last executing test programs: 13.568848565s ago: executing program 2 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x18122c0}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fbdbdf25000c94d9bae1cd13f0d9364818feb900060048b92102f7949510c8df05"], 0x20}, 0x1, 0x0, 0x0, 0x4004c84d}, 0x80) socket(0x11, 0x3, 0xe) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0803, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) clone$auto(0x20003b48, 0x2, 0x0, 0x0, 0x5) statmount$auto(0x0, &(0x7f0000000540)={0x8, 0x1, 0x798, 0x5, 0xc, 0x2000000000940, 0x1ffde, 0x7, 0x4, 0x3fe, 0x9, 0x1ffc, 0x2, 0x7, 0x9, 0x8, 0x6, 0x407, 0x5, 0x8000000007, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000004, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x47d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0xe36, 0x0, 0x19b], "a0cc6de2596d15b1cb6782fbb6dfe447953828f5510e6f0bde42650c9604694d89513eb6642c8cb401041dda23ea2954c2f529fedd4d6c4e65872c853a5eb6902365f8715dc21cd379109889b305bdd28bca7446f56a95d5385f6fb3b28198a5c0ce69318b198d7161079c51692aa63e64338e11712ed85607d555eee2ac4f12cb7b67fa027319c5759d2767ebd4df90bcefa930a4d9209db73b1ae5d0484c8a8ca35d5329b1bfc52b2807fc1b63318e4139886e0665cdb9a37fa666ed10752c754570f18962fd32caa15fec03eee2abf73b2bb1f28ab05e3454ce1d1c382100e5e23e43ec726ee9f6d3c5"}, 0x400, 0x81) r2 = socket(0x10, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3c) write$auto(r3, &(0x7f00000003c0)='+&\x00', 0x273f) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, r3, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) setsockopt$auto_SO_SNDBUF(r3, 0x5, 0x7, &(0x7f0000000140)='[[.\x00', 0x9) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'g\t$K\xcb\x12\xfa\x00\x00\xcfk', 0xb7f) select$auto(0x1, &(0x7f0000000040)={[0xfffffffffffff91e, 0x40, 0x4, 0x80, 0x9, 0x3, 0x80000001, 0x7c, 0x3, 0xfffffffffffffffc, 0x5, 0xb, 0x4, 0x7, 0x0, 0x6]}, &(0x7f00000000c0)={[0x3, 0x4, 0x0, 0x1, 0xc, 0x6, 0x7f, 0x3, 0x2, 0xc6d, 0x8, 0xffffffff, 0x1, 0x0, 0x7491, 0x40]}, 0x0, &(0x7f00000001c0)={0x89, 0x1}) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) 12.740375469s ago: executing program 2 (id=1081): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sethostname$auto(0x0, 0x7) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1200c801}, 0x80) bpf$auto(0x12, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf) r0 = socket(0xa, 0x801, 0x84) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = io_uring_setup$auto(0x1d48, 0x0) io_uring_register$auto(r4, 0x18, 0x0, 0x9) read$auto_stats_fops_(r4, &(0x7f00000001c0)=""/132, 0x84) prctl$auto(0x3e, 0x5, 0x0, 0x2, 0x0) mmap$auto(0x88, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=&(0x7f00000004c0)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xcaGzw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\x1c\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00', 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000340)=@rc={0x1f, @any, 0x2}, 0xa) madvise$auto(0x1000, 0x400050, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r5, 0x4004550d, &(0x7f0000000180)=0x795) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd41, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x341, 0x3, 0x62, 0x80000001, 0x202, 0x2, 0x1, 0x8, 0x400]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x10, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x40000000001]}, 0x0) 9.953196201s ago: executing program 2 (id=1088): sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x80) r0 = socket(0x28, 0x5, 0x0) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r0) sendmsg$auto_SMC_PNETID_DEL(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="a70300"], 0x14}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000) getgroups$auto(0x1a1, 0xfffffffffffffffd) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20004000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(0x0, r6) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r6, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000000)={0x34, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x10001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x700000000000000) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r5, 0x8000) ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, 0x0) shmctl$auto_SHM_STAT(0x1, 0xd, 0x0) ioctl$auto_BLKRRPART(r5, 0x125f, 0xfffffffffffffff4) lseek$auto(r4, 0x7fff, 0x40001000) madvise$auto(0x0, 0x400053, 0x9) connect$auto(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x56) read$auto(r0, &(0x7f0000000100)='(\x00', 0x1) 7.099860394s ago: executing program 1 (id=1102): socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x309801, 0x0) r2 = getpid() waitid$auto_P_PID(0x1, r2, &(0x7f0000000200)={@siginfo_0_0={0x87b, 0xff, 0x8, @_sigsys={&(0x7f0000000180)="a066b8e840c6311618ee915dcba2b561883f43193d2a5631fe8489c54c2e58e828919abdaea9ede3515e3e06ef5d9e26a356338ed2792d285c9166f052064c40c858589a8fc08743324746bfd929a8d9ab975df177246f1824ee62a621dc9c9b00fe", 0xffffffff, 0x7}}}, 0x1, &(0x7f0000000340)={{0x1, 0x8}, {0x8000000, 0x9}, 0x8, 0x6, 0x8, 0x1, 0x9, 0x6, 0x69, 0x3, 0x6, 0x0, 0x2, 0x37, 0x4, 0x6}) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) io_uring_setup$auto(0x59, 0x0) open(0x0, 0x64842, 0x0) io_uring_setup$auto(0x6, 0x0) timer_create$auto(0xfffffffd, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f0000000000)={{0x10080c, 0x10}, {0x8}}, 0x0) timer_gettime$auto(0x0, 0x0) io_uring_register$auto(0x2, 0x14, 0x0, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 5.388879542s ago: executing program 1 (id=1104): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) (async, rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/device\x00', 0x20040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000003480)=""/247, 0xf7) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) (async) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="48100000", @ANYRES16=r5, @ANYBLOB="1b0026bd7000fbdbdf250300000004000800100003800c00038008001c00", @ANYRES32, @ANYBLOB="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"/4128], 0x1048}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r6, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r6, 0x5101, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/cards\x00', 0x2, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x7fffffff, 0xffffffffffffffff, 0x10c) (async) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) 5.030141273s ago: executing program 2 (id=1105): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/route/flush\x00', 0x80401, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) settimeofday$auto(&(0x7f0000000080)={0x7fffffff, 0x5}, 0x0) (rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8001) write$auto(0x3, 0x0, 0xfdef) r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x110) fcntl$auto(r0, 0xb, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000140), r0) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000025bd7000ffdbdf25020000050000000000000005da7f37311300"], 0x1c}, 0x1, 0x0, 0x0, 0x4004014}, 0x44) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32) fstat$auto(0xffffffffffffffff, 0x0) (async, rerun: 64) madvise$auto(0x4, 0xffffffffffff0005, 0x19) (async, rerun: 64) pselect6$auto(0x1, &(0x7f0000000280)={[0x7, 0x1, 0x100000001, 0x7fff, 0x7, 0x101, 0x8000000000000000, 0xffffffffffffffff, 0x6c9, 0x1, 0x8, 0x9, 0xa6c, 0x9, 0x101, 0x1]}, &(0x7f0000000300)={[0x81, 0x6, 0x6, 0xe75f, 0x8, 0x0, 0x0, 0xee, 0x0, 0x0, 0x100000000, 0x100000001, 0x5, 0x39, 0x0, 0x3]}, &(0x7f0000000380)={[0x3, 0xffffffffffff8001, 0x1b47, 0x2, 0xe12, 0xe50, 0x7fffffff, 0x39, 0x0, 0x8ec2, 0x5, 0x0, 0x80000000, 0x9, 0x8, 0x5]}, &(0x7f0000000180)={0x426d3dfb, 0x2}, &(0x7f0000000400)="c15e5396b240bb00e8ff339cb85c4ed1012da01852fefa880336225c2e41bfb475388610eb7f0e1887cbf866c03a0167a92fa2096508c5dfe9154c736e9cb4cc5cbacf7c1016495705c9d07fdbf1684be3918c76ede794d0b523ba31d3984bf34bed9c99109a1c113d314b58594ef662b231107b349dfd84c341df92aa6035699597cb888fb0e26e27") (async) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x70) (async) msync$auto(0x100000000, 0x0, 0x3) 4.29660155s ago: executing program 1 (id=1106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) (async) sendmsg$auto_OVS_VPORT_CMD_NEW(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002dbd7000fbdbdf25020000000800020001000080"], 0x1c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) mmap$auto(0x0, 0x10000, 0xdd, 0x12, 0xffffffffffffffff, 0x28000) (async) mmap$auto(0x0, 0x10000, 0xdd, 0x12, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) socket(0xa, 0x1, 0x84) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x4, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/pts/ptmx\x00', 0x80, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) (async) r4 = socket(0xa, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) (async) getsockopt$auto(r4, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) madvise$auto_MADV_GUARD_INSTALL(0x0, 0xfffffffffffffff5, 0x66) 4.254688976s ago: executing program 3 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x7ffffffd, 0x8000003, 0x40, 0x0) (async) ioctl$auto(0x3, 0x8905, 0x38) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/002/001\x00', 0x40101, 0x0) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x9, 0x200, 0x4, 0xfff8, 0xfffffffe, 0x0}) (async) sendmsg$auto_KSMBD_EVENT_RPC_RESPONSE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x880) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="acb200008e5a8411b6e5d377c0e4c6feccedd9c02d490ea25ce6ae6c9af70b2e912e3244f0f4dfa9066eabd767896b346727d60ed2bbc645bad86618f25c5c6aa4b9d7412be87e7e268eb59c4151dc3942dbf555360a1b911b86ce90d38d055137a638a78a9773237131cbefad74b047c09f0ed87f5139764990cf891513585c42cee10000000000000000", @ANYRES16=r1, @ANYBLOB="010329bd7000fedbdf250c00000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x40000) 4.057726376s ago: executing program 1 (id=1108): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/netdevsim2/mtu\x00', 0x412200, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(0xffffffffffffffff, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={0x0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) msgctl$auto(0x7, 0x10001, &(0x7f0000000240)={{0x5, 0xee00, 0xee01, 0x361a, 0x6dd1, 0x4, 0x3}, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x8, 0x4, 0x6eda, 0x2, 0x7, 0x10, 0x8, 0x48e, 0x8, @raw=0x4}) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x2720, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2708, 0x1, 0x0, 0x1, [@nested={0x2344, 0x156, 0x0, 0x1, [@nested={0x1167, 0x6c, 0x0, 0x1, [@generic="60d4bdbb1860590f1cff0576ad608ec54347e7b8936a891d22e96be2084617a32ccf336f9106e0269e2fa2bcdf0f7400d2c8b3edc3db9a", @generic="d1183b2d15f506f94bcbd972a5fc4cd42b1749bc95d1902dc37bd9e5df8fa0975c5f8c999f435746dd568f4582ef61ac8085efed650ce72b3d41c06288a9341da2665183addf19d062125a7440c3fec902fa9ad8b3abf92fc951a7967fbf1a10df9cf7cefd86c975bfb4c12714a35ff1344dff3cf90ace94e055baf9464d867cb3bc620837e5b2630ef82178e8fb225e8ad9542d8b4c130db32625ff2e0c659df52207af486bb9576d96e7c2904485f0fc3a9857a5628d45fe8ec1c4b7287cabd908fb8d537c9a55294d19c78f1a5de9e079c92cd754ea0c3c81bf", @generic="19e79e4c2fbdfb42ce267bed6d45b4f156288955a362ea9f4529af3ddc52184c42965ddd3cc69567947d9b09ab9b191fbc60ad97958ff8079f57b6f12f505b4587", @typed={0x8, 0xe6, 0x0, 0x0, @uid=r3}, @typed={0x8, 0xbd, 0x0, 0x0, @u32=0x9}, @generic="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"]}, @nested={0x1039, 0xa0, 0x0, 0x1, [@generic="c2dd5d0daa", @nested={0x4, 0x28}, @generic="41c019b09a512ab283667223112549670a29e2149e3b338571c42ec9634dc8e57117b8e43536135169627518", @generic="9c699316116b4b97ef88d12e1566aaddffdcad01096afa2984203d797c70e3b071a10f8b0a28ce133e65a7c43107aa71336f004c8813342ad3dcdf1a16edf9024d3ad72fef6b2a2bee4fc27a626dca2194b2a16209b99f3130572d02ba32a794e74071b6a97901c5ff7470dbf40c64dd2f369c71728dfdb43c93e659beaaf478f9de8d12871eee8950edb2c73bdb3e4aaf3b05288e96823164062e5a320a3f8a81177e1387a75dabe0b7ca5e9cb55a677d5816d5b30c218d7a01e19a3eec317524ebfa74fa6b87cbb150bca6ccd4098de0ddda32fd6fd12d0fdc0209cfeae3361d07a250ee670bac25b9bc6943b6951e171a2cb19fc7ae37a36d37a4099e91688dd12af266f2d9a5f5d25bc339fc421a8433ab29db965e091d5d6c1f314f5c750ce00ab759d1a2c9b3a28fbafcfea1f688ce1193a314c3052bc5c7717a7744494983ff73691974d407932d1b1b8433856efb4404c841b81a65894ccec5bdb90f3dac5077fe448defd721d28e0d2098409d7b8b6537d76c823e925eb89dc21d34145386ff4bee604a04eb4dc6abddbb398b2bd5a526c6dbc8c7392cfd4356e5fbd87428628c953c96577bd61d438df098e4ffd410be003e4727ff5f6c2fc5b7d9b8433ad4e47657283a6d9dba729b7d8457386dc5b3175e0be00a86ff79fd06bd833e4e9c56fc5491088474d697ff05527a1e167e25cf09a2bace371036116a34a216a84adde57d8c4e1a0f01f5f6e6466e1a7dfcde97f6b8d8588a6185175950c4abdcea7296cb9e2e9849ecee5b2e88b7ccfaba51aafb554c1a14b2cc21470900b2b12532de484876eff391d4c73f2aba613ce3a99f2dc53d69094593c1c0cfef0211566f13d8a7a336b762356f9bb9ebebae5ae2f96d1210149a4ffff1d00ae2ac07958d05ebabe7e55690bf473451a315a00f127f193426e40564b3a5df0873635ac41151f2ca188ab48e6b0e7779ad79d6311b2cc76ced857d9150eb21d7d856b67e89c0c63ebb97da547993a3e61055b4ac62e12a93bc21c75b6466147763e44bf5e3a2a1aff993d1c1dbb747b6f98867dd32d92db89836dea6e0d68a8669f8329e25837ae959852cd4c59079e88db8eb5b56fe73f78e2fb54eed266c0b31698e78676562a70895ff57358ea43a2d9fdeda5943c3db7b30a118d6d1924b90591ce9215d57210f0984586962405f232d6351ede015ebb6ae93fd2f6530ccfbe454a2d582452397992c4342d5dc45039a2bedecce1df5050f56e9b192e4a79af5a2072b85c321b49fcf974da0e859d9f340aaaa500a1770ae56d10804907ed4a3880929865420c853ff21e8e62a4e04b8682306c96b57536559794c251db525fef1d575a91b9e8ec0138bb1e92cbf5364bbed56f64204d11a4f781696c7b73a9654009bc32c2f7f09e7733820a09fa2388a72bcbf6b68e925901418c1b2202a21ebf4726f6f85346e542234d16f6e863e08f09f64caa1e9b8f15b9a7c6a312cc78cd0d1ae26ae652bea27e96babc3449e2e418fc67143b18f9578543b4c27797c3b34d6add5cb5fef063818db240c6aa7d742b82bff11ef4619ba6ad496e276cb7740366a6c6406c5af88f416ab9fe779e13239cb3b1e7c22fbb25a9c25a0f1df849e84b76c4b8e4efb4444e01a9b7494aff4b227da103bc9529bb895a9e80b8b197289f398800664402a98472e4adf118631a8574b9289d19992e2a9b61a50160ed837df710e8e0bc78fe9e7de08a1d358d4cfe3bb2bb22910137c82f30e6c5afa49f342a129e928aa0fbf4be86bccdaa66680b4f75214856d9a1818291302fdfd9bc3ae8983f39db4fc238f3a60990152072039dc5d0ab200a40d55a847c53dbd92b165a38639c40c6aef3d637a87e073eeb1fc42e3cf2d874f8efee30ea88f9412e430766bd6835170309cf245b0e1596e0d04666d023e95e70fa2628e059c45fdc5331458961c1ade4ae3bc249a6127ce3eaa62fa94bb149daf6022dd0875f148989c7344b37b793041ffd75340cfbadde24793e77b2f67d215d72babf4907dd1520948e919c021bbfef8f5cd166edc06539fde4e2e99626f90c9142a2e33b35cb4ee7ae22cb614db68bfefb9b47c04faa654d5761ee4f47821cd8f78fe43db8459920470cb82c05eb464dbcd02ac05a59afd5912d83ff9b2134fc9bd0e55e4d0ecd4d4bfa613a6568143672dcb6b2003652f06dde84c1700214045605e8bd6c8b03bd86a1d1d3db18e3915fbac812b1489f46a74a0883c2301b7f49e11dbe00eb2de2cc1ecb6a0c06f2e9d8547320250d24f995f9067986932e3bd1c669bd5ccdd7d899adb5761c9b87e11e8cc0d8de4618fd5fe118878b55bb415e8eb2731f97c6558c8267ee3fe085a24667c37b7810f09e025d348f4ce6c8d2650cf7b04908bb713f3d782687fad3ae49652cbd336fc511b3830337a8c8f95db6b998eaf1371c003e514de2257863c68fca30f66ed28ef0cf60527696f778e60e099381b88b2139f63c51a2839593c69030dae388eab34a23f3a1d1e79f45d4de7581c1f8e98337e6077186a92fa4299a9ce94868c2738675e903fa689ff375db844d94357e2d63e94e8b0db00e70049e633b65fa5ab6c678a942e31ba3482488156a6ca1e562b1d539c4b97fb6eea22c178b74160c3a93040465a51b8d99842a08244cdc5ff5bd28cfc4564bbf86c43571db9a2f606b9da934ddcfc6e1f61c6d7268aa03f4a04150ec21df367f2be2f9cc95e16e3f5be4827f5adcd71fceb69ccf6104a9bb18574b7a824b9246b5ed3d73129e91295f22415316c6a77220fc8e93398c8986911aab2554b12c56f4cb975cdc05ceebdd4bb97a0287bd1b7a81970719458fe8a9b33bf727e58aa6e4ee1a0b05316fdd045fb1b932cec3e1085e75d948b7f8a97f41dbc005cd81c72e92b64563523722e7781acf9d988fb5b0f6cc8dc81f13b7ba11a9315a51b0f48eff0113449d3eaacb74d5c79dc29fcce7779472a0f3ab938afdc320d558ce51f104f4a2e5b4b641bb03df69395fdab4b38a730165c872e359868d754ecb0d2fb40c60d0ba34833f40539bbd9144586fc3ecca1e2f4815331de24f8b18a8d8aa8345c7258519e2a33b479b696fe41f41ee75c4077a96dc8c1228035de956e3ca09971b0fef8601ceb4be4051e418deb07287b397307f5c78f1e8d006d933622f634f895f7c17c2a283e0fbb3acd006d7a8434a49dfeb9d954169ce1168426842bdc0f95a8291568076ac10607664cc538959fb11bb4e4a2b5e338d29efbac9978f51b3a2967c17bdcb32d4def7ae867b14d54c4f205489432315c968b1b300f38c30b0fd8426f192a879720bb7e15939da8d0894a50d186fd4b1b1276a2168238377b87f6629de6eddaef164f2bcf80436cf7a8664deae4979910b40ffe28f8ede4e175c59de9ae669df7f917fb75b00959f80ae74efb2b09329a216bb4152d864524005741992dbf9969b826e244c20cf0b5b219236ff555510815012efaafde41a9d5f8b90a3171f262c68f2f4e47d5e23af4f5ccbe6078bdd8e14a82fc86584a7f98f315fdfc806ab2dadc69015684bc0b1e1f9800c72f3d4dd1d92d35f22ca921fd03b4e2af989d3d928fe3f6226f95a806a6f2c5c7ee7c216a2bc08bb8240b6cd1db05c77994daf96a3f0873cfa941de4fd2f2002a8d86658298014057b46ac321844ff30569edc9fcbf06ece8b852347da43141f9b55d460a9e142983e17f4880dd614ea1cbf967ae3f63e127072095101275ed35db0a96ef73284741696ed14ddd89c0185b19460a8e98f983085aadbef7b7d8645081310c9f320abe9ffa6b2d53bb39a7e3578f14fe95b1e3a4008d4e0f92fad1dd9ccb760eb3c764d25b3be40e65878ba592479babfeda45e88672bf3280e840c9dac9b7b340014a889bf045973effb265b179b1f68f09f8c425ec628c74692fdaa56263646af3a98ae02f636fbdc2337ba8f3e4d01b2154da89ea99a7707ca4d118d21c28fd2096bce146a6ff070eb012d38140abb9ab92e19f45dfd9d1cc569821da66fd762b6903a1d6d5104f1d28699c429f50996fbadce80e61203d29471b05cfdf80e58a18c4c7e8dca7b999486477644d70ebd9621981306435c203038503cc05a9ebfc591c235abf78d3f1c9e80858866a5b90f88fbe33c353251ef34ab7b0d125bfa732471469850066d003ece8a1ec8bb4c5a7667084b57d254136f3fe6906b61417ea1b1f8783b1ad79e8acccb31ba1dd340bd1c904a232f8491f24b6475799d3f7c729c9fb385d1c2f4fdec0d4e0b229f00ba380a6d894936909e500d2e5650bbd903ee92544a426a229c8445d8946a92c009a40934887dfb3178483bef412cacb0095835fe253b2a2ee9734df624b7644f579f6d53c72bd67866eebb4ccc3a83f03dd603838f5d6cd4dc04afbb7d0ffccaf250fbff56d10164c66b66e1ccc858c9c64fde6111503edc2e459985ec37608faae6cce8ecf6c8188c486e1900efba3fd6e85520b69fc3b97dd7e6e0b0e1cbba59afa722db278fe7e504e8bf188abb3446253e0b713472b87e114b46fd812a75f847c910db74160866132f24000b438a726aff06117ccc70c305aada969973b1e0ab1309af99fe254f243bc2643e81e9e79a217e12cf211a5396bc0d5ef9356ff21d787f3ef36817fd00fcd7413bce790050eaefa93cd3a4c607414d07a17ee6190cb3835d69ff87fc694bb6b3c0e0dff5cd524a2ae0e6a58a9cc1f69f3ed0fb386084392633bf36bc960eb93a24dc0cd916a3c6d7a7270cc37e89caa5ccca10428c9c3c5ad5f06a8f223ae6022c3a8569055732eb32f4492f5599b3e37eeda66254e968e8291a7bedab776c05ce30dc4dbf413cd95dd1c945b46c68d49b98e849db3652bdd3653d4b9b8e56b823986be4770d0827dcfa1681b93eddb8af7658f2c71b400f53c8f478db1f33555632b6c276d5939c7518ac4fdc680632bda175128571326231acf4c10fc60579566f157416571a86dea69cb5d4bc92782d3e1ae5cac666a074ae65c5ce93ce69496c59e138b5c885ac0396d6772fc5828d9644d0089c42c1fd4042d4bca7bcbe492010a81184feae25087a54c79af5c497019dec96078569bf72e8e0ff123b83cebb4397c8240a1af928ad12c9d419ebc9358634d3742d100e47c55cd0acd02b6195cdfee4e0d67ec5088cfec50acf4094fc44397249dfa0d6646c916b34ead0802ef70ea8531e94124803ef2ba1ac236a1d987bbb131868afc648b7f10128a3688bd6be5d5ec5b02aa84141fb470b56a4ee9abcd06663d92941c071e89afba611793ca8d1382c903e2fe74a1250fb6ac5d5ddad9f5fb28a549d94f4bde568e5fcfd885d77b637d235fb2accb7e086e73500c8c51b39323206b69b919e83d51d2351744013c6479b233d2c870115915f93cf64a1aa59914caba469b9f5ab2fd0d61808bfdf1eadbf8e7e13588f873e46220b10cbbb1b24889c5a57ae808a0f245680e9381e042a449ad9d68f9cfc6124c93ebd610047630d730115be1f911545ba3245d72fc31d59e3b30ddcae2da4819a57bedab2684e406e4cf4e63a7bce903174e2019bcc64b0977bef095351c429b18b676782e1794253590499fde4dbc0ff66e6af1f71fabf9fac99b731bbb6f57d78de635a89b9aba09527737cd14927913a579014135196dd7261161b9c7e7a93b7db91923a2055baba1d92b17e56b9aba2139cfedc29106c2de3496116c9f48ed5475393ca740b476336b65b0ea8aa8fa0f53fd213610f3c1d3844d07c4c84938c444b5b63d5a"]}, @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}, @generic="b3a9e210180ef6c833f231e94f094a5477f2722c592033f29002c5b12f22c527166b40e7", @nested={0x16e, 0x121, 0x0, 0x1, [@typed={0x7d, 0x72, 0x0, 0x0, @binary="cedd513a2dbff125e7362951aaa3697ca745adbfda1aaffc06fa1066348d8a1bc81204055a1cf61781911262433706cee1b9ee592d505133f8b9cfc626b007bce6e07d0950685abca133c81f8f755097a6411d7188b4b77b35430f87ea43d83fc8e4c21ee13d573c9e9e3b437fb3a03dc4b067d0ea99ac683f"}, @generic="949445d91c0c7341ddeb00734d8e6a4e5d45a99ca2280559394b2698aaea388a5220d56655d892a6dd59635fc9a40fc8f20dfdc126dfdd025257387f403db5b51c86891af30bd5ff8312b29c84aa3ea4ca22b7ae1dadafaa8a25468e3b6ea875ff713a58c35956e0c9a605507a8c9caca9eb03030257dd6b18a7a461fd7dc1f8790bab4baf989f5b4da4fb81578b36ac3ed480db5f9cae4bee17d21121388cd8f2751b2a10df8b276baeb8439a2bda07722468054a6d69af77f8c3355c0fe0a0009da8cc3aed192661376ee9a7f7380ce8b5f835d8ad75c6ccb8d309675bc0521a798089371603a162a1"]}]}, @typed={0x14, 0x146, 0x0, 0x0, @ipv6=@remote}, @nested={0x3a5, 0x23, 0x0, 0x1, [@generic="31fe4c22e59a0d2754a4be60c416bd973ada0699c36ee9", @generic="8454c6765db9933172f6735b28b05c4352272b0f48398137aadcd6cae58cb70d723985cffa", @generic="385696be88e3d73a847e15f4271080d798cd74c65c872839f9c864b6834cde0ea74fad8c65eb513bc9d9423ecaad05f559590e9e5137a2136b", @typed={0x4, 0xe6}, @nested={0x22e, 0xe5, 0x0, 0x1, [@generic="a7c4eac764eecdbc1a5cf7c223181a670a2aec7dfa6354ef4b16001a7b03d6abf2dd3ff34b4d695bea6d0c07a8261818f5fe8724b49aa2e86605eeabc1ebbab98cf747dc8a954b0317e8f66e4579f64a68e7860247514818884b0798398f4fb8cf1584b099559bf2709740cb9c2db233cee6d35f2ecfaaabaa996ceb7fd667723a1997bd01b17be92f2cca2518c3db2e910d6dd5c5ce109e0e72", @generic="b1ec6ea3a59c43edfb33b1cc38e748a9d3dad4690977e5ebfb781bcc42371a30ccd521f8c64f36bdd60dccda8c1d110193b4356bd385d91f43d70da1f62fe710aa83700532298dc3aed9a9ac2d0d903c0c42ad2ed4", @typed={0x8, 0x22, 0x0, 0x0, @u32=0x4}, @generic="a18ed3d6d3b2b801c3acab5afbe5a245761c89729e87ba58be49deb7c6770512bad6ba4f93ca371174ec001aaf613c1531be2460f8dda9d15e9920ca6890bc6f49aabdafe6f65722aa0ae31704d5caf557112ec77f1e37ec5dd8be76655b1a981a03e71b6fbc487915ff16bf97a50056e46d8088c9f4744d59de19b4287af4d2b6d152ab68e50073d35417081d27b05b5258bb3f5e7391592574d75b9250f8a1feb0aa8c7465e08fe395e2146a5bbaf598335f7a1be2e9803afc5fa686e19f", @generic="32fd41833c1567e2484c6a0e9682eccb63146623aac5019d6580f90a2de6ba34c63427a2de8305ac2061757bb5efbe21e32e64b76c13d7283ae5e1933d9ba15e4defd06e7364ee3d3339a062c5ffb3c99e54ad6c802cc82033d494f5ad07fbf969678145d768e423352ff290", @typed={0x8, 0x97, 0x0, 0x0, @uid=r3}]}, @typed={0xd, 0xd1, 0x0, 0x0, @binary="cb9f46b8109bb308e2"}, @nested={0xdf, 0xb4, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd=r1}, @generic="55bed83d84c8a7d2c57d54cbf1a951bda56376e8a08a5aca760e8b46e84031b1cbcc8fb6b66ea1850a013b4986e60482705e39d3cb8e56bc65afff356233f4b9aeb33984149cf0994f91f05ad8e9555ebdb63e2af1fdb2915081f967f3dd9945a743ed424a6d8e1d253a541a13a4b52c7f833b970d2bd7836d3944c7f769adcab481ae3ab43ae40cac45fbf59b321fc923f872794542b5adb36dfb340b25238cb7eff92428d630d26a39437926871a4531954b5e4079ccbc38ad4c7bc611765134af9c140e8d31c0d0e59149606204c0b97873"]}, @typed={0x6, 0x110, 0x0, 0x0, @str='\\\x00'}]}, @typed={0x4, 0x52}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x2720}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) fadvise64$auto_POSIX_FADV_WILLNEED(r0, 0x5, 0x6, 0x3) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 3.756791964s ago: executing program 3 (id=1109): select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x10, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x40000000001]}, 0x0) 3.709564368s ago: executing program 1 (id=1110): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x1) unshare$auto(0x40000080) timer_getoverrun$auto(0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0xffffffff) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) timer_getoverrun$auto(0x200) 3.557384518s ago: executing program 3 (id=1111): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) r0 = getpid() pidfd_open$auto(r0, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) io_uring_setup$auto(0x1, 0x0) setresuid$auto(0x0, 0x8, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x41) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) getsockopt$auto(r1, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r2, 0x81, 0xc01, 0x0, 0x0) r3 = epoll_create$auto(0x3e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) signalfd4$auto(0xffffffffffffffff, 0x0, 0x8, 0x800) read$auto(0x3, 0x0, 0x80) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) r4 = timerfd_create$auto(0x0, 0x0) timerfd_gettime$auto(r4, &(0x7f0000000040)={{0x2, 0xd21}, {0x29e2, 0x3ff}}) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000008ac0)='/dev/audio\x00', 0xa00, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r5, 0x80044dff, &(0x7f0000008b00)) 3.320579673s ago: executing program 2 (id=1112): mmap$auto(0x0, 0x20008, 0x4000000000df, 0x2000eb1, 0xffffffffffffffff, 0x3) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x4, 0x0, 0x4) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80001, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x200000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x80000001, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r3) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) ioctl$auto_TIOCSWINSZ2(r5, 0x5414, &(0x7f0000000400)="36388d690040e3ad266fc1da89d4ba34678412137487940d200ad53908f1303e03c69b5d48dad8861869e24925eeddb95e6256d631666e8a4f92f37cbe5b71d9c633e0289609fc0e48daa66a15b239") 2.428876063s ago: executing program 3 (id=1114): socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0xffffffffffffffff, 0x400, 0x1) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x2440, 0x0) read$auto(r0, 0x0, 0x20) mkdir$auto(0x0, 0x8001) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$auto_X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x300000000000000, 0x0, 0x8012}, 0x8000) 1.832550703s ago: executing program 0 (id=1116): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) getrlimit$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, r2) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/bridge/bridge-nf-pass-vlan-input-dev\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x200) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000000)={r1, 0xee}) epoll_ctl$auto_EPOLL_CTL_DEL(r6, 0x2, r1, &(0x7f0000000040)={0xb6b0, 0xebf1c69}) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 1.661794296s ago: executing program 3 (id=1117): socket(0x2, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r0, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x400, 0x4, 0x7, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_enter$auto(0xffffffffffffffff, 0x8, 0x6, 0xe, 0x0, 0x8) r3 = getpgrp(0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f00000001c0)={0x0, 0x1001}, 0x3, &(0x7f0000000280)={&(0x7f0000000140)="6c4bc022f1a924305022a3018b65077b58da87f0f5fce9b47848154dc21337693a987e", 0xffffffff}, 0x6, 0x0) tgkill$auto_SIGCONT(r3, r4, 0x12) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.518513865s ago: executing program 0 (id=1118): r0 = signalfd4$auto(0xffffffffffffffff, &(0x7f0000000000)={0x4}, 0x1, 0x10000) ioctl$auto_XFS_IOC_ALLOCSP64(r0, 0x40305824, &(0x7f0000000040)={0x3b, 0xee08, 0xffff, 0x3, 0x0, 0x0}) move_pages$auto(r1, 0x6, &(0x7f0000000100)=&(0x7f0000000080)="735b57e021d75c79022f916926aecf9f190c0731394af389e94592444849084bfcaf276931d74cc428433292b545ed984b7a3d20664567ae2e215d845bd96afd06742bfe0ffdb8c4a24e1a268783ed19d20bb0558f57dae5a7fd3b9bf138213b", &(0x7f0000000140)=0x6, &(0x7f0000000180)=0x8d6, 0x200) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r0) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x9471}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x12}]}, 0x40}}, 0x800) fallocate$auto(r0, 0x400, 0x3, 0xc) setsockopt$auto(r0, 0x4, 0x80, &(0x7f0000000300)='\x00', 0x7) setsockopt$auto_SO_BUF_LOCK(r0, 0x6, 0x48, &(0x7f0000000340)='\x00', 0x7) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r0) sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1a0, r3, 0x3, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x401}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x36}, @NL80211_ATTR_REKEY_DATA={0xb5, 0x7a, 0x0, 0x1, [@typed={0x1a, 0x127, 0x0, 0x0, @binary="ca7da1c381d98175da4fe4e9a2eb204f80310d4112e4"}, @generic="f0fceb12f89e544737e048481512cd17165411de6a210ae7236aad94fb0e7904a964b3f3287604c7518439d804689c", @generic="16a6a94d8170e6eb55e8d74d8bb3757e7bc4bc3f8f20c1260348c3f5c666f2e5dca3f184c764e9fb8c1c53ed4d6cffb8cd66e37b5fb913b4d555896f6c9b1ccf66f18bd7507da4a5220512e05965d76220f68882b6e1a03fc247f1571872", @typed={0x5, 0x32, 0x0, 0x0, @str='\x00'}]}, @NL80211_ATTR_FILS_ERP_REALM={0x9f, 0xfa, "4782171a3e6e2a7c3ca844f7e8aa7bc91fdf0e5ee7eb32dc767dd69e4737800f1df5fa949dcf190102e928ed42420dd3149de0f27c9c795fc4500d0f0b068a29d39c3c23833e32d51092da9ab2d353eae3e62a3008a2d35faabe549ff1957a7f410bfad786afb0e703491d09cef7c24e2dac221c884583b004063952d6243491f879eb41e3819f9402092ce154fd9b7108edfe816ee6eaeafb4fac"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x101}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000640), 0x284400, 0x0) read$auto_usbdev_file_operations_usb(r0, &(0x7f0000000680)=""/4096, 0x1000) ioctl$auto_USBDEVFS_RESET(r0, 0x5514, 0x0) ioctl$auto_VHOST_SET_VRING_CALL2(r0, 0x4008af21, &(0x7f0000001680)={0x1c0, r0}) sendmsg$auto_NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001a00)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001700)={0x29c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_EMA_RNR_ELEMS={0x43, 0x145, 0x0, 0x1, [@generic="194da805817005863beabe1b475b003848fd8a3c23f3cf81d3f2eb11dcf89d03daedf96e0c5b8769d66d6307e3e99130c92090981c5ba69a5f1e8aeb405172"]}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x3f, 0xba, "963f7903a3c189b4c8158fb597c6f98056d4e54026dcec82037184f71e7a3d358ac77ff74935ced39e3acd6a6b70b21330ee70060b03688c8c2495"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9}, @NL80211_ATTR_EMA_RNR_ELEMS={0x1fb, 0x145, 0x0, 0x1, [@nested={0x24, 0x7, 0x0, 0x1, [@nested={0x4, 0xa9}, @typed={0x8, 0x147, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x4c, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x11a}]}, @nested={0x71, 0x47, 0x0, 0x1, [@generic="eba9eeb5041ad0a86099584e692e", @generic="d33455b944abfea5b387054e3f02e3c9bdcbd822efa4b93e16de4c99b97d3122a0e04240e96fd1be3a0d0ef0fe6e28ba20ef86ae55b6184e1aba6e540949d985ba87d8684a30ae8d16ef446a781f8c", @typed={0x8, 0xc6, 0x0, 0x0, @pid=r1}, @nested={0x4, 0xc6}, @nested={0x4, 0x1c}]}, @generic="bbcf22caa8e08c283e2c62e5eab1bd0d07751fb6f306b2a995f38d0d5ee56ee37f8c323cfcf1cafd9e2b337742993a7ffe57beb44362a14a79af98ff2c506fb2b50400057c7df8cb4afe439c3b22d530f0418c4bd4e922d4064225e33207c6", @typed={0x6e, 0x109, 0x0, 0x0, @binary="aa5f5f15d40ce430a1929a6532270f5c8fd34757eea11ccba52d884cfbc3d9faaf6c4ecb6ab41059f84ed8a53f55df832ff1cdfb451e4a577b74f25d1561ccc2418e5de06aabf276d7a37b746a75580667d3706be334fc617701914dfa4709347e7f0639abcb797ed674"}, @generic="4300b00e42f6cf1d3df035cfe8185da758023e22c456b8a2c5a6d4974ae2d9fa211f1f7be38c653f4d490e84d8e51d60781151ba15baaac8923c86d28cc91e58074cf37d060d64a76793a9a2335725fca5635f22997bae5d822ff3c5b1bae08d53c2f971c3f00e653f7e9aa1c66612ce71ce123c61db3632ad4e35d4", @typed={0x14, 0xa5, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x488d0}, 0x40) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000001a40), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001a80)={'pim6reg0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001ac0), r5) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001b40), r4) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x64, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_TPMETER_COOKIE={0x8}, @BATADV_ATTR_TQ={0x5, 0x19, 0x6}, @BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$auto_XFS_IOC_ALLOCSP64(r5, 0x40305824, &(0x7f0000001c80)={0x100, 0xe, 0x554, 0x8000000000000000, 0xd8, r1}) setpgid$auto(r1, r7) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x1, &(0x7f0000001cc0)="b42d2a3675d6218f5494ee1cdbeea14d4485f4a213c210dc19d4374f6ce177299775c764856f0dcabf9d6c1a4b3bc48e891ad3acb2012e1928cea1c338f03c66b76064129fe52b8763ba64aa9e1c16bfaa9ba1229b0f000383f1ccff4dfa495eda087b656825c3272711a353520ca8b7f38e7c12f129efab76722537801275c199b27e482d53221607733582ae4a8dc090cb0a11c395f77160bf98da3b3b9848af9b4fd443eedcd0e36b9c8e57ca1148977c5c786db522420f67206ec0b7af9736536d3e837c477776ed2b0b8a2842dc4a82df7fd162acef185a727003c1cc695074ed8c06b19d56804c3ec3") r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001dc0), r8) setsockopt$auto_SO_RCVMARK(r0, 0x7fff, 0x4b, &(0x7f0000001e00)='batadv\x00', 0x9) r9 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000001e40), 0xc01, 0x0) read$auto_rtc_dev_fops_dev(r9, &(0x7f0000001e80)=""/13, 0xd) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r5, 0x40084149, &(0x7f0000001ec0)=0x91a) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000001f00)={0x0, 0x0, [{0x2, 0x0, 0xb}, {0x81, 0x400, 0x10001}, {0x8, 0xd102, 0xd}, {0x0, 0xa8, 0x5}, {0x3, 0x23c, 0xd1}, {0xa3, 0xa73, 0x8}]}) 1.294728604s ago: executing program 0 (id=1119): select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x10, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x40000000001]}, 0x0) 1.064333576s ago: executing program 0 (id=1120): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cgroup/features\x00', 0x141000, 0x0) socketpair$auto(0x3ff, 0x5, 0x2, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, 0x0, 0x20000010) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = eventfd$auto(0x4) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r1) sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000000000d6d32cae9990ba4a1f6656dc7acf81732f50159ade93bc5f2819cc749d45acd1a802f77c4fb130ae324552fd44de23c5060063542a8c0bd861fc48a312d6f987bad7cbb8a66b90c52be092bbb4f2fbca7ff589338e5dd0385ccc8741e2ed08a9483df538aba35fafce3aae1270bedc3a62dd1d552031eafaf3b4e6f23db7044bda5d23c3fd4ec38893e91240fd2bb853", @ANYBLOB="84acc40b4fe066178a4f53b2e948c2ca624af3769a90efd6f5339200198d6a7eb8aa19081370727a064381ac72f25f", @ANYBLOB="040029bd7000ffdbdf2504000000080001009be4fd4b340003002f7379732f6b65726e656c2f74726163696e672f7065725f6370752f637075302f74726163655f706970655f72617700"], 0x50}, 0x1, 0x0, 0x0, 0x48004}, 0x74b5852c1b781b86) ioctl$auto(r3, 0x4008af21, r2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) readv$auto(0x3, 0x0, 0x20004) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) socket(0x5, 0x4, 0x1) r4 = open(0x0, 0x800, 0x140) getdents$auto(r4, 0x0, 0x18) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, r0, 0x8000) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x400, 0xe982, 0xb, 0x15, r5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10040, 0x0, 0x0) getsockopt$auto_SO_MAX_PACING_RATE(r4, 0xb54b, 0x2f, &(0x7f0000000280)='\x00', &(0x7f0000000200)=0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200a41, 0x0) 531.949076ms ago: executing program 0 (id=1121): close_range$auto(0x0, 0xffffeffe, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000085) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x42000c, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x60423, 0x0) unshare$auto(0x40000080) ioctl$auto_SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x3, 0xdb, 0xeb1, 0x401, 0x8004) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xf) ioctl$auto_TCFLSH2(r1, 0x540b, &(0x7f0000000180)="f9dfae19c6d30c47e99390d1caaea9fe4795f1bcea2211a979ef8063b1a242750e0abedb843a2feb8cd3d83a4ce9ba0fef069adb77b9e04bfd8dc64664f19ed56d04a237f352abe8eb283109a27fcb21a7cf98b7e7e427cd0ee2d0d55fb4026a13d3de7e0aee96998dc0db12bd05d06ef6f1a87d7c8350d2f5c9974819730a9348cc06607eb7f5d546aee3306b9ac9db9764bbab7a7e2b48c20850c6e2527eecf3fafe4468e98c1233b6074c8d6ccb7479e8125b4c3f20319c9f3232f603a95bba1b31924d42d0") r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'veth0_to_hsr\x00'}) mmap$auto(0x0, 0x202000c, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8000) symlink$auto(&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00') r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/sound/ctl-led/speaker/brightness\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_on\x00', 0x8001, 0x0) writev$auto(r4, &(0x7f00000017c0)={0x0, 0x3}, 0x3) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getpid() pipe2$auto(0x0, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x103040, 0x0) read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000010c0)=""/22, 0x16) 448.114592ms ago: executing program 1 (id=1122): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x7) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008011, 0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) r2 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r2, &(0x7f00000000c0)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x24, 0x10}, 0x10001}, 0x5, 0x20000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x108) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r3, 0x40104d02, r3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000100)={0x1ff, 0xfff, 0x1000}) ioctl$auto(r4, 0x5609, 0x0) 87.386606ms ago: executing program 2 (id=1123): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) (async) io_uring_setup$auto(0x2, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyr5\x00', 0x2a8a00, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xc01, 0x1, 0x6d, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 44.934665ms ago: executing program 0 (id=1124): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0xe3, 0xeb1, 0xfffffffffffffffa, 0x7fff) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2603, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x242780, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/set_event\x00', 0x480002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r2, r0, 0x8) write$auto(r1, 0x0, 0x100000a3d9) socket(0x2a, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0xffffffffffffffff, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/7/wakeup\x00', 0xa0440, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_to_hsr/mtu\x00', 0x123040, 0x0) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x101000, 0x2}, 0x18) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x200007, 0x19) userfaultfd$auto(0x1) r6 = ioctl$auto_SIOCGIFHWADDR2(r4, 0x8927, &(0x7f00000002c0)="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") fsconfig$auto_SHMEM_HUGE_FORCE(r6, 0x20, &(0x7f0000000080)='.((.\x00', &(0x7f0000000100)="deab94b826", 0xfffffffffffffffe) 0s ago: executing program 3 (id=1125): sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) mmap$auto(0x800000, 0xfffffffffffffffd, 0x8, 0x40eb2, 0xffffffffffffffff, 0x1) r0 = prctl$auto(0x1000000003b, 0x7, 0x4, 0x5, 0x7) write$auto(0xca, &(0x7f0000000080)='\x04 \xa1M\x11=.!\xd3\'\x8a\x00\x00\x00\x00\x00\xbd\x90q\xd0\xff\xea\xe9\x04B\x1c\x9a\x02y(\x83\xdf-\r\x00\x00\x00\xb2\xe4x\xdb\xfb\x18#&\x83\x17\x18\x05\x12|\x83$\xd0\x9a?\xf2W\xdd\xd3Z*\xa5\x81V\x98+q\xef(]\x81\x1c\x98B]\x9c\xd7\x05\x11\xcc\x1d\xc5\t\xe1A\fA\x8b\xd8\x8b\xb5\xa0\x9c\xab\xb6:\x18\xeaz\xc2!x0\f\xaa\xbd\xbeGh\x0f\v2\x83\x12>\xe7\x9e\xdb\xb5yO\xa3*\xb8\x9fH\xc0K0\x87\xc3N~2\xb1\xc4\xc7y9u\xa6\x89\xa9@\xf1\x92M(\x9e\xf9\x8e\xbf\x86\xfav7t\x14\xde\xd9Wd1G\x97\x13\x84\xff\x99\xdf\xd2\xa2\xf5l\xd6\xcf\x04\f^@r\xe9!\xb1X\xf19$\xf0h\v\r\xd0\xd9\xefm[l\xa4\xc7\x0e+H\xed\xf8\x82Wh%\x1f\x99\xaa\xf2\xb3\xb3Nr\xb0\x9a\xd2\xb67\xca\xdar\xa6\xe07\x061\xb7\xa6\xa9\x1b?>\x03\xad^\xd7\xbb-\'}\xc7\x82\xaa\n\xac\xa3\x15\x82\xc0\x02\x18\x1f\xb1cX\xc9\xcaGf((p<\x17|\x03\x00\x00\x00Qop^Y\xf4\xeccl\xa0$\xe0\'\xf8\x83\x8c\x7fW!p^=\x12\xbf$\xae7\xa2,\xce\xd1\xb0\xbd\x01\xf0z\x97\x0f\x94\xb5\x10&@\xaeF\xb8\x92\xd5\x15E\xf8\\ =SMH6\xd6\xd2\xa2~\x0e\x87\f\x0e\xe2\xd7\xfc\xed9\xaa\x81Qdw\xa0\xe7;D\xfa\xd3+\x93<\xce\xf16%\xc1s\b\xb0\xfe\xcd\xaf\x1a\xed\xf9\xd3HD\x82\xb5d\x9e\x91\xa1\x04\xe0\x86\xd94\x06O2\xc4O\xffm\xc3O\xe89\xbe\x03B\x0f6\xbe\xaf\xaa=[7\xd9\xca\xd2\xa0&\xc4(=%\xda\rM(&\xe4\x12S\nm\xd8\xb4\x8a\x1f\x00', 0x7e) mmap$auto(0x0, 0x400004, 0xdf, 0x9b75, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x22181, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000001, 0x400, 0x718c1257}]}) getdents64$auto(0x2, 0xfffffffffffffffe, 0x1) close_range$auto(0x2, r1, 0x8) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0xa2500, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd7/queue/dax\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001100)=""/4105, 0x1009) read$auto_stat_fops_per_vm_kvm_main(r6, 0x0, 0x0) r8 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r8, &(0x7f0000000180)=""/61, 0xfffffeeb) kernel console output (not intermixed with test programs): ld_fail_alloc_page+0xeb/0x140 [ 152.141584][ T7206] prepare_alloc_pages+0x1f0/0x5f0 [ 152.141623][ T7206] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 152.141666][ T7206] ? find_held_lock+0x2b/0x80 [ 152.141692][ T7206] ? is_bpf_text_address+0x8a/0x1a0 [ 152.141734][ T7206] ? is_bpf_text_address+0x8a/0x1a0 [ 152.141767][ T7206] ? bpf_ksym_find+0x124/0x1c0 [ 152.141796][ T7206] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 152.141827][ T7206] ? is_bpf_text_address+0x94/0x1a0 [ 152.141868][ T7206] ? kernel_text_address+0x8d/0x100 [ 152.141910][ T7206] ? __kernel_text_address+0xd/0x30 [ 152.141951][ T7206] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 152.141990][ T7206] ? arch_stack_walk+0xa6/0xf0 [ 152.142034][ T7206] ? stack_trace_save+0x8e/0xc0 [ 152.142060][ T7206] ? __pfx_stack_trace_save+0x10/0x10 [ 152.142089][ T7206] ? stack_depot_save_flags+0x27/0x9d0 [ 152.142122][ T7206] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.142170][ T7206] ? policy_nodemask+0xed/0x4f0 [ 152.142203][ T7206] alloc_pages_mpol+0x1fb/0x550 [ 152.142234][ T7206] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 152.142270][ T7206] ? __update_page_owner_handle+0x3c7/0x550 [ 152.142327][ T7206] alloc_pages_noprof+0x131/0x390 [ 152.142359][ T7206] __pmd_alloc+0x3b/0x9c0 [ 152.142397][ T7206] __handle_mm_fault+0xa99/0x2b60 [ 152.142441][ T7206] ? mt_find+0x45e/0x8e0 [ 152.142480][ T7206] ? __pfx___handle_mm_fault+0x10/0x10 [ 152.142514][ T7206] ? __pfx_mt_find+0x10/0x10 [ 152.142573][ T7206] handle_mm_fault+0x36d/0xa20 [ 152.142610][ T7206] __get_user_pages+0xf9c/0x34d0 [ 152.142649][ T7206] ? find_held_lock+0x2b/0x80 [ 152.142672][ T7206] ? mtree_load+0x311/0xa40 [ 152.142700][ T7206] ? __pfx___get_user_pages+0x10/0x10 [ 152.142739][ T7206] get_user_pages_remote+0x3d2/0xb10 [ 152.142768][ T7206] ? mas_new_root+0x690/0x6e0 [ 152.142800][ T7206] ? __pfx_get_user_pages_remote+0x10/0x10 [ 152.142842][ T7206] __access_remote_vm+0x3ba/0xa70 [ 152.142890][ T7206] ? __pfx___access_remote_vm+0x10/0x10 [ 152.142933][ T7206] ? alloc_pages_noprof+0x233/0x390 [ 152.142966][ T7206] mem_rw+0x287/0x640 [ 152.142996][ T7206] ? __pfx_mem_read+0x10/0x10 [ 152.143025][ T7206] vfs_read+0x1e4/0xb30 [ 152.143070][ T7206] ? __pfx_vfs_read+0x10/0x10 [ 152.143110][ T7206] ? __fget_files+0x215/0x3d0 [ 152.143158][ T7206] ? __fget_files+0x21f/0x3d0 [ 152.143205][ T7206] ksys_read+0x12a/0x250 [ 152.143315][ T7206] ? __pfx_ksys_read+0x10/0x10 [ 152.143370][ T7206] do_syscall_64+0x106/0xf80 [ 152.143400][ T7206] ? clear_bhb_loop+0x40/0x90 [ 152.143433][ T7206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.143460][ T7206] RIP: 0033:0x7f885959c799 [ 152.143491][ T7206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.143516][ T7206] RSP: 002b:00007f885a3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.143541][ T7206] RAX: ffffffffffffffda RBX: 00007f8859815fa0 RCX: 00007f885959c799 [ 152.143559][ T7206] RDX: 0000000000000059 RSI: 0000200000000340 RDI: 0000000000000003 [ 152.143575][ T7206] RBP: 00007f885a3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.143591][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.143604][ T7206] R13: 00007f8859816038 R14: 00007f8859815fa0 R15: 00007ffdde356178 [ 152.143636][ T7206] [ 155.497785][ T7256] bridge0: port 3(gretap0) entered blocking state [ 155.504831][ T7256] bridge0: port 3(gretap0) entered disabled state [ 155.512081][ T7256] gretap0: entered allmulticast mode [ 155.521027][ T7256] gretap0: entered promiscuous mode [ 155.529041][ T7256] bridge0: port 3(gretap0) entered blocking state [ 155.535669][ T7256] bridge0: port 3(gretap0) entered forwarding state [ 155.548618][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.324'. [ 155.712200][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 155.823205][ T7253] zswap: compressor not available [ 156.063214][ T7271] misc userio: Invalid payload size [ 156.818947][ T7285] HfR: entered promiscuous mode [ 156.867265][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.329'. [ 156.897615][ T7285] HfR: left promiscuous mode [ 157.553693][ T7294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.338'. [ 157.588779][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.627070][ T7294] bridge_slave_1 (unregistering): left allmulticast mode [ 157.645681][ T7294] bridge_slave_1 (unregistering): left promiscuous mode [ 157.670644][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.466504][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.333'. [ 158.758038][ T7321] HfR: entered promiscuous mode [ 158.793475][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 158.863913][ T7321] HfR: left promiscuous mode [ 159.518277][ T7331] HfR: entered promiscuous mode [ 159.541379][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 159.568731][ T7331] HfR: left promiscuous mode [ 160.528032][ T7345] FAULT_INJECTION: forcing a failure. [ 160.528032][ T7345] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 160.602809][ T7345] CPU: 0 UID: 0 PID: 7345 Comm: syz.0.345 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.602858][ T7345] Tainted: [L]=SOFTLOCKUP [ 160.602867][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.602883][ T7345] Call Trace: [ 160.602893][ T7345] [ 160.602902][ T7345] dump_stack_lvl+0x100/0x190 [ 160.602952][ T7345] should_fail_ex.cold+0x5/0xa [ 160.602981][ T7345] ? prepare_alloc_pages+0x16d/0x5f0 [ 160.603017][ T7345] should_fail_alloc_page+0xeb/0x140 [ 160.603048][ T7345] prepare_alloc_pages+0x1f0/0x5f0 [ 160.603079][ T7345] ? bpf_ksym_find+0x124/0x1c0 [ 160.603116][ T7345] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 160.603158][ T7345] ? kernel_text_address+0x8d/0x100 [ 160.603198][ T7345] ? __kernel_text_address+0xd/0x30 [ 160.603236][ T7345] ? unwind_get_return_address+0x59/0xa0 [ 160.603266][ T7345] ? arch_stack_walk+0xa6/0xf0 [ 160.603305][ T7345] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 160.603346][ T7345] ? stack_trace_save+0x8e/0xc0 [ 160.603377][ T7345] ? stack_depot_save_flags+0x27/0x9d0 [ 160.603413][ T7345] ? is_bpf_text_address+0x8a/0x1a0 [ 160.603460][ T7345] ? kasan_save_stack+0x3f/0x50 [ 160.603499][ T7345] ? kasan_save_stack+0x30/0x50 [ 160.603537][ T7345] ? kasan_save_track+0x14/0x30 [ 160.603575][ T7345] ? __kasan_slab_alloc+0x89/0x90 [ 160.603615][ T7345] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 160.603654][ T7345] ? __pmd_alloc+0xbf/0x9c0 [ 160.603682][ T7345] ? __handle_mm_fault+0xa99/0x2b60 [ 160.603714][ T7345] ? handle_mm_fault+0x36d/0xa20 [ 160.603746][ T7345] ? __get_user_pages+0xf9c/0x34d0 [ 160.603774][ T7345] ? get_user_pages_remote+0x3d2/0xb10 [ 160.603802][ T7345] ? __access_remote_vm+0x3ba/0xa70 [ 160.603841][ T7345] ? mem_rw+0x287/0x640 [ 160.603866][ T7345] ? vfs_read+0x1e4/0xb30 [ 160.603902][ T7345] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 160.603949][ T7345] ? policy_nodemask+0xed/0x4f0 [ 160.603981][ T7345] alloc_pages_mpol+0x1fb/0x550 [ 160.604011][ T7345] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 160.604049][ T7345] alloc_pages_noprof+0x131/0x390 [ 160.604081][ T7345] pte_alloc_one+0x1e/0x3e0 [ 160.604113][ T7345] __pte_alloc+0x6d/0x3f0 [ 160.604139][ T7345] ? __pfx___pte_alloc+0x10/0x10 [ 160.604165][ T7345] ? do_raw_spin_lock+0x128/0x260 [ 160.604198][ T7345] ? find_held_lock+0x2b/0x80 [ 160.604222][ T7345] do_anonymous_page+0x13cc/0x1fb0 [ 160.604253][ T7345] ? do_raw_spin_unlock+0x145/0x1e0 [ 160.604288][ T7345] ? _raw_spin_unlock+0x28/0x50 [ 160.604314][ T7345] ? __pmd_alloc+0x6aa/0x9c0 [ 160.604346][ T7345] __handle_mm_fault+0x1d42/0x2b60 [ 160.604388][ T7345] ? mt_find+0x45e/0x8e0 [ 160.604432][ T7345] ? __pfx___handle_mm_fault+0x10/0x10 [ 160.604466][ T7345] ? __pfx_mt_find+0x10/0x10 [ 160.604531][ T7345] handle_mm_fault+0x36d/0xa20 [ 160.604575][ T7345] __get_user_pages+0xf9c/0x34d0 [ 160.604616][ T7345] ? find_held_lock+0x2b/0x80 [ 160.604641][ T7345] ? mtree_load+0x311/0xa40 [ 160.604672][ T7345] ? __pfx___get_user_pages+0x10/0x10 [ 160.604714][ T7345] get_user_pages_remote+0x3d2/0xb10 [ 160.604745][ T7345] ? mas_new_root+0x690/0x6e0 [ 160.604780][ T7345] ? __pfx_get_user_pages_remote+0x10/0x10 [ 160.604827][ T7345] __access_remote_vm+0x3ba/0xa70 [ 160.604879][ T7345] ? __pfx___access_remote_vm+0x10/0x10 [ 160.604925][ T7345] ? alloc_pages_noprof+0x233/0x390 [ 160.604958][ T7345] mem_rw+0x287/0x640 [ 160.604989][ T7345] ? __pfx_mem_read+0x10/0x10 [ 160.605017][ T7345] vfs_read+0x1e4/0xb30 [ 160.605065][ T7345] ? __pfx_vfs_read+0x10/0x10 [ 160.605104][ T7345] ? __fget_files+0x215/0x3d0 [ 160.605155][ T7345] ? __fget_files+0x21f/0x3d0 [ 160.605202][ T7345] ksys_read+0x12a/0x250 [ 160.605243][ T7345] ? __pfx_ksys_read+0x10/0x10 [ 160.605296][ T7345] do_syscall_64+0x106/0xf80 [ 160.605327][ T7345] ? clear_bhb_loop+0x40/0x90 [ 160.605363][ T7345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.605391][ T7345] RIP: 0033:0x7f78cb19c799 [ 160.605421][ T7345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.605447][ T7345] RSP: 002b:00007f78cc074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.605474][ T7345] RAX: ffffffffffffffda RBX: 00007f78cb415fa0 RCX: 00007f78cb19c799 [ 160.605492][ T7345] RDX: 0000000000000059 RSI: 0000200000000340 RDI: 0000000000000003 [ 160.605509][ T7345] RBP: 00007f78cc074090 R08: 0000000000000000 R09: 0000000000000000 [ 160.605526][ T7345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.605542][ T7345] R13: 00007f78cb416038 R14: 00007f78cb415fa0 R15: 00007ffec7391d48 [ 160.605581][ T7345] [ 161.162338][ T7358] misc userio: Invalid payload size [ 161.801990][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 163.094505][ T7374] misc userio: Invalid payload size [ 163.697732][ T7394] HfR: entered promiscuous mode [ 163.706630][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.356'. [ 163.737633][ T7392] raw_sendmsg: syz.3.355 forgot to set AF_INET. Fix it! [ 163.751140][ T7391] [U] ^\ [ 163.857594][ T7394] HfR: left promiscuous mode [ 164.035454][ T7381] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.041733][ T7381] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.059077][ T7381] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.086382][ T7381] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.919550][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 165.217519][ T7424] FAULT_INJECTION: forcing a failure. [ 165.217519][ T7424] name failslab, interval 1, probability 0, space 0, times 0 [ 165.231098][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.3.362 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.231126][ T7424] Tainted: [L]=SOFTLOCKUP [ 165.231131][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.231140][ T7424] Call Trace: [ 165.231146][ T7424] [ 165.231153][ T7424] dump_stack_lvl+0x100/0x190 [ 165.231183][ T7424] should_fail_ex.cold+0x5/0xa [ 165.231203][ T7424] should_failslab+0xc2/0x120 [ 165.231220][ T7424] __kmalloc_cache_noprof+0x7a/0x6f0 [ 165.231239][ T7424] ? apply_subsystem_event_filter+0x327/0x17d0 [ 165.231268][ T7424] apply_subsystem_event_filter+0x327/0x17d0 [ 165.231296][ T7424] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 165.231323][ T7424] ? _copy_from_user+0x59/0xd0 [ 165.231348][ T7424] ? __pfx_subsystem_filter_write+0x10/0x10 [ 165.231369][ T7424] subsystem_filter_write+0x95/0x120 [ 165.231393][ T7424] vfs_writev+0x5ea/0xe10 [ 165.231414][ T7424] ? rcu_is_watching+0x12/0xc0 [ 165.231451][ T7424] ? __pfx_vfs_writev+0x10/0x10 [ 165.231472][ T7424] ? fdget_pos+0x2aa/0x380 [ 165.231503][ T7424] ? __fget_files+0x21f/0x3d0 [ 165.231531][ T7424] ? do_writev+0x13e/0x340 [ 165.231551][ T7424] do_writev+0x13e/0x340 [ 165.231572][ T7424] ? __pfx_do_writev+0x10/0x10 [ 165.231598][ T7424] do_syscall_64+0x106/0xf80 [ 165.231616][ T7424] ? clear_bhb_loop+0x40/0x90 [ 165.231634][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.231649][ T7424] RIP: 0033:0x7f7ae2d9c799 [ 165.231663][ T7424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.231677][ T7424] RSP: 002b:00007f7ae0ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 165.231692][ T7424] RAX: ffffffffffffffda RBX: 00007f7ae3016090 RCX: 00007f7ae2d9c799 [ 165.231701][ T7424] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000007 [ 165.231709][ T7424] RBP: 00007f7ae2e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 165.231718][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.231726][ T7424] R13: 00007f7ae3016128 R14: 00007f7ae3016090 R15: 00007ffdae606ef8 [ 165.231747][ T7424] [ 165.752849][ T6879] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.022601][ T7429] FAULT_INJECTION: forcing a failure. [ 166.022601][ T7429] name failslab, interval 1, probability 0, space 0, times 0 [ 166.077921][ T6879] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.084791][ T6324] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.091224][ T7429] CPU: 0 UID: 0 PID: 7429 Comm: syz.3.364 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.091260][ T7429] Tainted: [L]=SOFTLOCKUP [ 166.091269][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.091283][ T7429] Call Trace: [ 166.091292][ T7429] [ 166.091302][ T7429] dump_stack_lvl+0x100/0x190 [ 166.091335][ T7429] should_fail_ex.cold+0x5/0xa [ 166.091355][ T7429] should_failslab+0xc2/0x120 [ 166.091371][ T7429] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 166.091392][ T7429] ? ptlock_alloc+0x1f/0x70 [ 166.091416][ T7429] ptlock_alloc+0x1f/0x70 [ 166.091434][ T7429] pte_alloc_one+0x84/0x3e0 [ 166.091452][ T7429] __pte_alloc+0x6d/0x3f0 [ 166.091467][ T7429] ? __pfx___pte_alloc+0x10/0x10 [ 166.091515][ T7429] ? do_raw_spin_lock+0x128/0x260 [ 166.091537][ T7429] ? find_held_lock+0x2b/0x80 [ 166.091552][ T7429] do_anonymous_page+0x13cc/0x1fb0 [ 166.091572][ T7429] ? do_raw_spin_unlock+0x145/0x1e0 [ 166.091594][ T7429] ? _raw_spin_unlock+0x28/0x50 [ 166.091609][ T7429] ? __pmd_alloc+0x6aa/0x9c0 [ 166.091627][ T7429] __handle_mm_fault+0x1d42/0x2b60 [ 166.091649][ T7429] ? mt_find+0x45e/0x8e0 [ 166.091669][ T7429] ? __pfx___handle_mm_fault+0x10/0x10 [ 166.091691][ T7429] ? __pfx_mt_find+0x10/0x10 [ 166.091729][ T7429] handle_mm_fault+0x36d/0xa20 [ 166.091753][ T7429] __get_user_pages+0xf9c/0x34d0 [ 166.091775][ T7429] ? find_held_lock+0x2b/0x80 [ 166.091788][ T7429] ? mtree_load+0x311/0xa40 [ 166.091804][ T7429] ? __pfx___get_user_pages+0x10/0x10 [ 166.091825][ T7429] get_user_pages_remote+0x3d2/0xb10 [ 166.091842][ T7429] ? mas_new_root+0x690/0x6e0 [ 166.091860][ T7429] ? __pfx_get_user_pages_remote+0x10/0x10 [ 166.091884][ T7429] __access_remote_vm+0x3ba/0xa70 [ 166.091912][ T7429] ? __pfx___access_remote_vm+0x10/0x10 [ 166.091936][ T7429] ? alloc_pages_noprof+0x233/0x390 [ 166.091954][ T7429] mem_rw+0x287/0x640 [ 166.091970][ T7429] ? __pfx_mem_read+0x10/0x10 [ 166.091988][ T7429] vfs_read+0x1e4/0xb30 [ 166.092014][ T7429] ? __pfx_vfs_read+0x10/0x10 [ 166.092035][ T7429] ? __fget_files+0x215/0x3d0 [ 166.092063][ T7429] ? __fget_files+0x21f/0x3d0 [ 166.092091][ T7429] ksys_read+0x12a/0x250 [ 166.092113][ T7429] ? __pfx_ksys_read+0x10/0x10 [ 166.092140][ T7429] do_syscall_64+0x106/0xf80 [ 166.092158][ T7429] ? clear_bhb_loop+0x40/0x90 [ 166.092176][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.092192][ T7429] RIP: 0033:0x7f7ae2d9c799 [ 166.092206][ T7429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.092220][ T7429] RSP: 002b:00007f7ae3b81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.092234][ T7429] RAX: ffffffffffffffda RBX: 00007f7ae3015fa0 RCX: 00007f7ae2d9c799 [ 166.092244][ T7429] RDX: 0000000000000059 RSI: 0000200000000340 RDI: 0000000000000003 [ 166.092253][ T7429] RBP: 00007f7ae3b81090 R08: 0000000000000000 R09: 0000000000000000 [ 166.092261][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.092270][ T7429] R13: 00007f7ae3016038 R14: 00007f7ae3015fa0 R15: 00007ffdae606ef8 [ 166.092289][ T7429] [ 166.428196][ T6324] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.512706][ T7431] misc userio: Invalid payload size [ 167.470002][ T6324] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 170.550403][ T5914] Process accounting resumed [ 171.439281][ T7518] FAULT_INJECTION: forcing a failure. [ 171.439281][ T7518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.460998][ T7518] CPU: 1 UID: 0 PID: 7518 Comm: syz.2.383 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.461024][ T7518] Tainted: [L]=SOFTLOCKUP [ 171.461029][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.461038][ T7518] Call Trace: [ 171.461044][ T7518] [ 171.461051][ T7518] dump_stack_lvl+0x100/0x190 [ 171.461081][ T7518] should_fail_ex.cold+0x5/0xa [ 171.461099][ T7518] _copy_to_user+0x32/0xd0 [ 171.461124][ T7518] mem_rw+0x2da/0x640 [ 171.461142][ T7518] ? __pfx_mem_read+0x10/0x10 [ 171.461157][ T7518] vfs_read+0x1e4/0xb30 [ 171.461183][ T7518] ? __pfx_vfs_read+0x10/0x10 [ 171.461204][ T7518] ? __fget_files+0x215/0x3d0 [ 171.461241][ T7518] ? __fget_files+0x21f/0x3d0 [ 171.461321][ T7518] ksys_read+0x12a/0x250 [ 171.461358][ T7518] ? __pfx_ksys_read+0x10/0x10 [ 171.461405][ T7518] do_syscall_64+0x106/0xf80 [ 171.461445][ T7518] ? clear_bhb_loop+0x40/0x90 [ 171.461477][ T7518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.461504][ T7518] RIP: 0033:0x7f885959c799 [ 171.461526][ T7518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.461551][ T7518] RSP: 002b:00007f885a3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.461576][ T7518] RAX: ffffffffffffffda RBX: 00007f8859815fa0 RCX: 00007f885959c799 [ 171.461604][ T7518] RDX: 0000000000000059 RSI: 0000200000000340 RDI: 0000000000000003 [ 171.461620][ T7518] RBP: 00007f885a3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.461651][ T7518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.461667][ T7518] R13: 00007f8859816038 R14: 00007f8859815fa0 R15: 00007ffdde356178 [ 171.461703][ T7518] [ 171.851090][ T7531] HfR: entered promiscuous mode [ 171.864272][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'. [ 171.877349][ T7531] HfR: left promiscuous mode [ 172.116360][ T7537] HfR: entered promiscuous mode [ 172.126832][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 172.137221][ T7537] HfR: left promiscuous mode [ 172.413203][ T7542] FAULT_INJECTION: forcing a failure. [ 172.413203][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 172.426350][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: syz.1.389 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.426396][ T7542] Tainted: [L]=SOFTLOCKUP [ 172.426405][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.426422][ T7542] Call Trace: [ 172.426431][ T7542] [ 172.426442][ T7542] dump_stack_lvl+0x100/0x190 [ 172.426490][ T7542] should_fail_ex.cold+0x5/0xa [ 172.426524][ T7542] should_failslab+0xc2/0x120 [ 172.426554][ T7542] __kmalloc_cache_noprof+0x7a/0x6f0 [ 172.426588][ T7542] ? sctp_auth_shkey_create+0x9e/0x210 [ 172.426627][ T7542] sctp_auth_shkey_create+0x9e/0x210 [ 172.426663][ T7542] sctp_endpoint_new+0x589/0xb20 [ 172.426700][ T7542] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 172.426731][ T7542] ? lockdep_init_map_type+0x5c/0x250 [ 172.426772][ T7542] ? lockdep_init_map_type+0x5c/0x250 [ 172.426807][ T7542] ? lockdep_init_map_type+0x5c/0x250 [ 172.426848][ T7542] sctp_init_sock+0xe2b/0x1300 [ 172.426877][ T7542] ? __pfx_sctp_init_sock+0x10/0x10 [ 172.426908][ T7542] inet_create+0x94c/0x1060 [ 172.426950][ T7542] ? inet_create+0x94/0x1060 [ 172.427005][ T7542] __sock_create+0x339/0x860 [ 172.427050][ T7542] __sys_socket+0x14d/0x260 [ 172.427072][ T7542] ? __pfx___sys_socket+0x10/0x10 [ 172.427099][ T7542] __x64_sys_socket+0x72/0xb0 [ 172.427123][ T7542] ? lockdep_hardirqs_on+0x78/0x100 [ 172.427140][ T7542] do_syscall_64+0x106/0xf80 [ 172.427156][ T7542] ? clear_bhb_loop+0x40/0x90 [ 172.427174][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.427189][ T7542] RIP: 0033:0x7faf8919c799 [ 172.427203][ T7542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.427217][ T7542] RSP: 002b:00007faf8a081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 172.427231][ T7542] RAX: ffffffffffffffda RBX: 00007faf89416090 RCX: 00007faf8919c799 [ 172.427242][ T7542] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 172.427250][ T7542] RBP: 00007faf89232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 172.427259][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.427268][ T7542] R13: 00007faf89416128 R14: 00007faf89416090 R15: 00007ffef01cf9b8 [ 172.427287][ T7542] [ 172.741445][ T7546] HfR: entered promiscuous mode [ 172.750950][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 172.760781][ T7546] HfR: left promiscuous mode [ 173.225706][ T7552] FAULT_INJECTION: forcing a failure. [ 173.225706][ T7552] name failslab, interval 1, probability 0, space 0, times 0 [ 173.238711][ T7552] CPU: 0 UID: 0 PID: 7552 Comm: syz.0.392 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.238740][ T7552] Tainted: [L]=SOFTLOCKUP [ 173.238746][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.238755][ T7552] Call Trace: [ 173.238764][ T7552] [ 173.238771][ T7552] dump_stack_lvl+0x100/0x190 [ 173.238804][ T7552] should_fail_ex.cold+0x5/0xa [ 173.238824][ T7552] should_failslab+0xc2/0x120 [ 173.238841][ T7552] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 173.238862][ T7552] ? __proc_create+0x2cb/0x8c0 [ 173.238889][ T7552] __proc_create+0x2cb/0x8c0 [ 173.238911][ T7552] ? __pfx___proc_create+0x10/0x10 [ 173.238943][ T7552] _proc_mkdir+0xb9/0x210 [ 173.238967][ T7552] ? __pfx__proc_mkdir+0x10/0x10 [ 173.238997][ T7552] ? net_generic+0xea/0x2a0 [ 173.239032][ T7552] ? __pfx_vlan_init_net+0x10/0x10 [ 173.239066][ T7552] vlan_proc_init+0x93/0x160 [ 173.239094][ T7552] ops_init+0x1e2/0x5f0 [ 173.239135][ T7552] setup_net+0x118/0x3a0 [ 173.239166][ T7552] ? __pfx_setup_net+0x10/0x10 [ 173.239183][ T7552] ? lockdep_init_map_type+0x5c/0x250 [ 173.239211][ T7552] ? mutex_init_lockep+0x110/0x150 [ 173.239237][ T7552] copy_net_ns+0x46f/0x7c0 [ 173.239260][ T7552] create_new_namespaces+0x3ea/0xac0 [ 173.239283][ T7552] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 173.239301][ T7552] ksys_unshare+0x473/0xad0 [ 173.239321][ T7552] ? __pfx_ksys_unshare+0x10/0x10 [ 173.239347][ T7552] __x64_sys_unshare+0x31/0x40 [ 173.239364][ T7552] do_syscall_64+0x106/0xf80 [ 173.239382][ T7552] ? clear_bhb_loop+0x40/0x90 [ 173.239401][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.239416][ T7552] RIP: 0033:0x7f78cb19c799 [ 173.239431][ T7552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.239446][ T7552] RSP: 002b:00007f78cc074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 173.239462][ T7552] RAX: ffffffffffffffda RBX: 00007f78cb415fa0 RCX: 00007f78cb19c799 [ 173.239472][ T7552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 173.239482][ T7552] RBP: 00007f78cb232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 173.239491][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.239501][ T7552] R13: 00007f78cb416038 R14: 00007f78cb415fa0 R15: 00007ffec7391d48 [ 173.239522][ T7552] [ 173.239531][ T7552] 8021q: can't create entry in proc filesystem! [ 174.360869][ T7579] misc userio: Invalid payload size [ 175.073081][ T7593] FAULT_INJECTION: forcing a failure. [ 175.073081][ T7593] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.140367][ T7593] CPU: 1 UID: 0 PID: 7593 Comm: syz.3.401 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.140408][ T7593] Tainted: [L]=SOFTLOCKUP [ 175.140417][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.140433][ T7593] Call Trace: [ 175.140442][ T7593] [ 175.140453][ T7593] dump_stack_lvl+0x100/0x190 [ 175.140500][ T7593] should_fail_ex.cold+0x5/0xa [ 175.140527][ T7593] ? prepare_alloc_pages+0x16d/0x5f0 [ 175.140562][ T7593] should_fail_alloc_page+0xeb/0x140 [ 175.140602][ T7593] prepare_alloc_pages+0x1f0/0x5f0 [ 175.140629][ T7593] ? look_up_lock_class+0x64/0x120 [ 175.140657][ T7593] ? register_lock_class+0x40/0x560 [ 175.140697][ T7593] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 175.140746][ T7593] ? __lock_acquire+0x4a5/0x2630 [ 175.140791][ T7593] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 175.140835][ T7593] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 175.140881][ T7593] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 175.140936][ T7593] ? set_ptes+0x14c/0x1d0 [ 175.140971][ T7593] ? find_held_lock+0x2b/0x80 [ 175.140995][ T7593] ? rcu_read_unlock+0x2d/0xb0 [ 175.141031][ T7593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.141078][ T7593] ? policy_nodemask+0xed/0x4f0 [ 175.141106][ T7593] alloc_pages_mpol+0x1fb/0x550 [ 175.141133][ T7593] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 175.141171][ T7593] folio_alloc_mpol_noprof+0x36/0x340 [ 175.141207][ T7593] vma_alloc_folio_noprof+0xed/0x1d0 [ 175.141240][ T7593] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 175.141284][ T7593] do_anonymous_page+0xb3a/0x1fb0 [ 175.141335][ T7593] __handle_mm_fault+0x1d42/0x2b60 [ 175.141377][ T7593] ? mt_find+0x45e/0x8e0 [ 175.141413][ T7593] ? __pfx___handle_mm_fault+0x10/0x10 [ 175.141446][ T7593] ? __pfx_mt_find+0x10/0x10 [ 175.141501][ T7593] ? find_vma+0xbf/0x140 [ 175.141525][ T7593] ? __pfx_find_vma+0x10/0x10 [ 175.141554][ T7593] handle_mm_fault+0x36d/0xa20 [ 175.141604][ T7593] do_user_addr_fault+0x74c/0x12f0 [ 175.141660][ T7593] exc_page_fault+0x6f/0xd0 [ 175.141692][ T7593] asm_exc_page_fault+0x26/0x30 [ 175.141719][ T7593] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 175.141760][ T7593] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 175.141785][ T7593] RSP: 0018:ffffc90002f77c80 EFLAGS: 00050202 [ 175.141807][ T7593] RAX: 0000000000000001 RBX: 0000000000000059 RCX: 0000000000000059 [ 175.141823][ T7593] RDX: 0000000000000001 RSI: ffff88807748b000 RDI: 0000200000000340 [ 175.141841][ T7593] RBP: 0000200000000340 R08: 0000000000000000 R09: ffffed100ee9160b [ 175.141858][ T7593] R10: ffff88807748b058 R11: 0000000000000000 R12: ffff88807748b000 [ 175.141875][ T7593] R13: 0000200000000399 R14: 00007ffffffff000 R15: 0000000000000000 [ 175.141911][ T7593] _copy_to_user+0xa4/0xd0 [ 175.141952][ T7593] mem_rw+0x2da/0x640 [ 175.141982][ T7593] ? __pfx_mem_read+0x10/0x10 [ 175.142010][ T7593] vfs_read+0x1e4/0xb30 [ 175.142056][ T7593] ? __pfx_vfs_read+0x10/0x10 [ 175.142103][ T7593] ? __fget_files+0x215/0x3d0 [ 175.142153][ T7593] ? __fget_files+0x21f/0x3d0 [ 175.142206][ T7593] ksys_read+0x12a/0x250 [ 175.142244][ T7593] ? __pfx_ksys_read+0x10/0x10 [ 175.142295][ T7593] do_syscall_64+0x106/0xf80 [ 175.142325][ T7593] ? clear_bhb_loop+0x40/0x90 [ 175.142359][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.142386][ T7593] RIP: 0033:0x7f7ae2d9c799 [ 175.142408][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.142433][ T7593] RSP: 002b:00007f7ae3b81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.142457][ T7593] RAX: ffffffffffffffda RBX: 00007f7ae3015fa0 RCX: 00007f7ae2d9c799 [ 175.142472][ T7593] RDX: 0000000000000059 RSI: 0000200000000340 RDI: 0000000000000003 [ 175.142489][ T7593] RBP: 00007f7ae3b81090 R08: 0000000000000000 R09: 0000000000000000 [ 175.142505][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.142521][ T7593] R13: 00007f7ae3016038 R14: 00007f7ae3015fa0 R15: 00007ffdae606ef8 [ 175.142558][ T7593] [ 176.387176][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 176.429346][ T7611] misc userio: Invalid payload size [ 176.942682][ T7628] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 177.005910][ T7628] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 177.902530][ T7644] FAULT_INJECTION: forcing a failure. [ 177.902530][ T7644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.972987][ T7644] CPU: 0 UID: 0 PID: 7644 Comm: syz.1.418 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.973014][ T7644] Tainted: [L]=SOFTLOCKUP [ 177.973019][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.973028][ T7644] Call Trace: [ 177.973034][ T7644] [ 177.973040][ T7644] dump_stack_lvl+0x100/0x190 [ 177.973069][ T7644] should_fail_ex.cold+0x5/0xa [ 177.973089][ T7644] _copy_to_user+0x32/0xd0 [ 177.973115][ T7644] simple_read_from_buffer+0xcb/0x170 [ 177.973140][ T7644] proc_fail_nth_read+0x1af/0x230 [ 177.973160][ T7644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.973178][ T7644] ? rw_verify_area+0xce/0x6d0 [ 177.973200][ T7644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.973217][ T7644] vfs_read+0x1e4/0xb30 [ 177.973242][ T7644] ? __pfx_vfs_read+0x10/0x10 [ 177.973262][ T7644] ? __fget_files+0x215/0x3d0 [ 177.973290][ T7644] ? __fget_files+0x21f/0x3d0 [ 177.973324][ T7644] ksys_read+0x12a/0x250 [ 177.973346][ T7644] ? __pfx_ksys_read+0x10/0x10 [ 177.973373][ T7644] do_syscall_64+0x106/0xf80 [ 177.973390][ T7644] ? clear_bhb_loop+0x40/0x90 [ 177.973409][ T7644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.973424][ T7644] RIP: 0033:0x7faf8915cfce [ 177.973438][ T7644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.973452][ T7644] RSP: 002b:00007faf8a0a1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.973467][ T7644] RAX: ffffffffffffffda RBX: 00007faf8a0a26c0 RCX: 00007faf8915cfce [ 177.973476][ T7644] RDX: 000000000000000f RSI: 00007faf8a0a20a0 RDI: 0000000000000004 [ 177.973485][ T7644] RBP: 00007faf8a0a2090 R08: 0000000000000000 R09: 0000000000000000 [ 177.973493][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.973501][ T7644] R13: 00007faf89416038 R14: 00007faf89415fa0 R15: 00007ffef01cf9b8 [ 177.973521][ T7644] [ 179.913052][ T7685] misc userio: Invalid payload size [ 180.726049][ T7698] netlink: 334 bytes leftover after parsing attributes in process `syz.1.430'. [ 180.818682][ T7704] HfR: entered promiscuous mode [ 181.398831][ T7709] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 182.389478][ T7736] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 182.483743][ T6564] netdevsim netdevsim1335 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.256499][ T7753] NFSD: Failed to start, no listeners configured. [ 184.129508][ C1] process 5823 (syz-executor) no longer affine to cpu1 [ 184.146019][ C1] process 7759 (syz.2.449) no longer affine to cpu1 [ 184.176826][ T21] process 7760 (syz.2.449) no longer affine to cpu1 [ 184.196253][ T7760] smpboot: CPU 1 is now offline [ 184.294351][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 184.799797][ T7776] openvswitch: HfR: Dropping previously announced user features [ 184.844296][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 184.875287][ T7776] HfR: left promiscuous mode [ 185.162609][ T7779] zswap: compressor not available [ 185.214346][ T7790] misc userio: Invalid payload size [ 185.476179][ T7793] misc userio: Invalid payload size [ 185.687084][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 185.869328][ T7802] HfR: entered promiscuous mode [ 185.964043][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 186.081430][ T7808] HfR: left promiscuous mode [ 186.848486][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 187.952464][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 188.232277][ T7851] misc userio: Invalid payload size [ 189.972421][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 190.021145][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 190.076322][ T7876] HfR: entered promiscuous mode [ 190.123173][ T7879] HfR: left promiscuous mode [ 190.568710][ T7888] HfR: entered promiscuous mode [ 190.595304][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 190.626990][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'. [ 190.700016][ T7888] HfR: left promiscuous mode [ 191.938360][ T7913] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 192.000249][ T7913] netlink: 306 bytes leftover after parsing attributes in process `syz.3.486'. [ 192.414760][ T7927] HfR: entered promiscuous mode [ 192.458141][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 192.491052][ T7927] HfR: left promiscuous mode [ 194.477107][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.484367][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.553296][ T7967] HfR: entered promiscuous mode [ 194.601920][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.499'. [ 194.811055][ T7968] HfR: left promiscuous mode [ 195.031978][ T7971] HfR: entered promiscuous mode [ 195.557444][ T7978] netlink: zone id is out of range [ 195.663150][ T7978] netlink: zone id is out of range [ 195.706527][ T7978] netlink: zone id is out of range [ 195.802515][ T7978] netlink: zone id is out of range [ 195.931947][ T7978] netlink: zone id is out of range [ 196.188747][ T7978] netlink: set zone limit has 8 unknown bytes [ 197.611575][ T8012] misc userio: Invalid payload size [ 198.054846][ T8020] openvswitch: HfR: Dropping previously announced user features [ 198.807119][ T8035] ubi0: attaching mtd0 [ 198.868879][ T8035] ubi0: scanning is finished [ 199.316203][ T8035] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 199.358227][ T8035] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 199.410458][ T8035] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 199.450309][ T8035] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 199.482072][ T8035] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 199.523193][ T8035] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 199.570700][ T8035] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4071859638 [ 199.675360][ T8035] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 199.776746][ T8040] ubi0: detaching mtd0 [ 199.787303][ T8046] ubi0: background thread "ubi_bgt0d" started, PID 8046 [ 199.824848][ T8040] ubi0: mtd0 is detached [ 200.132550][ T8058] openvswitch: HfR: Dropping previously announced user features [ 200.184863][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 200.260571][ T8060] HfR: left promiscuous mode [ 202.109005][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'. [ 202.256529][ T8091] HfR: entered promiscuous mode [ 202.351467][ T8093] HfR: left promiscuous mode [ 202.525403][ T8098] FAULT_INJECTION: forcing a failure. [ 202.525403][ T8098] name failslab, interval 1, probability 0, space 0, times 0 [ 202.597417][ T8098] CPU: 0 UID: 0 PID: 8098 Comm: syz.2.531 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.597446][ T8098] Tainted: [L]=SOFTLOCKUP [ 202.597451][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.597472][ T8098] Call Trace: [ 202.597478][ T8098] [ 202.597487][ T8098] dump_stack_lvl+0x100/0x190 [ 202.597519][ T8098] should_fail_ex.cold+0x5/0xa [ 202.597539][ T8098] should_failslab+0xc2/0x120 [ 202.597555][ T8098] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 202.597577][ T8098] ? security_inode_alloc+0x3b/0x2c0 [ 202.597600][ T8098] ? lockdep_init_map_type+0x5c/0x250 [ 202.597622][ T8098] security_inode_alloc+0x3b/0x2c0 [ 202.597647][ T8098] inode_init_always_gfp+0xced/0x1040 [ 202.597674][ T8098] alloc_inode+0x8e/0x250 [ 202.597692][ T8098] new_inode+0x22/0x1c0 [ 202.597712][ T8098] __debugfs_create_file+0x105/0x4f0 [ 202.597737][ T8098] debugfs_create_file_full+0x41/0x60 [ 202.597760][ T8098] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 202.597778][ T8098] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 202.597793][ T8098] ? rcu_is_watching+0x12/0xc0 [ 202.597830][ T8098] ? lockdep_init_map_type+0x5c/0x250 [ 202.597852][ T8098] preinit_net.part.0+0x24e/0x8f0 [ 202.597872][ T8098] copy_net_ns+0x339/0x7c0 [ 202.597893][ T8098] create_new_namespaces+0x3ea/0xac0 [ 202.597914][ T8098] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 202.597931][ T8098] ksys_unshare+0x473/0xad0 [ 202.597950][ T8098] ? __pfx_ksys_unshare+0x10/0x10 [ 202.597975][ T8098] __x64_sys_unshare+0x31/0x40 [ 202.597993][ T8098] do_syscall_64+0x106/0xf80 [ 202.598010][ T8098] ? clear_bhb_loop+0x40/0x90 [ 202.598028][ T8098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.598043][ T8098] RIP: 0033:0x7f885959c799 [ 202.598057][ T8098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.598070][ T8098] RSP: 002b:00007f885a3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 202.598085][ T8098] RAX: ffffffffffffffda RBX: 00007f8859815fa0 RCX: 00007f885959c799 [ 202.598094][ T8098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 202.598103][ T8098] RBP: 00007f8859632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 202.598111][ T8098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.598119][ T8098] R13: 00007f8859816038 R14: 00007f8859815fa0 R15: 00007ffdde356178 [ 202.598174][ T8098] [ 202.598198][ T8098] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880348f4f00' [ 204.813468][ T8141] cgroup: fork rejected by pids controller in /syz1 [ 205.840501][ T8195] misc userio: Invalid payload size [ 206.148422][ T8205] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 207.308954][ T8224] HfR: entered promiscuous mode [ 210.251358][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 210.870805][ T8281] HfR: entered promiscuous mode [ 210.889511][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 210.907846][ T8281] HfR: left promiscuous mode [ 212.269609][ T8300] mkiss: ax0: crc mode is auto. [ 212.590094][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 212.638416][ T7026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.923183][ T8310] HfR: entered promiscuous mode [ 212.953240][ T8311] HfR: left promiscuous mode [ 212.981516][ T7026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.133128][ T7026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.262009][ T8318] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 213.286016][ T7026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.543955][ T6324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.555867][ T6324] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.565026][ T6324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.573130][ T6324] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.581876][ T6324] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.638146][ T8331] FAULT_INJECTION: forcing a failure. [ 213.638146][ T8331] name failslab, interval 1, probability 0, space 0, times 0 [ 213.731843][ T8331] CPU: 0 UID: 0 PID: 8331 Comm: syz.3.559 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.731875][ T8331] Tainted: [L]=SOFTLOCKUP [ 213.731881][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.731891][ T8331] Call Trace: [ 213.731897][ T8331] [ 213.731904][ T8331] dump_stack_lvl+0x100/0x190 [ 213.731937][ T8331] should_fail_ex.cold+0x5/0xa [ 213.731958][ T8331] should_failslab+0xc2/0x120 [ 213.731975][ T8331] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 213.731998][ T8331] ? anon_vma_clone+0x2bd/0xc70 [ 213.732023][ T8331] anon_vma_clone+0x2bd/0xc70 [ 213.732049][ T8331] anon_vma_fork+0x1bb/0x6b0 [ 213.732072][ T8331] dup_mmap+0x141f/0x2180 [ 213.732097][ T8331] ? __pfx_dup_mmap+0x10/0x10 [ 213.732113][ T8331] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 213.732134][ T8331] ? __lock_acquire+0x4a5/0x2630 [ 213.732163][ T8331] ? find_held_lock+0x2b/0x80 [ 213.732178][ T8331] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 213.732220][ T8331] copy_process+0x73d7/0x7a10 [ 213.732250][ T8331] ? __pfx_copy_process+0x10/0x10 [ 213.732267][ T8331] ? find_held_lock+0x2b/0x80 [ 213.732284][ T8331] ? futex_private_hash_put+0x107/0x1c0 [ 213.732308][ T8331] kernel_clone+0xfc/0x9a0 [ 213.732327][ T8331] ? __pfx_kernel_clone+0x10/0x10 [ 213.732348][ T8331] ? __pfx___sys_recvfrom+0x10/0x10 [ 213.732371][ T8331] __do_sys_clone+0xd9/0x120 [ 213.732389][ T8331] ? __pfx___do_sys_clone+0x10/0x10 [ 213.732422][ T8331] do_syscall_64+0x106/0xf80 [ 213.732440][ T8331] ? clear_bhb_loop+0x40/0x90 [ 213.732458][ T8331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.732474][ T8331] RIP: 0033:0x7f7ae2d9c799 [ 213.732488][ T8331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.732502][ T8331] RSP: 002b:00007f7ae0ff5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 213.732517][ T8331] RAX: ffffffffffffffda RBX: 00007f7ae3016090 RCX: 00007f7ae2d9c799 [ 213.732527][ T8331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 213.732535][ T8331] RBP: 00007f7ae2e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 213.732544][ T8331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 213.732553][ T8331] R13: 00007f7ae3016128 R14: 00007f7ae3016090 R15: 00007ffdae606ef8 [ 213.732572][ T8331] [ 214.810551][ T7026] bridge_slave_1: left allmulticast mode [ 214.816592][ T7026] bridge_slave_1: left promiscuous mode [ 214.827551][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.922746][ T7026] bridge_slave_0: left allmulticast mode [ 214.928791][ T7026] bridge_slave_0: left promiscuous mode [ 214.981436][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.670528][ T6879] Bluetooth: hci2: command tx timeout [ 215.798395][ T7026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.912509][ T7026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.941965][ T7026] bond0 (unregistering): Released all slaves [ 215.968257][ T8329] chnl_net:caif_netlink_parms(): no params data found [ 216.006301][ T8347] HfR: entered promiscuous mode [ 216.714525][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.748432][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.780061][ T8329] bridge_slave_0: entered allmulticast mode [ 216.802816][ T8329] bridge_slave_0: entered promiscuous mode [ 216.926597][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.968456][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.009277][ T8329] bridge_slave_1: entered allmulticast mode [ 217.039700][ T8329] bridge_slave_1: entered promiscuous mode [ 217.157504][ T7026] hsr_slave_0: left promiscuous mode [ 217.201226][ T7026] hsr_slave_1: left promiscuous mode [ 217.213411][ T7026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.230596][ T7026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.282282][ T7026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.299981][ T7026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.331080][ T7026] veth1_macvtap: left promiscuous mode [ 217.347122][ T7026] veth0_macvtap: left promiscuous mode [ 217.360536][ T7026] veth1_vlan: left promiscuous mode [ 217.371046][ T7026] veth0_vlan: left promiscuous mode [ 217.728240][ T7026] team0 (unregistering): Port device team_slave_1 removed [ 217.752766][ T6879] Bluetooth: hci2: command tx timeout [ 217.769660][ T7026] team0 (unregistering): Port device team_slave_0 removed [ 217.991057][ T8329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.022857][ T8329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.192776][ T8329] team0: Port device team_slave_0 added [ 218.249472][ T8329] team0: Port device team_slave_1 added [ 218.414220][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.479170][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.593721][ T8329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.636484][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.666176][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.760242][ T8329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.113724][ T8329] hsr_slave_0: entered promiscuous mode [ 219.153283][ T8329] hsr_slave_1: entered promiscuous mode [ 219.180885][ T8329] debugfs: 'hsr0' already exists in 'hsr' [ 219.186641][ T8329] Cannot create hsr debugfs directory [ 219.833697][ T6879] Bluetooth: hci2: command tx timeout [ 221.910986][ T6879] Bluetooth: hci2: command tx timeout [ 222.196996][ T8329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.303124][ T8329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.372447][ T8329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.379940][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'. [ 222.449370][ T8459] HfR: entered promiscuous mode [ 222.499890][ T8461] HfR: left promiscuous mode [ 222.610071][ T8329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.993889][ T8329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.042908][ T8478] netlink: 198 bytes leftover after parsing attributes in process `syz.3.575'. [ 223.296164][ T8329] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.352385][ T8486] FAULT_INJECTION: forcing a failure. [ 223.352385][ T8486] name failslab, interval 1, probability 0, space 0, times 0 [ 223.432120][ T8486] CPU: 0 UID: 0 PID: 8486 Comm: syz.3.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.432149][ T8486] Tainted: [L]=SOFTLOCKUP [ 223.432155][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.432166][ T8486] Call Trace: [ 223.432171][ T8486] [ 223.432178][ T8486] dump_stack_lvl+0x100/0x190 [ 223.432210][ T8486] should_fail_ex.cold+0x5/0xa [ 223.432230][ T8486] should_failslab+0xc2/0x120 [ 223.432246][ T8486] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 223.432268][ T8486] ? vm_area_dup+0x27/0x8e0 [ 223.432292][ T8486] vm_area_dup+0x27/0x8e0 [ 223.432314][ T8486] __split_vma+0x18c/0xd90 [ 223.432336][ T8486] ? __pfx___split_vma+0x10/0x10 [ 223.432360][ T8486] ? __pfx_mas_prev+0x10/0x10 [ 223.432383][ T8486] vms_gather_munmap_vmas+0x39f/0x1500 [ 223.432402][ T8486] ? find_held_lock+0x2b/0x80 [ 223.432422][ T8486] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 223.432444][ T8486] ? move_page_tables+0xe1d/0x4500 [ 223.432478][ T8486] do_vmi_align_munmap+0x287/0x5f0 [ 223.432501][ T8486] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 223.432548][ T8486] do_vmi_munmap+0x1f8/0x3e0 [ 223.432580][ T8486] move_vma+0xd99/0x1890 [ 223.432607][ T8486] ? __pfx_move_vma+0x10/0x10 [ 223.432631][ T8486] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 223.432657][ T8486] ? vrm_set_new_addr+0x204/0x290 [ 223.432681][ T8486] mremap_to+0x1b7/0x450 [ 223.432705][ T8486] do_mremap+0xb76/0x2130 [ 223.432736][ T8486] ? __pfx_do_mremap+0x10/0x10 [ 223.432761][ T8486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.432789][ T8486] __do_sys_mremap+0x126/0x170 [ 223.432810][ T8486] ? __pfx___do_sys_mremap+0x10/0x10 [ 223.432835][ T8486] ? __x64_sys_futex+0x34f/0x4d0 [ 223.432866][ T8486] do_syscall_64+0x106/0xf80 [ 223.432883][ T8486] ? clear_bhb_loop+0x40/0x90 [ 223.432901][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.432916][ T8486] RIP: 0033:0x7f7ae2d9c799 [ 223.432930][ T8486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.432945][ T8486] RSP: 002b:00007f7ae0ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 223.432960][ T8486] RAX: ffffffffffffffda RBX: 00007f7ae3016090 RCX: 00007f7ae2d9c799 [ 223.432970][ T8486] RDX: 0000000000000037 RSI: 0000000000000008 RDI: 0000200000001000 [ 223.432979][ T8486] RBP: 00007f7ae2e32bd9 R08: 000000110c230000 R09: 0000000000000000 [ 223.432989][ T8486] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 223.432998][ T8486] R13: 00007f7ae3016128 R14: 00007f7ae3016090 R15: 00007ffdae606ef8 [ 223.433020][ T8486] [ 224.602662][ T8491] HfR: entered promiscuous mode [ 224.656615][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.663851][ T6564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.707635][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.714878][ T6564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.448228][ T8521] vivid-007: ================= START STATUS ================= [ 225.490385][ T8521] vivid-007: Generate PTS: true [ 225.526461][ T8521] vivid-007: Generate SCR: true [ 225.595673][ T8521] tpg source WxH: 320x240 (Y'CbCr) [ 225.601812][ T8519] misc userio: Invalid payload size [ 225.645668][ T8521] tpg field: 1 [ 225.662404][ T8521] tpg crop: (0,0)/320x240 [ 225.666770][ T8521] tpg compose: (0,0)/320x240 [ 225.745840][ T8521] tpg colorspace: 8 [ 225.749679][ T8521] tpg transfer function: 0/0 [ 225.795851][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.861332][ T8521] tpg Y'CbCr encoding: 0/0 [ 225.865799][ T8521] tpg quantization: 0/0 [ 225.945941][ T8521] tpg RGB range: 0/2 [ 225.949873][ T8521] vivid-007: ================== END STATUS ================== [ 226.046064][ T8329] veth0_vlan: entered promiscuous mode [ 226.117115][ T8329] veth1_vlan: entered promiscuous mode [ 226.349930][ T8329] veth0_macvtap: entered promiscuous mode [ 226.411318][ T8329] veth1_macvtap: entered promiscuous mode [ 226.516514][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.564372][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.703047][ T7027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.741845][ T7027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.815154][ T7027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.867630][ T7027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.590479][ T7026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.650446][ T7026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.096745][ T7027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.130419][ T7027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.016682][ T8607] openvswitch: HfR: Dropping previously announced user features [ 229.119825][ T8608] misc userio: Invalid payload size [ 229.989321][ T8628] FAULT_INJECTION: forcing a failure. [ 229.989321][ T8628] name failslab, interval 1, probability 0, space 0, times 0 [ 230.051419][ T8628] CPU: 0 UID: 0 PID: 8628 Comm: syz.0.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.051450][ T8628] Tainted: [L]=SOFTLOCKUP [ 230.051457][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 230.051467][ T8628] Call Trace: [ 230.051473][ T8628] [ 230.051478][ T8628] dump_stack_lvl+0x100/0x190 [ 230.051508][ T8628] should_fail_ex.cold+0x5/0xa [ 230.051528][ T8628] should_failslab+0xc2/0x120 [ 230.051544][ T8628] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 230.051567][ T8628] ? vm_area_dup+0x27/0x8e0 [ 230.051598][ T8628] vm_area_dup+0x27/0x8e0 [ 230.051621][ T8628] __split_vma+0x18c/0xd90 [ 230.051647][ T8628] ? __pfx___split_vma+0x10/0x10 [ 230.051673][ T8628] ? __pfx_mas_prev+0x10/0x10 [ 230.051698][ T8628] vms_gather_munmap_vmas+0x39f/0x1500 [ 230.051719][ T8628] ? validate_mm+0x261/0x4e0 [ 230.051737][ T8628] ? validate_mm+0x261/0x4e0 [ 230.051757][ T8628] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 230.051778][ T8628] ? validate_mm+0x392/0x4e0 [ 230.051799][ T8628] ? __pfx_validate_mm+0x10/0x10 [ 230.051823][ T8628] do_vmi_align_munmap+0x287/0x5f0 [ 230.051846][ T8628] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 230.051893][ T8628] do_vmi_munmap+0x1f8/0x3e0 [ 230.051916][ T8628] __vm_munmap+0x196/0x390 [ 230.051939][ T8628] ? __pfx___vm_munmap+0x10/0x10 [ 230.051967][ T8628] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 230.051990][ T8628] __x64_sys_munmap+0x59/0x80 [ 230.052007][ T8628] do_syscall_64+0x106/0xf80 [ 230.052023][ T8628] ? clear_bhb_loop+0x40/0x90 [ 230.052042][ T8628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.052057][ T8628] RIP: 0033:0x7f78cb19c5c7 [ 230.052070][ T8628] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.052084][ T8628] RSP: 002b:00007f78cc072d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 230.052099][ T8628] RAX: ffffffffffffffda RBX: 00007f78c4000000 RCX: 00007f78cb19c5c7 [ 230.052109][ T8628] RDX: 0000000000000000 RSI: 0000000002e00000 RDI: 00007f78c1200000 [ 230.052118][ T8628] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 230.052127][ T8628] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 230.052135][ T8628] R13: 0000000000001000 R14: 00007f78c8000000 R15: 0000000002e00000 [ 230.052154][ T8628] [ 231.272502][ T8647] misc userio: Invalid payload size [ 231.570519][ T8657] openvswitch: HfR: Dropping previously announced user features [ 231.605649][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.610'. [ 231.650888][ T8657] HfR: left promiscuous mode [ 232.079813][ T8676] nbd: must specify an index to disconnect [ 232.175501][ T8672] zswap: compressor not available [ 233.674493][ T8725] openvswitch: HfR: Dropping previously announced user features [ 233.708827][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'. [ 233.766047][ T8725] HfR: left promiscuous mode [ 233.886498][ T8723] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 234.469790][ T8747] QAT: failed to copy from user cfg_data. [ 235.362017][ T8783] writes to the poll attribute are ignored. [ 235.368222][ T8783] please use driver specific parameters instead. [ 235.910628][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 235.962555][ T8808] HfR: entered promiscuous mode [ 236.011148][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'. [ 236.038496][ T8808] HfR: left promiscuous mode [ 236.421983][ T8824] misc userio: Invalid payload size [ 237.573236][ T8865] misc userio: Invalid payload size [ 237.714835][ T8877] openvswitch: HfR: Dropping previously announced user features [ 237.774157][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 237.826954][ T8877] HfR: left promiscuous mode [ 238.829965][ T30] audit: type=1800 audit(1772471982.935:4): pid=8911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.669" name="members" dev="configfs" ino=25429 res=0 errno=0 [ 238.891570][ T8916] wlan1: mtu less than device minimum [ 239.982439][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 241.575531][ T8969] FAULT_INJECTION: forcing a failure. [ 241.575531][ T8969] name failslab, interval 1, probability 0, space 0, times 0 [ 241.661227][ T8969] CPU: 0 UID: 0 PID: 8969 Comm: syz.0.684 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.661257][ T8969] Tainted: [L]=SOFTLOCKUP [ 241.661262][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.661274][ T8969] Call Trace: [ 241.661280][ T8969] [ 241.661286][ T8969] dump_stack_lvl+0x100/0x190 [ 241.661316][ T8969] should_fail_ex.cold+0x5/0xa [ 241.661335][ T8969] ? tomoyo_realpath_from_path+0xb6/0x690 [ 241.661353][ T8969] should_failslab+0xc2/0x120 [ 241.661369][ T8969] __kmalloc_noprof+0xe0/0x850 [ 241.661395][ T8969] tomoyo_realpath_from_path+0xb6/0x690 [ 241.661416][ T8969] tomoyo_check_open_permission+0x2af/0x3c0 [ 241.661441][ T8969] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 241.661489][ T8969] ? do_raw_spin_lock+0x128/0x260 [ 241.661513][ T8969] ? path_get+0x61/0x80 [ 241.661531][ T8969] tomoyo_file_open+0x6b/0x90 [ 241.661551][ T8969] security_file_open+0xb5/0x1e0 [ 241.661567][ T8969] do_dentry_open+0x5aa/0x1660 [ 241.661584][ T8969] ? security_inode_permission+0xbf/0x250 [ 241.661610][ T8969] vfs_open+0x82/0x3f0 [ 241.661630][ T8969] path_openat+0x208c/0x31a0 [ 241.661652][ T8969] ? __pfx_path_openat+0x10/0x10 [ 241.661674][ T8969] do_file_open+0x20e/0x430 [ 241.661690][ T8969] ? __pfx_do_file_open+0x10/0x10 [ 241.661721][ T8969] ? alloc_fd+0x476/0x790 [ 241.661737][ T8969] ? do_getname+0x191/0x390 [ 241.661756][ T8969] do_sys_openat2+0x10d/0x1e0 [ 241.661775][ T8969] ? __pfx_do_sys_openat2+0x10/0x10 [ 241.661801][ T8969] __x64_sys_openat+0x12d/0x210 [ 241.661820][ T8969] ? __pfx___x64_sys_openat+0x10/0x10 [ 241.661846][ T8969] do_syscall_64+0x106/0xf80 [ 241.661864][ T8969] ? clear_bhb_loop+0x40/0x90 [ 241.661883][ T8969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.661898][ T8969] RIP: 0033:0x7f78cb19c799 [ 241.661912][ T8969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.661925][ T8969] RSP: 002b:00007f78cc074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 241.661944][ T8969] RAX: ffffffffffffffda RBX: 00007f78cb415fa0 RCX: 00007f78cb19c799 [ 241.661955][ T8969] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 241.661964][ T8969] RBP: 00007f78cb232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 241.661973][ T8969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.661981][ T8969] R13: 00007f78cb416038 R14: 00007f78cb415fa0 R15: 00007ffec7391d48 [ 241.662001][ T8969] [ 241.662009][ T8969] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.399137][ T8973] Invalid ELF header magic: != ELF [ 242.609213][ T8979] HfR: entered promiscuous mode [ 242.670473][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'. [ 242.730530][ T8979] HfR: left promiscuous mode [ 242.770824][ T8984] FAULT_INJECTION: forcing a failure. [ 242.770824][ T8984] name failslab, interval 1, probability 0, space 0, times 0 [ 242.792509][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 242.811451][ T8984] CPU: 0 UID: 0 PID: 8984 Comm: syz.1.687 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.811482][ T8984] Tainted: [L]=SOFTLOCKUP [ 242.811488][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.811498][ T8984] Call Trace: [ 242.811504][ T8984] [ 242.811510][ T8984] dump_stack_lvl+0x100/0x190 [ 242.811543][ T8984] should_fail_ex.cold+0x5/0xa [ 242.811563][ T8984] should_failslab+0xc2/0x120 [ 242.811580][ T8984] __kmalloc_node_noprof+0xe6/0x850 [ 242.811602][ T8984] ? alloc_slab_obj_exts+0x4e/0x190 [ 242.811619][ T8984] ? find_held_lock+0x2b/0x80 [ 242.811638][ T8984] alloc_slab_obj_exts+0x4e/0x190 [ 242.811660][ T8984] __memcg_slab_post_alloc_hook+0x24a/0x9a0 [ 242.811682][ T8984] ? kasan_save_track+0x14/0x30 [ 242.811706][ T8984] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 242.811727][ T8984] ? alloc_inode+0x183/0x250 [ 242.811749][ T8984] alloc_inode+0x183/0x250 [ 242.811768][ T8984] create_pipe_files+0x4c/0x970 [ 242.811786][ T8984] do_pipe2+0xbd/0x1e0 [ 242.811804][ T8984] ? __pfx_do_pipe2+0x10/0x10 [ 242.811825][ T8984] __x64_sys_pipe+0x33/0x50 [ 242.811840][ T8984] do_syscall_64+0x106/0xf80 [ 242.811859][ T8984] ? clear_bhb_loop+0x40/0x90 [ 242.811877][ T8984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.811901][ T8984] RIP: 0033:0x7f26b799c799 [ 242.811917][ T8984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.811932][ T8984] RSP: 002b:00007f26b87fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 242.811949][ T8984] RAX: ffffffffffffffda RBX: 00007f26b7c15fa0 RCX: 00007f26b799c799 [ 242.811960][ T8984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.811970][ T8984] RBP: 00007f26b7a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 242.811979][ T8984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.811989][ T8984] R13: 00007f26b7c16038 R14: 00007f26b7c15fa0 R15: 00007ffc70806bf8 [ 242.812010][ T8984] [ 243.711213][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 243.864113][ T8982] HfR: entered promiscuous mode [ 243.948664][ T8985] HfR: left promiscuous mode [ 244.331748][ T9013] HfR: entered promiscuous mode [ 244.383918][ T9011] FAULT_INJECTION: forcing a failure. [ 244.383918][ T9011] name failslab, interval 1, probability 0, space 0, times 0 [ 244.431797][ T9011] CPU: 0 UID: 0 PID: 9011 Comm: syz.0.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.431824][ T9011] Tainted: [L]=SOFTLOCKUP [ 244.431830][ T9011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.431839][ T9011] Call Trace: [ 244.431845][ T9011] [ 244.431851][ T9011] dump_stack_lvl+0x100/0x190 [ 244.431882][ T9011] should_fail_ex.cold+0x5/0xa [ 244.431903][ T9011] should_failslab+0xc2/0x120 [ 244.431919][ T9011] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 244.431942][ T9011] ? skb_clone+0x190/0x400 [ 244.431963][ T9011] skb_clone+0x190/0x400 [ 244.431981][ T9011] netlink_deliver_tap+0xaed/0xcc0 [ 244.432004][ T9011] netlink_unicast+0x650/0x870 [ 244.432035][ T9011] ? __pfx_netlink_unicast+0x10/0x10 [ 244.432054][ T9011] ? __pfx___might_resched+0x10/0x10 [ 244.432076][ T9011] ? __pfx_futex_wake_mark+0x10/0x10 [ 244.432104][ T9011] netlink_sendmsg+0x8b0/0xda0 [ 244.432130][ T9011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.432151][ T9011] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 244.432176][ T9011] __sys_sendto+0x4aa/0x520 [ 244.432194][ T9011] ? __pfx___sys_sendto+0x10/0x10 [ 244.432217][ T9011] ? find_held_lock+0x2b/0x80 [ 244.432238][ T9011] ? xfd_validate_state+0x129/0x190 [ 244.432263][ T9011] __x64_sys_sendto+0xe0/0x1c0 [ 244.432278][ T9011] ? do_syscall_64+0x95/0xf80 [ 244.432295][ T9011] ? lockdep_hardirqs_on+0x78/0x100 [ 244.432311][ T9011] do_syscall_64+0x106/0xf80 [ 244.432327][ T9011] ? clear_bhb_loop+0x40/0x90 [ 244.432345][ T9011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.432363][ T9011] RIP: 0033:0x7f78cb15cfce [ 244.432376][ T9011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.432389][ T9011] RSP: 002b:00007f78cc072e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 244.432404][ T9011] RAX: ffffffffffffffda RBX: 00007f78cc0746c0 RCX: 00007f78cb15cfce [ 244.432413][ T9011] RDX: 0000000000000024 RSI: 00007f78cc073000 RDI: 000000000000000b [ 244.432422][ T9011] RBP: 0000000000000000 R08: 00007f78cc072f04 R09: 000000000000000c [ 244.432430][ T9011] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 244.432439][ T9011] R13: 00007f78cc072f58 R14: 00007f78cc073000 R15: 0000000000000000 [ 244.432458][ T9011] [ 245.275265][ T9027] misc userio: Invalid payload size [ 245.310607][ T9030] misc userio: Invalid payload size [ 246.040562][ T30] audit: type=1326 audit(1772471990.145:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.0.699" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78cb19c799 code=0x0 [ 246.791457][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 247.011843][ T9069] HfR: entered promiscuous mode [ 247.044369][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 247.205064][ T9069] HfR: left promiscuous mode [ 248.021013][ T9088] HfR: entered promiscuous mode [ 248.064630][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 248.064691][ T9088] HfR: left promiscuous mode [ 248.093707][ T9094] openvswitch: HfR: Dropping previously announced user features [ 248.099078][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 248.099139][ T9094] HfR: left promiscuous mode [ 248.199573][ T9097] misc userio: Invalid payload size [ 249.358029][ T9129] netlink: 3 bytes leftover after parsing attributes in process `syz.3.718'. [ 249.439612][ T9131] kAFS: Invalid Command on /proc/fs/afs/cells file [ 249.512613][ T9141] netlink: 354 bytes leftover after parsing attributes in process `syz.1.719'. [ 249.758454][ T9150] bridge0: port 3(bond0) entered blocking state [ 249.786196][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 249.808600][ T9150] bridge0: port 3(bond0) entered disabled state [ 249.844511][ T9150] bond0: entered allmulticast mode [ 249.864368][ T9150] bond_slave_0: entered allmulticast mode [ 249.894847][ T9150] bond_slave_1: entered allmulticast mode [ 249.946932][ T9150] bond0: entered promiscuous mode [ 249.972202][ T9150] bond_slave_0: entered promiscuous mode [ 249.991845][ T9150] bond_slave_1: entered promiscuous mode [ 250.008554][ T9150] bridge0: port 3(bond0) entered blocking state [ 250.015014][ T9150] bridge0: port 3(bond0) entered forwarding state [ 250.097406][ T9156] HfR: entered promiscuous mode [ 250.593406][ T9175] netlink: zone id is out of range [ 250.598554][ T9175] netlink: zone id is out of range [ 250.695463][ T9175] netlink: zone id is out of range [ 250.737226][ T9175] netlink: zone id is out of range [ 250.768092][ T9175] netlink: zone id is out of range [ 250.795923][ T9175] netlink: zone id is out of range [ 250.815372][ T9175] netlink: zone id is out of range [ 250.842625][ T9175] netlink: zone id is out of range [ 250.878302][ T9175] netlink: zone id is out of range [ 250.878318][ T9175] netlink: zone id is out of range [ 253.044854][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 254.236904][ T9285] FAULT_INJECTION: forcing a failure. [ 254.236904][ T9285] name failslab, interval 1, probability 0, space 0, times 0 [ 254.251299][ T9283] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 254.290802][ T9285] CPU: 0 UID: 0 PID: 9285 Comm: syz.0.747 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.290833][ T9285] Tainted: [L]=SOFTLOCKUP [ 254.290839][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.290849][ T9285] Call Trace: [ 254.290856][ T9285] [ 254.290863][ T9285] dump_stack_lvl+0x100/0x190 [ 254.290897][ T9285] should_fail_ex.cold+0x5/0xa [ 254.290918][ T9285] should_failslab+0xc2/0x120 [ 254.290934][ T9285] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 254.290959][ T9285] ? security_file_alloc+0x34/0x2c0 [ 254.290975][ T9285] ? trace_kmem_cache_alloc+0xf3/0x120 [ 254.290993][ T9285] security_file_alloc+0x34/0x2c0 [ 254.291008][ T9285] init_file+0x95/0x480 [ 254.291027][ T9285] alloc_empty_file+0x73/0x1c0 [ 254.291046][ T9285] alloc_file_pseudo+0x13a/0x230 [ 254.291067][ T9285] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 254.291083][ T9285] ? alloc_fd+0x476/0x790 [ 254.291099][ T9285] ? do_raw_spin_unlock+0x145/0x1e0 [ 254.291123][ T9285] __anon_inode_getfile+0xe8/0x280 [ 254.291155][ T9285] anon_inode_getfile_fmode+0x37/0xa0 [ 254.291180][ T9285] __do_sys_fanotify_init+0xa79/0xe50 [ 254.291208][ T9285] do_syscall_64+0x106/0xf80 [ 254.291228][ T9285] ? clear_bhb_loop+0x40/0x90 [ 254.291246][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.291261][ T9285] RIP: 0033:0x7f78cb19c799 [ 254.291276][ T9285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.291290][ T9285] RSP: 002b:00007f78cc074028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 254.291305][ T9285] RAX: ffffffffffffffda RBX: 00007f78cb415fa0 RCX: 00007f78cb19c799 [ 254.291314][ T9285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 254.291323][ T9285] RBP: 00007f78cb232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 254.291331][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.291339][ T9285] R13: 00007f78cb416038 R14: 00007f78cb415fa0 R15: 00007ffec7391d48 [ 254.291360][ T9285] [ 254.616497][ T9291] netlink: 472 bytes leftover after parsing attributes in process `syz.0.748'. [ 254.647875][ T6324] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 254.654906][ T9226] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 254.661557][ T9224] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 254.667970][ T9223] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 254.674493][ T6879] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 254.686095][ T9227] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 254.692934][ T9236] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 254.699522][ T9225] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 254.706130][ T9237] Bluetooth: hci19: Opcode 0x0c03 failed: -110 [ 254.712926][ T9222] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 254.719604][ T6337] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 254.726151][ T9239] Bluetooth: hci21: Opcode 0x0c03 failed: -110 [ 254.732596][ T9234] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 254.739119][ T9230] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 254.745557][ T9232] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 254.751968][ T9231] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 254.758620][ T9240] Bluetooth: hci22: Opcode 0x0c03 failed: -110 [ 254.765190][ T9238] Bluetooth: hci20: Opcode 0x0c03 failed: -110 [ 254.771558][ T9229] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 254.785607][ T9242] Bluetooth: hci24: Opcode 0x0c03 failed: -110 [ 254.802740][ T9244] Bluetooth: hci26: Opcode 0x0c03 failed: -110 [ 254.809406][ T9235] Bluetooth: hci27: Opcode 0x0c03 failed: -110 [ 254.815798][ T9241] Bluetooth: hci23: Opcode 0x0c03 failed: -110 [ 254.822290][ T9243] Bluetooth: hci25: Opcode 0x0c03 failed: -110 [ 255.930669][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.944957][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.304810][ T9334] openvswitch: HfR: Dropping previously announced user features [ 257.631753][ T9341] misc userio: Invalid payload size [ 258.901258][ T9363] FAULT_INJECTION: forcing a failure. [ 258.901258][ T9363] name failslab, interval 1, probability 0, space 0, times 0 [ 258.970285][ T9363] CPU: 0 UID: 0 PID: 9363 Comm: syz.2.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.970316][ T9363] Tainted: [L]=SOFTLOCKUP [ 258.970321][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.970331][ T9363] Call Trace: [ 258.970337][ T9363] [ 258.970348][ T9363] dump_stack_lvl+0x100/0x190 [ 258.970378][ T9363] should_fail_ex.cold+0x5/0xa [ 258.970399][ T9363] should_failslab+0xc2/0x120 [ 258.970415][ T9363] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 258.970437][ T9363] ? __d_alloc+0x34/0xa80 [ 258.970458][ T9363] __d_alloc+0x34/0xa80 [ 258.970570][ T9363] d_alloc_pseudo+0x1c/0xc0 [ 258.970594][ T9363] alloc_file_pseudo+0xcf/0x230 [ 258.970615][ T9363] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 258.970641][ T9363] __shmem_file_setup+0x221/0x490 [ 258.970662][ T9363] ? __pfx___shmem_file_setup+0x10/0x10 [ 258.970685][ T9363] ? vm_area_alloc+0x1f/0x160 [ 258.970706][ T9363] shmem_zero_setup+0x96/0x1b0 [ 258.970729][ T9363] __mmap_region+0x2198/0x29e0 [ 258.970753][ T9363] ? __pfx___mmap_region+0x10/0x10 [ 258.970805][ T9363] ? lockdep_hardirqs_on+0x78/0x100 [ 258.970823][ T9363] ? finish_task_switch.isra.0+0x205/0xb80 [ 258.970840][ T9363] ? rcu_is_watching+0x12/0xc0 [ 258.970887][ T9363] ? rcu_is_watching+0x12/0xc0 [ 258.970909][ T9363] ? cap_capable+0x107/0x460 [ 258.970933][ T9363] mmap_region+0x180/0x3e0 [ 258.970959][ T9363] do_mmap+0xc63/0x12f0 [ 258.970979][ T9363] ? __pfx_do_mmap+0x10/0x10 [ 258.970996][ T9363] ? __pfx_down_write_killable+0x10/0x10 [ 258.971022][ T9363] vm_mmap_pgoff+0x29e/0x470 [ 258.971043][ T9363] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 258.971061][ T9363] ? do_futex+0x192/0x350 [ 258.971081][ T9363] ? __pfx_do_futex+0x10/0x10 [ 258.971102][ T9363] ksys_mmap_pgoff+0xe1/0x650 [ 258.971118][ T9363] ? __x64_sys_futex+0x34f/0x4d0 [ 258.971136][ T9363] ? __x64_sys_futex+0x358/0x4d0 [ 258.971154][ T9363] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 258.971170][ T9363] ? xfd_validate_state+0x129/0x190 [ 258.971194][ T9363] __x64_sys_mmap+0x125/0x190 [ 258.971218][ T9363] do_syscall_64+0x106/0xf80 [ 258.971235][ T9363] ? clear_bhb_loop+0x40/0x90 [ 258.971253][ T9363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.971269][ T9363] RIP: 0033:0x7f885959c799 [ 258.971284][ T9363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.971297][ T9363] RSP: 002b:00007f885a3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 258.971313][ T9363] RAX: ffffffffffffffda RBX: 00007f8859815fa0 RCX: 00007f885959c799 [ 258.971323][ T9363] RDX: 00004000000000df RSI: 0000000000030009 RDI: 0000000000000000 [ 258.971333][ T9363] RBP: 00007f8859632bd9 R08: 0000000000000401 R09: 0000000000008000 [ 258.971342][ T9363] R10: 0000000004000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 258.971351][ T9363] R13: 00007f8859816038 R14: 00007f8859815fa0 R15: 00007ffdde356178 [ 258.971373][ T9363] [ 259.628302][ T9364] FAULT_INJECTION: forcing a failure. [ 259.628302][ T9364] name fail_futex, interval 1, probability 0, space 0, times 1 [ 259.657527][ T9364] CPU: 0 UID: 0 PID: 9364 Comm: syz.2.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.657554][ T9364] Tainted: [L]=SOFTLOCKUP [ 259.657559][ T9364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 259.657568][ T9364] Call Trace: [ 259.657574][ T9364] [ 259.657579][ T9364] dump_stack_lvl+0x100/0x190 [ 259.657606][ T9364] should_fail_ex.cold+0x5/0xa [ 259.657624][ T9364] get_futex_key+0x106f/0x1620 [ 259.657645][ T9364] ? __pfx_get_futex_key+0x10/0x10 [ 259.657661][ T9364] ? lock_acquire+0x1cf/0x380 [ 259.657688][ T9364] futex_wake+0xea/0x530 [ 259.657711][ T9364] ? __pfx_futex_wake+0x10/0x10 [ 259.657732][ T9364] ? exit_mm_release+0x19/0x30 [ 259.657757][ T9364] do_futex+0x32b/0x350 [ 259.657775][ T9364] ? __pfx_do_futex+0x10/0x10 [ 259.657792][ T9364] ? __might_fault+0xc5/0x140 [ 259.657817][ T9364] mm_release+0x24a/0x2f0 [ 259.657833][ T9364] do_exit+0x675/0x2aa0 [ 259.657856][ T9364] ? __pfx_do_exit+0x10/0x10 [ 259.657874][ T9364] ? do_raw_spin_lock+0x128/0x260 [ 259.657894][ T9364] ? find_held_lock+0x2b/0x80 [ 259.657907][ T9364] ? get_signal+0x7e0/0x21e0 [ 259.657933][ T9364] do_group_exit+0xd5/0x2a0 [ 259.657954][ T9364] get_signal+0x1ec7/0x21e0 [ 259.657976][ T9364] ? __pfx_get_signal+0x10/0x10 [ 259.657992][ T9364] ? do_futex+0x192/0x350 [ 259.658012][ T9364] arch_do_signal_or_restart+0x91/0x770 [ 259.658032][ T9364] ? find_held_lock+0x2b/0x80 [ 259.658045][ T9364] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 259.658068][ T9364] ? __pfx___x64_sys_futex+0x10/0x10 [ 259.658091][ T9364] exit_to_user_mode_loop+0x86/0x4a0 [ 259.658114][ T9364] do_syscall_64+0x668/0xf80 [ 259.658131][ T9364] ? clear_bhb_loop+0x40/0x90 [ 259.658149][ T9364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.658164][ T9364] RIP: 0033:0x7f885959c799 [ 259.658178][ T9364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.658193][ T9364] RSP: 002b:00007f885a3950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 259.658212][ T9364] RAX: fffffffffffffe00 RBX: 00007f8859816098 RCX: 00007f885959c799 [ 259.658222][ T9364] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8859816098 [ 259.658231][ T9364] RBP: 00007f8859816090 R08: 0000000000000000 R09: 0000000000000000 [ 259.658248][ T9364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.658257][ T9364] R13: 00007f8859816128 R14: 00007ffdde356090 R15: 00007ffdde356178 [ 259.658276][ T9364] [ 261.221032][ T9383] netlink: 'syz.2.769': attribute type 1 has an invalid length. [ 261.229185][ T9383] netlink: 314 bytes leftover after parsing attributes in process `syz.2.769'. [ 261.824590][ T9413] HfR: entered promiscuous mode [ 261.866182][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 262.015532][ T9413] HfR: left promiscuous mode [ 262.053290][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 262.131664][ T9419] openvswitch: HfR: Dropping previously announced user features [ 262.231594][ T9420] HfR: left promiscuous mode [ 262.959093][ T9448] misc userio: Invalid payload size [ 263.131433][ T9459] misc userio: Invalid payload size [ 264.870707][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 264.996447][ T9542] HfR: entered promiscuous mode [ 265.053382][ T9544] HfR: left promiscuous mode [ 265.203448][ T9556] misc userio: Invalid payload size [ 265.249463][ T9520] hub 1-0:1.0: USB hub found [ 265.285283][ T9520] hub 1-0:1.0: 1 port detected [ 265.971533][ T9591] program syz.0.791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.023471][ T30] audit: type=1807 audit(1772472010.125:6): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 266.083838][ T9590] ima: policy update failed [ 266.096315][ T30] audit: type=1802 audit(1772472010.155:7): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.791" res=0 errno=0 [ 266.195836][ T30] audit: type=1802 audit(1772472010.235:8): pid=9590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.791" res=0 errno=0 [ 267.079984][ T9613] Invalid ELF header magic: != ELF [ 267.940445][ T9702] FAULT_INJECTION: forcing a failure. [ 267.940445][ T9702] name failslab, interval 1, probability 0, space 0, times 0 [ 268.029468][ T9702] CPU: 0 UID: 0 PID: 9702 Comm: syz.1.803 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.029495][ T9702] Tainted: [L]=SOFTLOCKUP [ 268.029500][ T9702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.029510][ T9702] Call Trace: [ 268.029516][ T9702] [ 268.029522][ T9702] dump_stack_lvl+0x100/0x190 [ 268.029551][ T9702] should_fail_ex.cold+0x5/0xa [ 268.029569][ T9702] ? landlock_init_hierarchy_log+0x186/0x820 [ 268.029587][ T9702] should_failslab+0xc2/0x120 [ 268.029603][ T9702] __kmalloc_noprof+0xe0/0x850 [ 268.029629][ T9702] landlock_init_hierarchy_log+0x186/0x820 [ 268.029651][ T9702] landlock_merge_ruleset+0x67b/0x830 [ 268.029677][ T9702] __do_sys_landlock_restrict_self+0x2a6/0x9e0 [ 268.029703][ T9702] do_syscall_64+0x106/0xf80 [ 268.029720][ T9702] ? clear_bhb_loop+0x40/0x90 [ 268.029738][ T9702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.029753][ T9702] RIP: 0033:0x7f26b799c799 [ 268.029766][ T9702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.029781][ T9702] RSP: 002b:00007f26b87fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 268.029795][ T9702] RAX: ffffffffffffffda RBX: 00007f26b7c15fa0 RCX: 00007f26b799c799 [ 268.029805][ T9702] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 268.029814][ T9702] RBP: 00007f26b7a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 268.029823][ T9702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.029831][ T9702] R13: 00007f26b7c16038 R14: 00007f26b7c15fa0 R15: 00007ffc70806bf8 [ 268.029851][ T9702] [ 268.390414][ T9718] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 268.693770][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 269.056109][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 269.275914][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 269.315162][ T9763] netlink: 334 bytes leftover after parsing attributes in process `syz.1.813'. [ 270.375390][ T9836] FAULT_INJECTION: forcing a failure. [ 270.375390][ T9836] name fail_futex, interval 1, probability 0, space 0, times 0 [ 270.431990][ T9836] CPU: 0 UID: 0 PID: 9836 Comm: syz.0.820 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.432018][ T9836] Tainted: [L]=SOFTLOCKUP [ 270.432024][ T9836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.432033][ T9836] Call Trace: [ 270.432039][ T9836] [ 270.432046][ T9836] dump_stack_lvl+0x100/0x190 [ 270.432078][ T9836] should_fail_ex.cold+0x5/0xa [ 270.432099][ T9836] get_futex_key+0x1d2/0x1620 [ 270.432124][ T9836] ? __pfx_get_futex_key+0x10/0x10 [ 270.432141][ T9836] ? do_raw_spin_lock+0x128/0x260 [ 270.432169][ T9836] futex_wait_setup+0x81/0x500 [ 270.432197][ T9836] __futex_wait+0x19f/0x300 [ 270.432221][ T9836] ? __pfx___futex_wait+0x10/0x10 [ 270.432245][ T9836] ? __pfx_futex_wake_mark+0x10/0x10 [ 270.432269][ T9836] ? futex_hash+0x2c5/0x380 [ 270.432291][ T9836] futex_wait+0xed/0x380 [ 270.432313][ T9836] ? __pfx_futex_wait+0x10/0x10 [ 270.432338][ T9836] ? ksys_write+0x190/0x250 [ 270.432362][ T9836] ? ksys_write+0x190/0x250 [ 270.432389][ T9836] do_futex+0x1ef/0x350 [ 270.432408][ T9836] ? __pfx_do_futex+0x10/0x10 [ 270.432431][ T9836] __x64_sys_futex+0x34f/0x4d0 [ 270.432451][ T9836] ? fput+0x79/0x100 [ 270.432467][ T9836] ? __pfx___x64_sys_futex+0x10/0x10 [ 270.432485][ T9836] ? ksys_write+0x1ac/0x250 [ 270.432506][ T9836] ? __pfx_ksys_write+0x10/0x10 [ 270.432533][ T9836] do_syscall_64+0x106/0xf80 [ 270.432552][ T9836] ? clear_bhb_loop+0x40/0x90 [ 270.432571][ T9836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.432593][ T9836] RIP: 0033:0x7f78cb19c799 [ 270.432606][ T9836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.432621][ T9836] RSP: 002b:00007f78cc0740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 270.432637][ T9836] RAX: ffffffffffffffda RBX: 00007f78cb415fa8 RCX: 00007f78cb19c799 [ 270.432647][ T9836] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f78cb415fa8 [ 270.432656][ T9836] RBP: 00007f78cb415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 270.432665][ T9836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.432674][ T9836] R13: 00007f78cb416038 R14: 00007ffec7391c60 R15: 00007ffec7391d48 [ 270.432693][ T9836] [ 270.496756][ T9843] misc userio: Invalid payload size [ 271.092478][ T9855] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 271.494972][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 271.624698][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 271.909241][ T9857] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 273.920614][T10012] misc userio: Invalid payload size [ 275.432641][T10080] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 276.105716][T10126] HfR: entered promiscuous mode [ 276.151953][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 276.201538][T10126] HfR: left promiscuous mode [ 276.521614][T10147] misc userio: Invalid payload size [ 276.705171][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. syzkaller syzkaller login: [ 281.275305][T10486] HfR: entered promiscuous mode [ 281.328503][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 281.360445][T10486] HfR: left promiscuous mode [ 281.653059][T10507] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 281.705004][T10504] HfR: entered promiscuous mode [ 281.737256][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 282.038598][T10515] HfR: left promiscuous mode [ 282.343005][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 283.300860][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.307700][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 284.128794][T10672] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 285.554120][T10755] FAULT_INJECTION: forcing a failure. [ 285.554120][T10755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.736519][T10755] CPU: 0 UID: 0 PID: 10755 Comm: syz.3.887 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.736547][T10755] Tainted: [L]=SOFTLOCKUP [ 285.736553][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.736563][T10755] Call Trace: [ 285.736569][T10755] [ 285.736575][T10755] dump_stack_lvl+0x100/0x190 [ 285.736604][T10755] should_fail_ex.cold+0x5/0xa [ 285.736635][T10755] _copy_from_user+0x2e/0xd0 [ 285.736662][T10755] snd_pcm_oss_write2+0x1c2/0x400 [ 285.736687][T10755] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 285.736716][T10755] snd_pcm_oss_write+0x729/0xa30 [ 285.736740][T10755] ? security_file_permission+0x76/0x210 [ 285.736760][T10755] vfs_write+0x2aa/0x1070 [ 285.736784][T10755] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 285.736808][T10755] ? __pfx_vfs_write+0x10/0x10 [ 285.736829][T10755] ? find_held_lock+0x2b/0x80 [ 285.736843][T10755] ? __fget_files+0x215/0x3d0 [ 285.736865][T10755] ? __fget_files+0x215/0x3d0 [ 285.736890][T10755] ? __fget_files+0x21f/0x3d0 [ 285.736918][T10755] ksys_write+0x12a/0x250 [ 285.736940][T10755] ? __pfx_ksys_write+0x10/0x10 [ 285.736968][T10755] do_syscall_64+0x106/0xf80 [ 285.736985][T10755] ? clear_bhb_loop+0x40/0x90 [ 285.737004][T10755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.737019][T10755] RIP: 0033:0x7f7ae2d9c799 [ 285.737033][T10755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.737047][T10755] RSP: 002b:00007f7ae0bb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 285.737062][T10755] RAX: ffffffffffffffda RBX: 00007f7ae3016270 RCX: 00007f7ae2d9c799 [ 285.737072][T10755] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 285.737081][T10755] RBP: 00007f7ae2e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 285.737089][T10755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.737107][T10755] R13: 00007f7ae3016308 R14: 00007f7ae3016270 R15: 00007ffdae606ef8 [ 285.737128][T10755] [ 286.969461][T10809] misc userio: Invalid payload size [ 288.001637][T10875] netlink: 74 bytes leftover after parsing attributes in process `syz.1.899'. [ 289.753890][T10971] FAULT_INJECTION: forcing a failure. [ 289.753890][T10971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.835105][T10971] CPU: 0 UID: 0 PID: 10971 Comm: syz.1.906 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.835130][T10971] Tainted: [L]=SOFTLOCKUP [ 289.835136][T10971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.835145][T10971] Call Trace: [ 289.835151][T10971] [ 289.835157][T10971] dump_stack_lvl+0x100/0x190 [ 289.835184][T10971] should_fail_ex.cold+0x5/0xa [ 289.835202][T10971] _copy_from_user+0x2e/0xd0 [ 289.835227][T10971] get_timespec64+0x8b/0x1b0 [ 289.835244][T10971] ? __pfx_get_timespec64+0x10/0x10 [ 289.835258][T10971] ? ktime_get+0x200/0x300 [ 289.835278][T10971] __x64_sys_futex+0x21a/0x4d0 [ 289.835300][T10971] ? __pfx___x64_sys_futex+0x10/0x10 [ 289.835326][T10971] do_syscall_64+0x106/0xf80 [ 289.835343][T10971] ? clear_bhb_loop+0x40/0x90 [ 289.835360][T10971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.835376][T10971] RIP: 0033:0x7f26b799c799 [ 289.835389][T10971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.835403][T10971] RSP: 002b:00007ffc70806d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 289.835418][T10971] RAX: ffffffffffffffda RBX: 0000000000046bb1 RCX: 00007f26b799c799 [ 289.835428][T10971] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f26b7c1609c [ 289.835437][T10971] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 289.835446][T10971] R10: 00007ffc70806e60 R11: 0000000000000246 R12: 00007ffc70806e80 [ 289.835455][T10971] R13: 00007f26b7c1609c R14: 0000000000046be3 R15: 00007ffc70806e60 [ 289.835474][T10971] [ 290.727788][T11009] HfR: entered promiscuous mode [ 291.906201][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.913'. [ 292.069171][ T30] audit: type=1800 audit(4294967350.110:9): pid=11088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.915" name="dbroot" dev="configfs" ino=31892 res=0 errno=0 [ 292.172672][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 292.772532][T11136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.918'. [ 293.653097][T11148] FAULT_INJECTION: forcing a failure. [ 293.653097][T11148] name fail_futex, interval 1, probability 0, space 0, times 0 [ 293.816328][T11148] CPU: 0 UID: 0 PID: 11148 Comm: syz.1.919 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.816357][T11148] Tainted: [L]=SOFTLOCKUP [ 293.816363][T11148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.816372][T11148] Call Trace: [ 293.816378][T11148] [ 293.816385][T11148] dump_stack_lvl+0x100/0x190 [ 293.816414][T11148] should_fail_ex.cold+0x5/0xa [ 293.816429][T11148] ? tomoyo_path_number_perm+0x46d/0x580 [ 293.816456][T11148] get_futex_key+0x1d2/0x1620 [ 293.816476][T11148] ? __pfx_get_futex_key+0x10/0x10 [ 293.816501][T11148] futex_wake+0xea/0x530 [ 293.816524][T11148] ? __might_fault+0xc5/0x140 [ 293.816544][T11148] ? __pfx_futex_wake+0x10/0x10 [ 293.816567][T11148] ? __might_fault+0x111/0x140 [ 293.816587][T11148] ? do_vfs_ioctl+0x226/0x13e0 [ 293.816610][T11148] do_futex+0x32b/0x350 [ 293.816629][T11148] ? __pfx_do_futex+0x10/0x10 [ 293.816648][T11148] ? find_held_lock+0x2b/0x80 [ 293.816665][T11148] __x64_sys_futex+0x34f/0x4d0 [ 293.816685][T11148] ? __fget_files+0x21f/0x3d0 [ 293.816707][T11148] ? __pfx___x64_sys_futex+0x10/0x10 [ 293.816733][T11148] do_syscall_64+0x106/0xf80 [ 293.816750][T11148] ? clear_bhb_loop+0x40/0x90 [ 293.816768][T11148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.816783][T11148] RIP: 0033:0x7f26b799c799 [ 293.816798][T11148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.816812][T11148] RSP: 002b:00007f26b87bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 293.816829][T11148] RAX: ffffffffffffffda RBX: 00007f26b7c16188 RCX: 00007f26b799c799 [ 293.816840][T11148] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f26b7c1618c [ 293.816849][T11148] RBP: 00007f26b7c16180 R08: 0000000000000000 R09: 0000000000000000 [ 293.816858][T11148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.816867][T11148] R13: 00007f26b7c16218 R14: 00007ffc70806b10 R15: 00007ffc70806bf8 [ 293.816888][T11148] [ 295.138076][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 297.434371][T11434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.936'. [ 297.746306][T11447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.938'. [ 297.788386][T11450] futex_wake_op: syz.1.940 tries to shift op by -2048; fix this program [ 297.842052][T11447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.849464][T11447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.866595][T11450] futex_wake_op: syz.1.940 tries to shift op by -2048; fix this program [ 297.922104][T11450] 0x000000000001-0x000000020000 : "" [ 297.958810][T11447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.993773][T11463] FAULT_INJECTION: forcing a failure. [ 297.993773][T11463] name failslab, interval 1, probability 0, space 0, times 0 [ 298.015255][T11447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.056481][T11450] ftl_cs: FTL header corrupt! [ 298.204507][T11475] FAULT_INJECTION: forcing a failure. [ 298.204507][T11475] name failslab, interval 1, probability 0, space 0, times 0 [ 298.239703][T11463] CPU: 0 UID: 0 PID: 11463 Comm: syz.0.939 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.239734][T11463] Tainted: [L]=SOFTLOCKUP [ 298.239741][T11463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.239752][T11463] Call Trace: [ 298.239762][T11463] [ 298.239768][T11463] dump_stack_lvl+0x100/0x190 [ 298.239798][T11463] should_fail_ex.cold+0x5/0xa [ 298.239818][T11463] should_failslab+0xc2/0x120 [ 298.239834][T11463] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 298.239856][T11463] ? __d_alloc+0x34/0xa80 [ 298.239874][T11463] ? lockdep_init_map_type+0x5c/0x250 [ 298.239897][T11463] __d_alloc+0x34/0xa80 [ 298.239914][T11463] d_alloc_pseudo+0x1c/0xc0 [ 298.239934][T11463] alloc_file_pseudo+0xcf/0x230 [ 298.239957][T11463] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 298.239975][T11463] ? alloc_fd+0x476/0x790 [ 298.239992][T11463] sock_alloc_file+0x50/0x210 [ 298.240012][T11463] __sys_socket+0x1c0/0x260 [ 298.240034][T11463] ? __pfx___sys_socket+0x10/0x10 [ 298.240064][T11463] __x64_sys_socket+0x72/0xb0 [ 298.240089][T11463] ? lockdep_hardirqs_on+0x78/0x100 [ 298.240109][T11463] do_syscall_64+0x106/0xf80 [ 298.240134][T11463] ? clear_bhb_loop+0x40/0x90 [ 298.240157][T11463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.240174][T11463] RIP: 0033:0x7f78cb19c799 [ 298.240190][T11463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.240205][T11463] RSP: 002b:00007f78cc053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 298.240220][T11463] RAX: ffffffffffffffda RBX: 00007f78cb416090 RCX: 00007f78cb19c799 [ 298.240230][T11463] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000018 [ 298.240239][T11463] RBP: 00007f78cb232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 298.240247][T11463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.240256][T11463] R13: 00007f78cb416128 R14: 00007f78cb416090 R15: 00007ffec7391d48 [ 298.240276][T11463] [ 298.655699][T11475] CPU: 0 UID: 0 PID: 11475 Comm: syz.1.940 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.655732][T11475] Tainted: [L]=SOFTLOCKUP [ 298.655738][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.655748][T11475] Call Trace: [ 298.655753][T11475] [ 298.655759][T11475] dump_stack_lvl+0x100/0x190 [ 298.655787][T11475] should_fail_ex.cold+0x5/0xa [ 298.655806][T11475] should_failslab+0xc2/0x120 [ 298.655823][T11475] __kmalloc_cache_noprof+0x7a/0x6f0 [ 298.655843][T11475] ? resv_map_alloc+0x46/0x400 [ 298.655870][T11475] resv_map_alloc+0x46/0x400 [ 298.655893][T11475] hugetlbfs_get_inode+0x2fe/0x750 [ 298.655920][T11475] hugetlb_file_setup+0x15b/0x5b0 [ 298.655938][T11475] ksys_mmap_pgoff+0x232/0x650 [ 298.655955][T11475] ? __x64_sys_futex+0x358/0x4d0 [ 298.655974][T11475] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 298.655989][T11475] ? xfd_validate_state+0x129/0x190 [ 298.656014][T11475] __x64_sys_mmap+0x125/0x190 [ 298.656037][T11475] do_syscall_64+0x106/0xf80 [ 298.656054][T11475] ? clear_bhb_loop+0x40/0x90 [ 298.656072][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.656088][T11475] RIP: 0033:0x7f26b799c799 [ 298.656101][T11475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.656116][T11475] RSP: 002b:00007f26b879a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 298.656130][T11475] RAX: ffffffffffffffda RBX: 00007f26b7c16270 RCX: 00007f26b799c799 [ 298.656140][T11475] RDX: ffffffffffffffff RSI: 0000000000000002 RDI: 0000000000000000 [ 298.656149][T11475] RBP: 00007f26b7a32bd9 R08: 0000000000000602 R09: 0000300000000000 [ 298.656159][T11475] R10: 0000000000044eb1 R11: 0000000000000246 R12: 0000000000000000 [ 298.656167][T11475] R13: 00007f26b7c16308 R14: 00007f26b7c16270 R15: 00007ffc70806bf8 [ 298.656194][T11475] [ 300.532105][T11561] bridge0: port 4(team0) entered blocking state [ 300.649282][T11561] bridge0: port 4(team0) entered disabled state [ 300.694038][T11561] team0: entered allmulticast mode [ 300.792789][T11561] team_slave_0: entered allmulticast mode [ 300.837395][T11561] team_slave_1: entered allmulticast mode [ 300.934093][T11561] team0: entered promiscuous mode [ 300.988084][T11561] team_slave_0: entered promiscuous mode [ 301.048375][T11561] team_slave_1: entered promiscuous mode [ 301.132275][T11561] bridge0: port 4(team0) entered blocking state [ 301.138647][T11561] bridge0: port 4(team0) entered forwarding state [ 301.284066][T11589] random: crng reseeded on system resumption [ 303.818981][T11774] misc userio: Invalid payload size [ 304.744183][ T30] audit: type=1804 audit(4294967362.790:10): pid=11818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.964" name="/newroot/246/file0" dev="tmpfs" ino=1278 res=1 errno=0 [ 304.870806][ T30] audit: type=1804 audit(4294967362.880:11): pid=11825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.964" name="/newroot/246/file0" dev="tmpfs" ino=1278 res=1 errno=0 [ 305.137303][T11838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.967'. [ 306.242407][T11916] FAULT_INJECTION: forcing a failure. [ 306.242407][T11916] name failslab, interval 1, probability 0, space 0, times 0 [ 306.299663][T11913] HfR: entered promiscuous mode [ 306.317957][T11916] CPU: 0 UID: 0 PID: 11916 Comm: syz.1.974 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.317986][T11916] Tainted: [L]=SOFTLOCKUP [ 306.317992][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.318002][T11916] Call Trace: [ 306.318008][T11916] [ 306.318015][T11916] dump_stack_lvl+0x100/0x190 [ 306.318049][T11916] should_fail_ex.cold+0x5/0xa [ 306.318069][T11916] should_failslab+0xc2/0x120 [ 306.318086][T11916] __kmalloc_cache_noprof+0x7a/0x6f0 [ 306.318105][T11916] ? snd_timer_instance_new+0x47/0x2e0 [ 306.318133][T11916] snd_timer_instance_new+0x47/0x2e0 [ 306.318156][T11916] snd_seq_timer_open+0x1d4/0x600 [ 306.318177][T11916] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 306.318200][T11916] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 306.318217][T11916] ? lockdep_hardirqs_on+0x78/0x100 [ 306.318233][T11916] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 306.318251][T11916] queue_use+0xdc/0x1f0 [ 306.318266][T11916] snd_seq_queue_alloc+0x2e5/0x590 [ 306.318284][T11916] snd_seq_ioctl_create_queue+0xa9/0x370 [ 306.318304][T11916] call_seq_client_ctl+0xa3/0x130 [ 306.318326][T11916] snd_seq_kernel_client_ctl+0x77/0xd0 [ 306.318347][T11916] alloc_seq_queue+0xdb/0x180 [ 306.318368][T11916] ? __pfx_alloc_seq_queue+0x10/0x10 [ 306.318399][T11916] ? mark_held_locks+0x40/0x70 [ 306.318416][T11916] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.318431][T11916] ? lockdep_hardirqs_on+0x78/0x100 [ 306.318450][T11916] snd_seq_oss_open+0x2b2/0xa10 [ 306.318474][T11916] odev_open+0x79/0xc0 [ 306.318491][T11916] ? __pfx_odev_open+0x10/0x10 [ 306.318510][T11916] soundcore_open+0x2e3/0x5a0 [ 306.318532][T11916] ? __pfx_soundcore_open+0x10/0x10 [ 306.318551][T11916] chrdev_open+0x234/0x6a0 [ 306.318566][T11916] ? __pfx_apparmor_file_open+0x10/0x10 [ 306.318587][T11916] ? __pfx_chrdev_open+0x10/0x10 [ 306.318602][T11916] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 306.318622][T11916] do_dentry_open+0x6d8/0x1660 [ 306.318637][T11916] ? __pfx_chrdev_open+0x10/0x10 [ 306.318657][T11916] vfs_open+0x82/0x3f0 [ 306.318677][T11916] path_openat+0x208c/0x31a0 [ 306.318698][T11916] ? __pfx_path_openat+0x10/0x10 [ 306.318720][T11916] do_file_open+0x20e/0x430 [ 306.318736][T11916] ? __pfx_do_file_open+0x10/0x10 [ 306.318764][T11916] ? alloc_fd+0x476/0x790 [ 306.318780][T11916] ? do_getname+0x191/0x390 [ 306.318800][T11916] do_sys_openat2+0x10d/0x1e0 [ 306.318818][T11916] ? __pfx_do_sys_openat2+0x10/0x10 [ 306.318838][T11916] ? __fget_files+0x21f/0x3d0 [ 306.318864][T11916] __x64_sys_openat+0x12d/0x210 [ 306.318883][T11916] ? __pfx___x64_sys_openat+0x10/0x10 [ 306.318910][T11916] do_syscall_64+0x106/0xf80 [ 306.318927][T11916] ? clear_bhb_loop+0x40/0x90 [ 306.318945][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.318960][T11916] RIP: 0033:0x7f26b799c799 [ 306.318975][T11916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.318989][T11916] RSP: 002b:00007f26b87fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 306.319005][T11916] RAX: ffffffffffffffda RBX: 00007f26b7c15fa0 RCX: 00007f26b799c799 [ 306.319015][T11916] RDX: 0000000000020001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 306.319024][T11916] RBP: 00007f26b7a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 306.319034][T11916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.319048][T11916] R13: 00007f26b7c16038 R14: 00007f26b7c15fa0 R15: 00007ffc70806bf8 [ 306.319069][T11916] [ 307.200601][T11953] misc userio: Invalid payload size [ 308.011096][T11916] input: jJǸ-9%vJ86 as /devices/virtual/input/input13 [ 309.214265][T12085] openvswitch: HfR: Dropping previously announced user features [ 309.256362][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'. [ 309.322010][T12085] HfR: left promiscuous mode [ 309.468016][T12110] misc userio: Invalid payload size [ 309.827429][T12127] bridge0: port 5(vlan0) entered blocking state [ 309.904314][T12127] bridge0: port 5(vlan0) entered disabled state [ 309.963410][T12127] vlan0: entered allmulticast mode [ 310.003576][T12127] veth0_vlan: entered allmulticast mode [ 310.047452][T12127] vlan0: entered promiscuous mode [ 310.075714][T12127] bridge0: port 5(vlan0) entered blocking state [ 310.082294][T12127] bridge0: port 5(vlan0) entered forwarding state [ 310.145453][ T9241] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 312.873413][T12385] HfR: entered promiscuous mode [ 313.404575][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 313.906759][T12440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1007'. [ 314.019672][T12440] hsr_slave_0: left promiscuous mode [ 314.041613][T12440] hsr_slave_1: left promiscuous mode [ 315.218260][T12529] misc userio: Invalid payload size [ 315.708395][T12554] HfR: entered promiscuous mode [ 315.918789][T12563] HfR: entered promiscuous mode [ 315.959057][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 316.006222][T12563] HfR: left promiscuous mode [ 317.359541][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.365994][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.432839][T12600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1023'. [ 317.551576][T12604] misc userio: Invalid payload size [ 318.465007][T12657] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1026'. [ 319.454643][T12724] HfR: entered promiscuous mode [ 319.496357][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1030'. [ 319.544291][T12724] HfR: left promiscuous mode [ 320.647162][T12804] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1039'. [ 321.789779][T12884] openvswitch: HfR: Dropping previously announced user features [ 321.878980][T12890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1045'. [ 322.155205][T12890] HfR: left promiscuous mode [ 322.663963][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 322.734571][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1047'. [ 322.779966][T12920] openvswitch: HfR: Dropping previously announced user features [ 322.898718][T12922] HfR: left promiscuous mode [ 324.414662][T13048] FAULT_INJECTION: forcing a failure. [ 324.414662][T13048] name fail_futex, interval 1, probability 0, space 0, times 0 [ 324.509475][T13048] CPU: 0 UID: 0 PID: 13048 Comm: syz.1.1056 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.509504][T13048] Tainted: [L]=SOFTLOCKUP [ 324.509510][T13048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 324.509520][T13048] Call Trace: [ 324.509526][T13048] [ 324.509532][T13048] dump_stack_lvl+0x100/0x190 [ 324.509560][T13048] should_fail_ex.cold+0x5/0xa [ 324.509578][T13048] get_futex_key+0x1d2/0x1620 [ 324.509599][T13048] ? __pfx_get_futex_key+0x10/0x10 [ 324.509624][T13048] futex_wait_setup+0x81/0x500 [ 324.509651][T13048] __futex_wait+0x19f/0x300 [ 324.509674][T13048] ? __pfx___futex_wait+0x10/0x10 [ 324.509699][T13048] ? __pfx_futex_wake_mark+0x10/0x10 [ 324.509723][T13048] ? futex_hash+0x2c5/0x380 [ 324.509745][T13048] futex_wait+0xed/0x380 [ 324.509766][T13048] ? __pfx_futex_wait+0x10/0x10 [ 324.509791][T13048] ? io_uring_setup+0xd7/0x160 [ 324.509815][T13048] ? ksys_write+0x190/0x250 [ 324.509848][T13048] do_futex+0x1ef/0x350 [ 324.509866][T13048] ? __pfx_do_futex+0x10/0x10 [ 324.509890][T13048] __x64_sys_futex+0x34f/0x4d0 [ 324.509911][T13048] ? __pfx___x64_sys_futex+0x10/0x10 [ 324.509937][T13048] do_syscall_64+0x106/0xf80 [ 324.509954][T13048] ? clear_bhb_loop+0x40/0x90 [ 324.509972][T13048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.509987][T13048] RIP: 0033:0x7f26b799c799 [ 324.510002][T13048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.510017][T13048] RSP: 002b:00007f26b87fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 324.510032][T13048] RAX: ffffffffffffffda RBX: 00007f26b7c15fa8 RCX: 00007f26b799c799 [ 324.510042][T13048] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f26b7c15fa8 [ 324.510051][T13048] RBP: 00007f26b7c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 324.510060][T13048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.510069][T13048] R13: 00007f26b7c16038 R14: 00007ffc70806b10 R15: 00007ffc70806bf8 [ 324.510090][T13048] [ 325.126701][T13068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'. [ 325.152890][T13067] HfR: entered promiscuous mode [ 325.170991][T13068] HfR: left promiscuous mode [ 325.390481][T13089] misc userio: Invalid payload size [ 325.626557][T13101] random: crng reseeded on system resumption [ 325.902306][T13120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1063'. [ 326.099690][T13139] bonding: no command found in bonding_masters - use +ifname or -ifname [ 326.113948][T13129] Invalid ELF header magic: != ELF [ 326.596648][T13175] FAULT_INJECTION: forcing a failure. [ 326.596648][T13175] name failslab, interval 1, probability 0, space 0, times 0 [ 326.708048][T13175] CPU: 0 UID: 0 PID: 13175 Comm: syz.1.1068 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.708082][T13175] Tainted: [L]=SOFTLOCKUP [ 326.708087][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.708096][T13175] Call Trace: [ 326.708102][T13175] [ 326.708107][T13175] dump_stack_lvl+0x100/0x190 [ 326.708135][T13175] should_fail_ex.cold+0x5/0xa [ 326.708154][T13175] should_failslab+0xc2/0x120 [ 326.708170][T13175] __kmalloc_cache_noprof+0x7a/0x6f0 [ 326.708188][T13175] ? drm_atomic_helper_setup_commit+0x56f/0x14f0 [ 326.708207][T13175] ? drm_atomic_helper_check+0x10f/0x190 [ 326.708226][T13175] drm_atomic_helper_setup_commit+0x56f/0x14f0 [ 326.708251][T13175] drm_atomic_helper_commit+0xa9/0x380 [ 326.708269][T13175] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 326.708286][T13175] drm_atomic_commit+0x230/0x300 [ 326.708301][T13175] ? __pfx_drm_atomic_commit+0x10/0x10 [ 326.708326][T13175] ? __pfx___drm_printfn_info+0x10/0x10 [ 326.708346][T13175] ? drm_client_rotation+0x451/0x6a0 [ 326.708367][T13175] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 326.708390][T13175] ? __mutex_lock+0x26a/0x1b90 [ 326.708409][T13175] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 326.708427][T13175] ? drm_master_internal_acquire+0x21/0x80 [ 326.708463][T13175] drm_client_modeset_commit_locked+0x14d/0x580 [ 326.708484][T13175] drm_client_modeset_commit+0x4f/0x80 [ 326.708502][T13175] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 326.708524][T13175] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 326.708544][T13175] drm_fbdev_client_restore+0x1b/0x30 [ 326.708571][T13175] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 326.708593][T13175] drm_client_dev_restore+0x205/0x2a0 [ 326.708614][T13175] drm_release+0x2c6/0x360 [ 326.708631][T13175] ? __pfx_drm_release+0x10/0x10 [ 326.708646][T13175] __fput+0x3ff/0xb40 [ 326.708668][T13175] task_work_run+0x150/0x240 [ 326.708692][T13175] ? __pfx_task_work_run+0x10/0x10 [ 326.708718][T13175] exit_to_user_mode_loop+0x100/0x4a0 [ 326.708740][T13175] do_syscall_64+0x668/0xf80 [ 326.708757][T13175] ? clear_bhb_loop+0x40/0x90 [ 326.708775][T13175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.708791][T13175] RIP: 0033:0x7f26b799c799 [ 326.708804][T13175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.708818][T13175] RSP: 002b:00007f26b87fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 326.708833][T13175] RAX: 0000000000000000 RBX: 00007f26b7c15fa0 RCX: 00007f26b799c799 [ 326.708842][T13175] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 326.708851][T13175] RBP: 00007f26b7a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 326.708859][T13175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.708868][T13175] R13: 00007f26b7c16038 R14: 00007f26b7c15fa0 R15: 00007ffc70806bf8 [ 326.708888][T13175] [ 327.055185][T13182] openvswitch: HfR: Dropping previously announced user features [ 327.064892][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1069'. [ 327.074022][T13182] HfR: left promiscuous mode [ 327.159060][T13190] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1072'. [ 327.225299][T13199] misc userio: Invalid payload size [ 327.750762][T13207] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 327.784589][T13207] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 327.915164][T13207] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 327.930456][T13207] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 327.964359][T13207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 327.980577][T13207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 328.009536][T13207] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 328.043078][T13207] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 328.809320][T13246] FAULT_INJECTION: forcing a failure. [ 328.809320][T13246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.953322][T13246] CPU: 0 UID: 0 PID: 13246 Comm: syz.2.1080 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.953356][T13246] Tainted: [L]=SOFTLOCKUP [ 328.953363][T13246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.953374][T13246] Call Trace: [ 328.953380][T13246] [ 328.953388][T13246] dump_stack_lvl+0x100/0x190 [ 328.953421][T13246] should_fail_ex.cold+0x5/0xa [ 328.953441][T13246] core_sys_select+0x9b9/0xbb0 [ 328.953473][T13246] ? __pfx_core_sys_select+0x10/0x10 [ 328.953517][T13246] ? ktime_get_ts64+0x2d2/0x3f0 [ 328.953539][T13246] ? read_tsc+0x9/0x20 [ 328.953554][T13246] ? ktime_get_ts64+0x256/0x3f0 [ 328.953572][T13246] kern_select+0x20c/0x270 [ 328.953596][T13246] ? __pfx_kern_select+0x10/0x10 [ 328.953625][T13246] __x64_sys_select+0xbd/0x160 [ 328.953647][T13246] ? do_syscall_64+0x95/0xf80 [ 328.953665][T13246] ? lockdep_hardirqs_on+0x78/0x100 [ 328.953682][T13246] do_syscall_64+0x106/0xf80 [ 328.953698][T13246] ? clear_bhb_loop+0x40/0x90 [ 328.953719][T13246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.953735][T13246] RIP: 0033:0x7f885959c799 [ 328.953749][T13246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.953764][T13246] RSP: 002b:00007f885a3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 328.953778][T13246] RAX: ffffffffffffffda RBX: 00007f8859815fa0 RCX: 00007f885959c799 [ 328.953789][T13246] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 328.953798][T13246] RBP: 00007f8859632bd9 R08: 00002000000001c0 R09: 0000000000000000 [ 328.953807][T13246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.953820][T13246] R13: 00007f8859816038 R14: 00007f8859815fa0 R15: 00007ffdde356178 [ 328.953840][T13246] [ 329.579448][T13254] FAULT_INJECTION: forcing a failure. [ 329.579448][T13254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 329.778615][T13254] CPU: 0 UID: 0 PID: 13254 Comm: syz.2.1081 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.778647][T13254] Tainted: [L]=SOFTLOCKUP [ 329.778653][T13254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.778663][T13254] Call Trace: [ 329.778670][T13254] [ 329.778677][T13254] dump_stack_lvl+0x100/0x190 [ 329.778709][T13254] should_fail_ex.cold+0x5/0xa [ 329.778727][T13254] ? prepare_alloc_pages+0x16d/0x5f0 [ 329.778784][T13254] should_fail_alloc_page+0xeb/0x140 [ 329.778804][T13254] prepare_alloc_pages+0x1f0/0x5f0 [ 329.778826][T13254] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 329.778857][T13254] ? __lock_acquire+0x4a5/0x2630 [ 329.778879][T13254] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 329.778902][T13254] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 329.778935][T13254] ? page_table_check_set+0x4a9/0xa10 [ 329.778960][T13254] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 329.778986][T13254] ? policy_nodemask+0xed/0x4f0 [ 329.779004][T13254] alloc_pages_mpol+0x1fb/0x550 [ 329.779020][T13254] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 329.779034][T13254] ? find_held_lock+0x2b/0x80 [ 329.779048][T13254] ? filemap_map_pages+0xdf2/0x2020 [ 329.779074][T13254] folio_alloc_mpol_noprof+0x36/0x340 [ 329.779093][T13254] vma_alloc_folio_noprof+0xed/0x1d0 [ 329.779111][T13254] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 329.779127][T13254] ? rcu_read_unlock+0x2d/0xb0 [ 329.779147][T13254] ? rcu_read_unlock+0x2d/0xb0 [ 329.779168][T13254] ? __lock_acquire+0x4a5/0x2630 [ 329.779189][T13254] do_wp_page+0x1eef/0x4f00 [ 329.779216][T13254] ? __pfx_do_wp_page+0x10/0x10 [ 329.779234][T13254] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 329.779260][T13254] __handle_mm_fault+0x1ac8/0x2b60 [ 329.779284][T13254] ? reacquire_held_locks+0xce/0x1e0 [ 329.779303][T13254] ? __pfx___handle_mm_fault+0x10/0x10 [ 329.779326][T13254] ? lock_vma_under_rcu+0x17c/0x590 [ 329.779356][T13254] handle_mm_fault+0x36d/0xa20 [ 329.779379][T13254] do_user_addr_fault+0x5a3/0x12f0 [ 329.779409][T13254] exc_page_fault+0x6f/0xd0 [ 329.779427][T13254] asm_exc_page_fault+0x26/0x30 [ 329.779443][T13254] RIP: 0033:0x7f885955c585 [ 329.779458][T13254] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 329.779473][T13254] RSP: 002b:00007f885a3b4de0 EFLAGS: 00010293 [ 329.779487][T13254] RAX: 0000000000000008 RBX: 00007f885a347e20 RCX: 0000000000000000 [ 329.779497][T13254] RDX: 0000000000000000 RSI: 00007f885964fa49 RDI: 00007f885a347e20 [ 329.779507][T13254] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 329.779517][T13254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f885964f761 [ 329.779527][T13254] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007f885964fa49 [ 329.779549][T13254] [ 330.513662][ T9243] Bluetooth: hci1: command 0x0c1a tx timeout [ 330.519723][ T9243] Bluetooth: hci0: command 0x0c1a tx timeout [ 330.525814][ T9243] Bluetooth: hci2: command 0x0c1a tx timeout [ 330.532617][ T9243] Bluetooth: hci3: command 0x0c1a tx timeout [ 330.567529][T13262] HfR: entered promiscuous mode [ 330.590716][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1084'. [ 330.601521][T13266] FAULT_INJECTION: forcing a failure. [ 330.601521][T13266] name failslab, interval 1, probability 0, space 0, times 0 [ 330.618381][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 330.627569][T13262] HfR: left promiscuous mode [ 330.710835][T13266] CPU: 0 UID: 0 PID: 13266 Comm: syz.0.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.710861][T13266] Tainted: [L]=SOFTLOCKUP [ 330.710867][T13266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.710876][T13266] Call Trace: [ 330.710882][T13266] [ 330.710888][T13266] dump_stack_lvl+0x100/0x190 [ 330.710918][T13266] should_fail_ex.cold+0x5/0xa [ 330.710938][T13266] should_failslab+0xc2/0x120 [ 330.710955][T13266] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 330.710977][T13266] ? security_file_alloc+0x34/0x2c0 [ 330.710993][T13266] ? trace_kmem_cache_alloc+0xf3/0x120 [ 330.711012][T13266] security_file_alloc+0x34/0x2c0 [ 330.711027][T13266] init_file+0x95/0x480 [ 330.711046][T13266] alloc_empty_file+0x73/0x1c0 [ 330.711067][T13266] alloc_file_pseudo+0x13a/0x230 [ 330.711086][T13266] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 330.711102][T13266] ? inode_init_always_gfp+0xd0e/0x1040 [ 330.711133][T13266] sock_alloc_file+0x50/0x210 [ 330.711153][T13266] do_accept+0x242/0x530 [ 330.711167][T13266] ? 0xffffffff81000000 [ 330.711178][T13266] ? do_raw_spin_lock+0x128/0x260 [ 330.711201][T13266] ? __pfx_do_accept+0x10/0x10 [ 330.711228][T13266] ? 0xffffffff81000000 [ 330.711241][T13266] __sys_accept4+0x108/0x200 [ 330.711256][T13266] ? __pfx___sys_accept4+0x10/0x10 [ 330.711276][T13266] __x64_sys_accept+0x74/0xb0 [ 330.711289][T13266] ? lockdep_hardirqs_on+0x78/0x100 [ 330.711309][T13266] do_syscall_64+0x106/0xf80 [ 330.711325][T13266] ? clear_bhb_loop+0x40/0x90 [ 330.711345][T13266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.711361][T13266] RIP: 0033:0x7f78cb19c799 [ 330.711373][T13266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.711388][T13266] RSP: 002b:00007f78cc074028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 330.711403][T13266] RAX: ffffffffffffffda RBX: 00007f78cb415fa0 RCX: 00007f78cb19c799 [ 330.711413][T13266] RDX: ffffffff81000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 330.711423][T13266] RBP: 00007f78cb232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 330.711432][T13266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.711440][T13266] R13: 00007f78cb416038 R14: 00007f78cb415fa0 R15: 00007ffec7391d48 [ 330.711455][T13266] ? 0xffffffff81000000 [ 330.711470][T13266] [ 331.208494][T13254] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 332.272726][T13303] GUP no longer grows the stack in syz.1.1086 (13303): 14000-18000 (4000) [ 332.320378][T13303] CPU: 0 UID: 0 PID: 13303 Comm: syz.1.1086 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.320407][T13303] Tainted: [L]=SOFTLOCKUP [ 332.320413][T13303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.320423][T13303] Call Trace: [ 332.320428][T13303] [ 332.320434][T13303] dump_stack_lvl+0x100/0x190 [ 332.320462][T13303] gup_vma_lookup.cold+0x83/0x96 [ 332.320486][T13303] __get_user_pages+0x241/0x34d0 [ 332.320509][T13303] ? find_held_lock+0x2b/0x80 [ 332.320523][T13303] ? mtree_load+0x311/0xa40 [ 332.320541][T13303] ? __pfx___get_user_pages+0x10/0x10 [ 332.320562][T13303] get_user_pages_remote+0x3d2/0xb10 [ 332.320583][T13303] ? __pfx_get_user_pages_remote+0x10/0x10 [ 332.320601][T13303] ? noop_dirty_folio+0x98/0x160 [ 332.320623][T13303] __access_remote_vm+0x3ba/0xa70 [ 332.320660][T13303] ? __pfx___access_remote_vm+0x10/0x10 [ 332.320689][T13303] mem_rw+0x20a/0x640 [ 332.320709][T13303] vfs_write+0x2aa/0x1070 [ 332.320732][T13303] ? __pfx_mem_write+0x10/0x10 [ 332.320748][T13303] ? __pfx_vfs_write+0x10/0x10 [ 332.320771][T13303] ? __fget_files+0x215/0x3d0 [ 332.320799][T13303] ? __fget_files+0x21f/0x3d0 [ 332.320826][T13303] ksys_write+0x12a/0x250 [ 332.320848][T13303] ? __pfx_ksys_write+0x10/0x10 [ 332.320876][T13303] do_syscall_64+0x106/0xf80 [ 332.320892][T13303] ? clear_bhb_loop+0x40/0x90 [ 332.320910][T13303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.320925][T13303] RIP: 0033:0x7f26b799c799 [ 332.320939][T13303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.320953][T13303] RSP: 002b:00007f26b87fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.320967][T13303] RAX: ffffffffffffffda RBX: 00007f26b7c15fa0 RCX: 00007f26b799c799 [ 332.320978][T13303] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 332.320986][T13303] RBP: 00007f26b7a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 332.320995][T13303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.321004][T13303] R13: 00007f26b7c16038 R14: 00007f26b7c15fa0 R15: 00007ffc70806bf8 [ 332.321025][T13303] [ 332.863031][ T9241] Bluetooth: hci2: command 0x0c1a tx timeout [ 332.875398][ T9241] Bluetooth: hci0: command 0x0c1a tx timeout [ 332.881902][ T9241] Bluetooth: hci1: command 0x0c1a tx timeout [ 334.022447][T13375] HfR: entered promiscuous mode [ 334.092704][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1095'. [ 334.163416][T13375] HfR: left promiscuous mode [ 334.952448][ T9243] Bluetooth: hci2: command 0x0c1a tx timeout [ 337.475693][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 338.093841][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 342.254658][T13609] [ 342.257006][T13609] ====================================================== [ 342.264004][T13609] WARNING: possible circular locking dependency detected [ 342.271018][T13609] syzkaller #0 Tainted: G L [ 342.276974][T13609] ------------------------------------------------------ [ 342.284000][T13609] syz.1.1122/13609 is trying to acquire lock: [ 342.290227][T13609] ffff888079302368 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 342.301708][T13609] [ 342.301708][T13609] but task is already holding lock: [ 342.309503][T13609] ffff888079303460 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 342.318456][T13609] [ 342.318456][T13609] which lock already depends on the new lock. [ 342.318456][T13609] [ 342.328838][T13609] [ 342.328838][T13609] the existing dependency chain (in reverse order) is: [ 342.337937][T13609] [ 342.337937][T13609] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 342.345686][T13609] lock_sock_nested+0x41/0xf0 [ 342.350892][T13609] smc_listen_out+0x1f5/0x4b0 [ 342.356074][T13609] smc_listen_work+0x4c2/0x50e0 [ 342.361447][T13609] process_one_work+0x9d7/0x1920 [ 342.366940][T13609] worker_thread+0x5da/0xe40 [ 342.372052][T13609] kthread+0x370/0x450 [ 342.376719][T13609] ret_from_fork+0x754/0xd80 [ 342.381822][T13609] ret_from_fork_asm+0x1a/0x30 [ 342.387121][T13609] [ 342.387121][T13609] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 342.397327][T13609] __lock_acquire+0x14b8/0x2630 [ 342.402704][T13609] lock_acquire+0x1cf/0x380 [ 342.407720][T13609] __flush_work+0x4de/0xcb0 [ 342.412745][T13609] cancel_work_sync+0xd1/0xf0 [ 342.417928][T13609] smc_clcsock_release+0x5f/0xe0 [ 342.423480][T13609] __smc_release+0x5c2/0x880 [ 342.428596][T13609] smc_close_non_accepted+0xda/0x200 [ 342.434404][T13609] smc_close_active+0x4ff/0x1070 [ 342.439876][T13609] __smc_release+0x634/0x880 [ 342.445094][T13609] smc_release+0x1fc/0x620 [ 342.450027][T13609] __sock_release+0xb3/0x260 [ 342.455135][T13609] sock_close+0x1c/0x30 [ 342.459809][T13609] __fput+0x3ff/0xb40 [ 342.464393][T13609] task_work_run+0x150/0x240 [ 342.469532][T13609] exit_to_user_mode_loop+0x100/0x4a0 [ 342.475418][T13609] do_syscall_64+0x668/0xf80 [ 342.480513][T13609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.486919][T13609] [ 342.486919][T13609] other info that might help us debug this: [ 342.486919][T13609] [ 342.497192][T13609] Possible unsafe locking scenario: [ 342.497192][T13609] [ 342.504639][T13609] CPU0 CPU1 [ 342.510009][T13609] ---- ---- [ 342.515437][T13609] lock(sk_lock-AF_SMC/1); [ 342.519949][T13609] lock((work_completion)(&new_smc->smc_listen_work)); [ 342.529486][T13609] lock(sk_lock-AF_SMC/1); [ 342.536531][T13609] lock((work_completion)(&new_smc->smc_listen_work)); [ 342.544154][T13609] [ 342.544154][T13609] *** DEADLOCK *** [ 342.544154][T13609] [ 342.552279][T13609] 3 locks held by syz.1.1122/13609: [ 342.557521][T13609] #0: ffff88806c21c708 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 342.568149][T13609] #1: ffff888079303460 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 342.577629][T13609] #2: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 342.586749][T13609] [ 342.586749][T13609] stack backtrace: [ 342.592634][T13609] CPU: 0 UID: 0 PID: 13609 Comm: syz.1.1122 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.592656][T13609] Tainted: [L]=SOFTLOCKUP [ 342.592661][T13609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.592670][T13609] Call Trace: [ 342.592676][T13609] [ 342.592683][T13609] dump_stack_lvl+0x100/0x190 [ 342.592705][T13609] print_circular_bug.cold+0x178/0x1c7 [ 342.592731][T13609] check_noncircular+0x146/0x160 [ 342.592751][T13609] __lock_acquire+0x14b8/0x2630 [ 342.592771][T13609] lock_acquire+0x1cf/0x380 [ 342.592788][T13609] ? __flush_work+0x4ca/0xcb0 [ 342.592809][T13609] ? mark_held_locks+0x40/0x70 [ 342.592826][T13609] ? __flush_work+0x4ca/0xcb0 [ 342.592845][T13609] __flush_work+0x4de/0xcb0 [ 342.592865][T13609] ? __flush_work+0x4ca/0xcb0 [ 342.592886][T13609] ? __pfx___flush_work+0x10/0x10 [ 342.592907][T13609] ? __pfx_wq_barrier_func+0x10/0x10 [ 342.592925][T13609] ? __pfx___might_resched+0x10/0x10 [ 342.592948][T13609] cancel_work_sync+0xd1/0xf0 [ 342.592961][T13609] smc_clcsock_release+0x5f/0xe0 [ 342.592977][T13609] __smc_release+0x5c2/0x880 [ 342.592999][T13609] ? __pfx_sock_def_readable+0x10/0x10 [ 342.593014][T13609] smc_close_non_accepted+0xda/0x200 [ 342.593028][T13609] smc_close_active+0x4ff/0x1070 [ 342.593044][T13609] __smc_release+0x634/0x880 [ 342.593066][T13609] smc_release+0x1fc/0x620 [ 342.593087][T13609] __sock_release+0xb3/0x260 [ 342.593104][T13609] ? __pfx_sock_close+0x10/0x10 [ 342.593121][T13609] sock_close+0x1c/0x30 [ 342.593136][T13609] __fput+0x3ff/0xb40 [ 342.593153][T13609] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.593169][T13609] task_work_run+0x150/0x240 [ 342.593189][T13609] ? __pfx_task_work_run+0x10/0x10 [ 342.593208][T13609] ? __x64_sys_poll+0x12e/0x420 [ 342.593233][T13609] exit_to_user_mode_loop+0x100/0x4a0 [ 342.593252][T13609] do_syscall_64+0x668/0xf80 [ 342.593269][T13609] ? clear_bhb_loop+0x40/0x90 [ 342.593285][T13609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.593300][T13609] RIP: 0033:0x7f26b799c799 [ 342.593314][T13609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.593328][T13609] RSP: 002b:00007f26b87fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 342.593342][T13609] RAX: 0000000000000001 RBX: 00007f26b7c15fa0 RCX: 00007f26b799c799 [ 342.593352][T13609] RDX: 0000000000000108 RSI: 0000000000000005 RDI: 0000200000000080 [ 342.593361][T13609] RBP: 00007f26b7a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 342.593370][T13609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.593378][T13609] R13: 00007f26b7c16038 R14: 00007f26b7c15fa0 R15: 00007ffc70806bf8 [ 342.593392][T13609] [ 343.120910][ T9243] Bluetooth: hci3: unexpected event 0x20 length: 123 > 7 [ 343.182488][T13630] MTRR 1 not used