop+0x86/0x4b0 [ 158.577321][ T6760] ? rcu_is_watching+0x12/0xc0 [ 158.577354][ T6760] do_syscall_64+0x4ea/0xf80 [ 158.577397][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.577429][ T6760] RIP: 0033:0x7fb365d9af79 [ 158.577452][ T6760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.577481][ T6760] RSP: 002b:00007fb366cfb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 158.577510][ T6760] RAX: 0000000000000001 RBX: 00007fb366016098 RCX: 00007fb365d9af79 [ 158.577530][ T6760] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb36601609c [ 158.577548][ T6760] RBP: 00007fb366016090 R08: 0000000000000000 R09: 0000000000000000 [ 158.577566][ T6760] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 158.577584][ T6760] R13: 00007fb366016128 R14: 00007ffe270a7740 R15: 00007ffe270a7828 [ 158.577624][ T6760] [ 158.920235][ T6762] program syz.1.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.293116][ T6735] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 159.553890][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 161.119171][ T6791] FAULT_INJECTION: forcing a failure. [ 161.119171][ T6791] name fail_futex, interval 1, probability 0, space 0, times 0 [ 161.309826][ T6791] CPU: 0 UID: 0 PID: 6791 Comm: syz.3.157 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.309892][ T6791] Tainted: [L]=SOFTLOCKUP [ 161.309909][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 161.309923][ T6791] Call Trace: [ 161.309930][ T6791] [ 161.309938][ T6791] dump_stack_lvl+0x100/0x190 [ 161.309970][ T6791] should_fail_ex.cold+0x5/0xa [ 161.310009][ T6791] get_futex_key+0x1d2/0x1620 [ 161.310042][ T6791] ? __pfx_get_futex_key+0x10/0x10 [ 161.310072][ T6791] ? do_mremap+0xa96/0x2130 [ 161.310107][ T6791] futex_wake+0xea/0x530 [ 161.310147][ T6791] ? __pfx_futex_wake+0x10/0x10 [ 161.310189][ T6791] ? ksys_write+0x190/0x250 [ 161.310222][ T6791] do_futex+0x32b/0x350 [ 161.310255][ T6791] ? __pfx_do_futex+0x10/0x10 [ 161.310286][ T6791] ? __pfx___do_sys_mremap+0x10/0x10 [ 161.310339][ T6791] __x64_sys_futex+0x34f/0x4d0 [ 161.310378][ T6791] ? __pfx___x64_sys_futex+0x10/0x10 [ 161.310424][ T6791] do_syscall_64+0xc9/0xf80 [ 161.310457][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.310482][ T6791] RIP: 0033:0x7fadc4b9af79 [ 161.310500][ T6791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.310525][ T6791] RSP: 002b:00007fadc5ac10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 161.310578][ T6791] RAX: ffffffffffffffda RBX: 00007fadc4e16098 RCX: 00007fadc4b9af79 [ 161.310600][ T6791] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fadc4e1609c [ 161.310621][ T6791] RBP: 00007fadc4e16090 R08: 0000000000000000 R09: 0000000000000000 [ 161.310641][ T6791] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.310662][ T6791] R13: 00007fadc4e16128 R14: 00007ffdda70a9d0 R15: 00007ffdda70aab8 [ 161.310704][ T6791] [ 165.484492][ T6895] usb usb3: usbfs: process 6895 (syz.1.181) did not claim interface 0 before use [ 166.011157][ T6900] futex_wake_op: syz.3.183 tries to shift op by -2048; fix this program [ 166.112103][ T6900] futex_wake_op: syz.3.183 tries to shift op by -2048; fix this program [ 166.193837][ T6900] process 'syz.3.183' launched ':,' with NULL argv: empty string added [ 167.574735][ T6906] zswap: compressor not available [ 167.997349][ T6917] block nbd8: shutting down sockets [ 169.745694][ T6927] syz.0.188 (6927) used greatest stack depth: 19688 bytes left [ 172.032090][ T6975] phram: not enough arguments [ 172.092393][ T6975] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 172.810799][ T6999] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 173.996757][ T7049] netlink: 50 bytes leftover after parsing attributes in process `syz.0.213'. [ 174.251843][ T7054] netlink: 186 bytes leftover after parsing attributes in process `syz.1.214'. [ 174.289516][ T7050] mmap: syz.2.212 (7050): VmData 54501376 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 175.060236][ T7074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.219'. [ 176.113956][ T7103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.225'. [ 177.586407][ T7123] FAULT_INJECTION: forcing a failure. [ 177.586407][ T7123] name failslab, interval 1, probability 0, space 0, times 0 [ 177.640768][ T7123] CPU: 1 UID: 0 PID: 7123 Comm: syz.1.232 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.640805][ T7123] Tainted: [L]=SOFTLOCKUP [ 177.640814][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 177.640828][ T7123] Call Trace: [ 177.640835][ T7123] [ 177.640844][ T7123] dump_stack_lvl+0x100/0x190 [ 177.640876][ T7123] should_fail_ex.cold+0x5/0xa [ 177.640916][ T7123] should_failslab+0xc2/0x120 [ 177.640952][ T7123] kmem_cache_alloc_noprof+0x83/0x780 [ 177.640984][ T7123] ? __pmd_alloc+0xbf/0x9c0 [ 177.641027][ T7123] ? __pmd_alloc+0xbf/0x9c0 [ 177.641064][ T7123] __pmd_alloc+0xbf/0x9c0 [ 177.641104][ T7123] __handle_mm_fault+0xa99/0x2b50 [ 177.641134][ T7123] ? mt_find+0x45e/0x8e0 [ 177.641167][ T7123] ? __pfx___handle_mm_fault+0x10/0x10 [ 177.641191][ T7123] ? __pfx_mt_find+0x10/0x10 [ 177.641245][ T7123] handle_mm_fault+0x36d/0xa20 [ 177.641276][ T7123] __get_user_pages+0xf9c/0x34d0 [ 177.641331][ T7123] ? __pfx___get_user_pages+0x10/0x10 [ 177.641377][ T7123] populate_vma_page_range+0x267/0x3f0 [ 177.641418][ T7123] ? __pfx_populate_vma_page_range+0x10/0x10 [ 177.641458][ T7123] ? __pfx_find_vma_intersection+0x10/0x10 [ 177.641495][ T7123] ? do_mmap+0x93f/0x12f0 [ 177.641535][ T7123] __mm_populate+0x107/0x3a0 [ 177.641557][ T7123] ? __pfx___mm_populate+0x10/0x10 [ 177.641598][ T7123] ? up_write+0x290/0x4f0 [ 177.641637][ T7123] vm_mmap_pgoff+0x37f/0x470 [ 177.641677][ T7123] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 177.641713][ T7123] ? __pfx___might_resched+0x10/0x10 [ 177.641750][ T7123] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 177.641784][ T7123] ? __x64_sys_futex+0x34f/0x4d0 [ 177.641817][ T7123] ? __x64_sys_futex+0x358/0x4d0 [ 177.641855][ T7123] ksys_mmap_pgoff+0x7d/0x5b0 [ 177.641895][ T7123] __x64_sys_mmap+0x125/0x190 [ 177.641920][ T7123] do_syscall_64+0xc9/0xf80 [ 177.641952][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.641976][ T7123] RIP: 0033:0x7f233419af79 [ 177.641995][ T7123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.642017][ T7123] RSP: 002b:00007f2335038028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 177.642039][ T7123] RAX: ffffffffffffffda RBX: 00007f2334415fa0 RCX: 00007f233419af79 [ 177.642055][ T7123] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 177.642069][ T7123] RBP: 00007f23342316e0 R08: 0000000000000002 R09: 0000000000008000 [ 177.642084][ T7123] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 177.642098][ T7123] R13: 00007f2334416038 R14: 00007f2334415fa0 R15: 00007ffd0903e198 [ 177.642134][ T7123] [ 178.389610][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 178.734752][ T7147] vhci_hcd vhci_hcd.2: invalid port number 16 [ 178.750386][ T7147] vhci_hcd vhci_hcd.2: invalid port number 16 [ 179.409114][ T7174] can: request_module (can-proto-5) failed. [ 179.665640][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 181.017724][ T7217] zswap: compressor not available [ 181.686281][ T7229] binder: 7228:7229 ioctl c018620c 0 returned -1 [ 184.866648][ T7286] capability: warning: `syz.0.266' uses 32-bit capabilities (legacy support in use) [ 186.623239][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 187.236919][ T7322] bridge0: port 3(team0) entered blocking state [ 187.249297][ T7322] bridge0: port 3(team0) entered disabled state [ 187.259785][ T7322] team0: entered allmulticast mode [ 187.283709][ T7322] team_slave_0: entered allmulticast mode [ 187.289912][ T7322] team_slave_1: entered allmulticast mode [ 187.317960][ T7322] team0: entered promiscuous mode [ 187.324012][ T7322] team_slave_0: entered promiscuous mode [ 187.336609][ T7322] team_slave_1: entered promiscuous mode [ 187.374426][ T7322] bridge0: port 3(team0) entered blocking state [ 187.381017][ T7322] bridge0: port 3(team0) entered forwarding state [ 188.275588][ T7343] FAULT_INJECTION: forcing a failure. [ 188.275588][ T7343] name failslab, interval 1, probability 0, space 0, times 0 [ 188.288894][ T7343] CPU: 0 UID: 0 PID: 7343 Comm: syz.3.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.288941][ T7343] Tainted: [L]=SOFTLOCKUP [ 188.288951][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 188.288969][ T7343] Call Trace: [ 188.288978][ T7343] [ 188.288990][ T7343] dump_stack_lvl+0x100/0x190 [ 188.289033][ T7343] should_fail_ex.cold+0x5/0xa [ 188.289097][ T7343] should_failslab+0xc2/0x120 [ 188.289139][ T7343] kmem_cache_alloc_noprof+0x83/0x780 [ 188.289196][ T7343] ? __x64_sys_openat+0x12d/0x210 [ 188.289242][ T7343] ? do_syscall_64+0xc9/0xf80 [ 188.289277][ T7343] ? fuse_request_alloc+0x22/0x200 [ 188.289330][ T7343] ? fuse_request_alloc+0x22/0x200 [ 188.289372][ T7343] fuse_request_alloc+0x22/0x200 [ 188.289418][ T7343] fuse_get_req+0x74a/0xfe0 [ 188.289475][ T7343] ? __pfx_fuse_get_req+0x10/0x10 [ 188.289541][ T7343] fuse_simple_background+0x464/0x5e0 [ 188.289596][ T7343] ? kasan_save_track+0x14/0x30 [ 188.289639][ T7343] cuse_channel_open+0x561/0x7f0 [ 188.289677][ T7343] ? __pfx_cuse_channel_open+0x10/0x10 [ 188.289715][ T7343] misc_open+0x26d/0x450 [ 188.289753][ T7343] ? __pfx_misc_open+0x10/0x10 [ 188.289787][ T7343] chrdev_open+0x234/0x6a0 [ 188.289826][ T7343] ? __pfx_apparmor_file_open+0x10/0x10 [ 188.289866][ T7343] ? __pfx_chrdev_open+0x10/0x10 [ 188.289907][ T7343] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 188.289954][ T7343] do_dentry_open+0x73e/0x1570 [ 188.289989][ T7343] ? __pfx_chrdev_open+0x10/0x10 [ 188.290029][ T7343] ? security_inode_permission+0xbf/0x250 [ 188.290084][ T7343] vfs_open+0x82/0x3f0 [ 188.290136][ T7343] path_openat+0x21dc/0x3120 [ 188.290188][ T7343] ? __pfx_path_openat+0x10/0x10 [ 188.290240][ T7343] do_filp_open+0x1f7/0x420 [ 188.290282][ T7343] ? __pfx_do_filp_open+0x10/0x10 [ 188.290348][ T7343] ? _raw_spin_unlock+0x28/0x50 [ 188.290380][ T7343] ? alloc_fd+0x476/0x790 [ 188.290427][ T7343] do_sys_openat2+0x12e/0x220 [ 188.290477][ T7343] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.290532][ T7343] ? __fget_files+0x21f/0x3d0 [ 188.290575][ T7343] __x64_sys_openat+0x12d/0x210 [ 188.290645][ T7343] ? __pfx___x64_sys_openat+0x10/0x10 [ 188.290694][ T7343] ? xfd_validate_state+0x129/0x190 [ 188.290759][ T7343] do_syscall_64+0xc9/0xf80 [ 188.290801][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.290833][ T7343] RIP: 0033:0x7fadc4b9af79 [ 188.290857][ T7343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.290887][ T7343] RSP: 002b:00007fadc5ac1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.290916][ T7343] RAX: ffffffffffffffda RBX: 00007fadc4e16090 RCX: 00007fadc4b9af79 [ 188.290936][ T7343] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 188.290954][ T7343] RBP: 00007fadc4c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 188.290972][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.290989][ T7343] R13: 00007fadc4e16128 R14: 00007fadc4e16090 R15: 00007ffdda70aab8 [ 188.291029][ T7343] [ 191.058895][ T7383] can: request_module (can-proto-0) failed. [ 191.323905][ T7377] FAULT_INJECTION: forcing a failure. [ 191.323905][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 191.380853][ T7377] CPU: 1 UID: 0 PID: 7377 Comm: syz.0.283 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.380900][ T7377] Tainted: [L]=SOFTLOCKUP [ 191.380911][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 191.380928][ T7377] Call Trace: [ 191.380938][ T7377] [ 191.380949][ T7377] dump_stack_lvl+0x100/0x190 [ 191.380989][ T7377] should_fail_ex.cold+0x5/0xa [ 191.381041][ T7377] should_failslab+0xc2/0x120 [ 191.381084][ T7377] kmem_cache_alloc_noprof+0x83/0x780 [ 191.381136][ T7377] ? __proc_create+0xc2/0x8c0 [ 191.381181][ T7377] ? __proc_create+0x2cb/0x8c0 [ 191.381233][ T7377] ? __proc_create+0x2cb/0x8c0 [ 191.381279][ T7377] __proc_create+0x2cb/0x8c0 [ 191.381326][ T7377] ? __pfx___proc_create+0x10/0x10 [ 191.381390][ T7377] proc_create_reg+0x75/0x170 [ 191.381422][ T7377] proc_create_data+0x86/0x110 [ 191.381451][ T7377] ? __pfx_proc_create_data+0x10/0x10 [ 191.381485][ T7377] ? net_generic+0xf4/0x2a0 [ 191.381528][ T7377] nfs_net_init+0x11a/0x340 [ 191.381569][ T7377] ? __pfx_nfs_net_init+0x10/0x10 [ 191.381607][ T7377] ops_init+0x1e2/0x5f0 [ 191.381659][ T7377] setup_net+0x118/0x3a0 [ 191.381687][ T7377] ? __pfx_setup_net+0x10/0x10 [ 191.381712][ T7377] ? lockdep_init_map_type+0x5c/0x250 [ 191.381754][ T7377] ? mutex_init_lockep+0x110/0x150 [ 191.381803][ T7377] copy_net_ns+0x46f/0x7c0 [ 191.381842][ T7377] create_new_namespaces+0x3ea/0xab0 [ 191.381887][ T7377] copy_namespaces+0x468/0x5e0 [ 191.381925][ T7377] copy_process+0x32d5/0x7890 [ 191.381983][ T7377] ? __pfx_copy_process+0x10/0x10 [ 191.382053][ T7377] kernel_clone+0xfc/0x930 [ 191.382090][ T7377] ? __pfx_futex_wait+0x10/0x10 [ 191.382128][ T7377] ? __pfx_kernel_clone+0x10/0x10 [ 191.382188][ T7377] __do_sys_clone+0xd9/0x120 [ 191.382228][ T7377] ? __pfx___do_sys_clone+0x10/0x10 [ 191.382267][ T7377] ? __fget_files+0x21f/0x3d0 [ 191.382311][ T7377] ? xfd_validate_state+0x129/0x190 [ 191.382371][ T7377] do_syscall_64+0xc9/0xf80 [ 191.382410][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.382439][ T7377] RIP: 0033:0x7f6b6cb9af79 [ 191.382462][ T7377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.382488][ T7377] RSP: 002b:00007f6b6da55fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 191.382515][ T7377] RAX: ffffffffffffffda RBX: 00007f6b6ce15fa0 RCX: 00007f6b6cb9af79 [ 191.382550][ T7377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 191.382568][ T7377] RBP: 00007f6b6cc316e0 R08: 0000000000000000 R09: 0000000000000000 [ 191.382585][ T7377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.382602][ T7377] R13: 00007f6b6ce16038 R14: 00007f6b6ce15fa0 R15: 00007ffcc71a64c8 [ 191.382642][ T7377] [ 193.084863][ T30] audit: type=1800 audit(1770659089.900:2): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.289" name="dbroot" dev="configfs" ino=15432 res=0 errno=0 [ 194.082111][ T7416] NFSD: Failed to start, no listeners configured. [ 194.703607][ T7425] FAULT_INJECTION: forcing a failure. [ 194.703607][ T7425] name failslab, interval 1, probability 0, space 0, times 0 [ 194.810699][ T7425] CPU: 1 UID: 0 PID: 7425 Comm: syz.1.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.810752][ T7425] Tainted: [L]=SOFTLOCKUP [ 194.810763][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 194.810779][ T7425] Call Trace: [ 194.810788][ T7425] [ 194.810799][ T7425] dump_stack_lvl+0x100/0x190 [ 194.810840][ T7425] should_fail_ex.cold+0x5/0xa [ 194.810887][ T7425] should_failslab+0xc2/0x120 [ 194.810932][ T7425] __kmalloc_cache_noprof+0x80/0x810 [ 194.810962][ T7425] ? vkms_plane_duplicate_state+0x45/0x130 [ 194.810997][ T7425] ? ww_mutex_lock+0x37/0x160 [ 194.811039][ T7425] ? vkms_plane_duplicate_state+0x45/0x130 [ 194.811081][ T7425] vkms_plane_duplicate_state+0x45/0x130 [ 194.811118][ T7425] drm_atomic_get_plane_state+0x279/0x760 [ 194.811157][ T7425] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 194.811200][ T7425] ? trace_contention_end+0xd6/0x110 [ 194.811242][ T7425] ? __mutex_lock+0x26a/0x1b90 [ 194.811280][ T7425] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 194.811321][ T7425] ? drm_master_internal_acquire+0x21/0x80 [ 194.811390][ T7425] drm_client_modeset_commit_locked+0x14d/0x580 [ 194.811435][ T7425] drm_client_modeset_commit+0x4f/0x80 [ 194.811476][ T7425] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 194.811520][ T7425] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 194.811563][ T7425] drm_fbdev_client_restore+0x1b/0x30 [ 194.811594][ T7425] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 194.811624][ T7425] drm_client_dev_restore+0x205/0x2a0 [ 194.811669][ T7425] drm_release+0x2c6/0x360 [ 194.811705][ T7425] ? __pfx_drm_release+0x10/0x10 [ 194.811740][ T7425] __fput+0x3ff/0xb40 [ 194.811787][ T7425] task_work_run+0x150/0x240 [ 194.811833][ T7425] ? __pfx_task_work_run+0x10/0x10 [ 194.811886][ T7425] exit_to_user_mode_loop+0x100/0x4b0 [ 194.811925][ T7425] ? rcu_is_watching+0x12/0xc0 [ 194.811954][ T7425] do_syscall_64+0x4ea/0xf80 [ 194.811990][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.812018][ T7425] RIP: 0033:0x7f233419af79 [ 194.812040][ T7425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.812072][ T7425] RSP: 002b:00007f2335038028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 194.812099][ T7425] RAX: 0000000000000000 RBX: 00007f2334415fa0 RCX: 00007f233419af79 [ 194.812117][ T7425] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 194.812146][ T7425] RBP: 00007f23342316e0 R08: 0000000000000000 R09: 0000000000000000 [ 194.812163][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.812178][ T7425] R13: 00007f2334416038 R14: 00007f2334415fa0 R15: 00007ffd0903e198 [ 194.812215][ T7425] [ 196.131461][ T7429] kexec: Could not allocate control_code_buffer [ 197.122469][ T7470] netlink: 2 bytes leftover after parsing attributes in process `syz.1.297'. [ 198.421144][ T7488] netlink: 326 bytes leftover after parsing attributes in process `syz.0.299'. [ 199.177466][ T7507] FAULT_INJECTION: forcing a failure. [ 199.177466][ T7507] name fail_futex, interval 1, probability 0, space 0, times 0 [ 199.257808][ T7507] CPU: 1 UID: 0 PID: 7507 Comm: syz.0.306 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.257857][ T7507] Tainted: [L]=SOFTLOCKUP [ 199.257868][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 199.257886][ T7507] Call Trace: [ 199.257897][ T7507] [ 199.257908][ T7507] dump_stack_lvl+0x100/0x190 [ 199.257951][ T7507] should_fail_ex.cold+0x5/0xa [ 199.258002][ T7507] get_futex_key+0x1d2/0x1620 [ 199.258050][ T7507] ? __pfx_get_futex_key+0x10/0x10 [ 199.258105][ T7507] futex_wait_setup+0x81/0x500 [ 199.258146][ T7507] __futex_wait+0x19f/0x300 [ 199.258180][ T7507] ? __pfx___futex_wait+0x10/0x10 [ 199.258217][ T7507] ? __pfx_futex_wake_mark+0x10/0x10 [ 199.258276][ T7507] ? futex_hash+0x2c5/0x380 [ 199.258330][ T7507] futex_wait+0xed/0x380 [ 199.258361][ T7507] ? __pfx_futex_wait+0x10/0x10 [ 199.258400][ T7507] ? __lock_acquire+0x4a5/0x2630 [ 199.258453][ T7507] do_futex+0x1ef/0x350 [ 199.258501][ T7507] ? __pfx_do_futex+0x10/0x10 [ 199.258550][ T7507] ? find_held_lock+0x2b/0x80 [ 199.258589][ T7507] __x64_sys_futex+0x34f/0x4d0 [ 199.258637][ T7507] ? __fget_files+0x21f/0x3d0 [ 199.258672][ T7507] ? __pfx___x64_sys_futex+0x10/0x10 [ 199.258732][ T7507] ? fdget+0x18b/0x210 [ 199.258773][ T7507] do_syscall_64+0xc9/0xf80 [ 199.258816][ T7507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.258850][ T7507] RIP: 0033:0x7f6b6cb9af79 [ 199.258875][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.258904][ T7507] RSP: 002b:00007f6b6da560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 199.258933][ T7507] RAX: ffffffffffffffda RBX: 00007f6b6ce15fa8 RCX: 00007f6b6cb9af79 [ 199.258954][ T7507] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6b6ce15fa8 [ 199.258973][ T7507] RBP: 00007f6b6ce15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 199.258992][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.259010][ T7507] R13: 00007f6b6ce16038 R14: 00007ffcc71a63e0 R15: 00007ffcc71a64c8 [ 199.259050][ T7507] [ 199.640426][ T7521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.307'. [ 200.831344][ T7553] FAULT_INJECTION: forcing a failure. [ 200.831344][ T7553] name failslab, interval 1, probability 0, space 0, times 0 [ 200.850744][ T7553] CPU: 1 UID: 0 PID: 7553 Comm: syz.0.312 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.850784][ T7553] Tainted: [L]=SOFTLOCKUP [ 200.850793][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 200.850809][ T7553] Call Trace: [ 200.850817][ T7553] [ 200.850826][ T7553] dump_stack_lvl+0x100/0x190 [ 200.850863][ T7553] should_fail_ex.cold+0x5/0xa [ 200.850907][ T7553] should_failslab+0xc2/0x120 [ 200.850944][ T7553] kmem_cache_alloc_noprof+0x83/0x780 [ 200.850979][ T7553] ? __kernfs_new_node+0xd2/0x960 [ 200.851020][ T7553] ? __kernfs_new_node+0xd2/0x960 [ 200.851054][ T7553] __kernfs_new_node+0xd2/0x960 [ 200.851093][ T7553] ? __pfx___kernfs_new_node+0x10/0x10 [ 200.851137][ T7553] ? find_held_lock+0x2b/0x80 [ 200.851163][ T7553] ? kernfs_root+0xee/0x2a0 [ 200.851197][ T7553] ? kernfs_root+0xee/0x2a0 [ 200.851239][ T7553] kernfs_new_node+0x11b/0x1a0 [ 200.851283][ T7553] __kernfs_create_file+0x53/0x350 [ 200.851316][ T7553] sysfs_add_file_mode_ns+0x207/0x3c0 [ 200.851357][ T7553] internal_create_group+0x593/0xf40 [ 200.851403][ T7553] ? __pfx_internal_create_group+0x10/0x10 [ 200.851446][ T7553] ? kernfs_create_link+0x1bd/0x240 [ 200.851479][ T7553] internal_create_groups+0x9d/0x150 [ 200.851520][ T7553] device_add+0x7c8/0x1950 [ 200.851559][ T7553] ? __pfx_device_add+0x10/0x10 [ 200.851595][ T7553] ? lockdep_init_map_type+0x5c/0x250 [ 200.851637][ T7553] ? __init_waitqueue_head+0xca/0x150 [ 200.851686][ T7553] netdev_register_kobject+0x1a9/0x3d0 [ 200.851719][ T7553] register_netdevice+0x12b3/0x21d0 [ 200.851748][ T7553] ? idr_alloc+0xdd/0x130 [ 200.851777][ T7553] ? __pfx_register_netdevice+0x10/0x10 [ 200.851799][ T7553] ? net_generic+0xea/0x2a0 [ 200.851837][ T7553] ppp_dev_configure+0x986/0xcb0 [ 200.851875][ T7553] ppp_ioctl+0x985/0x2800 [ 200.851910][ T7553] ? find_held_lock+0x2b/0x80 [ 200.851934][ T7553] ? __pfx_ppp_ioctl+0x10/0x10 [ 200.851972][ T7553] ? __fget_files+0x21f/0x3d0 [ 200.852005][ T7553] ? __pfx_ppp_ioctl+0x10/0x10 [ 200.852039][ T7553] __x64_sys_ioctl+0x18e/0x210 [ 200.852082][ T7553] do_syscall_64+0xc9/0xf80 [ 200.852135][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.852162][ T7553] RIP: 0033:0x7f6b6cb9af79 [ 200.852197][ T7553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.852242][ T7553] RSP: 002b:00007f6b6d9d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.852268][ T7553] RAX: ffffffffffffffda RBX: 00007f6b6ce16360 RCX: 00007f6b6cb9af79 [ 200.852287][ T7553] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000d [ 200.852304][ T7553] RBP: 00007f6b6cc316e0 R08: 0000000000000000 R09: 0000000000000000 [ 200.852321][ T7553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.852337][ T7553] R13: 00007f6b6ce163f8 R14: 00007f6b6ce16360 R15: 00007ffcc71a64c8 [ 200.852374][ T7553] [ 201.361032][ T7532] zswap: compressor not available [ 202.397659][ T7575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 203.695817][ T7586] bridge0: port 3(gretap0) entered blocking state [ 203.738962][ T7586] bridge0: port 3(gretap0) entered disabled state [ 203.748048][ T7586] gretap0: entered allmulticast mode [ 203.784563][ T7586] FAULT_INJECTION: forcing a failure. [ 203.784563][ T7586] name failslab, interval 1, probability 0, space 0, times 0 [ 203.800088][ T7586] CPU: 1 UID: 0 PID: 7586 Comm: syz.1.317 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.800136][ T7586] Tainted: [L]=SOFTLOCKUP [ 203.800147][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 203.800164][ T7586] Call Trace: [ 203.800175][ T7586] [ 203.800185][ T7586] dump_stack_lvl+0x100/0x190 [ 203.800230][ T7586] should_fail_ex.cold+0x5/0xa [ 203.800282][ T7586] should_failslab+0xc2/0x120 [ 203.800333][ T7586] kmem_cache_alloc_noprof+0x83/0x780 [ 203.800377][ T7586] ? __kernfs_new_node+0xd2/0x960 [ 203.800426][ T7586] ? __kernfs_new_node+0xd2/0x960 [ 203.800465][ T7586] __kernfs_new_node+0xd2/0x960 [ 203.800515][ T7586] ? __pfx___kernfs_new_node+0x10/0x10 [ 203.800568][ T7586] ? find_held_lock+0x2b/0x80 [ 203.800598][ T7586] ? kernfs_root+0xee/0x2a0 [ 203.800638][ T7586] ? kernfs_root+0xee/0x2a0 [ 203.800688][ T7586] kernfs_new_node+0x11b/0x1a0 [ 203.800741][ T7586] __kernfs_create_file+0x53/0x350 [ 203.800779][ T7586] sysfs_add_file_mode_ns+0x207/0x3c0 [ 203.800830][ T7586] sysfs_create_file_ns+0x145/0x1e0 [ 203.800869][ T7586] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 203.800911][ T7586] ? kernfs_create_link+0x1bd/0x240 [ 203.800948][ T7586] ? kernfs_put+0x3f/0x60 [ 203.801024][ T7586] ? sysfs_do_create_link_sd+0xbb/0x140 [ 203.801075][ T7586] br_sysfs_addif+0xe4/0x210 [ 203.801130][ T7586] br_add_if+0x701/0x1b40 [ 203.801188][ T7586] ? security_capable+0x80/0x260 [ 203.801231][ T7586] add_del_if+0x114/0x160 [ 203.801275][ T7586] br_dev_siocdevprivate+0x8ac/0x1650 [ 203.801329][ T7586] ? __lock_acquire+0x4a5/0x2630 [ 203.801370][ T7586] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 203.801429][ T7586] ? do_raw_spin_lock+0x128/0x260 [ 203.801486][ T7586] ? mark_held_locks+0x40/0x70 [ 203.801533][ T7586] ? netdev_name_node_lookup+0x107/0x150 [ 203.801573][ T7586] ? __mutex_lock+0x26a/0x1b90 [ 203.801616][ T7586] dev_ifsioc+0xc15/0x1eb0 [ 203.801663][ T7586] ? __pfx_dev_ifsioc+0x10/0x10 [ 203.801701][ T7586] ? __pfx___mutex_lock+0x10/0x10 [ 203.801753][ T7586] ? dev_load+0x8e/0x240 [ 203.801790][ T7586] ? dev_load+0x8e/0x240 [ 203.801840][ T7586] dev_ioctl+0x70e/0x1070 [ 203.801887][ T7586] sock_ioctl+0x494/0x6b0 [ 203.801925][ T7586] ? __pfx_sock_ioctl+0x10/0x10 [ 203.801977][ T7586] ? __pfx_sock_ioctl+0x10/0x10 [ 203.802017][ T7586] __x64_sys_ioctl+0x18e/0x210 [ 203.802071][ T7586] do_syscall_64+0xc9/0xf80 [ 203.802113][ T7586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.802143][ T7586] RIP: 0033:0x7f233419af79 [ 203.802167][ T7586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.802196][ T7586] RSP: 002b:00007f2334ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.802225][ T7586] RAX: ffffffffffffffda RBX: 00007f2334416180 RCX: 00007f233419af79 [ 203.802245][ T7586] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 203.802264][ T7586] RBP: 00007f23342316e0 R08: 0000000000000000 R09: 0000000000000000 [ 203.802283][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.802301][ T7586] R13: 00007f2334416218 R14: 00007f2334416180 R15: 00007ffd0903e198 [ 203.802348][ T7586] [ 204.191486][ T7586] gretap0: left allmulticast mode [ 204.523734][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.530114][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.646529][ T7593] FAULT_INJECTION: forcing a failure. [ 204.646529][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 204.664067][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.3.321 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.664113][ T7593] Tainted: [L]=SOFTLOCKUP [ 204.664124][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 204.664141][ T7593] Call Trace: [ 204.664150][ T7593] [ 204.664161][ T7593] dump_stack_lvl+0x100/0x190 [ 204.664205][ T7593] should_fail_ex.cold+0x5/0xa [ 204.664249][ T7593] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 204.664292][ T7593] should_failslab+0xc2/0x120 [ 204.664337][ T7593] kmem_cache_alloc_noprof+0x83/0x780 [ 204.664379][ T7593] ? skb_clone+0x190/0x400 [ 204.664433][ T7593] ? skb_clone+0x190/0x400 [ 204.664477][ T7593] skb_clone+0x190/0x400 [ 204.664526][ T7593] netlink_deliver_tap+0xaed/0xcc0 [ 204.664581][ T7593] netlink_unicast+0x650/0x870 [ 204.664634][ T7593] ? __pfx_netlink_unicast+0x10/0x10 [ 204.664682][ T7593] ? __asan_memset+0x23/0x50 [ 204.664716][ T7593] ? __build_skb_around+0x278/0x390 [ 204.664755][ T7593] ? is_vmalloc_addr+0x86/0xa0 [ 204.664795][ T7593] netlink_sendmsg+0x8b0/0xda0 [ 204.664850][ T7593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.664905][ T7593] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 204.664952][ T7593] ____sys_sendmsg+0xa54/0xc30 [ 204.664991][ T7593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.665032][ T7593] ? _kstrtoull+0x13c/0x1f0 [ 204.665066][ T7593] ? __pfx__kstrtoull+0x10/0x10 [ 204.665107][ T7593] ___sys_sendmsg+0x190/0x1e0 [ 204.665146][ T7593] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.665232][ T7593] __sys_sendmmsg+0x205/0x430 [ 204.665292][ T7593] ? __pfx___sys_sendmmsg+0x10/0x10 [ 204.665350][ T7593] ? __fget_files+0x215/0x3d0 [ 204.665385][ T7593] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.665444][ T7593] ? fput+0x79/0x100 [ 204.665487][ T7593] ? ksys_write+0x1ac/0x250 [ 204.665522][ T7593] ? __pfx_ksys_write+0x10/0x10 [ 204.665566][ T7593] __x64_sys_sendmmsg+0x9c/0x100 [ 204.665612][ T7593] ? lockdep_hardirqs_on+0x78/0x100 [ 204.665649][ T7593] do_syscall_64+0xc9/0xf80 [ 204.665689][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.665720][ T7593] RIP: 0033:0x7fadc4b9af79 [ 204.665744][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.665772][ T7593] RSP: 002b:00007fadc5ae2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.665801][ T7593] RAX: ffffffffffffffda RBX: 00007fadc4e15fa0 RCX: 00007fadc4b9af79 [ 204.665820][ T7593] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000005 [ 204.665856][ T7593] RBP: 00007fadc5ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 204.665874][ T7593] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 204.665893][ T7593] R13: 00007fadc4e16038 R14: 00007fadc4e15fa0 R15: 00007ffdda70aab8 [ 204.665935][ T7593] [ 204.666080][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.321'. [ 205.643108][ T7613] FAULT_INJECTION: forcing a failure. [ 205.643108][ T7613] name failslab, interval 1, probability 0, space 0, times 0 [ 205.721320][ T7613] CPU: 0 UID: 0 PID: 7613 Comm: syz.2.325 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.721374][ T7613] Tainted: [L]=SOFTLOCKUP [ 205.721385][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 205.721406][ T7613] Call Trace: [ 205.721417][ T7613] [ 205.721429][ T7613] dump_stack_lvl+0x100/0x190 [ 205.721474][ T7613] should_fail_ex.cold+0x5/0xa [ 205.721529][ T7613] should_failslab+0xc2/0x120 [ 205.721578][ T7613] __kmalloc_cache_noprof+0x80/0x810 [ 205.721614][ T7613] ? net_generic+0xea/0x2a0 [ 205.721656][ T7613] ? nexthop_net_init+0x73/0x140 [ 205.721700][ T7613] ? lockdep_init_map_type+0x5c/0x250 [ 205.721751][ T7613] ? nexthop_net_init+0x73/0x140 [ 205.721790][ T7613] ? __pfx_nexthop_net_init+0x10/0x10 [ 205.721842][ T7613] nexthop_net_init+0x73/0x140 [ 205.721880][ T7613] ? tcf_net_init+0x55/0x150 [ 205.721921][ T7613] ops_init+0x1e2/0x5f0 [ 205.721984][ T7613] setup_net+0x118/0x3a0 [ 205.722032][ T7613] ? __pfx_setup_net+0x10/0x10 [ 205.722060][ T7613] ? lockdep_init_map_type+0x5c/0x250 [ 205.722107][ T7613] ? mutex_init_lockep+0x110/0x150 [ 205.722161][ T7613] copy_net_ns+0x46f/0x7c0 [ 205.722200][ T7613] create_new_namespaces+0x3ea/0xab0 [ 205.722248][ T7613] copy_namespaces+0x468/0x5e0 [ 205.722288][ T7613] copy_process+0x32d5/0x7890 [ 205.722359][ T7613] ? __pfx_copy_process+0x10/0x10 [ 205.722425][ T7613] kernel_clone+0xfc/0x930 [ 205.722467][ T7613] ? __pfx_futex_wait+0x10/0x10 [ 205.722503][ T7613] ? __pfx_kernel_clone+0x10/0x10 [ 205.722556][ T7613] ? __pfx_sock_write_iter+0x10/0x10 [ 205.722603][ T7613] __do_sys_clone+0xd9/0x120 [ 205.722649][ T7613] ? __pfx___do_sys_clone+0x10/0x10 [ 205.722710][ T7613] ? xfd_validate_state+0x129/0x190 [ 205.722778][ T7613] do_syscall_64+0xc9/0xf80 [ 205.722824][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.722857][ T7613] RIP: 0033:0x7fb365d9af79 [ 205.722883][ T7613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.722915][ T7613] RSP: 002b:00007fb366cfafd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 205.722953][ T7613] RAX: ffffffffffffffda RBX: 00007fb366016090 RCX: 00007fb365d9af79 [ 205.722975][ T7613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 205.722995][ T7613] RBP: 00007fb365e316e0 R08: 0000000000000000 R09: 0000000000000000 [ 205.723014][ T7613] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.723034][ T7613] R13: 00007fb366016128 R14: 00007fb366016090 R15: 00007ffe270a7828 [ 205.723077][ T7613] [ 208.186910][ T7662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.333'. [ 208.501357][ T7662] team_slave_0 (unregistering): left promiscuous mode [ 208.516411][ T7662] team_slave_0 (unregistering): left allmulticast mode [ 208.574186][ T7670] FAULT_INJECTION: forcing a failure. [ 208.574186][ T7670] name fail_futex, interval 1, probability 0, space 0, times 0 [ 208.620683][ T7670] CPU: 1 UID: 0 PID: 7670 Comm: syz.2.335 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.620720][ T7670] Tainted: [L]=SOFTLOCKUP [ 208.620729][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 208.620745][ T7670] Call Trace: [ 208.620752][ T7670] [ 208.620784][ T7670] dump_stack_lvl+0x100/0x190 [ 208.620826][ T7670] should_fail_ex.cold+0x5/0xa [ 208.620876][ T7670] ? __lock_acquire+0x4a5/0x2630 [ 208.620906][ T7670] get_futex_key+0x1d2/0x1620 [ 208.620936][ T7670] ? __pfx_get_futex_key+0x10/0x10 [ 208.620965][ T7670] ? update_se+0x93/0x700 [ 208.621000][ T7670] futex_wait_setup+0x81/0x500 [ 208.621027][ T7670] __futex_wait+0x19f/0x300 [ 208.621066][ T7670] ? __pfx___futex_wait+0x10/0x10 [ 208.621085][ T7670] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 208.621110][ T7670] ? lockdep_hardirqs_on+0x78/0x100 [ 208.621139][ T7670] ? __pfx_futex_wake_mark+0x10/0x10 [ 208.621193][ T7670] ? find_held_lock+0x2b/0x80 [ 208.621213][ T7670] ? futex_wake+0x456/0x530 [ 208.621252][ T7670] futex_wait+0xed/0x380 [ 208.621271][ T7670] ? __pfx_futex_wait+0x10/0x10 [ 208.621296][ T7670] ? ksys_write+0x190/0x250 [ 208.621326][ T7670] do_futex+0x1ef/0x350 [ 208.621355][ T7670] ? __pfx_do_futex+0x10/0x10 [ 208.621391][ T7670] __x64_sys_futex+0x34f/0x4d0 [ 208.621423][ T7670] ? __pfx___x64_sys_futex+0x10/0x10 [ 208.621452][ T7670] ? xfd_validate_state+0x129/0x190 [ 208.621485][ T7670] ? __task_pid_nr_ns+0x1f5/0x500 [ 208.621522][ T7670] do_syscall_64+0xc9/0xf80 [ 208.621550][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.621572][ T7670] RIP: 0033:0x7fb365d9af79 [ 208.621587][ T7670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.621606][ T7670] RSP: 002b:00007fb366cda0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 208.621626][ T7670] RAX: ffffffffffffffda RBX: 00007fb366016188 RCX: 00007fb365d9af79 [ 208.621640][ T7670] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb366016188 [ 208.621652][ T7670] RBP: 00007fb366016180 R08: 0000000000000000 R09: 0000000000000000 [ 208.621665][ T7670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.621676][ T7670] R13: 00007fb366016218 R14: 00007ffe270a7740 R15: 00007ffe270a7828 [ 208.621703][ T7670] [ 208.656368][ T7662] team0: Port device team_slave_0 removed [ 209.527915][ T7683] FAULT_INJECTION: forcing a failure. [ 209.527915][ T7683] name fail_futex, interval 1, probability 0, space 0, times 0 [ 209.590783][ T7683] CPU: 0 UID: 0 PID: 7683 Comm: syz.0.339 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.590832][ T7683] Tainted: [L]=SOFTLOCKUP [ 209.590842][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 209.590860][ T7683] Call Trace: [ 209.590870][ T7683] [ 209.590882][ T7683] dump_stack_lvl+0x100/0x190 [ 209.590924][ T7683] should_fail_ex.cold+0x5/0xa [ 209.590974][ T7683] should_fail_futex+0x4c/0x60 [ 209.591014][ T7683] __x64_sys_futex+0x1f0/0x4d0 [ 209.591062][ T7683] ? __pfx___x64_sys_futex+0x10/0x10 [ 209.591122][ T7683] do_syscall_64+0xc9/0xf80 [ 209.591164][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.591213][ T7683] RIP: 0033:0x7f6b6cb9af79 [ 209.591238][ T7683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.591268][ T7683] RSP: 002b:00007ffcc71a6628 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 209.591298][ T7683] RAX: ffffffffffffffda RBX: 0000000000033245 RCX: 00007f6b6cb9af79 [ 209.591318][ T7683] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6b6ce15fac [ 209.591337][ T7683] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 209.591356][ T7683] R10: 00007ffcc71a6730 R11: 0000000000000246 R12: 00007ffcc71a6750 [ 209.591376][ T7683] R13: 00007f6b6ce15fac R14: 0000000000033277 R15: 00007ffcc71a6730 [ 209.591418][ T7683] [ 209.908316][ T7694] FAULT_INJECTION: forcing a failure. [ 209.908316][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 209.924482][ T7693] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 209.940667][ T7694] CPU: 0 UID: 0 PID: 7694 Comm: syz.1.341 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.940713][ T7694] Tainted: [L]=SOFTLOCKUP [ 209.940723][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 209.940740][ T7694] Call Trace: [ 209.940749][ T7694] [ 209.940759][ T7694] dump_stack_lvl+0x100/0x190 [ 209.940798][ T7694] should_fail_ex.cold+0x5/0xa [ 209.940858][ T7694] should_failslab+0xc2/0x120 [ 209.940901][ T7694] kmem_cache_alloc_noprof+0x83/0x780 [ 209.940941][ T7694] ? copy_utsname+0x1a8/0x690 [ 209.940974][ T7694] ? copy_utsname+0x1a8/0x690 [ 209.941000][ T7694] copy_utsname+0x1a8/0x690 [ 209.941028][ T7694] create_new_namespaces+0x16a/0xab0 [ 209.941062][ T7694] ? bpf_lsm_capable+0x9/0x10 [ 209.941089][ T7694] ? security_capable+0x80/0x260 [ 209.941132][ T7694] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 209.941173][ T7694] ksys_unshare+0x455/0xab0 [ 209.941221][ T7694] ? __pfx_ksys_unshare+0x10/0x10 [ 209.941265][ T7694] ? xfd_validate_state+0x129/0x190 [ 209.941326][ T7694] __x64_sys_unshare+0x31/0x40 [ 209.941370][ T7694] do_syscall_64+0xc9/0xf80 [ 209.941412][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.941443][ T7694] RIP: 0033:0x7f233419af79 [ 209.941466][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.941495][ T7694] RSP: 002b:00007f2335017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 209.941523][ T7694] RAX: ffffffffffffffda RBX: 00007f2334416090 RCX: 00007f233419af79 [ 209.941543][ T7694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 209.941561][ T7694] RBP: 00007f23342316e0 R08: 0000000000000000 R09: 0000000000000000 [ 209.941579][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.941597][ T7694] R13: 00007f2334416128 R14: 00007f2334416090 R15: 00007ffd0903e198 [ 209.941637][ T7694] [ 211.703911][ T7724] netlink: 186 bytes leftover after parsing attributes in process `syz.2.348'. [ 211.880733][ T7725] nfs: Unknown parameter 'BlY 7wEɮHs[ؐu`]e6zcޕ[$(uҞ%EtO2*p[OugrtsQZ׀z' [ 211.960834][ T7722] FAULT_INJECTION: forcing a failure. [ 211.960834][ T7722] name failslab, interval 1, probability 0, space 0, times 0 [ 212.005054][ T7722] CPU: 1 UID: 0 PID: 7722 Comm: syz.1.347 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.005105][ T7722] Tainted: [L]=SOFTLOCKUP [ 212.005117][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 212.005137][ T7722] Call Trace: [ 212.005148][ T7722] [ 212.005160][ T7722] dump_stack_lvl+0x100/0x190 [ 212.005206][ T7722] should_fail_ex.cold+0x5/0xa [ 212.005263][ T7722] should_failslab+0xc2/0x120 [ 212.005309][ T7722] kmem_cache_alloc_noprof+0x83/0x780 [ 212.005353][ T7722] ? __pfx___alloc_skb+0x10/0x10 [ 212.005398][ T7722] ? sctp_chunkify+0x51/0x2f0 [ 212.005457][ T7722] ? sctp_chunkify+0x51/0x2f0 [ 212.005494][ T7722] sctp_chunkify+0x51/0x2f0 [ 212.005535][ T7722] _sctp_make_chunk+0x148/0x270 [ 212.005577][ T7722] sctp_make_datafrag_empty+0x14e/0x230 [ 212.005623][ T7722] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 212.005680][ T7722] sctp_datamsg_from_user+0x5ea/0x1360 [ 212.005738][ T7722] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 212.005800][ T7722] ? __lock_sock+0x1fc/0x270 [ 212.005852][ T7722] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 212.005907][ T7722] ? __pfx_autoremove_wake_function+0x10/0x10 [ 212.005961][ T7722] ? sctp_sendmsg_check_sflags+0x176/0x360 [ 212.006015][ T7722] sctp_sendmsg+0x1185/0x22b0 [ 212.006061][ T7722] ? __pfx_sctp_sendmsg+0x10/0x10 [ 212.006093][ T7722] ? find_held_lock+0x2b/0x80 [ 212.006125][ T7722] ? aa_file_perm+0x268/0x1540 [ 212.006165][ T7722] ? aa_sk_perm+0x2de/0xb40 [ 212.006221][ T7722] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.006283][ T7722] ? __pfx_sctp_sendmsg+0x10/0x10 [ 212.006318][ T7722] inet_sendmsg+0x11c/0x140 [ 212.006361][ T7722] sock_write_iter+0x509/0x610 [ 212.006398][ T7722] ? __pfx_sock_write_iter+0x10/0x10 [ 212.006461][ T7722] ? bpf_lsm_file_permission+0x9/0x10 [ 212.006511][ T7722] ? security_file_permission+0x76/0x210 [ 212.006574][ T7722] ? rw_verify_area+0xce/0x6d0 [ 212.006613][ T7722] vfs_write+0x6ac/0x1070 [ 212.006652][ T7722] ? __pfx_sock_write_iter+0x10/0x10 [ 212.006693][ T7722] ? __pfx_vfs_write+0x10/0x10 [ 212.006729][ T7722] ? find_held_lock+0x2b/0x80 [ 212.006789][ T7722] ksys_write+0x1f8/0x250 [ 212.006827][ T7722] ? __pfx_ksys_write+0x10/0x10 [ 212.006879][ T7722] do_syscall_64+0xc9/0xf80 [ 212.006925][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.006959][ T7722] RIP: 0033:0x7f233419af79 [ 212.006985][ T7722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.007017][ T7722] RSP: 002b:00007f2334ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 212.007048][ T7722] RAX: ffffffffffffffda RBX: 00007f2334416180 RCX: 00007f233419af79 [ 212.007070][ T7722] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 212.007089][ T7722] RBP: 00007f23342316e0 R08: 0000000000000000 R09: 0000000000000000 [ 212.007108][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.007127][ T7722] R13: 00007f2334416218 R14: 00007f2334416180 R15: 00007ffd0903e198 [ 212.007170][ T7722] [ 212.329999][ T7728] bridge0: port 3(hsr0) entered blocking state [ 212.341904][ T7728] bridge0: port 3(hsr0) entered disabled state [ 212.348242][ T7728] hsr0: entered allmulticast mode [ 212.416016][ T7728] hsr_slave_0: entered allmulticast mode [ 212.460803][ T7728] hsr_slave_1: entered allmulticast mode [ 212.571456][ T7728] hsr0: entered promiscuous mode [ 212.577231][ T7728] bridge0: port 3(hsr0) entered blocking state [ 212.583618][ T7728] bridge0: port 3(hsr0) entered forwarding state [ 212.957471][ T52] Bluetooth: hci3: ACL packet too small [ 213.913976][ T7764] hub 1-0:1.0: USB hub found [ 213.949114][ T7764] hub 1-0:1.0: 1 port detected [ 215.337619][ T7803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'. [ 217.886144][ T7854] sctp: [Deprecated]: syz.1.376 (pid 7854) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.886144][ T7854] Use struct sctp_sack_info instead [ 217.903443][ T7854] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 218.003636][ T7851] zswap: compressor  not available [ 218.237306][ T7858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.378'. [ 219.288446][ T7879] Invalid ELF header magic: != ELF [ 220.354633][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.387'. [ 220.401520][ T7900] netlink: 25 bytes leftover after parsing attributes in process `syz.3.387'. [ 221.041536][ T7933] syz.3.391 uses obsolete (PF_INET,SOCK_PACKET) [ 221.439514][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 223.458566][ T7991] FAULT_INJECTION: forcing a failure. [ 223.458566][ T7991] name failslab, interval 1, probability 0, space 0, times 0 [ 223.498617][ T7991] CPU: 0 UID: 0 PID: 7991 Comm: syz.2.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.498668][ T7991] Tainted: [L]=SOFTLOCKUP [ 223.498680][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 223.498698][ T7991] Call Trace: [ 223.498709][ T7991] [ 223.498722][ T7991] dump_stack_lvl+0x100/0x190 [ 223.498767][ T7991] should_fail_ex.cold+0x5/0xa [ 223.498822][ T7991] should_failslab+0xc2/0x120 [ 223.498870][ T7991] kmem_cache_alloc_noprof+0x83/0x780 [ 223.498913][ T7991] ? alloc_empty_file+0x55/0x1c0 [ 223.498969][ T7991] ? alloc_empty_file+0x55/0x1c0 [ 223.499026][ T7991] alloc_empty_file+0x55/0x1c0 [ 223.499073][ T7991] path_openat+0xe8/0x3120 [ 223.499108][ T7991] ? getname_flags+0x93/0xf0 [ 223.499137][ T7991] ? do_sys_openat2+0xc5/0x220 [ 223.499180][ T7991] ? __x64_sys_creat+0xcc/0x120 [ 223.499204][ T7991] ? do_syscall_64+0xc9/0xf80 [ 223.499239][ T7991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.499280][ T7991] ? __pfx_path_openat+0x10/0x10 [ 223.499332][ T7991] do_filp_open+0x1f7/0x420 [ 223.499372][ T7991] ? __pfx_do_filp_open+0x10/0x10 [ 223.499436][ T7991] ? _raw_spin_unlock+0x28/0x50 [ 223.499466][ T7991] ? alloc_fd+0x476/0x790 [ 223.499511][ T7991] do_sys_openat2+0x12e/0x220 [ 223.499567][ T7991] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.499621][ T7991] ? __x64_sys_futex+0x34f/0x4d0 [ 223.499666][ T7991] ? __x64_sys_futex+0x358/0x4d0 [ 223.499713][ T7991] __x64_sys_creat+0xcc/0x120 [ 223.499739][ T7991] ? __pfx___x64_sys_creat+0x10/0x10 [ 223.499773][ T7991] ? rcu_is_watching+0x12/0xc0 [ 223.499801][ T7991] ? do_syscall_64+0x94/0xf80 [ 223.499839][ T7991] do_syscall_64+0xc9/0xf80 [ 223.499879][ T7991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.499909][ T7991] RIP: 0033:0x7fb365d9af79 [ 223.499943][ T7991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.499971][ T7991] RSP: 002b:00007fb366d1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 223.499998][ T7991] RAX: ffffffffffffffda RBX: 00007fb366015fa0 RCX: 00007fb365d9af79 [ 223.500017][ T7991] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00002000000001c0 [ 223.500034][ T7991] RBP: 00007fb365e316e0 R08: 0000000000000000 R09: 0000000000000000 [ 223.500051][ T7991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.500068][ T7991] R13: 00007fb366016038 R14: 00007fb366015fa0 R15: 00007ffe270a7828 [ 223.500105][ T7991] [ 223.772415][ T7995] FAULT_INJECTION: forcing a failure. [ 223.772415][ T7995] name failslab, interval 1, probability 0, space 0, times 0 [ 223.785188][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.3.407 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.785237][ T7995] Tainted: [L]=SOFTLOCKUP [ 223.785248][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 223.785266][ T7995] Call Trace: [ 223.785277][ T7995] [ 223.785288][ T7995] dump_stack_lvl+0x100/0x190 [ 223.785335][ T7995] should_fail_ex.cold+0x5/0xa [ 223.785388][ T7995] should_failslab+0xc2/0x120 [ 223.785437][ T7995] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 223.785483][ T7995] ? sctp_sysctl_net_register+0x30/0x200 [ 223.785534][ T7995] ? __pfx_sctp_defaults_init+0x10/0x10 [ 223.785584][ T7995] ? kmemdup_noprof+0x29/0x60 [ 223.785624][ T7995] kmemdup_noprof+0x29/0x60 [ 223.785668][ T7995] sctp_sysctl_net_register+0x30/0x200 [ 223.785719][ T7995] ? __pfx_sctp_defaults_init+0x10/0x10 [ 223.785773][ T7995] sctp_defaults_init+0x6d2/0xd90 [ 223.785823][ T7995] ? __pfx_sctp_defaults_init+0x10/0x10 [ 223.785869][ T7995] ops_init+0x1e2/0x5f0 [ 223.785926][ T7995] setup_net+0x118/0x3a0 [ 223.785956][ T7995] ? __pfx_setup_net+0x10/0x10 [ 223.785982][ T7995] ? lockdep_init_map_type+0x5c/0x250 [ 223.786030][ T7995] ? mutex_init_lockep+0x110/0x150 [ 223.786083][ T7995] copy_net_ns+0x46f/0x7c0 [ 223.786120][ T7995] create_new_namespaces+0x3ea/0xab0 [ 223.786167][ T7995] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 223.786209][ T7995] ksys_unshare+0x455/0xab0 [ 223.786259][ T7995] ? __pfx_ksys_unshare+0x10/0x10 [ 223.786307][ T7995] ? xfd_validate_state+0x129/0x190 [ 223.786372][ T7995] __x64_sys_unshare+0x31/0x40 [ 223.786418][ T7995] do_syscall_64+0xc9/0xf80 [ 223.786463][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.786497][ T7995] RIP: 0033:0x7fadc4b9af79 [ 223.786523][ T7995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.786553][ T7995] RSP: 002b:00007fadc5ac1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 223.786590][ T7995] RAX: ffffffffffffffda RBX: 00007fadc4e16090 RCX: 00007fadc4b9af79 [ 223.786630][ T7995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 223.786650][ T7995] RBP: 00007fadc4c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 223.786671][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.786691][ T7995] R13: 00007fadc4e16128 R14: 00007fadc4e16090 R15: 00007ffdda70aab8 [ 223.786736][ T7995] [ 224.363642][ T8003] zswap: compressor not available [ 224.667981][ T8000] zswap: compressor not available [ 225.525696][ T8045] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 225.692646][ T8043] FAULT_INJECTION: forcing a failure. [ 225.692646][ T8043] name failslab, interval 1, probability 0, space 0, times 0 [ 225.705893][ T8043] CPU: 0 UID: 0 PID: 8043 Comm: syz.0.415 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.705931][ T8043] Tainted: [L]=SOFTLOCKUP [ 225.705939][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 225.705954][ T8043] Call Trace: [ 225.705961][ T8043] [ 225.705970][ T8043] dump_stack_lvl+0x100/0x190 [ 225.706004][ T8043] should_fail_ex.cold+0x5/0xa [ 225.706046][ T8043] should_failslab+0xc2/0x120 [ 225.706082][ T8043] __kmalloc_cache_noprof+0x80/0x810 [ 225.706108][ T8043] ? percpu_ref_init+0xec/0x3f0 [ 225.706144][ T8043] ? percpu_ref_init+0xec/0x3f0 [ 225.706172][ T8043] ? __pfx_css_release+0x10/0x10 [ 225.706208][ T8043] percpu_ref_init+0xec/0x3f0 [ 225.706241][ T8043] cgroup_mkdir+0x2a0/0x12d0 [ 225.706270][ T8043] ? __pfx_cgroup_mkdir+0x10/0x10 [ 225.706308][ T8043] kernfs_iop_mkdir+0x111/0x190 [ 225.706347][ T8043] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 225.706381][ T8043] vfs_mkdir+0x729/0xb50 [ 225.706427][ T8043] do_mkdirat+0x435/0x590 [ 225.706460][ T8043] ? __pfx_do_mkdirat+0x10/0x10 [ 225.706490][ T8043] ? strncpy_from_user+0x19d/0x2d0 [ 225.706530][ T8043] ? getname_flags.part.0+0x1c5/0x540 [ 225.706577][ T8043] __x64_sys_mkdir+0xef/0x140 [ 225.706609][ T8043] do_syscall_64+0xc9/0xf80 [ 225.706644][ T8043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.706669][ T8043] RIP: 0033:0x7f6b6cb9af79 [ 225.706687][ T8043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.706711][ T8043] RSP: 002b:00007f6b6da35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 225.706733][ T8043] RAX: ffffffffffffffda RBX: 00007f6b6ce16090 RCX: 00007f6b6cb9af79 [ 225.706749][ T8043] RDX: 0000000000000000 RSI: 00000000000007ff RDI: 0000200000000000 [ 225.706764][ T8043] RBP: 00007f6b6cc316e0 R08: 0000000000000000 R09: 0000000000000000 [ 225.706779][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.706793][ T8043] R13: 00007f6b6ce16128 R14: 00007f6b6ce16090 R15: 00007ffcc71a64c8 [ 225.706825][ T8043] [ 229.752370][ T5877] Process accounting resumed [ 230.911620][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.439'. [ 230.953380][ T8124] Process accounting resumed [ 231.351359][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.443'. [ 231.364285][ T8165] FAULT_INJECTION: forcing a failure. [ 231.364285][ T8165] name failslab, interval 1, probability 0, space 0, times 0 [ 231.459879][ T8165] CPU: 1 UID: 0 PID: 8165 Comm: syz.3.443 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.459912][ T8165] Tainted: [L]=SOFTLOCKUP [ 231.459919][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 231.459931][ T8165] Call Trace: [ 231.459938][ T8165] [ 231.459946][ T8165] dump_stack_lvl+0x100/0x190 [ 231.459995][ T8165] should_fail_ex.cold+0x5/0xa [ 231.460032][ T8165] should_failslab+0xc2/0x120 [ 231.460065][ T8165] ? ops_init+0x77/0x5f0 [ 231.460105][ T8165] __kmalloc_noprof+0xf6/0x9c0 [ 231.460129][ T8165] ? lockdep_init_map_type+0x5c/0x250 [ 231.460166][ T8165] ? ops_init+0x77/0x5f0 [ 231.460198][ T8165] ops_init+0x77/0x5f0 [ 231.460236][ T8165] setup_net+0x118/0x3a0 [ 231.460256][ T8165] ? __pfx_setup_net+0x10/0x10 [ 231.460274][ T8165] ? lockdep_init_map_type+0x5c/0x250 [ 231.460306][ T8165] ? mutex_init_lockep+0x110/0x150 [ 231.460342][ T8165] copy_net_ns+0x46f/0x7c0 [ 231.460367][ T8165] create_new_namespaces+0x3ea/0xab0 [ 231.460398][ T8165] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 231.460426][ T8165] ksys_unshare+0x455/0xab0 [ 231.460460][ T8165] ? __pfx_ksys_unshare+0x10/0x10 [ 231.460497][ T8165] ? xfd_validate_state+0x129/0x190 [ 231.460576][ T8165] __x64_sys_unshare+0x31/0x40 [ 231.460620][ T8165] do_syscall_64+0xc9/0xf80 [ 231.460661][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.460694][ T8165] RIP: 0033:0x7fadc4b9af79 [ 231.460711][ T8165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.460732][ T8165] RSP: 002b:00007fadc5ac1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 231.460753][ T8165] RAX: ffffffffffffffda RBX: 00007fadc4e16090 RCX: 00007fadc4b9af79 [ 231.460767][ T8165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 231.460780][ T8165] RBP: 00007fadc4c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 231.460794][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.460807][ T8165] R13: 00007fadc4e16128 R14: 00007fadc4e16090 R15: 00007ffdda70aab8 [ 231.460836][ T8165] [ 232.285595][ T8187] netlink: 330 bytes leftover after parsing attributes in process `syz.0.446'. [ 232.466119][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'. [ 232.860987][ T8192] sd 0:0:1:0: PR command failed: 1026 [ 232.932570][ T8192] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 233.110417][ T8192] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 236.725845][ T8276] FAULT_INJECTION: forcing a failure. [ 236.725845][ T8276] name failslab, interval 1, probability 0, space 0, times 0 [ 236.856103][ T8276] CPU: 0 UID: 0 PID: 8276 Comm: syz.2.458 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.856152][ T8276] Tainted: [L]=SOFTLOCKUP [ 236.856162][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 236.856180][ T8276] Call Trace: [ 236.856189][ T8276] [ 236.856200][ T8276] dump_stack_lvl+0x100/0x190 [ 236.856243][ T8276] should_fail_ex.cold+0x5/0xa [ 236.856294][ T8276] should_failslab+0xc2/0x120 [ 236.856338][ T8276] kmem_cache_alloc_noprof+0x83/0x780 [ 236.856378][ T8276] ? __proc_create+0xc2/0x8c0 [ 236.856443][ T8276] ? __proc_create+0x2cb/0x8c0 [ 236.856510][ T8276] ? __proc_create+0x2cb/0x8c0 [ 236.856560][ T8276] __proc_create+0x2cb/0x8c0 [ 236.856633][ T8276] ? __pfx___proc_create+0x10/0x10 [ 236.856694][ T8276] ? _raw_write_unlock+0x28/0x50 [ 236.856739][ T8276] proc_create_reg+0x75/0x170 [ 236.856771][ T8276] proc_create_data+0x86/0x110 [ 236.856795][ T8276] ? __pfx_proc_create_data+0x10/0x10 [ 236.856819][ T8276] ? cache_register_net+0x137/0x5e0 [ 236.856858][ T8276] ? cache_register_net+0x137/0x5e0 [ 236.856902][ T8276] cache_register_net+0x1e0/0x5e0 [ 236.856944][ T8276] gss_svc_init_net+0x14e/0x640 [ 236.856975][ T8276] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 236.857016][ T8276] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 236.857050][ T8276] ops_init+0x1e2/0x5f0 [ 236.857093][ T8276] setup_net+0x118/0x3a0 [ 236.857115][ T8276] ? __pfx_setup_net+0x10/0x10 [ 236.857135][ T8276] ? lockdep_init_map_type+0x5c/0x250 [ 236.857171][ T8276] ? mutex_init_lockep+0x110/0x150 [ 236.857211][ T8276] copy_net_ns+0x46f/0x7c0 [ 236.857239][ T8276] create_new_namespaces+0x3ea/0xab0 [ 236.857273][ T8276] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 236.857305][ T8276] ksys_unshare+0x455/0xab0 [ 236.857343][ T8276] ? __pfx_ksys_unshare+0x10/0x10 [ 236.857379][ T8276] ? xfd_validate_state+0x129/0x190 [ 236.857428][ T8276] __x64_sys_unshare+0x31/0x40 [ 236.857469][ T8276] do_syscall_64+0xc9/0xf80 [ 236.857502][ T8276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.857527][ T8276] RIP: 0033:0x7fb365d9af79 [ 236.857547][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.857570][ T8276] RSP: 002b:00007fb366d1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 236.857593][ T8276] RAX: ffffffffffffffda RBX: 00007fb366015fa0 RCX: 00007fb365d9af79 [ 236.857609][ T8276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 236.857624][ T8276] RBP: 00007fb365e316e0 R08: 0000000000000000 R09: 0000000000000000 [ 236.857639][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.857653][ T8276] R13: 00007fb366016038 R14: 00007fb366015fa0 R15: 00007ffe270a7828 [ 236.857684][ T8276] [ 237.682323][ T8290] binder: 8284:8290 ioctl c018620c 0 returned -1 [ 238.787784][ T8305] futex_wake_op: syz.2.463 tries to shift op by -2048; fix this program [ 238.796327][ T8304] futex_wake_op: syz.2.463 tries to shift op by -2048; fix this program [ 241.375963][ T8342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.473'. [ 242.429285][ T8356] zswap: compressor not available [ 249.022187][ T8390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.028247][ T8390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.047210][ T8390] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.060264][ T8390] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 249.499906][ T8413] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 249.686839][ T8416] FAULT_INJECTION: forcing a failure. [ 249.686839][ T8416] name failslab, interval 1, probability 0, space 0, times 0 [ 249.753939][ T8416] CPU: 0 UID: 0 PID: 8416 Comm: syz.3.489 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.753979][ T8416] Tainted: [L]=SOFTLOCKUP [ 249.753987][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 249.754005][ T8416] Call Trace: [ 249.754014][ T8416] [ 249.754023][ T8416] dump_stack_lvl+0x100/0x190 [ 249.754056][ T8416] should_fail_ex.cold+0x5/0xa [ 249.754098][ T8416] should_failslab+0xc2/0x120 [ 249.754133][ T8416] ? lsm_blob_alloc+0x68/0x90 [ 249.754160][ T8416] __kmalloc_noprof+0xf6/0x9c0 [ 249.754193][ T8416] ? lsm_blob_alloc+0x68/0x90 [ 249.754218][ T8416] lsm_blob_alloc+0x68/0x90 [ 249.754245][ T8416] security_prepare_creds+0x2d/0x290 [ 249.754272][ T8416] prepare_creds+0x5d6/0x950 [ 249.754296][ T8416] copy_creds+0xa7/0xa50 [ 249.754322][ T8416] copy_process+0x1029/0x7890 [ 249.754374][ T8416] ? __pfx_copy_process+0x10/0x10 [ 249.754415][ T8416] ? _copy_from_user+0x59/0xd0 [ 249.754458][ T8416] kernel_clone+0xfc/0x930 [ 249.754493][ T8416] ? __pfx_kernel_clone+0x10/0x10 [ 249.754547][ T8416] ? __pfx_futex_wait+0x10/0x10 [ 249.754576][ T8416] __do_sys_clone3+0x214/0x290 [ 249.754609][ T8416] ? __pfx___do_sys_clone3+0x10/0x10 [ 249.754678][ T8416] do_syscall_64+0xc9/0xf80 [ 249.754710][ T8416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.754734][ T8416] RIP: 0033:0x7fadc4b9af79 [ 249.754752][ T8416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.754775][ T8416] RSP: 002b:00007fadc5ae1ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 249.754797][ T8416] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fadc4b9af79 [ 249.754812][ T8416] RDX: 00007fadc5ae1f10 RSI: 0000000000000058 RDI: 00007fadc5ae1f10 [ 249.754827][ T8416] RBP: 00007fadc4c316e0 R08: 0000000000000000 R09: 0000000000000058 [ 249.754842][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.754855][ T8416] R13: 00007fadc4e16038 R14: 00007fadc4e15fa0 R15: 00007ffdda70aab8 [ 249.754885][ T8416] [ 251.070586][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 251.082400][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 251.082416][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.150975][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.580398][ T8475] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 253.909927][ T8471] ceph: Failed to parse sending metrics switch value 'P^' [ 254.919579][ T8493] FAULT_INJECTION: forcing a failure. [ 254.919579][ T8493] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 255.005184][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.3.504 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.005217][ T8493] Tainted: [L]=SOFTLOCKUP [ 255.005224][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 255.005237][ T8493] Call Trace: [ 255.005243][ T8493] [ 255.005251][ T8493] dump_stack_lvl+0x100/0x190 [ 255.005281][ T8493] should_fail_ex.cold+0x5/0xa [ 255.005316][ T8493] _copy_from_user+0x2e/0xd0 [ 255.005350][ T8493] move_addr_to_kernel+0x65/0x170 [ 255.005378][ T8493] __sys_connect+0xb5/0x170 [ 255.005405][ T8493] ? __pfx___sys_connect+0x10/0x10 [ 255.005432][ T8493] ? __fget_files+0x21f/0x3d0 [ 255.005464][ T8493] ? __pfx_ksys_write+0x10/0x10 [ 255.005494][ T8493] __x64_sys_connect+0x72/0xb0 [ 255.005521][ T8493] ? lockdep_hardirqs_on+0x78/0x100 [ 255.005547][ T8493] do_syscall_64+0xc9/0xf80 [ 255.005575][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.005597][ T8493] RIP: 0033:0x7fadc4b9af79 [ 255.005613][ T8493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.005633][ T8493] RSP: 002b:00007fadc5ae2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 255.005652][ T8493] RAX: ffffffffffffffda RBX: 00007fadc4e15fa0 RCX: 00007fadc4b9af79 [ 255.005666][ T8493] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000003 [ 255.005678][ T8493] RBP: 00007fadc5ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 255.005690][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.005702][ T8493] R13: 00007fadc4e16038 R14: 00007fadc4e15fa0 R15: 00007ffdda70aab8 [ 255.005728][ T8493] [ 255.702297][ T52] Bluetooth: hci1: ACL packet too small [ 256.821084][ T8513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.509'. [ 256.967520][ T8515] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 257.671592][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.681688][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.691451][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.741100][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.770812][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.779709][ T8524] FAULT_INJECTION: forcing a failure. [ 257.779709][ T8524] name failslab, interval 1, probability 0, space 0, times 0 [ 257.955167][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.1.512 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.955216][ T8524] Tainted: [L]=SOFTLOCKUP [ 257.955227][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 257.955246][ T8524] Call Trace: [ 257.955256][ T8524] [ 257.955267][ T8524] dump_stack_lvl+0x100/0x190 [ 257.955311][ T8524] should_fail_ex.cold+0x5/0xa [ 257.955357][ T8524] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 257.955392][ T8524] should_failslab+0xc2/0x120 [ 257.955440][ T8524] kmem_cache_alloc_noprof+0x83/0x780 [ 257.955483][ T8524] ? skb_clone+0x190/0x400 [ 257.955539][ T8524] ? skb_clone+0x190/0x400 [ 257.955586][ T8524] skb_clone+0x190/0x400 [ 257.955636][ T8524] netlink_deliver_tap+0xaed/0xcc0 [ 257.955694][ T8524] netlink_unicast+0x650/0x870 [ 257.955760][ T8524] ? __pfx_netlink_unicast+0x10/0x10 [ 257.955828][ T8524] netlink_sendmsg+0x8b0/0xda0 [ 257.955887][ T8524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.955935][ T8524] ? __import_iovec+0x1d2/0x640 [ 257.955990][ T8524] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 257.956038][ T8524] ____sys_sendmsg+0xa54/0xc30 [ 257.956078][ T8524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.956135][ T8524] ___sys_sendmsg+0x190/0x1e0 [ 257.956176][ T8524] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.956233][ T8524] ? find_held_lock+0x2b/0x80 [ 257.956292][ T8524] __sys_sendmsg+0x170/0x220 [ 257.956340][ T8524] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.956417][ T8524] do_syscall_64+0xc9/0xf80 [ 257.956461][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.956494][ T8524] RIP: 0033:0x7f233419af79 [ 257.956518][ T8524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.956549][ T8524] RSP: 002b:00007f2335038028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.956587][ T8524] RAX: ffffffffffffffda RBX: 00007f2334415fa0 RCX: 00007f233419af79 [ 257.956608][ T8524] RDX: 0000000000008094 RSI: 00002000000006c0 RDI: 0000000000000004 [ 257.956627][ T8524] RBP: 00007f2335038090 R08: 0000000000000000 R09: 0000000000000000 [ 257.956645][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.956663][ T8524] R13: 00007f2334416038 R14: 00007f2334415fa0 R15: 00007ffd0903e198 [ 257.956711][ T8524] [ 258.615272][ T8529] FAULT_INJECTION: forcing a failure. [ 258.615272][ T8529] name failslab, interval 1, probability 0, space 0, times 0 [ 258.635421][ T8529] CPU: 1 UID: 0 PID: 8529 Comm: syz.3.514 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.635467][ T8529] Tainted: [L]=SOFTLOCKUP [ 258.635478][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 258.635508][ T8529] Call Trace: [ 258.635518][ T8529] [ 258.635529][ T8529] dump_stack_lvl+0x100/0x190 [ 258.635571][ T8529] should_fail_ex.cold+0x5/0xa [ 258.635623][ T8529] should_failslab+0xc2/0x120 [ 258.635668][ T8529] ? tomoyo_encode2+0xfb/0x3c0 [ 258.635696][ T8529] __kmalloc_noprof+0xf6/0x9c0 [ 258.635739][ T8529] ? tomoyo_encode2+0xfb/0x3c0 [ 258.635766][ T8529] tomoyo_encode2+0xfb/0x3c0 [ 258.635802][ T8529] tomoyo_unix_entry+0x343/0x640 [ 258.635834][ T8529] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 258.635898][ T8529] tomoyo_socket_connect_permission+0x31a/0x360 [ 258.635934][ T8529] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 258.635974][ T8529] ? __might_fault+0xc5/0x140 [ 258.636020][ T8529] security_socket_connect+0xd3/0x230 [ 258.636064][ T8529] __sys_connect_file+0x8f/0x1a0 [ 258.636111][ T8529] __sys_connect+0x141/0x170 [ 258.636151][ T8529] ? __pfx___sys_connect+0x10/0x10 [ 258.636206][ T8529] ? __fget_files+0x21f/0x3d0 [ 258.636257][ T8529] ? __pfx_ksys_write+0x10/0x10 [ 258.636304][ T8529] __x64_sys_connect+0x72/0xb0 [ 258.636345][ T8529] ? lockdep_hardirqs_on+0x78/0x100 [ 258.636384][ T8529] do_syscall_64+0xc9/0xf80 [ 258.636427][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.636460][ T8529] RIP: 0033:0x7fadc4b9af79 [ 258.636485][ T8529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.636515][ T8529] RSP: 002b:00007fadc5ae2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 258.636546][ T8529] RAX: ffffffffffffffda RBX: 00007fadc4e15fa0 RCX: 00007fadc4b9af79 [ 258.636567][ T8529] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000003 [ 258.636585][ T8529] RBP: 00007fadc5ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 258.636605][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.636624][ T8529] R13: 00007fadc4e16038 R14: 00007fadc4e15fa0 R15: 00007ffdda70aab8 [ 258.636667][ T8529] [ 259.423076][ T8531] Invalid ELF header magic: != ELF [ 259.889659][ T5837] Bluetooth: hci4: command tx timeout [ 259.947095][ T8521] chnl_net:caif_netlink_parms(): no params data found [ 260.438909][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.490890][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.498196][ T8521] bridge_slave_0: entered allmulticast mode [ 260.540655][ T8521] bridge_slave_0: entered promiscuous mode [ 260.592603][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.599854][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.629920][ T8521] bridge_slave_1: entered allmulticast mode [ 260.644911][ T8521] bridge_slave_1: entered promiscuous mode [ 260.770252][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.813018][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.958144][ T8521] team0: Port device team_slave_0 added [ 260.974531][ T8521] team0: Port device team_slave_1 added [ 261.098571][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.133609][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.204389][ T8521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.229329][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.236954][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.269697][ T8521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.559004][ T8521] hsr_slave_0: entered promiscuous mode [ 261.571514][ T8521] hsr_slave_1: entered promiscuous mode [ 261.577682][ T8521] debugfs: 'hsr0' already exists in 'hsr' [ 261.583516][ T8521] Cannot create hsr debugfs directory [ 261.785490][ T8557] Process accounting paused [ 261.950837][ T5837] Bluetooth: hci4: command tx timeout [ 263.097508][ T8521] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.146574][ T8521] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.227116][ T8521] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.273014][ T8521] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.552572][ T8592] FAULT_INJECTION: forcing a failure. [ 263.552572][ T8592] name failslab, interval 1, probability 0, space 0, times 0 [ 263.632834][ T8592] CPU: 1 UID: 0 PID: 8592 Comm: syz.3.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.632884][ T8592] Tainted: [L]=SOFTLOCKUP [ 263.632895][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 263.632913][ T8592] Call Trace: [ 263.632923][ T8592] [ 263.632934][ T8592] dump_stack_lvl+0x100/0x190 [ 263.632977][ T8592] should_fail_ex.cold+0x5/0xa [ 263.633028][ T8592] should_failslab+0xc2/0x120 [ 263.633071][ T8592] kmem_cache_alloc_noprof+0x83/0x780 [ 263.633111][ T8592] ? sk_prot_alloc+0x60/0x2a0 [ 263.633151][ T8592] ? sk_prot_alloc+0x60/0x2a0 [ 263.633181][ T8592] sk_prot_alloc+0x60/0x2a0 [ 263.633216][ T8592] sk_alloc+0x36/0xe80 [ 263.633261][ T8592] unix_create1+0xa6/0x700 [ 263.633293][ T8592] unix_stream_connect+0x21b/0x1a60 [ 263.633328][ T8592] ? __might_fault+0xc5/0x140 [ 263.633375][ T8592] ? __pfx_unix_stream_connect+0x10/0x10 [ 263.633408][ T8592] __sys_connect_file+0x141/0x1a0 [ 263.633453][ T8592] __sys_connect+0x141/0x170 [ 263.633499][ T8592] ? __pfx___sys_connect+0x10/0x10 [ 263.633538][ T8592] ? __fget_files+0x21f/0x3d0 [ 263.633586][ T8592] ? __pfx_ksys_write+0x10/0x10 [ 263.633641][ T8592] __x64_sys_connect+0x72/0xb0 [ 263.633678][ T8592] ? lockdep_hardirqs_on+0x78/0x100 [ 263.633712][ T8592] do_syscall_64+0xc9/0xf80 [ 263.633750][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.633779][ T8592] RIP: 0033:0x7fadc4b9af79 [ 263.633801][ T8592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.633828][ T8592] RSP: 002b:00007fadc5ae2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 263.633855][ T8592] RAX: ffffffffffffffda RBX: 00007fadc4e15fa0 RCX: 00007fadc4b9af79 [ 263.633877][ T8592] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000003 [ 263.633894][ T8592] RBP: 00007fadc5ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 263.633910][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.633927][ T8592] R13: 00007fadc4e16038 R14: 00007fadc4e15fa0 R15: 00007ffdda70aab8 [ 263.633965][ T8592] [ 263.867540][ T8583] input: jJǸ-9%vJ86 as /devices/virtual/input/input12 [ 264.030766][ T5837] Bluetooth: hci4: command tx timeout [ 264.289150][ T5837] Bluetooth: hci0: ACL packet too small [ 264.297893][ T8521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.332503][ T8521] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.667074][ T30] audit: type=1800 audit(1770659161.490:3): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.525" name="members" dev="configfs" ino=22781 res=0 errno=0 [ 264.704988][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.712267][ T7923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.823382][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.830640][ T7922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.048869][ T8521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.886254][ T7926] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.955815][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.968524][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.110631][ T5837] Bluetooth: hci4: command tx timeout [ 266.172770][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.302613][ T7926] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.563785][ T7926] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.782363][ T7926] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.014226][ T8624] openvswitch: netlink: Duplicate or invalid key (type 0). [ 267.265625][ T7926] hsr0: left allmulticast mode [ 267.316357][ T7926] hsr_slave_0: left allmulticast mode [ 267.322504][ T7926] hsr_slave_1: left allmulticast mode [ 267.339503][ T7926] hsr0: left promiscuous mode [ 267.345902][ T7926] bridge0: port 3(hsr0) entered disabled state [ 267.379859][ T7926] bridge_slave_1: left allmulticast mode [ 267.420611][ T7926] bridge_slave_1: left promiscuous mode [ 267.441335][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.553986][ T7926] bridge_slave_0: left allmulticast mode [ 267.559710][ T7926] bridge_slave_0: left promiscuous mode [ 267.610901][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.894617][ T7926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.923897][ T7926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.034330][ T7926] bond0 (unregistering): Released all slaves [ 269.307566][ T8521] veth0_vlan: entered promiscuous mode [ 269.324662][ T8521] veth1_vlan: entered promiscuous mode [ 269.979219][ T8521] veth0_macvtap: entered promiscuous mode [ 270.008235][ T8521] veth1_macvtap: entered promiscuous mode [ 270.246633][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.273739][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.383316][ T7160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.430346][ T7160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.464008][ T7160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.608221][ T7926] hsr_slave_0: left promiscuous mode [ 270.630260][ T7926] hsr_slave_1: left promiscuous mode [ 270.653609][ T7926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.679533][ T7926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.717112][ T7926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.744041][ T7926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.899327][ T7926] veth1_macvtap: left promiscuous mode [ 270.925750][ T7926] veth0_macvtap: left promiscuous mode [ 270.950782][ T7926] veth1_vlan: left promiscuous mode [ 270.979766][ T7926] veth0_vlan: left promiscuous mode [ 272.487323][ T7926] team0 (unregistering): Port device team_slave_1 removed [ 272.594536][ T7926] team0 (unregistering): Port device team_slave_0 removed [ 273.428364][ T7160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.067007][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.094485][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.418794][ T7160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.449854][ T7160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.867582][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.891061][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.910997][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.919751][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.927455][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.407778][ T8746] chnl_net:caif_netlink_parms(): no params data found [ 278.470024][ T8765] Invalid ELF header magic: != ELF [ 278.991709][ T5837] Bluetooth: hci3: command tx timeout [ 279.361454][ T8746] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.379327][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.399817][ T8746] bridge_slave_0: entered allmulticast mode [ 279.419405][ T8746] bridge_slave_0: entered promiscuous mode [ 279.764575][ T8746] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.821376][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.828663][ T8746] bridge_slave_1: entered allmulticast mode [ 279.859307][ T8746] bridge_slave_1: entered promiscuous mode [ 279.994714][ T8746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.314991][ T8746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.587341][ T8746] team0: Port device team_slave_0 added [ 280.624044][ T8746] team0: Port device team_slave_1 added [ 281.035015][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.060618][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.093637][ T5837] Bluetooth: hci3: command tx timeout [ 281.110612][ T8746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.134477][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.215712][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.334282][ T8746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.442887][ T8746] hsr_slave_0: entered promiscuous mode [ 281.500054][ T8746] hsr_slave_1: entered promiscuous mode [ 281.510023][ T8746] debugfs: 'hsr0' already exists in 'hsr' [ 281.524286][ T8746] Cannot create hsr debugfs directory [ 283.152794][ T5837] Bluetooth: hci3: command tx timeout [ 283.292816][ T8746] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 283.496008][ T8746] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 283.563936][ T8746] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 283.665061][ T8746] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.902549][ T30] audit: type=1800 audit(1770659180.730:4): pid=8832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.558" name="members" dev="configfs" ino=24840 res=0 errno=0 [ 284.172181][ T8804] binder: 8802:8804 ioctl c018620c 0 returned -1 [ 284.503777][ T8746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.692419][ T8746] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.829791][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.836965][ T7922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.938377][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.945632][ T7922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.032223][ T8840] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 285.182932][ T8746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.233984][ T5837] Bluetooth: hci3: command tx timeout [ 285.644880][ T8845] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 286.296866][ T8746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.342510][ T5837] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 286.361264][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 287.241286][ T8871] FAULT_INJECTION: forcing a failure. [ 287.241286][ T8871] name fail_futex, interval 1, probability 0, space 0, times 0 [ 287.384289][ T8871] CPU: 1 UID: 0 PID: 8871 Comm: syz.4.564 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.384356][ T8871] Tainted: [L]=SOFTLOCKUP [ 287.384369][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 287.384389][ T8871] Call Trace: [ 287.384402][ T8871] [ 287.384415][ T8871] dump_stack_lvl+0x100/0x190 [ 287.384480][ T8871] should_fail_ex.cold+0x5/0xa [ 287.384536][ T8871] get_futex_key+0x1d2/0x1620 [ 287.384587][ T8871] ? __pfx_get_futex_key+0x10/0x10 [ 287.384631][ T8871] ? find_held_lock+0x2b/0x80 [ 287.384664][ T8871] ? futex_wake+0x456/0x530 [ 287.384727][ T8871] futex_wake+0xea/0x530 [ 287.384782][ T8871] ? __pfx_futex_wait+0x10/0x10 [ 287.384814][ T8871] ? __pfx_futex_wake+0x10/0x10 [ 287.384874][ T8871] ? find_held_lock+0x2b/0x80 [ 287.384907][ T8871] ? __might_fault+0xc5/0x140 [ 287.384940][ T8871] ? __might_fault+0xc5/0x140 [ 287.384983][ T8871] do_futex+0x32b/0x350 [ 287.385041][ T8871] ? __pfx_do_futex+0x10/0x10 [ 287.385092][ T8871] ? __do_sys_capset+0xfb/0x460 [ 287.385137][ T8871] __x64_sys_futex+0x34f/0x4d0 [ 287.385206][ T8871] ? __pfx___x64_sys_futex+0x10/0x10 [ 287.385259][ T8871] ? xfd_validate_state+0x129/0x190 [ 287.385362][ T8871] do_syscall_64+0xc9/0xf80 [ 287.385413][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.385448][ T8871] RIP: 0033:0x7f934479af79 [ 287.385474][ T8871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.385506][ T8871] RSP: 002b:00007f93455900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 287.385538][ T8871] RAX: ffffffffffffffda RBX: 00007f9344a15fa8 RCX: 00007f934479af79 [ 287.385560][ T8871] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9344a15fac [ 287.385580][ T8871] RBP: 00007f9344a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 287.385601][ T8871] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 287.385622][ T8871] R13: 00007f9344a16038 R14: 00007ffc7a6d9d40 R15: 00007ffc7a6d9e28 [ 287.385665][ T8871] [ 287.958377][ T8746] veth0_vlan: entered promiscuous mode [ 288.024325][ T8746] veth1_vlan: entered promiscuous mode [ 288.101075][ T8746] veth0_macvtap: entered promiscuous mode [ 288.126846][ T8746] veth1_macvtap: entered promiscuous mode [ 288.173186][ T8746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.223048][ T8746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.382280][ T7160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.501330][ T7160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.536117][ T7160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.724573][ T7160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.149916][ T7179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.200610][ T7179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.222009][ T7160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.281440][ T7160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.808682][ T8897] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 290.158598][ T8903] FAULT_INJECTION: forcing a failure. [ 290.158598][ T8903] name failslab, interval 1, probability 0, space 0, times 0 [ 290.202679][ T8903] CPU: 1 UID: 0 PID: 8903 Comm: syz.4.569 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.202733][ T8903] Tainted: [L]=SOFTLOCKUP [ 290.202745][ T8903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 290.202765][ T8903] Call Trace: [ 290.202776][ T8903] [ 290.202789][ T8903] dump_stack_lvl+0x100/0x190 [ 290.202837][ T8903] should_fail_ex.cold+0x5/0xa [ 290.202894][ T8903] should_failslab+0xc2/0x120 [ 290.202943][ T8903] ? snd_midi_event_new+0xa1/0x210 [ 290.202976][ T8903] __kmalloc_noprof+0xf6/0x9c0 [ 290.203024][ T8903] ? snd_midi_event_new+0xa1/0x210 [ 290.203058][ T8903] snd_midi_event_new+0xa1/0x210 [ 290.203096][ T8903] snd_virmidi_output_open+0x106/0x670 [ 290.203140][ T8903] open_substream+0x480/0x9e0 [ 290.203191][ T8903] rawmidi_open_priv+0x595/0x6f0 [ 290.203244][ T8903] snd_rawmidi_open+0x4c9/0xba0 [ 290.203298][ T8903] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 290.203348][ T8903] ? __pfx_default_wake_function+0x10/0x10 [ 290.203392][ T8903] ? kobject_get_unless_zero+0x156/0x200 [ 290.203455][ T8903] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 290.203504][ T8903] snd_open+0x22d/0x4c0 [ 290.203544][ T8903] ? __pfx_snd_open+0x10/0x10 [ 290.203581][ T8903] chrdev_open+0x234/0x6a0 [ 290.203623][ T8903] ? __pfx_apparmor_file_open+0x10/0x10 [ 290.203668][ T8903] ? __pfx_chrdev_open+0x10/0x10 [ 290.203711][ T8903] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 290.203773][ T8903] do_dentry_open+0x73e/0x1570 [ 290.203813][ T8903] ? __pfx_chrdev_open+0x10/0x10 [ 290.203855][ T8903] ? security_inode_permission+0xbf/0x250 [ 290.203912][ T8903] vfs_open+0x82/0x3f0 [ 290.203965][ T8903] path_openat+0x21dc/0x3120 [ 290.204019][ T8903] ? __pfx_path_openat+0x10/0x10 [ 290.204074][ T8903] do_filp_open+0x1f7/0x420 [ 290.204117][ T8903] ? __pfx_do_filp_open+0x10/0x10 [ 290.204186][ T8903] ? _raw_spin_unlock+0x28/0x50 [ 290.204219][ T8903] ? alloc_fd+0x476/0x790 [ 290.204268][ T8903] do_sys_openat2+0x12e/0x220 [ 290.204320][ T8903] ? __pfx_do_sys_openat2+0x10/0x10 [ 290.204374][ T8903] ? __fget_files+0x21f/0x3d0 [ 290.204427][ T8903] __x64_sys_openat+0x12d/0x210 [ 290.204479][ T8903] ? __pfx___x64_sys_openat+0x10/0x10 [ 290.204530][ T8903] ? xfd_validate_state+0x129/0x190 [ 290.204598][ T8903] do_syscall_64+0xc9/0xf80 [ 290.204646][ T8903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.204697][ T8903] RIP: 0033:0x7f934479af79 [ 290.204724][ T8903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.204758][ T8903] RSP: 002b:00007f934556f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 290.204791][ T8903] RAX: ffffffffffffffda RBX: 00007f9344a16090 RCX: 00007f934479af79 [ 290.204813][ T8903] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 290.204835][ T8903] RBP: 00007f93448316e0 R08: 0000000000000000 R09: 0000000000000000 [ 290.204857][ T8903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.204877][ T8903] R13: 00007f9344a16128 R14: 00007f9344a16090 R15: 00007ffc7a6d9e28 [ 290.204923][ T8903] [ 290.950874][ T8903] ptp ptp0: new virtual clock ptp1 [ 291.147161][ T8903] ptp ptp0: new virtual clock ptp2 [ 291.197267][ T5837] Bluetooth: hci3: ACL packet too small [ 291.228772][ T8903] ptp ptp0: new virtual clock ptp3 [ 291.234999][ T8903] failed to create ptp aux_worker -4 [ 291.244546][ T8909] ptp ptp0: only physical clock in use now [ 292.410061][ T8931] Process accounting resumed [ 292.688719][ T5837] Bluetooth: hci0: ACL packet too small [ 297.415654][ T9021] kafs: addr_prefs: Invalid Command [ 298.495705][ T9053] FAULT_INJECTION: forcing a failure. [ 298.495705][ T9053] name failslab, interval 1, probability 0, space 0, times 0 [ 298.520681][ T9053] CPU: 0 UID: 0 PID: 9053 Comm: syz.0.593 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.520735][ T9053] Tainted: [L]=SOFTLOCKUP [ 298.520746][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 298.520765][ T9053] Call Trace: [ 298.520775][ T9053] [ 298.520786][ T9053] dump_stack_lvl+0x100/0x190 [ 298.520831][ T9053] should_fail_ex.cold+0x5/0xa [ 298.520887][ T9053] should_failslab+0xc2/0x120 [ 298.520935][ T9053] kmem_cache_alloc_noprof+0x83/0x780 [ 298.520978][ T9053] ? __proc_create+0xc2/0x8c0 [ 298.521028][ T9053] ? __proc_create+0x2cb/0x8c0 [ 298.521086][ T9053] ? __proc_create+0x2cb/0x8c0 [ 298.521137][ T9053] __proc_create+0x2cb/0x8c0 [ 298.521189][ T9053] ? __pfx___proc_create+0x10/0x10 [ 298.521247][ T9053] ? _raw_write_unlock+0x28/0x50 [ 298.521282][ T9053] ? proc_register+0x559/0x8a0 [ 298.521316][ T9053] proc_create_reg+0x75/0x170 [ 298.521351][ T9053] proc_create_data+0x86/0x110 [ 298.521383][ T9053] ? __pfx_proc_create_data+0x10/0x10 [ 298.521415][ T9053] ? cache_register_net+0x137/0x5e0 [ 298.521464][ T9053] ? cache_register_net+0x137/0x5e0 [ 298.521522][ T9053] cache_register_net+0x2d6/0x5e0 [ 298.521578][ T9053] nfsd_idmap_init+0x16e/0x250 [ 298.521615][ T9053] ? __pfx_nfsd_net_init+0x10/0x10 [ 298.521664][ T9053] nfsd_net_init+0x69/0x3d0 [ 298.521722][ T9053] ? __pfx_nfsd_net_init+0x10/0x10 [ 298.521781][ T9053] ops_init+0x1e2/0x5f0 [ 298.521836][ T9053] setup_net+0x118/0x3a0 [ 298.521867][ T9053] ? __pfx_setup_net+0x10/0x10 [ 298.521894][ T9053] ? lockdep_init_map_type+0x5c/0x250 [ 298.521939][ T9053] ? mutex_init_lockep+0x110/0x150 [ 298.521989][ T9053] copy_net_ns+0x46f/0x7c0 [ 298.522043][ T9053] create_new_namespaces+0x3ea/0xab0 [ 298.522090][ T9053] copy_namespaces+0x468/0x5e0 [ 298.522128][ T9053] copy_process+0x32d5/0x7890 [ 298.522199][ T9053] ? __pfx_copy_process+0x10/0x10 [ 298.522278][ T9053] kernel_clone+0xfc/0x930 [ 298.522319][ T9053] ? __pfx_futex_wait+0x10/0x10 [ 298.522351][ T9053] ? __pfx_kernel_clone+0x10/0x10 [ 298.522417][ T9053] __do_sys_clone+0xd9/0x120 [ 298.522463][ T9053] ? __pfx___do_sys_clone+0x10/0x10 [ 298.522509][ T9053] ? __fget_files+0x21f/0x3d0 [ 298.522560][ T9053] ? xfd_validate_state+0x129/0x190 [ 298.522625][ T9053] do_syscall_64+0xc9/0xf80 [ 298.522679][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.522713][ T9053] RIP: 0033:0x7f6b6cb9af79 [ 298.522740][ T9053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.522775][ T9053] RSP: 002b:00007f6b6da55fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 298.522806][ T9053] RAX: ffffffffffffffda RBX: 00007f6b6ce15fa0 RCX: 00007f6b6cb9af79 [ 298.522828][ T9053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 298.522848][ T9053] RBP: 00007f6b6cc316e0 R08: 0000000000000000 R09: 0000000000000000 [ 298.522868][ T9053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.522886][ T9053] R13: 00007f6b6ce16038 R14: 00007f6b6ce15fa0 R15: 00007ffcc71a64c8 [ 298.522929][ T9053] [ 300.487958][ T30] audit: type=1800 audit(1770659197.310:5): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.597" name="members" dev="configfs" ino=25499 res=0 errno=0 [ 301.288940][ T9094] zswap: compressor not available [ 301.433126][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 308.218121][ T9207] FAULT_INJECTION: forcing a failure. [ 308.218121][ T9207] name failslab, interval 1, probability 0, space 0, times 0 [ 308.301235][ T9207] CPU: 1 UID: 0 PID: 9207 Comm: syz.4.613 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.301287][ T9207] Tainted: [L]=SOFTLOCKUP [ 308.301299][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 308.301324][ T9207] Call Trace: [ 308.301335][ T9207] [ 308.301347][ T9207] dump_stack_lvl+0x100/0x190 [ 308.301402][ T9207] should_fail_ex.cold+0x5/0xa [ 308.301456][ T9207] should_failslab+0xc2/0x120 [ 308.301503][ T9207] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 308.301551][ T9207] ? alloc_inode+0x183/0x250 [ 308.301622][ T9207] ? alloc_inode+0x183/0x250 [ 308.301690][ T9207] alloc_inode+0x183/0x250 [ 308.301738][ T9207] alloc_anon_inode+0x2a/0x3e0 [ 308.301780][ T9207] dma_buf_export+0x267/0xa90 [ 308.301813][ T9207] ? sg_alloc_table+0x4c/0x1c0 [ 308.301856][ T9207] system_heap_allocate+0xaec/0x10e0 [ 308.301898][ T9207] ? __pfx_system_heap_allocate+0x10/0x10 [ 308.301932][ T9207] ? __might_fault+0xc5/0x140 [ 308.301987][ T9207] dma_heap_ioctl+0x37f/0x5e0 [ 308.302042][ T9207] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 308.302099][ T9207] ? __do_sys_close_range+0x230/0x740 [ 308.302159][ T9207] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 308.302214][ T9207] __x64_sys_ioctl+0x18e/0x210 [ 308.302270][ T9207] do_syscall_64+0xc9/0xf80 [ 308.302313][ T9207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.302346][ T9207] RIP: 0033:0x7f934479af79 [ 308.302371][ T9207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.302403][ T9207] RSP: 002b:00007f934556f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.302440][ T9207] RAX: ffffffffffffffda RBX: 00007f9344a16090 RCX: 00007f934479af79 [ 308.302462][ T9207] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000001 [ 308.302482][ T9207] RBP: 00007f93448316e0 R08: 0000000000000000 R09: 0000000000000000 [ 308.302502][ T9207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.302521][ T9207] R13: 00007f9344a16128 R14: 00007f9344a16090 R15: 00007ffc7a6d9e28 [ 308.302563][ T9207] [ 308.927222][ T9214] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 309.970863][ T9230] ======================================================= [ 309.970863][ T9230] WARNING: The mand mount option has been deprecated and [ 309.970863][ T9230] and is ignored by this kernel. Remove the mand [ 309.970863][ T9230] option from the mount to silence this warning. [ 309.970863][ T9230] ======================================================= [ 310.522596][ T9210] binder: 9209:9210 ioctl c018620c 0 returned -1 [ 312.122400][ T30] audit: type=1800 audit(1770659208.950:6): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.623" name="members" dev="configfs" ino=25944 res=0 errno=0 [ 314.061673][ T9289] usb usb37: usbfs: process 9289 (syz.4.626) did not claim interface 0 before use [ 314.299004][ T9289] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 315.393951][ T9308] cougar: G6 mapped to space [ 317.011413][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 319.311038][ T5837] Bluetooth: hci4: ACL packet too small [ 321.143371][ T5837] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 321.143422][ T5837] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 321.143467][ T5837] Bluetooth: hci3: Dropping invalid advertising data [ 321.143743][ T5837] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 321.143778][ T5837] Bluetooth: hci3: Dropping invalid advertising data [ 321.143810][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 321.381452][ T9350] netlink: 334 bytes leftover after parsing attributes in process `syz.0.642'. [ 322.470301][ T9362] zswap: compressor not available [ 322.471390][ T9366] Setting dangerous option i915.mitigations - tainting kernel [ 322.704936][ T9373] netlink: 'syz.0.645': attribute type 3 has an invalid length. [ 322.804261][ T9373] hub 1-0:1.0: USB hub found [ 322.872168][ T9373] hub 1-0:1.0: 1 port detected [ 323.118783][ T9351] Process accounting paused [ 323.680652][ T9384] [U] [ 326.071673][ T9407] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 326.085985][ T9407] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 326.422261][ T9416] FAULT_INJECTION: forcing a failure. [ 326.422261][ T9416] name failslab, interval 1, probability 0, space 0, times 0 [ 326.436368][ T9416] CPU: 1 UID: 0 PID: 9416 Comm: syz.3.653 Tainted: G U L syzkaller #0 PREEMPT(full) [ 326.436419][ T9416] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 326.436438][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 326.436456][ T9416] Call Trace: [ 326.436467][ T9416] [ 326.436477][ T9416] dump_stack_lvl+0x100/0x190 [ 326.436518][ T9416] should_fail_ex.cold+0x5/0xa [ 326.436568][ T9416] should_failslab+0xc2/0x120 [ 326.436600][ T9416] ? tomoyo_realpath_from_path+0xb6/0x690 [ 326.436626][ T9416] __kmalloc_noprof+0xf6/0x9c0 [ 326.436648][ T9416] ? kfree+0x2a9/0x690 [ 326.436693][ T9416] ? tomoyo_realpath_from_path+0xb6/0x690 [ 326.436717][ T9416] tomoyo_realpath_from_path+0xb6/0x690 [ 326.436747][ T9416] tomoyo_check_open_permission+0x2af/0x3c0 [ 326.436784][ T9416] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 326.436848][ T9416] ? do_raw_spin_lock+0x128/0x260 [ 326.436888][ T9416] ? path_get+0x61/0x80 [ 326.436922][ T9416] tomoyo_file_open+0x6b/0x90 [ 326.436952][ T9416] security_file_open+0xb5/0x1e0 [ 326.436974][ T9416] do_dentry_open+0x58c/0x1570 [ 326.437005][ T9416] ? security_inode_permission+0xbf/0x250 [ 326.437045][ T9416] vfs_open+0x82/0x3f0 [ 326.437084][ T9416] path_openat+0x21dc/0x3120 [ 326.437122][ T9416] ? __pfx_path_openat+0x10/0x10 [ 326.437161][ T9416] do_filp_open+0x1f7/0x420 [ 326.437192][ T9416] ? __pfx_do_filp_open+0x10/0x10 [ 326.437240][ T9416] ? _raw_spin_unlock+0x28/0x50 [ 326.437264][ T9416] ? alloc_fd+0x476/0x790 [ 326.437300][ T9416] do_sys_openat2+0x12e/0x220 [ 326.437337][ T9416] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.437376][ T9416] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 326.437413][ T9416] __x64_sys_openat+0x12d/0x210 [ 326.437457][ T9416] ? __pfx___x64_sys_openat+0x10/0x10 [ 326.437492][ T9416] ? xfd_validate_state+0x129/0x190 [ 326.437541][ T9416] do_syscall_64+0xc9/0xf80 [ 326.437572][ T9416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.437596][ T9416] RIP: 0033:0x7fadc4b9af79 [ 326.437615][ T9416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.437637][ T9416] RSP: 002b:00007fadc5ac1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 326.437659][ T9416] RAX: ffffffffffffffda RBX: 00007fadc4e16090 RCX: 00007fadc4b9af79 [ 326.437675][ T9416] RDX: 000000000014f602 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 326.437689][ T9416] RBP: 00007fadc4c316e0 R08: 0000000000000000 R09: 0000000000000000 [ 326.437703][ T9416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.437716][ T9416] R13: 00007fadc4e16128 R14: 00007fadc4e16090 R15: 00007ffdda70aab8 [ 326.437746][ T9416] [ 326.438170][ T9416] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.117649][ T9423] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 327.295959][ T9423] File: /dev/mtdblock0 PID: 9423 Comm: syz.3.653 [ 327.409644][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.420576][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.138830][ T9451] binder: 9447:9451 ioctl c018620c 0 returned -1 [ 330.248248][ T9459] netlink: 318 bytes leftover after parsing attributes in process `syz.3.660'. [ 333.510351][ T5837] Bluetooth: hci0: ACL packet too small [ 335.243240][ T9500] FAULT_INJECTION: forcing a failure. [ 335.243240][ T9500] name failslab, interval 1, probability 0, space 0, times 0 [ 335.500664][ T9500] CPU: 1 UID: 0 PID: 9500 Comm: syz.0.668 Tainted: G U L syzkaller #0 PREEMPT(full) [ 335.500720][ T9500] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 335.500740][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 335.500761][ T9500] Call Trace: [ 335.500772][ T9500] [ 335.500783][ T9500] dump_stack_lvl+0x100/0x190 [ 335.500832][ T9500] should_fail_ex.cold+0x5/0xa [ 335.500888][ T9500] should_failslab+0xc2/0x120 [ 335.500937][ T9500] ? __register_sysctl_table+0xac/0x1650 [ 335.500991][ T9500] __kmalloc_noprof+0xf6/0x9c0 [ 335.501057][ T9500] ? __register_sysctl_table+0xac/0x1650 [ 335.501113][ T9500] __register_sysctl_table+0xac/0x1650 [ 335.501169][ T9500] ? is_module_address+0x5f/0xf0 [ 335.501226][ T9500] ? __pfx___register_sysctl_table+0x10/0x10 [ 335.501281][ T9500] ? is_module_address+0x69/0xf0 [ 335.501348][ T9500] ? register_net_sysctl_sz+0x222/0x430 [ 335.501405][ T9500] ? __asan_memcpy+0x3c/0x60 [ 335.501448][ T9500] sctp_sysctl_net_register+0x15e/0x200 [ 335.501503][ T9500] ? __pfx_sctp_defaults_init+0x10/0x10 [ 335.501555][ T9500] sctp_defaults_init+0x6d2/0xd90 [ 335.501605][ T9500] ? __pfx_sctp_defaults_init+0x10/0x10 [ 335.501656][ T9500] ops_init+0x1e2/0x5f0 [ 335.501716][ T9500] setup_net+0x118/0x3a0 [ 335.501756][ T9500] ? __pfx_setup_net+0x10/0x10 [ 335.501784][ T9500] ? lockdep_init_map_type+0x5c/0x250 [ 335.501837][ T9500] ? mutex_init_lockep+0x110/0x150 [ 335.501895][ T9500] copy_net_ns+0x46f/0x7c0 [ 335.501935][ T9500] create_new_namespaces+0x3ea/0xab0 [ 335.501984][ T9500] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 335.502030][ T9500] ksys_unshare+0x455/0xab0 [ 335.502082][ T9500] ? __pfx_ksys_unshare+0x10/0x10 [ 335.502131][ T9500] ? xfd_validate_state+0x129/0x190 [ 335.502198][ T9500] __x64_sys_unshare+0x31/0x40 [ 335.502247][ T9500] do_syscall_64+0xc9/0xf80 [ 335.502294][ T9500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.502329][ T9500] RIP: 0033:0x7f6b6cb9af79 [ 335.502357][ T9500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.502391][ T9500] RSP: 002b:00007f6b6da35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 335.502425][ T9500] RAX: ffffffffffffffda RBX: 00007f6b6ce16090 RCX: 00007f6b6cb9af79 [ 335.502448][ T9500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 335.502469][ T9500] RBP: 00007f6b6cc316e0 R08: 0000000000000000 R09: 0000000000000000 [ 335.502490][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.502512][ T9500] R13: 00007f6b6ce16128 R14: 00007f6b6ce16090 R15: 00007ffcc71a64c8 [ 335.502570][ T9500] [ 336.102715][ T30] audit: type=1800 audit(1770659232.930:7): pid=9515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.672" name="members" dev="configfs" ino=28681 res=0 errno=0 [ 339.214292][ T9535] FAULT_INJECTION: forcing a failure. [ 339.214292][ T9535] name fail_futex, interval 1, probability 0, space 0, times 0 [ 339.227197][ T9535] CPU: 1 UID: 0 PID: 9535 Comm: syz.0.677 Tainted: G U L syzkaller #0 PREEMPT(full) [ 339.227238][ T9535] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 339.227247][ T9535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 339.227261][ T9535] Call Trace: [ 339.227270][ T9535] [ 339.227279][ T9535] dump_stack_lvl+0x100/0x190 [ 339.227312][ T9535] should_fail_ex.cold+0x5/0xa [ 339.227354][ T9535] should_fail_futex+0x4c/0x60 [ 339.227387][ T9535] futex_lock_pi_atomic+0xe7/0xaf0 [ 339.227434][ T9535] futex_lock_pi+0x246/0x7b0 [ 339.227477][ T9535] ? __pfx_futex_lock_pi+0x10/0x10 [ 339.227520][ T9535] ? __pfx___futex_wait+0x10/0x10 [ 339.227542][ T9535] ? lockdep_hardirqs_on+0x78/0x100 [ 339.227597][ T9535] ? __pfx_futex_wake_mark+0x10/0x10 [ 339.227646][ T9535] ? ksys_write+0x190/0x250 [ 339.227674][ T9535] ? ksys_write+0x190/0x250 [ 339.227707][ T9535] do_futex+0x18a/0x350 [ 339.227743][ T9535] ? __pfx_do_futex+0x10/0x10 [ 339.227785][ T9535] __x64_sys_futex+0x34f/0x4d0 [ 339.227823][ T9535] ? fput+0x79/0x100 [ 339.227856][ T9535] ? __pfx___x64_sys_futex+0x10/0x10 [ 339.227901][ T9535] ? xfd_validate_state+0x129/0x190 [ 339.227949][ T9535] do_syscall_64+0xc9/0xf80 [ 339.227981][ T9535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.228005][ T9535] RIP: 0033:0x7f6b6cb9af79 [ 339.228024][ T9535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.228047][ T9535] RSP: 002b:00007f6b6da35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 339.228069][ T9535] RAX: ffffffffffffffda RBX: 00007f6b6ce16090 RCX: 00007f6b6cb9af79 [ 339.228085][ T9535] RDX: 0000000000000008 RSI: 0000000000000086 RDI: 0000000000000000 [ 339.228100][ T9535] RBP: 00007f6b6cc316e0 R08: 0000000000000000 R09: 0000000000000007 [ 339.228114][ T9535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.228129][ T9535] R13: 00007f6b6ce16128 R14: 00007f6b6ce16090 R15: 00007ffcc71a64c8 [ 339.228165][ T9535] [ 342.281179][ T9556] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 344.263444][ T9594] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 344.506189][ T9586] ima: policy update failed [ 344.598226][ T30] audit: type=1802 audit(1770659241.410:8): pid=9586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.685" res=0 errno=0 [ 346.685813][ T9614] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 346.752422][ T9614] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 346.784159][ T9614] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 346.839712][ T9614] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 346.897925][ T9614] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 346.963422][ T9614] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 351.168912][ T9668] FAULT_INJECTION: forcing a failure. [ 351.168912][ T9668] name failslab, interval 1, probability 0, space 0, times 0 [ 351.220790][ T9668] CPU: 0 UID: 0 PID: 9668 Comm: syz.5.704 Tainted: G U L syzkaller #0 PREEMPT(full) [ 351.220839][ T9668] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 351.220849][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 351.220868][ T9668] Call Trace: [ 351.220876][ T9668] [ 351.220884][ T9668] dump_stack_lvl+0x100/0x190 [ 351.220920][ T9668] should_fail_ex.cold+0x5/0xa [ 351.220961][ T9668] should_failslab+0xc2/0x120 [ 351.220998][ T9668] kmem_cache_alloc_noprof+0x83/0x780 [ 351.221032][ T9668] ? vm_area_alloc+0x1f/0x160 [ 351.221063][ T9668] ? vm_area_alloc+0x1f/0x160 [ 351.221087][ T9668] vm_area_alloc+0x1f/0x160 [ 351.221113][ T9668] __mmap_region+0x101e/0x2820 [ 351.221147][ T9668] ? __pfx___mmap_region+0x10/0x10 [ 351.221197][ T9668] ? kernel_text_address+0x8d/0x100 [ 351.221245][ T9668] ? __kernel_text_address+0xd/0x30 [ 351.221286][ T9668] ? unwind_get_return_address+0x59/0xa0 [ 351.221339][ T9668] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 351.221388][ T9668] ? stack_trace_save+0x8e/0xc0 [ 351.221452][ T9668] ? rcu_is_watching+0x12/0xc0 [ 351.221486][ T9668] mmap_region+0x30a/0x3e0 [ 351.221520][ T9668] do_mmap+0xc63/0x12f0 [ 351.221562][ T9668] ? __pfx_do_mmap+0x10/0x10 [ 351.221599][ T9668] ? __pfx_down_write_killable+0x10/0x10 [ 351.221651][ T9668] vm_mmap_pgoff+0x29e/0x470 [ 351.221691][ T9668] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 351.221723][ T9668] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 351.221760][ T9668] ? hugetlbfs_get_inode+0x36e/0x6f0 [ 351.221790][ T9668] ksys_mmap_pgoff+0x1c4/0x5b0 [ 351.221828][ T9668] __x64_sys_mmap+0x125/0x190 [ 351.221852][ T9668] do_syscall_64+0xc9/0xf80 [ 351.221882][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.221904][ T9668] RIP: 0033:0x7f0e2f19af79 [ 351.221922][ T9668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.221945][ T9668] RSP: 002b:00007f0e300c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 351.221967][ T9668] RAX: ffffffffffffffda RBX: 00007f0e2f415fa0 RCX: 00007f0e2f19af79 [ 351.221982][ T9668] RDX: 0000000000000003 RSI: 0000000000a00006 RDI: 0000000000000000 [ 351.221996][ T9668] RBP: 00007f0e2f2316e0 R08: ffffffffffffffff R09: 0000000000000000 [ 351.222010][ T9668] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 351.222024][ T9668] R13: 00007f0e2f416038 R14: 00007f0e2f415fa0 R15: 00007ffe03880518 [ 351.222053][ T9668] [ 352.031968][ T9671] random: crng reseeded on system resumption [ 353.154415][ T9662] Process accounting resumed [ 353.375027][ T9689] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 353.422708][ T9689] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 353.464010][ T9689] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 353.500930][ T9689] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 353.536100][ T9689] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 353.564068][ T9689] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 353.657519][ T9697] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 353.704736][ T9697] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 353.758021][ T9697] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 353.879015][ T9697] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 354.355438][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.710'. [ 354.402195][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.710'. [ 354.874084][ T30] audit: type=1800 audit(1770659251.700:9): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.711" name="members" dev="configfs" ino=29340 res=0 errno=0 [ 355.081774][ T1010] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.246827][ T1010] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.454042][ T1010] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.550508][ T1010] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.836036][ T9737] FAULT_INJECTION: forcing a failure. [ 355.836036][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 355.877776][ T9737] CPU: 0 UID: 0 PID: 9737 Comm: syz.5.715 Tainted: G U L syzkaller #0 PREEMPT(full) [ 355.877830][ T9737] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 355.877843][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 355.877874][ T9737] Call Trace: [ 355.877884][ T9737] [ 355.877896][ T9737] dump_stack_lvl+0x100/0x190 [ 355.877940][ T9737] should_fail_ex.cold+0x5/0xa [ 355.877990][ T9737] should_failslab+0xc2/0x120 [ 355.878037][ T9737] ? lsm_blob_alloc+0x68/0x90 [ 355.878076][ T9737] __kmalloc_noprof+0xf6/0x9c0 [ 355.878121][ T9737] ? lsm_blob_alloc+0x68/0x90 [ 355.878153][ T9737] lsm_blob_alloc+0x68/0x90 [ 355.878188][ T9737] security_prepare_creds+0x2d/0x290 [ 355.878222][ T9737] prepare_creds+0x5d6/0x950 [ 355.878256][ T9737] copy_creds+0xa7/0xa50 [ 355.878290][ T9737] copy_process+0x1029/0x7890 [ 355.878331][ T9737] ? __lock_acquire+0x4a5/0x2630 [ 355.878390][ T9737] ? __pfx_copy_process+0x10/0x10 [ 355.878435][ T9737] ? find_held_lock+0x2b/0x80 [ 355.878481][ T9737] kernel_clone+0xfc/0x930 [ 355.878521][ T9737] ? find_held_lock+0x2b/0x80 [ 355.878559][ T9737] ? __pfx_kernel_clone+0x10/0x10 [ 355.878625][ T9737] __do_sys_clone+0xd9/0x120 [ 355.878668][ T9737] ? __pfx___do_sys_clone+0x10/0x10 [ 355.878728][ T9737] ? ksys_write+0x1ac/0x250 [ 355.878764][ T9737] ? __pfx_ksys_write+0x10/0x10 [ 355.878813][ T9737] do_syscall_64+0xc9/0xf80 [ 355.878855][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.878887][ T9737] RIP: 0033:0x7f0e2f19af79 [ 355.878912][ T9737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.878943][ T9737] RSP: 002b:00007f0e300c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 355.878973][ T9737] RAX: ffffffffffffffda RBX: 00007f0e2f415fa0 RCX: 00007f0e2f19af79 [ 355.878995][ T9737] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0002000020003b4a [ 355.879014][ T9737] RBP: 00007f0e300c4090 R08: 0000000000000103 R09: 0000000000000000 [ 355.879034][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.879059][ T9737] R13: 00007f0e2f416038 R14: 00007f0e2f415fa0 R15: 00007ffe03880518 [ 355.879100][ T9737] [ 356.173955][ T1010] bridge_slave_1: left allmulticast mode [ 356.179817][ T1010] bridge_slave_1: left promiscuous mode [ 356.187249][ T1010] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.228569][ T1010] bridge_slave_0: left allmulticast mode [ 356.234300][ T1010] bridge_slave_0: left promiscuous mode [ 356.240028][ T1010] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.961785][ T1010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.993262][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.031077][ T1010] bond0 (unregistering): Released all slaves [ 357.148589][ T1010] HfR: left promiscuous mode [ 357.917249][ T9754] netlink: 186 bytes leftover after parsing attributes in process `syz.5.719'. [ 357.941244][ T9756] random: crng reseeded on system resumption [ 358.519687][ T9771] EXT4-fs error: 68 callbacks suppressed [ 358.519706][ T9771] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 358.548904][ T9771] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 358.569144][ T9771] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 358.613789][ T9771] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 358.674982][ T9771] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 358.727131][ T9771] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm modprobe: iget: checksum invalid [ 358.872278][ T1010] hsr_slave_0: left promiscuous mode [ 358.892611][ T1010] hsr_slave_1: left promiscuous mode [ 358.919027][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.933846][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.959246][ T1010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.993554][ T1010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.183807][ T1010] veth1_macvtap: left promiscuous mode [ 359.225444][ T1010] veth0_macvtap: left promiscuous mode [ 360.008132][ T9786] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm dhcpcd-run-hook: iget: checksum invalid [ 360.025237][ T9786] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm dhcpcd-run-hook: iget: checksum invalid [ 360.046413][ T9786] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm dhcpcd-run-hook: iget: checksum invalid [ 360.070034][ T9786] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1855: comm dhcpcd-run-hook: iget: checksum invalid [ 360.176323][ T9789] FAULT_INJECTION: forcing a failure. [ 360.176323][ T9789] name failslab, interval 1, probability 0, space 0, times 0 [ 360.191772][ T9789] CPU: 1 UID: 0 PID: 9789 Comm: syz.4.726 Tainted: G U L syzkaller #0 PREEMPT(full) [ 360.191823][ T9789] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 360.191834][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 360.191853][ T9789] Call Trace: [ 360.191863][ T9789] [ 360.191875][ T9789] dump_stack_lvl+0x100/0x190 [ 360.191919][ T9789] should_fail_ex.cold+0x5/0xa [ 360.191972][ T9789] should_failslab+0xc2/0x120 [ 360.192017][ T9789] kmem_cache_alloc_noprof+0x83/0x780 [ 360.192062][ T9789] ? create_new_namespaces+0x30/0xab0 [ 360.192107][ T9789] ? create_new_namespaces+0x30/0xab0 [ 360.192141][ T9789] create_new_namespaces+0x30/0xab0 [ 360.192177][ T9789] ? bpf_lsm_capable+0x9/0x10 [ 360.192205][ T9789] ? security_capable+0x80/0x260 [ 360.192250][ T9789] copy_namespaces+0x468/0x5e0 [ 360.192288][ T9789] copy_process+0x32d5/0x7890 [ 360.192329][ T9789] ? __lock_acquire+0x4a5/0x2630 [ 360.192389][ T9789] ? __pfx_copy_process+0x10/0x10 [ 360.192433][ T9789] ? find_held_lock+0x2b/0x80 [ 360.192482][ T9789] kernel_clone+0xfc/0x930 [ 360.192523][ T9789] ? find_held_lock+0x2b/0x80 [ 360.192558][ T9789] ? __pfx_kernel_clone+0x10/0x10 [ 360.192624][ T9789] __do_sys_clone+0xd9/0x120 [ 360.192668][ T9789] ? __pfx___do_sys_clone+0x10/0x10 [ 360.192736][ T9789] ? ksys_write+0x1ac/0x250 [ 360.192772][ T9789] ? __pfx_ksys_write+0x10/0x10 [ 360.192820][ T9789] do_syscall_64+0xc9/0xf80 [ 360.192864][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.192897][ T9789] RIP: 0033:0x7f934479af79 [ 360.192922][ T9789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.192953][ T9789] RSP: 002b:00007f9345590028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 360.192982][ T9789] RAX: ffffffffffffffda RBX: 00007f9344a15fa0 RCX: 00007f934479af79 [ 360.193004][ T9789] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0002000020003b4a [ 360.193024][ T9789] RBP: 00007f9345590090 R08: 0000000000000103 R09: 0000000000000000 [ 360.193044][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.193063][ T9789] R13: 00007f9344a16038 R14: 00007f9344a15fa0 R15: 00007ffc7a6d9e28 [ 360.193107][ T9789] [ 360.470654][ T8521] ================================================================== [ 360.478862][ T8521] BUG: KASAN: slab-use-after-free in __schedule+0xc56/0x5fa0 [ 360.486294][ T8521] Read of size 4 at addr ffff88817a01e2c0 by task syz-executor/8521 [ 360.494278][ T8521] [ 360.496615][ T8521] CPU: 0 UID: 0 PID: 8521 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 360.496656][ T8521] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 360.496665][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 360.496680][ T8521] Call Trace: [ 360.496689][ T8521] [ 360.496698][ T8521] dump_stack_lvl+0x100/0x190 [ 360.496727][ T8521] print_report+0x156/0x4c9 [ 360.496759][ T8521] ? __virt_addr_valid+0x81/0x620 [ 360.496794][ T8521] ? __phys_addr+0xe8/0x180 [ 360.496828][ T8521] ? __schedule+0xc56/0x5fa0 [ 360.496851][ T8521] kasan_report+0xdf/0x1a0 [ 360.496885][ T8521] ? __schedule+0xc56/0x5fa0 [ 360.496912][ T8521] kasan_check_range+0x10f/0x1e0 [ 360.496933][ T8521] __schedule+0xc56/0x5fa0 [ 360.496958][ T8521] ? __lock_acquire+0x4a5/0x2630 [ 360.496996][ T8521] ? __pfx___schedule+0x10/0x10 [ 360.497019][ T8521] ? find_held_lock+0x2b/0x80 [ 360.497042][ T8521] ? schedule+0x2bf/0x390 [ 360.497068][ T8521] schedule+0xdd/0x390 [ 360.497091][ T8521] do_nanosleep+0x206/0x560 [ 360.497130][ T8521] ? __pfx_do_nanosleep+0x10/0x10 [ 360.497167][ T8521] ? __asan_memset+0x23/0x50 [ 360.497191][ T8521] ? __hrtimer_setup+0x178/0x280 [ 360.497228][ T8521] hrtimer_nanosleep+0x156/0x360 [ 360.497251][ T8521] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 360.497276][ T8521] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 360.497312][ T8521] ? get_timespec64+0x136/0x1b0 [ 360.497341][ T8521] ? __pfx_get_timespec64+0x10/0x10 [ 360.497372][ T8521] common_nsleep+0xa1/0xd0 [ 360.497403][ T8521] __x64_sys_clock_nanosleep+0x336/0x480 [ 360.497435][ T8521] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 360.497465][ T8521] do_syscall_64+0xc9/0xf80 [ 360.497494][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.497519][ T8521] RIP: 0033:0x7f934475b84e [ 360.497537][ T8521] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.497560][ T8521] RSP: 002b:00007ffc7a6da108 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 360.497582][ T8521] RAX: ffffffffffffffda RBX: 0000555582ddf500 RCX: 00007f934475b84e [ 360.497598][ T8521] RDX: 00007ffc7a6da160 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.497613][ T8521] RBP: 00007ffc7a6da1cc R08: 0000000000000000 R09: 0000000000000000 [ 360.497627][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 360.497642][ T8521] R13: 00000000000927c0 R14: 0000000000057ed2 R15: 00007ffc7a6da220 [ 360.497664][ T8521] [ 360.497672][ T8521] [ 360.742952][ T8521] Allocated by task 8521: [ 360.747288][ T8521] kasan_save_stack+0x30/0x50 [ 360.751981][ T8521] kasan_save_track+0x14/0x30 [ 360.756666][ T8521] __kasan_slab_alloc+0x89/0x90 [ 360.761546][ T8521] kmem_cache_alloc_noprof+0x2ad/0x780 [ 360.767011][ T8521] copy_process+0x73df/0x7890 [ 360.771701][ T8521] kernel_clone+0xfc/0x930 [ 360.776123][ T8521] __do_sys_clone+0xd9/0x120 [ 360.780725][ T8521] do_syscall_64+0xc9/0xf80 [ 360.785234][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.791223][ T8521] [ 360.793572][ T8521] Freed by task 9788: [ 360.797547][ T8521] kasan_save_stack+0x30/0x50 [ 360.802256][ T8521] kasan_save_track+0x14/0x30 [ 360.806948][ T8521] kasan_save_free_info+0x3b/0x70 [ 360.811978][ T8521] __kasan_slab_free+0x5f/0x80 [ 360.816786][ T8521] kmem_cache_free+0x143/0x720 [ 360.821559][ T8521] __mmput+0x379/0x410 [ 360.825632][ T8521] mmput+0x67/0x80 [ 360.829356][ T8521] do_exit+0x78a/0x2a30 [ 360.833528][ T8521] do_group_exit+0xd5/0x2a0 [ 360.838048][ T8521] __x64_sys_exit_group+0x3e/0x50 [ 360.843088][ T8521] x64_sys_call+0x14fd/0x1510 [ 360.847777][ T8521] do_syscall_64+0xc9/0xf80 [ 360.852305][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.858196][ T8521] [ 360.860513][ T8521] The buggy address belongs to the object at ffff88817a01e200 [ 360.860513][ T8521] which belongs to the cache mm_struct of size 2968 [ 360.874479][ T8521] The buggy address is located 192 bytes inside of [ 360.874479][ T8521] freed 2968-byte region [ffff88817a01e200, ffff88817a01ed98) [ 360.888364][ T8521] [ 360.890687][ T8521] The buggy address belongs to the physical page: [ 360.897095][ T8521] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17a018 [ 360.905973][ T8521] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 360.914484][ T8521] memcg:ffff8881436c7301 [ 360.918738][ T8521] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 360.926824][ T8521] page_type: f5(slab) [ 360.930809][ T8521] raw: 057ff00000000040 ffff88813ff30b40 ffffea0001f27a00 0000000000000003 [ 360.939428][ T8521] raw: 0000000000000000 00000000800a000a 00000000f5000000 ffff8881436c7301 [ 360.948026][ T8521] head: 057ff00000000040 ffff88813ff30b40 ffffea0001f27a00 0000000000000003 [ 360.956701][ T8521] head: 0000000000000000 00000000800a000a 00000000f5000000 ffff8881436c7301 [ 360.965374][ T8521] head: 057ff00000000003 ffffea0005e80601 00000000ffffffff 00000000ffffffff [ 360.974067][ T8521] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 360.982734][ T8521] page dumped because: kasan: bad access detected [ 360.989148][ T8521] page_owner tracks the page as allocated [ 360.994857][ T8521] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9173, tgid 9173 (dhcpcd-run-hook), ts 306257472367, free_ts 306181444589 [ 361.016655][ T8521] post_alloc_hook+0x1e1/0x250 [ 361.021467][ T8521] get_page_from_freelist+0xe3d/0x2e10 [ 361.026934][ T8521] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 361.032842][ T8521] alloc_pages_mpol+0x1fb/0x550 [ 361.037728][ T8521] new_slab+0x2c4/0x440 [ 361.041922][ T8521] ___slab_alloc+0xda3/0x1ca0 [ 361.046604][ T8521] __slab_alloc.isra.0+0x63/0x110 [ 361.051640][ T8521] kmem_cache_alloc_noprof+0x4ec/0x780 [ 361.057129][ T8521] copy_process+0x73df/0x7890 [ 361.061818][ T8521] kernel_clone+0xfc/0x930 [ 361.066250][ T8521] __do_sys_clone+0xd9/0x120 [ 361.070857][ T8521] do_syscall_64+0xc9/0xf80 [ 361.075373][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.081285][ T8521] page last free pid 9166 tgid 9165 stack trace: [ 361.087625][ T8521] __free_frozen_pages+0x822/0x1130 [ 361.092842][ T8521] __put_partials+0x127/0x160 [ 361.097528][ T8521] qlist_free_all+0x47/0xe0 [ 361.102043][ T8521] kasan_quarantine_reduce+0x1a0/0x1f0 [ 361.107541][ T8521] __kasan_slab_alloc+0x69/0x90 [ 361.112439][ T8521] __kmalloc_noprof+0x300/0x9c0 [ 361.117304][ T8521] ops_init+0x77/0x5f0 [ 361.121431][ T8521] setup_net+0x118/0x3a0 [ 361.125674][ T8521] copy_net_ns+0x46f/0x7c0 [ 361.130099][ T8521] create_new_namespaces+0x3ea/0xab0 [ 361.135393][ T8521] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 361.141029][ T8521] ksys_unshare+0x455/0xab0 [ 361.145558][ T8521] __x64_sys_unshare+0x31/0x40 [ 361.150426][ T8521] do_syscall_64+0xc9/0xf80 [ 361.154942][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.160840][ T8521] [ 361.163172][ T8521] Memory state around the buggy address: [ 361.168975][ T8521] ffff88817a01e180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 361.177038][ T8521] ffff88817a01e200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 361.185103][ T8521] >ffff88817a01e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 361.193162][ T8521] ^ [ 361.199321][ T8521] ffff88817a01e300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 361.207407][ T8521] ffff88817a01e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 361.215470][ T8521] ================================================================== [ 361.223538][ T8521] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 361.230726][ T8521] CPU: 0 UID: 0 PID: 8521 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 361.241747][ T8521] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 361.246932][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 361.256989][ T8521] Call Trace: [ 361.260271][ T8521] [ 361.263210][ T8521] dump_stack_lvl+0x100/0x190 [ 361.267936][ T8521] vpanic+0x20d/0x630 [ 361.271922][ T8521] panic+0xd1/0xd1 [ 361.275642][ T8521] ? __pfx_panic+0x10/0x10 [ 361.280081][ T8521] ? end_report.part.0+0x23/0x90 [ 361.285032][ T8521] ? rcu_is_watching+0x12/0xc0 [ 361.289807][ T8521] ? end_report.part.0+0x23/0x90 [ 361.294758][ T8521] ? check_panic_on_warn+0x1f/0x90 [ 361.299884][ T8521] check_panic_on_warn.cold+0x19/0x34 [ 361.305262][ T8521] end_report.part.0+0x3a/0x90 [ 361.310123][ T8521] kasan_report.cold+0xe/0x18 [ 361.314814][ T8521] ? __schedule+0xc56/0x5fa0 [ 361.319414][ T8521] kasan_check_range+0x10f/0x1e0 [ 361.324356][ T8521] __schedule+0xc56/0x5fa0 [ 361.328819][ T8521] ? __lock_acquire+0x4a5/0x2630 [ 361.333793][ T8521] ? __pfx___schedule+0x10/0x10 [ 361.338666][ T8521] ? find_held_lock+0x2b/0x80 [ 361.343447][ T8521] ? schedule+0x2bf/0x390 [ 361.347804][ T8521] schedule+0xdd/0x390 [ 361.351892][ T8521] do_nanosleep+0x206/0x560 [ 361.356430][ T8521] ? __pfx_do_nanosleep+0x10/0x10 [ 361.361485][ T8521] ? __asan_memset+0x23/0x50 [ 361.366092][ T8521] ? __hrtimer_setup+0x178/0x280 [ 361.371052][ T8521] hrtimer_nanosleep+0x156/0x360 [ 361.376024][ T8521] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 361.381509][ T8521] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 361.386768][ T8521] ? get_timespec64+0x136/0x1b0 [ 361.391713][ T8521] ? __pfx_get_timespec64+0x10/0x10 [ 361.396932][ T8521] common_nsleep+0xa1/0xd0 [ 361.401374][ T8521] __x64_sys_clock_nanosleep+0x336/0x480 [ 361.407023][ T8521] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 361.413195][ T8521] do_syscall_64+0xc9/0xf80 [ 361.417719][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.423622][ T8521] RIP: 0033:0x7f934475b84e [ 361.428046][ T8521] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 361.447664][ T8521] RSP: 002b:00007ffc7a6da108 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 361.456177][ T8521] RAX: ffffffffffffffda RBX: 0000555582ddf500 RCX: 00007f934475b84e [ 361.464154][ T8521] RDX: 00007ffc7a6da160 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.472124][ T8521] RBP: 00007ffc7a6da1cc R08: 0000000000000000 R09: 0000000000000000 [ 361.480093][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 361.488069][ T8521] R13: 00000000000927c0 R14: 0000000000057ed2 R15: 00007ffc7a6da220 [ 361.496058][ T8521] [ 362.651668][ T8521] Shutting down cpus with NMI [ 362.657017][ T8521] Kernel Offset: disabled [ 362.661349][ T8521] Rebooting in 86400 seconds..