last executing test programs: 16.836835411s ago: executing program 1 (id=7327): mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYRES8], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_TMR_SOURCE(r0, 0xc0045406, 0x0) prctl$auto(0x1000000003b, 0x100001, 0x4, 0x80a, 0x6) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/veth0_to_bond/delay_first_probe_time\x00', 0x8a042, 0x0) sendfile$auto(r3, r3, 0x0, 0x40045) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' 6\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf250300000004000180083601"], 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043", 0x49) r4 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) write$auto(r4, &(0x7f00000001c0)='-\x001c\xc2.b\x97\x1a\xf4\xd8\x1a\x1c\xb2\x9db\xb1\xec\xdeGDr=\xc2\xdc\xdf\x8cg\xa10Fzk\x86bd\xfc\x19\x96y\x9cYy\xc1\xc4\xf1\x0fH\x0f2\xa6\xbd\x9b\xe8\x97\xb0>,\xbf\xb8Kje\x05\xc4\xf8\x01\xd3]\x7f\xb8\x83S\xaf\xc5\xceZZlTO\xf5\x81`$\xec=|1\x05\xa9\x95Q\xf6\a\x81)\x94\xdaJ.\x04\xf2\xd7O\xa7=u1\xcd$\x17(t\xa4.\x1d\xfd\xf1\xc8e\x9c\xb4k\xfd\x94+B\x17o\\>4\xb7d5\a\xef\xb6\xe5F\xba\xf9Q\xdb\xd0\xb5\xa6\x1b\\\x0e\xb7\xab\xc3\x7fO`\x0e\x15\xca\x01z\xc23\xa1\x03\xdd@\xf3', 0xfdef) r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) 16.341296399s ago: executing program 1 (id=7330): socket(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x100000001, 0x101, 0x9, 0x19, r0, 0x6) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101}, 0x55) write$auto(0x3, 0x0, 0x5b4) 15.26726897s ago: executing program 1 (id=7332): nanosleep$auto(&(0x7f00000001c0)={0xfffffffffffffffe, 0x5}, 0x0) (fail_nth: 2) 14.675855645s ago: executing program 1 (id=7334): r0 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r1 = syz_genetlink_get_family_id$auto_nl802154(0x0, r0) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, 0x0) stat$auto(0x0, &(0x7f00000003c0)={0x1, 0x5, 0x6, 0x6, 0xee00, 0xee01, 0x0, 0xfffffffffffffffb, 0x4, 0x4, 0x8, 0x1, 0x70e2, 0x37, 0xf, 0x1, 0xffffffffffff5bdb}) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020029bd7000fed3dd251000002104ee27800800210002000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4880) ioctl$auto(r0, 0xc, r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) close_range$auto(r2, r2, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x100000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) io_uring_setup$auto(0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) 6.597090129s ago: executing program 2 (id=7351): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(0x0, 0x149443, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) sysinfo$auto(&(0x7f0000000100)={0x6, [0x402, 0xc, 0x100], 0x10200, 0xd5, 0x0, 0x6, 0x6, 0xffff, 0x7f, 0x0, 0x100000100, 0x7, 0x6}) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0x200800, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = syz_clone(0x1901000, &(0x7f00000000c0)="9419fcc5c0ae91a05c2846b835e44789db724a1e2a70f089bf94ea1401aa", 0x1e, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000780)="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") sendmsg$auto_OVS_METER_CMD_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001780)={0x514, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x4}, @OVS_METER_ATTR_BANDS={0x4d2, 0x4, 0x0, 0x1, [@nested={0x121, 0xcf, 0x0, 0x1, [@nested={0x4, 0x37}, @nested={0x4, 0x134}, @generic="9aa4830eff699c24701c92da00957cafcf3642b76c764c43ed83471aca6beca358a80d0f2df47bc0a0ed86a3e98bd69fc35083da77ea802c10eec23d13f6c1d5b318de0f65bd625a7bf3bd7ee8d91849736ab188fdf981dcd6b875f982bb4c90216685dd544c02196bfc901057893000ba6cb44a84b5f6143c7b6ff54a231964e3f21eb39932fce4ddc56206c85510d4c2da68f985899d5135608e7fd703f4efe95732392cd793fa5245b1e85effffa5e8", @nested={0x4, 0xec}, @nested={0x4, 0x129}, @generic="c33d650461890efe2cbba6cffaba702cdd94b6423a9412887ff9365761d2c61930be1e9c6ed696fabe3be0989a2a729e49c9c2b1c054e25ebf0018e79590a0ec8dc515c288b235fc9b268ea8", @nested={0x4, 0xe2}, @typed={0x4, 0xdc}, @typed={0x8, 0xbc, 0x0, 0x0, @pid=r3}]}, @nested={0xaf, 0xe3, 0x0, 0x1, [@nested={0x4, 0x37}, @typed={0x8, 0x14a, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0x18}, @nested={0x4, 0x70}, @nested={0x4, 0xba}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r1}, @generic="bbf22d518d1d75e04f5e0af028db0dcd1b8499ac5095c251288cd27e1ba8365f3c4588930677c734e9ad9237768498e56779cd2080843ebae69892e72ac5922afb0194b080a1d83f355fb3e052e8796994f39b3a91a292bddcd1bf0e76f3476d9c7d4149f77ea0bd3bad123bced3d8b3c05e98a62b74533022fe75ac05ee92ec1d25301dd89f9281413a99"]}, @generic="36fb23e9ef019aeab06c8aee0780d9f6677dadd20e72c396b10003e3c6a7d02ed7f483f3723088dc228c78eef32e64ccfab4bcb5e963356118e1c8d035695929b64c622a376f0d884eb4c798c7b35e0b93edd11465897d6a91ffec256568ee456f36dcd8f8f04fe4bab5a4af8e459b", @typed={0x14, 0x143, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0xc0, 0xd5, 0x0, 0x1, [@generic="1f221fdd029c4bfdaf4077633852a3f7d9068888e6754a0cf168708d8b9174812065435c2952fc4ed11d2138d5c2c76d4db44b99e38177d8c3474ecf8c29b740e714b7f9ff4075ab5889739760b57bde637ff7f9d005a1335faf1efa3ce5d68c7a45420fd39d2fd698298f6c86ff54305261bf97b870106f4cc73e34dd5d907c6f25015dca887d162450257cda516564d194c045af63cc2d", @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@loopback}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0x37ed}, @nested={0x4, 0x142}]}, @typed={0xc, 0x3d, 0x0, 0x0, @u64=0xd3}, @typed={0x38, 0x13d, 0x0, 0x0, @str='/sys/kernel/security/safesetid/uid_allowlist_policy\x00'}, @generic="0705b9c205a517c7b9bc46cff9a8516aeb48bdaa90dc903709994eb9e3d60eec67aba8f589349af01cf9f3314244e8a776613cee3994381e7b3acfc14224a3ba61336f8cd019445b464e8ac4a5c1f967e018b4651d64d2d69e8fba1e13bff1ac860d32cbf199dbec0109069ef204dfd40c0d9030f135c42d2306a46a36fd12a20664dd78e74224710419c0390d7db8946c83974f654a0ff0c4ba3ac8e549ea5c4a9b0c71e078bed6b69cc6db2305544543f2120abf8bb71e6c0e423590a33639f6d069aa9c66", @typed={0x96, 0xf3, 0x0, 0x0, @binary="8fcc5e0344c2a8235c3d0ec28fb54aa6d5fb8d04d49b046a4d1225dd845fdfffbb696097212fe46c128a128250bc4e2be65b2cd045252a5b05893ebaa8b76ed83391b6889889f84198695b729744985014b85f4d91799b3ffb679baca64355c1d55e41ec5ed2602a8242e60addaf5bd56dd0db0aa99ea8f8a560c12f4a09234f79dec3acf13c4b9633447a497088ad7b3d91"}, @generic="061ce52f80f29a2829becf067c1f0abdd0a8546d17"]}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x7137040b, 0x7ff}}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x2}]}, 0x514}, 0x1, 0x0, 0x0, 0x9}, 0xcb05de04c5e7dff3) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x3, 0x10001, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) 5.358823123s ago: executing program 0 (id=7353): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r0 = epoll_create$auto(0x2) epoll_pwait2$auto(r0, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) r1 = epoll_create$auto(0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = memfd_secret$auto(0x10000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfff, 0x20009, 0x4000000000de, 0x200eb1, 0xffffffffffffffff, 0x8000) close_range$auto(r2, 0xa, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) keyctl$auto(0x8, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x6) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f00000000c0)=':,\x00', 0x0, 0x0) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0x20009, 0xe2, 0xffffffffffffffff, 0x3fd, 0x7ffd) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x86500, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000140)) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x1d8, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@CIFS_GENL_ATTR_SWN_REGISTRATION_ID={0x8, 0x1, 0x5}, @CIFS_GENL_ATTR_SWN_USER_NAME={0x8, 0x9, '#[):'}, @CIFS_GENL_ATTR_SWN_PASSWORD={0xee, 0xa, '\')\\Tt\x18^zhd\x8a?\xb9(\x89DGK\x19+\xfe\xbaC\xd8D\xd7\xff\xee\xf0\x8d\xf7\xe0\x04\x90\x8a\x85mU\x8bu\x16_+\xae\xc1\xde\n\xcb>\x81\xa7\x03c\xa4\xdb\xae\x8a\xfe\x12w\xef\x86R\xd4\x1el`\x17\x18\xc4\x98up\xb1\xd2&\xdd>4x\xcd\x9a\x052\xdc\x16\x82Ja\xf6.Ba`\xa6,<\xd6\xc21\vR\xb6vjw\xc5\x01\x00\x00\x00\xb7xd\x13\xaf\xd4\x93\xcc;J\xefq*\xef2\x9bE]X}\xde\xcc\xce\x92\xdc,\xd9\x9an\x11\xc6\xc9\x90\xb0Tn\xaf\xce,\xda\n\xcf\x84\xf5cP\xb2\xf7\xac\x94\x88\x01\x8e\xe2\x8f\xd9ZPL\xe9\xc9*\xee9\xaf\x9d\xe5\xe3Xh\x92N\xc1\xca\xa74l\x96e\x80=\xd6\x9c\x861\x15\x85\xb6\xbe\xeea\xb9Fa\xf3lU\x8b\xac!\x0e\x16\x1f0+\xf4\xd7\xb6m\xc0\xf0\xc9\x98\'\xfbj\xf4\xfb\xa2\x85\xa1\x82\xf8'}, @CIFS_GENL_ATTR_SWN_RESOURCE_STATE={0x8, 0xd, 0x74}, @CIFS_GENL_ATTR_SWN_RESOURCE_NAME={0x1f, 0xe, '/proc/thread-self/fail-nth\x00'}, @CIFS_GENL_ATTR_SWN_NOTIFICATION_TYPE={0x8, 0xc, 0x10000}, @CIFS_GENL_ATTR_SWN_IP={0x84, 0x4, @ethernet={0x1, @multicast}}, @CIFS_GENL_ATTR_SWN_USER_NAME={0x8, 0x9, '#[):'}, @CIFS_GENL_ATTR_SWN_DOMAIN_NAME={0x8, 0xb, '{$#{'}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000240)="ff1c77e3e0c75de3e4b5b406551a5767a5356c9bd9de5c773f2e75e6819101f051269dc09510f21d26b8a47ea44ff3011466be44ee524974b11f371debf7e8880f1e4e52a3aa37892fbbcee374327f019f5d1866ce7ce150a42b0a07717071aa68e5997c2bc1062a9b033ba7bfba2572aaa306a2725c16886e383a0973673ea38a0f9dc8eac921dcd97c590000000000000000005b0d5646bec3cc3e72e128b447ddfe9f9109d94bbbeeb889959201af3ee76e59ecacbc6cd4db93f60abb9223cbd86cb4ea79e84ec9c9bc05390d61c270dd5ea2a3334fd5db6942929d02c50bc254ecb9989258c9e074a6917a36f0000000000000000000") ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x48e, 0x0, 0x9}]}) socket$nl_generic(0x10, 0x3, 0x10) 5.068197134s ago: executing program 3 (id=7354): mmap$auto(0x7, 0x7, 0xdf, 0x30, 0x69a5, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) epoll_create$auto(0x4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8, 0x7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) r4 = io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x3, 0x5, 0xbc, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x6], {0x6, 0x38, 0x9, 0x80004, 0x4, 0x3, 0x3ff, 0x7fffffff, 0xffff}, {0x2, 0x9, 0x7, 0x2, 0x0, 0xffff13a7, 0x80000006, 0x44a0, 0x1001}}) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x1, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0xb, 0xe, 0x59}) sendfile$auto(r3, r4, &(0x7f0000000180)=0x4, 0xfe) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) creat$auto(&(0x7f0000000040)='./file0\x00', 0x7) r6 = epoll_create$auto(0x3e) r7 = socket(0x1, 0x3, 0x0) epoll_ctl$auto(r6, 0x1, r7, 0x0) 2.77878055s ago: executing program 0 (id=7355): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/active\x00', 0x22000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0) read$auto(r1, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644) vmsplice$auto(r1, &(0x7f0000000040)={&(0x7f00000000c0)="9428551241060c42ef865c1c1d0df48ba9e60909b99b123db773b4981922a8d006958a6b083d6e680e10ac8166d4743be9527501cb5fb744ce59e87e0bef6de23cb3222b1a0e8b7bc8444fb0263348230055fd4dc3af8f872eb23f0e062829b7fe44f1bb39340ff3a9d01ea070eb3e02f57ed8bb163982d7bb869a010aa936101b5d64e2830d6eb927bbfdd47277978307398158d0e3", 0x90}, 0x3, 0xd99) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f00000001c0)=""/247, 0xf7) 2.774769801s ago: executing program 2 (id=7356): mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_TMR_SOURCE(r1, 0xc0045406, 0x0) prctl$auto(0x1000000003b, 0x100001, 0x4, 0x80a, 0x6) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/veth0_to_bond/delay_first_probe_time\x00', 0x8a042, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043", 0x49) r3 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) write$auto(r3, &(0x7f00000001c0)='-\x001c\xc2.b\x97\x1a\xf4\xd8\x1a\x1c\xb2\x9db\xb1\xec\xdeGDr=\xc2\xdc\xdf\x8cg\xa10Fzk\x86bd\xfc\x19\x96y\x9cYy\xc1\xc4\xf1\x0fH\x0f2\xa6\xbd\x9b\xe8\x97\xb0>,\xbf\xb8Kje\x05\xc4\xf8\x01\xd3]\x7f\xb8\x83S\xaf\xc5\xceZZlTO\xf5\x81`$\xec=|1\x05\xa9\x95Q\xf6\a\x81)\x94\xdaJ.\x04\xf2\xd7O\xa7=u1\xcd$\x17(t\xa4.\x1d\xfd\xf1\xc8e\x9c\xb4k\xfd\x94+B\x17o\\>4\xb7d5\a\xef\xb6\xe5F\xba\xf9Q\xdb\xd0\xb5\xa6\x1b\\\x0e\xb7\xab\xc3\x7fO`\x0e\x15\xca\x01z\xc23\xa1\x03\xdd@\xf3', 0xfdef) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c001300fcdbbc2353f74fa9256563b979e41af25e403ec2c853d4662dc2477fb8ce947bdc0f5c0513ff03a03e2f969bf97ff8acf360d119aec1eb971d4cc78fc8e0d10db928bac2c986c79fec"], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) 2.680350114s ago: executing program 3 (id=7357): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd37, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x2, 0x2, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x600000, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 2.617035406s ago: executing program 0 (id=7358): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x22240, 0x55) r2 = socket(0xa, 0x2, 0x0) getsockopt$auto_SO_BUF_LOCK(r2, 0x1, 0x48, &(0x7f0000003fc0)='\'}\xa3\x00', &(0x7f0000004000)=0xfc5) r3 = socket(0xa, 0x3, 0x87) ioctl$auto_VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x5, r1}) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_uring_register$auto(r4, 0xfffffffa, &(0x7f0000000100)="6060e8f61452520690085aa608712ea9c436ac667fcedce092cc980d18d5801b322668bea0ccdb83a67e65f680f6f37d4bb47794e39304f05ca971db6888831ec1448ee74289512b99fbe2b31b5dc057fa4a44b8cc3d5d7738812cd969162ded02cd50cb458ebf", 0xa) r5 = socket(0x2, 0x1, 0x0) getsockopt$auto(r5, 0x6, 0x21, 0x0, 0x0) unshare$auto(0x40000080) ioctl$auto(0xffffffffffffffff, 0x7fff, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r6, &(0x7f0000001780)={0x0, 0x1d, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r7, 0x705, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000280)='/dev/usbmon13\x00', 0x10000, 0x0) readv$auto(r3, &(0x7f00000000c0)={&(0x7f0000000180)="ad9a85cac638004a00b333f4f618e8d83335fceb88f75e603f603ffa59c5d12e8973b991573443196b7b34799aa26d0341a8abd34937b705aca670d7fa289069ff813a6cc35038b53fde93ca31cf10c08ddeb183d054d2f91464618a742c8083259a488f8dd9267d6cab920d597845d873802e0aef92b1329105ecd4901363d756da5659a681bc2ad9900722b69c4009a374a4ef65167829fc099a3f50106d8ea6443a7e77f51dada6183f4cb80b1fbf0619cc72db0aef423e5128ae1bab9ef39e6a74fc390e8caa8f372466cf62f516cabdc9d86fbb4359641f40d90eca0dc2279c13f31905bbe58f76f63d80ae88c31045d0cb50d26897", 0x4}, 0x6) sendmsg$auto_TIPC_NL_PEER_REMOVE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040027bd7000fbdbdf2514000000821ab2de48e3411e7f08254193be1a439095d1473e0d6ad249cae38eaf7c02c85d4228baaeda79f9e024493067e6ffff67f2acfa9f414074836ac98744a9ad519a5021484dd5dabaf600d7fae9187af9a55db232b617f149f3ce91dbc008c9a7647d3e9cc2add46482b6bab86a5cf5dc84b7289899bce1df0bc992b679bc99445bf8e78cf3a2ab86d392a537e16516e5faa98c42d2d8e94bb26d889e76654a252940c8d3c7eee56659be2267e3975f21031a78ab058f9332dbbad6f33a9cf4fbbaba2147ffb51fbad31293909a76b5e4dac166f1521cf50000"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r8) mq_notify$auto(0x5cf5, &(0x7f00000006c0)={@sival_ptr=0x0, @inferred=r3, 0x2, @_sigev_thread={0x0, 0x0}}) 2.473591802s ago: executing program 3 (id=7359): mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_TMR_SOURCE(r1, 0xc0045406, 0x0) prctl$auto(0x1000000003b, 0x100001, 0x4, 0x80a, 0x6) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40045) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043", 0x49) r3 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) write$auto(r3, &(0x7f00000001c0)='-\x001c\xc2.b\x97\x1a\xf4\xd8\x1a\x1c\xb2\x9db\xb1\xec\xdeGDr=\xc2\xdc\xdf\x8cg\xa10Fzk\x86bd\xfc\x19\x96y\x9cYy\xc1\xc4\xf1\x0fH\x0f2\xa6\xbd\x9b\xe8\x97\xb0>,\xbf\xb8Kje\x05\xc4\xf8\x01\xd3]\x7f\xb8\x83S\xaf\xc5\xceZZlTO\xf5\x81`$\xec=|1\x05\xa9\x95Q\xf6\a\x81)\x94\xdaJ.\x04\xf2\xd7O\xa7=u1\xcd$\x17(t\xa4.\x1d\xfd\xf1\xc8e\x9c\xb4k\xfd\x94+B\x17o\\>4\xb7d5\a\xef\xb6\xe5F\xba\xf9Q\xdb\xd0\xb5\xa6\x1b\\\x0e\xb7\xab\xc3\x7fO`\x0e\x15\xca\x01z\xc23\xa1\x03\xdd@\xf3', 0xfdef) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c001300fcdbbc2353f74fa9256563b979e41af25e403ec2c853d4662dc2477fb8ce947bdc0f5c0513ff03a03e2f969bf97ff8acf360d119aec1eb971d4cc78fc8e0d10db928bac2c986c79fec"], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) 2.27444731s ago: executing program 2 (id=7360): socket(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) socket(0xf, 0x3, 0x2) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101}, 0x55) write$auto(0x3, 0x0, 0x5b4) 2.133767797s ago: executing program 0 (id=7361): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x9}, 0x8) 2.077607879s ago: executing program 3 (id=7362): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40000, 0x0) lseek$auto(0x3, 0x7ffffffffffffffb, 0x1) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy10/netdev:wlan0/stations/08:02:11:00:00:01/rx_duplicates\x00', 0x1a000, 0x0) mmap$auto(0x0, 0x4020009, 0x3, 0xef1, 0x401, 0x10000) socket(0x38, 0x801, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x1f, 0x3, 0x7fff) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x228802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) socket(0x10, 0x2, 0x4) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) 1.899263669s ago: executing program 0 (id=7363): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(0x0, 0x149443, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) sysinfo$auto(&(0x7f0000000100)={0x6, [0x402, 0xc, 0x100], 0x10200, 0xd5, 0x0, 0x6, 0x6, 0xffff, 0x7f, 0x0, 0x100000100, 0x7, 0x6}) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0x200800, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = syz_clone(0x1901000, &(0x7f00000000c0)="9419fcc5c0ae91a05c2846b835e44789db724a1e2a70f089bf94ea1401aa", 0x1e, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000780)="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") sendmsg$auto_OVS_METER_CMD_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001780)={0x514, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x4}, @OVS_METER_ATTR_BANDS={0x4d2, 0x4, 0x0, 0x1, [@nested={0x121, 0xcf, 0x0, 0x1, [@nested={0x4, 0x37}, @nested={0x4, 0x134}, @generic="9aa4830eff699c24701c92da00957cafcf3642b76c764c43ed83471aca6beca358a80d0f2df47bc0a0ed86a3e98bd69fc35083da77ea802c10eec23d13f6c1d5b318de0f65bd625a7bf3bd7ee8d91849736ab188fdf981dcd6b875f982bb4c90216685dd544c02196bfc901057893000ba6cb44a84b5f6143c7b6ff54a231964e3f21eb39932fce4ddc56206c85510d4c2da68f985899d5135608e7fd703f4efe95732392cd793fa5245b1e85effffa5e8", @nested={0x4, 0xec}, @nested={0x4, 0x129}, @generic="c33d650461890efe2cbba6cffaba702cdd94b6423a9412887ff9365761d2c61930be1e9c6ed696fabe3be0989a2a729e49c9c2b1c054e25ebf0018e79590a0ec8dc515c288b235fc9b268ea8", @nested={0x4, 0xe2}, @typed={0x4, 0xdc}, @typed={0x8, 0xbc, 0x0, 0x0, @pid=r3}]}, @nested={0xaf, 0xe3, 0x0, 0x1, [@nested={0x4, 0x37}, @typed={0x8, 0x14a, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0x18}, @nested={0x4, 0x70}, @nested={0x4, 0xba}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r1}, @generic="bbf22d518d1d75e04f5e0af028db0dcd1b8499ac5095c251288cd27e1ba8365f3c4588930677c734e9ad9237768498e56779cd2080843ebae69892e72ac5922afb0194b080a1d83f355fb3e052e8796994f39b3a91a292bddcd1bf0e76f3476d9c7d4149f77ea0bd3bad123bced3d8b3c05e98a62b74533022fe75ac05ee92ec1d25301dd89f9281413a99"]}, @generic="36fb23e9ef019aeab06c8aee0780d9f6677dadd20e72c396b10003e3c6a7d02ed7f483f3723088dc228c78eef32e64ccfab4bcb5e963356118e1c8d035695929b64c622a376f0d884eb4c798c7b35e0b93edd11465897d6a91ffec256568ee456f36dcd8f8f04fe4bab5a4af8e459b", @typed={0x14, 0x143, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0xc0, 0xd5, 0x0, 0x1, [@generic="1f221fdd029c4bfdaf4077633852a3f7d9068888e6754a0cf168708d8b9174812065435c2952fc4ed11d2138d5c2c76d4db44b99e38177d8c3474ecf8c29b740e714b7f9ff4075ab5889739760b57bde637ff7f9d005a1335faf1efa3ce5d68c7a45420fd39d2fd698298f6c86ff54305261bf97b870106f4cc73e34dd5d907c6f25015dca887d162450257cda516564d194c045af63cc2d", @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@loopback}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0x37ed}, @nested={0x4, 0x142}]}, @typed={0xc, 0x3d, 0x0, 0x0, @u64=0xd3}, @typed={0x38, 0x13d, 0x0, 0x0, @str='/sys/kernel/security/safesetid/uid_allowlist_policy\x00'}, @generic="0705b9c205a517c7b9bc46cff9a8516aeb48bdaa90dc903709994eb9e3d60eec67aba8f589349af01cf9f3314244e8a776613cee3994381e7b3acfc14224a3ba61336f8cd019445b464e8ac4a5c1f967e018b4651d64d2d69e8fba1e13bff1ac860d32cbf199dbec0109069ef204dfd40c0d9030f135c42d2306a46a36fd12a20664dd78e74224710419c0390d7db8946c83974f654a0ff0c4ba3ac8e549ea5c4a9b0c71e078bed6b69cc6db2305544543f2120abf8bb71e6c0e423590a33639f6d069aa9c66", @typed={0x96, 0xf3, 0x0, 0x0, @binary="8fcc5e0344c2a8235c3d0ec28fb54aa6d5fb8d04d49b046a4d1225dd845fdfffbb696097212fe46c128a128250bc4e2be65b2cd045252a5b05893ebaa8b76ed83391b6889889f84198695b729744985014b85f4d91799b3ffb679baca64355c1d55e41ec5ed2602a8242e60addaf5bd56dd0db0aa99ea8f8a560c12f4a09234f79dec3acf13c4b9633447a497088ad7b3d91"}, @generic="061ce52f80f29a2829becf067c1f0abdd0a8546d17"]}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x7137040b, 0x7ff}}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x2}]}, 0x514}, 0x1, 0x0, 0x0, 0x9}, 0xcb05de04c5e7dff3) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x3, 0x10001, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) 1.833539947s ago: executing program 2 (id=7364): mmap$auto(0xf2c, 0x2, 0xdb, 0x9b7e, 0x2, 0x8002) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) write$auto(0x3, 0x0, 0x1000) umount2$auto(0x0, 0x5345) umount2$auto(&(0x7f0000000140)='++\x00', 0x90) mmap$auto(0x0, 0x400009, 0xcd1, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd7/queue/atomic_write_max_bytes\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r2 = pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) tee$auto(r3, r2, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x20000001) write$auto(0xffffffffffffffff, 0x0, 0xfdef) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r3) sendmsg$auto_NFC_CMD_VENDOR(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x845) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) fcntl$auto_F_GETOWN(r4, 0x9, 0xea6) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000001500)='/dev/usbmon8\x00', 0x30800, 0x0) r5 = bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000300)=@token_create={0xffffffff, 0xffffffffffffffff}, 0x19) r7 = setfsgid$auto(0x0) setresgid$auto(r7, 0x0, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000140)={0x6, r7, 0x3, 0x1}) ioctl$auto_SNDCTL_DSP_SYNC(r6, 0x5001, &(0x7f0000001680)="9b7203c3c8e248a21e3898e837a73e110c5d85998041103f9e1fcc15309a84d72acd8be63e6c346b6ecf443abac779fd4c6417d2da63a234dd04381816aa9d3c54e74d07f3d245f964c8e3336b72b54e8d198eb3") read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000280)=""/4099, 0x1003) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) 1.721809645s ago: executing program 3 (id=7365): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) fcntl$auto_F_WRLCK(r1, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r2, 0x0) r4 = socket(0x10, 0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES16=r5, @ANYRES64=r3, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="f137abb0c05e4fd0219bab2d205ee10f33c24c4f39eec76ff0ac1e0f4493309868ec0ab6eae371a7ba4aa3fcdc0ebff0a0c084200d8074204902955bf873d2cbea815e1fed6b43d58e8bd09c9c54b8d433602ffda185bd28b7b5c55d0fe65dabb09d380412002ccd06a6f22ac74f3848a9f3aea44efec4f08594ae45ccc351736b5451b811bbbf29ee67fa5fe6bddbced76768edf90c1f146afc92a58eac678b087256f09879f022cba0ba53c6ec212f5752ac4833b38607a42597545326c90d46ca28145136168a9346f5c7"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) read$auto(r5, &(0x7f0000000000)='\x00', 0x91e2) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r6 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r7 = socket(0x22, 0x3, 0x0) socket(0xa, 0x5, 0x0) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r9, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x50, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_COORDINATOR={0x4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x8}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0xa8, 0x0, 0x0, @fd=r5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x8810) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) write$auto(r4, &(0x7f0000000000)='-\x00', 0xfdef) 822.812967ms ago: executing program 0 (id=7366): mmap$auto(0x800000, 0x202000b, 0x4, 0x15, 0xfffffffffffffffa, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x3) (fail_nth: 2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mlock$auto(0xfff, 0xde7f) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_SET(0xc, 0x1, &(0x7f0000000300)={{0xffffffff, 0xffffffffffffffff, 0xee01, 0x1000, 0xae, 0x9, 0x6}, 0x1, 0x7, 0x2, 0x280, @raw, @raw=0x5, 0x3, 0x0, &(0x7f0000000140)="4666def67af41b4f051e39fd6511fd6cfab11faa93fdd757f3a42ab52c0db46c7c57737a54cb9ad1fccd9f47e3400debebecee8c4b3ab4b0ecd15cb89799d7a8a423d738e2914ff98f43b494873650cfa841ca9b379cdbceb067f222f9852e4e248e519e6e2d25bc83b3fb9ec16cbc5fe503b9662d19861c9bb377749418140efde7024c7215d323a6c79c5be94bc04ed0d9afbb9c9574ff829522a54b91ef7bcef85e226564639c87b944203a6814a00eea8134d42bc137511ab276827b7ee17d85c2722c34b6d9cd3c095bd1094df859fd44defb05f086d48e42b8cfe4f20b057126cfb78738004716a5e21149cc372c89149624db4102", &(0x7f0000000240)="41b431f15aa64d11716c2908cc9f948827ddb702f4ae4ad578a4d9e2"}) 804.66394ms ago: executing program 3 (id=7367): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) mmap$auto(0x4, 0x2020006, 0x3, 0xf8, r0, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) unshare$auto(0x40000080) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) rt_sigtimedwait$auto(&(0x7f0000000140)={0x8}, &(0x7f0000000280)={@siginfo_0_0={0x7ff, 0x1, 0x91c1, @_rt={0x0, 0x0, @sival_int=0x4}}}, &(0x7f00000001c0)={0x8001, 0x2}, 0x8) shmctl$auto_SHM_STAT(0xff000000, 0xd, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x3, 0x80000001, 0x70b, 0x1}, 0xa8d, 0x2, 0x1, 0x2, @inferred, @inferred, 0x100, 0x0, &(0x7f0000000080)="0100000000000000000000800111d06e2e00df9e0da21547b9b28d0d80353ee02a7f9d0000", &(0x7f0000000180)="c9a54d83ccc04eff2555bc1a30b5eb5b4433304c5941018efa0659b1"}) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000e0, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x2, 0x4, 0x3, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_active_count\x00', 0x0, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x2080, 0x0) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000001100)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) 713.129051ms ago: executing program 2 (id=7368): syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r4) setresuid$auto(0x0, 0x8, 0x8000) 515.562022ms ago: executing program 2 (id=7369): socket(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) socket(0xf, 0x3, 0x2) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101}, 0x55) write$auto(0x3, 0x0, 0x5b4) 511.658731ms ago: executing program 1 (id=7337): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b67, 0x1) 0s ago: executing program 1 (id=7370): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd37, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x2, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) pwrite64$auto(0xc8, 0x0, 0x400f24, 0xc425) socket(0x10, 0x2, 0xc) kernel console output (not intermixed with test programs): ocketpair+0x261/0x5b0 [ 3233.078378][T17996] ? __pfx___sys_socketpair+0x10/0x10 [ 3233.078403][T17996] __x64_sys_socketpair+0x96/0x100 [ 3233.078421][T17996] ? lockdep_hardirqs_on+0x78/0x100 [ 3233.078439][T17996] do_syscall_64+0xc9/0xf80 [ 3233.078458][T17996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3233.078473][T17996] RIP: 0033:0x7f843279acb9 [ 3233.078487][T17996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3233.078502][T17996] RSP: 002b:00007f84309f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3233.078518][T17996] RAX: ffffffffffffffda RBX: 00007f8432a15fa0 RCX: 00007f843279acb9 [ 3233.078528][T17996] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3233.078538][T17996] RBP: 00007f8432808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3233.078547][T17996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3233.078556][T17996] R13: 00007f8432a16038 R14: 00007f8432a15fa0 R15: 00007ffce7c0e0f8 [ 3233.078576][T17996] [ 3241.115551][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7046'. [ 3241.140494][T18123] netlink: 'syz.3.7046': attribute type 1 has an invalid length. [ 3241.152318][T18123] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7046'. [ 3241.353510][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 3241.399189][T18129] netlink: 'syz.3.7048': attribute type 1 has an invalid length. [ 3241.431436][T18129] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7048'. [ 3242.129802][T18146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7050'. [ 3242.178942][T18146] netlink: 'syz.2.7050': attribute type 1 has an invalid length. [ 3242.207286][T18146] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7050'. [ 3242.933563][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7056'. [ 3243.115142][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7057'. [ 3243.165130][T18169] netlink: 'syz.3.7057': attribute type 1 has an invalid length. [ 3243.225657][T18169] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7057'. [ 3243.386226][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7059'. [ 3243.432394][T18171] netlink: 'syz.0.7059': attribute type 1 has an invalid length. [ 3244.391613][T18193] netlink: 'syz.3.7062': attribute type 1 has an invalid length. [ 3244.862604][T18197] netlink: 'syz.2.7065': attribute type 1 has an invalid length. [ 3246.978167][T18218] __nla_validate_parse: 5 callbacks suppressed [ 3246.978194][T18218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7069'. [ 3247.034972][T18219] netlink: 'syz.0.7069': attribute type 1 has an invalid length. [ 3247.042757][T18219] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7069'. [ 3248.314692][T18232] random: crng reseeded on system resumption [ 3248.864506][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7074'. [ 3249.036343][T18238] netlink: 'syz.3.7074': attribute type 1 has an invalid length. [ 3249.157696][T18238] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7074'. [ 3249.293756][T18238] netlink: 'syz.3.7074': attribute type 1 has an invalid length. [ 3252.859234][T18263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7079'. [ 3252.924417][T18263] netlink: 25 bytes leftover after parsing attributes in process `syz.2.7079'. [ 3252.972348][T18264] random: crng reseeded on system resumption [ 3253.991068][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7084'. [ 3254.023479][T18275] netlink: 'syz.1.7084': attribute type 1 has an invalid length. [ 3254.048718][T18275] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7084'. [ 3254.416303][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7087'. [ 3254.444688][T18286] netlink: 25 bytes leftover after parsing attributes in process `syz.1.7087'. [ 3254.555598][T18287] random: crng reseeded on system resumption [ 3255.176417][T18301] FAULT_INJECTION: forcing a failure. [ 3255.176417][T18301] name failslab, interval 1, probability 0, space 0, times 0 [ 3255.221175][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7091'. [ 3255.240094][T18301] CPU: 0 UID: 0 PID: 18301 Comm: syz.3.7090 Tainted: G L syzkaller #0 PREEMPT(full) [ 3255.240121][T18301] Tainted: [L]=SOFTLOCKUP [ 3255.240127][T18301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3255.240137][T18301] Call Trace: [ 3255.240143][T18301] [ 3255.240149][T18301] dump_stack_lvl+0x100/0x190 [ 3255.240174][T18301] should_fail_ex.cold+0x5/0xa [ 3255.240198][T18301] should_failslab+0xc2/0x120 [ 3255.240219][T18301] kmem_cache_alloc_noprof+0x83/0x780 [ 3255.240238][T18301] ? __pfx_map_id_range_down+0x10/0x10 [ 3255.240253][T18301] ? security_inode_alloc+0x3b/0x2c0 [ 3255.240276][T18301] ? security_inode_alloc+0x3b/0x2c0 [ 3255.240294][T18301] security_inode_alloc+0x3b/0x2c0 [ 3255.240315][T18301] inode_init_always_gfp+0xced/0x1040 [ 3255.240335][T18301] alloc_inode+0x8e/0x250 [ 3255.240355][T18301] sock_alloc+0x44/0x280 [ 3255.240368][T18301] ? security_socket_create+0x7f/0x250 [ 3255.240394][T18301] __sock_create+0xc2/0x860 [ 3255.240416][T18301] __sys_socketpair+0x261/0x5b0 [ 3255.240435][T18301] ? __pfx___sys_socketpair+0x10/0x10 [ 3255.240460][T18301] __x64_sys_socketpair+0x96/0x100 [ 3255.240478][T18301] ? lockdep_hardirqs_on+0x78/0x100 [ 3255.240496][T18301] do_syscall_64+0xc9/0xf80 [ 3255.240515][T18301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3255.240530][T18301] RIP: 0033:0x7f843279acb9 [ 3255.240544][T18301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3255.240559][T18301] RSP: 002b:00007f84309f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3255.240575][T18301] RAX: ffffffffffffffda RBX: 00007f8432a15fa0 RCX: 00007f843279acb9 [ 3255.240585][T18301] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3255.240594][T18301] RBP: 00007f8432808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3255.240603][T18301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3255.240612][T18301] R13: 00007f8432a16038 R14: 00007f8432a15fa0 R15: 00007ffce7c0e0f8 [ 3255.240631][T18301] [ 3255.240781][T18301] socket: no more sockets [ 3255.279236][T18303] netlink: 25 bytes leftover after parsing attributes in process `syz.0.7091'. [ 3256.341337][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7093'. [ 3256.486901][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7094'. [ 3258.524683][T18359] FAULT_INJECTION: forcing a failure. [ 3258.524683][T18359] name failslab, interval 1, probability 0, space 0, times 0 [ 3258.550902][T18359] CPU: 0 UID: 0 PID: 18359 Comm: syz.2.7102 Tainted: G L syzkaller #0 PREEMPT(full) [ 3258.550950][T18359] Tainted: [L]=SOFTLOCKUP [ 3258.550961][T18359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3258.550979][T18359] Call Trace: [ 3258.550989][T18359] [ 3258.551000][T18359] dump_stack_lvl+0x100/0x190 [ 3258.551042][T18359] should_fail_ex.cold+0x5/0xa [ 3258.551089][T18359] should_failslab+0xc2/0x120 [ 3258.551128][T18359] ? lsm_blob_alloc+0x68/0x90 [ 3258.551157][T18359] __kmalloc_noprof+0xf6/0x9c0 [ 3258.551197][T18359] ? lsm_blob_alloc+0x68/0x90 [ 3258.551224][T18359] lsm_blob_alloc+0x68/0x90 [ 3258.551255][T18359] security_sk_alloc+0x2d/0x290 [ 3258.551293][T18359] sk_prot_alloc+0x1d1/0x2a0 [ 3258.551326][T18359] sk_alloc+0x36/0xe80 [ 3258.551365][T18359] unix_create1+0xa6/0x700 [ 3258.551396][T18359] unix_create+0x145/0x270 [ 3258.551425][T18359] __sock_create+0x339/0x860 [ 3258.551472][T18359] __sys_socketpair+0x261/0x5b0 [ 3258.551511][T18359] ? __pfx___sys_socketpair+0x10/0x10 [ 3258.551561][T18359] __x64_sys_socketpair+0x96/0x100 [ 3258.551608][T18359] ? lockdep_hardirqs_on+0x78/0x100 [ 3258.551642][T18359] do_syscall_64+0xc9/0xf80 [ 3258.551685][T18359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3258.551716][T18359] RIP: 0033:0x7f962ed9acb9 [ 3258.551740][T18359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3258.551768][T18359] RSP: 002b:00007f962fcbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3258.551798][T18359] RAX: ffffffffffffffda RBX: 00007f962f015fa0 RCX: 00007f962ed9acb9 [ 3258.551818][T18359] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3258.551837][T18359] RBP: 00007f962ee08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3258.551855][T18359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3258.551873][T18359] R13: 00007f962f016038 R14: 00007f962f015fa0 R15: 00007fff1ac70f88 [ 3258.551912][T18359] [ 3259.449769][T18369] FAULT_INJECTION: forcing a failure. [ 3259.449769][T18369] name failslab, interval 1, probability 0, space 0, times 0 [ 3259.457349][T18364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7103'. [ 3259.462641][T18369] CPU: 1 UID: 0 PID: 18369 Comm: syz.2.7104 Tainted: G L syzkaller #0 PREEMPT(full) [ 3259.462685][T18369] Tainted: [L]=SOFTLOCKUP [ 3259.462696][T18369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3259.462714][T18369] Call Trace: [ 3259.462724][T18369] [ 3259.462735][T18369] dump_stack_lvl+0x100/0x190 [ 3259.462772][T18369] should_fail_ex.cold+0x5/0xa [ 3259.462818][T18369] should_failslab+0xc2/0x120 [ 3259.462855][T18369] ? lsm_blob_alloc+0x68/0x90 [ 3259.462883][T18369] __kmalloc_noprof+0xf6/0x9c0 [ 3259.462920][T18369] ? lsm_blob_alloc+0x68/0x90 [ 3259.462948][T18369] lsm_blob_alloc+0x68/0x90 [ 3259.462977][T18369] security_sk_alloc+0x2d/0x290 [ 3259.463014][T18369] sk_prot_alloc+0x1d1/0x2a0 [ 3259.463046][T18369] sk_alloc+0x36/0xe80 [ 3259.463083][T18369] unix_create1+0xa6/0x700 [ 3259.463113][T18369] unix_create+0x145/0x270 [ 3259.463139][T18369] __sock_create+0x339/0x860 [ 3259.463174][T18369] __sys_socketpair+0x261/0x5b0 [ 3259.463210][T18369] ? __pfx___sys_socketpair+0x10/0x10 [ 3259.463257][T18369] __x64_sys_socketpair+0x96/0x100 [ 3259.463290][T18369] ? lockdep_hardirqs_on+0x78/0x100 [ 3259.463322][T18369] do_syscall_64+0xc9/0xf80 [ 3259.463357][T18369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3259.463394][T18369] RIP: 0033:0x7f962ed9acb9 [ 3259.463416][T18369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3259.463445][T18369] RSP: 002b:00007f962fcbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3259.463473][T18369] RAX: ffffffffffffffda RBX: 00007f962f015fa0 RCX: 00007f962ed9acb9 [ 3259.463493][T18369] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3259.463511][T18369] RBP: 00007f962ee08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3259.463529][T18369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3259.463547][T18369] R13: 00007f962f016038 R14: 00007f962f015fa0 R15: 00007fff1ac70f88 [ 3259.463585][T18369] [ 3260.201170][T18364] netlink: 25 bytes leftover after parsing attributes in process `syz.1.7103'. [ 3260.291470][T18372] FAULT_INJECTION: forcing a failure. [ 3260.291470][T18372] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.414436][T18372] CPU: 0 UID: 0 PID: 18372 Comm: syz.3.7105 Tainted: G L syzkaller #0 PREEMPT(full) [ 3260.414482][T18372] Tainted: [L]=SOFTLOCKUP [ 3260.414493][T18372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3260.414510][T18372] Call Trace: [ 3260.414519][T18372] [ 3260.414530][T18372] dump_stack_lvl+0x100/0x190 [ 3260.414571][T18372] should_fail_ex.cold+0x5/0xa [ 3260.414619][T18372] should_failslab+0xc2/0x120 [ 3260.414659][T18372] ? lsm_blob_alloc+0x68/0x90 [ 3260.414689][T18372] __kmalloc_noprof+0xf6/0x9c0 [ 3260.414731][T18372] ? lsm_blob_alloc+0x68/0x90 [ 3260.414759][T18372] lsm_blob_alloc+0x68/0x90 [ 3260.414788][T18372] security_sk_alloc+0x2d/0x290 [ 3260.414825][T18372] sk_prot_alloc+0x1d1/0x2a0 [ 3260.414858][T18372] sk_alloc+0x36/0xe80 [ 3260.414898][T18372] unix_create1+0xa6/0x700 [ 3260.414929][T18372] unix_create+0x145/0x270 [ 3260.414957][T18372] __sock_create+0x339/0x860 [ 3260.414994][T18372] __sys_socketpair+0x261/0x5b0 [ 3260.415031][T18372] ? __pfx___sys_socketpair+0x10/0x10 [ 3260.415089][T18372] __x64_sys_socketpair+0x96/0x100 [ 3260.415124][T18372] ? lockdep_hardirqs_on+0x78/0x100 [ 3260.415160][T18372] do_syscall_64+0xc9/0xf80 [ 3260.415197][T18372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3260.415226][T18372] RIP: 0033:0x7f843279acb9 [ 3260.415251][T18372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3260.415278][T18372] RSP: 002b:00007f84309f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3260.415307][T18372] RAX: ffffffffffffffda RBX: 00007f8432a15fa0 RCX: 00007f843279acb9 [ 3260.415327][T18372] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3260.415345][T18372] RBP: 00007f8432808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3260.415363][T18372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3260.415380][T18372] R13: 00007f8432a16038 R14: 00007f8432a15fa0 R15: 00007ffce7c0e0f8 [ 3260.415419][T18372] [ 3261.062845][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7106'. [ 3261.073094][T18377] netlink: 25 bytes leftover after parsing attributes in process `syz.2.7106'. [ 3264.301532][T18413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7114'. [ 3264.358282][T18413] netlink: 25 bytes leftover after parsing attributes in process `syz.2.7114'. [ 3264.446705][T18414] random: crng reseeded on system resumption [ 3265.687940][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7116'. [ 3265.741004][T18428] netlink: 25 bytes leftover after parsing attributes in process `syz.0.7116'. [ 3266.425421][T18437] FAULT_INJECTION: forcing a failure. [ 3266.425421][T18437] name failslab, interval 1, probability 0, space 0, times 0 [ 3266.461898][T18437] CPU: 0 UID: 0 PID: 18437 Comm: syz.1.7120 Tainted: G L syzkaller #0 PREEMPT(full) [ 3266.461949][T18437] Tainted: [L]=SOFTLOCKUP [ 3266.461960][T18437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3266.461979][T18437] Call Trace: [ 3266.461990][T18437] [ 3266.462001][T18437] dump_stack_lvl+0x100/0x190 [ 3266.462043][T18437] should_fail_ex.cold+0x5/0xa [ 3266.462090][T18437] should_failslab+0xc2/0x120 [ 3266.462131][T18437] kmem_cache_alloc_noprof+0x83/0x780 [ 3266.462169][T18437] ? pidfs_register_pid+0x97/0x200 [ 3266.462208][T18437] ? pidfs_register_pid+0x97/0x200 [ 3266.462237][T18437] pidfs_register_pid+0x97/0x200 [ 3266.462271][T18437] unix_socketpair+0xda/0x8c0 [ 3266.462309][T18437] __sys_socketpair+0x2f7/0x5b0 [ 3266.462347][T18437] ? __pfx___sys_socketpair+0x10/0x10 [ 3266.462395][T18437] __x64_sys_socketpair+0x96/0x100 [ 3266.462431][T18437] ? lockdep_hardirqs_on+0x78/0x100 [ 3266.462464][T18437] do_syscall_64+0xc9/0xf80 [ 3266.462500][T18437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3266.462529][T18437] RIP: 0033:0x7f1eb259acb9 [ 3266.462552][T18437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3266.462581][T18437] RSP: 002b:00007f1eb34c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3266.462610][T18437] RAX: ffffffffffffffda RBX: 00007f1eb2815fa0 RCX: 00007f1eb259acb9 [ 3266.462630][T18437] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3266.462649][T18437] RBP: 00007f1eb2608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3266.462668][T18437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3266.462685][T18437] R13: 00007f1eb2816038 R14: 00007f1eb2815fa0 R15: 00007fff5e07d168 [ 3266.462724][T18437] [ 3267.415875][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7123'. [ 3267.456098][T18452] netlink: 25 bytes leftover after parsing attributes in process `syz.3.7123'. [ 3267.505745][T18454] FAULT_INJECTION: forcing a failure. [ 3267.505745][T18454] name failslab, interval 1, probability 0, space 0, times 0 [ 3267.538304][T18454] CPU: 1 UID: 0 PID: 18454 Comm: syz.1.7124 Tainted: G L syzkaller #0 PREEMPT(full) [ 3267.538352][T18454] Tainted: [L]=SOFTLOCKUP [ 3267.538364][T18454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3267.538380][T18454] Call Trace: [ 3267.538389][T18454] [ 3267.538400][T18454] dump_stack_lvl+0x100/0x190 [ 3267.538439][T18454] should_fail_ex.cold+0x5/0xa [ 3267.538487][T18454] should_failslab+0xc2/0x120 [ 3267.538523][T18454] ? lsm_blob_alloc+0x68/0x90 [ 3267.538553][T18454] __kmalloc_noprof+0xf6/0x9c0 [ 3267.538606][T18454] ? lsm_blob_alloc+0x68/0x90 [ 3267.538636][T18454] lsm_blob_alloc+0x68/0x90 [ 3267.538669][T18454] security_sk_alloc+0x2d/0x290 [ 3267.538708][T18454] sk_prot_alloc+0x1d1/0x2a0 [ 3267.538741][T18454] sk_alloc+0x36/0xe80 [ 3267.538781][T18454] unix_create1+0xa6/0x700 [ 3267.538810][T18454] unix_create+0x145/0x270 [ 3267.538840][T18454] __sock_create+0x339/0x860 [ 3267.538879][T18454] __sys_socketpair+0x261/0x5b0 [ 3267.538917][T18454] ? __pfx___sys_socketpair+0x10/0x10 [ 3267.538968][T18454] __x64_sys_socketpair+0x96/0x100 [ 3267.539004][T18454] ? lockdep_hardirqs_on+0x78/0x100 [ 3267.539037][T18454] do_syscall_64+0xc9/0xf80 [ 3267.539074][T18454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3267.539102][T18454] RIP: 0033:0x7f1eb259acb9 [ 3267.539124][T18454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3267.539151][T18454] RSP: 002b:00007f1eb34c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3267.539179][T18454] RAX: ffffffffffffffda RBX: 00007f1eb2815fa0 RCX: 00007f1eb259acb9 [ 3267.539199][T18454] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3267.539218][T18454] RBP: 00007f1eb2608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3267.539236][T18454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3267.539253][T18454] R13: 00007f1eb2816038 R14: 00007f1eb2815fa0 R15: 00007fff5e07d168 [ 3267.539291][T18454] [ 3267.710902][T18456] random: crng reseeded on system resumption [ 3269.041807][T18471] random: crng reseeded on system resumption [ 3270.406195][T18483] FAULT_INJECTION: forcing a failure. [ 3270.406195][T18483] name failslab, interval 1, probability 0, space 0, times 0 [ 3270.456606][T18483] CPU: 0 UID: 0 PID: 18483 Comm: syz.1.7129 Tainted: G L syzkaller #0 PREEMPT(full) [ 3270.456654][T18483] Tainted: [L]=SOFTLOCKUP [ 3270.456665][T18483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3270.456682][T18483] Call Trace: [ 3270.456692][T18483] [ 3270.456702][T18483] dump_stack_lvl+0x100/0x190 [ 3270.456739][T18483] should_fail_ex.cold+0x5/0xa [ 3270.456782][T18483] should_failslab+0xc2/0x120 [ 3270.456816][T18483] ? lsm_blob_alloc+0x68/0x90 [ 3270.456843][T18483] __kmalloc_noprof+0xf6/0x9c0 [ 3270.456881][T18483] ? lsm_blob_alloc+0x68/0x90 [ 3270.456906][T18483] lsm_blob_alloc+0x68/0x90 [ 3270.456933][T18483] security_sk_alloc+0x2d/0x290 [ 3270.456969][T18483] sk_prot_alloc+0x1d1/0x2a0 [ 3270.457000][T18483] sk_alloc+0x36/0xe80 [ 3270.457039][T18483] unix_create1+0xa6/0x700 [ 3270.457067][T18483] unix_create+0x145/0x270 [ 3270.457099][T18483] __sock_create+0x339/0x860 [ 3270.457136][T18483] __sys_socketpair+0x261/0x5b0 [ 3270.457170][T18483] ? __pfx___sys_socketpair+0x10/0x10 [ 3270.457214][T18483] __x64_sys_socketpair+0x96/0x100 [ 3270.457246][T18483] ? lockdep_hardirqs_on+0x78/0x100 [ 3270.457277][T18483] do_syscall_64+0xc9/0xf80 [ 3270.457312][T18483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3270.457354][T18483] RIP: 0033:0x7f1eb259acb9 [ 3270.457379][T18483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3270.457406][T18483] RSP: 002b:00007f1eb34c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3270.457434][T18483] RAX: ffffffffffffffda RBX: 00007f1eb2815fa0 RCX: 00007f1eb259acb9 [ 3270.457454][T18483] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3270.457472][T18483] RBP: 00007f1eb2608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3270.457491][T18483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3270.457508][T18483] R13: 00007f1eb2816038 R14: 00007f1eb2815fa0 R15: 00007fff5e07d168 [ 3270.457543][T18483] [ 3271.409468][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3271.415825][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3271.514858][T18490] FAULT_INJECTION: forcing a failure. [ 3271.514858][T18490] name failslab, interval 1, probability 0, space 0, times 0 [ 3271.550261][T18490] CPU: 0 UID: 0 PID: 18490 Comm: syz.1.7131 Tainted: G L syzkaller #0 PREEMPT(full) [ 3271.550318][T18490] Tainted: [L]=SOFTLOCKUP [ 3271.550330][T18490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3271.550349][T18490] Call Trace: [ 3271.550359][T18490] [ 3271.550371][T18490] dump_stack_lvl+0x100/0x190 [ 3271.550413][T18490] should_fail_ex.cold+0x5/0xa [ 3271.550462][T18490] should_failslab+0xc2/0x120 [ 3271.550503][T18490] ? lsm_blob_alloc+0x68/0x90 [ 3271.550533][T18490] __kmalloc_noprof+0xf6/0x9c0 [ 3271.550572][T18490] ? lsm_blob_alloc+0x68/0x90 [ 3271.550601][T18490] lsm_blob_alloc+0x68/0x90 [ 3271.550633][T18490] security_sk_alloc+0x2d/0x290 [ 3271.550672][T18490] sk_prot_alloc+0x1d1/0x2a0 [ 3271.550706][T18490] sk_alloc+0x36/0xe80 [ 3271.550745][T18490] unix_create1+0xa6/0x700 [ 3271.550776][T18490] unix_create+0x145/0x270 [ 3271.550805][T18490] __sock_create+0x339/0x860 [ 3271.550845][T18490] __sys_socketpair+0x261/0x5b0 [ 3271.550883][T18490] ? __pfx___sys_socketpair+0x10/0x10 [ 3271.550932][T18490] __x64_sys_socketpair+0x96/0x100 [ 3271.550967][T18490] ? lockdep_hardirqs_on+0x78/0x100 [ 3271.551000][T18490] do_syscall_64+0xc9/0xf80 [ 3271.551037][T18490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3271.551067][T18490] RIP: 0033:0x7f1eb259acb9 [ 3271.551090][T18490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3271.551118][T18490] RSP: 002b:00007f1eb34c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3271.551147][T18490] RAX: ffffffffffffffda RBX: 00007f1eb2815fa0 RCX: 00007f1eb259acb9 [ 3271.551168][T18490] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3271.551186][T18490] RBP: 00007f1eb2608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3271.551204][T18490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3271.551222][T18490] R13: 00007f1eb2816038 R14: 00007f1eb2815fa0 R15: 00007fff5e07d168 [ 3271.551261][T18490] [ 3273.025676][T18513] FAULT_INJECTION: forcing a failure. [ 3273.025676][T18513] name failslab, interval 1, probability 0, space 0, times 0 [ 3273.071492][T18513] CPU: 1 UID: 0 PID: 18513 Comm: syz.2.7138 Tainted: G L syzkaller #0 PREEMPT(full) [ 3273.071542][T18513] Tainted: [L]=SOFTLOCKUP [ 3273.071553][T18513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3273.071571][T18513] Call Trace: [ 3273.071582][T18513] [ 3273.071594][T18513] dump_stack_lvl+0x100/0x190 [ 3273.071636][T18513] should_fail_ex.cold+0x5/0xa [ 3273.071685][T18513] should_failslab+0xc2/0x120 [ 3273.071724][T18513] ? lsm_blob_alloc+0x68/0x90 [ 3273.071755][T18513] __kmalloc_noprof+0xf6/0x9c0 [ 3273.071795][T18513] ? lsm_blob_alloc+0x68/0x90 [ 3273.071823][T18513] lsm_blob_alloc+0x68/0x90 [ 3273.071856][T18513] security_sk_alloc+0x2d/0x290 [ 3273.071895][T18513] sk_prot_alloc+0x1d1/0x2a0 [ 3273.071929][T18513] sk_alloc+0x36/0xe80 [ 3273.071968][T18513] unix_create1+0xa6/0x700 [ 3273.071999][T18513] unix_create+0x145/0x270 [ 3273.072027][T18513] __sock_create+0x339/0x860 [ 3273.072067][T18513] __sys_socketpair+0x261/0x5b0 [ 3273.072105][T18513] ? __pfx___sys_socketpair+0x10/0x10 [ 3273.072154][T18513] __x64_sys_socketpair+0x96/0x100 [ 3273.072196][T18513] ? lockdep_hardirqs_on+0x78/0x100 [ 3273.072230][T18513] do_syscall_64+0xc9/0xf80 [ 3273.072267][T18513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3273.072298][T18513] RIP: 0033:0x7f962ed9acb9 [ 3273.072322][T18513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3273.072351][T18513] RSP: 002b:00007f962fcbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3273.072381][T18513] RAX: ffffffffffffffda RBX: 00007f962f015fa0 RCX: 00007f962ed9acb9 [ 3273.072401][T18513] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3273.072419][T18513] RBP: 00007f962ee08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3273.072438][T18513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3273.072455][T18513] R13: 00007f962f016038 R14: 00007f962f015fa0 R15: 00007fff1ac70f88 [ 3273.072495][T18513] [ 3273.341362][T18515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7137'. [ 3274.055306][T18530] FAULT_INJECTION: forcing a failure. [ 3274.055306][T18530] name failslab, interval 1, probability 0, space 0, times 0 [ 3274.084403][T18530] CPU: 0 UID: 0 PID: 18530 Comm: syz.2.7142 Tainted: G L syzkaller #0 PREEMPT(full) [ 3274.084454][T18530] Tainted: [L]=SOFTLOCKUP [ 3274.084466][T18530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3274.084483][T18530] Call Trace: [ 3274.084494][T18530] [ 3274.084506][T18530] dump_stack_lvl+0x100/0x190 [ 3274.084548][T18530] should_fail_ex.cold+0x5/0xa [ 3274.084595][T18530] should_failslab+0xc2/0x120 [ 3274.084635][T18530] kmem_cache_alloc_noprof+0x83/0x780 [ 3274.084675][T18530] ? pidfs_register_pid+0x97/0x200 [ 3274.084712][T18530] ? pidfs_register_pid+0x97/0x200 [ 3274.084741][T18530] pidfs_register_pid+0x97/0x200 [ 3274.084774][T18530] unix_socketpair+0xda/0x8c0 [ 3274.084811][T18530] __sys_socketpair+0x2f7/0x5b0 [ 3274.084849][T18530] ? __pfx___sys_socketpair+0x10/0x10 [ 3274.084898][T18530] __x64_sys_socketpair+0x96/0x100 [ 3274.084933][T18530] ? lockdep_hardirqs_on+0x78/0x100 [ 3274.084965][T18530] do_syscall_64+0xc9/0xf80 [ 3274.085002][T18530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3274.085032][T18530] RIP: 0033:0x7f962ed9acb9 [ 3274.085055][T18530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3274.085083][T18530] RSP: 002b:00007f962fcbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3274.085121][T18530] RAX: ffffffffffffffda RBX: 00007f962f015fa0 RCX: 00007f962ed9acb9 [ 3274.085142][T18530] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3274.085161][T18530] RBP: 00007f962ee08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3274.085180][T18530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3274.085199][T18530] R13: 00007f962f016038 R14: 00007f962f015fa0 R15: 00007fff1ac70f88 [ 3274.085239][T18530] [ 3275.320997][T18546] FAULT_INJECTION: forcing a failure. [ 3275.320997][T18546] name failslab, interval 1, probability 0, space 0, times 0 [ 3275.502729][T18546] CPU: 0 UID: 0 PID: 18546 Comm: syz.1.7145 Tainted: G L syzkaller #0 PREEMPT(full) [ 3275.502779][T18546] Tainted: [L]=SOFTLOCKUP [ 3275.502791][T18546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3275.502810][T18546] Call Trace: [ 3275.502820][T18546] [ 3275.502831][T18546] dump_stack_lvl+0x100/0x190 [ 3275.502874][T18546] should_fail_ex.cold+0x5/0xa [ 3275.502921][T18546] should_failslab+0xc2/0x120 [ 3275.502960][T18546] ? lsm_blob_alloc+0x68/0x90 [ 3275.502991][T18546] __kmalloc_noprof+0xf6/0x9c0 [ 3275.503022][T18546] ? lsm_blob_alloc+0x68/0x90 [ 3275.503051][T18546] lsm_blob_alloc+0x68/0x90 [ 3275.503083][T18546] security_sk_alloc+0x2d/0x290 [ 3275.503122][T18546] sk_prot_alloc+0x1d1/0x2a0 [ 3275.503155][T18546] sk_alloc+0x36/0xe80 [ 3275.503195][T18546] unix_create1+0xa6/0x700 [ 3275.503225][T18546] unix_create+0x145/0x270 [ 3275.503262][T18546] __sock_create+0x339/0x860 [ 3275.503302][T18546] __sys_socketpair+0x261/0x5b0 [ 3275.503340][T18546] ? __pfx___sys_socketpair+0x10/0x10 [ 3275.503391][T18546] __x64_sys_socketpair+0x96/0x100 [ 3275.503426][T18546] ? lockdep_hardirqs_on+0x78/0x100 [ 3275.503459][T18546] do_syscall_64+0xc9/0xf80 [ 3275.503496][T18546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3275.503525][T18546] RIP: 0033:0x7f1eb259acb9 [ 3275.503549][T18546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3275.503579][T18546] RSP: 002b:00007f1eb34c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3275.503609][T18546] RAX: ffffffffffffffda RBX: 00007f1eb2815fa0 RCX: 00007f1eb259acb9 [ 3275.503629][T18546] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3275.503649][T18546] RBP: 00007f1eb2608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3275.503667][T18546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3275.503686][T18546] R13: 00007f1eb2816038 R14: 00007f1eb2815fa0 R15: 00007fff5e07d168 [ 3275.503725][T18546] [ 3277.039640][T18568] random: crng reseeded on system resumption [ 3277.302453][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7152'. [ 3278.955935][T18602] random: crng reseeded on system resumption [ 3279.696730][T18615] FAULT_INJECTION: forcing a failure. [ 3279.696730][T18615] name failslab, interval 1, probability 0, space 0, times 0 [ 3279.714426][T18615] CPU: 0 UID: 0 PID: 18615 Comm: syz.3.7161 Tainted: G L syzkaller #0 PREEMPT(full) [ 3279.714476][T18615] Tainted: [L]=SOFTLOCKUP [ 3279.714487][T18615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3279.714506][T18615] Call Trace: [ 3279.714516][T18615] [ 3279.714527][T18615] dump_stack_lvl+0x100/0x190 [ 3279.714569][T18615] should_fail_ex.cold+0x5/0xa [ 3279.714615][T18615] should_failslab+0xc2/0x120 [ 3279.714655][T18615] ? lsm_blob_alloc+0x68/0x90 [ 3279.714686][T18615] __kmalloc_noprof+0xf6/0x9c0 [ 3279.714726][T18615] ? lsm_blob_alloc+0x68/0x90 [ 3279.714754][T18615] lsm_blob_alloc+0x68/0x90 [ 3279.714784][T18615] security_sk_alloc+0x2d/0x290 [ 3279.714823][T18615] sk_prot_alloc+0x1d1/0x2a0 [ 3279.714857][T18615] sk_alloc+0x36/0xe80 [ 3279.714896][T18615] unix_create1+0xa6/0x700 [ 3279.714927][T18615] unix_create+0x145/0x270 [ 3279.714956][T18615] __sock_create+0x339/0x860 [ 3279.714995][T18615] __sys_socketpair+0x261/0x5b0 [ 3279.715041][T18615] ? __pfx___sys_socketpair+0x10/0x10 [ 3279.715092][T18615] __x64_sys_socketpair+0x96/0x100 [ 3279.715128][T18615] ? lockdep_hardirqs_on+0x78/0x100 [ 3279.715161][T18615] do_syscall_64+0xc9/0xf80 [ 3279.715198][T18615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3279.715228][T18615] RIP: 0033:0x7f843279acb9 [ 3279.715251][T18615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3279.715280][T18615] RSP: 002b:00007f84309f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3279.715309][T18615] RAX: ffffffffffffffda RBX: 00007f8432a15fa0 RCX: 00007f843279acb9 [ 3279.715328][T18615] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3279.715346][T18615] RBP: 00007f8432808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3279.715364][T18615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3279.715382][T18615] R13: 00007f8432a16038 R14: 00007f8432a15fa0 R15: 00007ffce7c0e0f8 [ 3279.715420][T18615] [ 3280.006458][T18612] random: crng reseeded on system resumption [ 3282.426974][T18647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7167'. [ 3282.533668][T18647] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7167'. [ 3284.006816][T18662] random: crng reseeded on system resumption [ 3284.665032][T18672] random: crng reseeded on system resumption [ 3285.278855][T18677] random: crng reseeded on system resumption [ 3285.709664][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7176'. [ 3287.655191][T18709] FAULT_INJECTION: forcing a failure. [ 3287.655191][T18709] name failslab, interval 1, probability 0, space 0, times 0 [ 3287.694560][T18709] CPU: 1 UID: 0 PID: 18709 Comm: syz.0.7182 Tainted: G L syzkaller #0 PREEMPT(full) [ 3287.694612][T18709] Tainted: [L]=SOFTLOCKUP [ 3287.694623][T18709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3287.694641][T18709] Call Trace: [ 3287.694652][T18709] [ 3287.694663][T18709] dump_stack_lvl+0x100/0x190 [ 3287.694705][T18709] should_fail_ex.cold+0x5/0xa [ 3287.694752][T18709] should_failslab+0xc2/0x120 [ 3287.694792][T18709] ? lsm_blob_alloc+0x68/0x90 [ 3287.694823][T18709] __kmalloc_noprof+0xf6/0x9c0 [ 3287.694864][T18709] ? lsm_blob_alloc+0x68/0x90 [ 3287.694892][T18709] lsm_blob_alloc+0x68/0x90 [ 3287.694924][T18709] security_sk_alloc+0x2d/0x290 [ 3287.694963][T18709] sk_prot_alloc+0x1d1/0x2a0 [ 3287.694996][T18709] sk_alloc+0x36/0xe80 [ 3287.695036][T18709] unix_create1+0xa6/0x700 [ 3287.695067][T18709] unix_create+0x145/0x270 [ 3287.695095][T18709] __sock_create+0x339/0x860 [ 3287.695134][T18709] __sys_socketpair+0x261/0x5b0 [ 3287.695181][T18709] ? __pfx___sys_socketpair+0x10/0x10 [ 3287.695231][T18709] __x64_sys_socketpair+0x96/0x100 [ 3287.695265][T18709] ? lockdep_hardirqs_on+0x78/0x100 [ 3287.695299][T18709] do_syscall_64+0xc9/0xf80 [ 3287.695341][T18709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3287.695371][T18709] RIP: 0033:0x7f040259acb9 [ 3287.695400][T18709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3287.695429][T18709] RSP: 002b:00007f040344c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3287.695459][T18709] RAX: ffffffffffffffda RBX: 00007f0402815fa0 RCX: 00007f040259acb9 [ 3287.695479][T18709] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3287.695498][T18709] RBP: 00007f0402608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3287.695520][T18709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3287.695538][T18709] R13: 00007f0402816038 R14: 00007f0402815fa0 R15: 00007ffd67d06368 [ 3287.695577][T18709] [ 3290.919011][T18735] FAULT_INJECTION: forcing a failure. [ 3290.919011][T18735] name failslab, interval 1, probability 0, space 0, times 0 [ 3291.025029][T18735] CPU: 0 UID: 0 PID: 18735 Comm: syz.0.7188 Tainted: G L syzkaller #0 PREEMPT(full) [ 3291.025058][T18735] Tainted: [L]=SOFTLOCKUP [ 3291.025065][T18735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3291.025075][T18735] Call Trace: [ 3291.025081][T18735] [ 3291.025088][T18735] dump_stack_lvl+0x100/0x190 [ 3291.025110][T18735] should_fail_ex.cold+0x5/0xa [ 3291.025137][T18735] should_failslab+0xc2/0x120 [ 3291.025157][T18735] ? lsm_blob_alloc+0x68/0x90 [ 3291.025173][T18735] __kmalloc_noprof+0xf6/0x9c0 [ 3291.025193][T18735] ? lsm_blob_alloc+0x68/0x90 [ 3291.025207][T18735] lsm_blob_alloc+0x68/0x90 [ 3291.025232][T18735] security_sk_alloc+0x2d/0x290 [ 3291.025252][T18735] sk_prot_alloc+0x1d1/0x2a0 [ 3291.025270][T18735] sk_alloc+0x36/0xe80 [ 3291.025290][T18735] unix_create1+0xa6/0x700 [ 3291.025306][T18735] unix_create+0x145/0x270 [ 3291.025320][T18735] __sock_create+0x339/0x860 [ 3291.025340][T18735] __sys_socketpair+0x261/0x5b0 [ 3291.025360][T18735] ? __pfx___sys_socketpair+0x10/0x10 [ 3291.025385][T18735] __x64_sys_socketpair+0x96/0x100 [ 3291.025403][T18735] ? lockdep_hardirqs_on+0x78/0x100 [ 3291.025421][T18735] do_syscall_64+0xc9/0xf80 [ 3291.025439][T18735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3291.025455][T18735] RIP: 0033:0x7f040259acb9 [ 3291.025468][T18735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3291.025482][T18735] RSP: 002b:00007f040344c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3291.025498][T18735] RAX: ffffffffffffffda RBX: 00007f0402815fa0 RCX: 00007f040259acb9 [ 3291.025508][T18735] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3291.025518][T18735] RBP: 00007f0402608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3291.025527][T18735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3291.025536][T18735] R13: 00007f0402816038 R14: 00007f0402815fa0 R15: 00007ffd67d06368 [ 3291.025555][T18735] [ 3292.214932][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7191'. [ 3292.261547][T18752] netlink: 'syz.0.7191': attribute type 1 has an invalid length. [ 3292.351636][T18752] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7191'. [ 3294.856041][T18773] FAULT_INJECTION: forcing a failure. [ 3294.856041][T18773] name failslab, interval 1, probability 0, space 0, times 0 [ 3294.868937][T18773] CPU: 1 UID: 0 PID: 18773 Comm: syz.2.7197 Tainted: G L syzkaller #0 PREEMPT(full) [ 3294.868985][T18773] Tainted: [L]=SOFTLOCKUP [ 3294.868995][T18773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3294.869013][T18773] Call Trace: [ 3294.869024][T18773] [ 3294.869035][T18773] dump_stack_lvl+0x100/0x190 [ 3294.869076][T18773] should_fail_ex.cold+0x5/0xa [ 3294.869124][T18773] should_failslab+0xc2/0x120 [ 3294.869163][T18773] ? lsm_blob_alloc+0x68/0x90 [ 3294.869192][T18773] __kmalloc_noprof+0xf6/0x9c0 [ 3294.869231][T18773] ? lsm_blob_alloc+0x68/0x90 [ 3294.869260][T18773] lsm_blob_alloc+0x68/0x90 [ 3294.869291][T18773] security_sk_alloc+0x2d/0x290 [ 3294.869330][T18773] sk_prot_alloc+0x1d1/0x2a0 [ 3294.869363][T18773] sk_alloc+0x36/0xe80 [ 3294.869402][T18773] unix_create1+0xa6/0x700 [ 3294.869433][T18773] unix_create+0x145/0x270 [ 3294.869461][T18773] __sock_create+0x339/0x860 [ 3294.869500][T18773] __sys_socketpair+0x261/0x5b0 [ 3294.869538][T18773] ? __pfx___sys_socketpair+0x10/0x10 [ 3294.869586][T18773] __x64_sys_socketpair+0x96/0x100 [ 3294.869620][T18773] ? lockdep_hardirqs_on+0x78/0x100 [ 3294.869653][T18773] do_syscall_64+0xc9/0xf80 [ 3294.869689][T18773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3294.869730][T18773] RIP: 0033:0x7f962ed9acb9 [ 3294.869753][T18773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3294.869782][T18773] RSP: 002b:00007f962fcbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3294.869810][T18773] RAX: ffffffffffffffda RBX: 00007f962f015fa0 RCX: 00007f962ed9acb9 [ 3294.869828][T18773] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3294.869845][T18773] RBP: 00007f962ee08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3294.869862][T18773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3294.869879][T18773] R13: 00007f962f016038 R14: 00007f962f015fa0 R15: 00007fff1ac70f88 [ 3294.869918][T18773] [ 3295.687736][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7201'. [ 3295.697715][T18779] netlink: 'syz.1.7201': attribute type 1 has an invalid length. [ 3295.754324][T18779] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7201'. [ 3295.769989][T18779] netlink: 'syz.1.7201': attribute type 1 has an invalid length. [ 3296.131255][T18788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3296.182091][T18788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3296.193172][T18788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3296.205933][T18788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3296.225875][T18788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3296.838845][T18793] FAULT_INJECTION: forcing a failure. [ 3296.838845][T18793] name failslab, interval 1, probability 0, space 0, times 0 [ 3296.870673][T18793] CPU: 0 UID: 0 PID: 18793 Comm: syz.2.7204 Tainted: G L syzkaller #0 PREEMPT(full) [ 3296.870722][T18793] Tainted: [L]=SOFTLOCKUP [ 3296.870734][T18793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3296.870752][T18793] Call Trace: [ 3296.870763][T18793] [ 3296.870775][T18793] dump_stack_lvl+0x100/0x190 [ 3296.870838][T18793] should_fail_ex.cold+0x5/0xa [ 3296.870888][T18793] should_failslab+0xc2/0x120 [ 3296.870930][T18793] kmem_cache_alloc_noprof+0x83/0x780 [ 3296.870971][T18793] ? pidfs_register_pid+0x97/0x200 [ 3296.871010][T18793] ? pidfs_register_pid+0x97/0x200 [ 3296.871039][T18793] pidfs_register_pid+0x97/0x200 [ 3296.871074][T18793] unix_socketpair+0xda/0x8c0 [ 3296.871113][T18793] __sys_socketpair+0x2f7/0x5b0 [ 3296.871152][T18793] ? __pfx___sys_socketpair+0x10/0x10 [ 3296.871201][T18793] __x64_sys_socketpair+0x96/0x100 [ 3296.871236][T18793] ? lockdep_hardirqs_on+0x78/0x100 [ 3296.871271][T18793] do_syscall_64+0xc9/0xf80 [ 3296.871308][T18793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3296.871337][T18793] RIP: 0033:0x7f962ed9acb9 [ 3296.871361][T18793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3296.871390][T18793] RSP: 002b:00007f962fcbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3296.871419][T18793] RAX: ffffffffffffffda RBX: 00007f962f015fa0 RCX: 00007f962ed9acb9 [ 3296.871440][T18793] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3296.871458][T18793] RBP: 00007f962ee08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3296.871477][T18793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3296.871500][T18793] R13: 00007f962f016038 R14: 00007f962f015fa0 R15: 00007fff1ac70f88 [ 3296.871537][T18793] [ 3298.101608][ T5627] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3298.274835][T18788] Bluetooth: hci3: command tx timeout [ 3298.451278][ T5627] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3298.527479][T18786] chnl_net:caif_netlink_parms(): no params data found [ 3299.137838][ T5627] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3299.307961][ T5627] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3299.723635][T18786] bridge0: port 1(bridge_slave_0) entered blocking state [ 3299.731058][T18786] bridge0: port 1(bridge_slave_0) entered disabled state [ 3299.738713][T18786] bridge_slave_0: entered allmulticast mode [ 3299.771940][T18786] bridge_slave_0: entered promiscuous mode [ 3299.807694][T18786] bridge0: port 2(bridge_slave_1) entered blocking state [ 3299.819834][T18786] bridge0: port 2(bridge_slave_1) entered disabled state [ 3299.840901][T18786] bridge_slave_1: entered allmulticast mode [ 3299.853611][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7210'. [ 3299.875402][T18786] bridge_slave_1: entered promiscuous mode [ 3299.885059][T18821] netlink: 'syz.2.7210': attribute type 1 has an invalid length. [ 3299.906578][T18821] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7210'. [ 3299.926380][T18821] netlink: 'syz.2.7210': attribute type 1 has an invalid length. [ 3299.959753][T18786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3300.021427][T18786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3300.156361][T18786] team0: Port device team_slave_0 added [ 3300.184700][T18786] team0: Port device team_slave_1 added [ 3300.247235][T18830] FAULT_INJECTION: forcing a failure. [ 3300.247235][T18830] name failslab, interval 1, probability 0, space 0, times 0 [ 3300.284511][T18830] CPU: 1 UID: 0 PID: 18830 Comm: syz.1.7213 Tainted: G L syzkaller #0 PREEMPT(full) [ 3300.284558][T18830] Tainted: [L]=SOFTLOCKUP [ 3300.284569][T18830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3300.284587][T18830] Call Trace: [ 3300.284597][T18830] [ 3300.284607][T18830] dump_stack_lvl+0x100/0x190 [ 3300.284656][T18830] should_fail_ex.cold+0x5/0xa [ 3300.284704][T18830] should_failslab+0xc2/0x120 [ 3300.284743][T18830] ? lsm_blob_alloc+0x68/0x90 [ 3300.284772][T18830] __kmalloc_noprof+0xf6/0x9c0 [ 3300.284812][T18830] ? lsm_blob_alloc+0x68/0x90 [ 3300.284841][T18830] lsm_blob_alloc+0x68/0x90 [ 3300.284872][T18830] security_sk_alloc+0x2d/0x290 [ 3300.284911][T18830] sk_prot_alloc+0x1d1/0x2a0 [ 3300.284945][T18830] sk_alloc+0x36/0xe80 [ 3300.284984][T18830] unix_create1+0xa6/0x700 [ 3300.285015][T18830] unix_create+0x145/0x270 [ 3300.285043][T18830] __sock_create+0x339/0x860 [ 3300.285083][T18830] __sys_socketpair+0x261/0x5b0 [ 3300.285120][T18830] ? __pfx___sys_socketpair+0x10/0x10 [ 3300.285169][T18830] __x64_sys_socketpair+0x96/0x100 [ 3300.285204][T18830] ? lockdep_hardirqs_on+0x78/0x100 [ 3300.285237][T18830] do_syscall_64+0xc9/0xf80 [ 3300.285274][T18830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3300.285303][T18830] RIP: 0033:0x7f1eb259acb9 [ 3300.285326][T18830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3300.285354][T18830] RSP: 002b:00007f1eb34c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3300.285381][T18830] RAX: ffffffffffffffda RBX: 00007f1eb2815fa0 RCX: 00007f1eb259acb9 [ 3300.285400][T18830] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3300.285419][T18830] RBP: 00007f1eb2608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3300.285436][T18830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3300.285453][T18830] R13: 00007f1eb2816038 R14: 00007f1eb2815fa0 R15: 00007fff5e07d168 [ 3300.285492][T18830] [ 3300.289088][ T5627] bridge_slave_1: left allmulticast mode [ 3300.354464][T18788] Bluetooth: hci3: command tx timeout [ 3300.380421][ T5627] bridge_slave_1: left promiscuous mode [ 3300.634638][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 3300.652457][ T5627] bridge_slave_0: left allmulticast mode [ 3300.660510][ T5627] bridge_slave_0: left promiscuous mode [ 3300.744969][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 3302.154933][T18844] FAULT_INJECTION: forcing a failure. [ 3302.154933][T18844] name failslab, interval 1, probability 0, space 0, times 0 [ 3302.249850][T18844] CPU: 0 UID: 0 PID: 18844 Comm: syz.2.7217 Tainted: G L syzkaller #0 PREEMPT(full) [ 3302.249878][T18844] Tainted: [L]=SOFTLOCKUP [ 3302.249885][T18844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3302.249895][T18844] Call Trace: [ 3302.249900][T18844] [ 3302.249907][T18844] dump_stack_lvl+0x100/0x190 [ 3302.249930][T18844] should_fail_ex.cold+0x5/0xa [ 3302.249957][T18844] should_failslab+0xc2/0x120 [ 3302.249978][T18844] ? lsm_blob_alloc+0x68/0x90 [ 3302.249994][T18844] __kmalloc_noprof+0xf6/0x9c0 [ 3302.250015][T18844] ? lsm_blob_alloc+0x68/0x90 [ 3302.250031][T18844] lsm_blob_alloc+0x68/0x90 [ 3302.250048][T18844] security_sk_alloc+0x2d/0x290 [ 3302.250069][T18844] sk_prot_alloc+0x1d1/0x2a0 [ 3302.250087][T18844] sk_alloc+0x36/0xe80 [ 3302.250107][T18844] unix_create1+0xa6/0x700 [ 3302.250124][T18844] unix_create+0x145/0x270 [ 3302.250139][T18844] __sock_create+0x339/0x860 [ 3302.250162][T18844] __sys_socketpair+0x261/0x5b0 [ 3302.250182][T18844] ? __pfx___sys_socketpair+0x10/0x10 [ 3302.250215][T18844] __x64_sys_socketpair+0x96/0x100 [ 3302.250235][T18844] ? lockdep_hardirqs_on+0x78/0x100 [ 3302.250253][T18844] do_syscall_64+0xc9/0xf80 [ 3302.250274][T18844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3302.250290][T18844] RIP: 0033:0x7f962ed9acb9 [ 3302.250302][T18844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3302.250317][T18844] RSP: 002b:00007f962fcbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3302.250333][T18844] RAX: ffffffffffffffda RBX: 00007f962f015fa0 RCX: 00007f962ed9acb9 [ 3302.250343][T18844] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3302.250352][T18844] RBP: 00007f962ee08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3302.250362][T18844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3302.250370][T18844] R13: 00007f962f016038 R14: 00007f962f015fa0 R15: 00007fff1ac70f88 [ 3302.250390][T18844] [ 3302.465578][T18788] Bluetooth: hci3: command tx timeout [ 3302.876110][ T5627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3303.063266][ T5627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3303.094191][ T5627] bond0 (unregistering): Released all slaves [ 3303.114748][T18786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3303.121820][T18786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3303.271617][T18786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3303.369290][T18786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3303.384587][T18786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3303.413072][T18786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3303.503719][T18786] hsr_slave_0: entered promiscuous mode [ 3303.520521][T18786] hsr_slave_1: entered promiscuous mode [ 3303.528667][T18786] debugfs: 'hsr0' already exists in 'hsr' [ 3303.535864][T18786] Cannot create hsr debugfs directory [ 3304.520152][T18788] Bluetooth: hci3: command tx timeout [ 3304.911590][T18877] FAULT_INJECTION: forcing a failure. [ 3304.911590][T18877] name failslab, interval 1, probability 0, space 0, times 0 [ 3304.948452][T18877] CPU: 0 UID: 0 PID: 18877 Comm: syz.1.7223 Tainted: G L syzkaller #0 PREEMPT(full) [ 3304.948481][T18877] Tainted: [L]=SOFTLOCKUP [ 3304.948487][T18877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3304.948497][T18877] Call Trace: [ 3304.948502][T18877] [ 3304.948509][T18877] dump_stack_lvl+0x100/0x190 [ 3304.948532][T18877] should_fail_ex.cold+0x5/0xa [ 3304.948563][T18877] should_failslab+0xc2/0x120 [ 3304.948600][T18877] ? lsm_blob_alloc+0x68/0x90 [ 3304.948627][T18877] __kmalloc_noprof+0xf6/0x9c0 [ 3304.948666][T18877] ? lsm_blob_alloc+0x68/0x90 [ 3304.948683][T18877] lsm_blob_alloc+0x68/0x90 [ 3304.948699][T18877] security_sk_alloc+0x2d/0x290 [ 3304.948719][T18877] sk_prot_alloc+0x1d1/0x2a0 [ 3304.948736][T18877] sk_alloc+0x36/0xe80 [ 3304.948756][T18877] unix_create1+0xa6/0x700 [ 3304.948772][T18877] unix_create+0x145/0x270 [ 3304.948786][T18877] __sock_create+0x339/0x860 [ 3304.948807][T18877] __sys_socketpair+0x261/0x5b0 [ 3304.948827][T18877] ? __pfx___sys_socketpair+0x10/0x10 [ 3304.948852][T18877] __x64_sys_socketpair+0x96/0x100 [ 3304.948870][T18877] ? lockdep_hardirqs_on+0x78/0x100 [ 3304.948888][T18877] do_syscall_64+0xc9/0xf80 [ 3304.948906][T18877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3304.948922][T18877] RIP: 0033:0x7f1eb259acb9 [ 3304.948935][T18877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3304.948950][T18877] RSP: 002b:00007f1eb34c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3304.948965][T18877] RAX: ffffffffffffffda RBX: 00007f1eb2815fa0 RCX: 00007f1eb259acb9 [ 3304.948975][T18877] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3304.948985][T18877] RBP: 00007f1eb2608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3304.948994][T18877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3304.949004][T18877] R13: 00007f1eb2816038 R14: 00007f1eb2815fa0 R15: 00007fff5e07d168 [ 3304.949024][T18877] [ 3305.983682][T18890] FAULT_INJECTION: forcing a failure. [ 3305.983682][T18890] name failslab, interval 1, probability 0, space 0, times 0 [ 3305.997243][T18890] CPU: 0 UID: 0 PID: 18890 Comm: syz.2.7225 Tainted: G L syzkaller #0 PREEMPT(full) [ 3305.997290][T18890] Tainted: [L]=SOFTLOCKUP [ 3305.997302][T18890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3305.997319][T18890] Call Trace: [ 3305.997329][T18890] [ 3305.997340][T18890] dump_stack_lvl+0x100/0x190 [ 3305.997382][T18890] should_fail_ex.cold+0x5/0xa [ 3305.997430][T18890] should_failslab+0xc2/0x120 [ 3305.997470][T18890] ? lsm_blob_alloc+0x68/0x90 [ 3305.997499][T18890] __kmalloc_noprof+0xf6/0x9c0 [ 3305.997539][T18890] ? lsm_blob_alloc+0x68/0x90 [ 3305.997569][T18890] lsm_blob_alloc+0x68/0x90 [ 3305.997601][T18890] security_sk_alloc+0x2d/0x290 [ 3305.997638][T18890] sk_prot_alloc+0x1d1/0x2a0 [ 3305.997670][T18890] sk_alloc+0x36/0xe80 [ 3305.997711][T18890] unix_create1+0xa6/0x700 [ 3305.997742][T18890] unix_create+0x145/0x270 [ 3305.997787][T18890] __sock_create+0x339/0x860 [ 3305.997823][T18890] __sys_socketpair+0x261/0x5b0 [ 3305.997856][T18890] ? __pfx___sys_socketpair+0x10/0x10 [ 3305.997899][T18890] __x64_sys_socketpair+0x96/0x100 [ 3305.997938][T18890] ? lockdep_hardirqs_on+0x78/0x100 [ 3305.997970][T18890] do_syscall_64+0xc9/0xf80 [ 3305.998001][T18890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3305.998030][T18890] RIP: 0033:0x7f962ed9acb9 [ 3305.998053][T18890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3305.998081][T18890] RSP: 002b:00007f962fcbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3305.998109][T18890] RAX: ffffffffffffffda RBX: 00007f962f015fa0 RCX: 00007f962ed9acb9 [ 3305.998128][T18890] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3305.998146][T18890] RBP: 00007f962ee08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3305.998163][T18890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3305.998179][T18890] R13: 00007f962f016038 R14: 00007f962f015fa0 R15: 00007fff1ac70f88 [ 3305.998215][T18890] [ 3306.477296][T18786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3306.512641][T18786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3306.551325][T18786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3306.746713][T18786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3307.403884][ T5627] hsr_slave_0: left promiscuous mode [ 3307.440687][ T5627] hsr_slave_1: left promiscuous mode [ 3307.481241][ T5627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3307.499396][ T5627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3307.515358][ T5627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3307.522781][ T5627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3307.580616][ T5627] veth1_macvtap: left promiscuous mode [ 3307.594385][ T5627] veth0_macvtap: left promiscuous mode [ 3307.600094][ T5627] veth1_vlan: left promiscuous mode [ 3307.614676][ T5627] veth0_vlan: left promiscuous mode [ 3308.650105][ T5627] team0 (unregistering): Port device team_slave_1 removed [ 3308.688887][ T5627] team0 (unregistering): Port device team_slave_0 removed [ 3309.603410][T18786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3309.748881][T18786] 8021q: adding VLAN 0 to HW filter on device team0 [ 3309.751474][T18936] FAULT_INJECTION: forcing a failure. [ 3309.751474][T18936] name failslab, interval 1, probability 0, space 0, times 0 [ 3309.795789][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 3309.802978][ T5627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3309.834363][T18936] CPU: 1 UID: 0 PID: 18936 Comm: syz.1.7233 Tainted: G L syzkaller #0 PREEMPT(full) [ 3309.834410][T18936] Tainted: [L]=SOFTLOCKUP [ 3309.834422][T18936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3309.834440][T18936] Call Trace: [ 3309.834450][T18936] [ 3309.834462][T18936] dump_stack_lvl+0x100/0x190 [ 3309.834501][T18936] should_fail_ex.cold+0x5/0xa [ 3309.834549][T18936] should_failslab+0xc2/0x120 [ 3309.834587][T18936] ? lsm_blob_alloc+0x68/0x90 [ 3309.834617][T18936] __kmalloc_noprof+0xf6/0x9c0 [ 3309.834665][T18936] ? lsm_blob_alloc+0x68/0x90 [ 3309.834693][T18936] lsm_blob_alloc+0x68/0x90 [ 3309.834723][T18936] security_sk_alloc+0x2d/0x290 [ 3309.834761][T18936] sk_prot_alloc+0x1d1/0x2a0 [ 3309.834791][T18936] sk_alloc+0x36/0xe80 [ 3309.834828][T18936] unix_create1+0xa6/0x700 [ 3309.834858][T18936] unix_create+0x145/0x270 [ 3309.834885][T18936] __sock_create+0x339/0x860 [ 3309.834924][T18936] __sys_socketpair+0x261/0x5b0 [ 3309.834962][T18936] ? __pfx___sys_socketpair+0x10/0x10 [ 3309.835011][T18936] __x64_sys_socketpair+0x96/0x100 [ 3309.835045][T18936] ? lockdep_hardirqs_on+0x78/0x100 [ 3309.835078][T18936] do_syscall_64+0xc9/0xf80 [ 3309.835115][T18936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3309.835144][T18936] RIP: 0033:0x7f1eb259acb9 [ 3309.835166][T18936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3309.835195][T18936] RSP: 002b:00007f1eb34c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3309.835222][T18936] RAX: ffffffffffffffda RBX: 00007f1eb2815fa0 RCX: 00007f1eb259acb9 [ 3309.835242][T18936] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3309.835261][T18936] RBP: 00007f1eb2608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3309.835280][T18936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3309.835298][T18936] R13: 00007f1eb2816038 R14: 00007f1eb2815fa0 R15: 00007fff5e07d168 [ 3309.835337][T18936] [ 3310.308927][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 3310.316151][ T5627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3310.825705][T18786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3310.878156][T18786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3311.850589][T18786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3312.258299][T18786] veth0_vlan: entered promiscuous mode [ 3312.290921][T18786] veth1_vlan: entered promiscuous mode [ 3312.396705][T18786] veth0_macvtap: entered promiscuous mode [ 3312.452810][T18786] veth1_macvtap: entered promiscuous mode [ 3312.531097][T18786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3312.578654][T18786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3312.684629][ T1335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3312.693377][ T1335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3312.838887][ T5627] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3312.848234][ T5627] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3313.071369][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3313.099925][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3313.189813][T16533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3313.202356][T16533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3313.283704][T18982] futex_wake_op: syz.2.7243 tries to shift op by -2048; fix this program [ 3313.347754][T18982] futex_wake_op: syz.2.7243 tries to shift op by -2048; fix this program [ 3313.358356][T18985] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 3313.419685][T18982] futex_wake_op: syz.2.7243 tries to shift op by -2048; fix this program [ 3313.445344][T18982] futex_wake_op: syz.2.7243 tries to shift op by -2048; fix this program [ 3313.454579][T18982] futex_wake_op: syz.2.7243 tries to shift op by -2048; fix this program [ 3313.463030][T18982] futex_wake_op: syz.2.7243 tries to shift op by -2048; fix this program [ 3313.474211][T18982] futex_wake_op: syz.2.7243 tries to shift op by -2048; fix this program [ 3313.485325][T18982] futex_wake_op: syz.2.7243 tries to shift op by -2048; fix this program [ 3313.514901][T18982] futex_wake_op: syz.2.7243 tries to shift op by -2048; fix this program [ 3313.657987][T18982] futex_wake_op: syz.2.7243 tries to shift op by -2048; fix this program [ 3314.416405][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3314.433303][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3314.442160][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3314.449903][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3314.458929][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3316.070288][T19008] chnl_net:caif_netlink_parms(): no params data found [ 3316.226805][ T1335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3316.440138][T19044] FAULT_INJECTION: forcing a failure. [ 3316.440138][T19044] name failslab, interval 1, probability 0, space 0, times 0 [ 3316.468066][ T1335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3316.556832][T19044] CPU: 1 UID: 0 PID: 19044 Comm: syz.0.7256 Tainted: G L syzkaller #0 PREEMPT(full) [ 3316.556881][T19044] Tainted: [L]=SOFTLOCKUP [ 3316.556892][T19044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3316.556910][T19044] Call Trace: [ 3316.556920][T19044] [ 3316.556931][T19044] dump_stack_lvl+0x100/0x190 [ 3316.556974][T19044] should_fail_ex.cold+0x5/0xa [ 3316.557038][T19044] should_failslab+0xc2/0x120 [ 3316.557079][T19044] kmem_cache_alloc_noprof+0x83/0x780 [ 3316.557119][T19044] ? pidfs_register_pid+0x97/0x200 [ 3316.557156][T19044] ? pidfs_register_pid+0x97/0x200 [ 3316.557185][T19044] pidfs_register_pid+0x97/0x200 [ 3316.557218][T19044] unix_socketpair+0xda/0x8c0 [ 3316.557256][T19044] __sys_socketpair+0x2f7/0x5b0 [ 3316.557297][T19044] ? __pfx___sys_socketpair+0x10/0x10 [ 3316.557348][T19044] __x64_sys_socketpair+0x96/0x100 [ 3316.557384][T19044] ? lockdep_hardirqs_on+0x78/0x100 [ 3316.557418][T19044] do_syscall_64+0xc9/0xf80 [ 3316.557462][T19044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3316.557491][T19044] RIP: 0033:0x7f040259acb9 [ 3316.557515][T19044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3316.557544][T19044] RSP: 002b:00007f040344c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3316.557573][T19044] RAX: ffffffffffffffda RBX: 00007f0402815fa0 RCX: 00007f040259acb9 [ 3316.557594][T19044] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3316.557613][T19044] RBP: 00007f0402608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3316.557631][T19044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3316.557649][T19044] R13: 00007f0402816038 R14: 00007f0402815fa0 R15: 00007ffd67d06368 [ 3316.557689][T19044] [ 3316.926211][ T5841] Bluetooth: hci2: command tx timeout [ 3317.094661][T19008] bridge0: port 1(bridge_slave_0) entered blocking state [ 3317.107372][T19008] bridge0: port 1(bridge_slave_0) entered disabled state [ 3317.125052][T19008] bridge_slave_0: entered allmulticast mode [ 3317.143383][T19008] bridge_slave_0: entered promiscuous mode [ 3317.168261][T19008] bridge0: port 2(bridge_slave_1) entered blocking state [ 3317.193480][T19008] bridge0: port 2(bridge_slave_1) entered disabled state [ 3317.230914][T19008] bridge_slave_1: entered allmulticast mode [ 3317.271704][T19008] bridge_slave_1: entered promiscuous mode [ 3317.326619][ T1335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3317.447440][T19008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3317.501417][ T1335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3317.525617][T19008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3317.793959][T19008] team0: Port device team_slave_0 added [ 3317.805002][T19008] team0: Port device team_slave_1 added [ 3317.895384][T19008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3317.910022][T19008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3317.993128][T19008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3318.077307][ T1335] bridge_slave_1: left allmulticast mode [ 3318.114434][ T1335] bridge_slave_1: left promiscuous mode [ 3318.120503][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 3318.134835][ T1335] bridge_slave_0: left allmulticast mode [ 3318.141833][ T1335] bridge_slave_0: left promiscuous mode [ 3318.151096][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 3318.665522][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3318.682693][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3318.696760][ T1335] bond0 (unregistering): Released all slaves [ 3318.762523][T19008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3318.771068][T19008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3318.799550][T19008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3318.999809][ T5841] Bluetooth: hci2: command tx timeout [ 3319.310175][T19008] hsr_slave_0: entered promiscuous mode [ 3319.323195][T19085] FAULT_INJECTION: forcing a failure. [ 3319.323195][T19085] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3319.335451][T19008] hsr_slave_1: entered promiscuous mode [ 3319.342801][T19008] debugfs: 'hsr0' already exists in 'hsr' [ 3319.342910][T19085] CPU: 1 UID: 0 PID: 19085 Comm: syz.1.7266 Tainted: G L syzkaller #0 PREEMPT(full) [ 3319.342950][T19085] Tainted: [L]=SOFTLOCKUP [ 3319.342960][T19085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3319.342975][T19085] Call Trace: [ 3319.342984][T19085] [ 3319.342995][T19085] dump_stack_lvl+0x100/0x190 [ 3319.343032][T19085] should_fail_ex.cold+0x5/0xa [ 3319.343084][T19085] _copy_to_user+0x32/0xd0 [ 3319.343128][T19085] simple_read_from_buffer+0xcb/0x170 [ 3319.343158][T19085] proc_fail_nth_read+0x1af/0x230 [ 3319.343191][T19085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3319.343225][T19085] ? rw_verify_area+0xce/0x6d0 [ 3319.343251][T19085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3319.343282][T19085] vfs_read+0x1e4/0xb30 [ 3319.343315][T19085] ? __pfx_vfs_read+0x10/0x10 [ 3319.343341][T19085] ? find_held_lock+0x2b/0x80 [ 3319.343370][T19085] ? __fget_files+0x215/0x3d0 [ 3319.343404][T19085] ? __fget_files+0x21f/0x3d0 [ 3319.343442][T19085] ksys_read+0x12a/0x250 [ 3319.343472][T19085] ? __pfx_ksys_read+0x10/0x10 [ 3319.343510][T19085] do_syscall_64+0xc9/0xf80 [ 3319.343545][T19085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3319.343573][T19085] RIP: 0033:0x7f1eb255b58e [ 3319.343594][T19085] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3319.343621][T19085] RSP: 002b:00007f1eb34c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3319.343648][T19085] RAX: ffffffffffffffda RBX: 00007f1eb34c16c0 RCX: 00007f1eb255b58e [ 3319.343667][T19085] RDX: 000000000000000f RSI: 00007f1eb34c10a0 RDI: 0000000000000004 [ 3319.343684][T19085] RBP: 00007f1eb34c1090 R08: 0000000000000000 R09: 0000000000000000 [ 3319.343701][T19085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3319.343718][T19085] R13: 00007f1eb2816038 R14: 00007f1eb2815fa0 R15: 00007fff5e07d168 [ 3319.343756][T19085] [ 3319.549596][T19008] Cannot create hsr debugfs directory [ 3320.331527][T19102] FAULT_INJECTION: forcing a failure. [ 3320.331527][T19102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3320.384531][T19102] CPU: 1 UID: 0 PID: 19102 Comm: syz.3.7268 Tainted: G L syzkaller #0 PREEMPT(full) [ 3320.384577][T19102] Tainted: [L]=SOFTLOCKUP [ 3320.384588][T19102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3320.384604][T19102] Call Trace: [ 3320.384613][T19102] [ 3320.384624][T19102] dump_stack_lvl+0x100/0x190 [ 3320.384662][T19102] should_fail_ex.cold+0x5/0xa [ 3320.384706][T19102] _copy_from_user+0x2e/0xd0 [ 3320.384749][T19102] copy_msghdr_from_user+0x9f/0x4f0 [ 3320.384783][T19102] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3320.384832][T19102] ___sys_sendmsg+0x106/0x1e0 [ 3320.384865][T19102] ? __pfx____sys_sendmsg+0x10/0x10 [ 3320.384914][T19102] ? find_held_lock+0x2b/0x80 [ 3320.384963][T19102] __sys_sendmsg+0x170/0x220 [ 3320.385004][T19102] ? __pfx___sys_sendmsg+0x10/0x10 [ 3320.385065][T19102] do_syscall_64+0xc9/0xf80 [ 3320.385101][T19102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3320.385129][T19102] RIP: 0033:0x7fe58a59acb9 [ 3320.385151][T19102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3320.385178][T19102] RSP: 002b:00007fe58b46b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3320.385205][T19102] RAX: ffffffffffffffda RBX: 00007fe58a815fa0 RCX: 00007fe58a59acb9 [ 3320.385224][T19102] RDX: 000000000400c080 RSI: 00002000000006c0 RDI: 0000000000000003 [ 3320.385248][T19102] RBP: 00007fe58b46b090 R08: 0000000000000000 R09: 0000000000000000 [ 3320.385266][T19102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3320.385284][T19102] R13: 00007fe58a816038 R14: 00007fe58a815fa0 R15: 00007ffcf82fda68 [ 3320.385321][T19102] [ 3321.085142][ T5841] Bluetooth: hci2: command tx timeout [ 3321.372501][T19008] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3321.415080][T19008] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3321.528300][T19008] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3321.637664][T19008] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3321.858806][ T1335] hsr_slave_0: left promiscuous mode [ 3321.882044][ T1335] hsr_slave_1: left promiscuous mode [ 3321.909024][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3321.937216][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3321.954968][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3321.976267][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3322.078377][ T1335] veth1_macvtap: left promiscuous mode [ 3322.099599][ T1335] veth0_macvtap: left promiscuous mode [ 3322.121448][ T1335] veth1_vlan: left promiscuous mode [ 3322.133568][ T1335] veth0_vlan: left promiscuous mode [ 3322.178890][T19152] FAULT_INJECTION: forcing a failure. [ 3322.178890][T19152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3322.221241][T19152] CPU: 1 UID: 0 PID: 19152 Comm: syz.3.7277 Tainted: G L syzkaller #0 PREEMPT(full) [ 3322.221284][T19152] Tainted: [L]=SOFTLOCKUP [ 3322.221293][T19152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3322.221310][T19152] Call Trace: [ 3322.221319][T19152] [ 3322.221331][T19152] dump_stack_lvl+0x100/0x190 [ 3322.221371][T19152] should_fail_ex.cold+0x5/0xa [ 3322.221416][T19152] _copy_to_user+0x32/0xd0 [ 3322.221459][T19152] simple_read_from_buffer+0xcb/0x170 [ 3322.221488][T19152] proc_fail_nth_read+0x1af/0x230 [ 3322.221519][T19152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3322.221549][T19152] ? rw_verify_area+0xce/0x6d0 [ 3322.221574][T19152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3322.221603][T19152] vfs_read+0x1e4/0xb30 [ 3322.221635][T19152] ? __pfx_vfs_read+0x10/0x10 [ 3322.221659][T19152] ? find_held_lock+0x2b/0x80 [ 3322.221685][T19152] ? __fget_files+0x215/0x3d0 [ 3322.221720][T19152] ? __fget_files+0x21f/0x3d0 [ 3322.221759][T19152] ksys_read+0x12a/0x250 [ 3322.221788][T19152] ? __pfx_ksys_read+0x10/0x10 [ 3322.221827][T19152] do_syscall_64+0xc9/0xf80 [ 3322.221862][T19152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3322.221890][T19152] RIP: 0033:0x7fe58a55b58e [ 3322.221913][T19152] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3322.221940][T19152] RSP: 002b:00007fe58b46afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3322.221965][T19152] RAX: ffffffffffffffda RBX: 00007fe58b46b6c0 RCX: 00007fe58a55b58e [ 3322.221981][T19152] RDX: 000000000000000f RSI: 00007fe58b46b0a0 RDI: 0000000000000004 [ 3322.221997][T19152] RBP: 00007fe58b46b090 R08: 0000000000000000 R09: 0000000000000000 [ 3322.222021][T19152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3322.222037][T19152] R13: 00007fe58a816038 R14: 00007fe58a815fa0 R15: 00007ffcf82fda68 [ 3322.222073][T19152] [ 3323.168338][ T5841] Bluetooth: hci2: command tx timeout [ 3323.179659][T19170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7280'. [ 3323.221341][T19170] netlink: 'syz.3.7280': attribute type 1 has an invalid length. [ 3323.259786][T19170] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7280'. [ 3323.294312][T19170] netlink: 'syz.3.7280': attribute type 1 has an invalid length. [ 3323.848807][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 3323.926103][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 3324.758625][T19008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3324.801449][T19008] 8021q: adding VLAN 0 to HW filter on device team0 [ 3324.828200][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 3324.835390][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3324.889567][ T1522] bridge0: port 2(bridge_slave_1) entered blocking state [ 3324.896779][ T1522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3325.561349][T19187] can0: slcan on pty66. [ 3325.677859][T19183] can0 (unregistered): slcan off pty66. [ 3325.774657][T19008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3325.887586][T19008] veth0_vlan: entered promiscuous mode [ 3325.926422][T19008] veth1_vlan: entered promiscuous mode [ 3325.939146][T19198] FAULT_INJECTION: forcing a failure. [ 3325.939146][T19198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3326.015918][T19198] CPU: 1 UID: 0 PID: 19198 Comm: syz.0.7285 Tainted: G L syzkaller #0 PREEMPT(full) [ 3326.015962][T19198] Tainted: [L]=SOFTLOCKUP [ 3326.015973][T19198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3326.015990][T19198] Call Trace: [ 3326.015999][T19198] [ 3326.016010][T19198] dump_stack_lvl+0x100/0x190 [ 3326.016048][T19198] should_fail_ex.cold+0x5/0xa [ 3326.016092][T19198] _copy_to_user+0x32/0xd0 [ 3326.016135][T19198] simple_read_from_buffer+0xcb/0x170 [ 3326.016167][T19198] proc_fail_nth_read+0x1af/0x230 [ 3326.016200][T19198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3326.016235][T19198] ? rw_verify_area+0xce/0x6d0 [ 3326.016262][T19198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3326.016293][T19198] vfs_read+0x1e4/0xb30 [ 3326.016328][T19198] ? __pfx_vfs_read+0x10/0x10 [ 3326.016355][T19198] ? find_held_lock+0x2b/0x80 [ 3326.016407][T19198] ? __fget_files+0x215/0x3d0 [ 3326.016443][T19198] ? __fget_files+0x21f/0x3d0 [ 3326.016490][T19198] ksys_read+0x12a/0x250 [ 3326.016527][T19198] ? __pfx_ksys_read+0x10/0x10 [ 3326.016557][T19198] ? do_user_addr_fault+0x8d6/0x12f0 [ 3326.016596][T19198] do_syscall_64+0xc9/0xf80 [ 3326.016632][T19198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3326.016660][T19198] RIP: 0033:0x7f040255b58e [ 3326.016682][T19198] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3326.016709][T19198] RSP: 002b:00007f040342afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3326.016739][T19198] RAX: ffffffffffffffda RBX: 00007f040342b6c0 RCX: 00007f040255b58e [ 3326.016758][T19198] RDX: 000000000000000f RSI: 00007f040342b0a0 RDI: 0000000000000005 [ 3326.016772][T19198] RBP: 00007f040342b090 R08: 0000000000000000 R09: 0000000000000000 [ 3326.016789][T19198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3326.016806][T19198] R13: 00007f0402816128 R14: 00007f0402816090 R15: 00007ffd67d06368 [ 3326.016844][T19198] [ 3326.234640][T19008] veth0_macvtap: entered promiscuous mode [ 3326.407206][T19008] veth1_macvtap: entered promiscuous mode [ 3326.473518][T19008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3326.492584][T19008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3326.512449][ T1335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3326.532754][ T1335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3326.587077][ T1335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3326.608383][ T1335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3326.916873][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3326.943034][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3327.068634][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3327.097544][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3327.145864][T19217] FAULT_INJECTION: forcing a failure. [ 3327.145864][T19217] name failslab, interval 1, probability 0, space 0, times 0 [ 3327.159697][T19217] CPU: 0 UID: 0 PID: 19217 Comm: syz.0.7294 Tainted: G L syzkaller #0 PREEMPT(full) [ 3327.159753][T19217] Tainted: [L]=SOFTLOCKUP [ 3327.159763][T19217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3327.159779][T19217] Call Trace: [ 3327.159788][T19217] [ 3327.159797][T19217] dump_stack_lvl+0x100/0x190 [ 3327.159835][T19217] should_fail_ex.cold+0x5/0xa [ 3327.159879][T19217] should_failslab+0xc2/0x120 [ 3327.159914][T19217] kmem_cache_alloc_noprof+0x83/0x780 [ 3327.159952][T19217] ? d_instantiate+0x90/0xb0 [ 3327.159987][T19217] ? alloc_empty_file+0x55/0x1c0 [ 3327.160030][T19217] ? alloc_empty_file+0x55/0x1c0 [ 3327.160068][T19217] alloc_empty_file+0x55/0x1c0 [ 3327.160109][T19217] alloc_file_pseudo+0x13a/0x230 [ 3327.160152][T19217] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 3327.160201][T19217] __shmem_file_setup+0x1a3/0x330 [ 3327.160233][T19217] shmem_zero_setup+0x93/0x1b0 [ 3327.160271][T19217] __mmap_region+0x2101/0x2820 [ 3327.160307][T19217] ? __pfx___mmap_region+0x10/0x10 [ 3327.160344][T19217] ? look_up_lock_class+0x55/0x120 [ 3327.160387][T19217] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 3327.160418][T19217] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 3327.160463][T19217] ? __schedule+0xff6/0x5e10 [ 3327.160534][T19217] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 3327.160578][T19217] ? rcu_is_watching+0x12/0xc0 [ 3327.160614][T19217] mmap_region+0x180/0x3e0 [ 3327.160657][T19217] do_mmap+0xc63/0x12f0 [ 3327.160704][T19217] ? __pfx_do_mmap+0x10/0x10 [ 3327.160756][T19217] ? __pfx_down_write_killable+0x10/0x10 [ 3327.160801][T19217] vm_mmap_pgoff+0x29e/0x470 [ 3327.160847][T19217] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3327.160895][T19217] ? __x64_sys_futex+0x34f/0x4d0 [ 3327.160931][T19217] ? __x64_sys_futex+0x358/0x4d0 [ 3327.160973][T19217] ksys_mmap_pgoff+0x7d/0x5b0 [ 3327.161021][T19217] __x64_sys_mmap+0x125/0x190 [ 3327.161053][T19217] do_syscall_64+0xc9/0xf80 [ 3327.161086][T19217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3327.161115][T19217] RIP: 0033:0x7f040259acb9 [ 3327.161140][T19217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3327.161168][T19217] RSP: 002b:00007f040344c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3327.161197][T19217] RAX: ffffffffffffffda RBX: 00007f0402815fa0 RCX: 00007f040259acb9 [ 3327.161215][T19217] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 3327.161232][T19217] RBP: 00007f0402608bf7 R08: fffffffffffffffa R09: 0000000000008000 [ 3327.161251][T19217] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 3327.161269][T19217] R13: 00007f0402816038 R14: 00007f0402815fa0 R15: 00007ffd67d06368 [ 3327.161310][T19217] [ 3327.825172][T18788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3327.833565][T18788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3327.841674][T18788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3327.850738][T18788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3327.864385][T18788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3328.968365][ T1335] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3329.174247][T19249] binder: 19248:19249 ioctl c0046209 9 returned -22 [ 3329.392232][ T1335] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3329.438310][T19227] chnl_net:caif_netlink_parms(): no params data found [ 3329.652315][T19268] FAULT_INJECTION: forcing a failure. [ 3329.652315][T19268] name failslab, interval 1, probability 0, space 0, times 0 [ 3329.700077][T19268] CPU: 1 UID: 0 PID: 19268 Comm: syz.1.7304 Tainted: G L syzkaller #0 PREEMPT(full) [ 3329.700118][T19268] Tainted: [L]=SOFTLOCKUP [ 3329.700128][T19268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3329.700143][T19268] Call Trace: [ 3329.700152][T19268] [ 3329.700161][T19268] dump_stack_lvl+0x100/0x190 [ 3329.700195][T19268] should_fail_ex.cold+0x5/0xa [ 3329.700232][T19268] should_failslab+0xc2/0x120 [ 3329.700264][T19268] ? tomoyo_realpath_from_path+0xb6/0x690 [ 3329.700369][T19268] __kmalloc_noprof+0xf6/0x9c0 [ 3329.700403][T19268] ? tomoyo_realpath_from_path+0xb6/0x690 [ 3329.700427][T19268] tomoyo_realpath_from_path+0xb6/0x690 [ 3329.700459][T19268] tomoyo_path_number_perm+0x23c/0x580 [ 3329.700516][T19268] ? tomoyo_path_number_perm+0x22e/0x580 [ 3329.700552][T19268] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3329.700616][T19268] ? find_held_lock+0x2b/0x80 [ 3329.700639][T19268] ? hook_file_ioctl_common+0x146/0x410 [ 3329.700715][T19268] ? __fget_files+0x215/0x3d0 [ 3329.700746][T19268] ? __fget_files+0x21f/0x3d0 [ 3329.700776][T19268] security_file_ioctl+0xd3/0x230 [ 3329.700832][T19268] __x64_sys_ioctl+0xb7/0x210 [ 3329.700870][T19268] do_syscall_64+0xc9/0xf80 [ 3329.700901][T19268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3329.700926][T19268] RIP: 0033:0x7f1eb259acb9 [ 3329.700946][T19268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3329.700970][T19268] RSP: 002b:00007f1eb347f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3329.700993][T19268] RAX: ffffffffffffffda RBX: 00007f1eb2816180 RCX: 00007f1eb259acb9 [ 3329.701011][T19268] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000008 [ 3329.701026][T19268] RBP: 00007f1eb347f090 R08: 0000000000000000 R09: 0000000000000000 [ 3329.701041][T19268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3329.701055][T19268] R13: 00007f1eb2816218 R14: 00007f1eb2816180 R15: 00007fff5e07d168 [ 3329.701094][T19268] [ 3329.701109][T19268] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3329.915638][ T1335] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3329.954510][ T5841] Bluetooth: hci4: command tx timeout [ 3330.349393][ T1335] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3330.583466][T19227] bridge0: port 1(bridge_slave_0) entered blocking state [ 3330.590945][T19227] bridge0: port 1(bridge_slave_0) entered disabled state [ 3330.601270][T19227] bridge_slave_0: entered allmulticast mode [ 3330.634380][T19227] bridge_slave_0: entered promiscuous mode [ 3330.722495][T19227] bridge0: port 2(bridge_slave_1) entered blocking state [ 3330.790906][T19227] bridge0: port 2(bridge_slave_1) entered disabled state [ 3330.802547][T19227] bridge_slave_1: entered allmulticast mode [ 3330.812004][T19227] bridge_slave_1: entered promiscuous mode [ 3331.104511][T19227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3331.353573][T19227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3331.467989][T19227] team0: Port device team_slave_0 added [ 3331.514748][T19227] team0: Port device team_slave_1 added [ 3331.583590][ T1335] bridge_slave_1: left allmulticast mode [ 3331.589541][ T1335] bridge_slave_1: left promiscuous mode [ 3331.598852][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 3331.610952][ T1335] bridge_slave_0: left allmulticast mode [ 3331.640656][ T1335] bridge_slave_0: left promiscuous mode [ 3331.664348][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 3332.034949][ T5841] Bluetooth: hci4: command tx timeout [ 3332.450504][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3332.472885][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3332.489231][ T1335] bond0 (unregistering): Released all slaves [ 3332.517213][T19227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3332.527514][T19227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3332.574747][T19227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3332.594121][T19300] warning: `syz.2.7313' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 3332.737644][T19227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3332.757269][T19227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3332.838052][T19227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3332.844723][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3332.857394][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3333.220852][T19227] hsr_slave_0: entered promiscuous mode [ 3333.254949][T19227] hsr_slave_1: entered promiscuous mode [ 3333.271336][T19227] debugfs: 'hsr0' already exists in 'hsr' [ 3333.286734][T19227] Cannot create hsr debugfs directory [ 3333.775567][ T5841] Bluetooth: hci3: Malformed LE Event: 0x1d [ 3333.811227][T19332] FAULT_INJECTION: forcing a failure. [ 3333.811227][T19332] name failslab, interval 1, probability 0, space 0, times 0 [ 3333.887080][T19332] CPU: 1 UID: 0 PID: 19332 Comm: syz.3.7318 Tainted: G L syzkaller #0 PREEMPT(full) [ 3333.887126][T19332] Tainted: [L]=SOFTLOCKUP [ 3333.887137][T19332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3333.887154][T19332] Call Trace: [ 3333.887163][T19332] [ 3333.887174][T19332] dump_stack_lvl+0x100/0x190 [ 3333.887211][T19332] should_fail_ex.cold+0x5/0xa [ 3333.887256][T19332] should_failslab+0xc2/0x120 [ 3333.887295][T19332] __kmalloc_cache_noprof+0x80/0x810 [ 3333.887327][T19332] ? cgroup_file_open+0x92/0x460 [ 3333.887367][T19332] ? cgroup_file_open+0x92/0x460 [ 3333.887399][T19332] cgroup_file_open+0x92/0x460 [ 3333.887430][T19332] ? __pfx_cgroup_file_open+0x10/0x10 [ 3333.887466][T19332] kernfs_fop_open+0x8b5/0xd50 [ 3333.887506][T19332] do_dentry_open+0x73e/0x1570 [ 3333.887540][T19332] ? __pfx_kernfs_fop_open+0x10/0x10 [ 3333.887570][T19332] ? security_inode_permission+0xbf/0x250 [ 3333.887620][T19332] vfs_open+0x82/0x3f0 [ 3333.887664][T19332] path_openat+0x21dc/0x3120 [ 3333.887711][T19332] ? __pfx_path_openat+0x10/0x10 [ 3333.887759][T19332] do_filp_open+0x1f7/0x420 [ 3333.887796][T19332] ? __pfx_do_filp_open+0x10/0x10 [ 3333.887856][T19332] ? _raw_spin_unlock+0x28/0x50 [ 3333.887885][T19332] ? alloc_fd+0x476/0x790 [ 3333.887929][T19332] do_sys_openat2+0x12e/0x220 [ 3333.887978][T19332] ? __pfx_do_sys_openat2+0x10/0x10 [ 3333.888025][T19332] ? __fget_files+0x21f/0x3d0 [ 3333.888063][T19332] __x64_sys_openat+0x12d/0x210 [ 3333.888107][T19332] ? __pfx___x64_sys_openat+0x10/0x10 [ 3333.888149][T19332] ? xfd_validate_state+0x129/0x190 [ 3333.888206][T19332] do_syscall_64+0xc9/0xf80 [ 3333.888243][T19332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3333.888273][T19332] RIP: 0033:0x7fe58a59acb9 [ 3333.888298][T19332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3333.888332][T19332] RSP: 002b:00007fe58b46b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3333.888361][T19332] RAX: ffffffffffffffda RBX: 00007fe58a815fa0 RCX: 00007fe58a59acb9 [ 3333.888383][T19332] RDX: 00000000008ea182 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 3333.888401][T19332] RBP: 00007fe58a608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3333.888419][T19332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3333.888437][T19332] R13: 00007fe58a816038 R14: 00007fe58a815fa0 R15: 00007ffcf82fda68 [ 3333.888477][T19332] [ 3334.190167][ T5841] Bluetooth: hci4: command tx timeout [ 3334.234715][T19333] random: crng reseeded on system resumption [ 3334.904760][T19349] FAULT_INJECTION: forcing a failure. [ 3334.904760][T19349] name failslab, interval 1, probability 0, space 0, times 0 [ 3334.924661][T19349] CPU: 1 UID: 0 PID: 19349 Comm: syz.1.7322 Tainted: G L syzkaller #0 PREEMPT(full) [ 3334.924707][T19349] Tainted: [L]=SOFTLOCKUP [ 3334.924717][T19349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3334.924735][T19349] Call Trace: [ 3334.924746][T19349] [ 3334.924757][T19349] dump_stack_lvl+0x100/0x190 [ 3334.924797][T19349] should_fail_ex.cold+0x5/0xa [ 3334.924841][T19349] should_failslab+0xc2/0x120 [ 3334.924878][T19349] __kmalloc_cache_noprof+0x80/0x810 [ 3334.924908][T19349] ? pkcs7_parse_message+0x98/0x700 [ 3334.925029][T19349] ? pkcs7_parse_message+0x98/0x700 [ 3334.925061][T19349] pkcs7_parse_message+0x98/0x700 [ 3334.925090][T19349] ? _request_firmware+0x11b/0x14b0 [ 3334.925160][T19349] verify_pkcs7_signature+0x30/0xa0 [ 3334.925206][T19349] valid_regdb+0x211/0x590 [ 3334.925325][T19349] ? __pfx___nla_validate_parse+0x10/0x10 [ 3334.925385][T19349] ? __pfx_valid_regdb+0x10/0x10 [ 3334.925419][T19349] ? rcu_is_watching+0x12/0xc0 [ 3334.925454][T19349] reg_reload_regdb+0x11a/0x460 [ 3334.925496][T19349] ? __pfx_reg_reload_regdb+0x10/0x10 [ 3334.925539][T19349] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 3334.925595][T19349] ? nl80211_pre_doit+0x19a/0xae0 [ 3334.925634][T19349] genl_family_rcv_msg_doit+0x214/0x300 [ 3334.925702][T19349] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 3334.925729][T19349] ? genl_get_cmd+0x3ef/0x720 [ 3334.925759][T19349] ? bpf_lsm_capable+0x9/0x10 [ 3334.925781][T19349] ? security_capable+0x80/0x260 [ 3334.925823][T19349] genl_rcv_msg+0x560/0x800 [ 3334.925854][T19349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3334.925884][T19349] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 3334.925915][T19349] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 3334.925981][T19349] ? __pfx_nl80211_post_doit+0x10/0x10 [ 3334.926047][T19349] netlink_rcv_skb+0x159/0x420 [ 3334.926112][T19349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3334.926153][T19349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3334.926211][T19349] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3334.926256][T19349] genl_rcv+0x28/0x40 [ 3334.926277][T19349] netlink_unicast+0x5aa/0x870 [ 3334.926324][T19349] ? __pfx_netlink_unicast+0x10/0x10 [ 3334.926380][T19349] netlink_sendmsg+0x8b0/0xda0 [ 3334.926426][T19349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3334.926463][T19349] ? __import_iovec+0x1d2/0x640 [ 3334.926505][T19349] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 3334.926599][T19349] ____sys_sendmsg+0xa54/0xc30 [ 3334.926633][T19349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3334.926660][T19349] ? __pfx___futex_wait+0x10/0x10 [ 3334.926692][T19349] ? __pfx_futex_wake_mark+0x10/0x10 [ 3334.926746][T19349] ___sys_sendmsg+0x190/0x1e0 [ 3334.926782][T19349] ? __pfx____sys_sendmsg+0x10/0x10 [ 3334.926832][T19349] ? find_held_lock+0x2b/0x80 [ 3334.926879][T19349] __sys_sendmsg+0x170/0x220 [ 3334.926917][T19349] ? __pfx___sys_sendmsg+0x10/0x10 [ 3334.926953][T19349] ? __x64_sys_futex+0x34f/0x4d0 [ 3334.927008][T19349] do_syscall_64+0xc9/0xf80 [ 3334.927046][T19349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3334.927075][T19349] RIP: 0033:0x7f1eb259acb9 [ 3334.927098][T19349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3334.927127][T19349] RSP: 002b:00007f1eb34c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3334.927165][T19349] RAX: ffffffffffffffda RBX: 00007f1eb2815fa0 RCX: 00007f1eb259acb9 [ 3334.927185][T19349] RDX: 00000000000000d0 RSI: 0000200000000580 RDI: 0000000000000006 [ 3334.927203][T19349] RBP: 00007f1eb2608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3334.927222][T19349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3334.927240][T19349] R13: 00007f1eb2816038 R14: 00007f1eb2815fa0 R15: 00007fff5e07d168 [ 3334.927280][T19349] [ 3335.778120][T19361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7323'. [ 3335.820119][T19361] netlink: 'syz.1.7323': attribute type 1 has an invalid length. [ 3335.851297][T19361] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7323'. [ 3335.875055][T19361] netlink: 'syz.1.7323': attribute type 1 has an invalid length. [ 3336.041938][T19227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3336.148367][ T1335] hsr_slave_0: left promiscuous mode [ 3336.185474][ T1335] hsr_slave_1: left promiscuous mode [ 3336.194485][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3336.219731][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3336.261976][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3336.277499][ T5841] Bluetooth: hci4: command tx timeout [ 3336.279602][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3336.355833][ T1335] veth1_macvtap: left promiscuous mode [ 3336.361414][ T1335] veth0_macvtap: left promiscuous mode [ 3336.390964][ T1335] veth1_vlan: left promiscuous mode [ 3336.406376][ T1335] veth0_vlan: left promiscuous mode [ 3336.725231][T19379] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 3337.005224][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 3337.038232][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 3337.349703][T19227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3337.413466][T19227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3337.441213][T19227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3337.826042][T19227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3338.058032][T19227] 8021q: adding VLAN 0 to HW filter on device team0 [ 3338.099515][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 3338.106727][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3338.188809][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 3338.196031][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3338.208400][T19406] FAULT_INJECTION: forcing a failure. [ 3338.208400][T19406] name failslab, interval 1, probability 0, space 0, times 0 [ 3338.262904][T19406] CPU: 1 UID: 0 PID: 19406 Comm: syz.3.7329 Tainted: G L syzkaller #0 PREEMPT(full) [ 3338.262940][T19406] Tainted: [L]=SOFTLOCKUP [ 3338.262946][T19406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3338.262956][T19406] Call Trace: [ 3338.262962][T19406] [ 3338.262969][T19406] dump_stack_lvl+0x100/0x190 [ 3338.262993][T19406] should_fail_ex.cold+0x5/0xa [ 3338.263020][T19406] should_failslab+0xc2/0x120 [ 3338.263041][T19406] kmem_cache_alloc_noprof+0x83/0x780 [ 3338.263061][T19406] ? pidfs_register_pid+0x97/0x200 [ 3338.263087][T19406] ? pidfs_register_pid+0x97/0x200 [ 3338.263102][T19406] pidfs_register_pid+0x97/0x200 [ 3338.263120][T19406] unix_socketpair+0xda/0x8c0 [ 3338.263140][T19406] __sys_socketpair+0x2f7/0x5b0 [ 3338.263160][T19406] ? __pfx___sys_socketpair+0x10/0x10 [ 3338.263185][T19406] __x64_sys_socketpair+0x96/0x100 [ 3338.263203][T19406] ? lockdep_hardirqs_on+0x78/0x100 [ 3338.263221][T19406] do_syscall_64+0xc9/0xf80 [ 3338.263240][T19406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3338.263255][T19406] RIP: 0033:0x7fe58a59acb9 [ 3338.263268][T19406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3338.263283][T19406] RSP: 002b:00007fe58b46b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3338.263299][T19406] RAX: ffffffffffffffda RBX: 00007fe58a815fa0 RCX: 00007fe58a59acb9 [ 3338.263309][T19406] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3338.263318][T19406] RBP: 00007fe58a608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3338.263328][T19406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3338.263341][T19406] R13: 00007fe58a816038 R14: 00007fe58a815fa0 R15: 00007ffcf82fda68 [ 3338.263361][T19406] [ 3339.626236][T19227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3339.728001][T19446] FAULT_INJECTION: forcing a failure. [ 3339.728001][T19446] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3339.732460][T19448] FAULT_INJECTION: forcing a failure. [ 3339.732460][T19448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3339.741353][T19446] CPU: 1 UID: 0 PID: 19446 Comm: syz.2.7333 Tainted: G L syzkaller #0 PREEMPT(full) [ 3339.741397][T19446] Tainted: [L]=SOFTLOCKUP [ 3339.741408][T19446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3339.741427][T19446] Call Trace: [ 3339.741438][T19446] [ 3339.741449][T19446] dump_stack_lvl+0x100/0x190 [ 3339.741489][T19446] should_fail_ex.cold+0x5/0xa [ 3339.741528][T19446] ? prepare_alloc_pages+0x16d/0x5f0 [ 3339.741575][T19446] should_fail_alloc_page+0xeb/0x140 [ 3339.741625][T19446] prepare_alloc_pages+0x1f0/0x5f0 [ 3339.741668][T19446] ? validate_mm+0x261/0x4e0 [ 3339.741701][T19446] __alloc_frozen_pages_noprof+0x193/0x2410 [ 3339.741739][T19446] ? validate_mm+0x392/0x4e0 [ 3339.741773][T19446] ? __pfx_validate_mm+0x10/0x10 [ 3339.741809][T19446] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3339.741844][T19446] ? vma_wants_writenotify+0x10b/0x390 [ 3339.741878][T19446] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 3339.741923][T19446] ? mas_ascend+0x53d/0xb30 [ 3339.741955][T19446] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3339.741988][T19446] ? policy_nodemask+0xed/0x4f0 [ 3339.742030][T19446] alloc_pages_mpol+0x1fb/0x550 [ 3339.742070][T19446] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3339.742120][T19446] alloc_pages_noprof+0x131/0x390 [ 3339.742161][T19446] __pmd_alloc+0x3b/0x9c0 [ 3339.742206][T19446] __handle_mm_fault+0xa99/0x2b50 [ 3339.742242][T19446] ? mt_find+0x45e/0x8e0 [ 3339.742277][T19446] ? __pfx___handle_mm_fault+0x10/0x10 [ 3339.742306][T19446] ? __pfx_mt_find+0x10/0x10 [ 3339.742368][T19446] handle_mm_fault+0x36d/0xa20 [ 3339.742406][T19446] __get_user_pages+0xf9c/0x34d0 [ 3339.742461][T19446] ? __pfx___get_user_pages+0x10/0x10 [ 3339.742512][T19446] populate_vma_page_range+0x267/0x3f0 [ 3339.742558][T19446] ? __pfx_populate_vma_page_range+0x10/0x10 [ 3339.742606][T19446] ? __pfx_find_vma_intersection+0x10/0x10 [ 3339.742649][T19446] ? do_mmap+0x93f/0x12f0 [ 3339.742694][T19446] __mm_populate+0x107/0x3a0 [ 3339.742753][T19446] ? __pfx___mm_populate+0x10/0x10 [ 3339.742800][T19446] ? up_write+0x290/0x4f0 [ 3339.742844][T19446] vm_mmap_pgoff+0x37f/0x470 [ 3339.742889][T19446] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3339.742938][T19446] ? __x64_sys_futex+0x34f/0x4d0 [ 3339.742975][T19446] ? __x64_sys_futex+0x358/0x4d0 [ 3339.743017][T19446] ksys_mmap_pgoff+0x7d/0x5b0 [ 3339.743062][T19446] __x64_sys_mmap+0x125/0x190 [ 3339.743094][T19446] do_syscall_64+0xc9/0xf80 [ 3339.743130][T19446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3339.743159][T19446] RIP: 0033:0x7efe5939acb9 [ 3339.743182][T19446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3339.743209][T19446] RSP: 002b:00007efe5a296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3339.743237][T19446] RAX: ffffffffffffffda RBX: 00007efe59615fa0 RCX: 00007efe5939acb9 [ 3339.743256][T19446] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 3339.743274][T19446] RBP: 00007efe59408bf7 R08: 0000000000000002 R09: 0000000000008000 [ 3339.743292][T19446] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 3339.743310][T19446] R13: 00007efe59616038 R14: 00007efe59615fa0 R15: 00007ffcb080f238 [ 3339.743349][T19446] [ 3340.065653][T19227] veth0_vlan: entered promiscuous mode [ 3340.084493][T19448] CPU: 1 UID: 0 PID: 19448 Comm: syz.1.7332 Tainted: G L syzkaller #0 PREEMPT(full) [ 3340.084523][T19448] Tainted: [L]=SOFTLOCKUP [ 3340.084529][T19448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3340.084538][T19448] Call Trace: [ 3340.084544][T19448] [ 3340.084550][T19448] dump_stack_lvl+0x100/0x190 [ 3340.084574][T19448] should_fail_ex.cold+0x5/0xa [ 3340.084599][T19448] _copy_to_user+0x32/0xd0 [ 3340.084624][T19448] simple_read_from_buffer+0xcb/0x170 [ 3340.084640][T19448] proc_fail_nth_read+0x1af/0x230 [ 3340.084659][T19448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3340.084678][T19448] ? rw_verify_area+0xce/0x6d0 [ 3340.084692][T19448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3340.084710][T19448] vfs_read+0x1e4/0xb30 [ 3340.084728][T19448] ? __pfx_vfs_read+0x10/0x10 [ 3340.084743][T19448] ? find_held_lock+0x2b/0x80 [ 3340.084764][T19448] ? __fget_files+0x215/0x3d0 [ 3340.084784][T19448] ? __fget_files+0x21f/0x3d0 [ 3340.084805][T19448] ksys_read+0x12a/0x250 [ 3340.084821][T19448] ? __pfx_ksys_read+0x10/0x10 [ 3340.084843][T19448] do_syscall_64+0xc9/0xf80 [ 3340.084863][T19448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3340.084878][T19448] RIP: 0033:0x7f1eb255b58e [ 3340.084891][T19448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3340.084905][T19448] RSP: 002b:00007f1eb34c0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3340.084921][T19448] RAX: ffffffffffffffda RBX: 00007f1eb34c16c0 RCX: 00007f1eb255b58e [ 3340.084931][T19448] RDX: 000000000000000f RSI: 00007f1eb34c10a0 RDI: 0000000000000003 [ 3340.084940][T19448] RBP: 00007f1eb34c1090 R08: 0000000000000000 R09: 0000000000000000 [ 3340.084949][T19448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3340.084957][T19448] R13: 00007f1eb2816038 R14: 00007f1eb2815fa0 R15: 00007fff5e07d168 [ 3340.084977][T19448] [ 3340.159814][T19227] veth1_vlan: entered promiscuous mode [ 3340.259722][T19227] veth0_macvtap: entered promiscuous mode [ 3340.282920][T19227] veth1_macvtap: entered promiscuous mode [ 3340.360962][T19227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3340.369842][T19227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3340.379908][ T1522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3340.380229][ T1522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3340.380278][ T1522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3340.380323][ T1522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3340.642961][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3340.642991][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3340.702028][T19462] FAULT_INJECTION: forcing a failure. [ 3340.702028][T19462] name failslab, interval 1, probability 0, space 0, times 0 [ 3340.702060][T19462] CPU: 0 UID: 0 PID: 19462 Comm: syz.3.7335 Tainted: G L syzkaller #0 PREEMPT(full) [ 3340.702083][T19462] Tainted: [L]=SOFTLOCKUP [ 3340.702088][T19462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3340.702098][T19462] Call Trace: [ 3340.702104][T19462] [ 3340.702110][T19462] dump_stack_lvl+0x100/0x190 [ 3340.702133][T19462] should_fail_ex.cold+0x5/0xa [ 3340.702158][T19462] should_failslab+0xc2/0x120 [ 3340.702178][T19462] ? lsm_blob_alloc+0x68/0x90 [ 3340.702194][T19462] __kmalloc_noprof+0xf6/0x9c0 [ 3340.702225][T19462] ? lsm_blob_alloc+0x68/0x90 [ 3340.702252][T19462] lsm_blob_alloc+0x68/0x90 [ 3340.702282][T19462] security_sk_alloc+0x2d/0x290 [ 3340.702316][T19462] sk_prot_alloc+0x1d1/0x2a0 [ 3340.702334][T19462] sk_alloc+0x36/0xe80 [ 3340.702354][T19462] unix_create1+0xa6/0x700 [ 3340.702370][T19462] unix_create+0x145/0x270 [ 3340.702384][T19462] __sock_create+0x339/0x860 [ 3340.702404][T19462] __sys_socketpair+0x261/0x5b0 [ 3340.702424][T19462] ? __pfx___sys_socketpair+0x10/0x10 [ 3340.702450][T19462] __x64_sys_socketpair+0x96/0x100 [ 3340.702470][T19462] ? lockdep_hardirqs_on+0x78/0x100 [ 3340.702489][T19462] do_syscall_64+0xc9/0xf80 [ 3340.702508][T19462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3340.702523][T19462] RIP: 0033:0x7fe58a59acb9 [ 3340.702536][T19462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3340.702551][T19462] RSP: 002b:00007fe58b46b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3340.702566][T19462] RAX: ffffffffffffffda RBX: 00007fe58a815fa0 RCX: 00007fe58a59acb9 [ 3340.702577][T19462] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 3340.702586][T19462] RBP: 00007fe58a608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3340.702595][T19462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3340.702605][T19462] R13: 00007fe58a816038 R14: 00007fe58a815fa0 R15: 00007ffcf82fda68 [ 3340.702624][T19462] [ 3340.729803][ T3079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3340.729831][ T3079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3342.504073][T18788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3342.513944][T18788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3342.522160][T18788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3342.531401][T18788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3342.539133][T18788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3342.925915][T19491] FAULT_INJECTION: forcing a failure. [ 3342.925915][T19491] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3342.986025][T19491] CPU: 0 UID: 0 PID: 19491 Comm: syz.2.7339 Tainted: G L syzkaller #0 PREEMPT(full) [ 3342.986069][T19491] Tainted: [L]=SOFTLOCKUP [ 3342.986078][T19491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3342.986094][T19491] Call Trace: [ 3342.986104][T19491] [ 3342.986114][T19491] dump_stack_lvl+0x100/0x190 [ 3342.986151][T19491] should_fail_ex.cold+0x5/0xa [ 3342.986187][T19491] ? prepare_alloc_pages+0x16d/0x5f0 [ 3342.986232][T19491] should_fail_alloc_page+0xeb/0x140 [ 3342.986271][T19491] prepare_alloc_pages+0x1f0/0x5f0 [ 3342.986309][T19491] ? __lock_acquire+0x4a5/0x2630 [ 3342.986358][T19491] __alloc_frozen_pages_noprof+0x193/0x2410 [ 3342.986409][T19491] ? __pfx___might_resched+0x10/0x10 [ 3342.986457][T19491] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3342.986515][T19491] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3342.986549][T19491] ? policy_nodemask+0xed/0x4f0 [ 3342.986590][T19491] alloc_pages_mpol+0x1fb/0x550 [ 3342.986630][T19491] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3342.986679][T19491] alloc_pages_noprof+0x131/0x390 [ 3342.986720][T19491] __pmd_alloc+0x3b/0x9c0 [ 3342.986765][T19491] __handle_mm_fault+0xa99/0x2b50 [ 3342.986801][T19491] ? mt_find+0x45e/0x8e0 [ 3342.986838][T19491] ? __pfx___handle_mm_fault+0x10/0x10 [ 3342.986866][T19491] ? __pfx_mt_find+0x10/0x10 [ 3342.986921][T19491] ? find_vma+0xbf/0x140 [ 3342.986957][T19491] ? __pfx_find_vma+0x10/0x10 [ 3342.986997][T19491] handle_mm_fault+0x36d/0xa20 [ 3342.987035][T19491] do_user_addr_fault+0x74c/0x12f0 [ 3342.987077][T19491] exc_page_fault+0x6f/0xd0 [ 3342.987109][T19491] asm_exc_page_fault+0x26/0x30 [ 3342.987137][T19491] RIP: 0010:copy_iovec_from_user+0xcf/0x140 [ 3342.987178][T19491] Code: 0f 85 87 00 00 00 4c 89 6b 08 49 83 ec 01 31 ff 48 83 c5 10 4c 89 e6 48 83 c3 10 e8 ab bd 23 fd 4d 85 e4 74 57 e8 c1 c2 23 fd <4c> 8b 6d 08 e8 b8 c2 23 fd 4c 8b 7d 00 e8 af c2 23 fd 31 ff 4c 89 [ 3342.987206][T19491] RSP: 0018:ffffc90003a9fc00 EFLAGS: 00050293 [ 3342.987230][T19491] RAX: 0000000000000000 RBX: ffff8880480b1800 RCX: ffffffff84e28bcb [ 3342.987250][T19491] RDX: ffff88801db10000 RSI: ffffffff84e28c3f RDI: ffff88801db10000 [ 3342.987270][T19491] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000001 [ 3342.987288][T19491] R10: 0000000000000311 R11: 0000000000000000 R12: 0000000000000031 [ 3342.987305][T19491] R13: 0000000000000311 R14: dffffc0000000000 R15: 0000000000000000 [ 3342.987339][T19491] ? copy_iovec_from_user+0x5b/0x140 [ 3342.987376][T19491] ? copy_iovec_from_user+0xcf/0x140 [ 3342.987424][T19491] iovec_from_user+0xa2/0x140 [ 3342.987469][T19491] __import_iovec+0x81/0x640 [ 3342.987509][T19491] ? proc_fail_nth_write+0x9f/0x220 [ 3342.987542][T19491] ? find_held_lock+0x2b/0x80 [ 3342.987581][T19491] import_iovec+0x82/0xb0 [ 3342.987626][T19491] keyctl_instantiate_key_iov+0x111/0x1b0 [ 3342.987741][T19491] ? __pfx_keyctl_instantiate_key_iov+0x10/0x10 [ 3342.987808][T19491] ? ksys_write+0x1ac/0x250 [ 3342.987839][T19491] ? __pfx_ksys_write+0x10/0x10 [ 3342.987875][T19491] __do_sys_keyctl+0x288/0x5a0 [ 3342.987914][T19491] do_syscall_64+0xc9/0xf80 [ 3342.987950][T19491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3342.987978][T19491] RIP: 0033:0x7efe5939acb9 [ 3342.987999][T19491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3342.988026][T19491] RSP: 002b:00007efe5a296028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 3342.988052][T19491] RAX: ffffffffffffffda RBX: 00007efe59615fa0 RCX: 00007efe5939acb9 [ 3342.988072][T19491] RDX: 0000000000000001 RSI: 1000000000000000 RDI: 0000000000000014 [ 3342.988091][T19491] RBP: 00007efe5a296090 R08: 0000000000000000 R09: 0000000000000000 [ 3342.988109][T19491] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 3342.988127][T19491] R13: 00007efe59616038 R14: 00007efe59615fa0 R15: 00007ffcb080f238 [ 3342.988166][T19491] [ 3343.939022][T19488] chnl_net:caif_netlink_parms(): no params data found [ 3344.119535][ T80] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3344.266738][ T80] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3344.462425][T19488] bridge0: port 1(bridge_slave_0) entered blocking state [ 3344.470026][T19488] bridge0: port 1(bridge_slave_0) entered disabled state [ 3344.477944][T19488] bridge_slave_0: entered allmulticast mode [ 3344.514511][T19488] bridge_slave_0: entered promiscuous mode [ 3344.523558][T19488] bridge0: port 2(bridge_slave_1) entered blocking state [ 3344.603862][ T5841] Bluetooth: hci1: command tx timeout [ 3344.610399][T19488] bridge0: port 2(bridge_slave_1) entered disabled state [ 3344.646979][T19488] bridge_slave_1: entered allmulticast mode [ 3344.671726][T19488] bridge_slave_1: entered promiscuous mode [ 3344.775247][ T80] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3344.973876][T19488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3345.056603][ T80] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3345.081256][T19488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3345.259283][T19520] syz.3.7344 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 3345.345911][T19488] team0: Port device team_slave_0 added [ 3345.354693][T19488] team0: Port device team_slave_1 added [ 3345.435733][T19488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3345.516016][T19488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3345.613799][T19488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3345.655786][T19488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3345.674165][T19488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3345.753815][T19488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3346.101252][T19488] hsr_slave_0: entered promiscuous mode [ 3346.119492][T19488] hsr_slave_1: entered promiscuous mode [ 3346.144631][T19488] debugfs: 'hsr0' already exists in 'hsr' [ 3346.163960][T19488] Cannot create hsr debugfs directory [ 3346.178897][ T80] bridge_slave_1: left allmulticast mode [ 3346.193811][ T80] bridge_slave_1: left promiscuous mode [ 3346.199664][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 3346.246141][ T80] bridge_slave_0: left allmulticast mode [ 3346.251819][ T80] bridge_slave_0: left promiscuous mode [ 3346.274118][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 3346.297068][T19523] Invalid ELF header magic: != ELF [ 3346.675933][ T5841] Bluetooth: hci1: command tx timeout [ 3346.979170][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3346.993472][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3347.021977][ T80] bond0 (unregistering): Released all slaves [ 3348.539942][ T80] hsr_slave_0: left promiscuous mode [ 3348.599940][ T80] hsr_slave_1: left promiscuous mode [ 3348.616225][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7349'. [ 3348.625532][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3348.632941][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3348.753791][ T5841] Bluetooth: hci1: command tx timeout [ 3348.759987][T19567] netlink: 'syz.3.7349': attribute type 1 has an invalid length. [ 3348.809880][T19567] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7349'. [ 3348.991212][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3349.003720][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3349.039053][T19567] netlink: 'syz.3.7349': attribute type 1 has an invalid length. [ 3349.116687][ T80] veth1_macvtap: left promiscuous mode [ 3349.155328][ T80] veth0_macvtap: left promiscuous mode [ 3349.333805][ T80] veth1_vlan: left promiscuous mode [ 3349.339161][ T80] veth0_vlan: left promiscuous mode [ 3349.643277][T19576] FAULT_INJECTION: forcing a failure. [ 3349.643277][T19576] name failslab, interval 1, probability 0, space 0, times 0 [ 3349.679467][T19576] CPU: 1 UID: 0 PID: 19576 Comm: syz.0.7353 Tainted: G L syzkaller #0 PREEMPT(full) [ 3349.679520][T19576] Tainted: [L]=SOFTLOCKUP [ 3349.679530][T19576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3349.679550][T19576] Call Trace: [ 3349.679560][T19576] [ 3349.679572][T19576] dump_stack_lvl+0x100/0x190 [ 3349.679615][T19576] should_fail_ex.cold+0x5/0xa [ 3349.679662][T19576] should_failslab+0xc2/0x120 [ 3349.679702][T19576] kmem_cache_alloc_noprof+0x83/0x780 [ 3349.679742][T19576] ? __kernfs_new_node+0xd2/0x960 [ 3349.679788][T19576] ? __kernfs_new_node+0xd2/0x960 [ 3349.679825][T19576] __kernfs_new_node+0xd2/0x960 [ 3349.679868][T19576] ? __pfx___kernfs_new_node+0x10/0x10 [ 3349.679925][T19576] ? find_held_lock+0x2b/0x80 [ 3349.679953][T19576] ? kernfs_root+0xee/0x2a0 [ 3349.679990][T19576] ? kernfs_root+0xee/0x2a0 [ 3349.680036][T19576] kernfs_new_node+0x11b/0x1a0 [ 3349.680086][T19576] __kernfs_create_file+0x53/0x350 [ 3349.680123][T19576] cgroup_addrm_files+0x4d8/0xb90 [ 3349.680168][T19576] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 3349.680197][T19576] ? __pfx___xa_store+0x10/0x10 [ 3349.680349][T19576] ? do_raw_spin_unlock+0x145/0x1e0 [ 3349.680401][T19576] css_populate_dir+0x161/0x590 [ 3349.680445][T19576] cgroup_apply_control_enable+0x3f0/0xbc0 [ 3349.680506][T19576] cgroup_mkdir+0x57f/0x12d0 [ 3349.680542][T19576] ? __pfx_cgroup_mkdir+0x10/0x10 [ 3349.680573][T19576] kernfs_iop_mkdir+0x111/0x190 [ 3349.680615][T19576] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 3349.680653][T19576] vfs_mkdir+0x729/0xb50 [ 3349.680705][T19576] do_mkdirat+0x435/0x590 [ 3349.680743][T19576] ? __pfx_do_mkdirat+0x10/0x10 [ 3349.680777][T19576] ? strncpy_from_user+0x19d/0x2d0 [ 3349.680823][T19576] ? getname_flags.part.0+0x1c5/0x540 [ 3349.680870][T19576] __x64_sys_mkdir+0xef/0x140 [ 3349.680998][T19576] do_syscall_64+0xc9/0xf80 [ 3349.681040][T19576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3349.681072][T19576] RIP: 0033:0x7fab2b19acb9 [ 3349.681098][T19576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3349.681127][T19576] RSP: 002b:00007fab2c046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3349.681156][T19576] RAX: ffffffffffffffda RBX: 00007fab2b416090 RCX: 00007fab2b19acb9 [ 3349.681178][T19576] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 3349.681197][T19576] RBP: 00007fab2b208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3349.681215][T19576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3349.681234][T19576] R13: 00007fab2b416128 R14: 00007fab2b416090 R15: 00007ffe18b6ee18 [ 3349.681275][T19576] [ 3349.681314][T19576] cgroup: cgroup_addrm_files: failed to add failcnt, err=-12 [ 3350.065698][T19580] zswap: compressor not available [ 3350.538127][ T80] team0 (unregistering): Port device team_slave_1 removed [ 3350.582410][ T80] team0 (unregistering): Port device team_slave_0 removed [ 3350.850324][ T5841] Bluetooth: hci1: command tx timeout [ 3351.656196][T19488] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3351.751287][T19488] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3351.780967][T19488] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3351.800676][T19488] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3352.029064][T19488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3352.087026][T19488] 8021q: adding VLAN 0 to HW filter on device team0 [ 3352.110983][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 3352.118235][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3352.149097][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 3352.156336][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3352.244258][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7357'. [ 3352.271879][T19612] netlink: 'syz.3.7357': attribute type 1 has an invalid length. [ 3352.285028][T19612] netlink: 13 bytes leftover after parsing attributes in process `syz.3.7357'. [ 3352.428985][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7358'. [ 3352.935433][T19488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3353.081572][T19488] veth0_vlan: entered promiscuous mode [ 3353.134412][T19488] veth1_vlan: entered promiscuous mode [ 3353.187164][T19488] veth0_macvtap: entered promiscuous mode [ 3353.209056][T19488] veth1_macvtap: entered promiscuous mode [ 3353.425323][T19488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3353.481623][T19488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3353.545203][ T1522] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3353.562074][ T1522] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3353.601536][ T1522] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3353.656477][ T1522] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3353.895160][T14772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3353.895172][T10597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3353.895193][T10597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3353.912520][T14772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3354.230719][T19653] FAULT_INJECTION: forcing a failure. [ 3354.230719][T19653] name failslab, interval 1, probability 0, space 0, times 0 [ 3354.320167][T19653] CPU: 1 UID: 0 PID: 19653 Comm: syz.0.7366 Tainted: G L syzkaller #0 PREEMPT(full) [ 3354.320193][T19653] Tainted: [L]=SOFTLOCKUP [ 3354.320198][T19653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3354.320208][T19653] Call Trace: [ 3354.320214][T19653] [ 3354.320220][T19653] dump_stack_lvl+0x100/0x190 [ 3354.320243][T19653] should_fail_ex.cold+0x5/0xa [ 3354.320269][T19653] should_failslab+0xc2/0x120 [ 3354.320290][T19653] ? tracepoint_add_func+0x2c5/0xed0 [ 3354.320306][T19653] __kmalloc_noprof+0xf6/0x9c0 [ 3354.320322][T19653] ? __mutex_lock+0x26a/0x1b90 [ 3354.320343][T19653] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 3354.320360][T19653] ? tracepoint_add_func+0x2c5/0xed0 [ 3354.320375][T19653] tracepoint_add_func+0x2c5/0xed0 [ 3354.320390][T19653] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 3354.320410][T19653] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 3354.320426][T19653] tracepoint_probe_register+0xc4/0x110 [ 3354.320443][T19653] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 3354.320460][T19653] ? ftrace_set_clr_event+0x156/0x330 [ 3354.320479][T19653] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 3354.320494][T19653] ? __lock_acquire+0x4a5/0x2630 [ 3354.320520][T19653] tracing_start_sched_switch+0xaf/0x170 [ 3354.320535][T19653] __ftrace_event_enable_disable+0x557/0x6f0 [ 3354.320555][T19653] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 3354.320579][T19653] ftrace_set_clr_event+0x16e/0x330 [ 3354.320599][T19653] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 3354.320627][T19653] ? trace_get_user+0x3ae/0xa70 [ 3354.320649][T19653] ftrace_event_write+0x259/0x2c0 [ 3354.320670][T19653] ? __pfx_ftrace_event_write+0x10/0x10 [ 3354.320697][T19653] vfs_write+0x2aa/0x1070 [ 3354.320715][T19653] ? __pfx_ftrace_event_write+0x10/0x10 [ 3354.320737][T19653] ? __pfx_vfs_write+0x10/0x10 [ 3354.320752][T19653] ? find_held_lock+0x2b/0x80 [ 3354.320766][T19653] ? __fget_files+0x215/0x3d0 [ 3354.320786][T19653] ? __fget_files+0x21f/0x3d0 [ 3354.320807][T19653] ksys_write+0x12a/0x250 [ 3354.320824][T19653] ? __pfx_ksys_write+0x10/0x10 [ 3354.320846][T19653] do_syscall_64+0xc9/0xf80 [ 3354.320869][T19653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3354.320884][T19653] RIP: 0033:0x7fab2b19acb9 [ 3354.320897][T19653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3354.320911][T19653] RSP: 002b:00007fab2c067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3354.320926][T19653] RAX: ffffffffffffffda RBX: 00007fab2b415fa0 RCX: 00007fab2b19acb9 [ 3354.320935][T19653] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 3354.320944][T19653] RBP: 00007fab2c067090 R08: 0000000000000000 R09: 0000000000000000 [ 3354.320954][T19653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3354.320963][T19653] R13: 00007fab2b416038 R14: 00007fab2b415fa0 R15: 00007ffe18b6ee18 [ 3354.320983][T19653] [ 3354.320999][T19653] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 3354.929143][T19666] ------------[ cut here ]------------ [ 3354.935888][T19666] IS_ERR(old) [ 3354.935921][T19666] WARNING: kernel/tracepoint.c:358 at tracepoint_probe_unregister+0x7ff/0xc90, CPU#0: syz.2.7369/19666 [ 3354.951476][T19666] Modules linked in: [ 3354.956136][T19666] CPU: 0 UID: 0 PID: 19666 Comm: syz.2.7369 Tainted: G L syzkaller #0 PREEMPT(full) [ 3354.967176][T19666] Tainted: [L]=SOFTLOCKUP [ 3354.971516][T19666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3354.981701][T19666] RIP: 0010:tracepoint_probe_unregister+0x7ff/0xc90 [ 3354.988492][T19666] Code: 5e 41 5f c3 cc cc cc cc e8 4e 33 fe ff 48 8d 7b f0 48 c7 c6 10 0b 08 82 e8 de 00 e4 ff eb c1 bb fe ff ff ff e8 32 33 fe ff 90 <0f> 0b 90 eb b3 e8 27 33 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 3355.008204][T19666] RSP: 0000:ffffc90000ac78a8 EFLAGS: 00010202 [ 3355.014371][T19666] RAX: 0000000000000003 RBX: 00000000fffffffe RCX: ffffffff82081967 [ 3355.022358][T19666] RDX: ffff88802fdcdb80 RSI: ffffffff82081bce RDI: 0000000000400000 [ 3355.030415][T19666] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 3355.038621][T19666] R10: 0000000000000001 R11: 000000000007fffc R12: ffffffff820e2710 [ 3355.047305][T19666] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8e999b80 [ 3355.055972][T19666] FS: 00007efe5a2756c0(0000) GS:ffff8881245e5000(0000) knlGS:0000000000000000 [ 3355.065010][T19666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3355.071614][T19666] CR2: 0000001b2ed1eff8 CR3: 00000000926ca000 CR4: 00000000003526f0 [ 3355.079799][T19666] Call Trace: [ 3355.083093][T19666] [ 3355.086118][T19666] tracing_stop_cmdline_record+0x66/0xa0 [ 3355.091784][T19666] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 3355.097849][T19666] ftrace_event_set_open+0x224/0x380 [ 3355.103168][T19666] do_dentry_open+0x73e/0x1570 [ 3355.108008][T19666] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 3355.113873][T19666] ? security_inode_permission+0xbf/0x250 [ 3355.119634][T19666] vfs_open+0x82/0x3f0 [ 3355.123795][T19666] path_openat+0x21dc/0x3120 [ 3355.128425][T19666] ? __pfx_path_openat+0x10/0x10 [ 3355.133413][T19666] do_filp_open+0x1f7/0x420 [ 3355.138005][T19666] ? __pfx_do_filp_open+0x10/0x10 [ 3355.143733][T19666] ? _raw_spin_unlock+0x28/0x50 [ 3355.148618][T19666] ? alloc_fd+0x476/0x790 [ 3355.152982][T19666] do_sys_openat2+0x12e/0x220 [ 3355.158573][T19666] ? __pfx_do_sys_openat2+0x10/0x10 [ 3355.163865][T19666] ? rcu_is_watching+0x12/0xc0 [ 3355.168654][T19666] ? kfree+0x2a9/0x690 [ 3355.172748][T19666] __x64_sys_openat+0x12d/0x210 [ 3355.177701][T19666] ? __pfx___x64_sys_openat+0x10/0x10 [ 3355.183115][T19666] ? kcov_ioctl+0x16a/0x720 [ 3355.187719][T19666] ? fput+0x79/0x100 [ 3355.191659][T19666] do_syscall_64+0xc9/0xf80 [ 3355.196278][T19666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3355.202200][T19666] RIP: 0033:0x7efe5939acb9 [ 3355.206723][T19666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3355.226411][T19666] RSP: 002b:00007efe5a275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3355.235962][T19666] RAX: ffffffffffffffda RBX: 00007efe59616090 RCX: 00007efe5939acb9 [ 3355.244499][T19666] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 3355.252496][T19666] RBP: 00007efe59408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3355.260889][T19666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3355.269335][T19666] R13: 00007efe59616128 R14: 00007efe59616090 R15: 00007ffcb080f238 [ 3355.277371][T19666] [ 3355.280385][T19666] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3355.287652][T19666] CPU: 0 UID: 0 PID: 19666 Comm: syz.2.7369 Tainted: G L syzkaller #0 PREEMPT(full) [ 3355.298575][T19666] Tainted: [L]=SOFTLOCKUP [ 3355.302882][T19666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 3355.312921][T19666] Call Trace: [ 3355.316193][T19666] [ 3355.319110][T19666] dump_stack_lvl+0x100/0x190 [ 3355.323780][T19666] vpanic+0x20d/0x630 [ 3355.327752][T19666] panic+0xd1/0xd1 [ 3355.331465][T19666] ? __pfx_panic+0x10/0x10 [ 3355.335877][T19666] ? check_panic_on_warn+0x1f/0x90 [ 3355.340988][T19666] check_panic_on_warn.cold+0x19/0x34 [ 3355.346346][T19666] ? tracepoint_probe_unregister+0x7ff/0xc90 [ 3355.352315][T19666] __warn.cold+0x191/0x2f8 [ 3355.356723][T19666] __report_bug+0x296/0x3d0 [ 3355.361279][T19666] ? tracepoint_probe_unregister+0x7ff/0xc90 [ 3355.367251][T19666] ? __pfx___report_bug+0x10/0x10 [ 3355.372262][T19666] ? rcu_is_watching+0x12/0xc0 [ 3355.377012][T19666] ? trace_contention_end+0xd6/0x110 [ 3355.382291][T19666] ? __mutex_lock+0x26a/0x1b90 [ 3355.387047][T19666] ? tracepoint_probe_unregister+0x31/0xc90 [ 3355.392928][T19666] ? rcu_is_watching+0x12/0xc0 [ 3355.397678][T19666] ? tracepoint_probe_unregister+0x7ff/0xc90 [ 3355.403735][T19666] report_bug+0xb2/0x220 [ 3355.407988][T19666] ? tracepoint_probe_unregister+0x7ff/0xc90 [ 3355.413955][T19666] handle_bug+0x166/0x2a0 [ 3355.418277][T19666] exc_invalid_op+0x17/0x50 [ 3355.422772][T19666] asm_exc_invalid_op+0x1a/0x20 [ 3355.427608][T19666] RIP: 0010:tracepoint_probe_unregister+0x7ff/0xc90 [ 3355.434187][T19666] Code: 5e 41 5f c3 cc cc cc cc e8 4e 33 fe ff 48 8d 7b f0 48 c7 c6 10 0b 08 82 e8 de 00 e4 ff eb c1 bb fe ff ff ff e8 32 33 fe ff 90 <0f> 0b 90 eb b3 e8 27 33 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 3355.453787][T19666] RSP: 0000:ffffc90000ac78a8 EFLAGS: 00010202 [ 3355.459844][T19666] RAX: 0000000000000003 RBX: 00000000fffffffe RCX: ffffffff82081967 [ 3355.467805][T19666] RDX: ffff88802fdcdb80 RSI: ffffffff82081bce RDI: 0000000000400000 [ 3355.475767][T19666] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 3355.483732][T19666] R10: 0000000000000001 R11: 000000000007fffc R12: ffffffff820e2710 [ 3355.491692][T19666] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8e999b80 [ 3355.499655][T19666] ? __pfx_probe_sched_switch+0x10/0x10 [ 3355.505201][T19666] ? tracepoint_probe_unregister+0x597/0xc90 [ 3355.511170][T19666] ? tracepoint_probe_unregister+0x7fe/0xc90 [ 3355.517142][T19666] ? tracepoint_probe_unregister+0x7fe/0xc90 [ 3355.523114][T19666] tracing_stop_cmdline_record+0x66/0xa0 [ 3355.528732][T19666] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 3355.534706][T19666] ftrace_event_set_open+0x224/0x380 [ 3355.539982][T19666] do_dentry_open+0x73e/0x1570 [ 3355.544734][T19666] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 3355.550536][T19666] ? security_inode_permission+0xbf/0x250 [ 3355.556253][T19666] vfs_open+0x82/0x3f0 [ 3355.560323][T19666] path_openat+0x21dc/0x3120 [ 3355.564913][T19666] ? __pfx_path_openat+0x10/0x10 [ 3355.569845][T19666] do_filp_open+0x1f7/0x420 [ 3355.574338][T19666] ? __pfx_do_filp_open+0x10/0x10 [ 3355.579368][T19666] ? _raw_spin_unlock+0x28/0x50 [ 3355.584210][T19666] ? alloc_fd+0x476/0x790 [ 3355.588530][T19666] do_sys_openat2+0x12e/0x220 [ 3355.593200][T19666] ? __pfx_do_sys_openat2+0x10/0x10 [ 3355.598394][T19666] ? rcu_is_watching+0x12/0xc0 [ 3355.603141][T19666] ? kfree+0x2a9/0x690 [ 3355.607198][T19666] __x64_sys_openat+0x12d/0x210 [ 3355.612042][T19666] ? __pfx___x64_sys_openat+0x10/0x10 [ 3355.617410][T19666] ? kcov_ioctl+0x16a/0x720 [ 3355.621897][T19666] ? fput+0x79/0x100 [ 3355.625786][T19666] do_syscall_64+0xc9/0xf80 [ 3355.630278][T19666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3355.636158][T19666] RIP: 0033:0x7efe5939acb9 [ 3355.640646][T19666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3355.660240][T19666] RSP: 002b:00007efe5a275028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3355.668647][T19666] RAX: ffffffffffffffda RBX: 00007efe59616090 RCX: 00007efe5939acb9 [ 3355.676608][T19666] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 3355.684565][T19666] RBP: 00007efe59408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3355.692522][T19666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3355.700477][T19666] R13: 00007efe59616128 R14: 00007efe59616090 R15: 00007ffcb080f238 [ 3355.708454][T19666] [ 3355.711838][T19666] Kernel Offset: disabled [ 3355.716158][T19666] Rebooting in 86400 seconds..