last executing test programs: 6.204698724s ago: executing program 2 (id=5012): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x10) shmctl$auto_SHM_INFO(0x6, 0xe, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0xfffffffffffffffd, 0x42000b, 0x7fffffffffffffff, 0xe33, 0x401, 0x8000) ioctl$auto(0x3, 0x89e0, 0x38) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20007, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ustat$auto(0x801, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(r1, 0x0, 0x61, 0x0, 0x10000) sendmsg$auto_SMC_NETLINK_DISABLE_HS_LIMITATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, "00d0b4809c0a19138b5847eeb798cbb6e2504b6ca0279f58c160e055f073159f71009281172188980417548c835668a85bbc6b2f5ab31218e203376b210bcb1a84a924c53ebe201e"}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x30) write$auto(0x3, 0x0, 0x70) 6.017839503s ago: executing program 0 (id=5013): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x62a6, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000100)={@_si_pad}, 0x9, &(0x7f0000000180)={{0x7}, {0x10000, 0x91}, 0x4, 0x0, 0xd33, 0x83, 0x100000001, 0x6, 0x7, 0x1, 0x6b1, 0x9, 0x3, 0x4, 0x8, 0x6}) mmap$auto(0x0, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) write$auto(r1, 0x0, 0x2) socket(0x2a, 0x80002, 0x73) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = open(0x0, 0x64842, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) mprotect$auto(0x200000000000, 0x1f, 0x5) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000003c0)='4', 0x1) unshare$auto(0x40000080) socket(0x3, 0x5, 0x0) ioctl$auto(0xffffffffffffffff, 0x8982, 0x1) r5 = prctl$auto(0x3a, 0x2, r0, 0x5, 0x800007) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) ioctl$auto_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, 0x0) write$auto(r6, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) prctl$auto(0x5, 0x39a, r0, 0x9, 0x20000000000001ff) io_setup$auto(0xe, &(0x7f0000000080)) socket(0x8, 0x800, 0x7f) 5.593507306s ago: executing program 2 (id=5016): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x7e1b, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mremap$auto(0x0, 0xf, 0x9, 0xb, 0x9) mmap$auto(0x5, 0x8, 0xe3, 0x9b7f, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$auto(r0, 0x4008550c, 0xffffffffffffffff) remap_file_pages$auto(0x3, 0x9, 0x3, 0x7fffffffffffffff, 0x200) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x460580, 0x0) ioctl$auto(r3, 0x64ca, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x602, 0x1) socketpair$auto(0x22, 0x5, 0xffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x104000000000010e, 0x3, 0x0, 0x20003fe) syz_genetlink_get_family_id$auto_ipvs(0x0, r4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 4.931823303s ago: executing program 0 (id=5019): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r0) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x5}, 0xa) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401b7, 0x7352, 0x2d, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) fcntl$auto_F_ADD_SEALS(r0, 0x409, 0x6e9a) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) 4.62198138s ago: executing program 3 (id=5020): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x2}, 0x3) socket(0x25, 0x6, 0x80000000) (async) socket(0x25, 0x6, 0x80000000) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) memfd_secret$auto(0x0) setsockopt$auto_SO_RCVBUFFORCE(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)='&+#\x00', 0x4) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x48181, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="0800070002000000430003000bf69ca6ab4328c4fa88ead3daa67c7e6f32b17808ed861e95b03a0b71cd7752b21b179193e15d57cca4fe7debe0047a050be0fd1754dda33a8ab64a0d817e00060006004ee4ea0dbe5ef88b210000"], 0x70}}, 0xb9c755e220d6b675) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x2b, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) (async) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x20803, 0x0) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) (async) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) rt_sigtimedwait$auto(&(0x7f0000000040)={0xc00000}, 0x0, &(0x7f0000000180), 0x8) (async) rt_sigtimedwait$auto(&(0x7f0000000040)={0xc00000}, 0x0, &(0x7f0000000180), 0x8) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) (async) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) 4.255445917s ago: executing program 2 (id=5021): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f00000001c0)={0x0, 0xfff}, 0x3, &(0x7f0000000280)={&(0x7f0000000100)="6c4bc022f1a924305022a30137693a982a453ee9ff2946c55588f6e6", 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) pidfd_open$auto(0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) bind$auto(0xffffffffffffffff, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8004) r1 = socket(0x26, 0x800, 0x9) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$auto(r1, 0x0, 0x2d) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000200)='/dev/binderfs/binder0\x00', 0x40000, 0x0) ioctl$auto_BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) 4.215234875s ago: executing program 0 (id=5022): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00', 0x2a001, 0x0) write$auto(r1, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r0) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BLA_CRC={0x6, 0x22, 0xff}, @BATADV_ATTR_BLA_BACKBONE={0xa, 0x21, @multicast}, @BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_TPMETER_RESULT={0x5, 0xa, 0x98}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x4}, @BATADV_ATTR_TT_FLAGS={0x8, 0x15, 0x8000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x54}, 0x801) connect$auto(0x3, 0x0, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183800, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r3, 0x28000) madvise$auto(0x0, 0x2000040080000008, 0x2) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) listen$auto(0x3, 0x83) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) recvmmsg$auto(r1, 0x0, 0x10000, 0x10, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0xff, 0x2, 0xeb1, 0x401, 0x8000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000180)={0x15, 0x0, 0x1}}) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x3, r4}) r5 = socket(0x2, 0x1, 0x0) setsockopt$auto(r5, 0x6, 0x24, 0x0, 0x40) 4.172702609s ago: executing program 1 (id=5023): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x8, 0x7ff) ptrace$auto(0x9, r0, 0x95, 0x887) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0x0) openat$auto_fops_u32_ro_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/ports/1/bpf_offloaded_id\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) read$auto(r5, &(0x7f00000000c0)='/sys/devices/~latform/vhci_hc$.7/usb23/23-0:1.0/~\xda=\x8eep_81/inver', 0x6864a34) open(&(0x7f0000000140)='./file0\x00', 0x2ac41, 0x0) socket(0xa, 0x5, 0x0) r6 = socket(0x10, 0x2, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f0000000300)=@test={r6, 0x3, 0x10, 0x8, 0x133, 0x8, 0xf4, 0xec56, 0x7fff, 0xd0, 0x2, 0x6, 0x8, 0x7, 0x7150}, 0x10) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYRES64], 0x18}, 0x1, 0x2000, 0x0, 0x40000}, 0x80) r8 = bpf$auto(0x2, &(0x7f0000000040)=@link_update={r2, @new_prog_fd=r4, 0x1000, @old_prog_fd=r7}, 0x2f) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x7, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x7, 0x8, 0xffffffff80000000, 0xffffffffffffffff, 0x6, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r10 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r10, &(0x7f0000000040)="20ed20d1027e0dc0023af10e9bfa1babfa3a3753ca9a20370a", 0x19) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000004ec0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004e80)={&(0x7f0000000400)={0x4a48, r11, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_AUTH_DATA={0xe1, 0x9c, "dcc6d2ae6cf038979f0ecc2f36b01d24cbd8e267ce6771fe2b90b0778c804809841ca7340b25423f1e3a0a736d59278df5fa1fb7227a5d5cb53f5578d7cb091425430620ae33e80cff315f70bac7b3cb583d5eacea3340be0619035d2688d5354fbf5ed0c6d8ab50aec15843986e94a1f49e794b26a9daca13a9cb49acdc81a421ea6b79d6a1b10b9d4d081f5cedc5c6ca71a9e94972e5e087d404a26e06b8cec0b233e47a950b9f6866b654eb41cb0209a79a2af982e582ec26be88c00847a58ffd47c5426342c8ec514526ed206eb0fc35c07c081cc050509a7e30e8"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_MLO_LINKS={0x4840, 0x138, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_FLAGS2={0xac, 0x43, "2719ea05da6c4f054d1b543831dc018ff713225beb3a21ce5de5cc500fe53c57d0a97ed425011cb36f4b32c4f3f946912a6e6dcd2bb7e6dc0ae5f630c2ff12d78be7342a2a47fba0af19a32351a67ac586c6bba4106008be4dc64309dc8c6e3b07cf59196cf3a98381eea482aea58b9e4527325cf2940a7759c8bdec9191cc0d2b6f9a472b94e32facb2bd795a75b9dc041a15fbac3f713b12aad2c9625cb5e70c85fac26df124ac"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}]}, {0x2998, 0x0, 0x0, 0x1, [@NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_REG_RULES={0x100, 0x22, 0x0, 0x1, [@nested={0xfa, 0x158, 0x0, 0x1, [@generic="deaf39ca3517710c532df2e4ceff3458e3bf6b148bcf18847d17f900ca61cf0713dee229f0dc7cce2b041187133ff90382046cf6b6dbe604c8ab6f183bcbf87b39fc0acb790e97a0a7dec0dba0c45493a13e9a12d431869975bd8b79e0476f7f917a0d256d7b30afef8bb28b0c1afa4054d488fdf0a3b63fe4f1f6b9b58df79f1cad5d5018b49a03960d0f138365f096ae5e5312ccf9b9711b92eb7e19e4952bc8d9e4e21b21fd71b1e456a9c311ff15c4c1fb7c7684596d631e111517b08b427b36ba266fcbedc7edc7cfe069f91535b2cfb9ce97c8e927423a28bffc32c900e21c250db903f5729acec3a99775679593e4b9dfd927"]}]}, @NL80211_ATTR_PEER_MEASUREMENTS={0x2888, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x26d0, 0x5, 0x0, 0x1, [{0x1a0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xc2, 0x1, "73481d8d4b571e8bc035c3b0410559149448c13d55ff0a7489efe99fd2ba601d1f281d21a4d905bfc794d378f05d51c80a78b18170990bc956d4f12ce8fc9977961e429d58b3ed3a1b447392a6337ff04d6634552868e707812fc29b58e4a2dddbc182ccbf62ddfa29dd7c30fb9a97cd76be16aee0d7e14ce192171fb33b77af18b2af6ad8b59a1ed2a093d10c6bb3ab6b6cedcbdf989d0626a6c1dcd1d02cb1f89949c85757e9bb2897b9bb2de48c532d4ee6f16bf876801831df2bccab"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x20, 0x1, "6d76f69dfc4cdab68a77d7693f12ee3e6e688c55a7259e2595bb8d06"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb5, 0x1, "75308e564c36f48ca0a7fb5e85a417256d09d1c9d2592a9e5b12a8961447b04152ec263409bddeeabcf77130c17703043422a6d53170efb2406cbe671224990ae717fa84b15791f66664e13252311c9aa422e8ff7bccfe907872642590cfb952ff7e9d430bb89ffb1f33d4cb26014d50d22e5f523b5142e0fdb508bf7288831b4db507b588a65bc4f82dacf345ffe4b963a85cf9e4900eddc487aaf28d41b3f15ff58cda9699231f322e8afeb6771548cd"}]}, {0x126c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xae, 0x1, "a0743dcb7a39621b6ce301e27e32bf85e3d1ca0298164b353a0aface5dfdd57c1e84829b127134ff55a88daa18ac9a0e642fab2bf3ecf664e7c7ef1eda15854b7d7b0fbb97bc4d84e9ce5aff4d4bed599f2f8e142382140fd86ebbc8f8cf36886ecf311ad0de961a251ad29701037866c1576a9cb27685f499102bc25ef8af3ed2e59e1cbb0ae43fa881d834a78f555ec2c9e349c3859473b7032067d7a4ec00df443b974f950fb1b770"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x19, 0x1, "7a099941308d1244e9b9927bf15971596bdb926423"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x7a, 0x1, "5508701f21e87d6bc705bcacdcec2d9c77cbfa44bdeb47ddde8394fecc187b3ff252a96c1f6da7bea33990e592f60204242fe995f52dad73704558c6f01452fcf8f9f447fcfce9e30259e28271c2288e7cf6fee2a62f435d0b0e87f6e412efcb0883ba98c00eeab4fe703975801a6c5069d5858db886"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x7f, 0x1, "996f002330c126c5054714ed600648fb4e86bb76801db255c3a0e55dc3c17a59868a2c74b998831a81a5e2108935130f74f69e4ab1fba99017917624e8c27cd31683c0a243df5b33bcc9756827b402093215a02c92b29a5794533aae5b633920fe37237978513a2c3214fd3d2cc0927abb5afccffff5729161cb20"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x8f, 0x1, "d8ba9b51a87a30f3d50c889b2b91884aa151c7ddb533aa9d33b6eb33cf98e96a44c155c061bf64af846715ee4bab92fab4b05c207835c8e51f0934b29e79540bf426015d19c4824bff4575fac17a595840d312c12ef26262f185f5e574a9a9b0426676748e193329ca9cc86d53e66767c15f209425de6179df365b50dd63c921df986260340d08bd1e8a5b"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0x12c0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x7f, 0x1, "b313a5bc893337f2463a4b01b46e9a66f534c21bd3ce56fdc2e4f985ebbd1eb0558e65a429a1d9abd9ad9e91bfe712436b4048244691fc102b9235a4aaa8d38e6f0045a540fe543287e0487052121ef0f7e4b9bacccabf264d22a025eac497d5e50783cbef9c378d37c2425aa6a49e297321df3e71790e8de53e2e"}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x81}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf305}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb6c}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x85, 0x1, "7e99deb1e6e00079ae36bda01a0964d89291f078ba92ce25ea6cd9078fbf9247cd66a1a5f698219803344ed7be08a619f1a8a853c67cb03478ad889a386d98bbe2c74412525965a30af85081c86f82fc5e9414d33d681ada9319ddf70d8b6595cec2cc67cb2d6fd1ce50baf3599b6ce6e633699e10e644fdc33e0cf08747ca1b7c"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb, 0x1, "1b495875da490b"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x93, 0x1, "c93c5fe46e8411e7c1dab5bf0d141ca595798c718e45e80711ae1f23b19ffaab24f1637d58aca9298c5eb9b345d179e3d93645c96835f70f7e5f01bc4746ecdee3226f4a7743b63393080f9245756c78e5cf1555ed95a476e7127fe71d3f18c52f47105ef323d177288ac916c841bcdb20269a7ee2f4f5e2d24c8f4b5eb611efdc35e28dd8963bc83e2fcc433df7f3"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1b0, 0x5, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xb, 0x1, "d651ce04d4fd50"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x10, 0x1, "2a3109f00d038bb4e18a1eac"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xe2, 0x1, "ec22324dcadb066ad3bb0890192d85cf602e9975f29aeb833e48b0803d4b371470e1804e71baba46de02327bd38ec0bc24ecd6066a1134516320fec8f99f17ce5aa1baf3cedce70f143c5b1e6ad2d435be63e914292c0ff8a6ddcb56b1ea4fdd8fc81ea74c3a8860a88afe41d4fccd4a652b6d5256edb7a9a626042f5aa40128d8acd0e845bc1ecf4953f81d26ba9ad723685282b42be34ac2563c9ca79fa4bb3218c941e47bc0606719760d3af409e3085fbeb2ea2950e96b7d8772bb220f682fc305b5ca26334369a912a066b42cda5bbe890c7ff3819576ce9c118b69"}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa3, 0x1, "3a4638f0e0e8a1e2734b2915212dccc77fce4142b8f5a2dc204c7fb3e9be5df71c9f2b7c74cfcc0dde66d1690a6bf50fceac4d9a8091e7189d8618054ffa29aa1685151721e342d03609e4b59c4978c2ecf7f3db2427543c6c5864838f0549a2ea1f03c50c0cf17033fdabb2444fa55792109aef323e0f3c5099f603f1203a9a5e3bac8e2319b67c4c61976f62409424cd8f7132ab720cb38e63efac5e4675"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4}]}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xffffffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0xc9}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_EHT_CAPABILITY={0x8b, 0x136, "8aa50814127e044f7128e0f8fd791b87d31e21637708a617e8f3d23f4de799565690969682ff9415c9779f2e74a8cc90aa8767fde18e63ab02ef6c3f68a4d2a924dc12e9458d5d057665dc42b6f39e84665813bf6cad565a49a788d8e9899a99070036591ee84e585e2d795cf038708f674ecdb521ac39eade93664b768e4aba78129aa1b41cb8"}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_ATTR_HE_OBSS_PD={0x14, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xf}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}]}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x10}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MNTR_FLAGS={0xec, 0x17, "c405452f1965e3b89c7e72eb423a201c0003a294939bccd8153c082ac4e6664cf348b14c34fa7ecc9f12d5317e27b4d80e5813bd5dd4a74e1dfdedc6d4f27ee171f7cba9efe63d431714271cbbb79c28eaf8a5fd49e1e2a4bcb123bf8289f121dd783a7beeec942f9e6c12891f47b18529763782c1d3180851a50efd448c7c55f99adb0ffa5399086496ba3e06c07978be5b266820f3792475af2f709081cdb1e756b43dbeac90039f554e39ce95d19df917556219d5417911138b2b79abac2c46ae9667ac06794a29f07846c94564cf56e1835a88246035214504d1abf683ef5ee4c688bbfef725"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_STA_WME={0x3c, 0x81, 0x0, 0x1, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xb}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xb}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x10}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1f}]}, @NL80211_ATTR_PID={0x8, 0x52, r0}]}, {0x161c, 0x0, 0x0, 0x1, [@NL80211_ATTR_HT_CAPABILITY={0xe9, 0x1f, "63fdcb45335d09e741072730ff4aca04a9fb79b7aa3785860ecfa5ff1ce13e2ce625e19672f4efa154aa3db8b802d4406e551f44f295a82e0a88acf6463a71e2b10d29078ba279ffa198707acb2a02dd875be010080c456c362ca0d41e85926dabf3af6cc379a62954a218d921d5123f40ee14035bd88d9c7a363585cc74298ba8379a0ea5c27f4b7a37883939e2fc682de1cebe64d2332865d3ec092d0ae7eca9dfaac238c37dc474d513e6f42169f06e844fae44e3d0932e603e0f822b77ce23af5ccbb4f0a4e8fd1a24ea1ac1ecc6b61f018b3233575c19e343d588fecab94ffc19ceb0"}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}, @NL80211_ATTR_TID_CONFIG={0x268, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0xb}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7f}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x23dd}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10001}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x81}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x65f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffb}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x52}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xf}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x10}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x11c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x25, 0x3, "5625d231fd0f29be68dc9577e64de4b56243072ca93232c4a7d98dad3f2fd15fbb"}, @NL80211_TXRATE_VHT={0x80, 0x3, "43299fbb1aad4f97906724436cf7d8232bcd240740a85c89dc21480e7a452b9b4734fb2c9e327efa073cc1a33a10157eacad0add4eac99d76fa7fc1f7759d97ab1101f9d555032f7e8b50b4c9fd4a33c61fd5494884c76cf64236e1e9507eb7bdda326579997d0c31095b10b3cb4ebe49d7b76a24a55f9a3153fe3f8"}, @NL80211_TXRATE_VHT={0x6a, 0x3, "d1d74e91f891828fee5709f256b6546c456fad1c2cd7f64567b6564f747cf99b28b557ad5354cf09c74a89d67c4fb87ae0fb60edc12230adc29284bd4f98be1050411daf0499aa578e7cd1de0d0fd7d179f31c19a0855bda756bbb0fd47958f8e67ccdefa72f"}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xcc}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x200}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x12a4, 0x2c, 0x0, 0x1, [@generic="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", @nested={0xc, 0xd1, 0x0, 0x1, [@typed={0x8, 0x12f, 0x0, 0x0, @uid=r9}]}, @nested={0x1113, 0x5d, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @fd=r3}, @generic="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", @generic="f857040ba3706781d0e9188aea6146f736fcbfcada08a88b9336a3de8dec07b2d2f28dc3fe7390017843a24bb81163c5e4828a6cd9c3cf8a3fa8d3b916f643408a5a4878049fe51e47acb81224dda491659b49b7ae9f43825474c1bc1868b948a6e962cce74eb0fdba75ff0bde979861de78e9ab2a18d54a2aeed2493a4e6aec432faa7689d2d4ec64fe2cea2b782350668d15acffffbb798a53a064f3eddda357ac9ddc5a99e6e8d8718e29f603d8e5a7a9b989d3801dab7d160f3ffdffa52116bd7746f824dcf67e949d399a570b6b58b93c05b3f017cf3ce0d2fb88a5c33eff62cbf5137e448b687b03", @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0x138}, @nested={0x4, 0x54}, @typed={0x8, 0x10, 0x0, 0x0, @fd=r8}, @nested={0x4, 0x9b}]}, @nested={0x83, 0x13f, 0x0, 0x1, [@typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="666ef28b898ab1f16fd1e07e75f9c728e05b6f89f9d6dde400e97f629a09e8c9d16fa6e8ea2bd78d67dae8e4dd22c51c7b8a5fecb3fbceed94f9b09148cf7f0f4c7f3be54690f46924367c8b4c4da4062787d4f571fabcf8e0166d3c715b9174d6895800799284ab06416a9edff24c9b87a468486a53a1"]}]}, @NL80211_ATTR_STA_AID={0x6}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4cda}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xe8}, @NL80211_ATTR_MPATH_NEXT_HOP={0x89, 0x1a, "a9a06c72eff154428d8022f1d2857bdca0993126f7626861103fc3f1f6ab1bbcf0ae5fbf2e0f4741e41742042d145ba1547ff9feb8f6dca5632357b94615e8f486e3f7ef51fd79976ebce7fa18295dce1f930e020f5d2430394a89c6412ccf99b8f3daeaf837580b1574ecf8e8a5ce9f494f016fb37392126787c3e597d3db0d25987d79cb"}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "a7bb3232a6c9f2112e1f53f90a4c6e642e942bf3f86a6e98fb8a"}, @NL80211_ATTR_S1G_CAPABILITY={0xeb, 0x128, "897cfb95b18a6376408700cf0958a9427290ff570b582a1c0ce5b95349090a21e5b1933a92a4a10ca9379bcb22176f04279096c3c9bcb9d8e226f9551bec878962f64dcfac516e412530ae3fd5449a4371b2c3f0fbd80089ee8ce2400e7d21891d6c0764828a80c812e842f32299bd0d1d76f6069aab96cf5d4f6458c1a49e778e6bf01a3d6dbc06432c76279768fd3d892172df3337a5a5e80f1879f1c24c2e1ccd73f97064623ebbc88b67d39caed4c396bccdccf2317e24d852df10ecb355da03aaaf0bd1b53233a0a2fbbaad852c26645ba1714e270772e9a204f527fd20e1bb095630a876"}, @NL80211_ATTR_PMKID={0x40, 0x55, "49d49ec04f3b9ba9bf1f268ac3cca3638ec4d5d2211fb57da95cdd6adc0847bf0a23cd43f905f56b8f6f645fc0e99bd9f2227bb21978e983e3e591f7"}]}, {0x3bc, 0x0, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSS_SELECT={0x1bb, 0xe3, 0x0, 0x1, [@nested={0xe1, 0xf8, 0x0, 0x1, [@typed={0xc, 0xa7, 0x0, 0x0, @u64=0x8}, @typed={0xc, 0xbe, 0x0, 0x0, @u64=0x80000000}, @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x3c}, @nested={0x4, 0xbc}, @generic="be51e08f8d0a71beb24e9ba0ef9408e5256128f3f0d790ebf353dce4408ade6f94c21a5d343b1f71100079935634c336a42b0105c3a6362bf8cd0d90e428294094438e70abe26422448fc64ed6e2468f41f77ab3ac3e23030abec5c9086d1c5add28e8ed174f1e5a53771318a38e6219f26e164b4be4fbe48075e6338661525a5d84963d79bc0c2a2c34296aa24483387c5296c17ad741d50c6d7c2e75", @nested={0x4, 0x45}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x86ff}]}, @generic="300a055650af566e47c2562268e126f44190a67c2b0ccc9d492ddf8ad65862767944a92b01cc21bf96ad9c90ed84ac74ca3c7cfd5ac2c147165930f1abcfffb6e80058fb7b3b781e45ff28217d35f2d93d6818f001be8d5e9f09e215c5b724faa6c237628a54dbee2cdd6e2f17c0afa33f3be752a827d5928af95b681d052ac7c4be13e01c2d329379a45f41788e9856e72de73a4d553c82fd8254190fbdb7d85f77f0356095e23df56b6ef07c35d4ceea341b331d9154c3dc75565e57ee81c50ac51f0e7bb8b24c6717b1ab3aa5396e704992"]}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa7, 0xbe, "35e7f0da40c33731764da9cfbc925403f9da5b2bd8a46321fb641c7c7a21042f4ffc8422fcb761f4dfd8777064d418a3a0c1fe7028e6ff645eea753102372db9913e4bc0f33b689bbf5c4579b6a4a27b3f9385b61b2384f0c22842f809f8a7a990354b73b29b5710bcdc5ef118ccdc6bdd37812e7c969930172927ec7d57c7e9583aa832d7be615f32042b3d915e6eb0e539884281e1fe57e316d95d998cb6d26d8f9d"}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_IE={0x13c, 0x2a, "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"}]}]}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xe2, 0x125, "40dead87846c06ff633d8db76a8525cff4c657794db2864423dbf6d1a01dff7e26dae1bba7878350a7b5b58e87169ced5ccc829e26fcc023440056e9497513a3b40fbc80affbe959780536cb468f5017dc882e70a3dedcab6cda90cd4a2db0c2db961b783b36fe5b229c89b0a4badc0758082132547e397a465e9b0e48c19134897c8dd97f81da41497015ee088b57a8d68535de7def89780330f48cb6418d2322852a2174382bb78017e6bfef864610ecc266d1ae86f29fa34b9ec789d8583c3ce1a39736e2934d59761c0e8c1138bed0774ff2150dd96d6756435ba64e"}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, 'f\\'}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8f}]}, 0x4a48}, 0x1, 0x0, 0x0, 0x20040041}, 0x4000000) r12 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 3.246503979s ago: executing program 3 (id=5024): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlock$auto(0x112, 0x80006) r0 = socket(0xa, 0x801, 0x106) getsockopt$auto(r0, 0x6, 0x19, 0x0, &(0x7f0000000040)=0x1) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000000), 0x208800, 0x0) 3.116943935s ago: executing program 2 (id=5025): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D3\x00', 0x5e5801, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/dvb_usb_af9015/uevent\x00', 0x30bf83, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) read$auto(r1, 0x0, 0x20) (async) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_memory\x00', 0xf22437c730143eb6, 0x0) read$auto(r2, &(0x7f00000000c0)='macsec\x00', 0x1) (async) read$auto(r2, &(0x7f00000000c0)='macsec\x00', 0x1) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) getgroups$auto(0x0, 0x0) (async) getgroups$auto(0x0, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000c80)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x4000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de152"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0xa98fc62b0299e2e0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de152"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0xa98fc62b0299e2e0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_thermal(&(0x7f00000006c0), r3) (async) r5 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000006c0), r3) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8404}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r3, @ANYRES64=r0, @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r6 = socket(0xa, 0x1, 0x84) r7 = getsockopt$auto(r6, 0x0, 0x18, 0x0, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000300)="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", 0xcb}, 0x3, 0x0, 0x80000000, 0x7}, 0x80000009}, 0x7, 0x200, 0x0) ioctl$auto_TUNSETVNETLE2(r7, 0x400454dc, &(0x7f0000000180)=0x1) (async) r8 = ioctl$auto_TUNSETVNETLE2(r7, 0x400454dc, &(0x7f0000000180)=0x1) sendmsg$auto_NL80211_CMD_DEL_KEY(r8, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0x3ac, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_BEACON_TAIL={0x28f, 0xf, "ca52f1f15f9bfd3ffc1085401e1e1ebf17eaef6d3cabe1accb076302cea87af954b244fcd1c8330b1852f00526c0061142f721de8d5c748a6df5bfa69532cec8334ec34b38ef4c9112f1b8ee5a3aaac29ed7ae94cc86350dd14caa2cd88c1eec5c43034ea045508d7e2ba9a8ae2ca50f8830997a3d08b5015bec70e073a2ad0e547696bd55463c5746b7080feb241e4aa1f8c3049c4f289011e1228c0b2a663eaf2505c200dce509dbdf8987e00ae9de9da6f4bfffa44bf17e44b5ccb84b421683c99e07d30e234b58325a10edd802fce30004747255c0193f9688b69ce59d1f9f786440f097774de30046ab10dcca43cd14b921f5f31e294b5982e18cd8f9f22d21ce7dfb59a0f0b8a6da781e2ea1da00412f8d1764692ca7d5274693fc86f30245a39cd6fdd44a9df5917c20ad389cf2334cb8e66f56b260d2ab7af46850bff28937996e001a9bce2d8e0be548ba125b5d88c02edeaf4dcdb53a97adaad48eb54c6c54ba55d65d2d6f60912d4eecce9694b4f0a9dae9f54db83a9cba0b302d7d39f2a676ead476a10d80c4d39195503c885bc750e418bc694af9fcf4cbc1ac4e9f34d4a309b5d090e7ba5d833e7f276262dec7f2e88cb6dc39c34ff0aab985e8f64974369f1e7f4e66d8ee42b56caf65979a76810cce7d165c39dcbf658024164ac214d5ed6526f87f94ebc494685add36eacd6ece9368496453d6960c64e239084659778f5008b6345acc7e037e5c15b367bf1bbbff1c9092c476009d87858d025ca40a1ed89449678921a806751d4f1b13ad669eee28811671b2010da51d36dbe7b6c46859764456835576d895108693313642490e8e75f2484343c3b984644d4fe75c2b1dab5d52f659b6cc69eb79a5baa9009b01a26591722e39a8474080da9185b9dce501473dbe"}, @NL80211_ATTR_HT_CAPABILITY={0xef, 0x1f, "831add2540004a81c4a5d4d57acd5f2e1b61f1c28afec151aff26819ce0e5ec2788fde9551357a5ea9ebd3360bb4a80b22ddde9b04d3f8d2a2fee51c42ce36255a43c78470809ac02a3b489dbc1db488c76217ce27b1b548a64dbc5ff13097bfbee1b96fa0034b8082cbd2d84535377d9e588ef3ae8b7b7849756cfaec49da2a93b513accddf769a142ce88f00cb58f8c66b04f96b2bbc2238e585245aa22c0aa6418fcb5a0f8744caa82f95fc67b509a90ea0818f7b155c8357e04e86d39c57492e8b5fbf06a22e927bd08facfc36b83eb05c17351902740e1d2e8f124896d6426eb368f5a6e96799528a"}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xfc}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1cb}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) getsockname$auto(0x3, 0x0, &(0x7f0000000d40)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x400, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0xd, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0xcae, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.805575483s ago: executing program 3 (id=5026): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, ',^]\x00'}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '#\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008984}, 0x1) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) r3 = set_tid_address$auto(&(0x7f0000000280)=0x9) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x800}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES16=r3, @ANYRES16=r1, @ANYRES16=r2], 0x1c}, 0x1, 0xfdffffff, 0x0, 0x4000801}, 0x4044820) 2.432782866s ago: executing program 0 (id=5027): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) r0 = socket(0x2, 0x2, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) r1 = io_uring_setup$auto(0x59, &(0x7f0000000480)={0x7fffffff, 0xe, 0x98000000, 0x6, 0x5, 0x8, 0xffffffffffffffff, [0x19e], {0xd74c, 0xb761, 0xffffffff, 0x29f, 0x100, 0x80, 0x101, 0x6, 0x9}, {0x200, 0x2, 0x2, 0xb, 0x1, 0x40, 0x76c5, 0x400005, 0x180000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) (async, rerun: 64) ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) (async, rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0xffff, 0x700, 0x0) (async, rerun: 64) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async, rerun: 64) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) getsockopt$auto_SO_RCVMARK(r3, 0x0, 0x4b, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) (rerun: 32) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r4, 0x0, 0x800007, 0x9) (async) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r2) sendmsg$auto_NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r6, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x401}, @NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xe015}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7fffffff}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xc}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x50}}, 0x48942) (async, rerun: 32) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00000300", 0x75d}) (async, rerun: 32) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) (async) writev$auto(r5, &(0x7f0000000340)={0x0, 0x500000}, 0x9) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) clock_settime$auto(0x14, &(0x7f0000000000)={0x9, 0x20000000000004}) (async) getcwd$auto(0x0, 0x7) (async, rerun: 64) ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000001640)={0x9, @inferred=r3, @raw=0x100000000, 0x8, 0x9, '\x00', {0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0x3, 0x9, {0xffffffffffffffff, 0x9}, {0x9, 0x400}, {0x9, 0x8}, 0x0, 0x8, 0x3, 0x1, 0xc15f, 0x5, 0x1, 0x9b, 0x1, 0x100, '\x00', 0x1, 0xd878f47, 0xff, 0x8}}) (rerun: 64) 2.384762331s ago: executing program 1 (id=5028): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="09002fbd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c850) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') (async) rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') 2.218979521s ago: executing program 3 (id=5029): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x7e1b, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mremap$auto(0x0, 0xf, 0x9, 0xb, 0x9) mmap$auto(0x5, 0x8, 0xe3, 0x9b7f, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$auto(r0, 0x4008550c, 0xffffffffffffffff) remap_file_pages$auto(0x3, 0x9, 0x3, 0x7fffffffffffffff, 0x200) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x460580, 0x0) ioctl$auto(r3, 0x64ca, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x602, 0x1) socketpair$auto(0x22, 0x5, 0xffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x104000000000010e, 0x3, 0x0, 0x20003fe) syz_genetlink_get_family_id$auto_ipvs(0x0, r4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 1.991862542s ago: executing program 1 (id=5030): setreuid$auto(0x3, 0x7) setreuid$auto(0x3, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 1.954736746s ago: executing program 2 (id=5031): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) (async) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) (async) sendmmsg$auto(r2, 0x0, 0x9a6, 0xf6) (async) msgctl$auto_IPC_STAT(0x0, 0x2, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev$auto(r3, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3) mmap$auto(0xfffffffffffffffe, 0x800000e983, 0x6, 0x13, r2, 0x54f5cfc0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (rerun: 64) fstat$auto(r4, 0x0) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8700, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x4610, 0x0) (async) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop5\x00', 0x40000, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000080)={0x0, 0xfffffffffffffded, &(0x7f0000001d80)={&(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYBLOB="9b490d7b65d9700f2996c613386d0d4161534900dc36d27d05616a3b1ee1533930496d9512f70b84c196784b7014d822d7f406e0dfd90ecd446f5dbe6012f6d8ee1567182f7cfd724dd54294cb9673318c8b3f9d98b12a4d76bc643f37492eb5e84fb1a00ffc9c687afe17b4b0a4797644f26151e85211626b7c3be8", @ANYRESDEC=r1, @ANYRESOCT=r0], 0x14}}, 0x40c4014) (async) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async) socket(0x2a, 0xa, 0x83) (async) mmap$auto(0x2, 0x810004, 0x5, 0x8000000008011, r6, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 32) socket(0xa, 0xa, 0x84) 1.633449786s ago: executing program 1 (id=5032): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000003240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f0000005fc0)={0x0, 0x0, &(0x7f0000005f80)={&(0x7f0000000240)={0x1c, r2, 0xd21, 0x70bd27, 0x25dfdbff, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x24004081) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 987.444979ms ago: executing program 0 (id=5033): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f00000001c0)={0x0, 0xfff}, 0x3, &(0x7f0000000280)={&(0x7f0000000100)="6c4bc022f1a924305022a30137693a982a453ee9ff2946c55588f6e6", 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) pidfd_open$auto(0x1, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) bind$auto(0xffffffffffffffff, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8004) r1 = socket(0x26, 0x800, 0x9) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$auto(r1, 0x0, 0x2d) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000200)='/dev/binderfs/binder0\x00', 0x40000, 0x0) ioctl$auto_BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) 928.601825ms ago: executing program 2 (id=5034): select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x4, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4de0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x2480, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0be4f2597d8b11ed14dfa636bad65cae9c0d21", 0x16, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/broadcast\x00', 0x800, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400981, 0x0) sendfile$auto(r1, r1, &(0x7f0000000000)=0x3, 0xad6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd4\x00', 0x200, 0x0) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r6 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000300)=@bpf_attr_4={0x2, r5, 0x10001, r0}, 0x9) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r6}, 0x6f4) read$auto(r5, 0x0, 0x20) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x841, 0x0) sethostname$auto(0x0, 0x1) write$auto(r7, 0x0, 0x6) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x6, 0x40, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00', &(0x7f00000000c0)=0x40) unshare$auto(0x40000080) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)="b2", 0x1) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r2, r8, 0x0, 0x1) 887.948248ms ago: executing program 3 (id=5035): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 828.772793ms ago: executing program 1 (id=5036): mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x2c, 0x0) r0 = fsopen$auto(0x0, 0x1) socket(0x1e, 0x3, 0x1) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) mmap$auto(0x0, 0x400009, 0xc, 0x9b72, 0x8000000000000003, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/pagemap\x00', 0x80800, 0x0) futex$auto(0x0, 0x84, 0x2, 0x0, 0x0, 0x3) read$auto(r1, 0x0, 0x39b8) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/dummy0/netdev_group\x00', 0x82, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="08d6", 0x2) 531.552614ms ago: executing program 3 (id=5037): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bdad, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_SCOPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4c880) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) fcntl$auto(0x8000000000000001, 0x26, 0x8) io_uring_setup$auto(0x1, 0x0) (async) fcntl$auto(0x8000000000000001, 0x26, 0x0) open(0x0, 0x0, 0x408) (async) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x8031ca, 0x9) mprotect$auto(0x0, 0x806121, 0x8) 337.2036ms ago: executing program 1 (id=5038): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r1, 0xc0104d08, r1) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f00000000c0)=@iter_create={r0, 0xb89f}, 0x1) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon31\x00', 0x42201, 0x0) pread64$auto(r2, &(0x7f0000000040)='/procaWlF\xb5\xec\xc0Yu\xed\xbd\xb5\"sC.\xbc\x00\x01\x00/k\x19\x98\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000001, 0x100) 0s ago: executing program 0 (id=5039): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x20, r1, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) socket(0x10, 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040cc4}, 0x4004450) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): 0x210 [ 931.592259][T13052] ? __pfx___x64_sys_futex+0x10/0x10 [ 931.592288][T13052] do_syscall_64+0x106/0xf80 [ 931.592307][T13052] ? clear_bhb_loop+0x40/0x90 [ 931.592325][T13052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.592341][T13052] RIP: 0033:0x7fbff119c799 [ 931.592355][T13052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.592370][T13052] RSP: 002b:00007fbff1fcc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 931.592385][T13052] RAX: ffffffffffffffda RBX: 00007fbff1415fa8 RCX: 00007fbff119c799 [ 931.592396][T13052] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbff1415fac [ 931.592406][T13052] RBP: 00007fbff1415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 931.592415][T13052] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 931.592424][T13052] R13: 00007fbff1416038 R14: 00007ffcaf03e890 R15: 00007ffcaf03e978 [ 931.592444][T13052] [ 932.028478][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.035158][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.174417][T13050] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 932.181989][T13050] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 932.198784][T13050] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 932.212717][T13050] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 932.497395][T13216] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4030'. [ 933.055425][T13242] FAULT_INJECTION: forcing a failure. [ 933.055425][T13242] name failslab, interval 1, probability 0, space 0, times 0 [ 933.154245][T13242] CPU: 0 UID: 0 PID: 13242 Comm: syz.3.4034 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 933.154278][T13242] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 933.154285][T13242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 933.154295][T13242] Call Trace: [ 933.154300][T13242] [ 933.154307][T13242] dump_stack_lvl+0x100/0x190 [ 933.154338][T13242] should_fail_ex.cold+0x5/0xa [ 933.154357][T13242] should_failslab+0xc2/0x120 [ 933.154374][T13242] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 933.154396][T13242] ? security_inode_alloc+0x3b/0x2c0 [ 933.154418][T13242] ? lockdep_init_map_type+0x5c/0x250 [ 933.154441][T13242] security_inode_alloc+0x3b/0x2c0 [ 933.154464][T13242] inode_init_always_gfp+0xced/0x1040 [ 933.154484][T13242] alloc_inode+0x8e/0x250 [ 933.154503][T13242] new_inode+0x22/0x1c0 [ 933.154524][T13242] hugetlbfs_get_inode+0x313/0x750 [ 933.154543][T13242] hugetlb_file_setup+0x3cc/0x5b0 [ 933.154562][T13242] newseg+0xabb/0xed0 [ 933.154581][T13242] ? __pfx_newseg+0x10/0x10 [ 933.154597][T13242] ? down_write+0x146/0x1f0 [ 933.154617][T13242] ? ksys_write+0x190/0x250 [ 933.154631][T13242] ? ksys_write+0x190/0x250 [ 933.154647][T13242] ipcget+0xee/0xf50 [ 933.154664][T13242] ? do_futex+0x192/0x350 [ 933.154683][T13242] ? __pfx_do_futex+0x10/0x10 [ 933.154705][T13242] ? __pfx_ipcget+0x10/0x10 [ 933.154728][T13242] ? __x64_sys_futex+0x34f/0x4d0 [ 933.154747][T13242] ? __x64_sys_futex+0x358/0x4d0 [ 933.154770][T13242] __x64_sys_shmget+0x13b/0x1b0 [ 933.154788][T13242] ? __pfx___x64_sys_shmget+0x10/0x10 [ 933.154811][T13242] do_syscall_64+0x106/0xf80 [ 933.154829][T13242] ? clear_bhb_loop+0x40/0x90 [ 933.154848][T13242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.154864][T13242] RIP: 0033:0x7fbff119c799 [ 933.154878][T13242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.154893][T13242] RSP: 002b:00007fbff1fcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 933.154909][T13242] RAX: ffffffffffffffda RBX: 00007fbff1415fa0 RCX: 00007fbff119c799 [ 933.154920][T13242] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 933.154929][T13242] RBP: 00007fbff1232c99 R08: 0000000000000000 R09: 0000000000000000 [ 933.154938][T13242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.154947][T13242] R13: 00007fbff1416038 R14: 00007fbff1415fa0 R15: 00007ffcaf03e978 [ 933.154968][T13242] [ 933.688257][ T2878] Bluetooth: hci4: command 0x0419 tx timeout [ 933.762687][T13576] FAULT_INJECTION: forcing a failure. [ 933.762687][T13576] name failslab, interval 1, probability 0, space 0, times 0 [ 933.825026][T13576] CPU: 0 UID: 0 PID: 13576 Comm: syz.3.4041 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 933.825058][T13576] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 933.825066][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 933.825076][T13576] Call Trace: [ 933.825082][T13576] [ 933.825088][T13576] dump_stack_lvl+0x100/0x190 [ 933.825116][T13576] should_fail_ex.cold+0x5/0xa [ 933.825135][T13576] ? snd_midi_event_new+0xa1/0x210 [ 933.825155][T13576] should_failslab+0xc2/0x120 [ 933.825172][T13576] __kmalloc_noprof+0xe0/0x850 [ 933.825198][T13576] snd_midi_event_new+0xa1/0x210 [ 933.825220][T13576] snd_virmidi_output_open+0x106/0x670 [ 933.825244][T13576] open_substream+0x480/0x9e0 [ 933.825262][T13576] rawmidi_open_priv+0x595/0x6f0 [ 933.825282][T13576] snd_rawmidi_open+0x4c9/0xba0 [ 933.825302][T13576] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 933.825320][T13576] ? __pfx_default_wake_function+0x10/0x10 [ 933.825338][T13576] ? kobject_get_unless_zero+0x156/0x200 [ 933.825361][T13576] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 933.825378][T13576] snd_open+0x22d/0x4c0 [ 933.825401][T13576] ? __pfx_snd_open+0x10/0x10 [ 933.825422][T13576] chrdev_open+0x234/0x6a0 [ 933.825439][T13576] ? __pfx_apparmor_file_open+0x10/0x10 [ 933.825460][T13576] ? __pfx_chrdev_open+0x10/0x10 [ 933.825477][T13576] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 933.825498][T13576] do_dentry_open+0x6d8/0x1660 [ 933.825513][T13576] ? __pfx_chrdev_open+0x10/0x10 [ 933.825533][T13576] vfs_open+0x82/0x3f0 [ 933.825565][T13576] path_openat+0x208c/0x31a0 [ 933.825589][T13576] ? __pfx_path_openat+0x10/0x10 [ 933.825612][T13576] do_file_open+0x20e/0x430 [ 933.825630][T13576] ? __pfx_do_file_open+0x10/0x10 [ 933.825660][T13576] ? alloc_fd+0x476/0x790 [ 933.825678][T13576] ? do_getname+0x191/0x390 [ 933.825698][T13576] do_sys_openat2+0x10d/0x1e0 [ 933.825717][T13576] ? __pfx_do_sys_openat2+0x10/0x10 [ 933.825738][T13576] ? __fget_files+0x21f/0x3d0 [ 933.825755][T13576] __x64_sys_openat+0x12d/0x210 [ 933.825775][T13576] ? __pfx___x64_sys_openat+0x10/0x10 [ 933.825802][T13576] do_syscall_64+0x106/0xf80 [ 933.825820][T13576] ? clear_bhb_loop+0x40/0x90 [ 933.825838][T13576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.825854][T13576] RIP: 0033:0x7fbff119c799 [ 933.825868][T13576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.825884][T13576] RSP: 002b:00007fbff1fcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 933.825900][T13576] RAX: ffffffffffffffda RBX: 00007fbff1415fa0 RCX: 00007fbff119c799 [ 933.825910][T13576] RDX: 0000000000002841 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 933.825921][T13576] RBP: 00007fbff1232c99 R08: 0000000000000000 R09: 0000000000000000 [ 933.825931][T13576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.825940][T13576] R13: 00007fbff1416038 R14: 00007fbff1415fa0 R15: 00007ffcaf03e978 [ 933.825961][T13576] [ 934.323526][T13615] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4047'. [ 934.465488][ T2878] Bluetooth: hci0: command 0x0c1a tx timeout [ 934.472990][ T2878] Bluetooth: hci1: command 0x0c1a tx timeout [ 934.479957][ T2878] Bluetooth: hci2: command 0x0c1a tx timeout [ 934.568424][T13634] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4046'. [ 934.949452][T13704] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4054'. [ 936.502376][T14341] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4070'. [ 936.647794][T14341] \: renamed from lo (while UP) [ 937.516239][T14849] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4078'. [ 938.187312][T15221] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd1f [ 938.243032][T15221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4083'. [ 938.289998][T15221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.321682][T15221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.393741][T15221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.427153][T15221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.762231][T15465] FAULT_INJECTION: forcing a failure. [ 938.762231][T15465] name failslab, interval 1, probability 0, space 0, times 0 [ 938.823697][T15465] CPU: 0 UID: 0 PID: 15465 Comm: syz.1.4085 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 938.823726][T15465] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 938.823733][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 938.823742][T15465] Call Trace: [ 938.823748][T15465] [ 938.823754][T15465] dump_stack_lvl+0x100/0x190 [ 938.823781][T15465] should_fail_ex.cold+0x5/0xa [ 938.823799][T15465] should_failslab+0xc2/0x120 [ 938.823816][T15465] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 938.823837][T15465] ? taskstats_exit+0x650/0xbd0 [ 938.823864][T15465] taskstats_exit+0x650/0xbd0 [ 938.823887][T15465] ? __pfx_acct_update_integrals+0x10/0x10 [ 938.823912][T15465] ? __pfx_taskstats_exit+0x10/0x10 [ 938.823935][T15465] ? rcu_read_lock_any_held+0x6a/0xa0 [ 938.823950][T15465] ? exit_signals+0x395/0xaf0 [ 938.823968][T15465] do_exit+0x659/0x2b60 [ 938.823990][T15465] ? __pfx_do_exit+0x10/0x10 [ 938.824009][T15465] ? do_raw_spin_lock+0x128/0x260 [ 938.824031][T15465] ? find_held_lock+0x2b/0x80 [ 938.824044][T15465] ? get_signal+0x7e0/0x21e0 [ 938.824061][T15465] do_group_exit+0xd5/0x2a0 [ 938.824082][T15465] get_signal+0x1ec7/0x21e0 [ 938.824104][T15465] ? __pfx_get_signal+0x10/0x10 [ 938.824121][T15465] ? do_futex+0x192/0x350 [ 938.824142][T15465] arch_do_signal_or_restart+0x91/0x770 [ 938.824160][T15465] ? __pfx_get_nodes+0x10/0x10 [ 938.824183][T15465] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 938.824207][T15465] ? __pfx___x64_sys_futex+0x10/0x10 [ 938.824230][T15465] exit_to_user_mode_loop+0x86/0x4a0 [ 938.824256][T15465] do_syscall_64+0x668/0xf80 [ 938.824274][T15465] ? clear_bhb_loop+0x40/0x90 [ 938.824293][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.824309][T15465] RIP: 0033:0x7efd14d9c799 [ 938.824322][T15465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.824337][T15465] RSP: 002b:00007efd15c950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 938.824352][T15465] RAX: fffffffffffffe00 RBX: 00007efd15015fa8 RCX: 00007efd14d9c799 [ 938.824363][T15465] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efd15015fa8 [ 938.824372][T15465] RBP: 00007efd15015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 938.824389][T15465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.824398][T15465] R13: 00007efd15016038 R14: 00007ffc14f0d850 R15: 00007ffc14f0d938 [ 938.824417][T15465] [ 939.487824][T15472] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4088'. [ 939.907469][T15582] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 940.273931][T15585] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 940.359292][T15585] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 940.396567][T15585] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 940.455417][T15585] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 940.869858][T16009] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4100'. [ 940.881415][T15795] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4095'. [ 940.947920][T16024] FAULT_INJECTION: forcing a failure. [ 940.947920][T16024] name failslab, interval 1, probability 0, space 0, times 0 [ 940.992245][T16024] CPU: 0 UID: 0 PID: 16024 Comm: syz.2.4101 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 940.992278][T16024] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 940.992288][T16024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 940.992298][T16024] Call Trace: [ 940.992304][T16024] [ 940.992311][T16024] dump_stack_lvl+0x100/0x190 [ 940.992339][T16024] should_fail_ex.cold+0x5/0xa [ 940.992358][T16024] should_failslab+0xc2/0x120 [ 940.992375][T16024] __kmalloc_cache_noprof+0x7a/0x6f0 [ 940.992395][T16024] ? sctp_add_bind_addr+0xae/0x3e0 [ 940.992415][T16024] sctp_add_bind_addr+0xae/0x3e0 [ 940.992433][T16024] sctp_copy_local_addr_list+0x349/0x550 [ 940.992456][T16024] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 940.992478][T16024] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 940.992498][T16024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 940.992524][T16024] sctp_bind_addr_copy+0xe0/0x530 [ 940.992546][T16024] sctp_connect_new_asoc+0x1c9/0x770 [ 940.992569][T16024] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 940.992593][T16024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 940.992621][T16024] __sctp_connect+0x3e7/0xc70 [ 940.992647][T16024] ? __pfx___sctp_connect+0x10/0x10 [ 940.992670][T16024] ? __pfx_sctp_inet_connect+0x10/0x10 [ 940.992692][T16024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 940.992718][T16024] ? __pfx_sctp_inet_connect+0x10/0x10 [ 940.992738][T16024] sctp_inet_connect+0x15f/0x220 [ 940.992761][T16024] __sys_connect_file+0x141/0x1a0 [ 940.992781][T16024] __sys_connect+0x141/0x170 [ 940.992796][T16024] ? __pfx___sys_connect+0x10/0x10 [ 940.992824][T16024] __x64_sys_connect+0x72/0xb0 [ 940.992839][T16024] ? lockdep_hardirqs_on+0x78/0x100 [ 940.992859][T16024] do_syscall_64+0x106/0xf80 [ 940.992877][T16024] ? clear_bhb_loop+0x40/0x90 [ 940.992896][T16024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.992912][T16024] RIP: 0033:0x7fe870d9c799 [ 940.992926][T16024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.992941][T16024] RSP: 002b:00007fe871c25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 940.992956][T16024] RAX: ffffffffffffffda RBX: 00007fe871015fa0 RCX: 00007fe870d9c799 [ 940.992966][T16024] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 940.992976][T16024] RBP: 00007fe870e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 940.992985][T16024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.992994][T16024] R13: 00007fe871016038 R14: 00007fe871015fa0 R15: 00007ffe9ebb41b8 [ 940.993014][T16024] [ 941.703640][T16119] netlink: 354 bytes leftover after parsing attributes in process `syz.3.4103'. [ 942.230011][T22276] Bluetooth: hci4: command 0x0419 tx timeout [ 942.390651][T22276] Bluetooth: hci1: command 0x0c1a tx timeout [ 942.396752][ T2878] Bluetooth: hci2: command 0x0c1a tx timeout [ 942.467430][T22276] Bluetooth: hci0: command 0x0c1a tx timeout [ 942.986538][T16388] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 943.017441][T16440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4111'. [ 943.026985][T16442] FAULT_INJECTION: forcing a failure. [ 943.026985][T16442] name failslab, interval 1, probability 0, space 0, times 0 [ 943.043173][T16388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 943.077497][T16440] bridge_slave_1: left allmulticast mode [ 943.083189][T16440] bridge_slave_1: left promiscuous mode [ 943.114845][T16442] CPU: 0 UID: 0 PID: 16442 Comm: syz.2.4112 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 943.114877][T16442] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 943.114884][T16442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 943.114895][T16442] Call Trace: [ 943.114900][T16442] [ 943.114907][T16442] dump_stack_lvl+0x100/0x190 [ 943.114936][T16442] should_fail_ex.cold+0x5/0xa [ 943.114955][T16442] ? tomoyo_encode2+0xfb/0x3c0 [ 943.114972][T16442] should_failslab+0xc2/0x120 [ 943.114989][T16442] __kmalloc_noprof+0xe0/0x850 [ 943.115023][T16442] tomoyo_encode2+0xfb/0x3c0 [ 943.115044][T16442] tomoyo_encode+0x29/0x50 [ 943.115061][T16442] tomoyo_realpath_from_path+0x18c/0x690 [ 943.115084][T16442] tomoyo_path_number_perm+0x23c/0x580 [ 943.115109][T16442] ? tomoyo_path_number_perm+0x22e/0x580 [ 943.115134][T16442] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 943.115156][T16442] ? futex_wait+0x125/0x380 [ 943.115195][T16442] ? find_held_lock+0x2b/0x80 [ 943.115209][T16442] ? __fget_files+0x215/0x3d0 [ 943.115222][T16442] ? hook_file_ioctl_common+0x146/0x410 [ 943.115249][T16442] ? __fget_files+0x21f/0x3d0 [ 943.115266][T16442] security_file_ioctl+0xd3/0x230 [ 943.115291][T16442] __x64_sys_ioctl+0xb7/0x210 [ 943.115314][T16442] do_syscall_64+0x106/0xf80 [ 943.115332][T16442] ? clear_bhb_loop+0x40/0x90 [ 943.115352][T16442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.115369][T16442] RIP: 0033:0x7fe870d9c799 [ 943.115383][T16442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.115398][T16442] RSP: 002b:00007fe871c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 943.115413][T16442] RAX: ffffffffffffffda RBX: 00007fe871015fa0 RCX: 00007fe870d9c799 [ 943.115423][T16442] RDX: 00002000000000c0 RSI: 0000000000008933 RDI: 0000000000000005 [ 943.115432][T16442] RBP: 00007fe870e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 943.115441][T16442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.115450][T16442] R13: 00007fe871016038 R14: 00007fe871015fa0 R15: 00007ffe9ebb41b8 [ 943.115470][T16442] [ 943.115484][T16442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 943.356104][T16388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 943.377867][T16440] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.418635][T16388] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 943.607218][T16440] bridge_slave_0: left allmulticast mode [ 943.612934][T16440] bridge_slave_0: left promiscuous mode [ 943.652080][T16440] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.205539][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4118'. [ 944.262857][T16664] FAULT_INJECTION: forcing a failure. [ 944.262857][T16664] name failslab, interval 1, probability 0, space 0, times 0 [ 944.304695][T16664] CPU: 0 UID: 0 PID: 16664 Comm: syz.2.4118 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 944.304729][T16664] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 944.304736][T16664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 944.304746][T16664] Call Trace: [ 944.304752][T16664] [ 944.304759][T16664] dump_stack_lvl+0x100/0x190 [ 944.304787][T16664] should_fail_ex.cold+0x5/0xa [ 944.304807][T16664] should_failslab+0xc2/0x120 [ 944.304824][T16664] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 944.304846][T16664] ? __kernfs_new_node+0xd2/0x960 [ 944.304871][T16664] __kernfs_new_node+0xd2/0x960 [ 944.304894][T16664] ? __pfx___kernfs_new_node+0x10/0x10 [ 944.304928][T16664] ? find_held_lock+0x2b/0x80 [ 944.304943][T16664] ? kernfs_root+0xee/0x2a0 [ 944.304963][T16664] ? kernfs_root+0xee/0x2a0 [ 944.304988][T16664] kernfs_new_node+0x11b/0x1a0 [ 944.305015][T16664] __kernfs_create_file+0x53/0x350 [ 944.305034][T16664] sysfs_add_file_mode_ns+0x207/0x3c0 [ 944.305059][T16664] internal_create_group+0x593/0xf40 [ 944.305085][T16664] ? __pfx_internal_create_group+0x10/0x10 [ 944.305109][T16664] ? kernfs_create_link+0x1bd/0x240 [ 944.305129][T16664] internal_create_groups+0x9d/0x150 [ 944.305152][T16664] device_add+0x7c8/0x1950 [ 944.305170][T16664] ? __pfx_device_add+0x10/0x10 [ 944.305185][T16664] ? lockdep_init_map_type+0x5c/0x250 [ 944.305204][T16664] ? __init_waitqueue_head+0xca/0x150 [ 944.305231][T16664] netdev_register_kobject+0x1a9/0x3d0 [ 944.305257][T16664] register_netdevice+0x12e0/0x2210 [ 944.305279][T16664] ? idr_alloc+0xdd/0x130 [ 944.305296][T16664] ? __pfx_register_netdevice+0x10/0x10 [ 944.305314][T16664] ? net_generic+0xea/0x2a0 [ 944.305337][T16664] ppp_dev_configure+0x986/0xcb0 [ 944.305359][T16664] ppp_ioctl+0x985/0x2800 [ 944.305378][T16664] ? find_held_lock+0x2b/0x80 [ 944.305393][T16664] ? __pfx_ppp_ioctl+0x10/0x10 [ 944.305414][T16664] ? __fget_files+0x21f/0x3d0 [ 944.305431][T16664] ? __pfx_ppp_ioctl+0x10/0x10 [ 944.305449][T16664] __x64_sys_ioctl+0x18e/0x210 [ 944.305472][T16664] do_syscall_64+0x106/0xf80 [ 944.305489][T16664] ? clear_bhb_loop+0x40/0x90 [ 944.305508][T16664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.305524][T16664] RIP: 0033:0x7fe870d9c799 [ 944.305539][T16664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.305554][T16664] RSP: 002b:00007fe871c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.305573][T16664] RAX: ffffffffffffffda RBX: 00007fe871015fa0 RCX: 00007fe870d9c799 [ 944.305584][T16664] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000007 [ 944.305594][T16664] RBP: 00007fe870e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 944.305604][T16664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.305613][T16664] R13: 00007fe871016038 R14: 00007fe871015fa0 R15: 00007ffe9ebb41b8 [ 944.305633][T16664] [ 944.950159][ T2878] Bluetooth: hci4: command 0x0419 tx timeout [ 945.106626][ T2878] Bluetooth: hci2: command 0x0c1a tx timeout [ 945.474927][T16874] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 945.485218][T16874] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 945.507323][ T2878] Bluetooth: hci0: command 0x0c1a tx timeout [ 945.513356][ T2878] Bluetooth: hci1: command 0x0c1a tx timeout [ 945.526775][T16874] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 945.556749][T16874] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 945.590112][T17180] FAULT_INJECTION: forcing a failure. [ 945.590112][T17180] name failslab, interval 1, probability 0, space 0, times 0 [ 945.646277][T17180] CPU: 0 UID: 0 PID: 17180 Comm: syz.0.4126 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 945.646309][T17180] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 945.646317][T17180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 945.646327][T17180] Call Trace: [ 945.646333][T17180] [ 945.646340][T17180] dump_stack_lvl+0x100/0x190 [ 945.646369][T17180] should_fail_ex.cold+0x5/0xa [ 945.646388][T17180] should_failslab+0xc2/0x120 [ 945.646404][T17180] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 945.646429][T17180] ? vm_area_alloc+0x1f/0x160 [ 945.646448][T17180] ? vma_merge_new_range+0x38b/0xa30 [ 945.646472][T17180] vm_area_alloc+0x1f/0x160 [ 945.646491][T17180] __mmap_region+0x10cc/0x29e0 [ 945.646516][T17180] ? __pfx___mmap_region+0x10/0x10 [ 945.646541][T17180] ? set_next_entity+0x11e/0x9c0 [ 945.646566][T17180] ? __lock_acquire+0x4a5/0x2630 [ 945.646584][T17180] ? find_held_lock+0x2b/0x80 [ 945.646606][T17180] ? find_held_lock+0x2b/0x80 [ 945.646620][T17180] ? finish_task_switch.isra.0+0x200/0xb80 [ 945.646636][T17180] ? finish_task_switch.isra.0+0x200/0xb80 [ 945.646659][T17180] ? trace_sched_exit_tp+0x13a/0x180 [ 945.646676][T17180] ? __schedule+0x1000/0x6120 [ 945.646718][T17180] ? rcu_is_watching+0x12/0xc0 [ 945.646739][T17180] ? cap_capable+0x107/0x460 [ 945.646770][T17180] mmap_region+0x180/0x3e0 [ 945.646796][T17180] do_mmap+0xc63/0x12f0 [ 945.646818][T17180] ? __pfx_do_mmap+0x10/0x10 [ 945.646835][T17180] ? __pfx_down_write_killable+0x10/0x10 [ 945.646860][T17180] vm_mmap_pgoff+0x29e/0x470 [ 945.646880][T17180] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 945.646898][T17180] ? do_futex+0x192/0x350 [ 945.646917][T17180] ? __pfx_do_futex+0x10/0x10 [ 945.646939][T17180] ksys_mmap_pgoff+0xe1/0x650 [ 945.646956][T17180] ? __x64_sys_futex+0x34f/0x4d0 [ 945.646974][T17180] ? __x64_sys_futex+0x358/0x4d0 [ 945.646993][T17180] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 945.647009][T17180] ? xfd_validate_state+0x129/0x190 [ 945.647034][T17180] __x64_sys_mmap+0x125/0x190 [ 945.647058][T17180] do_syscall_64+0x106/0xf80 [ 945.647075][T17180] ? clear_bhb_loop+0x40/0x90 [ 945.647094][T17180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.647110][T17180] RIP: 0033:0x7f5c3499c799 [ 945.647123][T17180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.647139][T17180] RSP: 002b:00007f5c358c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 945.647154][T17180] RAX: ffffffffffffffda RBX: 00007f5c34c15fa0 RCX: 00007f5c3499c799 [ 945.647164][T17180] RDX: 00000000000000db RSI: 0000000004020008 RDI: 0000000000000000 [ 945.647174][T17180] RBP: 00007f5c34a32c99 R08: 0000000000000401 R09: 0000000000008000 [ 945.647183][T17180] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 945.647193][T17180] R13: 00007f5c34c16038 R14: 00007f5c34c15fa0 R15: 00007ffc21705598 [ 945.647214][T17180] [ 946.915841][T17180] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 946.972427][T17180] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 946.983387][T17180] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 947.041109][T17180] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 947.108137][T17180] page dumped because: unmovable page [ 947.137814][T17180] page_owner info is not present (never set?) [ 947.161288][T17506] cougar: G6 mapped to space [ 947.204138][T17506] netlink: 'syz.3.4134': attribute type 11 has an invalid length. [ 947.507019][ T2878] Bluetooth: hci2: command 0x0c1a tx timeout [ 947.513078][T22276] Bluetooth: hci4: command 0x0419 tx timeout [ 947.587747][ T2878] Bluetooth: hci0: command 0x0c1a tx timeout [ 947.593836][T22276] Bluetooth: hci1: command 0x0c1a tx timeout [ 947.929192][T17827] FAULT_INJECTION: forcing a failure. [ 947.929192][T17827] name failslab, interval 1, probability 0, space 0, times 0 [ 947.955223][T17830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4142'. [ 947.975378][T17827] CPU: 0 UID: 0 PID: 17827 Comm: syz.3.4144 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 947.975410][T17827] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 947.975418][T17827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 947.975427][T17827] Call Trace: [ 947.975433][T17827] [ 947.975440][T17827] dump_stack_lvl+0x100/0x190 [ 947.975468][T17827] should_fail_ex.cold+0x5/0xa [ 947.975487][T17827] should_failslab+0xc2/0x120 [ 947.975504][T17827] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 947.975527][T17827] ? __kernfs_new_node+0xd2/0x960 [ 947.975552][T17827] __kernfs_new_node+0xd2/0x960 [ 947.975575][T17827] ? __pfx___kernfs_new_node+0x10/0x10 [ 947.975601][T17827] ? find_held_lock+0x2b/0x80 [ 947.975616][T17827] ? kernfs_root+0xee/0x2a0 [ 947.975635][T17827] ? kernfs_root+0xee/0x2a0 [ 947.975660][T17827] kernfs_new_node+0x11b/0x1a0 [ 947.975686][T17827] __kernfs_create_file+0x53/0x350 [ 947.975706][T17827] sysfs_add_file_mode_ns+0x207/0x3c0 [ 947.975737][T17827] internal_create_group+0x593/0xf40 [ 947.975765][T17827] ? __pfx_internal_create_group+0x10/0x10 [ 947.975790][T17827] ? kernfs_create_link+0x1bd/0x240 [ 947.975811][T17827] internal_create_groups+0x9d/0x150 [ 947.975835][T17827] device_add+0x7c8/0x1950 [ 947.975853][T17827] ? __pfx_device_add+0x10/0x10 [ 947.975868][T17827] ? lockdep_init_map_type+0x5c/0x250 [ 947.975888][T17827] ? __init_waitqueue_head+0xca/0x150 [ 947.975914][T17827] netdev_register_kobject+0x1a9/0x3d0 [ 947.975939][T17827] register_netdevice+0x12e0/0x2210 [ 947.975961][T17827] ? idr_alloc+0xdd/0x130 [ 947.975979][T17827] ? __pfx_register_netdevice+0x10/0x10 [ 947.975997][T17827] ? net_generic+0xea/0x2a0 [ 947.976020][T17827] ppp_dev_configure+0x986/0xcb0 [ 947.976042][T17827] ppp_ioctl+0x985/0x2800 [ 947.976061][T17827] ? find_held_lock+0x2b/0x80 [ 947.976075][T17827] ? __pfx_ppp_ioctl+0x10/0x10 [ 947.976097][T17827] ? __fget_files+0x21f/0x3d0 [ 947.976114][T17827] ? __pfx_ppp_ioctl+0x10/0x10 [ 947.976133][T17827] __x64_sys_ioctl+0x18e/0x210 [ 947.976156][T17827] do_syscall_64+0x106/0xf80 [ 947.976173][T17827] ? clear_bhb_loop+0x40/0x90 [ 947.976192][T17827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.976208][T17827] RIP: 0033:0x7fbff119c799 [ 947.976222][T17827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.976236][T17827] RSP: 002b:00007fbff1fcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.976252][T17827] RAX: ffffffffffffffda RBX: 00007fbff1415fa0 RCX: 00007fbff119c799 [ 947.976263][T17827] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 947.976272][T17827] RBP: 00007fbff1232c99 R08: 0000000000000000 R09: 0000000000000000 [ 947.976282][T17827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.976291][T17827] R13: 00007fbff1416038 R14: 00007fbff1415fa0 R15: 00007ffcaf03e978 [ 947.976312][T17827] [ 949.706391][T18491] netlink: 346 bytes leftover after parsing attributes in process `syz.0.4160'. [ 949.997060][T18695] FAULT_INJECTION: forcing a failure. [ 949.997060][T18695] name fail_futex, interval 1, probability 0, space 0, times 0 [ 950.054062][T18695] CPU: 0 UID: 0 PID: 18695 Comm: syz.0.4161 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 950.054093][T18695] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 950.054101][T18695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 950.054111][T18695] Call Trace: [ 950.054117][T18695] [ 950.054124][T18695] dump_stack_lvl+0x100/0x190 [ 950.054151][T18695] should_fail_ex.cold+0x5/0xa [ 950.054171][T18695] get_futex_key+0x1d2/0x1620 [ 950.054191][T18695] ? __pfx_get_futex_key+0x10/0x10 [ 950.054210][T18695] ? __pfx_kernel_waitid_prepare+0x10/0x10 [ 950.054237][T18695] futex_wake+0xea/0x530 [ 950.054257][T18695] ? kernel_waitid+0xca/0x190 [ 950.054277][T18695] ? __pfx_kernel_waitid+0x10/0x10 [ 950.054298][T18695] ? __pfx_futex_wake+0x10/0x10 [ 950.054321][T18695] ? putname+0xb1/0x110 [ 950.054336][T18695] ? kmem_cache_free+0x124/0x6a0 [ 950.054360][T18695] do_futex+0x32b/0x350 [ 950.054379][T18695] ? __pfx_do_futex+0x10/0x10 [ 950.054396][T18695] ? __pfx___do_sys_waitid+0x10/0x10 [ 950.054421][T18695] __x64_sys_futex+0x34f/0x4d0 [ 950.054443][T18695] ? __pfx___x64_sys_futex+0x10/0x10 [ 950.054469][T18695] do_syscall_64+0x106/0xf80 [ 950.054487][T18695] ? clear_bhb_loop+0x40/0x90 [ 950.054505][T18695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.054521][T18695] RIP: 0033:0x7f5c3499c799 [ 950.054535][T18695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.054550][T18695] RSP: 002b:00007f5c358c50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 950.054565][T18695] RAX: ffffffffffffffda RBX: 00007f5c34c15fa8 RCX: 00007f5c3499c799 [ 950.054583][T18695] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5c34c15fac [ 950.054595][T18695] RBP: 00007f5c34c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 950.054604][T18695] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 950.054614][T18695] R13: 00007f5c34c16038 R14: 00007ffc217054b0 R15: 00007ffc21705598 [ 950.054635][T18695] [ 950.614026][T18895] FAULT_INJECTION: forcing a failure. [ 950.614026][T18895] name failslab, interval 1, probability 0, space 0, times 0 [ 950.679726][T18895] CPU: 0 UID: 0 PID: 18895 Comm: syz.3.4167 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 950.679757][T18895] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 950.679765][T18895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 950.679774][T18895] Call Trace: [ 950.679780][T18895] [ 950.679786][T18895] dump_stack_lvl+0x100/0x190 [ 950.679815][T18895] should_fail_ex.cold+0x5/0xa [ 950.679834][T18895] should_failslab+0xc2/0x120 [ 950.679851][T18895] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 950.679872][T18895] ? key_alloc+0x3c5/0x1310 [ 950.679888][T18895] ? rcu_is_watching+0x12/0xc0 [ 950.679913][T18895] key_alloc+0x3c5/0x1310 [ 950.679935][T18895] ? __pfx_key_alloc+0x10/0x10 [ 950.679956][T18895] keyring_alloc+0x44/0xc0 [ 950.679975][T18895] lookup_user_key+0x9b8/0x1300 [ 950.680001][T18895] ? __pfx_lookup_user_key+0x10/0x10 [ 950.680027][T18895] ? find_held_lock+0x2b/0x80 [ 950.680042][T18895] ? setid_policy_lookup+0x10c/0x350 [ 950.680063][T18895] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 950.680091][T18895] ? bpf_lsm_capable+0x9/0x10 [ 950.680107][T18895] ? security_capable+0x80/0x260 [ 950.680129][T18895] keyctl_get_persistent+0x197/0x8b0 [ 950.680148][T18895] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 950.680168][T18895] ? __x64_sys_futex+0x34f/0x4d0 [ 950.680186][T18895] ? __x64_sys_futex+0x358/0x4d0 [ 950.680207][T18895] ? xfd_validate_state+0x129/0x190 [ 950.680232][T18895] __do_sys_keyctl+0x3b2/0x5a0 [ 950.680255][T18895] do_syscall_64+0x106/0xf80 [ 950.680273][T18895] ? clear_bhb_loop+0x40/0x90 [ 950.680291][T18895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.680306][T18895] RIP: 0033:0x7fbff119c799 [ 950.680320][T18895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.680335][T18895] RSP: 002b:00007fbff1fab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 950.680351][T18895] RAX: ffffffffffffffda RBX: 00007fbff1416090 RCX: 00007fbff119c799 [ 950.680361][T18895] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 950.680371][T18895] RBP: 00007fbff1232c99 R08: 000000000000000c R09: 0000000000000000 [ 950.680380][T18895] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 950.680389][T18895] R13: 00007fbff1416128 R14: 00007fbff1416090 R15: 00007ffcaf03e978 [ 950.680409][T18895] [ 951.111324][T19119] futex_wake_op: syz.3.4170 tries to shift op by -2048; fix this program [ 951.119976][T19119] futex_wake_op: syz.3.4170 tries to shift op by -2048; fix this program [ 951.130628][T19119] 0x000000000001-0x000000020000 : "" [ 951.178566][T19119] ftl_cs: FTL header corrupt! [ 951.856097][T19232] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4172'. [ 952.020130][T19238] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 952.675268][T19461] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 952.724881][T19461] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 952.746213][T19458] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 952.784892][T19458] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 952.836329][T19466] FAULT_INJECTION: forcing a failure. [ 952.836329][T19466] name failslab, interval 1, probability 0, space 0, times 0 [ 952.876279][T19466] CPU: 0 UID: 0 PID: 19466 Comm: syz.2.4190 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 952.876311][T19466] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 952.876318][T19466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 952.876327][T19466] Call Trace: [ 952.876333][T19466] [ 952.876340][T19466] dump_stack_lvl+0x100/0x190 [ 952.876374][T19466] should_fail_ex.cold+0x5/0xa [ 952.876395][T19466] should_failslab+0xc2/0x120 [ 952.876411][T19466] __kmalloc_cache_noprof+0x7a/0x6f0 [ 952.876434][T19466] ? fscontext_alloc_log+0x4a/0x1b0 [ 952.876454][T19466] ? ext4_init_fs_context+0xcc/0x110 [ 952.876473][T19466] fscontext_alloc_log+0x4a/0x1b0 [ 952.876493][T19466] __x64_sys_fsopen+0x159/0x220 [ 952.876513][T19466] do_syscall_64+0x106/0xf80 [ 952.876531][T19466] ? clear_bhb_loop+0x40/0x90 [ 952.876550][T19466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.876566][T19466] RIP: 0033:0x7fe870d9c799 [ 952.876580][T19466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.876596][T19466] RSP: 002b:00007fe871c25028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 952.876612][T19466] RAX: ffffffffffffffda RBX: 00007fe871015fa0 RCX: 00007fe870d9c799 [ 952.876622][T19466] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 952.876631][T19466] RBP: 00007fe870e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 952.876640][T19466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.876649][T19466] R13: 00007fe871016038 R14: 00007fe871015fa0 R15: 00007ffe9ebb41b8 [ 952.876671][T19466] [ 953.215691][T19674] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4185'. [ 954.043580][T19998] QAT: Device 0 not found [ 954.739583][T20350] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 954.994819][T20378] zswap: compressor not available [ 955.172571][T20419] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 955.551282][T20662] futex_wake_op: syz.0.4205 tries to shift op by -2048; fix this program [ 955.634846][T20662] futex_wake_op: syz.0.4205 tries to shift op by -2048; fix this program [ 956.191576][T20751] FAULT_INJECTION: forcing a failure. [ 956.191576][T20751] name failslab, interval 1, probability 0, space 0, times 0 [ 956.259970][T20751] CPU: 0 UID: 0 PID: 20751 Comm: syz.0.4210 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 956.260006][T20751] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 956.260018][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 956.260027][T20751] Call Trace: [ 956.260035][T20751] [ 956.260045][T20751] dump_stack_lvl+0x100/0x190 [ 956.260075][T20751] should_fail_ex.cold+0x5/0xa [ 956.260097][T20751] should_failslab+0xc2/0x120 [ 956.260264][T20751] __kmalloc_cache_noprof+0x7a/0x6f0 [ 956.260296][T20751] ? fscontext_alloc_log+0x4a/0x1b0 [ 956.260317][T20751] ? ext4_init_fs_context+0xcc/0x110 [ 956.260370][T20751] fscontext_alloc_log+0x4a/0x1b0 [ 956.260393][T20751] __x64_sys_fsopen+0x159/0x220 [ 956.260416][T20751] do_syscall_64+0x106/0xf80 [ 956.260436][T20751] ? clear_bhb_loop+0x40/0x90 [ 956.260460][T20751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.260487][T20751] RIP: 0033:0x7f5c3499c799 [ 956.260504][T20751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.260520][T20751] RSP: 002b:00007f5c358c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 956.260536][T20751] RAX: ffffffffffffffda RBX: 00007f5c34c15fa0 RCX: 00007f5c3499c799 [ 956.260548][T20751] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 956.260558][T20751] RBP: 00007f5c34a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 956.260569][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.260580][T20751] R13: 00007f5c34c16038 R14: 00007f5c34c15fa0 R15: 00007ffc21705598 [ 956.260601][T20751] [ 957.023008][T20751] input: jJǸ-9%vJ86 as /devices/virtual/input/input49 [ 959.299619][T21719] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4232'. [ 960.190500][T21993] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 960.506377][T22055] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 962.280507][T22810] FAULT_INJECTION: forcing a failure. [ 962.280507][T22810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.342847][T22810] CPU: 0 UID: 0 PID: 22810 Comm: syz.2.4260 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 962.342879][T22810] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 962.342886][T22810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 962.342896][T22810] Call Trace: [ 962.342902][T22810] [ 962.342909][T22810] dump_stack_lvl+0x100/0x190 [ 962.342936][T22810] should_fail_ex.cold+0x5/0xa [ 962.342955][T22810] strncpy_from_user+0x3b/0x2d0 [ 962.342981][T22810] do_getname+0x78/0x390 [ 962.343003][T22810] do_sys_openat2+0xc5/0x1e0 [ 962.343022][T22810] ? __pfx_do_sys_openat2+0x10/0x10 [ 962.343044][T22810] ? find_held_lock+0x2b/0x80 [ 962.343063][T22810] __x64_sys_openat+0x12d/0x210 [ 962.343084][T22810] ? __pfx___x64_sys_openat+0x10/0x10 [ 962.343110][T22810] do_syscall_64+0x106/0xf80 [ 962.343129][T22810] ? clear_bhb_loop+0x40/0x90 [ 962.343147][T22810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.343163][T22810] RIP: 0033:0x7fe870d9c799 [ 962.343177][T22810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.343192][T22810] RSP: 002b:00007fe871c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 962.343207][T22810] RAX: ffffffffffffffda RBX: 00007fe871015fa0 RCX: 00007fe870d9c799 [ 962.343218][T22810] RDX: 0000000000022641 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 962.343227][T22810] RBP: 00007fe870e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 962.343236][T22810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.343245][T22810] R13: 00007fe871016038 R14: 00007fe871015fa0 R15: 00007ffe9ebb41b8 [ 962.343265][T22810] [ 962.786186][T22822] ptrace attach of "./syz-executor exec"[28851] was attempted by ""[22822] [ 962.974889][T22856] FAULT_INJECTION: forcing a failure. [ 962.974889][T22856] name failslab, interval 1, probability 0, space 0, times 0 [ 963.013459][T22822] zswap: compressor  not available [ 963.045400][T22856] CPU: 0 UID: 0 PID: 22856 Comm: syz.0.4266 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 963.045432][T22856] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 963.045439][T22856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 963.045450][T22856] Call Trace: [ 963.045455][T22856] [ 963.045462][T22856] dump_stack_lvl+0x100/0x190 [ 963.045492][T22856] should_fail_ex.cold+0x5/0xa [ 963.045511][T22856] should_failslab+0xc2/0x120 [ 963.045528][T22856] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 963.045552][T22856] ? alloc_inode+0x183/0x250 [ 963.045571][T22856] ? stashed_dentry_get+0x10a/0x2c0 [ 963.045587][T22856] ? stashed_dentry_get+0x10a/0x2c0 [ 963.045606][T22856] alloc_inode+0x183/0x250 [ 963.045625][T22856] path_from_stashed+0x25b/0x750 [ 963.045646][T22856] pidfs_alloc_file+0xf8/0x290 [ 963.045669][T22856] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 963.045704][T22856] pidfd_prepare+0x123/0x200 [ 963.045724][T22856] __x64_sys_pidfd_open+0x105/0x1a0 [ 963.045745][T22856] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 963.045770][T22856] do_syscall_64+0x106/0xf80 [ 963.045788][T22856] ? clear_bhb_loop+0x40/0x90 [ 963.045807][T22856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.045822][T22856] RIP: 0033:0x7f5c3499c799 [ 963.045836][T22856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.045851][T22856] RSP: 002b:00007f5c358c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 963.045866][T22856] RAX: ffffffffffffffda RBX: 00007f5c34c15fa0 RCX: 00007f5c3499c799 [ 963.045876][T22856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 963.045885][T22856] RBP: 00007f5c34a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 963.045894][T22856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.045903][T22856] R13: 00007f5c34c16038 R14: 00007f5c34c15fa0 R15: 00007ffc21705598 [ 963.045922][T22856] [ 963.663495][T23014] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4268'. [ 964.492913][T23492] FAULT_INJECTION: forcing a failure. [ 964.492913][T23492] name failslab, interval 1, probability 0, space 0, times 0 [ 964.541613][T23492] CPU: 0 UID: 0 PID: 23492 Comm: syz.1.4281 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 964.541645][T23492] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 964.541652][T23492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 964.541663][T23492] Call Trace: [ 964.541669][T23492] [ 964.541676][T23492] dump_stack_lvl+0x100/0x190 [ 964.541704][T23492] should_fail_ex.cold+0x5/0xa [ 964.541724][T23492] should_failslab+0xc2/0x120 [ 964.541741][T23492] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 964.541763][T23492] ? __kernfs_new_node+0xd2/0x960 [ 964.541788][T23492] __kernfs_new_node+0xd2/0x960 [ 964.541811][T23492] ? __pfx___kernfs_new_node+0x10/0x10 [ 964.541836][T23492] ? find_held_lock+0x2b/0x80 [ 964.541851][T23492] ? kernfs_root+0xee/0x2a0 [ 964.541870][T23492] ? kernfs_root+0xee/0x2a0 [ 964.541895][T23492] kernfs_new_node+0x11b/0x1a0 [ 964.541922][T23492] __kernfs_create_file+0x53/0x350 [ 964.541941][T23492] sysfs_add_file_mode_ns+0x207/0x3c0 [ 964.541966][T23492] internal_create_group+0x593/0xf40 [ 964.541991][T23492] ? __pfx_internal_create_group+0x10/0x10 [ 964.542016][T23492] ? kernfs_create_link+0x1bd/0x240 [ 964.542036][T23492] internal_create_groups+0x9d/0x150 [ 964.542059][T23492] device_add+0x7c8/0x1950 [ 964.542077][T23492] ? __pfx_device_add+0x10/0x10 [ 964.542092][T23492] ? lockdep_init_map_type+0x5c/0x250 [ 964.542111][T23492] ? __init_waitqueue_head+0xca/0x150 [ 964.542137][T23492] netdev_register_kobject+0x1a9/0x3d0 [ 964.542162][T23492] register_netdevice+0x12e0/0x2210 [ 964.542184][T23492] ? idr_alloc+0xdd/0x130 [ 964.542201][T23492] ? __pfx_register_netdevice+0x10/0x10 [ 964.542220][T23492] ? net_generic+0xea/0x2a0 [ 964.542242][T23492] ppp_dev_configure+0x986/0xcb0 [ 964.542264][T23492] ppp_ioctl+0x985/0x2800 [ 964.542283][T23492] ? find_held_lock+0x2b/0x80 [ 964.542297][T23492] ? __pfx_ppp_ioctl+0x10/0x10 [ 964.542318][T23492] ? __fget_files+0x21f/0x3d0 [ 964.542335][T23492] ? __pfx_ppp_ioctl+0x10/0x10 [ 964.542354][T23492] __x64_sys_ioctl+0x18e/0x210 [ 964.542376][T23492] do_syscall_64+0x106/0xf80 [ 964.542394][T23492] ? clear_bhb_loop+0x40/0x90 [ 964.542413][T23492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.542428][T23492] RIP: 0033:0x7efd14d9c799 [ 964.542442][T23492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.542458][T23492] RSP: 002b:00007efd15c95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 964.542473][T23492] RAX: ffffffffffffffda RBX: 00007efd15015fa0 RCX: 00007efd14d9c799 [ 964.542483][T23492] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000006 [ 964.542493][T23492] RBP: 00007efd14e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 964.542503][T23492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.542513][T23492] R13: 00007efd15016038 R14: 00007efd15015fa0 R15: 00007ffc14f0d938 [ 964.542542][T23492] [ 965.756888][T23687] can0: slcan on ttyS2. [ 965.860372][T23706] can0 (unregistered): slcan off ttyS2. [ 966.215673][T23045] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 967.851656][T24329] futex_wake_op: syz.3.4301 tries to shift op by -2048; fix this program [ 967.901542][T24329] futex_wake_op: syz.3.4301 tries to shift op by -2048; fix this program [ 968.305061][T24444] FAULT_INJECTION: forcing a failure. [ 968.305061][T24444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 968.392291][T24444] CPU: 0 UID: 0 PID: 24444 Comm: syz.2.4306 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 968.392331][T24444] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 968.392339][T24444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 968.392349][T24444] Call Trace: [ 968.392355][T24444] [ 968.392362][T24444] dump_stack_lvl+0x100/0x190 [ 968.392390][T24444] should_fail_ex.cold+0x5/0xa [ 968.392407][T24444] ? prepare_alloc_pages+0x16d/0x5f0 [ 968.392427][T24444] should_fail_alloc_page+0xeb/0x140 [ 968.392445][T24444] prepare_alloc_pages+0x1f0/0x5f0 [ 968.392466][T24444] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 968.392490][T24444] ? stack_trace_save+0x8e/0xc0 [ 968.392505][T24444] ? __pfx_stack_trace_save+0x10/0x10 [ 968.392521][T24444] ? stack_depot_save_flags+0x27/0x9d0 [ 968.392541][T24444] ? kasan_save_stack+0x3f/0x50 [ 968.392562][T24444] ? kasan_save_stack+0x30/0x50 [ 968.392582][T24444] ? kasan_save_track+0x14/0x30 [ 968.392604][T24444] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 968.392625][T24444] ? __handle_mm_fault+0xa99/0x2b60 [ 968.392644][T24444] ? handle_mm_fault+0x36d/0xa20 [ 968.392663][T24444] ? do_user_addr_fault+0x74c/0x12f0 [ 968.392685][T24444] ? asm_exc_page_fault+0x26/0x30 [ 968.392700][T24444] ? do_getname+0x78/0x390 [ 968.392718][T24444] ? do_sys_openat2+0xc5/0x1e0 [ 968.392735][T24444] ? __x64_sys_open+0xfe/0x1d0 [ 968.392753][T24444] ? do_syscall_64+0x106/0xf80 [ 968.392770][T24444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.392798][T24444] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 968.392824][T24444] ? policy_nodemask+0xed/0x4f0 [ 968.392841][T24444] alloc_pages_mpol+0x1fb/0x550 [ 968.392858][T24444] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 968.392880][T24444] alloc_pages_noprof+0x131/0x390 [ 968.392897][T24444] pte_alloc_one+0x1c/0x3d0 [ 968.392913][T24444] do_fault+0x88e/0x1990 [ 968.392930][T24444] ? __pmd_alloc+0x3fb/0x950 [ 968.392948][T24444] __handle_mm_fault+0x180f/0x2b60 [ 968.392971][T24444] ? mt_find+0x45e/0x8e0 [ 968.392991][T24444] ? __pfx___handle_mm_fault+0x10/0x10 [ 968.393009][T24444] ? __pfx_mt_find+0x10/0x10 [ 968.393038][T24444] ? find_vma+0xbf/0x140 [ 968.393053][T24444] ? __pfx_find_vma+0x10/0x10 [ 968.393069][T24444] handle_mm_fault+0x36d/0xa20 [ 968.393093][T24444] do_user_addr_fault+0x74c/0x12f0 [ 968.393121][T24444] exc_page_fault+0x6f/0xd0 [ 968.393140][T24444] asm_exc_page_fault+0x26/0x30 [ 968.393155][T24444] RIP: 0010:strncpy_from_user+0xfd/0x2d0 [ 968.393179][T24444] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 52 14 e0 fc 48 83 fd 07 0f 86 bb 00 00 00 e8 63 19 e0 fc <4d> 8b 24 1e e8 5a 19 e0 fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff [ 968.393194][T24444] RSP: 0018:ffffc90006a4fd08 EFLAGS: 00050283 [ 968.393207][T24444] RAX: 0000000000000034 RBX: 0000000000000000 RCX: ffffc900058b9000 [ 968.393217][T24444] RDX: 0000000000080000 RSI: ffffffff8527fc1d RDI: ffff8880411f0000 [ 968.393227][T24444] RBP: 00000000000000a8 R08: 0000000000000007 R09: 0000000000000007 [ 968.393236][T24444] R10: 00000000000000a8 R11: 0000000000000000 R12: 0000000000000000 [ 968.393245][T24444] R13: ffff8880a7de4518 R14: 0000000000000000 R15: 00000000000000a8 [ 968.393261][T24444] ? strncpy_from_user+0xfd/0x2d0 [ 968.393286][T24444] ? strncpy_from_user+0xfd/0x2d0 [ 968.393318][T24444] do_getname+0x78/0x390 [ 968.393339][T24444] do_sys_openat2+0xc5/0x1e0 [ 968.393359][T24444] ? __pfx_do_sys_openat2+0x10/0x10 [ 968.393387][T24444] __x64_sys_open+0xfe/0x1d0 [ 968.393407][T24444] ? __pfx___x64_sys_open+0x10/0x10 [ 968.393435][T24444] do_syscall_64+0x106/0xf80 [ 968.393452][T24444] ? clear_bhb_loop+0x40/0x90 [ 968.393471][T24444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.393486][T24444] RIP: 0033:0x7fe870d9c799 [ 968.393499][T24444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.393514][T24444] RSP: 002b:00007fe871c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 968.393527][T24444] RAX: ffffffffffffffda RBX: 00007fe871015fa0 RCX: 00007fe870d9c799 [ 968.393537][T24444] RDX: 0000000000000084 RSI: 00000000000221c2 RDI: 0000000000000000 [ 968.393547][T24444] RBP: 00007fe870e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 968.393556][T24444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.393565][T24444] R13: 00007fe871016038 R14: 00007fe871015fa0 R15: 00007ffe9ebb41b8 [ 968.393585][T24444] [ 971.331046][T25590] can0: slcan on ttyS2. [ 971.456763][T25431] can0 (unregistered): slcan off ttyS2. [ 971.736912][T25641] ICMPv6: process `syz.2.4339' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 971.759872][T25643] netlink: 346 bytes leftover after parsing attributes in process `syz.1.4338'. [ 972.282899][T25764] netlink: 346 bytes leftover after parsing attributes in process `syz.3.4344'. [ 973.546083][T26291] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4351'. [ 974.497077][T26628] Unable to find swap-space signature [ 976.243279][T27667] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4382'. [ 979.063769][T28370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4394'. [ 980.747449][T29171] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4412'. [ 981.647501][T29902] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4425'. [ 982.177175][T22276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 982.188273][T22276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 982.207196][T22276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 982.214888][T22276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 982.222620][T22276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 982.610875][T30114] chnl_net:caif_netlink_parms(): no params data found [ 982.825438][T30114] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.856556][T30114] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.895404][T30114] bridge_slave_0: entered allmulticast mode [ 982.923461][T30114] bridge_slave_0: entered promiscuous mode [ 982.951771][T30114] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.990617][T30114] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.012196][T30114] bridge_slave_1: entered allmulticast mode [ 983.052591][T30114] bridge_slave_1: entered promiscuous mode [ 983.165620][T30114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.222308][T30114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.332199][T30123] zswap: compressor not available [ 983.348894][T30114] team0: Port device team_slave_0 added [ 983.356406][T30114] team0: Port device team_slave_1 added [ 983.461620][T30114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.490015][T30114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.579421][T30230] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4439'. [ 983.596716][T30114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.662380][T30114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.702087][T30114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.797254][T30114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.825575][T30343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4432'. [ 983.844508][T30343] unsupported nlmsg_type 40 [ 983.967221][T30114] hsr_slave_0: entered promiscuous mode [ 983.989050][T30114] hsr_slave_1: entered promiscuous mode [ 984.077562][T18220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.229297][T18220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.307786][T22276] Bluetooth: hci3: command tx timeout [ 984.386022][T18220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.478582][T18220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.105266][T18220] bridge_slave_1: left allmulticast mode [ 985.125171][T18220] bridge_slave_1: left promiscuous mode [ 985.172288][T18220] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.249292][T30560] cgroup: fork rejected by pids controller in /syz0 [ 985.287303][T18220] bridge_slave_0: left allmulticast mode [ 985.313358][T18220] bridge_slave_0: left promiscuous mode [ 985.343841][T18220] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.062781][T18220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.224661][T18220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.251989][T18220] bond0 (unregistering): Released all slaves [ 986.388560][T22276] Bluetooth: hci3: command tx timeout [ 987.340044][T30114] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 987.440952][T30114] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 987.460227][T30114] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 987.536928][T30114] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 987.580879][T31213] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4452'. [ 987.919597][T31230] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4460'. [ 988.296211][T30114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.349225][T18220] hsr_slave_0: left promiscuous mode [ 988.370854][T18220] hsr_slave_1: left promiscuous mode [ 988.396011][T18220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.427589][T18220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.455196][T18220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 988.469054][T22276] Bluetooth: hci3: command tx timeout [ 988.483609][T18220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.508938][T18220] veth1_macvtap: left promiscuous mode [ 988.517927][T31564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4459'. [ 988.527239][T18220] veth0_macvtap: left promiscuous mode [ 988.534217][T18220] veth1_vlan: left promiscuous mode [ 988.564981][T18220] veth0_vlan: left promiscuous mode [ 989.049832][T18220] team0 (unregistering): Port device team_slave_1 removed [ 989.068577][T18220] team0 (unregistering): Port device team_slave_0 removed [ 989.292553][T30114] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.337547][ T4993] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.344656][ T4993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.431368][ T4993] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.438562][ T4993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.713694][T31893] FAULT_INJECTION: forcing a failure. [ 989.713694][T31893] name failslab, interval 1, probability 0, space 0, times 0 [ 989.778231][T31893] CPU: 0 UID: 0 PID: 31893 Comm: syz.3.4469 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 989.778262][T31893] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 989.778269][T31893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 989.778279][T31893] Call Trace: [ 989.778285][T31893] [ 989.778291][T31893] dump_stack_lvl+0x100/0x190 [ 989.778320][T31893] should_fail_ex.cold+0x5/0xa [ 989.778340][T31893] should_failslab+0xc2/0x120 [ 989.778357][T31893] __kmalloc_cache_noprof+0x7a/0x6f0 [ 989.778377][T31893] ? ptp_open+0xe4/0x550 [ 989.778401][T31893] ptp_open+0xe4/0x550 [ 989.778423][T31893] ? __pfx_ptp_open+0x10/0x10 [ 989.778448][T31893] ? __pfx_ptp_open+0x10/0x10 [ 989.778467][T31893] posix_clock_open+0x17b/0x290 [ 989.778485][T31893] ? __pfx_posix_clock_open+0x10/0x10 [ 989.778502][T31893] chrdev_open+0x234/0x6a0 [ 989.778517][T31893] ? __pfx_apparmor_file_open+0x10/0x10 [ 989.778538][T31893] ? __pfx_chrdev_open+0x10/0x10 [ 989.778555][T31893] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 989.778576][T31893] do_dentry_open+0x6d8/0x1660 [ 989.778591][T31893] ? __pfx_chrdev_open+0x10/0x10 [ 989.778612][T31893] vfs_open+0x82/0x3f0 [ 989.778634][T31893] path_openat+0x208c/0x31a0 [ 989.778656][T31893] ? __pfx_path_openat+0x10/0x10 [ 989.778678][T31893] do_file_open+0x20e/0x430 [ 989.778695][T31893] ? __pfx_do_file_open+0x10/0x10 [ 989.778725][T31893] ? alloc_fd+0x476/0x790 [ 989.778741][T31893] ? do_getname+0x191/0x390 [ 989.778761][T31893] do_sys_openat2+0x10d/0x1e0 [ 989.778781][T31893] ? __pfx_do_sys_openat2+0x10/0x10 [ 989.778810][T31893] ? __fget_files+0x21f/0x3d0 [ 989.778829][T31893] __x64_sys_openat+0x12d/0x210 [ 989.778850][T31893] ? __pfx___x64_sys_openat+0x10/0x10 [ 989.778878][T31893] do_syscall_64+0x106/0xf80 [ 989.778896][T31893] ? clear_bhb_loop+0x40/0x90 [ 989.778915][T31893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.778931][T31893] RIP: 0033:0x7fbff119c799 [ 989.778946][T31893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.778961][T31893] RSP: 002b:00007fbff1fcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 989.778976][T31893] RAX: ffffffffffffffda RBX: 00007fbff1415fa0 RCX: 00007fbff119c799 [ 989.778987][T31893] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 989.778997][T31893] RBP: 00007fbff1232c99 R08: 0000000000000000 R09: 0000000000000000 [ 989.779006][T31893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.779015][T31893] R13: 00007fbff1416038 R14: 00007fbff1415fa0 R15: 00007ffcaf03e978 [ 989.779036][T31893] [ 990.200988][T30114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.227238][T30114] veth0_vlan: entered promiscuous mode [ 990.237084][T30114] veth1_vlan: entered promiscuous mode [ 990.256254][T30114] veth0_macvtap: entered promiscuous mode [ 990.265057][T30114] veth1_macvtap: entered promiscuous mode [ 990.278899][T30114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.289100][T30114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 990.372888][ T4979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.399724][ T4979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.426418][T18220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.438706][T18220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.526065][T32520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.546975][T22276] Bluetooth: hci3: command tx timeout [ 990.605387][T32520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.651314][T32520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.714018][T32009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4470'. [ 990.754163][T32520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.887318][T32007] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4428'. [ 991.020686][T32115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4471'. [ 992.869051][T32582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4488'. [ 993.272704][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.279259][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.120146][ T757] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4500'. [ 996.106060][ T1307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4508'. [ 996.930803][ T1445] FAULT_INJECTION: forcing a failure. [ 996.930803][ T1445] name failslab, interval 1, probability 0, space 0, times 0 [ 997.013837][ T1445] CPU: 0 UID: 0 PID: 1445 Comm: syz.1.4510 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 997.013870][ T1445] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 997.013877][ T1445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 997.013887][ T1445] Call Trace: [ 997.013893][ T1445] [ 997.013900][ T1445] dump_stack_lvl+0x100/0x190 [ 997.013927][ T1445] should_fail_ex.cold+0x5/0xa [ 997.013947][ T1445] should_failslab+0xc2/0x120 [ 997.013964][ T1445] __kmalloc_cache_noprof+0x7a/0x6f0 [ 997.013983][ T1445] ? ptp_open+0xe4/0x550 [ 997.014006][ T1445] ptp_open+0xe4/0x550 [ 997.014028][ T1445] ? __pfx_ptp_open+0x10/0x10 [ 997.014054][ T1445] ? __pfx_ptp_open+0x10/0x10 [ 997.014074][ T1445] posix_clock_open+0x17b/0x290 [ 997.014093][ T1445] ? __pfx_posix_clock_open+0x10/0x10 [ 997.014109][ T1445] chrdev_open+0x234/0x6a0 [ 997.014124][ T1445] ? __pfx_apparmor_file_open+0x10/0x10 [ 997.014147][ T1445] ? __pfx_chrdev_open+0x10/0x10 [ 997.014163][ T1445] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 997.014183][ T1445] do_dentry_open+0x6d8/0x1660 [ 997.014199][ T1445] ? __pfx_chrdev_open+0x10/0x10 [ 997.014219][ T1445] vfs_open+0x82/0x3f0 [ 997.014240][ T1445] path_openat+0x208c/0x31a0 [ 997.014262][ T1445] ? __pfx_path_openat+0x10/0x10 [ 997.014285][ T1445] do_file_open+0x20e/0x430 [ 997.014310][ T1445] ? __pfx_do_file_open+0x10/0x10 [ 997.014341][ T1445] ? alloc_fd+0x476/0x790 [ 997.014358][ T1445] ? do_getname+0x191/0x390 [ 997.014378][ T1445] do_sys_openat2+0x10d/0x1e0 [ 997.014398][ T1445] ? __pfx_do_sys_openat2+0x10/0x10 [ 997.014419][ T1445] ? __fget_files+0x21f/0x3d0 [ 997.014437][ T1445] __x64_sys_openat+0x12d/0x210 [ 997.014457][ T1445] ? __pfx___x64_sys_openat+0x10/0x10 [ 997.014484][ T1445] do_syscall_64+0x106/0xf80 [ 997.014502][ T1445] ? clear_bhb_loop+0x40/0x90 [ 997.014521][ T1445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.014537][ T1445] RIP: 0033:0x7efd14d9c799 [ 997.014551][ T1445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.014566][ T1445] RSP: 002b:00007efd15c95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 997.014581][ T1445] RAX: ffffffffffffffda RBX: 00007efd15015fa0 RCX: 00007efd14d9c799 [ 997.014592][ T1445] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 997.014601][ T1445] RBP: 00007efd14e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 997.014611][ T1445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.014620][ T1445] R13: 00007efd15016038 R14: 00007efd15015fa0 R15: 00007ffc14f0d938 [ 997.014640][ T1445] [ 997.324456][ T1452] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4511'. [ 998.803030][ T1772] zswap: compressor not available [ 1000.210537][ T2032] can: request_module (can-proto-0) failed. [ 1000.746030][ T2320] FAULT_INJECTION: forcing a failure. [ 1000.746030][ T2320] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.851010][ T2320] CPU: 0 UID: 0 PID: 2320 Comm: syz.2.4525 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1000.851051][ T2320] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1000.851059][ T2320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1000.851069][ T2320] Call Trace: [ 1000.851075][ T2320] [ 1000.851082][ T2320] dump_stack_lvl+0x100/0x190 [ 1000.851110][ T2320] should_fail_ex.cold+0x5/0xa [ 1000.851130][ T2320] should_failslab+0xc2/0x120 [ 1000.851146][ T2320] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1000.851165][ T2320] ? ptp_open+0xe4/0x550 [ 1000.851189][ T2320] ptp_open+0xe4/0x550 [ 1000.851210][ T2320] ? __pfx_ptp_open+0x10/0x10 [ 1000.851235][ T2320] ? __pfx_ptp_open+0x10/0x10 [ 1000.851255][ T2320] posix_clock_open+0x17b/0x290 [ 1000.851274][ T2320] ? __pfx_posix_clock_open+0x10/0x10 [ 1000.851290][ T2320] chrdev_open+0x234/0x6a0 [ 1000.851306][ T2320] ? __pfx_apparmor_file_open+0x10/0x10 [ 1000.851327][ T2320] ? __pfx_chrdev_open+0x10/0x10 [ 1000.851344][ T2320] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1000.851364][ T2320] do_dentry_open+0x6d8/0x1660 [ 1000.851379][ T2320] ? __pfx_chrdev_open+0x10/0x10 [ 1000.851399][ T2320] vfs_open+0x82/0x3f0 [ 1000.851419][ T2320] path_openat+0x208c/0x31a0 [ 1000.851441][ T2320] ? __pfx_path_openat+0x10/0x10 [ 1000.851464][ T2320] do_file_open+0x20e/0x430 [ 1000.851480][ T2320] ? __pfx_do_file_open+0x10/0x10 [ 1000.851509][ T2320] ? alloc_fd+0x476/0x790 [ 1000.851526][ T2320] ? do_getname+0x191/0x390 [ 1000.851546][ T2320] do_sys_openat2+0x10d/0x1e0 [ 1000.851565][ T2320] ? __pfx_do_sys_openat2+0x10/0x10 [ 1000.851585][ T2320] ? __fget_files+0x21f/0x3d0 [ 1000.851603][ T2320] __x64_sys_openat+0x12d/0x210 [ 1000.851623][ T2320] ? __pfx___x64_sys_openat+0x10/0x10 [ 1000.851650][ T2320] do_syscall_64+0x106/0xf80 [ 1000.851667][ T2320] ? clear_bhb_loop+0x40/0x90 [ 1000.851685][ T2320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.851701][ T2320] RIP: 0033:0x7efe3cf9c799 [ 1000.851715][ T2320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.851729][ T2320] RSP: 002b:00007efe3b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1000.851745][ T2320] RAX: ffffffffffffffda RBX: 00007efe3d215fa0 RCX: 00007efe3cf9c799 [ 1000.851755][ T2320] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1000.851766][ T2320] RBP: 00007efe3d032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1000.851775][ T2320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.851784][ T2320] R13: 00007efe3d216038 R14: 00007efe3d215fa0 R15: 00007ffd875b6818 [ 1000.851806][ T2320] [ 1004.789260][ T2991] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4543'. [ 1009.882500][ T3904] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4568: iget: checksum invalid [ 1009.991528][ T3953] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1010.019196][ T3904] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1010.133756][ T3904] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4568: iget: checksum invalid [ 1010.244469][ T3904] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1010.350968][ T3904] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4568: iget: checksum invalid [ 1010.464176][ T3904] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1010.559613][ T3904] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.4568: iget: checksum invalid [ 1010.681884][ T3904] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1010.767994][ T3904] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1010.868264][ T3904] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1011.011526][ T4364] FAULT_INJECTION: forcing a failure. [ 1011.011526][ T4364] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.129765][ T4364] CPU: 0 UID: 0 PID: 4364 Comm: syz.0.4574 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1011.129798][ T4364] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1011.129806][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1011.129816][ T4364] Call Trace: [ 1011.129822][ T4364] [ 1011.129829][ T4364] dump_stack_lvl+0x100/0x190 [ 1011.129856][ T4364] should_fail_ex.cold+0x5/0xa [ 1011.129876][ T4364] should_failslab+0xc2/0x120 [ 1011.129892][ T4364] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1011.129913][ T4364] ? ptp_open+0xe4/0x550 [ 1011.129935][ T4364] ptp_open+0xe4/0x550 [ 1011.129957][ T4364] ? __pfx_ptp_open+0x10/0x10 [ 1011.129983][ T4364] ? __pfx_ptp_open+0x10/0x10 [ 1011.130002][ T4364] posix_clock_open+0x17b/0x290 [ 1011.130020][ T4364] ? __pfx_posix_clock_open+0x10/0x10 [ 1011.130037][ T4364] chrdev_open+0x234/0x6a0 [ 1011.130052][ T4364] ? __pfx_apparmor_file_open+0x10/0x10 [ 1011.130074][ T4364] ? __pfx_chrdev_open+0x10/0x10 [ 1011.130090][ T4364] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1011.130111][ T4364] do_dentry_open+0x6d8/0x1660 [ 1011.130126][ T4364] ? __pfx_chrdev_open+0x10/0x10 [ 1011.130146][ T4364] vfs_open+0x82/0x3f0 [ 1011.130167][ T4364] path_openat+0x208c/0x31a0 [ 1011.130189][ T4364] ? __pfx_path_openat+0x10/0x10 [ 1011.130212][ T4364] do_file_open+0x20e/0x430 [ 1011.130228][ T4364] ? __pfx_do_file_open+0x10/0x10 [ 1011.130257][ T4364] ? alloc_fd+0x476/0x790 [ 1011.130274][ T4364] ? do_getname+0x191/0x390 [ 1011.130294][ T4364] do_sys_openat2+0x10d/0x1e0 [ 1011.130320][ T4364] ? __pfx_do_sys_openat2+0x10/0x10 [ 1011.130342][ T4364] ? __fget_files+0x21f/0x3d0 [ 1011.130361][ T4364] __x64_sys_openat+0x12d/0x210 [ 1011.130381][ T4364] ? __pfx___x64_sys_openat+0x10/0x10 [ 1011.130409][ T4364] do_syscall_64+0x106/0xf80 [ 1011.130427][ T4364] ? clear_bhb_loop+0x40/0x90 [ 1011.130446][ T4364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.130461][ T4364] RIP: 0033:0x7f5c3499c799 [ 1011.130476][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.130490][ T4364] RSP: 002b:00007f5c358c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1011.130506][ T4364] RAX: ffffffffffffffda RBX: 00007f5c34c15fa0 RCX: 00007f5c3499c799 [ 1011.130516][ T4364] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1011.130526][ T4364] RBP: 00007f5c34a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1011.130536][ T4364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.130545][ T4364] R13: 00007f5c34c16038 R14: 00007f5c34c15fa0 R15: 00007ffc21705598 [ 1011.130566][ T4364] [ 1015.762925][ T30] audit: type=1800 audit(4294970142.645:24): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4593" name="members" dev="configfs" ino=195066 res=0 errno=0 [ 1018.188429][ T5991] can: request_module (can-proto-4) failed. [ 1020.339651][ T6421] can: request_module (can-proto-4) failed. [ 1023.181215][ T7346] can: request_module (can-proto-4) failed. [ 1024.065163][ T7702] nfs: Unknown parameter 'Dyઞ>T:jR)5-' [ 1024.151383][ T7696] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4644'. [ 1024.633707][ T7754] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.4651: iget: checksum invalid [ 1024.765946][ T7754] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1025.101747][ T7754] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.4651: iget: checksum invalid [ 1025.388885][ T7754] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1025.538146][ T7754] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.4651: iget: checksum invalid [ 1025.638341][ T7754] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1025.727844][ T7754] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.4651: iget: checksum invalid [ 1025.822315][ T7754] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1025.917686][ T7754] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1025.991294][ T7754] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1026.875241][ T8161] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4660'. [ 1029.157975][ T8880] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4673'. [ 1034.456344][T10864] nbd: must specify a size in bytes for the device [ 1034.495287][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4706'. [ 1035.069118][T11173] block2mtd: error: cannot open device i [ 1035.133583][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4710'. [ 1035.313500][T11168] block2mtd: error: cannot open device pthread_create failed [ 1035.357048][T11168] block2mtd: error: cannot open device (errno 11) [ 1037.215011][T12005] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4722'. [ 1037.528023][T12013] [U] [ 1037.530754][T12013] [U] [ 1037.533433][T12013] [U] [ 1037.536114][T12013] [U] [ 1037.608133][T12013] [U] [ 1037.610882][T12013] [U] [ 1037.613602][T12013] [U] [ 1037.616281][T12013] [U] [ 1037.756988][T12013] [U] [ 1037.759728][T12013] [U] [ 1037.762410][T12013] [U] [ 1037.765087][T12013] [U] [ 1037.851634][T12013] [U] [ 1037.854371][T12013] [U] [ 1037.857077][T12013] [U] [ 1037.859776][T12013] [U] [ 1037.959563][T12013] [U] [ 1037.962304][T12013] [U] [ 1037.964984][T12013] [U] [ 1037.967663][T12013] [U] [ 1038.053921][T12013] [U] [ 1038.056655][T12013] [U] [ 1038.059341][T12013] [U] [ 1038.062018][T12013] [U] [ 1038.197159][T12013] [U] [ 1038.199890][T12013] [U] [ 1038.202569][T12013] [U] [ 1038.205250][T12013] [U] [ 1038.287854][T12013] [U] [ 1038.290590][T12013] [U] [ 1038.293271][T12013] [U] [ 1038.295944][T12013] [U] [ 1038.391274][T12013] [U] [ 1038.394046][T12013] [U] [ 1038.396779][T12013] [U] [ 1038.399473][T12013] [U] [ 1038.472577][T12013] [U] [ 1038.475310][T12013] [U] [ 1038.478007][T12013] [U] [ 1038.480700][T12013] [U] [ 1038.570207][T12013] [U] [ 1038.572936][T12013] [U] [ 1038.575615][T12013] [U] [ 1038.578357][T12013] [U] [ 1038.668196][T12013] [U] [ 1038.670953][T12013] [U] [ 1038.673634][T12013] [U] [ 1038.676312][T12013] [U] [ 1038.771561][T12013] [U] [ 1038.774313][T12013] [U] [ 1038.777021][T12013] [U] [ 1038.779697][T12013] [U] [ 1038.888648][T12013] [U] [ 1038.891398][T12013] [U] [ 1038.894100][T12013] [U] [ 1038.896816][T12013] [U] [ 1039.020990][T12013] [U] [ 1039.023725][T12013] [U] [ 1039.026410][T12013] [U] [ 1039.029088][T12013] [U] [ 1039.147252][T12013] [U] [ 1039.149994][T12013] [U] [ 1039.152676][T12013] [U] [ 1039.155351][T12013] [U] [ 1039.395872][T12013] [U] [ 1039.398621][T12013] [U] [ 1039.401325][T12013] [U] [ 1039.404004][T12013] [U] [ 1039.528959][T12013] [U] [ 1039.531696][T12013] [U] [ 1039.534381][T12013] [U] [ 1039.537076][T12013] [U] [ 1039.640015][T12013] [U] [ 1039.642742][T12013] [U] [ 1039.645418][T12013] [U] [ 1039.648090][T12013] [U] [ 1039.760447][T12013] [U] [ 1039.763189][T12013] [U] [ 1039.765878][T12013] [U] [ 1039.768567][T12013] [U] [ 1039.888482][T12013] [U] [ 1039.891221][T12013] [U] [ 1039.893899][T12013] [U] [ 1039.896596][T12013] [U] [ 1039.992143][T12013] [U] [ 1039.994877][T12013] [U] [ 1039.997564][T12013] [U] [ 1040.000261][T12013] [U] [ 1040.096872][T12013] [U] [ 1040.099597][T12013] [U] [ 1040.102274][T12013] [U] [ 1040.105087][T12013] [U] [ 1040.198849][T12013] [U] [ 1040.201584][T12013] [U] [ 1040.204273][T12013] [U] [ 1040.206966][T12013] [U] [ 1040.294100][T12013] [U] [ 1040.296833][T12013] [U] [ 1040.299512][T12013] [U] [ 1040.302230][T12013] [U] [ 1040.528406][T12013] [U] [ 1044.105880][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1044.268298][ T2878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1044.279697][ T2878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1044.296919][ T2878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1044.305248][ T2878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1044.313300][ T2878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1044.709012][T14009] FAULT_INJECTION: forcing a failure. [ 1044.709012][T14009] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1044.821354][T14009] CPU: 0 UID: 0 PID: 14009 Comm: syz.2.4767 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1044.821384][T14009] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1044.821392][T14009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1044.821402][T14009] Call Trace: [ 1044.821408][T14009] [ 1044.821415][T14009] dump_stack_lvl+0x100/0x190 [ 1044.821442][T14009] should_fail_ex.cold+0x5/0xa [ 1044.821461][T14009] get_futex_key+0x1d2/0x1620 [ 1044.821482][T14009] ? __pfx_get_futex_key+0x10/0x10 [ 1044.821503][T14009] ? trace_pid_list_is_set+0x22c/0x390 [ 1044.821530][T14009] futex_wait_setup+0x83/0x510 [ 1044.821557][T14009] __futex_wait+0x19f/0x300 [ 1044.821580][T14009] ? __pfx___futex_wait+0x10/0x10 [ 1044.821605][T14009] ? __pfx_futex_wake_mark+0x10/0x10 [ 1044.821630][T14009] ? find_held_lock+0x2b/0x80 [ 1044.821644][T14009] ? futex_wake+0x456/0x530 [ 1044.821669][T14009] futex_wait+0xed/0x380 [ 1044.821691][T14009] ? __pfx_futex_wait+0x10/0x10 [ 1044.821717][T14009] ? putname+0xb1/0x110 [ 1044.821732][T14009] ? kmem_cache_free+0x124/0x6a0 [ 1044.821756][T14009] do_futex+0x1ef/0x350 [ 1044.821774][T14009] ? __pfx_do_futex+0x10/0x10 [ 1044.821792][T14009] ? __pfx_do_sys_openat2+0x10/0x10 [ 1044.821812][T14009] ? __x64_sys_close_range+0x3ce/0x5d0 [ 1044.821831][T14009] __x64_sys_futex+0x34f/0x4d0 [ 1044.821851][T14009] ? __x64_sys_openat+0x12d/0x210 [ 1044.821870][T14009] ? __pfx___x64_sys_futex+0x10/0x10 [ 1044.821896][T14009] do_syscall_64+0x106/0xf80 [ 1044.821914][T14009] ? clear_bhb_loop+0x40/0x90 [ 1044.821933][T14009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.821948][T14009] RIP: 0033:0x7efe3cf9c799 [ 1044.821962][T14009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.821978][T14009] RSP: 002b:00007efe3b1d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1044.821993][T14009] RAX: ffffffffffffffda RBX: 00007efe3d216098 RCX: 00007efe3cf9c799 [ 1044.822003][T14009] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efe3d216098 [ 1044.822013][T14009] RBP: 00007efe3d216090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.822022][T14009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.822031][T14009] R13: 00007efe3d216128 R14: 00007ffd875b6730 R15: 00007ffd875b6818 [ 1044.822051][T14009] [ 1045.803502][T14002] chnl_net:caif_netlink_parms(): no params data found [ 1046.144218][T14002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.180870][T14002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.213069][T14002] bridge_slave_0: entered allmulticast mode [ 1046.244009][T14002] bridge_slave_0: entered promiscuous mode [ 1046.278093][T14002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.306076][T14002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.500695][ T2878] Bluetooth: hci2: command tx timeout [ 1046.689102][T14002] bridge_slave_1: entered allmulticast mode [ 1046.746863][T14002] bridge_slave_1: entered promiscuous mode [ 1046.976378][T14002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.084325][T14002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.271533][T14235] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1047.351218][T14002] team0: Port device team_slave_0 added [ 1047.434181][T14002] team0: Port device team_slave_1 added [ 1047.693790][T14002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.779879][T14002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.036867][T14002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.340908][T14002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.392502][T14002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.546735][ T2878] Bluetooth: hci2: command tx timeout [ 1048.607067][T14002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.068010][T32509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.598063][T32509] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.744818][T14002] hsr_slave_0: entered promiscuous mode [ 1049.808454][T14002] hsr_slave_1: entered promiscuous mode [ 1049.845246][T14763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4783'. [ 1049.856019][T14002] debugfs: 'hsr0' already exists in 'hsr' [ 1049.919058][T14002] Cannot create hsr debugfs directory [ 1050.052005][T32509] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.399415][T32509] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.627115][ T2878] Bluetooth: hci2: command tx timeout [ 1051.990245][T15180] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4790'. [ 1052.216200][T32509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.335020][T32509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.422331][T32509] bond0 (unregistering): Released all slaves [ 1052.711244][ T2878] Bluetooth: hci2: command tx timeout [ 1054.270778][T14002] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1054.368755][T14002] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1054.449702][T14002] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1054.601001][T14002] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1054.712377][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.720275][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.743264][T32509] hsr_slave_0: left promiscuous mode [ 1054.796806][T32509] hsr_slave_1: left promiscuous mode [ 1054.848865][T32509] veth1_macvtap: left promiscuous mode [ 1054.854395][T32509] veth0_macvtap: left promiscuous mode [ 1054.918600][T32509] veth1_vlan: left promiscuous mode [ 1054.923880][T32509] veth0_vlan: left promiscuous mode [ 1055.763748][T32509] team0 (unregistering): Port device team_slave_1 removed [ 1055.861056][T32509] team0 (unregistering): Port device team_slave_0 removed [ 1056.500674][T14002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.598474][T14002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.683430][T32509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.690596][T32509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.753768][T32509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.760925][T32509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.438781][T14002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.630461][T14002] veth0_vlan: entered promiscuous mode [ 1057.681755][T14002] veth1_vlan: entered promiscuous mode [ 1057.781053][T14002] veth0_macvtap: entered promiscuous mode [ 1057.844259][T14002] veth1_macvtap: entered promiscuous mode [ 1057.936368][T14002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.003558][T14002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.053956][T18220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.124830][ T4979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.169790][ T4979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.249538][ T4979] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.381786][T18213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.430919][T18213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.572350][T18227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.594541][T18227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.879452][T15540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1059.089920][T15543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1059.895054][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4796'. [ 1060.053285][T15578] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1060.190367][T15552] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4796'. [ 1060.605464][T15671] FAULT_INJECTION: forcing a failure. [ 1060.605464][T15671] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.732554][T15671] CPU: 0 UID: 0 PID: 15671 Comm: syz.2.4802 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1060.732586][T15671] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1060.732594][T15671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1060.732604][T15671] Call Trace: [ 1060.732610][T15671] [ 1060.732617][T15671] dump_stack_lvl+0x100/0x190 [ 1060.732645][T15671] should_fail_ex.cold+0x5/0xa [ 1060.732665][T15671] should_failslab+0xc2/0x120 [ 1060.732681][T15671] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1060.732704][T15671] ? prepare_creds+0x2c/0x950 [ 1060.732725][T15671] ? __x64_sys_futex+0x34f/0x4d0 [ 1060.732744][T15671] ? __x64_sys_futex+0x358/0x4d0 [ 1060.732765][T15671] prepare_creds+0x2c/0x950 [ 1060.732789][T15671] keyctl_set_reqkey_keyring+0x8e/0x1c0 [ 1060.732813][T15671] __do_sys_keyctl+0x316/0x5a0 [ 1060.732845][T15671] do_syscall_64+0x106/0xf80 [ 1060.732864][T15671] ? clear_bhb_loop+0x40/0x90 [ 1060.732883][T15671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.732900][T15671] RIP: 0033:0x7efe3cf9c799 [ 1060.732913][T15671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.732928][T15671] RSP: 002b:00007efe3b1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1060.732943][T15671] RAX: ffffffffffffffda RBX: 00007efe3d215fa0 RCX: 00007efe3cf9c799 [ 1060.732953][T15671] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 1060.732962][T15671] RBP: 00007efe3d032c99 R08: 0000000000000008 R09: 0000000000000000 [ 1060.732971][T15671] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 1060.732980][T15671] R13: 00007efe3d216038 R14: 00007efe3d215fa0 R15: 00007ffd875b6818 [ 1060.733000][T15671] [ 1064.291189][T16147] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4826'. [ 1066.524368][T16551] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4836'. [ 1067.762611][T16898] bond0: Unable to set down delay as MII monitoring is disabled [ 1068.096682][T17084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4846'. [ 1068.419801][T17090] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1068.464967][T17090] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1068.512653][T17090] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1068.561692][T17090] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1068.572908][T17195] FAULT_INJECTION: forcing a failure. [ 1068.572908][T17195] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.624381][T17090] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1068.678943][T17195] CPU: 0 UID: 0 PID: 17195 Comm: syz.1.4851 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1068.678977][T17195] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1068.678985][T17195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1068.678994][T17195] Call Trace: [ 1068.679001][T17195] [ 1068.679009][T17195] dump_stack_lvl+0x100/0x190 [ 1068.679036][T17195] should_fail_ex.cold+0x5/0xa [ 1068.679055][T17195] should_failslab+0xc2/0x120 [ 1068.679072][T17195] __kvmalloc_node_noprof+0xfa/0xa00 [ 1068.679094][T17195] ? io_alloc_cache_init+0x38/0x170 [ 1068.679115][T17195] ? lockdep_set_lock_cmp_fn+0xa0/0xe0 [ 1068.679139][T17195] io_alloc_cache_init+0x38/0x170 [ 1068.679162][T17195] io_uring_setup.cold+0x3eb/0x1d09 [ 1068.679186][T17195] ? __pfx_io_uring_setup+0x10/0x10 [ 1068.679206][T17195] ? do_futex+0x192/0x350 [ 1068.679225][T17195] ? __pfx_do_futex+0x10/0x10 [ 1068.679252][T17195] ? xfd_validate_state+0x129/0x190 [ 1068.679279][T17195] __x64_sys_io_uring_setup+0xc2/0x170 [ 1068.679298][T17195] do_syscall_64+0x106/0xf80 [ 1068.679316][T17195] ? clear_bhb_loop+0x40/0x90 [ 1068.679335][T17195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.679352][T17195] RIP: 0033:0x7f5d53f9c799 [ 1068.679366][T17195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.679381][T17195] RSP: 002b:00007f5d54d90028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1068.679396][T17195] RAX: ffffffffffffffda RBX: 00007f5d54216090 RCX: 00007f5d53f9c799 [ 1068.679416][T17195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000008f1 [ 1068.679425][T17195] RBP: 00007f5d54032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1068.679434][T17195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1068.679444][T17195] R13: 00007f5d54216128 R14: 00007f5d54216090 R15: 00007fffd854dc18 [ 1068.679464][T17195] [ 1068.686030][T17090] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1069.792743][T17090] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1069.842331][T17090] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1069.880906][T17194] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1070.312071][ T2878] Bluetooth: hci4: command 0x0419 tx timeout [ 1070.470361][ T2878] Bluetooth: hci0: command 0x0c1a tx timeout [ 1070.550808][ T2878] Bluetooth: hci3: command 0x0c1a tx timeout [ 1070.710563][ T2878] Bluetooth: hci2: command 0x0c1a tx timeout [ 1070.778648][T17436] netlink: 4840 bytes leftover after parsing attributes in process `syz.3.4862'. [ 1072.628059][ T2878] Bluetooth: hci3: command 0x0c1a tx timeout [ 1072.787195][ T2878] Bluetooth: hci2: command 0x0c1a tx timeout [ 1073.075671][T22276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1073.090443][T22276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1073.100717][T22276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1073.109937][T22276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1073.117548][T22276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1074.022297][T17926] chnl_net:caif_netlink_parms(): no params data found [ 1074.519683][T17926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.596827][T17926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.649620][T17926] bridge_slave_0: entered allmulticast mode [ 1074.709274][T22276] Bluetooth: hci3: command 0x0c1a tx timeout [ 1074.748116][T17926] bridge_slave_0: entered promiscuous mode [ 1074.802449][T17926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.866650][T22276] Bluetooth: hci2: command 0x0c1a tx timeout [ 1074.876580][T17926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.956804][T17926] bridge_slave_1: entered allmulticast mode [ 1075.004870][T17926] bridge_slave_1: entered promiscuous mode [ 1075.187444][T22276] Bluetooth: hci1: command tx timeout [ 1075.534661][T17926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.660663][T17926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.035953][T17926] team0: Port device team_slave_0 added [ 1076.139407][T17926] team0: Port device team_slave_1 added [ 1076.667892][T17926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.674887][T17926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.907932][T18449] FAULT_INJECTION: forcing a failure. [ 1076.907932][T18449] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1077.002397][T17926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.047536][T18449] CPU: 0 UID: 0 PID: 18449 Comm: syz.1.4885 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1077.047566][T18449] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1077.047573][T18449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1077.047584][T18449] Call Trace: [ 1077.047590][T18449] [ 1077.047597][T18449] dump_stack_lvl+0x100/0x190 [ 1077.047623][T18449] should_fail_ex.cold+0x5/0xa [ 1077.047641][T18449] get_futex_key+0x1d2/0x1620 [ 1077.047663][T18449] ? __pfx_get_futex_key+0x10/0x10 [ 1077.047687][T18449] futex_wake+0xea/0x530 [ 1077.047710][T18449] ? __pfx_futex_wake+0x10/0x10 [ 1077.047740][T18449] do_futex+0x32b/0x350 [ 1077.047759][T18449] ? __pfx_do_futex+0x10/0x10 [ 1077.047776][T18449] ? ktime_get_ts64+0x2d2/0x3f0 [ 1077.047793][T18449] ? read_tsc+0x9/0x20 [ 1077.047809][T18449] ? ktime_get_ts64+0x256/0x3f0 [ 1077.047827][T18449] __x64_sys_futex+0x34f/0x4d0 [ 1077.047849][T18449] ? __pfx___x64_sys_futex+0x10/0x10 [ 1077.047869][T18449] ? __pfx___x64_sys_poll+0x10/0x10 [ 1077.047889][T18449] do_syscall_64+0x106/0xf80 [ 1077.047906][T18449] ? clear_bhb_loop+0x40/0x90 [ 1077.047925][T18449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.047940][T18449] RIP: 0033:0x7f5d53f9c799 [ 1077.047954][T18449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.047968][T18449] RSP: 002b:00007f5d54db10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1077.047984][T18449] RAX: ffffffffffffffda RBX: 00007f5d54215fa8 RCX: 00007f5d53f9c799 [ 1077.047994][T18449] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5d54215fac [ 1077.048004][T18449] RBP: 00007f5d54215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.048013][T18449] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1077.048022][T18449] R13: 00007f5d54216038 R14: 00007fffd854db30 R15: 00007fffd854dc18 [ 1077.048042][T18449] [ 1077.279034][T17926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.286299][T17926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.313187][T17926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.348997][T17926] hsr_slave_0: entered promiscuous mode [ 1077.355237][T17926] hsr_slave_1: entered promiscuous mode [ 1077.361430][T17926] debugfs: 'hsr0' already exists in 'hsr' [ 1077.367209][T17926] Cannot create hsr debugfs directory [ 1077.496823][T22276] Bluetooth: hci1: command tx timeout [ 1078.394495][T17926] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.950940][T18767] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input53 [ 1079.049799][T17926] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.506682][T22276] Bluetooth: hci1: command tx timeout [ 1079.668317][T17926] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.218646][T17926] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.497595][T18227] hsr0: left allmulticast mode [ 1080.545299][T18227] hsr_slave_0: left allmulticast mode [ 1080.587924][T18227] hsr_slave_1: left allmulticast mode [ 1080.621564][T18227] hsr0: left promiscuous mode [ 1080.638073][T19063] random: crng reseeded on system resumption [ 1080.660791][T18227] bridge0: port 3(hsr0) entered disabled state [ 1080.753374][T18227] bridge_slave_1: left allmulticast mode [ 1080.794661][T18227] bridge_slave_1: left promiscuous mode [ 1080.830368][T18227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.888719][T18227] bridge_slave_0: left allmulticast mode [ 1080.935049][T18227] bridge_slave_0: left promiscuous mode [ 1080.976203][T18227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.993878][T19084] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4898'. [ 1081.314626][T19193] size and base must be multiples of 4 kiB [ 1081.357798][T19193] CPU: 0 UID: 0 PID: 19193 Comm: syz.2.4901 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1081.357830][T19193] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1081.357837][T19193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1081.357848][T19193] Call Trace: [ 1081.357854][T19193] [ 1081.357863][T19193] dump_stack_lvl+0x100/0x190 [ 1081.357890][T19193] mtrr_add.cold+0x74/0x87 [ 1081.357909][T19193] mtrr_ioctl+0x25a/0xcf0 [ 1081.357930][T19193] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1081.357953][T19193] ? find_held_lock+0x2b/0x80 [ 1081.357973][T19193] ? __fget_files+0x21f/0x3d0 [ 1081.357988][T19193] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1081.358007][T19193] proc_reg_unlocked_ioctl+0x229/0x320 [ 1081.358030][T19193] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1081.358053][T19193] __x64_sys_ioctl+0x18e/0x210 [ 1081.358076][T19193] do_syscall_64+0x106/0xf80 [ 1081.358094][T19193] ? clear_bhb_loop+0x40/0x90 [ 1081.358113][T19193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.358129][T19193] RIP: 0033:0x7efe3cf9c799 [ 1081.358144][T19193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.358160][T19193] RSP: 002b:00007efe3b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1081.358174][T19193] RAX: ffffffffffffffda RBX: 00007efe3d215fa0 RCX: 00007efe3cf9c799 [ 1081.358185][T19193] RDX: 0000000000000004 RSI: 00000000400c4d01 RDI: 0000000000000004 [ 1081.358194][T19193] RBP: 00007efe3d032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1081.358203][T19193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1081.358212][T19193] R13: 00007efe3d216038 R14: 00007efe3d215fa0 R15: 00007ffd875b6818 [ 1081.358232][T19193] [ 1081.927052][T22276] Bluetooth: hci1: command tx timeout [ 1082.580521][T19306] FAULT_INJECTION: forcing a failure. [ 1082.580521][T19306] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1082.663403][T18227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.677898][T19306] CPU: 0 UID: 0 PID: 19306 Comm: syz.2.4907 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1082.677929][T19306] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1082.677936][T19306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1082.677946][T19306] Call Trace: [ 1082.677952][T19306] [ 1082.677958][T19306] dump_stack_lvl+0x100/0x190 [ 1082.677986][T19306] should_fail_ex.cold+0x5/0xa [ 1082.678005][T19306] get_futex_key+0x1d2/0x1620 [ 1082.678027][T19306] ? __pfx_get_futex_key+0x10/0x10 [ 1082.678052][T19306] futex_wake+0xea/0x530 [ 1082.678075][T19306] ? __pfx_futex_wake+0x10/0x10 [ 1082.678098][T19306] ? putname+0xb1/0x110 [ 1082.678113][T19306] ? kmem_cache_free+0x124/0x6a0 [ 1082.678136][T19306] do_futex+0x32b/0x350 [ 1082.678156][T19306] ? __pfx_do_futex+0x10/0x10 [ 1082.678173][T19306] ? __pfx_do_sys_openat2+0x10/0x10 [ 1082.678194][T19306] ? __fget_files+0x21f/0x3d0 [ 1082.678210][T19306] __x64_sys_futex+0x34f/0x4d0 [ 1082.678229][T19306] ? __x64_sys_openat+0x12d/0x210 [ 1082.678249][T19306] ? __pfx___x64_sys_futex+0x10/0x10 [ 1082.678275][T19306] do_syscall_64+0x106/0xf80 [ 1082.678293][T19306] ? clear_bhb_loop+0x40/0x90 [ 1082.678312][T19306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.678328][T19306] RIP: 0033:0x7efe3cf9c799 [ 1082.678342][T19306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.678357][T19306] RSP: 002b:00007efe3b1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1082.678373][T19306] RAX: ffffffffffffffda RBX: 00007efe3d215fa8 RCX: 00007efe3cf9c799 [ 1082.678384][T19306] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efe3d215fac [ 1082.678394][T19306] RBP: 00007efe3d215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1082.678403][T19306] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1082.678412][T19306] R13: 00007efe3d216038 R14: 00007ffd875b6730 R15: 00007ffd875b6818 [ 1082.678432][T19306] [ 1083.474744][T18227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.518249][T18227] bond0 (unregistering): Released all slaves [ 1083.834537][T19314] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4909'. [ 1083.932952][T17926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1084.141497][T17926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1084.158580][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4910'. [ 1084.170888][T17926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1084.220547][T19321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4910'. [ 1084.279421][T17926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1084.594456][T19332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4912'. [ 1084.667675][T19335] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4912'. [ 1085.129534][T17926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.388634][T17926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.478139][T18220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.485413][T18220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.537137][T19451] FAULT_INJECTION: forcing a failure. [ 1085.537137][T19451] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.572416][T18220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.579600][T18220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.617126][T19451] CPU: 0 UID: 0 PID: 19451 Comm: syz.3.4918 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1085.617158][T19451] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1085.617165][T19451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1085.617174][T19451] Call Trace: [ 1085.617181][T19451] [ 1085.617188][T19451] dump_stack_lvl+0x100/0x190 [ 1085.617223][T19451] should_fail_ex.cold+0x5/0xa [ 1085.617244][T19451] should_failslab+0xc2/0x120 [ 1085.617261][T19451] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1085.617285][T19451] ? __d_alloc+0x34/0xa80 [ 1085.617306][T19451] __d_alloc+0x34/0xa80 [ 1085.617325][T19451] d_alloc_pseudo+0x1c/0xc0 [ 1085.617345][T19451] alloc_file_pseudo_noaccount+0xcf/0x230 [ 1085.617367][T19451] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 1085.617389][T19451] ? iput+0x3a/0x40 [ 1085.617408][T19451] bdev_file_open_by_dev+0x13a/0x210 [ 1085.617429][T19451] blkdev_bszset+0x170/0x240 [ 1085.617447][T19451] ? __pfx_blkdev_bszset+0x10/0x10 [ 1085.617465][T19451] ? find_held_lock+0x2b/0x80 [ 1085.617479][T19451] ? __fget_files+0x215/0x3d0 [ 1085.617492][T19451] ? hook_file_ioctl_common+0x146/0x410 [ 1085.617518][T19451] blkdev_ioctl+0x513/0x6f0 [ 1085.617536][T19451] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1085.617556][T19451] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1085.617575][T19451] __x64_sys_ioctl+0x18e/0x210 [ 1085.617598][T19451] do_syscall_64+0x106/0xf80 [ 1085.617615][T19451] ? clear_bhb_loop+0x40/0x90 [ 1085.617635][T19451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.617651][T19451] RIP: 0033:0x7fbff119c799 [ 1085.617665][T19451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.617680][T19451] RSP: 002b:00007fbff1fcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1085.617696][T19451] RAX: ffffffffffffffda RBX: 00007fbff1415fa0 RCX: 00007fbff119c799 [ 1085.617707][T19451] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000004 [ 1085.617716][T19451] RBP: 00007fbff1232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1085.617725][T19451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.617734][T19451] R13: 00007fbff1416038 R14: 00007fbff1415fa0 R15: 00007ffcaf03e978 [ 1085.617754][T19451] [ 1086.792432][T18227] hsr_slave_0: left promiscuous mode [ 1086.847843][T18227] hsr_slave_1: left promiscuous mode [ 1086.857710][T18227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.905951][T18227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.938694][T18227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.956173][T18227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.990877][T18227] veth1_macvtap: left promiscuous mode [ 1087.012691][T18227] veth0_macvtap: left promiscuous mode [ 1087.423401][T18227] team0 (unregistering): Port device team_slave_1 removed [ 1087.462142][T18227] team0 (unregistering): Port device team_slave_0 removed [ 1089.252053][T17926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.084249][T17926] veth0_vlan: entered promiscuous mode [ 1090.135907][T20100] FAULT_INJECTION: forcing a failure. [ 1090.135907][T20100] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.213910][T20100] CPU: 0 UID: 0 PID: 20100 Comm: syz.2.4931 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1090.213948][T20100] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1090.213957][T20100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1090.213967][T20100] Call Trace: [ 1090.213973][T20100] [ 1090.213979][T20100] dump_stack_lvl+0x100/0x190 [ 1090.214007][T20100] should_fail_ex.cold+0x5/0xa [ 1090.214027][T20100] should_failslab+0xc2/0x120 [ 1090.214043][T20100] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1090.214065][T20100] ? alloc_empty_file+0x55/0x1c0 [ 1090.214087][T20100] alloc_empty_file+0x55/0x1c0 [ 1090.214106][T20100] alloc_file_pseudo+0x13a/0x230 [ 1090.214125][T20100] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1090.214149][T20100] __shmem_file_setup+0x221/0x490 [ 1090.214170][T20100] ? __pfx___shmem_file_setup+0x10/0x10 [ 1090.214194][T20100] ? vm_area_alloc+0x1f/0x160 [ 1090.214216][T20100] shmem_zero_setup+0x96/0x1b0 [ 1090.214240][T20100] __mmap_region+0x2198/0x29e0 [ 1090.214264][T20100] ? __pfx___mmap_region+0x10/0x10 [ 1090.214317][T20100] ? lockdep_hardirqs_on+0x78/0x100 [ 1090.214336][T20100] ? finish_task_switch.isra.0+0x205/0xb80 [ 1090.214353][T20100] ? rcu_is_watching+0x12/0xc0 [ 1090.214398][T20100] ? rcu_is_watching+0x12/0xc0 [ 1090.214419][T20100] ? cap_capable+0x107/0x460 [ 1090.214443][T20100] mmap_region+0x180/0x3e0 [ 1090.214468][T20100] do_mmap+0xc63/0x12f0 [ 1090.214488][T20100] ? __pfx_do_mmap+0x10/0x10 [ 1090.214505][T20100] ? __pfx_down_write_killable+0x10/0x10 [ 1090.214530][T20100] vm_mmap_pgoff+0x29e/0x470 [ 1090.214550][T20100] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1090.214569][T20100] ? do_futex+0x192/0x350 [ 1090.214588][T20100] ? __pfx_do_futex+0x10/0x10 [ 1090.214610][T20100] ksys_mmap_pgoff+0xe1/0x650 [ 1090.214626][T20100] ? __x64_sys_futex+0x34f/0x4d0 [ 1090.214644][T20100] ? __x64_sys_futex+0x358/0x4d0 [ 1090.214663][T20100] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1090.214679][T20100] ? xfd_validate_state+0x129/0x190 [ 1090.214704][T20100] __x64_sys_mmap+0x125/0x190 [ 1090.214728][T20100] do_syscall_64+0x106/0xf80 [ 1090.214745][T20100] ? clear_bhb_loop+0x40/0x90 [ 1090.214764][T20100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.214779][T20100] RIP: 0033:0x7efe3cf9c799 [ 1090.214794][T20100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.214809][T20100] RSP: 002b:00007efe3b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1090.214825][T20100] RAX: ffffffffffffffda RBX: 00007efe3d215fa0 RCX: 00007efe3cf9c799 [ 1090.214835][T20100] RDX: 00000000000000db RSI: 0000000004020009 RDI: 0000000000000000 [ 1090.214845][T20100] RBP: 00007efe3d032c99 R08: 0000000000000401 R09: 0000000000008000 [ 1090.214855][T20100] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1090.214865][T20100] R13: 00007efe3d216038 R14: 00007efe3d215fa0 R15: 00007ffd875b6818 [ 1090.214885][T20100] [ 1091.743654][T17926] veth1_vlan: entered promiscuous mode [ 1091.880615][T17926] veth0_macvtap: entered promiscuous mode [ 1091.977605][T17926] veth1_macvtap: entered promiscuous mode [ 1092.061426][T17926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.135991][T17926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.265706][T13029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.319433][T13029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.521035][T13029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.575373][T13029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.878224][T18212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.925907][T18212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.038888][T13025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.075238][T13025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.379569][T20437] input: j(Ǹ-9%vlQ Q6 as /devices/virtual/input/input54 [ 1094.413761][ T2878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1094.426591][ T2878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1094.435234][ T2878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1094.443375][ T2878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1094.451195][ T2878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1095.237014][T20438] chnl_net:caif_netlink_parms(): no params data found [ 1095.625422][T20438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.698240][T20438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.736148][T20438] bridge_slave_0: entered allmulticast mode [ 1095.777553][T20438] bridge_slave_0: entered promiscuous mode [ 1095.794629][T20462] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4946'. [ 1095.928003][T20438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.029406][T20438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.101109][T20438] bridge_slave_1: entered allmulticast mode [ 1096.158496][T20438] bridge_slave_1: entered promiscuous mode [ 1096.505249][T20438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.548928][ T2878] Bluetooth: hci4: command tx timeout [ 1096.593361][T20438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.832418][T20438] team0: Port device team_slave_0 added [ 1096.989397][T20438] team0: Port device team_slave_1 added [ 1097.210160][T20438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.221241][T20485] netlink: 'syz.1.4952': attribute type 2 has an invalid length. [ 1097.276579][T20438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.468652][T20438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.668333][T20438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.722297][T20438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.866562][T20438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.277820][T13025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.551520][T20438] hsr_slave_0: entered promiscuous mode [ 1098.591258][T20438] hsr_slave_1: entered promiscuous mode [ 1098.627971][ T2878] Bluetooth: hci4: command tx timeout [ 1098.641798][T20438] debugfs: 'hsr0' already exists in 'hsr' [ 1098.689199][T20438] Cannot create hsr debugfs directory [ 1098.773862][T13025] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.031557][T13025] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.322283][T13025] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.558327][T20519] ptrace attach of "./syz-executor exec"[14002] was attempted by "./syz-executor exec"[20519] [ 1100.282438][T13025] gretap0: left allmulticast mode [ 1100.317312][T13025] gretap0: left promiscuous mode [ 1100.383676][T13025] bridge0: port 3(gretap0) entered disabled state [ 1100.504122][T13025] bridge_slave_1: left allmulticast mode [ 1100.553579][T13025] bridge_slave_1: left promiscuous mode [ 1100.602018][T13025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.690924][T13025] bridge_slave_0: left allmulticast mode [ 1100.707700][ T2878] Bluetooth: hci4: command tx timeout [ 1100.763038][T13025] bridge_slave_0: left promiscuous mode [ 1100.817758][T13025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.019342][T20553] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4966'. [ 1101.953866][T13025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.011274][T13025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.053719][T13025] bond0 (unregistering): Released all slaves [ 1102.223404][T13025] tipc: Left network mode [ 1102.786708][ T2878] Bluetooth: hci4: command tx timeout [ 1103.688427][T20438] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1103.809224][T20438] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1104.174904][T20438] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1104.333237][T20438] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1104.489149][T20596] nbd: must specify a size in bytes for the device [ 1105.661515][T20438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.847074][T13025] hsr_slave_0: left promiscuous mode [ 1105.881730][T13025] hsr_slave_1: left promiscuous mode [ 1105.940527][T13025] veth1_macvtap: left promiscuous mode [ 1105.970039][T13025] veth0_macvtap: left promiscuous mode [ 1106.323909][T20617] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4976'. [ 1106.850207][T13025] team0 (unregistering): Port device team_slave_1 removed [ 1106.940659][T13025] team0 (unregistering): Port device team_slave_0 removed [ 1107.428888][T20438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.542680][T13029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.549845][T13029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.650814][T13029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.658000][T13029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.842284][T20657] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4987'. [ 1109.218674][T20438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.458999][T20438] veth0_vlan: entered promiscuous mode [ 1109.550930][T20438] veth1_vlan: entered promiscuous mode [ 1109.802687][T20438] veth0_macvtap: entered promiscuous mode [ 1109.963500][T20676] NFSD: Failed to start, no listeners configured. [ 1110.059972][T20438] veth1_macvtap: entered promiscuous mode [ 1110.175707][T20438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.269056][T20438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.635113][T32508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.794989][T32508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.916713][T32508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.988643][T32508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.336007][T13029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.408271][T13029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.577181][T18220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.585022][T18220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.201364][T20706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4941'. [ 1112.287258][T20706] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.4941: iget: checksum invalid [ 1112.363351][T20714] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4997'. [ 1112.374961][T20706] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1112.465054][T20706] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.4941: iget: checksum invalid [ 1112.550200][T20706] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1112.614733][T20706] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.4941: iget: checksum invalid [ 1112.694675][T20706] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1112.779678][T20706] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.4941: iget: checksum invalid [ 1112.843914][T20706] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1112.942759][T20706] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1113.016201][T20706] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1114.537566][T20760] netlink: 186 bytes leftover after parsing attributes in process `syz.3.5011'. [ 1115.537246][ T2878] Bluetooth: hci2: Malformed Event: 0x02 [ 1115.933361][T20797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5019'. [ 1116.126666][T20797] hsr_slave_0 (unregistering): left promiscuous mode [ 1116.168599][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.174924][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.367141][T20800] FAULT_INJECTION: forcing a failure. [ 1116.367141][T20800] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1116.628154][T20800] CPU: 0 UID: 0 PID: 20800 Comm: syz.3.5020 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1116.628185][T20800] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1116.628192][T20800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1116.628202][T20800] Call Trace: [ 1116.628208][T20800] [ 1116.628214][T20800] dump_stack_lvl+0x100/0x190 [ 1116.628241][T20800] should_fail_ex.cold+0x5/0xa [ 1116.628260][T20800] get_futex_key+0x1d2/0x1620 [ 1116.628280][T20800] ? __pfx_get_futex_key+0x10/0x10 [ 1116.628304][T20800] futex_wake+0xea/0x530 [ 1116.628328][T20800] ? __pfx_futex_wake+0x10/0x10 [ 1116.628351][T20800] ? putname+0xb1/0x110 [ 1116.628366][T20800] ? kmem_cache_free+0x124/0x6a0 [ 1116.628385][T20800] ? do_sys_openat2+0x1b4/0x1e0 [ 1116.628408][T20800] do_futex+0x32b/0x350 [ 1116.628427][T20800] ? __pfx_do_futex+0x10/0x10 [ 1116.628444][T20800] ? __pfx_do_sys_openat2+0x10/0x10 [ 1116.628468][T20800] __x64_sys_futex+0x34f/0x4d0 [ 1116.628488][T20800] ? __x64_sys_openat+0x12d/0x210 [ 1116.628507][T20800] ? __pfx___x64_sys_futex+0x10/0x10 [ 1116.628533][T20800] do_syscall_64+0x106/0xf80 [ 1116.628556][T20800] ? clear_bhb_loop+0x40/0x90 [ 1116.628574][T20800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.628590][T20800] RIP: 0033:0x7ff17ab9c799 [ 1116.628603][T20800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.628619][T20800] RSP: 002b:00007ff17baca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1116.628634][T20800] RAX: ffffffffffffffda RBX: 00007ff17ae15fa8 RCX: 00007ff17ab9c799 [ 1116.628644][T20800] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff17ae15fac [ 1116.628654][T20800] RBP: 00007ff17ae15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1116.628664][T20800] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1116.628673][T20800] R13: 00007ff17ae16038 R14: 00007fff7fe011d0 R15: 00007fff7fe012b8 [ 1116.628693][T20800] [ 1117.096664][T20800] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1118.029771][T20821] netlink: 186 bytes leftover after parsing attributes in process `syz.1.5023'. [ 1118.073029][T20825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5026'. [ 1119.396783][T20864] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5032'. [ 1119.517777][T20866] netlink: 342 bytes leftover after parsing attributes in process `syz.1.5032'. [ 1120.451813][T20881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5037'. [ 1120.676913][T20878] ================================================================== [ 1120.676935][T20878] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 1120.676967][T20878] Read of size 26 at addr ffff88802c4e94e8 by task syz.2.5034/20878 [ 1120.676980][T20878] [ 1120.676990][T20878] CPU: 0 UID: 0 PID: 20878 Comm: syz.2.5034 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1120.677015][T20878] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1120.677023][T20878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1120.677033][T20878] Call Trace: [ 1120.677038][T20878] [ 1120.677045][T20878] dump_stack_lvl+0x100/0x190 [ 1120.677067][T20878] print_report+0x156/0x4c9 [ 1120.677089][T20878] ? __virt_addr_valid+0x81/0x620 [ 1120.677107][T20878] ? __phys_addr+0xe8/0x180 [ 1120.677125][T20878] ? fbcon_prepare_logo+0x94e/0xc60 [ 1120.677146][T20878] kasan_report+0xdf/0x1e0 [ 1120.677169][T20878] ? fbcon_prepare_logo+0x94e/0xc60 [ 1120.677194][T20878] kasan_check_range+0x10f/0x1e0 [ 1120.677212][T20878] __asan_memcpy+0x23/0x60 [ 1120.677232][T20878] fbcon_prepare_logo+0x94e/0xc60 [ 1120.677259][T20878] fbcon_init+0x10a0/0x1820 [ 1120.677283][T20878] visual_init+0x320/0x620 [ 1120.677298][T20878] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1120.677318][T20878] store_bind+0x609/0x730 [ 1120.677336][T20878] ? __pfx_store_bind+0x10/0x10 [ 1120.677351][T20878] dev_attr_store+0x58/0x80 [ 1120.677375][T20878] ? __pfx_dev_attr_store+0x10/0x10 [ 1120.677398][T20878] sysfs_kf_write+0xf2/0x150 [ 1120.677416][T20878] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1120.677431][T20878] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1120.677450][T20878] iter_file_splice_write+0x830/0x10a0 [ 1120.677469][T20878] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1120.677486][T20878] ? __pfx_copy_splice_read+0x10/0x10 [ 1120.677513][T20878] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1120.677528][T20878] direct_splice_actor+0x192/0x6c0 [ 1120.677552][T20878] splice_direct_to_actor+0x345/0xa30 [ 1120.677567][T20878] ? __pfx_direct_splice_actor+0x10/0x10 [ 1120.677591][T20878] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1120.677611][T20878] do_splice_direct+0x174/0x240 [ 1120.677625][T20878] ? __pfx_do_splice_direct+0x10/0x10 [ 1120.677640][T20878] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1120.677664][T20878] ? rw_verify_area+0xce/0x6d0 [ 1120.677684][T20878] do_sendfile+0xadc/0xe20 [ 1120.677707][T20878] ? __pfx_do_sendfile+0x10/0x10 [ 1120.677729][T20878] ? __x64_sys_futex+0x34f/0x4d0 [ 1120.677747][T20878] ? __x64_sys_futex+0x358/0x4d0 [ 1120.677767][T20878] __x64_sys_sendfile64+0x1d8/0x220 [ 1120.677783][T20878] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1120.677803][T20878] do_syscall_64+0x106/0xf80 [ 1120.677820][T20878] ? clear_bhb_loop+0x40/0x90 [ 1120.677837][T20878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.677853][T20878] RIP: 0033:0x7efe3cf9c799 [ 1120.677866][T20878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.677882][T20878] RSP: 002b:00007efe3ad91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1120.677897][T20878] RAX: ffffffffffffffda RBX: 00007efe3d216270 RCX: 00007efe3cf9c799 [ 1120.677908][T20878] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000006 [ 1120.677917][T20878] RBP: 00007efe3d032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1120.677926][T20878] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1120.677936][T20878] R13: 00007efe3d216308 R14: 00007efe3d216270 R15: 00007ffd875b6818 [ 1120.677951][T20878] [ 1120.677957][T20878] [ 1120.677961][T20878] Allocated by task 20438: [ 1120.678006][T20878] kasan_save_stack+0x30/0x50 [ 1120.678031][T20878] kasan_save_track+0x14/0x30 [ 1120.678052][T20878] __kasan_kmalloc+0xaa/0xb0 [ 1120.678073][T20878] netdevice_event+0x308/0x9a0 [ 1120.678088][T20878] notifier_call_chain+0x99/0x420 [ 1120.678106][T20878] call_netdevice_notifiers_info+0xbe/0x110 [ 1120.678127][T20878] call_netdevice_notifiers+0x7c/0xb0 [ 1120.678147][T20878] vlan_dev_open+0x535/0x6c0 [ 1120.678175][T20878] __dev_open+0x3ad/0x960 [ 1120.678190][T20878] __dev_change_flags+0x558/0x6f0 [ 1120.678206][T20878] netif_change_flags+0x8d/0x160 [ 1120.678221][T20878] dev_change_flags+0xba/0x250 [ 1120.678240][T20878] vlan_device_event+0xd2b/0x2300 [ 1120.678258][T20878] notifier_call_chain+0x99/0x420 [ 1120.678276][T20878] call_netdevice_notifiers_info+0xbe/0x110 [ 1120.678296][T20878] __dev_notify_flags+0x12c/0x2e0 [ 1120.678311][T20878] netif_change_flags+0x108/0x160 [ 1120.678327][T20878] do_setlink.isra.0+0x1abb/0x3e50 [ 1120.678344][T20878] rtnl_newlink+0x11bd/0x2380 [ 1120.678360][T20878] rtnetlink_rcv_msg+0x95e/0xe90 [ 1120.678376][T20878] netlink_rcv_skb+0x159/0x420 [ 1120.678394][T20878] netlink_unicast+0x5aa/0x870 [ 1120.678412][T20878] netlink_sendmsg+0x8b0/0xda0 [ 1120.678429][T20878] __sys_sendto+0x468/0x4b0 [ 1120.678443][T20878] __x64_sys_sendto+0xe0/0x1c0 [ 1120.678458][T20878] do_syscall_64+0x106/0xf80 [ 1120.678474][T20878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.678489][T20878] [ 1120.678493][T20878] Freed by task 32506: [ 1120.678500][T20878] kasan_save_stack+0x30/0x50 [ 1120.678521][T20878] kasan_save_track+0x14/0x30 [ 1120.678541][T20878] kasan_save_free_info+0x3b/0x70 [ 1120.678558][T20878] __kasan_slab_free+0x5f/0x80 [ 1120.678570][T20878] kfree+0x1f6/0x6b0 [ 1120.678587][T20878] process_one_work+0x9d7/0x1920 [ 1120.678606][T20878] worker_thread+0x5da/0xe40 [ 1120.678624][T20878] kthread+0x370/0x450 [ 1120.678641][T20878] ret_from_fork+0x754/0xd80 [ 1120.678660][T20878] ret_from_fork_asm+0x1a/0x30 [ 1120.678675][T20878] [ 1120.678679][T20878] Last potentially related work creation: [ 1120.678685][T20878] kasan_save_stack+0x30/0x50 [ 1120.678705][T20878] kasan_record_aux_stack+0xa7/0xc0 [ 1120.678722][T20878] insert_work+0x36/0x230 [ 1120.678739][T20878] __queue_work+0x3fd/0x1150 [ 1120.678758][T20878] queue_work_on+0x180/0x1e0 [ 1120.678777][T20878] netdevice_event+0x648/0x9a0 [ 1120.678791][T20878] notifier_call_chain+0x99/0x420 [ 1120.678808][T20878] call_netdevice_notifiers_info+0xbe/0x110 [ 1120.678828][T20878] call_netdevice_notifiers+0x7c/0xb0 [ 1120.678847][T20878] vlan_dev_open+0x535/0x6c0 [ 1120.678866][T20878] __dev_open+0x3ad/0x960 [ 1120.678880][T20878] __dev_change_flags+0x558/0x6f0 [ 1120.678895][T20878] netif_change_flags+0x8d/0x160 [ 1120.678910][T20878] dev_change_flags+0xba/0x250 [ 1120.678928][T20878] vlan_device_event+0xd2b/0x2300 [ 1120.678944][T20878] notifier_call_chain+0x99/0x420 [ 1120.678961][T20878] call_netdevice_notifiers_info+0xbe/0x110 [ 1120.678981][T20878] __dev_notify_flags+0x12c/0x2e0 [ 1120.678996][T20878] netif_change_flags+0x108/0x160 [ 1120.679011][T20878] do_setlink.isra.0+0x1abb/0x3e50 [ 1120.679027][T20878] rtnl_newlink+0x11bd/0x2380 [ 1120.679042][T20878] rtnetlink_rcv_msg+0x95e/0xe90 [ 1120.679059][T20878] netlink_rcv_skb+0x159/0x420 [ 1120.679077][T20878] netlink_unicast+0x5aa/0x870 [ 1120.679094][T20878] netlink_sendmsg+0x8b0/0xda0 [ 1120.679111][T20878] __sys_sendto+0x468/0x4b0 [ 1120.679125][T20878] __x64_sys_sendto+0xe0/0x1c0 [ 1120.679139][T20878] do_syscall_64+0x106/0xf80 [ 1120.679162][T20878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.679178][T20878] [ 1120.679182][T20878] The buggy address belongs to the object at ffff88802c4e9400 [ 1120.679182][T20878] which belongs to the cache kmalloc-192 of size 192 [ 1120.679195][T20878] The buggy address is located 40 bytes to the right of [ 1120.679195][T20878] allocated 192-byte region [ffff88802c4e9400, ffff88802c4e94c0) [ 1120.679212][T20878] [ 1120.679216][T20878] The buggy address belongs to the physical page: [ 1120.679224][T20878] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c4e9 [ 1120.679238][T20878] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1120.679251][T20878] page_type: f5(slab) [ 1120.679266][T20878] raw: 00fff00000000000 ffff88813fe3c3c0 dead000000000100 dead000000000122 [ 1120.679280][T20878] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1120.679290][T20878] page dumped because: kasan: bad access detected [ 1120.679298][T20878] page_owner tracks the page as allocated [ 1120.679304][T20878] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 29, tgid 29 (kworker/1:1), ts 12557377919, free_ts 12508757200 [ 1120.679331][T20878] post_alloc_hook+0x153/0x170 [ 1120.679350][T20878] get_page_from_freelist+0x111d/0x3140 [ 1120.679370][T20878] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1120.679390][T20878] new_slab+0xa6/0x6c0 [ 1120.679406][T20878] refill_objects+0x26b/0x400 [ 1120.679424][T20878] __pcs_replace_empty_main+0x1ab/0x600 [ 1120.679444][T20878] __kmalloc_noprof+0x688/0x850 [ 1120.679463][T20878] usb_alloc_urb+0x66/0xa0 [ 1120.679484][T20878] usb_control_msg+0x1d3/0x4a0 [ 1120.679498][T20878] hub_ext_port_status+0x152/0x600 [ 1120.679518][T20878] hub_activate+0x6d8/0x1d50 [ 1120.679532][T20878] process_one_work+0x9d7/0x1920 [ 1120.679551][T20878] worker_thread+0x5da/0xe40 [ 1120.679569][T20878] kthread+0x370/0x450 [ 1120.679585][T20878] ret_from_fork+0x754/0xd80 [ 1120.679605][T20878] ret_from_fork_asm+0x1a/0x30 [ 1120.679619][T20878] page last free pid 29 tgid 29 stack trace: [ 1120.679627][T20878] __free_frozen_pages+0x7e1/0x10d0 [ 1120.679644][T20878] vfree.part.0+0x12b/0x9d0 [ 1120.679658][T20878] delayed_vfree_work+0x8e/0xd0 [ 1120.679674][T20878] process_one_work+0x9d7/0x1920 [ 1120.679692][T20878] worker_thread+0x5da/0xe40 [ 1120.679710][T20878] kthread+0x370/0x450 [ 1120.679726][T20878] ret_from_fork+0x754/0xd80 [ 1120.679745][T20878] ret_from_fork_asm+0x1a/0x30 [ 1120.679760][T20878] [ 1120.679763][T20878] Memory state around the buggy address: [ 1120.679771][T20878] ffff88802c4e9380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1120.679781][T20878] ffff88802c4e9400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1120.679792][T20878] >ffff88802c4e9480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1120.679800][T20878] ^ [ 1120.679809][T20878] ffff88802c4e9500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1120.679819][T20878] ffff88802c4e9580: 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc fc [ 1120.679828][T20878] ================================================================== [ 1120.836609][T20878] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1120.836630][T20878] CPU: 0 UID: 0 PID: 20878 Comm: syz.2.5034 Tainted: G U I L syzkaller #0 PREEMPT(full) [ 1120.836658][T20878] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 1120.836666][T20878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1120.836681][T20878] Call Trace: [ 1120.836687][T20878] [ 1120.836694][T20878] dump_stack_lvl+0x100/0x190 [ 1120.836721][T20878] vpanic+0x552/0x970 [ 1120.836736][T20878] ? __pfx_vpanic+0x10/0x10 [ 1120.836753][T20878] ? fbcon_prepare_logo+0x94e/0xc60 [ 1120.836776][T20878] panic+0xd1/0xe0 [ 1120.836789][T20878] ? __pfx_panic+0x10/0x10 [ 1120.836804][T20878] ? fbcon_prepare_logo+0x94e/0xc60 [ 1120.836826][T20878] ? preempt_schedule_common+0x42/0xc0 [ 1120.836854][T20878] check_panic_on_warn.cold+0x19/0x34 [ 1120.836871][T20878] end_report.part.0+0x3a/0x90 [ 1120.836893][T20878] kasan_report.cold+0xe/0x18 [ 1120.836914][T20878] ? fbcon_prepare_logo+0x94e/0xc60 [ 1120.836939][T20878] kasan_check_range+0x10f/0x1e0 [ 1120.836957][T20878] __asan_memcpy+0x23/0x60 [ 1120.836976][T20878] fbcon_prepare_logo+0x94e/0xc60 [ 1120.837002][T20878] fbcon_init+0x10a0/0x1820 [ 1120.837026][T20878] visual_init+0x320/0x620 [ 1120.837041][T20878] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1120.837061][T20878] store_bind+0x609/0x730 [ 1120.837079][T20878] ? __pfx_store_bind+0x10/0x10 [ 1120.837095][T20878] dev_attr_store+0x58/0x80 [ 1120.837118][T20878] ? __pfx_dev_attr_store+0x10/0x10 [ 1120.837140][T20878] sysfs_kf_write+0xf2/0x150 [ 1120.837159][T20878] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1120.837174][T20878] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1120.837192][T20878] iter_file_splice_write+0x830/0x10a0 [ 1120.837212][T20878] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1120.837229][T20878] ? __pfx_copy_splice_read+0x10/0x10 [ 1120.837256][T20878] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1120.837271][T20878] direct_splice_actor+0x192/0x6c0 [ 1120.837295][T20878] splice_direct_to_actor+0x345/0xa30 [ 1120.837310][T20878] ? __pfx_direct_splice_actor+0x10/0x10 [ 1120.837335][T20878] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1120.837352][T20878] do_splice_direct+0x174/0x240 [ 1120.837366][T20878] ? __pfx_do_splice_direct+0x10/0x10 [ 1120.837381][T20878] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1120.837404][T20878] ? rw_verify_area+0xce/0x6d0 [ 1120.837425][T20878] do_sendfile+0xadc/0xe20 [ 1120.837448][T20878] ? __pfx_do_sendfile+0x10/0x10 [ 1120.837470][T20878] ? __x64_sys_futex+0x34f/0x4d0 [ 1120.837489][T20878] ? __x64_sys_futex+0x358/0x4d0 [ 1120.837508][T20878] __x64_sys_sendfile64+0x1d8/0x220 [ 1120.837525][T20878] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1120.837544][T20878] do_syscall_64+0x106/0xf80 [ 1120.837563][T20878] ? clear_bhb_loop+0x40/0x90 [ 1120.837580][T20878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.837597][T20878] RIP: 0033:0x7efe3cf9c799 [ 1120.837610][T20878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.837626][T20878] RSP: 002b:00007efe3ad91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1120.837642][T20878] RAX: ffffffffffffffda RBX: 00007efe3d216270 RCX: 00007efe3cf9c799 [ 1120.837653][T20878] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000006 [ 1120.837662][T20878] RBP: 00007efe3d032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1120.837672][T20878] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1120.837682][T20878] R13: 00007efe3d216308 R14: 00007efe3d216270 R15: 00007ffd875b6818 [ 1120.837697][T20878] [ 1120.837857][T20878] Kernel Offset: disabled